last executing test programs: 2.587343516s ago: executing program 2 (id=1529): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000680)=@ethtool_perm_addr={0x20, 0x6, "8b2bf01d2841"}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000840)=ANY=[@ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001f80)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r6 = socket(0x1, 0x4, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x4, 0x0, 0x2, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x52}}}, 0x32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r8, 0x0, 0x6c}, 0x38) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x50, "8c5be5a6ed84adff6f3d4097a0ac488947106abaf954be218a910e8d5e482bf69cbfcc87da46c2a85979ac3c3d6e7f5fe681cc5dead30150bad1f925b63d68215087fb7814c44db935d08ae6ee5382f8"}, &(0x7f0000000440)=0x58) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000480)={r9, 0x9, 0xf177, 0x8, 0xffff0000}, &(0x7f00000004c0)=0x14) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', r8}, 0x18) sendmsg$inet(r4, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000d34aac00000008"], 0x10}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) 2.339743991s ago: executing program 0 (id=1533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r2, &(0x7f0000000080)=@ethernet={0x0, @remote}, &(0x7f0000000100)=0x80) 2.275451985s ago: executing program 1 (id=1534): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x800, 0x26}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000010000000d3434eb29afabbbe8933abeed6962a49b5fe4d24da1e3ec7827be1662f"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x80000) epoll_create1(0x0) r6 = epoll_create1(0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={r8, 0x9, 0x20, 0xc19, 0x6}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)='l', 0x34000, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x19, 0x0, 0x0) recvfrom$l2tp(r1, &(0x7f00000002c0)=""/35, 0x23, 0x2040, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) 2.063052856s ago: executing program 0 (id=1535): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x0, 0x766, 0x8, 0x8000, 0x8}) r1 = socket$kcm(0x11, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x7, 0xa}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='G', 0x538}], 0x1}, 0x200480c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r4, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000b40)={0xfffffffffffffff8, [], 0x7f, "88efaed665765e"}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ffd7ff6706000002000000070600000ee60000bf050000000000002e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r6, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f00000017c0)=r8) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r3}, 0x8) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x64, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff4, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @remote}, 0x280, 0x0, 0x0, 0x0, 0x1ff, &(0x7f00000000c0)='bond0\x00', 0x2a1e, 0x600000}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.836971152s ago: executing program 2 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x40040c0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x181c00, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) readv(r2, &(0x7f0000000280), 0x37) 1.776417398s ago: executing program 2 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmmsg$unix(r8, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x8000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xd94ea7173a9f1aac, 0x0}}], 0x40001b6, 0x114) close(r10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000013000500010000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000002c001a000600000002000000200004801c000a8008000100", @ANYRES32], 0x4c}}, 0x0) 1.717762147s ago: executing program 0 (id=1542): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x63dcbf62d8600606, r4, 0x1, 0xb, 0x6, @local}, 0x14) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x49}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000080)=ANY=[@ANYRES8=r4], 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r7, 0xf27, 0x3ff, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r7, 0xf27, 0x3ff, 0x1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)={@cgroup=r10, r9, 0x2f, 0x10, 0x4, @void, @value=r9}, 0x20) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)={@cgroup=r10, r9, 0x2f, 0x10, 0x4, @void, @value=r9}, 0x20) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r14], 0x54}}, 0x0) socket(0x1, 0x803, 0x0) (async) r15 = socket(0x1, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r16], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) 1.357336253s ago: executing program 4 (id=1545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r3, @ANYBLOB="18000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 1.23374518s ago: executing program 3 (id=1546): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000004100)={&(0x7f0000003e80)={0xa, 0x4e24, 0xbf, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x32}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}], 0x40}, 0x20004810) sendfile(r0, r0, 0x0, 0x0) 1.190330551s ago: executing program 1 (id=1547): getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@local, @dev}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@local, @dev}, &(0x7f0000000040)=0x8) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x1, &(0x7f0000001080)={0xa, 0x0, 0x0, @private1}, 0x20) ioctl$sock_proto_private(r0, 0x89e2, &(0x7f00000010c0)="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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002100)={0xa0, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)=@getnexthop={0x3c, 0x6a, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000002340)={0x2, 0x0, @remote}, &(0x7f0000002380)=0x10, 0x40800) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000023c0)={'IDLETIMER\x00'}, &(0x7f0000002400)=0x1e) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f0000002440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002480)=0x14) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000024c0)='cgroup.threads\x00', 0x2, 0x0) read(r5, &(0x7f0000002500)=""/124, 0x7c) (async) read(r5, &(0x7f0000002500)=""/124, 0x7c) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002580)) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002580)) setsockopt$sock_int(r0, 0x1, 0xb8f20176a44a165d, &(0x7f00000025c0)=0x101, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002640), r2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002680)=0x0, &(0x7f00000026c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002780)={'ip6tnl0\x00', &(0x7f0000002700)={'ip6gre0\x00', r4, 0x29, 0x1, 0x4d, 0x6, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast1, 0x700, 0x1, 0x2, 0xd}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000027c0)={0x0, @local, @empty}, &(0x7f0000002800)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f00000029c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002980)={&(0x7f0000002840)={0x114, r7, 0x400, 0x70bd2b, 0x1, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xec0468bd85a86226}, 0x4000800) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f00000029c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002980)={&(0x7f0000002840)={0x114, r7, 0x400, 0x70bd2b, 0x1, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xec0468bd85a86226}, 0x4000800) socket(0x15, 0x5, 0x0) (async) r11 = socket(0x15, 0x5, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r12, &(0x7f0000002a40), 0x2, 0x0) r13 = ioctl$NS_GET_PARENT(r11, 0xb702, 0x0) sendfile(r2, r13, &(0x7f0000002a80)=0x26, 0x6a2) (async) sendfile(r2, r13, &(0x7f0000002a80)=0x26, 0x6a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r5) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r5) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002d80)={&(0x7f0000002b40)={0x234, r14, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7fffffff}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x204, 0x84, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffffe}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffffffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="04fd10ee7882f9a7bbbe7d0c"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3ff}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1ff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xd}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xcd0}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="b0f855ec128a1f77217d733ecf08d14b40"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xd01}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="55dbebb6767d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="d2d05561d8f24ac83f44199893f1a05734062ebe"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x24000850}, 0x4048010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f80)={&(0x7f0000002e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd7, 0xd7, 0x3, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x5}, @enum={0x8, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x7}, {0x7}, {0x7}, {0x7, 0x1}, {0xa, 0xe5}]}, @volatile={0xc}, @datasec={0xb, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x2, 0x2}, {0x3, 0x0, 0x4b}], "4683ca"}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @enum64={0x2, 0x6, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x8}, {0x10, 0x1, 0xffffffff}, {0x4, 0x4, 0x5}, {0xd, 0x40, 0x10001}, {0x10, 0x8b, 0xfffffffe}, {0xe, 0x4, 0x8}]}]}, {0x0, [0x0]}}, &(0x7f0000002f00)=""/100, 0xf3, 0x64, 0x1, 0x8, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f80)={&(0x7f0000002e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd7, 0xd7, 0x3, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0x5}, @enum={0x8, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x7}, {0x7}, {0x7}, {0x7, 0x1}, {0xa, 0xe5}]}, @volatile={0xc}, @datasec={0xb, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x2, 0x2}, {0x3, 0x0, 0x4b}], "4683ca"}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @enum64={0x2, 0x6, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x8}, {0x10, 0x1, 0xffffffff}, {0x4, 0x4, 0x5}, {0xd, 0x40, 0x10001}, {0x10, 0x8b, 0xfffffffe}, {0xe, 0x4, 0x8}]}]}, {0x0, [0x0]}}, &(0x7f0000002f00)=""/100, 0xf3, 0x64, 0x1, 0x8, 0x10000}, 0x28) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x400001c4) 1.108126622s ago: executing program 0 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x3) recvfrom$inet6(r1, 0x0, 0x0, 0x10140, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010003b0c00000000000000000000000093145ce08923e5a4ce0b2ad2983563351b7cd18126ba7145f3c8b36dab05e3f40447c919d4f442283e06420b0c4f65e444ae222ff369089e339b3bf1902a2c366a70330ace03d13113fd764bd96e8255b8074cb0b6ebe6e780caafd95c247f06d76d41a1b1156710886cea552b2fc65706e317ce6a5a9e753a9a920422e0943bcbbef78ac291491bd05b23b4276e4d68a3462b1326255f6148c411089a398639a0f44d006e1b223e4fa555c2103cea8a165eca1fa424", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028008000200ac1e00010500030000000000040006000800010000000000"], 0x50}}, 0x0) 1.044658174s ago: executing program 4 (id=1549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0xfffffffffffffffc, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x3506, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x400c050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, 0x0}, 0x1a6) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x2040400) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff0900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.02985173s ago: executing program 3 (id=1550): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x40040c0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x181c00, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) readv(r2, &(0x7f0000000280), 0x37) 1.00326427s ago: executing program 4 (id=1551): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x3, 0x7, 0x2}]}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x36, 0x0, 0x1, 0x3}, 0x28) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x34}}], 0x18}}], 0x1, 0x14) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000180)}, 0x41) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x1) 880.760178ms ago: executing program 4 (id=1552): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x16c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffdffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x400000}, {}, 0x20, 0x0, 0xa}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, '1234567890123456dcba'}}, @encap={0x1c, 0x4, {0x2, 0x1194, 0x1194, @in6=@loopback}}]}, 0x16c}}, 0x40000) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0x11}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x32}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)="0102030405060708090a0b0c0d0e0f10", 0x10, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x101, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x6f}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 877.831468ms ago: executing program 0 (id=1553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000080)={0x5c, 0x8, '\x00', [@generic={0x5, 0x3e, "4c6011a6fb56e195cfd5d853e2e93128813d91ace679e0221b6e4e1e8bf8bd41a53cb0814386ac743724ea3961ad7738fc86d194632dda66a236f502da1a"}]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61125000000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f02000067060000200000007a0a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5d0e14c6c946eeb44fe63275c00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 862.28862ms ago: executing program 1 (id=1554): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) recvmmsg$unix(r0, &(0x7f00000037c0)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000380)=""/18, 0x12}, {&(0x7f00000003c0)=""/44, 0x2c}], 0x3, &(0x7f0000003880)=[@rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/69, 0x45}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x3, &(0x7f0000002680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f00000026c0)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f0000002740)=""/26, 0x1a}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x2}}], 0x3, 0x40, 0x0) r4 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) connect$bt_rfcomm(r3, &(0x7f00000039c0)={0x1f, @any, 0x4}, 0xa) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000003980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf8, 0xb, 0x6, 0x1dc258a2ff636c3b, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x74, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'cgroup\x00'}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xff}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0x11, 0x1a, '-{}-($[-@&.&\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x320c}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040894}, 0x44011) unshare(0x580) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES8], 0x5e) 840.364242ms ago: executing program 4 (id=1555): syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f00000001c0)={0x20002010}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r9, 0x29, 0x21, &(0x7f00000002c0), 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x1000000}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0xa}, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f00000000c0)={'ipvlan1\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0xea0ca325a9233329}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) (async) write$tun(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) (async) unshare(0x22020600) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r12, @ANYBLOB="2a97c4f9ba56247bbb26afd6c44d3af2a305a071e29baf0fb164e94b0e876bac0fa5988a8e8a65fe8db8d9aac5a0d6b610ed1ae95179a5acdfcacbd66965dc0befa9ae18ab4c34dc66c5f323572d3da7623d869f558ef14d66f2d571eb29544803005be184382ad1b6fdc3ae68d7e15a7ac7d5b54b0000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESOCT=r2, @ANYBLOB="010026bd700000000000250000006964657673696d0000000f0002006e658064657673696d30000008008a00", @ANYRES32=r1, @ANYBLOB="e084ddfd6c8237464691eb50ea03621669baf63463a8146f6bf8ffffff92e084c9e4923a008f200df1232cb89d86e915efd7c4464f70813d6809ddc55c59be35dbb548d16ab41fc896d8d25e895b679cd28dd46ef2e368dd6e94b67eefde1d6355afc246be14cff73fb6fe882dfafd70df796ec384370583c578d900667a70920df1ce5c5506cfbc41539c78b389699b5eb59f1cacbe8f5af3a890dd6f7b097f53f34ae6459911a8"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 732.147177ms ago: executing program 3 (id=1556): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="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", 0xfc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 711.157408ms ago: executing program 2 (id=1557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r1, r0, 0x0, 0x7d1d7457) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a80), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000a40), &(0x7f0000000ac0)=r2}, 0x20) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000b70000001007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x9, 0x4}, 0x28) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000cc0)={0x6, 'ip6gretap0\x00', {}, 0x8b6c}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket(0x8, 0x80805, 0xffffffff) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r7, 0xc7, 0x4001}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x25}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x2044044) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10}, 0xc) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x1, 0x1}, 0x1}, 0x18) connect$can_j1939(r11, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2, 0x1, 0x1}}, 0xb) write(r11, &(0x7f0000000100)='\x00'/2000, 0x7d0) write(r3, &(0x7f0000000300)="0201c898080000001501010000000101", 0x10) recvmsg$can_raw(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000700)=""/256, 0x100}], 0x1}, 0x40) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x56, &(0x7f0000000080)=ANY=[@ANYRES32=r3], &(0x7f0000000a00)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_msg, r12, 0x8, &(0x7f0000000000)={0x0, 0x80}, 0x8, 0x10, &(0x7f0000000000)={0x200}, 0x10}, 0x94) 666.386245ms ago: executing program 0 (id=1558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)}, 0xb00}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000007, 0x11, r0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 548.029877ms ago: executing program 1 (id=1559): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xc}, @jmp={0x5, 0x0, 0x9, 0x3, 0xa, 0xffffffffffffffff, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x4, 0x1, 0x6, 0x100, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}]}, &(0x7f00000000c0)='GPL\x00', 0xafcb, 0x52, &(0x7f0000000100)=""/82, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xe, 0xb, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x3, 0x1, 0xd, 0x8}, {0x4, 0x1, 0x4, 0xa}, {0x2, 0x2, 0xd, 0x19}, {0x5, 0x4, 0xf, 0x7}, {0x3, 0x2, 0xc, 0x6}, {0x5, 0x1, 0x4, 0x4}, {0x5, 0x1, 0x8, 0x3}], 0x10, 0xffff8001}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000380)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)={0x3bf689e51d68f, 0xb7, "95183d8243bb801970ebf94c91764354d9db83079c0feb8a908d311c225689cb55f6422605b1a2b273ec2b224c39d9e9ed8782f06b25121980759e09b3988b5b2aba7533fbff7270e6c89739a3f7c6e23761ed5fbfd708ef8bc29eec1cd46062fa6993aeb2dd091b478ba84f6d6937ea96c728e159b86d40ff511850c8dd93bfad5692b479836d2d8858e3e89379d44d3546de3e5b693ac9a4b319bdfd251b4e675234b73916ea89b1bef571c03d9d769fd75fc0ac2bb6"}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40855) r3 = socket$inet_sctp(0x2, 0x0, 0x84) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12a, 0x12a, 0x5, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x3}, @union={0xd, 0x3, 0x0, 0x5, 0x0, 0x1ef386d, [{0xe, 0x4, 0x1}, {0x4, 0x1, 0x5}, {0xa, 0x5, 0x3}]}, @datasec={0xe, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x2, 0x6}, {0x1, 0x1, 0xd7}, {0x5, 0x2000, 0x6}], "6503"}, @enum64={0xc, 0x3, 0x0, 0x13, 0x0, 0x3, [{0xc, 0x3ffc000}, {0x2, 0x4, 0xca}, {0xf, 0x24d7bccc, 0x1}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @ptr={0xc}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x5}]}, @enum={0x1, 0x6, 0x0, 0x6, 0x4, [{0x4, 0x4}, {0xd, 0x4}, {0xc, 0x8}, {0x8, 0x4}, {0xe}, {0x8}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x2}}]}, {0x0, [0x39, 0x61, 0x5f]}}, &(0x7f00000007c0)=""/153, 0x149, 0x99, 0x1, 0xcc2, 0x10000, @value=r1}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x8dc, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x3, 0x7ff, 0x46, @remote, @mcast1, 0x7fb6, 0x7, 0x2, 0x9}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={r1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x6, 0x2, 0x5}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x13, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x48a1, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x3, 0x9d, &(0x7f0000000a40)=""/157, 0x41000, 0xea, '\x00', r6, 0x0, r1, 0x8, &(0x7f0000000bc0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0x7, 0x300, 0x240}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r1, r4, r1, r7, r1, r1, r8], 0x0, 0x10, 0x4}, 0x94) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000e00), 0x80, 0x0) write$rfkill(r10, &(0x7f0000000e40)={0xfffffff7, 0x1, 0x1, 0x1, 0x1}, 0x8) sendmsg$sock(r3, &(0x7f0000000f80)={&(0x7f0000000e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x2, 0x1, {0xa, 0x4e24, 0x200, @loopback, 0x1}}}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0x80) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, 0x15, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x0, 0x36, 0xc1, &(0x7f00000010c0)="2ec35697f26052d6988edcaac7d26bd3cf65376f289d03bac2e9f289535158eac6403823cd44a18c063e5240b1e4687c80b663b75553", &(0x7f0000001100)=""/193, 0x81, 0x0, 0x12, 0xc0, &(0x7f0000001200)="8eb28f31221e19cea78a3ed07f280394ffde", &(0x7f0000001240)="01d7fb774be765d02a520faccbf0fd7847d614c39755c39ee07ed5e94de1dc977e26f8920d4f9dcf9323bf378be8ed3da35bc8bec93749fde6fb35e8cfa7ad782e5e938a6c120776a473dce7e8c7bf6089866bcf562c71d8685fbbedbc6e4519710354b37c0b44cb679ac9a9e79282ad76174f22e03ac1b60fd7d2b58fdbf51c85efd7ecebb0b71d46fd51b7cadaae2a2c4e9a770c8763ebb4b0975c580e7720706c925d219f01a9dc0a8e0d9519d9766acb52c428a05e4b06e83010208ac65c", 0x7, 0x0, 0x8}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001380)=r9, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x7c, r11, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x275}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x17c}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x88, 0x2, 0x6, 0x802, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xb}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)=@bridge_getlink={0x44, 0x12, 0x100, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r6, 0x20000, 0x20060}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x73451}, @IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) sendto$inet(r3, &(0x7f0000001800)="7bbd02a1e56ca19207c307f2b6f619a3d892e1ddd99564fc0af5f3c176f4abc826b9bbc563bf716c894c2a4a111444a7666cd6252726ddee920b6c75ea9ff8ecf243dd2b34029a02c3d4358f23be042c317b41b8b748036e2a38ede86253f916bea6fc242360a3744d83db9322864392ef64ba8bb2da83e32905b12be650b0f393", 0x81, 0x8001, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000018c0)={0x0, 0xff}, &(0x7f0000001900)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001940)={r12, 0x3}, &(0x7f0000001980)=0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000019c0)='ns/time_for_children\x00') r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000001a00), r13) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a80)={0xc4, 0x3, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xd47b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9a5}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x81}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x40) 547.35443ms ago: executing program 3 (id=1560): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000104faffffff0002000000000000", @ANYRES32=0x0, @ANYBLOB="000000010000000000000000f7ffffff200012800e0001006970366772657400000000000c000000"], 0x48}, 0x1, 0x0, 0x0, 0x20044000}, 0x840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) write(r0, &(0x7f0000000240)="e75e25870c2567dc3f98bb5f8495abd5b4cbbfefd60c7d94b0c45f3b86abd74a5d085ab9d730f228a1d936aaf5fbe15da277168024b6fe1e2afcda16c17b122e46877725c75549aa9ba922b0c832ca41430eb859b4c81e4b38a0d1a1678a7cd3594a88310ff716a6861f25fd89177e201237d31e71aac3c60f15b51be5526f3f72d1b0755cc6a9b915979cb1ebe42f0107f55ae3035f0c766a351cec22dfbd58c34a2792910a0f12c98d6f4f837d80", 0xaf) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x6001, 0x1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000000c0)=0x30ccad615629d268, 0x4) 511.910255ms ago: executing program 2 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@deltclass={0x64, 0x29, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0x1fff4, 0x5}, {0x4, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @TCA_RATE={0x6, 0x5, {0x10, 0xef}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x6e, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008080}, 0x4056) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='e', 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @tracing=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff135d}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000440)={0xfffffc00}, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004e80)}}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)}, 0x4000000}], 0x1, 0x103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000005e0000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x401, 0xc, 0xfacb}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000009500000000008000"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfe, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010127bd7002fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 378.811982ms ago: executing program 4 (id=1562): openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r0 = socket(0xa, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x7, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r3, &(0x7f0000000a00)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)="82bc143f297d3c82ea3bc0379761bcfb67855f0c6f116483cd5ab8de2071ecd808192f1fbb076d8ffc6e01e06a95cf40b822b673c75e324ecc57711e58fed15f3cbf6f9a", 0x44}, {&(0x7f00000001c0)="f9576237f1a40fc10503d3a3ed", 0xd}, {&(0x7f00000002c0)="b5fc23ac168d6aab6b2ce4212cd5f6b0e5081b2d93cf39938c31e8872f22d4466756123ff17e1cbd2c85cef04caabc16aaac2a7123e12a6c3302f38eae62e7731ff63e58707fbc9a273c2688cd36a35cb7fb9c907721b2f43f4397f2074eaacc367b1d57658d4a9e15acda1ce92e2bcdffadc6029b542218b42067acd6f30f233a6b65862adb87d1203da1deee7014f0b05cc97e16d1545118fcf3704c9fd0b73cc6832d2a6941e314d2688eee27f7350daa9edccd098219e337aedc486aed88765ef3084e71ff68825c612efbb7b9513e02a86d55c09555e810964bcaca", 0xde}, {&(0x7f00000003c0)="d53410018bda3ca2f785c6f4b9c84c7dc7249825f090a959ff03f03b7cefc6c86ac8e6398960d34d98b38089c266da79d179558cc438a9f497500ee29f2f4c9365751dbd71fb6be64e7ea90b45ee8a98a6802e83a78aa070af91898c7569364d5add1ddf57106d18573137b1644ca61b94d8a3c5e2210c6169156a712e15ad1ebecb91be", 0x84}, {&(0x7f0000000480)="e4a96c0a2939592b5f2dfdecfeb8a75d1bce68743c60f753efab5ec81a8f0d44703fa441675a4cdfa27d0cd415f806e715968abcc778ad54552e742992d010eb22d8a503f4cabd4e1c7d45e478d0e05feea56a289f423733bc39111bf43e7e2dc95b82fb73a366d11d29a2c3dc01", 0x6e}, {&(0x7f0000000500)="c926a260cb354d8f88333289293d22b09062ad750b49e5fff458a346d213f8fa7fc9fb6b0cda5f1a0ccedfaf7b94d42c16134319b8b971b1032a007d9b465b3bd2f8bff0", 0x44}, {&(0x7f0000000580)="a7d4895876feb111b10dc770c9ea0dbf480266558752403b230804f17069773d56f0189f868178e9dc301e2cfd5e82638daf91cec2ef181671ebfa1f1a3b4201a33f41ef312f8d8d38458a424067dffab539eb5e61f793dfa0cd319b2cfe7fc181726dee6b1b75d4e2e9beb41ef976a2001a1d82a945fc404764cd53a34fcd6bd6e0d67d53d2932e243b1f58f36ad4654ff1beec4a44c4502eb9caac529f96f3c939d5ab71c36ff50bc9c15356ca1037e1833bad701656334e310859ef83c6a13c83b0cd9e63d35e7fe5a7151274bbe5aa58064a04dd7a561fa401ae4c45c385ac8221830c88b627ca", 0xe9}], 0x7, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x532}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0x25c}}, 0x0) 233.853832ms ago: executing program 2 (id=1563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000040000000100002280000b00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r0, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0xd) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000004000010000001c000180060001000200000008000300"], 0x30}}, 0x0) 231.789035ms ago: executing program 1 (id=1564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8c0000001000010029bd7000fbdfdf2500000000", @ANYRES32=0x0, @ANYBLOB="893b0000211a0100140003006772658010000180040001801000018000000500ff010000100000000000030005000000040000004b00018010000600ad03000007000000050000001000020001000100c301000002000000000004000400007500"/116], 0x8c}, 0x1, 0x0, 0x0, 0x95}, 0x48890) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8c0000001000010029bd7000fbdfdf2500000000", @ANYRES32=0x0, @ANYBLOB="893b0000211a0100140003006772658010000180040001801000018000000500ff010000100000000000030005000000040000004b00018010000600ad03000007000000050000001000020001000100c301000002000000000004000400007500"/116], 0x8c}, 0x1, 0x0, 0x0, 0x95}, 0x48890) 230.709837ms ago: executing program 3 (id=1565): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$packet(0x11, 0x1, 0x300) recvfrom(r0, &(0x7f0000000080)=""/99, 0x63, 0x10101, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @local}, 0x80) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) r1 = socket$inet6(0xa, 0xa, 0x8000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 4.4326ms ago: executing program 3 (id=1566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x840) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r1, &(0x7f0000000040)='netdevsim', 0x8800, &(0x7f00000000c0)={@_ha_fsid={[0x8, 0x1]}, {0x1000, 0x6, 0x100, 0x5}}, 0x250, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x4}) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0xd8, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x85f}}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000014}, 0x4044001) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x10000008ebc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x3c, r3, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1000001}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x40040c0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x181c00, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) readv(r2, &(0x7f0000000280), 0x37) kernel console output (not intermixed with test programs): ressed [ 116.676230][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 116.682868][ T6844] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 116.831093][ T6849] netlink: 100 bytes leftover after parsing attributes in process `syz.1.266'. [ 116.862144][ T6850] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 116.862298][ T6851] netlink: 'syz.0.265': attribute type 10 has an invalid length. [ 116.942256][ T6850] team0: Device veth0_vlan failed to register rx_handler [ 116.976108][ T6851] team0: Device veth0_vlan failed to register rx_handler [ 117.082312][ T6858] xt_IDLETIMER: label is empty or not nul-terminated [ 117.292539][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 117.295128][ T6866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'. [ 117.340640][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'. [ 117.475724][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 117.476191][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 118.521136][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 118.521163][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 118.521188][ T6916] netlink: 'syz.4.283': attribute type 11 has an invalid length. [ 118.521201][ T6916] netlink: 'syz.4.283': attribute type 13 has an invalid length. [ 118.675262][ T6927] netlink: 72 bytes leftover after parsing attributes in process `syz.2.286'. [ 119.383933][ T6963] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 119.383958][ T6963] netlink: 'syz.2.295': attribute type 4 has an invalid length. [ 120.532378][ T7019] trusted_key: syz.1.303 sent an empty control message without MSG_MORE. [ 120.609784][ T7022] netlink: 'syz.4.305': attribute type 21 has an invalid length. [ 120.609853][ T7022] netlink: 'syz.4.305': attribute type 4 has an invalid length. [ 120.609865][ T7022] netlink: 'syz.4.305': attribute type 3 has an invalid length. [ 120.852726][ T7043] sctp: [Deprecated]: syz.3.310 (pid 7043) Use of int in max_burst socket option deprecated. [ 120.852726][ T7043] Use struct sctp_assoc_value instead [ 121.148504][ T7054] syzkaller1: entered promiscuous mode [ 121.148528][ T7054] syzkaller1: entered allmulticast mode [ 121.476270][ T7068] gretap1: entered promiscuous mode [ 121.683415][ T7081] __nla_validate_parse: 14 callbacks suppressed [ 121.683438][ T7081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.321'. [ 121.767661][ T7083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.322'. [ 122.174201][ T7108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.224336][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 122.242150][ T7115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.242171][ T7115] IPv6: NLM_F_CREATE should be set when creating new route [ 122.243239][ T7115] IPv6: NLM_F_CREATE should be set when creating new route [ 122.474767][ T7120] syzkaller0: entered promiscuous mode [ 122.474793][ T7120] syzkaller0: entered allmulticast mode [ 123.248738][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.188939][ T7148] netlink: 112 bytes leftover after parsing attributes in process `syz.3.337'. [ 124.188974][ T7148] netlink: 56 bytes leftover after parsing attributes in process `syz.3.337'. [ 124.319587][ T7148] ipvlan2: entered promiscuous mode [ 124.349947][ T7157] validate_nla: 1 callbacks suppressed [ 124.349969][ T7157] netlink: 'syz.1.338': attribute type 4 has an invalid length. [ 124.370234][ T7148] team0: Device ipvlan2 failed to register rx_handler [ 124.392287][ T7161] netlink: 'syz.1.338': attribute type 4 has an invalid length. [ 124.517301][ T7149] ipvlan2: entered promiscuous mode [ 124.532126][ T7149] team0: Device ipvlan2 failed to register rx_handler [ 124.665809][ T7150] ipvlan2: entered promiscuous mode [ 124.677368][ T7150] team0: Device ipvlan2 failed to register rx_handler [ 125.461450][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.343'. [ 125.620442][ T7179] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 125.755631][ T7184] bridge_slave_0: left allmulticast mode [ 125.755662][ T7184] bridge_slave_0: left promiscuous mode [ 125.755935][ T7184] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.792964][ T7184] bridge_slave_1: left allmulticast mode [ 125.792997][ T7184] bridge_slave_1: left promiscuous mode [ 125.793253][ T7184] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.014090][ T7198] syzkaller0: entered promiscuous mode [ 126.014116][ T7198] syzkaller0: entered allmulticast mode [ 126.873058][ T30] audit: type=1804 audit(1790933046.196:2): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.361" name="/newroot/68/cgroup.controllers" dev="tmpfs" ino=371 res=1 errno=0 [ 126.874708][ T30] audit: type=1800 audit(1790933046.196:3): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="cgroup.controllers" dev="tmpfs" ino=371 res=0 errno=0 [ 127.299110][ T7254] vti0: entered promiscuous mode [ 127.299135][ T7254] vti0: entered allmulticast mode [ 128.421061][ T7289] netlink: 10056 bytes leftover after parsing attributes in process `syz.0.377'. [ 128.471929][ T7294] netlink: 220 bytes leftover after parsing attributes in process `syz.3.378'. [ 128.619505][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 128.923966][ T7324] netlink: 'syz.3.388': attribute type 2 has an invalid length. [ 128.924221][ T7323] netlink: 'syz.3.388': attribute type 2 has an invalid length. [ 128.989843][ T7327] syzkaller1: entered promiscuous mode [ 128.989861][ T7327] syzkaller1: entered allmulticast mode [ 129.122749][ T7330] netlink: 72 bytes leftover after parsing attributes in process `syz.4.390'. [ 129.122781][ T7330] netlink: 72 bytes leftover after parsing attributes in process `syz.4.390'. [ 129.484498][ T7349] netlink: 'syz.4.394': attribute type 5 has an invalid length. [ 130.354970][ T7385] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 130.439850][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 130.534461][ T7398] netlink: 7 bytes leftover after parsing attributes in process `syz.0.407'. [ 130.534490][ T7398] netlink: 7 bytes leftover after parsing attributes in process `syz.0.407'. [ 130.542788][ T7398] netlink: 7 bytes leftover after parsing attributes in process `syz.0.407'. [ 130.542825][ T7398] netlink: 7 bytes leftover after parsing attributes in process `syz.0.407'. [ 130.658850][ T5726] lo speed is unknown, defaulting to 1000 [ 130.658880][ T5726] syz0: Port: 1 Link DOWN [ 130.658958][ T5726] lo speed is unknown, defaulting to 1000 [ 130.749396][ T7407] bond3: Unable to set down delay as MII monitoring is disabled [ 130.752457][ T7407] bond3 (unregistering): Released all slaves [ 131.080339][ T7413] block nbd0: Unsupported socket: should be TCP or UNIX. [ 131.416350][ T7425] netlink: zone id is out of range [ 131.416406][ T7425] netlink: zone id is out of range [ 131.416549][ T7425] netlink: zone id is out of range [ 131.416593][ T7425] netlink: zone id is out of range [ 131.416601][ T7425] netlink: zone id is out of range [ 131.416608][ T7425] netlink: zone id is out of range [ 131.416616][ T7425] netlink: zone id is out of range [ 131.416624][ T7425] netlink: zone id is out of range [ 131.416632][ T7425] netlink: zone id is out of range [ 131.416640][ T7425] netlink: zone id is out of range [ 132.987848][ T7459] syzkaller1: entered promiscuous mode [ 132.987873][ T7459] syzkaller1: entered allmulticast mode [ 133.072162][ T7475] netlink: 'syz.0.427': attribute type 4 has an invalid length. [ 133.389718][ T7486] lo speed is unknown, defaulting to 1000 [ 134.048724][ T5629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 134.411964][ T7516] dummy0: entered allmulticast mode [ 134.644064][ T7540] __nla_validate_parse: 5 callbacks suppressed [ 134.644086][ T7540] netlink: 48 bytes leftover after parsing attributes in process `syz.4.438'. [ 134.695161][ T7543] netlink: 48 bytes leftover after parsing attributes in process `syz.4.438'. [ 134.830733][ T7548] netlink: 48 bytes leftover after parsing attributes in process `syz.4.438'. [ 134.830916][ T7549] netlink: 48 bytes leftover after parsing attributes in process `syz.4.438'. [ 135.003686][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 135.094431][ T7544] syzkaller0: entered promiscuous mode [ 135.094458][ T7544] syzkaller0: entered allmulticast mode [ 135.260167][ T7564] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 135.261385][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 135.261405][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 137.226676][ T7581] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 137.226705][ T7581] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 137.226795][ T7582] tipc: Started in network mode [ 137.226819][ T7582] tipc: Node identity 080211, cluster identity 4711 [ 137.227807][ T7582] tipc: Enabled bearer , priority 0 [ 137.347784][ T7586] net_ratelimit: 59 callbacks suppressed [ 137.347806][ T7586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.851334][ T7611] syzkaller0: entered promiscuous mode [ 137.851361][ T7611] syzkaller0: entered allmulticast mode [ 137.916908][ T7619] netlink: 'syz.2.453': attribute type 28 has an invalid length. [ 137.916936][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 137.926078][ T7619] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.453'. [ 138.426714][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 140.077912][ T25] tipc: Node number set to 134353152 [ 140.127498][ T5629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.466710][ T7672] syzkaller0: entered promiscuous mode [ 140.466736][ T7672] syzkaller0: entered allmulticast mode [ 140.471400][ T7671] tipc: Started in network mode [ 140.471428][ T7671] tipc: Node identity a28fe4cda9bb, cluster identity 4711 [ 140.471622][ T7671] tipc: Enabled bearer , priority 0 [ 140.478302][ T7668] __nla_validate_parse: 1 callbacks suppressed [ 140.478320][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'. [ 140.827345][ T5627] block nbd0: Receive control failed (result -32) [ 140.828317][ T5621] block nbd1: Receive control failed (result -32) [ 140.830430][ T5636] block nbd1: Receive control failed (result -32) [ 140.830634][ T5629] block nbd0: Receive control failed (result -32) [ 140.832187][ T7691] vti0: entered promiscuous mode [ 140.832207][ T7691] vti0: entered allmulticast mode [ 140.939687][ T7666] tipc: Resetting bearer [ 140.982740][ T7666] tipc: Disabling bearer [ 140.986525][ T7695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.474'. [ 141.238026][ T7706] sctp: [Deprecated]: syz.3.475 (pid 7706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.238026][ T7706] Use struct sctp_sack_info instead [ 141.238548][ T7706] sctp: [Deprecated]: syz.3.475 (pid 7706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.238548][ T7706] Use struct sctp_sack_info instead [ 141.504853][ T7715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.761605][ T7726] ip_tables: iptables: counters copy to user failed while replacing table [ 142.110598][ T7759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.110618][ T7759] IPv6: NLM_F_CREATE should be set when creating new route [ 142.110671][ T7759] IPv6: NLM_F_CREATE should be set when creating new route [ 142.110699][ T7759] IPv6: NLM_F_CREATE should be set when creating new route [ 142.226837][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 142.444207][ T7770] netlink: 324 bytes leftover after parsing attributes in process `syz.2.493'. [ 142.542535][ T7728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.592452][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.612743][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.638165][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.783030][ T7779] ip_tables: iptables: counters copy to user failed while replacing table [ 142.795242][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.496'. [ 142.819064][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.822406][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.859841][ T7774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 142.859869][ T7774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.922417][ T7774] veth1_vlan: left promiscuous mode [ 142.926820][ T7774] veth0_vlan: left promiscuous mode [ 142.944832][ T7774] veth0_vlan: entered promiscuous mode [ 142.963519][ T7774] veth1_vlan: entered promiscuous mode [ 143.016061][ T7774] veth1_macvtap: left promiscuous mode [ 143.031405][ T7774] veth0_macvtap: left promiscuous mode [ 143.044263][ T7774] veth0_macvtap: entered promiscuous mode [ 143.048457][ T7774] veth1_macvtap: entered promiscuous mode [ 143.107748][ T7774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.114525][ T7774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.123355][ T7774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.132544][ T7774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.161831][ T4945] lo speed is unknown, defaulting to 1000 [ 143.161877][ T4945] syz0: Port: 1 Link ACTIVE [ 143.161960][ T4945] lo speed is unknown, defaulting to 1000 [ 143.164936][ T6995] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.209854][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.209974][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.217734][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.217839][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.444364][ T7795] netlink: 'syz.0.499': attribute type 1 has an invalid length. [ 143.448189][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.448253][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.448284][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.478578][ T6995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.581820][ T7810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.760060][ T7813] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.466097][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 144.506964][ T7829] netlink: 324 bytes leftover after parsing attributes in process `syz.3.504'. [ 144.587364][ T7804] netlink: 165 bytes leftover after parsing attributes in process `syz.1.500'. [ 144.609053][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 144.725937][ T7808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.500'. [ 144.959272][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 145.035300][ T7836] hsr_slave_1 (unregistering): left promiscuous mode [ 145.064712][ T7841] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 145.126832][ T7850] netlink: 'syz.2.509': attribute type 1 has an invalid length. [ 145.178841][ T7850] bond1: entered promiscuous mode [ 145.179288][ T7850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.291293][ T7841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.291683][ T7841] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 145.291702][ T7841] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 145.305534][ T7841] bond1: (slave gre1): making interface the new active one [ 145.305561][ T7841] gre1: entered promiscuous mode [ 145.333729][ T7841] bond1: (slave gre1): Enslaving as an active interface with an up link [ 145.482282][ T7863] x_tables: duplicate underflow at hook 2 [ 145.501825][ T7859] lo speed is unknown, defaulting to 1000 [ 145.575042][ T7865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.767411][ T7876] __nla_validate_parse: 3 callbacks suppressed [ 145.767434][ T7876] netlink: 324 bytes leftover after parsing attributes in process `syz.0.517'. [ 145.825550][ T7878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.518'. [ 146.096084][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 146.269311][ T7892] ip_tables: iptables: counters copy to user failed while replacing table [ 147.087609][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 147.116497][ T7922] xt_TCPMSS: Only works on TCP SYN packets [ 147.190392][ T7926] netlink: 324 bytes leftover after parsing attributes in process `syz.2.530'. [ 147.225912][ T7925] veth0: left allmulticast mode [ 147.225941][ T7925] veth0: left promiscuous mode [ 147.226213][ T7925] bridge0: port 3(veth0) entered disabled state [ 147.278953][ T7925] bridge_slave_0: left allmulticast mode [ 147.279059][ T7925] bridge_slave_0: left promiscuous mode [ 147.279358][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.319431][ T7925] bridge_slave_1: left allmulticast mode [ 147.319468][ T7925] bridge_slave_1: left promiscuous mode [ 147.319682][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.356214][ T7925] bond0: (slave bond_slave_1): Releasing backup interface [ 147.379111][ T7925] team0: Port device team_slave_0 removed [ 147.402517][ T7925] team0: Port device team_slave_1 removed [ 147.404079][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.404101][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.434309][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.434336][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.456898][ T7925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 147.595328][ T7952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.539'. [ 147.623977][ T7952] netlink: 56 bytes leftover after parsing attributes in process `syz.0.539'. [ 147.689649][ T7958] netlink: 56 bytes leftover after parsing attributes in process `syz.0.539'. [ 147.726726][ T7960] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 147.726753][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 147.740000][ T7952] ip6erspan0: entered promiscuous mode [ 147.798961][ T7957] netlink: 48 bytes leftover after parsing attributes in process `syz.1.538'. [ 147.829368][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 147.829400][ T7957] block nbd2: Unsupported socket: should be TCP or UNIX. [ 147.905773][ T7967] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.202784][ T6993] IPVS: starting estimator thread 0... [ 148.254783][ T7973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 148.288598][ T7980] IPVS: using max 24 ests per chain, 57600 per kthread [ 148.435314][ T30] audit: type=1800 audit(1790933067.756:4): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.546" name="blkio.bfq.time_recursive" dev="tmpfs" ino=528 res=0 errno=0 [ 148.564665][ T7991] team0: entered allmulticast mode [ 148.564690][ T7991] team_slave_0: entered allmulticast mode [ 148.564706][ T7991] team_slave_1: entered allmulticast mode [ 148.564728][ T7991] bond1: entered allmulticast mode [ 148.704378][ T7995] sctp: [Deprecated]: syz.2.549 (pid 7995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.704378][ T7995] Use struct sctp_sack_info instead [ 148.878794][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.878811][ T8006] IPv6: NLM_F_CREATE should be set when creating new route [ 148.878853][ T8006] IPv6: NLM_F_CREATE should be set when creating new route [ 148.878879][ T8006] IPv6: NLM_F_CREATE should be set when creating new route [ 148.880198][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.880499][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.880810][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.881100][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.881373][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.881719][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.882002][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.882271][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.882531][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.882820][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.883100][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.883385][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.883691][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.883961][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.884206][ T8006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.077185][ T8018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 149.685096][ T8030] GUP no longer grows the stack in syz.1.559 (8030): 200000003000-20000000a000 (200000001000) [ 149.685136][ T8030] CPU: 0 UID: 0 PID: 8030 Comm: syz.1.559 Not tainted syzkaller #0 PREEMPT(full) [ 149.685159][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.685175][ T8030] Call Trace: [ 149.685184][ T8030] [ 149.685193][ T8030] dump_stack_lvl+0xe8/0x150 [ 149.685228][ T8030] __get_user_pages+0x23b6/0x2750 [ 149.685258][ T8030] ? lock_acquire+0x115/0x350 [ 149.685294][ T8030] ? __gup_longterm_locked+0xc3b/0x15c0 [ 149.685354][ T8030] __gup_longterm_locked+0xd52/0x15c0 [ 149.685385][ T8030] ? lock_acquire+0x115/0x350 [ 149.685423][ T8030] gup_fast_fallback+0x1d92/0x20e0 [ 149.685489][ T8030] ? __pfx_gup_fast_fallback+0x10/0x10 [ 149.685531][ T8030] ? lock_acquire+0x115/0x350 [ 149.685549][ T8030] ? is_valid_gup_args+0x11f/0x200 [ 149.685576][ T8030] ? get_user_pages_fast+0x4d/0xb0 [ 149.685603][ T8030] __iov_iter_get_pages_alloc+0x378/0xa40 [ 149.685636][ T8030] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 149.685669][ T8030] iov_iter_get_pages2+0x5e/0xa0 [ 149.685697][ T8030] __se_sys_vmsplice+0x7b5/0x1660 [ 149.685749][ T8030] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 149.685779][ T8030] ? __pfx_futex_wait+0x10/0x10 [ 149.685845][ T8030] ? 0xffffffffff600000 [ 149.685909][ T8030] do_syscall_64+0x166/0x520 [ 149.685938][ T8030] ? trace_irq_disable+0x3b/0x140 [ 149.685955][ T8030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.685976][ T8030] ? clear_bhb_loop+0x70/0xc0 [ 149.686001][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.686020][ T8030] RIP: 0033:0x7fa30df9e159 [ 149.686038][ T8030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.686053][ T8030] RSP: 002b:00007fa30ee04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 149.686084][ T8030] RAX: ffffffffffffffda RBX: 00007fa30e225fa0 RCX: 00007fa30df9e159 [ 149.686099][ T8030] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 149.686112][ T8030] RBP: 00007fa30e03506b R08: 0000000000000000 R09: 0000000000000000 [ 149.686124][ T8030] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 149.686135][ T8030] R13: 00007fa30e226038 R14: 00007fa30e225fa0 R15: 00007ffc366c06b8 [ 149.686170][ T8030] [ 149.725099][ T8033] sctp: [Deprecated]: syz.0.560 (pid 8033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.725099][ T8033] Use struct sctp_sack_info instead [ 149.741862][ T8034] netlink: 'syz.4.561': attribute type 30 has an invalid length. [ 149.775342][ T8034] vxlan1: entered promiscuous mode [ 149.775365][ T8034] vxlan1: entered allmulticast mode [ 149.788751][ T1162] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.792828][ T8034] netlink: 'syz.4.561': attribute type 30 has an invalid length. [ 149.797264][ T91] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.800020][ T1162] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.800055][ T1162] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.099198][ T8047] rdma_rxe: rxe_newlink: failed to add lo [ 150.100136][ T8045] rdma_rxe: rxe_newlink: failed to add lo [ 150.333467][ T8062] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.556956][ T8111] netlink: 'syz.4.584': attribute type 28 has an invalid length. [ 151.569921][ T8111] netlink: 'syz.4.584': attribute type 3 has an invalid length. [ 151.569940][ T8111] __nla_validate_parse: 3 callbacks suppressed [ 151.569951][ T8111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.584'. [ 152.396123][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.589'. [ 152.396153][ T8144] nbd: must specify at least one socket [ 152.652268][ T8148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.058076][ T8165] netlink: 14 bytes leftover after parsing attributes in process `syz.3.596'. [ 153.210698][ T8175] netlink: 9 bytes leftover after parsing attributes in process `syz.0.599'. [ 153.211913][ T8175] 0·: renamed from hsr0 (while UP) [ 153.221245][ T8175] 0·: entered allmulticast mode [ 153.221267][ T8175] hsr_slave_0: entered allmulticast mode [ 153.222270][ T8175] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 153.231051][ T8175] netlink: 56 bytes leftover after parsing attributes in process `syz.0.599'. [ 153.368375][ T8177] syzkaller1: entered promiscuous mode [ 153.368399][ T8177] syzkaller1: entered allmulticast mode [ 153.550780][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 153.667423][ T8188] syzkaller1: entered promiscuous mode [ 153.667449][ T8188] syzkaller1: entered allmulticast mode [ 153.879402][ T8199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.910191][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 153.910220][ T8201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 153.910236][ T8201] netlink: 'syz.3.609': attribute type 4 has an invalid length. [ 154.021621][ T8208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.373323][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 154.544204][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'. [ 154.770443][ T8244] ip_tables: iptables: counters copy to user failed while replacing table [ 155.088118][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 155.110724][ T8260] netlink: 'syz.0.623': attribute type 4 has an invalid length. [ 155.445684][ T8286] netlink: 'syz.3.629': attribute type 30 has an invalid length. [ 155.466090][ T8286] vxlan0: entered promiscuous mode [ 155.466118][ T8286] vxlan0: entered allmulticast mode [ 155.488661][ T1162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.489987][ T6993] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.490068][ T6993] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.490097][ T6993] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.922507][ T8303] netlink: 'syz.3.632': attribute type 15 has an invalid length. [ 156.031647][ T8307] FAULT_INJECTION: forcing a failure. [ 156.031647][ T8307] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.031684][ T8307] CPU: 1 UID: 0 PID: 8307 Comm: syz.4.635 Not tainted syzkaller #0 PREEMPT(full) [ 156.031706][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.031717][ T8307] Call Trace: [ 156.031726][ T8307] [ 156.031735][ T8307] dump_stack_lvl+0xe8/0x150 [ 156.031768][ T8307] should_fail_ex+0x410/0x560 [ 156.031797][ T8307] _copy_from_user+0x2d/0xb0 [ 156.031824][ T8307] ___sys_sendmsg+0x1c6/0x360 [ 156.031850][ T8307] ? __lock_acquire+0x747/0x2de0 [ 156.031874][ T8307] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.031935][ T8307] ? __fget_files+0x2a/0x420 [ 156.031960][ T8307] ? __fget_files+0x3a2/0x420 [ 156.031993][ T8307] __x64_sys_sendmsg+0x1b1/0x290 [ 156.032022][ T8307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.032069][ T8307] do_syscall_64+0x166/0x520 [ 156.032093][ T8307] ? trace_irq_disable+0x3b/0x140 [ 156.032111][ T8307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.032131][ T8307] ? clear_bhb_loop+0x70/0xc0 [ 156.032155][ T8307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.032173][ T8307] RIP: 0033:0x7f274a59e159 [ 156.032193][ T8307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.032208][ T8307] RSP: 002b:00007f274b3cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.032231][ T8307] RAX: ffffffffffffffda RBX: 00007f274a825fa0 RCX: 00007f274a59e159 [ 156.032245][ T8307] RDX: 0000000000048082 RSI: 0000200000000080 RDI: 0000000000000009 [ 156.032258][ T8307] RBP: 00007f274b3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 156.032270][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.032282][ T8307] R13: 00007f274a826038 R14: 00007f274a825fa0 R15: 00007ffc0bd97468 [ 156.032314][ T8307] [ 156.095111][ T8308] netlink: 'syz.2.634': attribute type 4 has an invalid length. [ 156.665160][ T8333] hsr0: entered promiscuous mode [ 156.694543][ T8333] netlink: 'syz.1.646': attribute type 29 has an invalid length. [ 156.701122][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.702575][ T8334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.702831][ T8337] __nla_validate_parse: 9 callbacks suppressed [ 156.702846][ T8337] netlink: 13172 bytes leftover after parsing attributes in process `syz.4.645'. [ 156.781072][ T8341] FAULT_INJECTION: forcing a failure. [ 156.781072][ T8341] name failslab, interval 1, probability 0, space 0, times 1 [ 156.781117][ T8341] CPU: 0 UID: 0 PID: 8341 Comm: syz.1.647 Not tainted syzkaller #0 PREEMPT(full) [ 156.781139][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.781150][ T8341] Call Trace: [ 156.781158][ T8341] [ 156.781166][ T8341] dump_stack_lvl+0xe8/0x150 [ 156.781199][ T8341] should_fail_ex+0x410/0x560 [ 156.781226][ T8341] ? __alloc_skb+0x1db/0x7a0 [ 156.781248][ T8341] should_failslab+0xa8/0x100 [ 156.781273][ T8341] ? __alloc_skb+0x1db/0x7a0 [ 156.781292][ T8341] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 156.781322][ T8341] ? __alloc_skb+0x18d/0x7a0 [ 156.781344][ T8341] ? __alloc_skb+0x1db/0x7a0 [ 156.781373][ T8341] __alloc_skb+0x1db/0x7a0 [ 156.781400][ T8341] netlink_sendmsg+0x5d4/0xb40 [ 156.781431][ T8341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.781459][ T8341] ? apparmor_socket_sendmsg+0x98/0x360 [ 156.781483][ T8341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.781502][ T8341] sock_sendmsg_nosec+0x14e/0x190 [ 156.781535][ T8341] ____sys_sendmsg+0x54e/0x850 [ 156.781566][ T8341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.781601][ T8341] ? import_iovec+0x73/0xa0 [ 156.781633][ T8341] ___sys_sendmsg+0x2a5/0x360 [ 156.781657][ T8341] ? __lock_acquire+0x747/0x2de0 [ 156.781681][ T8341] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.781744][ T8341] ? __fget_files+0x2a/0x420 [ 156.781769][ T8341] ? __fget_files+0x3a2/0x420 [ 156.781805][ T8341] __x64_sys_sendmsg+0x1b1/0x290 [ 156.781833][ T8341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.781881][ T8341] do_syscall_64+0x166/0x520 [ 156.781907][ T8341] ? trace_irq_disable+0x3b/0x140 [ 156.781924][ T8341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.781945][ T8341] ? clear_bhb_loop+0x70/0xc0 [ 156.781968][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.781987][ T8341] RIP: 0033:0x7fa30df9e159 [ 156.782007][ T8341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.782022][ T8341] RSP: 002b:00007fa30ee04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.782045][ T8341] RAX: ffffffffffffffda RBX: 00007fa30e225fa0 RCX: 00007fa30df9e159 [ 156.782059][ T8341] RDX: 0000000000048082 RSI: 0000200000000080 RDI: 0000000000000009 [ 156.782071][ T8341] RBP: 00007fa30ee04090 R08: 0000000000000000 R09: 0000000000000000 [ 156.782092][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.782103][ T8341] R13: 00007fa30e226038 R14: 00007fa30e225fa0 R15: 00007ffc366c06b8 [ 156.782131][ T8341] [ 156.797481][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 156.932212][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 156.932240][ T8343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.648'. [ 156.932255][ T8343] netlink: 'syz.3.648': attribute type 4 has an invalid length. [ 157.183754][ T8347] nbd: nbd1 already in use [ 157.183986][ T8348] block nbd1: NBD_DISCONNECT [ 157.184053][ T8348] block nbd1: Send disconnect failed -32 [ 157.184071][ T8348] block nbd1: Send disconnect failed -32 [ 157.184099][ T8348] block nbd1: shutting down sockets [ 157.197178][ T8351] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 157.250807][ T8348] block nbd1: NBD_DISCONNECT [ 157.464074][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 157.464794][ T8370] netlink: 52 bytes leftover after parsing attributes in process `syz.3.653'. [ 157.643467][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.656'. [ 157.878096][ T8382] FAULT_INJECTION: forcing a failure. [ 157.878096][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.878131][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.1.659 Not tainted syzkaller #0 PREEMPT(full) [ 157.878153][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.878165][ T8382] Call Trace: [ 157.878173][ T8382] [ 157.878182][ T8382] dump_stack_lvl+0xe8/0x150 [ 157.878215][ T8382] should_fail_ex+0x410/0x560 [ 157.878243][ T8382] _copy_from_iter+0x1d3/0x1660 [ 157.878267][ T8382] ? __alloc_skb+0x27a/0x7a0 [ 157.878290][ T8382] ? __alloc_skb+0x27a/0x7a0 [ 157.878313][ T8382] ? __alloc_skb+0x27a/0x7a0 [ 157.878334][ T8382] ? __pfx__copy_from_iter+0x10/0x10 [ 157.878353][ T8382] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 157.878377][ T8382] ? __alloc_skb+0x27a/0x7a0 [ 157.878395][ T8382] ? __alloc_skb+0x27a/0x7a0 [ 157.878431][ T8382] ? netlink_sendmsg+0x650/0xb40 [ 157.878449][ T8382] ? skb_put+0x112/0x210 [ 157.878473][ T8382] netlink_sendmsg+0x6c0/0xb40 [ 157.878502][ T8382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.878529][ T8382] ? apparmor_socket_sendmsg+0x98/0x360 [ 157.878554][ T8382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.878576][ T8382] sock_sendmsg_nosec+0x14e/0x190 [ 157.878608][ T8382] ____sys_sendmsg+0x54e/0x850 [ 157.878638][ T8382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.878671][ T8382] ? import_iovec+0x73/0xa0 [ 157.878698][ T8382] ___sys_sendmsg+0x2a5/0x360 [ 157.878722][ T8382] ? __lock_acquire+0x747/0x2de0 [ 157.878746][ T8382] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.878805][ T8382] ? __fget_files+0x2a/0x420 [ 157.878828][ T8382] ? __fget_files+0x3a2/0x420 [ 157.878864][ T8382] __x64_sys_sendmsg+0x1b1/0x290 [ 157.878891][ T8382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.878935][ T8382] do_syscall_64+0x166/0x520 [ 157.878959][ T8382] ? trace_irq_disable+0x3b/0x140 [ 157.878978][ T8382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.878997][ T8382] ? clear_bhb_loop+0x70/0xc0 [ 157.879022][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.879042][ T8382] RIP: 0033:0x7fa30df9e159 [ 157.879061][ T8382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.879075][ T8382] RSP: 002b:00007fa30ee04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.879098][ T8382] RAX: ffffffffffffffda RBX: 00007fa30e225fa0 RCX: 00007fa30df9e159 [ 157.879112][ T8382] RDX: 0000000000048082 RSI: 0000200000000080 RDI: 0000000000000009 [ 157.879125][ T8382] RBP: 00007fa30ee04090 R08: 0000000000000000 R09: 0000000000000000 [ 157.879136][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.879148][ T8382] R13: 00007fa30e226038 R14: 00007fa30e225fa0 R15: 00007ffc366c06b8 [ 157.879180][ T8382] [ 157.934155][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 157.934179][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 157.934191][ T8385] netlink: 'syz.0.660': attribute type 4 has an invalid length. [ 158.118801][ T8396] netlink: 3780 bytes leftover after parsing attributes in process `syz.0.664'. [ 158.127931][ T8359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.148802][ T8397] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 158.444304][ T8413] netlink: 'syz.0.667': attribute type 2 has an invalid length. [ 158.460593][ T8413] : entered promiscuous mode [ 158.645940][ T8423] geneve1: entered promiscuous mode [ 159.051837][ T8438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.269241][ T8440] macvlan2: entered promiscuous mode [ 159.269268][ T8440] macvlan2: entered allmulticast mode [ 162.581206][ T8483] xt_hashlimit: size too large, truncated to 1048576 [ 162.833436][ T8494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 163.347763][ T8514] __nla_validate_parse: 7 callbacks suppressed [ 163.347787][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 163.347805][ T8514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.688'. [ 163.347820][ T8514] validate_nla: 1 callbacks suppressed [ 163.347832][ T8514] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 163.383409][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 163.925968][ T8536] netlink: 'syz.3.692': attribute type 9 has an invalid length. [ 163.928093][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.692'. [ 164.265804][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 164.265940][ T8549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.290770][ T8549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.677859][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 164.677890][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'. [ 164.677905][ T8572] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 164.742752][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 165.032456][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.703'. [ 165.421837][ T8599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.707'. [ 165.432406][ T8607] netlink: 'syz.2.710': attribute type 6 has an invalid length. [ 165.463940][ T8607] netlink: 'syz.2.710': attribute type 6 has an invalid length. [ 165.478543][ T13] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 165.478591][ T13] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 165.478624][ T13] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 165.478657][ T13] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 165.942774][ T8627] netlink: 'syz.0.714': attribute type 4 has an invalid length. [ 166.562478][ T8661] IPVS: ip_vs_edit_dest(): server weight less than zero [ 166.708673][ T8659] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 166.995430][ T8687] netlink: 'syz.0.725': attribute type 4 has an invalid length. [ 167.774726][ T5621] Bluetooth: hci3: link tx timeout [ 167.774884][ T5621] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.373105][ T8753] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 168.373128][ T8753] __nla_validate_parse: 12 callbacks suppressed [ 168.373141][ T8753] netlink: 248 bytes leftover after parsing attributes in process `syz.3.733'. [ 168.723575][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.735'. [ 168.743879][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.736'. [ 168.743906][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.736'. [ 168.743920][ T8761] netlink: 'syz.4.736': attribute type 4 has an invalid length. [ 168.744808][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.744870][ T8769] tap0: linktype set to 778 [ 168.745063][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.745137][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.745192][ T8769] tap0: linktype set to 778 [ 168.745346][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.745420][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.745484][ T8769] tap0: linktype set to 778 [ 168.745673][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.745740][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.745793][ T8769] tap0: linktype set to 778 [ 168.745967][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746059][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746140][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746327][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746409][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746492][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746572][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746682][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746767][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746848][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.746944][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.749763][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.749853][ T8769] tap0: linktype set to 778 [ 168.750126][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.750177][ T8769] tap0: linktype set to 778 [ 168.750449][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.750499][ T8769] tap0: linktype set to 778 [ 168.750752][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.750803][ T8769] tap0: linktype set to 778 [ 168.751061][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.751111][ T8769] tap0: linktype set to 778 [ 168.758273][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 168.761893][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.761995][ T8769] tap0: linktype set to 778 [ 168.762301][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.762354][ T8769] tap0: linktype set to 778 [ 168.762601][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.762652][ T8769] tap0: linktype set to 778 [ 168.762887][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.762938][ T8769] tap0: linktype set to 778 [ 168.763174][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.763224][ T8769] tap0: linktype set to 778 [ 168.772431][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.772508][ T8769] tap0: linktype set to 778 [ 168.772863][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.772916][ T8769] tap0: linktype set to 778 [ 168.773155][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.773206][ T8769] tap0: linktype set to 778 [ 168.773484][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.773540][ T8769] tap0: linktype set to 778 [ 168.787305][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.787399][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.787485][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.787662][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.787742][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.787818][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.787894][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791188][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791307][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791383][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791467][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791542][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791642][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791716][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791792][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791866][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.791964][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.794963][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.795068][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.795143][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.795217][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.795292][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.796538][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.796624][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.796708][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.796789][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.796907][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.804907][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.805004][ T8769] tap0: linktype set to 778 [ 168.805288][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.805340][ T8769] tap0: linktype set to 778 [ 168.805657][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.805709][ T8769] tap0: linktype set to 778 [ 168.805947][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.805998][ T8769] tap0: linktype set to 778 [ 168.806256][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.806306][ T8769] tap0: linktype set to 778 [ 168.823575][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.823643][ T8769] tap0: linktype set to 778 [ 168.823891][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.823942][ T8769] tap0: linktype set to 778 [ 168.828610][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.828679][ T8769] tap0: linktype set to 778 [ 168.828969][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.839882][ T8769] tap0: linktype set to 778 [ 168.840267][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.840327][ T8769] tap0: linktype set to 778 [ 168.840584][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.840636][ T8769] tap0: linktype set to 778 [ 168.842487][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.842582][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.842659][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.842761][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.842837][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.842917][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.842993][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843154][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843231][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843306][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843380][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843486][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843562][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843637][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843711][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843811][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843885][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.843960][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.845018][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.845108][ T8769] tap0: linktype set to 778 [ 168.862709][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.862775][ T8769] tap0: linktype set to 778 [ 168.863022][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.863074][ T8769] tap0: linktype set to 778 [ 168.863310][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.863360][ T8769] tap0: linktype set to 778 [ 168.870624][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.870688][ T8769] tap0: linktype set to 778 [ 168.870930][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.870982][ T8769] tap0: linktype set to 778 [ 168.871218][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.873924][ T8769] tap0: linktype set to 778 [ 168.874166][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.874261][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.874357][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.874450][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.874526][ T8768] tap0: tun_chr_ioctl cmd 1074025673 [ 168.876361][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.877347][ T8769] tap0: linktype set to 778 [ 168.877746][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.877800][ T8769] tap0: linktype set to 778 [ 168.878042][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.878093][ T8769] tap0: linktype set to 778 [ 168.878331][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.878546][ T8769] tap0: linktype set to 778 [ 168.880939][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.891222][ T8769] tap0: linktype set to 778 [ 168.891580][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.891636][ T8769] tap0: linktype set to 778 [ 168.891876][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.892305][ T8769] tap0: linktype set to 778 [ 168.892568][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.892619][ T8769] tap0: linktype set to 778 [ 168.892851][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.892902][ T8769] tap0: linktype set to 778 [ 168.895504][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.895569][ T8769] tap0: linktype set to 778 [ 168.895814][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.895866][ T8769] tap0: linktype set to 778 [ 168.896129][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.896180][ T8769] tap0: linktype set to 778 [ 168.906378][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.906487][ T8769] tap0: linktype set to 778 [ 168.906780][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.906831][ T8769] tap0: linktype set to 778 [ 168.923883][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.923974][ T8769] tap0: linktype set to 778 [ 168.925475][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 168.925532][ T8769] tap0: linktype set to 778 [ 169.162977][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.163090][ T8769] tap0: linktype set to 778 [ 169.163404][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.163455][ T8769] tap0: linktype set to 778 [ 169.163741][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.163814][ T8769] tap0: linktype set to 778 [ 169.235125][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.235241][ T8769] tap0: linktype set to 778 [ 169.241041][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.241221][ T8769] tap0: linktype set to 778 [ 169.241511][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.241564][ T8769] tap0: linktype set to 778 [ 169.241836][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.241888][ T8769] tap0: linktype set to 778 [ 169.258487][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.258592][ T8769] tap0: linktype set to 778 [ 169.259527][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.259588][ T8769] tap0: linktype set to 778 [ 169.259839][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.263363][ T8769] tap0: linktype set to 778 [ 169.263686][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.263742][ T8769] tap0: linktype set to 778 [ 169.270612][ T8769] tap0: tun_chr_ioctl cmd 1074025677 [ 169.270680][ T8769] tap0: linktype set to 778 [ 169.822039][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 169.944505][ T8796] FAULT_INJECTION: forcing a failure. [ 169.944505][ T8796] name failslab, interval 1, probability 0, space 0, times 0 [ 169.944540][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.2.744 Not tainted syzkaller #0 PREEMPT(full) [ 169.944562][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.944574][ T8796] Call Trace: [ 169.944582][ T8796] [ 169.944591][ T8796] dump_stack_lvl+0xe8/0x150 [ 169.944626][ T8796] should_fail_ex+0x410/0x560 [ 169.944654][ T8796] should_failslab+0xa8/0x100 [ 169.944680][ T8796] __kvmalloc_node_noprof+0x176/0x820 [ 169.944705][ T8796] ? __rhashtable_init_noprof+0x545/0xaf0 [ 169.944726][ T8796] ? __rhashtable_init_noprof+0x545/0xaf0 [ 169.944756][ T8796] __rhashtable_init_noprof+0x545/0xaf0 [ 169.944782][ T8796] __rhltable_init_noprof+0x26/0x70 [ 169.944804][ T8796] nf_tables_newtable+0x6e0/0x1990 [ 169.944850][ T8796] nfnetlink_rcv+0x1288/0x28c0 [ 169.944942][ T8796] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 169.945021][ T8796] ? skb_clone+0x246/0x3a0 [ 169.945065][ T8796] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.945094][ T8796] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.945130][ T8796] netlink_unicast+0x7bd/0x940 [ 169.945170][ T8796] netlink_sendmsg+0x813/0xb40 [ 169.945201][ T8796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.945231][ T8796] ? apparmor_socket_sendmsg+0x98/0x360 [ 169.945261][ T8796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.945280][ T8796] sock_sendmsg_nosec+0x14e/0x190 [ 169.945313][ T8796] ____sys_sendmsg+0x54e/0x850 [ 169.945356][ T8796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.945392][ T8796] ? import_iovec+0x73/0xa0 [ 169.945421][ T8796] ___sys_sendmsg+0x2a5/0x360 [ 169.945446][ T8796] ? __lock_acquire+0x747/0x2de0 [ 169.945472][ T8796] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.945538][ T8796] ? __fget_files+0x2a/0x420 [ 169.945564][ T8796] ? __fget_files+0x3a2/0x420 [ 169.945600][ T8796] __x64_sys_sendmsg+0x1b1/0x290 [ 169.945630][ T8796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.945680][ T8796] do_syscall_64+0x166/0x520 [ 169.945707][ T8796] ? trace_irq_disable+0x3b/0x140 [ 169.945726][ T8796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.945747][ T8796] ? clear_bhb_loop+0x70/0xc0 [ 169.945770][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.945789][ T8796] RIP: 0033:0x7fe98d39e159 [ 169.945809][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.945825][ T8796] RSP: 002b:00007fe98e24a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.945847][ T8796] RAX: ffffffffffffffda RBX: 00007fe98d625fa0 RCX: 00007fe98d39e159 [ 169.945862][ T8796] RDX: 0000000000048082 RSI: 0000200000000080 RDI: 0000000000000009 [ 169.945874][ T8796] RBP: 00007fe98e24a090 R08: 0000000000000000 R09: 0000000000000000 [ 169.945886][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.945898][ T8796] R13: 00007fe98d626038 R14: 00007fe98d625fa0 R15: 00007ffd11061908 [ 169.945931][ T8796] [ 169.960840][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 170.562883][ T8815] netlink: 52 bytes leftover after parsing attributes in process `syz.3.749'. [ 170.562913][ T8815] netlink: 52 bytes leftover after parsing attributes in process `syz.3.749'. [ 170.562927][ T8815] netlink: 52 bytes leftover after parsing attributes in process `syz.3.749'. [ 170.650851][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.750'. [ 171.009396][ T8836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.011531][ T8832] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 171.392502][ T8853] openvswitch: netlink: Flow key attr not present in new flow. [ 171.393475][ T8853] openvswitch: netlink: Flow key attr not present in new flow. [ 171.728525][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 172.044581][ T8873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.056574][ T8873] bridge_slave_0: left allmulticast mode [ 172.056722][ T8873] bridge_slave_0: left promiscuous mode [ 172.057039][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.311279][ T8882] ovs-system: entered promiscuous mode [ 172.475756][ T8895] netlink: Invalid conntrack timeout [ 172.475792][ T8895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.532183][ T8897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.861737][ T8906] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 172.911517][ T8908] bond0: (slave bond_slave_0): Releasing backup interface [ 172.984813][ T8908] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 173.552235][ T8923] __nla_validate_parse: 8 callbacks suppressed [ 173.552260][ T8923] netlink: 56 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.579413][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.579702][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.579954][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.580840][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.581115][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.583287][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.583537][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.583788][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 173.584078][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 174.382052][ T8971] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.628267][ T8985] IPv6: Can't replace route, no match found [ 174.652945][ T8987] IPv6: Can't replace route, no match found [ 175.577726][ T9010] 8021q: VLANs not supported on ip6_vti0 [ 175.685709][ T9023] x_tables: duplicate underflow at hook 1 [ 176.590722][ T9052] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:21 [ 178.451390][ T9011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.653583][ T9059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 178.855895][ T91] IPVS: starting estimator thread 0... [ 178.947892][ T9069] IPVS: using max 29 ests per chain, 69600 per kthread [ 178.976469][ T9073] __nla_validate_parse: 11 callbacks suppressed [ 178.976492][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'. [ 179.011931][ T9073] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'. [ 179.045276][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.813'. [ 179.325058][ T9093] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 179.384818][ T9093] bond3: (slave geneve2): making interface the new active one [ 179.385482][ T9093] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 179.397588][ T6995] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.397632][ T6995] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.397677][ T6995] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.397704][ T6995] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 179.571481][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.636399][ T9107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.636447][ T9107] hsr0: left promiscuous mode [ 179.660787][ T9107] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 179.672723][ T9111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.822'. [ 179.939352][ T9122] netlink: 14 bytes leftover after parsing attributes in process `syz.0.826'. [ 180.170003][ T9127] netlink: 36 bytes leftover after parsing attributes in process `syz.3.827'. [ 180.255004][ T9132] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.696120][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.834'. [ 180.776905][ T9154] netlink: 'syz.1.836': attribute type 9 has an invalid length. [ 181.143938][ T9171] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 181.173075][ T9171] bond2: entered promiscuous mode [ 181.173145][ T9171] bond2: entered allmulticast mode [ 181.173699][ T9171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.190070][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.840'. [ 181.190438][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.840'. [ 181.190644][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.840'. [ 181.236679][ T9171] erspan1: entered allmulticast mode [ 181.248277][ T9171] bond2: (slave erspan1): making interface the new active one [ 181.248302][ T9171] erspan1: entered promiscuous mode [ 181.252782][ T9171] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 181.891503][ T9195] netlink: 'syz.1.846': attribute type 2 has an invalid length. [ 182.353968][ T9215] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.414080][ T9203] digital: digital_start_poll: Unknown protocol [ 183.062271][ T9239] syzkaller1: entered promiscuous mode [ 183.062296][ T9239] syzkaller1: entered allmulticast mode [ 183.493186][ T9259] netlink: 'syz.0.857': attribute type 178 has an invalid length. [ 183.852013][ T9279] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.974280][ T9282] ip_tables: iptables: counters copy to user failed while replacing table [ 184.195913][ T9295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.247927][ T9300] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 184.301694][ T9303] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 184.422133][ T9309] __nla_validate_parse: 70 callbacks suppressed [ 184.422158][ T9309] netlink: 136 bytes leftover after parsing attributes in process `syz.1.872'. [ 184.602635][ T9316] xt_hashlimit: size too large, truncated to 1048576 [ 184.603465][ T9316] xt_hashlimit: max too large, truncated to 1048576 [ 184.765633][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 185.073187][ T9328] netlink: 'syz.3.878': attribute type 10 has an invalid length. [ 185.083182][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.878'. [ 185.086432][ T9334] netlink: 196 bytes leftover after parsing attributes in process `syz.0.880'. [ 185.266314][ T9343] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 185.266339][ T9343] netlink: 224 bytes leftover after parsing attributes in process `syz.1.881'. [ 185.266354][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 185.331624][ T9342] netlink: 700 bytes leftover after parsing attributes in process `syz.3.884'. [ 185.565078][ T9360] netlink: 324 bytes leftover after parsing attributes in process `syz.3.891'. [ 185.642695][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.893'. [ 185.762805][ T9368] tipc: Enabling of bearer rejected, already enabled [ 185.763598][ T9368] tipc: Enabling of bearer rejected, failed to enable media [ 185.925516][ T9375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.897'. [ 186.350288][ T9402] IPVS: rr: UDP [::1]:8080 - no destination available [ 186.554195][ T9406] dvmrp1: entered allmulticast mode [ 187.167902][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 187.528249][ T9453] FAULT_INJECTION: forcing a failure. [ 187.528249][ T9453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.528284][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.4.915 Not tainted syzkaller #0 PREEMPT(full) [ 187.528306][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.528316][ T9453] Call Trace: [ 187.528324][ T9453] [ 187.528333][ T9453] dump_stack_lvl+0xe8/0x150 [ 187.528365][ T9453] should_fail_ex+0x410/0x560 [ 187.528394][ T9453] _copy_from_user+0x2d/0xb0 [ 187.528420][ T9453] copy_from_bpfptr+0x5c/0x90 [ 187.528444][ T9453] bpf_prog_load+0xcdb/0x1c20 [ 187.528478][ T9453] ? __pfx_bpf_prog_load+0x10/0x10 [ 187.528526][ T9453] __sys_bpf+0xd0d/0xd90 [ 187.528557][ T9453] ? __pfx___sys_bpf+0x10/0x10 [ 187.528591][ T9453] ? __fget_files+0x2a/0x420 [ 187.528635][ T9453] ? ksys_write+0x242/0x270 [ 187.528666][ T9453] ? __pfx_ksys_write+0x10/0x10 [ 187.528700][ T9453] __x64_sys_bpf+0xba/0xd0 [ 187.528722][ T9453] do_syscall_64+0x166/0x520 [ 187.528747][ T9453] ? trace_irq_disable+0x3b/0x140 [ 187.528766][ T9453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.528785][ T9453] ? clear_bhb_loop+0x70/0xc0 [ 187.528809][ T9453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.528837][ T9453] RIP: 0033:0x7f274a59e159 [ 187.528855][ T9453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.528869][ T9453] RSP: 002b:00007f274b3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.528891][ T9453] RAX: ffffffffffffffda RBX: 00007f274a825fa0 RCX: 00007f274a59e159 [ 187.528904][ T9453] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 187.528917][ T9453] RBP: 00007f274b3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 187.528929][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.528940][ T9453] R13: 00007f274a826038 R14: 00007f274a825fa0 R15: 00007ffc0bd97468 [ 187.528977][ T9453] [ 187.838848][ T9465] Bluetooth: hci0: unsupported parameter 5161 [ 187.838875][ T9465] Bluetooth: hci0: unsupported parameter 8192 [ 187.838887][ T9465] Bluetooth: hci0: unsupported parameter 5161 [ 187.838897][ T9465] Bluetooth: hci0: unsupported parameter 8192 [ 188.296246][ T9450] tipc: Enabling of bearer rejected, failed to enable media [ 188.802632][ T9498] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 188.802662][ T9498] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 188.981815][ T9505] team0: entered promiscuous mode [ 188.981841][ T9505] team_slave_0: entered promiscuous mode [ 188.982096][ T9505] team_slave_1: entered promiscuous mode [ 188.982324][ T9505] team0: entered allmulticast mode [ 188.982340][ T9505] team_slave_0: entered allmulticast mode [ 188.982355][ T9505] team_slave_1: entered allmulticast mode [ 188.982952][ T9505] team0: Cannot enslave team device to itself [ 188.997471][ T9505] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 189.144506][ T9505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.944918][ T9545] __nla_validate_parse: 5 callbacks suppressed [ 189.944939][ T9545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 190.525730][ T9568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.084610][ T9593] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.351320][ T9596] dvmrp1: left allmulticast mode [ 191.434947][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 191.457620][ T9609] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 191.666351][ T9618] ip_tables: iptables: counters copy to user failed while replacing table [ 191.681352][ T9618] batadv_slave_0: entered promiscuous mode [ 191.706519][ T9618] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 191.706547][ T9618] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 191.749048][ T9618] batadv_slave_0: left promiscuous mode [ 191.817434][ T9620] xt_CT: No such helper "netbios-ns" [ 191.975692][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'. [ 192.044852][ T9638] bond5: option resend_igmp: invalid value (2878) [ 192.044880][ T9638] bond5: option resend_igmp: allowed values 0 - 255 [ 192.049139][ T9638] bond5 (unregistering): Released all slaves [ 192.102846][ T9640] syzkaller0: entered promiscuous mode [ 192.102872][ T9640] syzkaller0: entered allmulticast mode [ 192.164731][ T9636] syzkaller0: left promiscuous mode [ 192.164756][ T9636] syzkaller0: left allmulticast mode [ 192.289271][ T9649] ovs-system: entered promiscuous mode [ 192.413785][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'. [ 192.431030][ T9652] veth1_to_team: entered promiscuous mode [ 192.432464][ T9652] veth0_to_team: entered promiscuous mode [ 192.433497][ T9652] debugfs: 'hsr0' already exists in 'hsr' [ 192.433519][ T9652] Cannot create hsr debugfs directory [ 192.433582][ T9652] hsr0: entered promiscuous mode [ 192.450698][ T30] audit: type=1804 audit(1790933111.776:5): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.960" name="/newroot/196/cgroup.controllers" dev="tmpfs" ino=1021 res=1 errno=0 [ 192.450754][ T30] audit: type=1800 audit(1790933111.776:6): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.960" name="cgroup.controllers" dev="tmpfs" ino=1021 res=0 errno=0 [ 192.696312][ T9660] ip_tables: iptables: counters copy to user failed while replacing table [ 192.700502][ T9661] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 193.229871][ T9682] sctp: [Deprecated]: syz.2.970 (pid 9682) Use of int in maxseg socket option. [ 193.229871][ T9682] Use struct sctp_assoc_value instead [ 193.278589][ T9684] netlink: 260 bytes leftover after parsing attributes in process `syz.4.971'. [ 193.612041][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 193.612069][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 193.612387][ T9692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.651443][ T9698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.680284][ T9700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.684559][ T9700] bond5: (slave bond0): making interface the new active one [ 193.686329][ T9700] bond5: (slave bond0): Enslaving as an active interface with an up link [ 193.814832][ T9692] netlink: 'syz.3.975': attribute type 2 has an invalid length. [ 193.814859][ T9692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'. [ 194.001678][ T9692] : entered promiscuous mode [ 194.165851][ T9718] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 194.246909][ T9721] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 194.331980][ T9718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.341174][ T9718] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 194.345534][ T9718] team0: Port device netdevsim1 added [ 194.366702][ T9721] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 194.414145][ T9721] team0: Port device netdevsim1 removed [ 194.436497][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.454668][ T9721] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 194.529168][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 194.739873][ T9744] netlink: 67 bytes leftover after parsing attributes in process `syz.0.984'. [ 195.146515][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 195.146545][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 195.157810][ T9765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.990'. [ 195.823441][ T9796] netlink: 48 bytes leftover after parsing attributes in process `syz.4.997'. [ 195.952063][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.999'. [ 196.023562][ T9808] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 196.083635][ T9807] ip_tables: iptables: counters copy to user failed while replacing table [ 196.112440][ T9808] netlink: 56 bytes leftover after parsing attributes in process `syz.2.999'. [ 196.320161][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 196.320414][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 196.320653][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 196.320898][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 196.416903][ T9823] pimreg: entered allmulticast mode [ 196.438904][ T9818] pimreg: left allmulticast mode [ 196.657103][ T9836] x_tables: duplicate entry at hook 1 [ 196.864225][ T9843] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 197.100758][ T9856] netlink: 'syz.3.1012': attribute type 2 has an invalid length. [ 197.235979][ T9861] xt_hashlimit: size too large, truncated to 1048576 [ 197.806058][ T9885] macsec0: entered promiscuous mode [ 197.820087][ T9887] macsec0 (unregistering): left promiscuous mode [ 197.883793][ T9883] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”à�I�ƺ¥þ àø§% [ 198.447538][ T9919] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 199.574668][ T9940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.637990][ T9938] lo speed is unknown, defaulting to 1000 [ 199.749671][ T9943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.752557][ T9943] bond4: entered allmulticast mode [ 199.755208][ T9943] team0: Port device bond4 added [ 199.841189][ T9944] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.843088][ T9944] bond5: entered allmulticast mode [ 199.845576][ T9944] team0: Port device bond5 added [ 200.161298][ T9970] __nla_validate_parse: 40 callbacks suppressed [ 200.161321][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1046'. [ 200.161340][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1046'. [ 201.967191][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 201.967289][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 201.967330][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 202.757520][ T9956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.761088][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 203.016932][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 203.098724][ T9992] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1052'. [ 203.098749][ T9992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'. [ 203.190821][ T9992] tipc: Enabling of bearer rejected, already enabled [ 203.351900][T10015] ip6gretap0: entered allmulticast mode [ 203.354478][T10015] batman_adv: batadv0: Adding interface: ip6gretap0 [ 203.354498][T10015] batman_adv: batadv0: The MTU of interface ip6gretap0 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.354528][T10015] batman_adv: batadv0: Interface activated: ip6gretap0 [ 203.510240][T10018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.728453][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 204.163572][T10052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1065'. [ 204.214277][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'. [ 205.164314][T10083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 205.443823][T10094] netlink: 'syz.2.1072': attribute type 25 has an invalid length. [ 205.443850][T10094] netlink: 'syz.2.1072': attribute type 3 has an invalid length. [ 205.443862][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1072'. [ 205.524511][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 205.544953][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1077'. [ 205.812514][T10110] ip_tables: iptables: counters copy to user failed while replacing table [ 205.814739][T10110] ip_tables: iptables: counters copy to user failed while replacing table [ 206.041652][T10118] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1082'. [ 206.071674][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1083'. [ 206.105337][T10121] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 206.245109][T10123] netlink: 'syz.2.1086': attribute type 2 has an invalid length. [ 206.245133][T10123] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1086'. [ 206.335940][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'. [ 206.496096][T10138] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 206.501579][T10138] netlink: 'syz.2.1091': attribute type 29 has an invalid length. [ 206.501599][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 206.502729][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 206.502746][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 206.996109][T10182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.000968][T10171] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 207.013389][T10171] bond4 (unregistering): Released all slaves [ 207.725690][T10220] xt_esp: unknown flags DD [ 207.895773][T10226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.004520][T10229] xt_CT: No such helper "snmp_trap" [ 208.282738][T10238] gretap0: entered promiscuous mode [ 209.592174][T10299] tipc: Can't bind to reserved service type 2 [ 209.930349][T10311] openvswitch: netlink: Flow actions attr not present in new flow. [ 210.039177][T10319] syzkaller0: entered promiscuous mode [ 210.039208][T10319] syzkaller0: entered allmulticast mode [ 210.221539][T10329] bridge1: entered promiscuous mode [ 210.221566][T10329] bridge1: entered allmulticast mode [ 210.225390][T10329] team0: Port device bridge1 added [ 210.532475][T10329] bridge0: port 1(team0) entered blocking state [ 210.532687][T10329] bridge0: port 1(team0) entered disabled state [ 210.552084][T10329] team0: entered promiscuous mode [ 210.552107][T10329] team_slave_0: entered promiscuous mode [ 210.552299][T10329] team_slave_1: entered promiscuous mode [ 210.552455][T10329] bond1: entered promiscuous mode [ 210.565956][T10329] bond4: entered promiscuous mode [ 210.566203][T10329] bond5: entered promiscuous mode [ 210.828663][T10321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.930273][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.930454][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.930644][T10355] bridge_slave_0: entered allmulticast mode [ 210.972893][T10355] bridge_slave_0: entered promiscuous mode [ 210.974858][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.974982][T10355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.001786][T10358] bridge_slave_0: left allmulticast mode [ 211.001815][T10358] bridge_slave_0: left promiscuous mode [ 211.002056][T10358] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.091568][T10361] bridge_slave_1: left allmulticast mode [ 211.091597][T10361] bridge_slave_1: left promiscuous mode [ 211.092016][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.398779][T10388] __nla_validate_parse: 16 callbacks suppressed [ 211.398807][T10388] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1146'. [ 211.802412][T10407] netlink: 'syz.3.1151': attribute type 2 has an invalid length. [ 211.950802][T10409] netlink: 5396 bytes leftover after parsing attributes in process `syz.3.1151'. [ 211.950832][T10409] openvswitch: netlink: Flow key attr not present in new flow. [ 212.450775][T10416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1153'. [ 212.476528][T10423] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 212.501879][T10412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.559353][T10423] team0 (unregistering): Port device team_slave_0 removed [ 212.686363][T10423] team0 (unregistering): Port device team_slave_1 removed [ 212.751504][T10424] netlink: 988 bytes leftover after parsing attributes in process `syz.0.1155'. [ 212.858136][ T6999] IPVS: starting estimator thread 0... [ 212.861316][T10442] IPVS: Error connecting to the multicast addr [ 212.941943][T10445] netlink: 'syz.2.1159': attribute type 27 has an invalid length. [ 212.942362][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 212.942362][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 212.947235][T10443] IPVS: using max 26 ests per chain, 62400 per kthread [ 213.053383][T10449] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 213.151887][T10457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1161'. [ 213.334494][T10468] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1163'. [ 213.335470][T10468] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 213.409734][T10472] IPVS: length: 124 != 8 [ 213.465255][T10474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 213.723259][T10484] bridge2: entered allmulticast mode [ 213.794985][T10490] IPVS: length: 4096 != 24 [ 213.984166][T10498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 214.328686][T10514] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 214.466223][T10514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.506107][T10514] bond3: (slave bond4): making interface the new active one [ 214.535015][T10514] bond3: (slave bond4): Enslaving as an active interface with an up link [ 214.550060][T10518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.000840][T10535] veth5: entered allmulticast mode [ 215.193370][T10539] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 215.213562][T10539] bond4 (unregistering): Released all slaves [ 215.663789][T10566] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 215.774052][T10573] FAULT_INJECTION: forcing a failure. [ 215.774052][T10573] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 215.774090][T10573] CPU: 0 UID: 0 PID: 10573 Comm: syz.4.1188 Not tainted syzkaller #0 PREEMPT(full) [ 215.774113][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.774124][T10573] Call Trace: [ 215.774133][T10573] [ 215.774142][T10573] dump_stack_lvl+0xe8/0x150 [ 215.774176][T10573] should_fail_ex+0x410/0x560 [ 215.774205][T10573] prepare_alloc_pages+0x223/0x600 [ 215.774232][T10573] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 215.774258][T10573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 215.774278][T10573] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 215.774303][T10573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 215.774329][T10573] ? __pfx_policy_nodemask+0x10/0x10 [ 215.774352][T10573] ? __get_vm_area_node+0x155/0x2f0 [ 215.774378][T10573] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 215.774405][T10573] ? __vmalloc_noprof+0xd2/0x120 [ 215.774434][T10573] __alloc_pages_noprof+0x10/0x100 [ 215.774456][T10573] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 215.774496][T10573] ? alloc_pages_noprof+0x140/0x2b0 [ 215.774525][T10573] __kasan_populate_vmalloc+0xb7/0x1c0 [ 215.774569][T10573] alloc_vmap_area+0xd1a/0x1420 [ 215.774613][T10573] ? __pfx_alloc_vmap_area+0x10/0x10 [ 215.774634][T10573] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 215.774653][T10573] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 215.774672][T10573] ? __get_vm_area_node+0x155/0x2f0 [ 215.774699][T10573] __get_vm_area_node+0x200/0x2f0 [ 215.774730][T10573] __vmalloc_node_range_noprof+0x343/0x1540 [ 215.774757][T10573] ? bpf_prog_calc_tag+0x51/0x370 [ 215.774781][T10573] ? __x64_sys_bpf+0xba/0xd0 [ 215.774799][T10573] ? do_syscall_64+0x166/0x520 [ 215.774830][T10573] ? __kasan_kmalloc+0x93/0xb0 [ 215.774851][T10573] ? bpf_prog_load+0x14d6/0x1c20 [ 215.774872][T10573] ? __sys_bpf+0xd0d/0xd90 [ 215.774890][T10573] ? __x64_sys_bpf+0xba/0xd0 [ 215.774922][T10573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.774962][T10573] ? bpf_prog_calc_tag+0x51/0x370 [ 215.774981][T10573] __vmalloc_noprof+0xd2/0x120 [ 215.775008][T10573] ? bpf_prog_calc_tag+0x51/0x370 [ 215.775033][T10573] bpf_prog_calc_tag+0x51/0x370 [ 215.775055][T10573] ? __pfx_cmp_subprogs+0x10/0x10 [ 215.775082][T10573] check_and_resolve_insns+0xbb/0x21d0 [ 215.775109][T10573] ? add_subprog+0x2e2/0x3f0 [ 215.775134][T10573] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 215.775168][T10573] bpf_check+0x18f9/0x2ef0 [ 215.775208][T10573] ? __pfx_bpf_check+0x10/0x10 [ 215.775232][T10573] ? bpf_obj_name_cpy+0x194/0x1e0 [ 215.775263][T10573] bpf_prog_load+0x14d6/0x1c20 [ 215.775299][T10573] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.775349][T10573] __sys_bpf+0xd0d/0xd90 [ 215.775380][T10573] ? __pfx___sys_bpf+0x10/0x10 [ 215.775414][T10573] ? __fget_files+0x2a/0x420 [ 215.775460][T10573] ? ksys_write+0x242/0x270 [ 215.775500][T10573] ? __pfx_ksys_write+0x10/0x10 [ 215.775534][T10573] __x64_sys_bpf+0xba/0xd0 [ 215.775557][T10573] do_syscall_64+0x166/0x520 [ 215.775581][T10573] ? trace_irq_disable+0x3b/0x140 [ 215.775600][T10573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.775620][T10573] ? clear_bhb_loop+0x70/0xc0 [ 215.775644][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.775664][T10573] RIP: 0033:0x7f274a59e159 [ 215.775683][T10573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.775700][T10573] RSP: 002b:00007f274b3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.775722][T10573] RAX: ffffffffffffffda RBX: 00007f274a825fa0 RCX: 00007f274a59e159 [ 215.775736][T10573] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 215.775749][T10573] RBP: 00007f274b3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 215.775760][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.775770][T10573] R13: 00007f274a826038 R14: 00007f274a825fa0 R15: 00007ffc0bd97468 [ 215.775801][T10573] [ 215.931502][T10573] syz.4.1188: vmalloc error: size 120, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.931637][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.4.1188 Not tainted syzkaller #0 PREEMPT(full) [ 215.931659][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.931670][T10573] Call Trace: [ 215.931677][T10573] [ 215.931685][T10573] dump_stack_lvl+0xe8/0x150 [ 215.931715][T10573] warn_alloc+0x24d/0x270 [ 215.931742][T10573] ? lockdep_hardirqs_on+0x7b/0x110 [ 215.931768][T10573] ? __pfx_warn_alloc+0x10/0x10 [ 215.931792][T10573] ? kfree+0x1c5/0x650 [ 215.931822][T10573] ? __get_vm_area_node+0x219/0x2f0 [ 215.931854][T10573] __vmalloc_node_range_noprof+0x36b/0x1540 [ 215.931880][T10573] ? __x64_sys_bpf+0xba/0xd0 [ 215.931895][T10573] ? do_syscall_64+0x166/0x520 [ 215.931926][T10573] ? __kasan_kmalloc+0x93/0xb0 [ 215.931945][T10573] ? bpf_prog_load+0x14d6/0x1c20 [ 215.931962][T10573] ? __sys_bpf+0xd0d/0xd90 [ 215.931988][T10573] ? __x64_sys_bpf+0xba/0xd0 [ 215.932016][T10573] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.932051][T10573] ? bpf_prog_calc_tag+0x51/0x370 [ 215.932069][T10573] __vmalloc_noprof+0xd2/0x120 [ 215.932093][T10573] ? bpf_prog_calc_tag+0x51/0x370 [ 215.932114][T10573] bpf_prog_calc_tag+0x51/0x370 [ 215.932132][T10573] ? __pfx_cmp_subprogs+0x10/0x10 [ 215.932155][T10573] check_and_resolve_insns+0xbb/0x21d0 [ 215.932179][T10573] ? add_subprog+0x2e2/0x3f0 [ 215.932200][T10573] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 215.932230][T10573] bpf_check+0x18f9/0x2ef0 [ 215.932264][T10573] ? __pfx_bpf_check+0x10/0x10 [ 215.932285][T10573] ? bpf_obj_name_cpy+0x194/0x1e0 [ 215.932312][T10573] bpf_prog_load+0x14d6/0x1c20 [ 215.932343][T10573] ? __pfx_bpf_prog_load+0x10/0x10 [ 215.932386][T10573] __sys_bpf+0xd0d/0xd90 [ 215.932412][T10573] ? __pfx___sys_bpf+0x10/0x10 [ 215.932441][T10573] ? __fget_files+0x2a/0x420 [ 215.932480][T10573] ? ksys_write+0x242/0x270 [ 215.932506][T10573] ? __pfx_ksys_write+0x10/0x10 [ 215.932535][T10573] __x64_sys_bpf+0xba/0xd0 [ 215.932554][T10573] do_syscall_64+0x166/0x520 [ 215.932575][T10573] ? trace_irq_disable+0x3b/0x140 [ 215.932591][T10573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.932610][T10573] ? clear_bhb_loop+0x70/0xc0 [ 215.932631][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.932649][T10573] RIP: 0033:0x7f274a59e159 [ 215.932666][T10573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.932681][T10573] RSP: 002b:00007f274b3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.932700][T10573] RAX: ffffffffffffffda RBX: 00007f274a825fa0 RCX: 00007f274a59e159 [ 215.932712][T10573] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 215.932724][T10573] RBP: 00007f274b3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 215.932735][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.932745][T10573] R13: 00007f274a826038 R14: 00007f274a825fa0 R15: 00007ffc0bd97468 [ 215.932774][T10573] [ 215.948278][T10573] Mem-Info: [ 215.948293][T10573] active_anon:6474 inactive_anon:0 isolated_anon:0 [ 215.948293][T10573] active_file:0 inactive_file:43222 isolated_file:0 [ 215.948293][T10573] unevictable:3031 dirty:152 writeback:0 [ 215.948293][T10573] slab_reclaimable:11217 slab_unreclaimable:103079 [ 215.948293][T10573] mapped:36571 shmem:3632 pagetables:1185 [ 215.948293][T10573] sec_pagetables:0 bounce:0 [ 215.948293][T10573] kernel_misc_reclaimable:0 [ 215.948293][T10573] free:1264119 free_pcp:9383 free_cma:0 [ 215.948338][T10573] Node 0 active_anon:25896kB inactive_anon:0kB active_file:0kB inactive_file:172696kB unevictable:12124kB isolated(anon):0kB isolated(file):0kB mapped:146284kB dirty:604kB writeback:0kB shmem:14528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12996kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.948384][T10573] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 215.948427][T10573] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.948477][T10573] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 215.948510][T10573] Node 0 DMA32 free:1102756kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25896kB inactive_anon:0kB active_file:0kB inactive_file:172696kB unevictable:12124kB writepending:604kB zspages:0kB present:3129332kB managed:2547148kB mlocked:12128kB bounce:0kB free_pcp:37532kB local_pcp:27956kB free_cma:0kB [ 215.948561][T10573] lowmem_reserve[]: 0 0 0 0 0 [ 215.948591][T10573] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.948636][T10573] lowmem_reserve[]: 0 0 0 0 0 [ 215.948667][T10573] Node 1 Normal free:3938360kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.948713][T10573] lowmem_reserve[]: 0 0 0 0 0 [ 215.948744][T10573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.948847][T10573] Node 0 DMA32: 831*4kB (UE) 283*8kB (U) 1*16kB (U) 192*32kB (UME) 148*64kB (UME) 103*128kB (UME) 35*256kB (UM) 9*512kB (UME) 4*1024kB (U) 11*2048kB (UME) 251*4096kB (UM) = 1102692kB [ 215.949015][T10573] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.949117][T10573] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 4*16kB (UM) 7*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938360kB [ 215.949255][T10573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.949269][T10573] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.949283][T10573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.949297][T10573] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.949310][T10573] 46850 total pagecache pages [ 215.955422][T10573] 0 pages in swap cache [ 215.955434][T10573] Free swap = 124996kB [ 215.955442][T10573] Total swap = 124996kB [ 215.955452][T10573] 2097051 pages RAM [ 215.955458][T10573] 0 pages HighMem/MovableOnly [ 215.955465][T10573] 428648 pages reserved [ 215.955471][T10573] 0 pages cma reserved [ 216.990974][T10601] __nla_validate_parse: 7 callbacks suppressed [ 216.990995][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 216.992841][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1195'. [ 216.997077][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 216.997114][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 217.234286][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 217.613094][T10629] netlink: 13183 bytes leftover after parsing attributes in process `syz.3.1199'. [ 218.182682][T10671] sit0: entered promiscuous mode [ 218.220006][T10671] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1208'. [ 220.266455][T10612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.555972][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'. [ 220.606517][T10702] netlink: 'syz.2.1220': attribute type 10 has an invalid length. [ 220.606799][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.607435][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.633522][T10702] bridge0: left promiscuous mode [ 220.633551][T10702] bridge0: left allmulticast mode [ 220.635401][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 220.668167][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.668326][T10702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.668677][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.668930][T10702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.692303][T10702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.895513][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'. [ 220.941900][T10724] netlink: 'syz.3.1225': attribute type 3 has an invalid length. [ 221.001501][T10727] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 221.273992][T10730] ip_tables: iptables: counters copy to user failed while replacing table [ 221.346672][T10732] ip_tables: iptables: counters copy to user failed while replacing table [ 221.614391][T10708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.133160][T10745] tipc: Enabling of bearer rejected, already enabled [ 222.198379][T10740] __nla_validate_parse: 2 callbacks suppressed [ 222.198403][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 222.198424][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 222.218218][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 222.218246][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 222.218500][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 222.218516][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 222.674044][T10772] netlink: 'syz.3.1235': attribute type 4 has an invalid length. [ 222.674467][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1235'. [ 222.752604][T10771] syzkaller1: entered promiscuous mode [ 222.752631][T10771] syzkaller1: entered allmulticast mode [ 223.150465][T10794] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1244'. [ 223.153577][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 223.281653][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 223.374380][T10804] netlink: 'syz.3.1247': attribute type 4 has an invalid length. [ 223.745618][T10826] x_tables: duplicate underflow at hook 1 [ 224.005166][T10841] netlink: 'syz.0.1256': attribute type 1 has an invalid length. [ 224.130145][T10841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.154692][T10853] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 224.313990][T10855] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 224.400927][ T42] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 224.424574][T10859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.551690][ T42] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 224.884816][T10886] syzkaller0: entered promiscuous mode [ 224.884842][T10886] syzkaller0: entered allmulticast mode [ 225.359033][T10909] netlink: 'syz.0.1265': attribute type 23 has an invalid length. [ 225.359061][T10909] netlink: 'syz.0.1265': attribute type 9 has an invalid length. [ 225.460722][T10909] bridge3: entered promiscuous mode [ 225.962369][T10930] pim6reg: entered allmulticast mode [ 226.532227][T10928] pim6reg: left allmulticast mode [ 227.624935][T10990] __nla_validate_parse: 15 callbacks suppressed [ 227.624961][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 228.246844][T11023] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 228.284671][T11024] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 228.487225][T11033] ip6t_srh: unknown srh match flags 4000 [ 228.604211][T11029] bond6: option min_links: invalid value (18446744073709551612) [ 228.604236][T11029] bond6: option min_links: allowed values 0 - 2147483647 [ 228.654722][T11029] bond6 (unregistering): Released all slaves [ 228.746050][T11044] netlink: 'syz.2.1298': attribute type 1 has an invalid length. [ 229.060336][ T30] audit: type=1800 audit(1790933148.386:7): pid=11060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1301" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1383 res=0 errno=0 [ 229.523788][T11076] syzkaller0: entered promiscuous mode [ 229.523813][T11076] syzkaller0: entered allmulticast mode [ 229.954424][T11082] dvmrp16: entered allmulticast mode [ 230.369396][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 230.369424][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 230.369447][T11093] netlink: 'syz.4.1308': attribute type 12 has an invalid length. [ 230.369461][T11093] netlink: 'syz.4.1308': attribute type 14 has an invalid length. [ 230.516096][T11093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1308'. [ 230.611776][T11104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1310'. [ 230.903368][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 230.903402][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1312'. [ 230.925621][T11114] netlink: 'syz.1.1312': attribute type 5 has an invalid length. [ 231.314668][T11133] rdma_op ffff88802a5eba38 conn xmit_rdma 0000000000000000 [ 231.908083][T11152] sit1: entered promiscuous mode [ 232.557693][T11167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1322'. [ 232.711748][T11173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 232.711773][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1324'. [ 232.804546][T11169] bond6: (slave team0): Device is not bonding slave [ 232.804573][T11169] bond6: option active_slave: invalid value (team0) [ 232.827767][T11169] bond6 (unregistering): Released all slaves [ 232.966591][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 232.983591][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1326'. [ 232.983619][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1326'. [ 232.983635][T11182] netlink: 'syz.1.1326': attribute type 4 has an invalid length. [ 233.647083][ T5636] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 234.823794][T11237] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 234.823822][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 234.996152][T11248] netlink: 'syz.2.1346': attribute type 23 has an invalid length. [ 237.393491][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 237.835146][T11323] nbd1: detected capacity change from 0 to 63 [ 237.838030][ T5636] block nbd1: Receive control failed (result -32) [ 237.841586][ T1971] block nbd1: Dead connection, failed to find a fallback [ 237.841610][ T1971] block nbd1: shutting down sockets [ 237.841672][ T1971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.841752][ T1971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 237.844238][ T1971] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.844275][ T1971] Buffer I/O error on dev nbd1, logical block 1, async page read [ 237.844410][ T1971] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.844442][ T1971] Buffer I/O error on dev nbd1, logical block 2, async page read [ 237.844569][ T1971] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.844595][ T1971] Buffer I/O error on dev nbd1, logical block 3, async page read [ 237.845066][ T1971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.845092][ T1971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 237.845186][ T1971] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.845208][ T1971] Buffer I/O error on dev nbd1, logical block 1, async page read [ 237.846372][ T1971] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.846396][ T1971] Buffer I/O error on dev nbd1, logical block 2, async page read [ 237.846492][ T1971] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.846514][ T1971] Buffer I/O error on dev nbd1, logical block 3, async page read [ 237.846624][ T1971] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.846646][ T1971] Buffer I/O error on dev nbd1, logical block 0, async page read [ 237.846763][ T1971] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.846785][ T1971] Buffer I/O error on dev nbd1, logical block 1, async page read [ 237.853173][T11074] ldm_validate_partition_table(): Disk read failed. [ 237.865401][T11074] Dev nbd1: unable to read RDB block 0 [ 237.869788][T11074] nbd1: unable to read partition table [ 237.894333][T11074] ldm_validate_partition_table(): Disk read failed. [ 237.895800][T11074] Dev nbd1: unable to read RDB block 0 [ 237.898043][T11074] nbd1: unable to read partition table [ 237.952472][T11074] ldm_validate_partition_table(): Disk read failed. [ 237.955395][T11074] Dev nbd1: unable to read RDB block 0 [ 237.966733][T11074] nbd1: unable to read partition table [ 238.007401][T11074] ldm_validate_partition_table(): Disk read failed. [ 238.011156][T11074] Dev nbd1: unable to read RDB block 0 [ 238.020406][T11074] nbd1: unable to read partition table [ 238.029521][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1368'. [ 238.074828][T11330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 238.212693][T11332] bond0: (slave bridge0): Releasing backup interface [ 238.250807][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.251053][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.306161][T11332] bridge_slave_0: left allmulticast mode [ 238.306191][T11332] bridge_slave_0: left promiscuous mode [ 238.306436][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.355541][T11332] bridge_slave_1: left allmulticast mode [ 238.355576][T11332] bridge_slave_1: left promiscuous mode [ 238.355836][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.384126][T11332] bond0: (slave bond_slave_0): Releasing backup interface [ 238.416154][T11332] bond0: (slave bond_slave_1): Releasing backup interface [ 238.450293][T11332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.450323][T11332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.459673][T11332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.459699][T11332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.466538][T11332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.578423][T11340] bond6 (unregistering): Released all slaves [ 238.999113][T11359] netlink: 'syz.4.1377': attribute type 4 has an invalid length. [ 239.066549][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 239.068312][T11362] 8021q: VLANs not supported on ip6_vti0 [ 239.122153][T11365] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1380'. [ 239.123553][T11362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1378'. [ 239.165052][T11362] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1378'. [ 239.200774][T11371] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1380'. [ 239.216354][T11370] FAULT_INJECTION: forcing a failure. [ 239.216354][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 239.216391][T11370] CPU: 0 UID: 0 PID: 11370 Comm: syz.3.1381 Not tainted syzkaller #0 PREEMPT(full) [ 239.216411][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.216422][T11370] Call Trace: [ 239.216430][T11370] [ 239.216437][T11370] dump_stack_lvl+0xe8/0x150 [ 239.216467][T11370] should_fail_ex+0x410/0x560 [ 239.216493][T11370] should_failslab+0xa8/0x100 [ 239.216516][T11370] __kvmalloc_node_noprof+0x176/0x820 [ 239.216538][T11370] ? __kvmalloc_node_noprof+0x345/0x820 [ 239.216556][T11370] ? sort_subprogs_topo+0xf5/0xf20 [ 239.216574][T11370] ? sort_subprogs_topo+0xf5/0xf20 [ 239.216600][T11370] sort_subprogs_topo+0xf5/0xf20 [ 239.216620][T11370] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 239.216658][T11370] bpf_check+0x26fa/0x2ef0 [ 239.216694][T11370] ? __pfx_bpf_check+0x10/0x10 [ 239.216715][T11370] ? bpf_obj_name_cpy+0x194/0x1e0 [ 239.216742][T11370] bpf_prog_load+0x14d6/0x1c20 [ 239.216782][T11370] ? __pfx_bpf_prog_load+0x10/0x10 [ 239.216826][T11370] __sys_bpf+0xd0d/0xd90 [ 239.216853][T11370] ? __pfx___sys_bpf+0x10/0x10 [ 239.216883][T11370] ? __fget_files+0x2a/0x420 [ 239.216923][T11370] ? ksys_write+0x242/0x270 [ 239.216950][T11370] ? __pfx_ksys_write+0x10/0x10 [ 239.216980][T11370] __x64_sys_bpf+0xba/0xd0 [ 239.217001][T11370] do_syscall_64+0x166/0x520 [ 239.217024][T11370] ? trace_irq_disable+0x3b/0x140 [ 239.217041][T11370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.217059][T11370] ? clear_bhb_loop+0x70/0xc0 [ 239.217081][T11370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.217098][T11370] RIP: 0033:0x7f9dee99e159 [ 239.217116][T11370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.217131][T11370] RSP: 002b:00007f9def858028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.217151][T11370] RAX: ffffffffffffffda RBX: 00007f9deec25fa0 RCX: 00007f9dee99e159 [ 239.217165][T11370] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 239.217177][T11370] RBP: 00007f9def858090 R08: 0000000000000000 R09: 0000000000000000 [ 239.217188][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.217199][T11370] R13: 00007f9deec26038 R14: 00007f9deec25fa0 R15: 00007ffcb3975f48 [ 239.217229][T11370] [ 239.218852][T11365] ip6gre1: entered allmulticast mode [ 239.495483][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1383'. [ 239.499858][T11381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'. [ 239.500426][T11376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 239.500447][T11376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1384'. [ 239.500461][T11376] netlink: 'syz.0.1384': attribute type 4 has an invalid length. [ 239.891703][T11397] bridge0: port 1(team0) entered blocking state [ 239.891838][T11397] bridge0: port 1(team0) entered forwarding state [ 239.892114][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.056602][T11412] veth3: entered allmulticast mode [ 240.150631][T11419] FAULT_INJECTION: forcing a failure. [ 240.150631][T11419] name failslab, interval 1, probability 0, space 0, times 0 [ 240.150669][T11419] CPU: 1 UID: 0 PID: 11419 Comm: syz.0.1395 Not tainted syzkaller #0 PREEMPT(full) [ 240.150692][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.150704][T11419] Call Trace: [ 240.150713][T11419] [ 240.150722][T11419] dump_stack_lvl+0xe8/0x150 [ 240.150756][T11419] should_fail_ex+0x410/0x560 [ 240.150784][T11419] should_failslab+0xa8/0x100 [ 240.150818][T11419] __kvmalloc_node_noprof+0x176/0x820 [ 240.150845][T11419] ? bpf_compute_scc+0xb8/0xb10 [ 240.150874][T11419] ? bpf_compute_scc+0xb8/0xb10 [ 240.150910][T11419] bpf_compute_scc+0xb8/0xb10 [ 240.150961][T11419] bpf_check+0x2720/0x2ef0 [ 240.151002][T11419] ? __pfx_bpf_check+0x10/0x10 [ 240.151028][T11419] ? bpf_obj_name_cpy+0x194/0x1e0 [ 240.151058][T11419] bpf_prog_load+0x14d6/0x1c20 [ 240.151092][T11419] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.151140][T11419] __sys_bpf+0xd0d/0xd90 [ 240.151171][T11419] ? __pfx___sys_bpf+0x10/0x10 [ 240.151203][T11419] ? __fget_files+0x2a/0x420 [ 240.151248][T11419] ? ksys_write+0x242/0x270 [ 240.151278][T11419] ? __pfx_ksys_write+0x10/0x10 [ 240.151311][T11419] __x64_sys_bpf+0xba/0xd0 [ 240.151333][T11419] do_syscall_64+0x166/0x520 [ 240.151356][T11419] ? trace_irq_disable+0x3b/0x140 [ 240.151374][T11419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.151394][T11419] ? clear_bhb_loop+0x70/0xc0 [ 240.151416][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.151435][T11419] RIP: 0033:0x7f1fa599e159 [ 240.151455][T11419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.151472][T11419] RSP: 002b:00007f1fa6838028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.151495][T11419] RAX: ffffffffffffffda RBX: 00007f1fa5c25fa0 RCX: 00007f1fa599e159 [ 240.151509][T11419] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 240.151523][T11419] RBP: 00007f1fa6838090 R08: 0000000000000000 R09: 0000000000000000 [ 240.151536][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.151547][T11419] R13: 00007f1fa5c26038 R14: 00007f1fa5c25fa0 R15: 00007ffe731bcab8 [ 240.151577][T11419] [ 240.419575][T11421] netlink: 'syz.4.1396': attribute type 61 has an invalid length. [ 240.419606][T11421] netlink: 'syz.4.1396': attribute type 105 has an invalid length. [ 240.557090][T11428] xt_l2tp: invalid flags combination: 8 [ 240.632634][T11431] netlink: 'syz.4.1399': attribute type 4 has an invalid length. [ 241.371196][T11452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.957934][T11483] xt_TCPMSS: Only works on TCP SYN packets [ 242.700877][T11507] netlink: 'syz.4.1418': attribute type 3 has an invalid length. [ 242.750183][T11506] netlink: 'syz.0.1417': attribute type 12 has an invalid length. [ 242.885282][T11518] bridge0: port 1(erspan0) entered blocking state [ 242.885395][T11518] bridge0: port 1(erspan0) entered disabled state [ 242.885561][T11518] erspan0: entered allmulticast mode [ 242.891668][T11518] erspan0: entered promiscuous mode [ 243.115544][T11537] __nla_validate_parse: 9 callbacks suppressed [ 243.115572][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 243.159752][T11541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1422'. [ 243.185144][T11534] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 243.214272][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 244.926137][T11599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.028005][T11601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1438'. [ 245.151399][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'. [ 245.203661][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'. [ 245.401301][T11627] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 245.481531][T11633] x_tables: ip6_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 536 [ 246.135429][T11638] C: renamed from veth1_to_team (while UP) [ 246.152500][T11638] netlink: 'syz.2.1446': attribute type 3 has an invalid length. [ 246.152525][T11638] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1446'. [ 246.413412][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1452'. [ 246.542984][T11645] can: request_module (can-proto-3) failed. [ 246.635148][T11664] ip_tables: iptables: counters copy to user failed while replacing table [ 246.729320][ T30] audit: type=1800 audit(1790933166.056:8): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1456" name="memory.events" dev="tmpfs" ino=1484 res=0 errno=0 [ 246.734854][ T30] audit: type=1800 audit(1790933166.056:9): pid=11665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1456" name="memory.events" dev="tmpfs" ino=1484 res=0 errno=0 [ 247.066625][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1457'. [ 247.371317][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 247.458698][T11681] netlink: 'syz.1.1458': attribute type 4 has an invalid length. [ 247.807919][T11688] batman_adv: batadv0: Adding interface: syzkaller0 [ 247.807941][T11688] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.807976][T11688] batman_adv: batadv0: Interface activated: syzkaller0 [ 247.895607][T11687] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 247.981064][T11687] batman_adv: batadv0: Removing interface: syzkaller0 [ 248.268367][T11712] syz_tun: entered allmulticast mode [ 248.270376][T11715] __nla_validate_parse: 1 callbacks suppressed [ 248.270397][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 248.312834][T11715] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1468'. [ 248.312862][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 248.722019][T11711] netlink: 'syz.2.1471': attribute type 2 has an invalid length. [ 248.722048][T11711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 248.816875][T11743] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 248.913248][T11735] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 248.961537][T11743] 8021q: adding VLAN 0 to HW filter on device bond6 [ 249.005412][T11740] ip6gretap0: entered promiscuous mode [ 249.009221][T11740] vlan2: entered promiscuous mode [ 249.133070][T11757] FAULT_INJECTION: forcing a failure. [ 249.133070][T11757] name failslab, interval 1, probability 0, space 0, times 0 [ 249.133108][T11757] CPU: 1 UID: 0 PID: 11757 Comm: syz.4.1482 Not tainted syzkaller #0 PREEMPT(full) [ 249.133132][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.133145][T11757] Call Trace: [ 249.133153][T11757] [ 249.133162][T11757] dump_stack_lvl+0xe8/0x150 [ 249.133196][T11757] should_fail_ex+0x410/0x560 [ 249.133225][T11757] should_failslab+0xa8/0x100 [ 249.133251][T11757] __kvmalloc_node_noprof+0x176/0x820 [ 249.133278][T11757] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 249.133309][T11757] ? bpf_compute_subprog_arg_access+0x138/0x14d0 [ 249.133341][T11757] bpf_compute_subprog_arg_access+0x138/0x14d0 [ 249.133363][T11757] ? bpf_base_func_proto+0x1d0/0xb00 [ 249.133388][T11757] ? __pfx_bpf_nf_func_proto+0x10/0x10 [ 249.133417][T11757] ? bpf_get_call_summary+0x9f8/0xfa0 [ 249.133441][T11757] ? __pfx_bpf_get_call_summary+0x10/0x10 [ 249.133481][T11757] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 249.133511][T11757] ? __kvmalloc_node_noprof+0x345/0x820 [ 249.133531][T11757] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 249.133552][T11757] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 249.133583][T11757] bpf_compute_live_registers+0x8d3/0x1ff0 [ 249.133628][T11757] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 249.133663][T11757] bpf_check+0x2746/0x2ef0 [ 249.133706][T11757] ? __pfx_bpf_check+0x10/0x10 [ 249.133731][T11757] ? bpf_obj_name_cpy+0x194/0x1e0 [ 249.133763][T11757] bpf_prog_load+0x14d6/0x1c20 [ 249.133797][T11757] ? __pfx_bpf_prog_load+0x10/0x10 [ 249.133849][T11757] __sys_bpf+0xd0d/0xd90 [ 249.133881][T11757] ? __pfx___sys_bpf+0x10/0x10 [ 249.133916][T11757] ? __fget_files+0x2a/0x420 [ 249.133964][T11757] ? ksys_write+0x242/0x270 [ 249.133993][T11757] ? __pfx_ksys_write+0x10/0x10 [ 249.134022][T11757] __x64_sys_bpf+0xba/0xd0 [ 249.134044][T11757] do_syscall_64+0x166/0x520 [ 249.134070][T11757] ? trace_irq_disable+0x3b/0x140 [ 249.134086][T11757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.134105][T11757] ? clear_bhb_loop+0x70/0xc0 [ 249.134129][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.134149][T11757] RIP: 0033:0x7f274a59e159 [ 249.134168][T11757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.134184][T11757] RSP: 002b:00007f274b3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.134206][T11757] RAX: ffffffffffffffda RBX: 00007f274a825fa0 RCX: 00007f274a59e159 [ 249.134221][T11757] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 249.134233][T11757] RBP: 00007f274b3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 249.134245][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.134257][T11757] R13: 00007f274a826038 R14: 00007f274a825fa0 R15: 00007ffc0bd97468 [ 249.134297][T11757] [ 249.463054][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 249.668938][T11775] syzkaller1: entered promiscuous mode [ 249.668967][T11775] syzkaller1: entered allmulticast mode [ 249.753401][T11787] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1488'. [ 249.912002][T11787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1488'. [ 249.994215][T11798] netlink: 'syz.1.1491': attribute type 7 has an invalid length. [ 250.192008][T11804] syzkaller1: entered promiscuous mode [ 250.192034][T11804] syzkaller1: entered allmulticast mode [ 250.414679][T11823] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 250.602250][T11829] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.664272][T11832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1499'. [ 250.691026][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 250.691055][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1499'. [ 250.932117][T11841] openvswitch: netlink: IP tunnel dst address not specified [ 250.940748][T11841] netlink: zone id is out of range [ 250.940765][T11841] netlink: zone id is out of range [ 250.940772][T11841] netlink: zone id is out of range [ 250.940779][T11841] netlink: zone id is out of range [ 250.940785][T11841] netlink: zone id is out of range [ 250.940792][T11841] netlink: zone id is out of range [ 250.940802][T11841] netlink: zone id is out of range [ 250.940809][T11841] netlink: zone id is out of range [ 250.945869][T11838] netlink: 'syz.0.1504': attribute type 9 has an invalid length. [ 250.945889][T11838] netlink: 'syz.0.1504': attribute type 6 has an invalid length. [ 250.945900][T11838] netlink: 'syz.0.1504': attribute type 7 has an invalid length. [ 250.945911][T11838] netlink: 'syz.0.1504': attribute type 8 has an invalid length. [ 251.522444][T11865] rdma_rxe: rxe_newlink: failed to add lo [ 251.691106][T11874] netlink: 'syz.1.1515': attribute type 4 has an invalid length. [ 252.284469][T11906] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 252.346157][T11906] veth5: entered allmulticast mode [ 252.361804][T11906] bond7: (slave veth5): Enslaving as an active interface with a down link [ 252.415345][T11906] macvlan4: entered promiscuous mode [ 252.415373][T11906] macvlan4: entered allmulticast mode [ 252.419175][T11906] bond7: entered promiscuous mode [ 252.424107][T11906] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 252.426423][T11906] bond7: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 252.469067][T11906] bond7: left promiscuous mode [ 253.285273][T11938] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 253.324465][T11943] __nla_validate_parse: 7 callbacks suppressed [ 253.324487][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 253.331179][T11938] 8021q: adding VLAN 0 to HW filter on device bond8 [ 253.362649][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 253.388433][T11944] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 253.401159][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1537'. [ 253.464185][T11944] hsr_slave_1 (unregistering): left promiscuous mode [ 253.814449][T11964] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 253.854730][T11975] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 253.854754][T11975] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1544'. [ 253.974266][T11960] veth7: entered promiscuous mode [ 254.004075][T11958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1542'. [ 254.022600][T11960] bond9: (slave veth7): Enslaving as a backup interface with a down link [ 254.024179][T11958] 8021q: adding VLAN 0 to HW filter on device bond9 [ 254.063461][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1540'. [ 254.113523][T11982] block nbd0: reconnected socket [ 254.113555][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1545'. [ 254.134783][ T5636] block nbd0: Receive control failed (result -32) [ 254.295052][T11992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1548'. [ 254.393792][T11998] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1552'. [ 254.485968][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 255.340504][ T30] audit: type=1800 audit(1790933174.656:10): pid=12019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1558" name="memory.events" dev="tmpfs" ino=1637 res=0 errno=0 [ 255.444651][T12053] [ 255.447054][T12053] ====================================================== [ 255.454107][T12053] WARNING: possible circular locking dependency detected [ 255.461182][T12053] syzkaller #0 Not tainted [ 255.465625][T12053] ------------------------------------------------------ [ 255.472681][T12053] syz.2.1563/12053 is trying to acquire lock: [ 255.478860][T12053] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 255.489436][T12053] [ 255.489436][T12053] but task is already holding lock: [ 255.496832][T12053] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 255.506368][T12053] [ 255.506368][T12053] which lock already depends on the new lock. [ 255.506368][T12053] [ 255.516804][T12053] [ 255.516804][T12053] the existing dependency chain (in reverse order) is: [ 255.526017][T12053] [ 255.526017][T12053] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 255.534233][T12053] down_write+0x96/0x200 [ 255.539047][T12053] kernfs_add_one+0x41/0x6f0 [ 255.544205][T12053] kernfs_create_dir_ns+0x1a1/0x230 [ 255.550033][T12053] internal_create_group+0x440/0x1180 [ 255.555984][T12053] cpuhp_invoke_callback+0x434/0x810 [ 255.562028][T12053] cpuhp_issue_call+0x3f0/0x750 [ 255.567612][T12053] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 255.574325][T12053] __cpuhp_setup_state+0x3f/0x60 [ 255.579922][T12053] do_one_initcall+0x250/0x870 [ 255.585256][T12053] do_initcall_level+0x10a/0x1a0 [ 255.590955][T12053] do_initcalls+0x59/0xa0 [ 255.595960][T12053] kernel_init_freeable+0x29d/0x3e0 [ 255.601731][T12053] kernel_init+0x22/0x1d0 [ 255.606975][T12053] ret_from_fork+0x514/0xb70 [ 255.612122][T12053] ret_from_fork_asm+0x1a/0x30 [ 255.617519][T12053] [ 255.617519][T12053] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 255.625347][T12053] [ 255.625347][T12053] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 255.633099][T12053] cpus_read_lock+0x42/0x160 [ 255.638240][T12053] static_key_slow_inc+0x12/0x30 [ 255.643724][T12053] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 255.649985][T12053] nbd_genl_foreach_sock+0x265/0x450 [ 255.656069][T12053] nbd_genl_reconfigure+0xbbb/0x1040 [ 255.662047][T12053] genl_family_rcv_msg_doit+0x233/0x340 [ 255.668253][T12053] genl_rcv_msg+0x614/0x7a0 [ 255.673319][T12053] netlink_rcv_skb+0x226/0x4a0 [ 255.678934][T12053] genl_rcv+0x28/0x40 [ 255.683634][T12053] netlink_unicast+0x7bd/0x940 [ 255.688934][T12053] netlink_sendmsg+0x813/0xb40 [ 255.694253][T12053] sock_sendmsg_nosec+0x14e/0x190 [ 255.699819][T12053] ____sys_sendmsg+0x54e/0x850 [ 255.705116][T12053] ___sys_sendmsg+0x2a5/0x360 [ 255.710322][T12053] __x64_sys_sendmsg+0x1b1/0x290 [ 255.715795][T12053] do_syscall_64+0x166/0x520 [ 255.721007][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.727427][T12053] [ 255.727427][T12053] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 255.735259][T12053] __mutex_lock+0x19d/0x1550 [ 255.740397][T12053] nbd_queue_rq+0x373/0xff0 [ 255.745520][T12053] blk_mq_dispatch_rq_list+0x499/0x1990 [ 255.751599][T12053] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 255.758544][T12053] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 255.765228][T12053] blk_mq_run_work_fn+0x16c/0x300 [ 255.770788][T12053] process_scheduled_works+0xc3d/0x1630 [ 255.776922][T12053] worker_thread+0xa47/0xfb0 [ 255.782134][T12053] kthread+0x38b/0x480 [ 255.786724][T12053] ret_from_fork+0x514/0xb70 [ 255.791856][T12053] ret_from_fork_asm+0x1a/0x30 [ 255.797243][T12053] [ 255.797243][T12053] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 255.804463][T12053] __mutex_lock+0x19d/0x1550 [ 255.809585][T12053] nbd_queue_rq+0xc1/0xff0 [ 255.814982][T12053] blk_mq_dispatch_rq_list+0x499/0x1990 [ 255.821085][T12053] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 255.827956][T12053] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 255.834474][T12053] blk_mq_run_work_fn+0x16c/0x300 [ 255.840052][T12053] process_scheduled_works+0xc3d/0x1630 [ 255.846134][T12053] worker_thread+0xa47/0xfb0 [ 255.851262][T12053] kthread+0x38b/0x480 [ 255.856200][T12053] ret_from_fork+0x514/0xb70 [ 255.861336][T12053] ret_from_fork_asm+0x1a/0x30 [ 255.866935][T12053] [ 255.866935][T12053] -> #4 (set->srcu){.+.+}-{0:0}: [ 255.874175][T12053] __synchronize_srcu+0xc9/0x2f0 [ 255.879658][T12053] elevator_switch+0x1e8/0x7b0 [ 255.884956][T12053] elevator_change+0x2fa/0x480 [ 255.890250][T12053] elevator_set_default+0x375/0x440 [ 255.895989][T12053] blk_register_queue+0x3f3/0x4e0 [ 255.901576][T12053] __add_disk+0x6b8/0xdb0 [ 255.906441][T12053] add_disk_fwnode+0x100/0x3a0 [ 255.911733][T12053] nbd_dev_add+0x733/0xb60 [ 255.916682][T12053] nbd_init+0x168/0x1f0 [ 255.921447][T12053] do_one_initcall+0x250/0x870 [ 255.926742][T12053] do_initcall_level+0x10a/0x1a0 [ 255.932216][T12053] do_initcalls+0x59/0xa0 [ 255.937091][T12053] kernel_init_freeable+0x29d/0x3e0 [ 255.942827][T12053] kernel_init+0x22/0x1d0 [ 255.947679][T12053] ret_from_fork+0x514/0xb70 [ 255.952855][T12053] ret_from_fork_asm+0x1a/0x30 [ 255.958150][T12053] [ 255.958150][T12053] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 255.966581][T12053] __mutex_lock+0x19d/0x1550 [ 255.971699][T12053] elevator_change+0x1af/0x480 [ 255.977000][T12053] elevator_set_none+0xb5/0x140 [ 255.982376][T12053] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 255.988974][T12053] nbd_start_device+0x189/0xb30 [ 255.994349][T12053] nbd_genl_connect+0x167d/0x1cd0 [ 255.999989][T12053] genl_family_rcv_msg_doit+0x233/0x340 [ 256.006332][T12053] genl_rcv_msg+0x614/0x7a0 [ 256.011432][T12053] netlink_rcv_skb+0x226/0x4a0 [ 256.017013][T12053] genl_rcv+0x28/0x40 [ 256.021637][T12053] netlink_unicast+0x7bd/0x940 [ 256.027105][T12053] netlink_sendmsg+0x813/0xb40 [ 256.032653][T12053] sock_sendmsg_nosec+0x14e/0x190 [ 256.038297][T12053] ____sys_sendmsg+0x54e/0x850 [ 256.043691][T12053] ___sys_sendmsg+0x2a5/0x360 [ 256.048920][T12053] __x64_sys_sendmsg+0x1b1/0x290 [ 256.054413][T12053] do_syscall_64+0x166/0x520 [ 256.059724][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.066588][T12053] [ 256.066588][T12053] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 256.075404][T12053] blk_alloc_queue+0x544/0x690 [ 256.080706][T12053] __blk_mq_alloc_disk+0x194/0x390 [ 256.086443][T12053] nbd_dev_add+0x494/0xb60 [ 256.091645][T12053] nbd_init+0x168/0x1f0 [ 256.096453][T12053] do_one_initcall+0x250/0x870 [ 256.101760][T12053] do_initcall_level+0x10a/0x1a0 [ 256.107243][T12053] do_initcalls+0x59/0xa0 [ 256.112193][T12053] kernel_init_freeable+0x29d/0x3e0 [ 256.118191][T12053] kernel_init+0x22/0x1d0 [ 256.123043][T12053] ret_from_fork+0x514/0xb70 [ 256.128243][T12053] ret_from_fork_asm+0x1a/0x30 [ 256.133535][T12053] [ 256.133535][T12053] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 256.140752][T12053] fs_reclaim_acquire+0x71/0x100 [ 256.146214][T12053] kmem_cache_alloc_noprof+0x5f/0x600 [ 256.152120][T12053] __kernfs_iattrs+0xdd/0x380 [ 256.157326][T12053] kernfs_iop_setattr+0xe6/0x3f0 [ 256.162791][T12053] notify_change+0xbba/0xea0 [ 256.167903][T12053] do_truncate+0x1c2/0x250 [ 256.172858][T12053] path_openat+0x15b5/0x1d60 [ 256.177968][T12053] do_file_open+0x23e/0x4a0 [ 256.182995][T12053] do_sys_openat2+0x115/0x200 [ 256.188371][T12053] __x64_sys_openat+0x138/0x170 [ 256.193752][T12053] do_syscall_64+0x166/0x520 [ 256.198963][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.205382][T12053] [ 256.205382][T12053] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 256.213897][T12053] __lock_acquire+0x164c/0x2de0 [ 256.219364][T12053] lock_acquire+0x115/0x350 [ 256.224394][T12053] down_write+0x96/0x200 [ 256.229194][T12053] kernfs_link_sibling+0x4c7/0x5a0 [ 256.235025][T12053] kernfs_add_one+0x2db/0x6f0 [ 256.240246][T12053] kernfs_create_dir_ns+0x1a1/0x230 [ 256.245987][T12053] sysfs_create_dir_ns+0x12f/0x2a0 [ 256.251622][T12053] kobject_add_internal+0x622/0xcd0 [ 256.257349][T12053] kobject_add+0x163/0x240 [ 256.262306][T12053] device_add+0x3fa/0xb80 [ 256.267190][T12053] __add_disk+0x517/0xdb0 [ 256.272067][T12053] add_disk_fwnode+0x100/0x3a0 [ 256.277361][T12053] nbd_dev_add+0x733/0xb60 [ 256.282299][T12053] nbd_genl_connect+0x96c/0x1cd0 [ 256.287759][T12053] genl_family_rcv_msg_doit+0x233/0x340 [ 256.293931][T12053] genl_rcv_msg+0x614/0x7a0 [ 256.298988][T12053] netlink_rcv_skb+0x226/0x4a0 [ 256.304292][T12053] genl_rcv+0x28/0x40 [ 256.308887][T12053] netlink_unicast+0x7bd/0x940 [ 256.314177][T12053] netlink_sendmsg+0x813/0xb40 [ 256.319462][T12053] sock_sendmsg_nosec+0x14e/0x190 [ 256.325012][T12053] ____sys_sendmsg+0x54e/0x850 [ 256.330298][T12053] ___sys_sendmsg+0x2a5/0x360 [ 256.335500][T12053] __x64_sys_sendmsg+0x1b1/0x290 [ 256.340961][T12053] do_syscall_64+0x166/0x520 [ 256.346088][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.352505][T12053] [ 256.352505][T12053] other info that might help us debug this: [ 256.352505][T12053] [ 256.362734][T12053] Chain exists of: [ 256.362734][T12053] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 256.362734][T12053] [ 256.377444][T12053] Possible unsafe locking scenario: [ 256.377444][T12053] [ 256.384993][T12053] CPU0 CPU1 [ 256.390356][T12053] ---- ---- [ 256.395720][T12053] lock(&root->kernfs_rwsem); [ 256.400499][T12053] lock(cpuhp_state_mutex); [ 256.407612][T12053] lock(&root->kernfs_rwsem); [ 256.414902][T12053] lock(&root->kernfs_iattr_rwsem); [ 256.420189][T12053] [ 256.420189][T12053] *** DEADLOCK *** [ 256.420189][T12053] [ 256.428332][T12053] locks held by syz.2.1563/12053: 4, last CPU#1: [ 256.434684][T12053] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 256.442883][T12053] #1: ffffffff902b8c60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 256.451857][T12053] #2: ffff888053b7d1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 256.462217][T12053] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 256.472319][T12053] [ 256.472319][T12053] stack backtrace: [ 256.478208][T12053] CPU: 1 UID: 0 PID: 12053 Comm: syz.2.1563 Not tainted syzkaller #0 PREEMPT(full) [ 256.487577][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.497730][T12053] Call Trace: [ 256.501023][T12053] [ 256.503966][T12053] dump_stack_lvl+0xe8/0x150 [ 256.508563][T12053] print_circular_bug+0x2e2/0x300 [ 256.513598][T12053] check_noncircular+0x12f/0x150 [ 256.518559][T12053] __lock_acquire+0x164c/0x2de0 [ 256.523455][T12053] ? __lock_acquire+0x747/0x2de0 [ 256.528410][T12053] lock_acquire+0x115/0x350 [ 256.532920][T12053] ? kernfs_link_sibling+0x4c7/0x5a0 [ 256.538248][T12053] down_write+0x96/0x200 [ 256.542515][T12053] ? kernfs_link_sibling+0x4c7/0x5a0 [ 256.547846][T12053] ? __pfx_down_write+0x10/0x10 [ 256.552706][T12053] ? kernfs_root+0x1c/0x230 [ 256.557223][T12053] ? kernfs_root+0x1c/0x230 [ 256.561833][T12053] ? kernfs_root+0x1c/0x230 [ 256.566351][T12053] ? kernfs_root+0x1ea/0x230 [ 256.570974][T12053] kernfs_link_sibling+0x4c7/0x5a0 [ 256.576100][T12053] kernfs_add_one+0x2db/0x6f0 [ 256.580809][T12053] kernfs_create_dir_ns+0x1a1/0x230 [ 256.586053][T12053] sysfs_create_dir_ns+0x12f/0x2a0 [ 256.591412][T12053] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 256.597088][T12053] ? do_raw_spin_unlock+0xf5/0x200 [ 256.602233][T12053] kobject_add_internal+0x622/0xcd0 [ 256.607552][T12053] kobject_add+0x163/0x240 [ 256.612075][T12053] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.618071][T12053] ? __pfx_kobject_add+0x10/0x10 [ 256.623106][T12053] ? get_device_parent+0x366/0x3a0 [ 256.628225][T12053] device_add+0x3fa/0xb80 [ 256.632770][T12053] __add_disk+0x517/0xdb0 [ 256.637147][T12053] add_disk_fwnode+0x100/0x3a0 [ 256.641976][T12053] nbd_dev_add+0x733/0xb60 [ 256.646409][T12053] ? __pfx_nbd_dev_add+0x10/0x10 [ 256.651357][T12053] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 256.657174][T12053] ? bpf_lsm_capable+0x9/0x20 [ 256.661860][T12053] ? security_capable+0x7e/0x2c0 [ 256.666828][T12053] ? radix_tree_lookup+0x25c/0x290 [ 256.671946][T12053] nbd_genl_connect+0x96c/0x1cd0 [ 256.676948][T12053] ? __pfx_nbd_genl_connect+0x10/0x10 [ 256.682340][T12053] ? rcu_is_watching+0x16/0xb0 [ 256.687111][T12053] ? trace_kmalloc+0x2a/0xf0 [ 256.691987][T12053] ? __kmalloc_noprof+0x38c/0x720 [ 256.697518][T12053] ? __nla_parse+0x40/0x60 [ 256.701952][T12053] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 256.708410][T12053] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 256.714866][T12053] genl_family_rcv_msg_doit+0x233/0x340 [ 256.720447][T12053] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 256.726529][T12053] ? __lock_acquire+0x747/0x2de0 [ 256.731483][T12053] genl_rcv_msg+0x614/0x7a0 [ 256.735996][T12053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.741027][T12053] ? __pfx_nbd_genl_connect+0x10/0x10 [ 256.746665][T12053] netlink_rcv_skb+0x226/0x4a0 [ 256.751531][T12053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 256.756602][T12053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.761986][T12053] ? down_read+0x2be/0x330 [ 256.766414][T12053] genl_rcv+0x28/0x40 [ 256.770407][T12053] netlink_unicast+0x7bd/0x940 [ 256.775185][T12053] netlink_sendmsg+0x813/0xb40 [ 256.779976][T12053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.785297][T12053] ? apparmor_socket_sendmsg+0x98/0x360 [ 256.790941][T12053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.796253][T12053] sock_sendmsg_nosec+0x14e/0x190 [ 256.801324][T12053] ____sys_sendmsg+0x54e/0x850 [ 256.806188][T12053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.811574][T12053] ? import_iovec+0x73/0xa0 [ 256.816084][T12053] ___sys_sendmsg+0x2a5/0x360 [ 256.820854][T12053] ? __lock_acquire+0x747/0x2de0 [ 256.825799][T12053] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.831011][T12053] ? futex_wait+0x2a2/0x390 [ 256.835533][T12053] ? __fget_files+0x2a/0x420 [ 256.840223][T12053] ? __fget_files+0x3a2/0x420 [ 256.844913][T12053] __x64_sys_sendmsg+0x1b1/0x290 [ 256.849970][T12053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.855448][T12053] do_syscall_64+0x166/0x520 [ 256.860327][T12053] ? trace_irq_disable+0x3b/0x140 [ 256.865391][T12053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.871668][T12053] ? clear_bhb_loop+0x70/0xc0 [ 256.876502][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.882405][T12053] RIP: 0033:0x7fe98d39e159 [ 256.886840][T12053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.906550][T12053] RSP: 002b:00007fe98e1e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.914990][T12053] RAX: ffffffffffffffda RBX: 00007fe98d626270 RCX: 00007fe98d39e159 [ 256.923077][T12053] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 256.931089][T12053] RBP: 00007fe98d43506b R08: 0000000000000000 R09: 0000000000000000 [ 256.939161][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.947401][T12053] R13: 00007fe98d626308 R14: 00007fe98d626270 R15: 00007ffd11061908 [ 256.955655][T12053] [ 257.188841][T11967] udevd[11967]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory