last executing test programs: 2m26.582967083s ago: executing program 1 (id=4809): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 2m26.243350119s ago: executing program 1 (id=4812): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00'}, 0x48) 2m25.88500903s ago: executing program 1 (id=4815): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="96fa2c0bff2099297e1c1ea6d53ff4c2f69b32d385f14857ae25047e39555bbacdb216aa20b99d21a3aa5e5775e86006778ec677400377670a3422aa5184ed400cf452f14ef81d20a792091e037ed82c9ee401f0f428bd4951eab88952d04fd3c2201db3378816", 0xfffffdce) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)="0dd2", 0x2}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10049, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) tee(r0, r3, 0xfffffffffffffffd, 0x0) close(0x3) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x275a, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x48, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x48}, 0x1, 0x620b}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@generic={0x2, 0x5, 0x4}) close(0x4) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000180)={0x800, 0x80000000}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000380)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000480)={0x41}, 0x10) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f00000003c0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x28) r9 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000540)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000600)=0x84) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000500)={0x41, 0x0, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2m25.316113648s ago: executing program 1 (id=4820): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1002}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x6, &(0x7f0000000300)={0x12, {{0x29, 0x0, 0xb000003, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x20, 0x1, {{0x0, 0x0, 0x2}}}]}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x300}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}}, 0x0) 2m20.072312272s ago: executing program 1 (id=4830): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="ece65fbcee55", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @multicast2, @multicast, @multicast1}}}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x82001, 0x0) poll(&(0x7f0000000700)=[{r0, 0x2}], 0x1, 0x4) 2m19.695324953s ago: executing program 1 (id=4832): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x4c060000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000001ac0)={'sit0\x00', &(0x7f0000001b00)={@private2, @dev={0xac, 0x14, 0x14, 0x25}, 0x1c, 0xdd}}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000300), &(0x7f0000000340)=@tcp=r6}, 0x6c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r4, 0x1}, 0x20) accept4(r0, 0x0, 0x0, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000002ff000000000008000400", @ANYRES32=r8, @ANYBLOB="0600150007000000180016801400010001"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, [@alu={0x4, 0x1, 0x6, 0x0, 0x4, 0x80, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4c, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0xb, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001980)=[r5, r5, r5], &(0x7f00000019c0)=[{0x5, 0x5, 0xc, 0x8}, {0x0, 0x4, 0x5, 0x6}, {0x3, 0x4, 0x1, 0x6}, {0x4, 0x1, 0xf, 0x7}], 0x10, 0x2}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/ipc\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 2m4.356508192s ago: executing program 32 (id=4832): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x4c060000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000001ac0)={'sit0\x00', &(0x7f0000001b00)={@private2, @dev={0xac, 0x14, 0x14, 0x25}, 0x1c, 0xdd}}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000300), &(0x7f0000000340)=@tcp=r6}, 0x6c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, &(0x7f00000003c0), &(0x7f0000000400)=@udp=r4, 0x1}, 0x20) accept4(r0, 0x0, 0x0, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000180001002cbd7000000000000a0000000002ff000000000008000400", @ANYRES32=r8, @ANYBLOB="0600150007000000180016801400010001"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, [@alu={0x4, 0x1, 0x6, 0x0, 0x4, 0x80, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4c, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0xb, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001980)=[r5, r5, r5], &(0x7f00000019c0)=[{0x5, 0x5, 0xc, 0x8}, {0x0, 0x4, 0x5, 0x6}, {0x3, 0x4, 0x1, 0x6}, {0x4, 0x1, 0xf, 0x7}], 0x10, 0x2}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/ipc\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 1m14.673275699s ago: executing program 3 (id=5106): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000740)={r1, 0x7}, 0x8) 1m14.45609441s ago: executing program 3 (id=5108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46060900626f6e64000000000c001e8005000d000100"/36], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) sendmsg$alg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="21541d46d6b4d8c43f884ba2e73095636e90b002073180abcf78063f2cd8f2c92715394cead1be29caa9e5773a35477d2e85aef0cf75648e73a698063f0041cc7b886249bbbb21e7d83c54b7e09c9b6124579fd4d6ba91d493685104142f5edf2fa194b9f86914fe79f3ab484c681a56b93e109313daa81a4bd671e773", 0x7d}, {&(0x7f00000002c0)="6abae938e24739cb9c55ba948fdf9086105cada58f998f463e382a9e6a2e63fd959addb2f1352443a91173a1d4017b0833ae1377a6978300a985081b3deb2df2632870109340ceecabfcd570f12dbbaf59c2fc57f29fced268474a325601e6074a027c2f16cf3044dfdee713d10bac4265725c186e9959ada8e5992bb2babfadb731e1b145f0d2af7945c78010770c3f0e4b06b126204598862fb465440d4c13a5796378b7914f2414d2c9026d59c13090c06ced997316431a14ed302183f5890d3b50", 0xc3}, {&(0x7f00000003c0)="f135cfe3ad6cd3ebe35393a223f7ec", 0xf}, {&(0x7f0000000400)="776a60422a4ade0d215e9ed506e9495efe9f20c8", 0x14}, {&(0x7f0000000540)="60d8413d097879d6e4637057fb70220a84005e565747fd665ec3dd8aa91c6134486ae037bbe989088852c184bc3aed6d6ed4a257ef0eccb9266ae7c6f74cf066df7d7bfc968f208adadde2827afe83930c1c461f6821be1a67d2032b76cdb9f69aa6714262eb0f4ce14943a5ac366ce0945d5848bedd9356ef61fa14b2150dd9bd21957ec86e421c1cd370e13deb8581acc36647d0cdd62248beb881cd6f07a19103eb1d0b3e9f93dff1608ff02ca3526847988089c6f139d85a6b1719b723f819f3be4ba2d42795137c1298dac934292a159a0980b69db1bfbd6ea7857da562878cfc7c28023ab3f9972e", 0xeb}, {&(0x7f0000000640)="9f6905a8b1e8f9abc56a1a9dc30d4773c0ae4c9dd160a507869519d704df4ca106241275128e28db37a3", 0x2a}, {&(0x7f0000000680)="e79231b79f3909ae4f25cdab8bd9045be4caa95e2db0d0cc29f2760b71e1c5a6796559d54f92c574762eaaa0a14d8ebcecdb26abcf95801134f5ffa41f03ce892bcfe319d94c4a2d", 0x48}, {&(0x7f0000000700)="cad9663e43eb9f2dc27c60548faa25aa24dbe83603d8358cc7f3f0f10afdd8586dda94288c997ee0780b6e57fe486ffe9286c62e4611b53f668eb45bd7ddee6851d7cc", 0x43}, {&(0x7f0000000780)="bfb99cfa04ba73fbb14c0c8c3edbc7d1801de753ab2a44f0732994c4a21fa49d6d1b9e2a431b6fee6172056c74f2632569e676778e9c72b27819104a5aa5569a5a3f3d531ab86dadc218d4ea2d3e5eae6fa336de7750ae620f19f15ef04a51285155bfd453c6014a183656aba9eca1074ca56236b5d3e100279cf27abdb57b7909162740ad745ae47d35bfe15bbdb2c7b7b68db1c152f3c316985220e84b25e9a4b037e270f063497d17f4fe9fecae85ff36110ba8d7be1bad6ed689827326859bf2ed9dd9aba085212fa9289c44c9ec0801620a", 0xd4}], 0x9, &(0x7f0000000940)=[@op={0x18}], 0x18, 0x20008094}, 0x4002) 1m13.931669558s ago: executing program 3 (id=5113): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c000}, 0x2c04c044) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) 1m13.156636387s ago: executing program 3 (id=5119): unshare(0xc020680) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000003c0)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10001, 0x1, 0x1}}, 0x44) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0xd, @private2, 0x1}}, @sadb_address={0x3, 0x6}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x30, 0x3, 0x8, 0x807, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040420}, 0x40080) getsockopt$inet6_int(r2, 0x29, 0x3, 0x0, &(0x7f0000000040)) getsockname$l2tp6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x2c, r7, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x16}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x2c}}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3}, &(0x7f0000000200)=0x90) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_MTU={0x6}]}, 0x44}}, 0x1) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r9 = accept(r8, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000a40)='0\t', 0x2}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) r10 = socket(0x2, 0x6, 0x400) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000600)={{0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x5, 0x5, 0x13}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e27, 0x4, 0x8000cd}}, 0x44) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000280)={0x2, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x2, 0x18, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0xf, 0x0, @empty, 0x6}, @in={0x2, 0x4e23, @local}}]}, 0xb8}}, 0x0) sendmsg$sock(r1, &(0x7f0000000680)={&(0x7f00000006c0)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m13.107168301s ago: executing program 3 (id=5120): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@can_newroute={0x34, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x2, 0x6, 0xf}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae2282b3"}, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x240448c8) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x7fffffff, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x80000000, 0x3, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xe7, 0x1000, 0x2, 0xffffffff, 0x80000000000000de, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m12.822158874s ago: executing program 3 (id=5124): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@arena={0x21, 0x0, 0x0, 0x29, 0x40400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400000077030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020007000000dbaa0f9ba7710000bf8220000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007004000b70000000000000095"], &(0x7f0000000d80)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000200)="d46792", 0x0}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000580e000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000500000003000000000000000000000000020000000000df"], 0x50) r5 = epoll_create(0x20000006) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0x4}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000680)={0x8}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000006c0)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000700)={0x8}) ioctl$XFS_IOC_FSBULKSTAT(r4, 0xc0205865, &(0x7f0000000940)={&(0x7f0000000740)=0xb, 0x3, &(0x7f0000000980)=[{}, {}, {}, {}], &(0x7f0000000900)}) r10 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r10, 0x0, 0x0, 0x140, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x26, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x7, 0x5, 0x1190f4fec195c28c, 0xa, 0x10}, @ringbuf_query, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @alu={0x4, 0x1, 0x1, 0x5, 0x6, 0x8, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x1d, &(0x7f00000004c0)=""/29, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000540)=[{0x4, 0x2, 0x3, 0x6}, {0x3, 0x1, 0x3, 0x7}, {0x1, 0x4, 0x0, 0x2}, {0x0, 0x4, 0xe, 0x1}, {0x1, 0x3, 0x4, 0xb}], 0x10, 0x8}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x3000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) 57.679514093s ago: executing program 33 (id=5124): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@arena={0x21, 0x0, 0x0, 0x29, 0x40400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400000077030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020007000000dbaa0f9ba7710000bf8220000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007004000b70000000000000095"], &(0x7f0000000d80)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000200)="d46792", 0x0}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000580e000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000500000003000000000000000000000000020000000000df"], 0x50) r5 = epoll_create(0x20000006) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x6}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000240)={0x4}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000680)={0x8}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000006c0)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000700)={0x8}) ioctl$XFS_IOC_FSBULKSTAT(r4, 0xc0205865, &(0x7f0000000940)={&(0x7f0000000740)=0xb, 0x3, &(0x7f0000000980)=[{}, {}, {}, {}], &(0x7f0000000900)}) r10 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r10, 0x0, 0x0, 0x140, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x26, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x7, 0x5, 0x1190f4fec195c28c, 0xa, 0x10}, @ringbuf_query, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @alu={0x4, 0x1, 0x1, 0x5, 0x6, 0x8, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x1d, &(0x7f00000004c0)=""/29, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000540)=[{0x4, 0x2, 0x3, 0x6}, {0x3, 0x1, 0x3, 0x7}, {0x1, 0x4, 0x0, 0x2}, {0x0, 0x4, 0xe, 0x1}, {0x1, 0x3, 0x4, 0xb}], 0x10, 0x8}, 0x94) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x3000) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, 0x0) 6.9608503s ago: executing program 2 (id=5417): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pB \x00'}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000004c0)={{0xffffffffffffffff, &(0x7f00000002c0)='syzkaller\x00', 0x40040, &(0x7f0000000300)={@align=0x5, {0x7ff, 0x9, 0x0, 0x8000000000000000}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x100}, {[0xe8c, 0x6, 0xe, 0x800]}, 0x4, 0xe8, &(0x7f00000003c0)=""/232}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x6, 0xea5d}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000640), 0x2000005, r2}, 0x38) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001e80)={{r0, &(0x7f0000000140)='\x00', 0x88202, &(0x7f0000000600)={@_ha_fsid={[0x8, 0x2]}, {0x10, 0x0, 0x8, 0x4}}, 0x6c800000, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000740)=0xe99}, 0x7, &(0x7f0000001d80)=[{0x2, 0x1, &(0x7f0000000780)='!\x00', &(0x7f00000007c0)="73fddc894f2914fec1d8aa0db79ba3e52b0646813e43ec28b54cec8dc3076b1f6d8d532878ccd02ff268f7760f8d719c8a4f319085ceceb55c6999a445fc66cb1a117f459362ab26f9ea5f87818d0d1790293adcc0667a63c49a21063f7c3faa2310e0ab084a1a86f8e706b23940c4e350cb45e72f776e5627d87264ff21d0cb6de2a9867661a51c0a6066a56b4da368c98827f6368a8a9d1a9f0395e725db4cc8dc2a9ce552c9f59a919c989945ff554ce8f10ce8983296e06e97920f6a2ec7787dc11032edac4d46f2ad649f533abee50ef5ce3d9b2c", 0xd7, 0x22}, {0x0, 0xf5, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="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", 0x1000, 0x20}, {0x2, 0x0, &(0x7f0000001900)='\x00', &(0x7f0000001940)="fe016ab1115829c7041d37d2f838b9703ead632397bb070976d524a7494f865b0d595490fb4ab134b571d1f17bc825b720c666572fc49ed72a9c5ba466abfa6b5c74b9471cb9935e32f6981442169f7ae798e3f2a1c5facd7830ed0026050b5b8a714f60435833cb983bbf75ef020157b45308de5c4e54d015fd11e44e8d371253c14d74286a02991da689a63f326f5d6a8d1c958e1509b5727fe9017cfdd25d632f764e14f7b96009b824fa0aaed65c1a5e104bc7c6f87d2ffa80ed021ca32c6bec48f90a", 0xc5, 0x22}, {0x1, 0x7, &(0x7f0000001a40)='\x00', &(0x7f0000001a80)="fdaaa720e6a52097f4037cc92fff3ea2dbabd834706c73f50e2ee2e4784f57cf1fd24790e2012d4bc8d3558df428c19973ec5750b615bdbbbfc26c4a4899ce145b848f7a8dde0cd51ba0", 0x4a, 0x8}, {0x1, 0x3, &(0x7f0000001b00)='\x00', &(0x7f0000001b40)="bdb86ed8347474e598692b911091101ac958a30fd6596214b3ea89ee57b38a3d8d89637f7caa0c9ec0a5490914a9a66ad744cdd2a5144d08bc45231076f28aeedb76cacd4308f5d5d3ae23162eefda044b88e4ae08761113b880ba6a9c690aa7d391d0dbc0619605e8edd1c74023df842ca4db0ad8fc44e60cf7082c30e085df13da0f84d6912b87418e04560c5ea1e1ad4d80f3c9d3fafa7393b0ff143665c8f56ec9693927d3e9f4f40abaf8fda5a842a7b79b354d686440a79662dd", 0xbd, 0x10}, {0x3, 0xfffffffe, &(0x7f0000001c00)='%pB \x00', &(0x7f0000001c40)="26cd8db244d508499d33a53805abc4afda923c9a5b28580404a2f36af2efaab3e102ea25f0999569d068343d60efffb6f40d3dae1358f043ba0c6cd176adcbf096d1c72be8ecd2c79a76505e479dfd42be5522ae2ee5de2712b4543b00b0dd5242abc03577b5637ddd6e086ca1cfb0afe1ac69751bf59ba816159ab40cc0a3bfa44c48bb490c2eacf59a147b45f28eb12ee7e38914b3707d", 0x98, 0xa}, {0x3, 0x1ff, &(0x7f0000001d00)='\x00', &(0x7f0000001d40)="acfd5c91dc31dd08a0707d476970891451784f998473d993833c9596e3b2", 0x1e, 0x22}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1b, &(0x7f0000001f00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2616}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000100)={0x7fffffff, 0x40, 0x1}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000180)={0x0, 0x9, 0x1, 0x5, 0x7, 0x0, 0x400}) 6.420152259s ago: executing program 6 (id=5421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000014feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000020000001d44000000000000620a20ff040400007203020100200000e500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x0, 0x10, &(0x7f0000000dc0)={0x0, 0x0, 0x7000000}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001040), 0x17a, 0x0) recvmmsg(r4, &(0x7f0000001080), 0x78c2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000010c0)={0x20000014}) epoll_wait(r3, &(0x7f0000001100)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000001140)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x3261e) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450000308000000000019078ac1e0001ac1414aa0b009078120002282500000000000000479e73be7f000001ac1414aa"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001240)=[{{0x0, 0xd94ea7173a9f1aac, 0x0}}], 0x40001b6, 0x114) close(r7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000280)={0x0, 'macvtap0\x00', {0x2}, 0x101}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @multicast2}], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 6.217551121s ago: executing program 5 (id=5423): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x1c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000001c0)=0x6, 0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f40)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001400)=ANY=[@ANYBLOB="7c010000130001010000000001000000ac1414aa000000000000000000000000640101020000000000000020000d040000090a00000000af0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000600000000000000030000000000000005000000000000000800000000000000000000000000000001000000000000000000000000000000000100000000000008000000000000000000000000000000c400050020010000000000000000000000000002000004d22b0000000a000000000000000000000000000000000000000000000001010100050000000200000009000080ff010000000000000000000000000001000004d53200000002000000fc0000000000000000000000000000010000000002024800040000000080000005000000fe880000000000000000000000000001000004d42b0000000a000000fe8000000000000000000000000000bb0000000004020300000000000200000006000000"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001580)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000015c0)={'bridge_slave_1\x00', @link_local}) write$tun(r4, &(0x7f0000001600)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40848d4) getsockname$packet(r1, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001180)=0x14) sendmsg$nl_route(r0, &(0x7f00000011c0)={0x0, 0xfffffecc, &(0x7f00000002c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="3c0000001000030528bd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000016380000142012800800010067726500080002800400120008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x440b0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000000e80)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@int=0x3, 0x4) bind$packet(r10, &(0x7f0000000100)={0x11, 0x800, r11}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="e904a20000000180c20000efe100450000240000e0000011907800000000000000004e210000001090786244000000000000"], 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newtfilter={0x24, 0x11, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x74, r8, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x800) 6.193147725s ago: executing program 4 (id=5424): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000003c0)=0x1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x6}) 5.834626505s ago: executing program 2 (id=5426): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 5.45813788s ago: executing program 4 (id=5427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000003580)={0x3, &(0x7f00000035c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(r0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 27) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.734185884s ago: executing program 2 (id=5429): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="18070000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100b0ff00009500000000000000b702000000000000db9af0fff1000000b5090000b0ff00007b9af0ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(&(0x7f0000000400)=[{r0, 0x8000}, {r2, 0x1240}, {r1, 0x200}, {r5, 0x4010}], 0x4, 0xff000000) sendfile(r2, r3, 0x0, 0x2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000440)=@ccm_128={{0x303}, "c6f8ba5a2237d953", "4cbd4c81b491d6cfd426e24eb225d0b2", "1245228d", "2a09b4a2a638cec0"}, 0x28) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000001640)=ANY=[@ANYBLOB="18020000900460b6a4e96ab9000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000009703000000000000800000009e00000095"], &(0x7f00000016c0)='GPL\x00'}, 0x94) 4.732703151s ago: executing program 4 (id=5430): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000d00)={0x2, {{0x2, 0x1, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x64010100}}}, 0x108) (async) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0xfff1, 0xe}}}, 0x24}}, 0x0) (async, rerun: 64) r4 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) connect$inet(r4, &(0x7f0000000e40)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000e80)={0x2, 0x4e20, @loopback}, 0x57) (async) recvmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f40)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000001f40)=0xfe, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000002040)={@dev={0xfe, 0x80, '\x00', 0x21}, @private1, @mcast2, 0xfffffffc, 0x4, 0x66c, 0x0, 0x8000000000000000}) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, 0x0, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000020c0)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) close(0x3) r6 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002200)=""/2, 0x2}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/151, 0x97}, {&(0x7f0000003300)=""/148, 0x94}], 0x4}, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003440)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x4000, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) socket(0x15, 0x80000, 0x7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x9, &(0x7f0000000740)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x71}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x8, 0x1, 0x0, r8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.398261475s ago: executing program 5 (id=5432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xc0a41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @broadcast}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0x43, 0xa0, 0xd0, 0x98, 0x1f8, 0x178, 0x178, 0x1f8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0xd0, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xa, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x7}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@ah={{0x30}, {[0xfffe0000, 0x89], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2f0) write$tun(r1, &(0x7f0000000840)={@val={0x60, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x47}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@d, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@newlink={0x54, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x54}, 0x1, 0xba01}, 0x30008804) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newlink={0x20, 0x10, 0x439, 0x1e, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x1d850}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a40), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="dafe63d5e07905a74123a14cd664137b3bccd883e4504fc06426746099f7909c5cd25f46f3b1cb1037650cca507e0f8d0677b42dbb6ae9de035b6cca7b4d4c28d04554a01a53c05c5366619fd324ceec8d5293d949273c995cfb63641c3803c0bf8f9cac93d5469329c40eefe80dfe899c45e487342c9adfe3d5eaea2c9f409b632c0d3624b0a696b99ae4816a093d514d4bffe78b41ba13ed5a95aceea371e9babbcfc345337ff7d9da8f2e2ab76dcff5db966ea237", @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) vmsplice(r8, &(0x7f0000000b40)=[{&(0x7f0000000b80)='/', 0x1}], 0x1, 0x1) writev(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fedbdf25fe8000000000000000000000000000bbac1414aa000000000000000000000000fffc0000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX=r11, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000ff0900000000000000000000008040000000000000000008000000000000000000000000000000004400050000000000000000000000ffff0a010100000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0xc060}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.263666939s ago: executing program 6 (id=5433): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000002000000fffa00000b000000000000000000000000100000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x800) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x8800) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) (async) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) socket$packet(0x11, 0x2, 0x300) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000400)={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8939}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r2, &(0x7f0000000a40)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRESHEX], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000700)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) bind$bt_l2cap(r7, &(0x7f0000000200)={0x1f, 0x6f1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7fff, 0x3}, 0xe) 4.033801049s ago: executing program 0 (id=5435): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x40}, {0x16, 0x0, 0x6, 0x1}]}, 0x10) 3.892231278s ago: executing program 4 (id=5436): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb8}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) pwritev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="80858924e7384552a10caf32f9927264099177da777cd700ff95f0d55b44e890ad9ffe0ee4f41230f5906b0527aded16161b3a8b607bc3249993ced9fbf880c5c2d3883c0f71bb0d3ad30aaa60f0792b6b1841c5db8d8704b4bc9bba6de91ad9fe065046a55f2e2bbff39106dcaaad5ec32b25b86241c2ba32f21446b9b21d8751513a7756ed628af7d694dd60e13a4e", 0xcf}, {&(0x7f0000000640)="7e17987ac51c7bf6acb3d598966a657d72a82f9a0538c2f5b5c013e3465bb2c4c2d2b6bb92867291f734ae34f3c6405f7104495f04cd9726a105e292b62659c91daa1780c76ae7f9ada34004d5e931d58f9b0c364f62d9169fa0fb7c87a80c62511faf4264bbd182503c3d95e529986bf345fe1545e191aa643e370511838ab41d3bd5ea0edc3c48323fe3116d0e9d95cc6efebd8c1a8af62a5e389eb647207bc3b25e994a77b9", 0xfffffffffffffe95}], 0x3, 0x9, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb8}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)) (async) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) (async) pwritev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="80858924e7384552a10caf32f9927264099177da777cd700ff95f0d55b44e890ad9ffe0ee4f41230f5906b0527aded16161b3a8b607bc3249993ced9fbf880c5c2d3883c0f71bb0d3ad30aaa60f0792b6b1841c5db8d8704b4bc9bba6de91ad9fe065046a55f2e2bbff39106dcaaad5ec32b25b86241c2ba32f21446b9b21d8751513a7756ed628af7d694dd60e13a4e", 0xcf}, {&(0x7f0000000640)="7e17987ac51c7bf6acb3d598966a657d72a82f9a0538c2f5b5c013e3465bb2c4c2d2b6bb92867291f734ae34f3c6405f7104495f04cd9726a105e292b62659c91daa1780c76ae7f9ada34004d5e931d58f9b0c364f62d9169fa0fb7c87a80c62511faf4264bbd182503c3d95e529986bf345fe1545e191aa643e370511838ab41d3bd5ea0edc3c48323fe3116d0e9d95cc6efebd8c1a8af62a5e389eb647207bc3b25e994a77b9", 0xfffffffffffffe95}], 0x3, 0x9, 0x1) (async) 3.826271548s ago: executing program 0 (id=5437): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'syz_tun\x00', 0x0}) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000a80), 0x4) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000ac0)={0x0, 0x0, 0x1, r3}, 0xc) (async) syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="33330000123400112233445586dd6000000000103b40fe8000000000000000000000000000bbff0e"], 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, 0x0, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) close(0x3) (async) bind$bt_hci(r1, &(0x7f0000000540)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0e0001000200", @ANYRES32=r1], 0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x5, [0x3, 0x4, 0x4, 0x5, 0x5]}, &(0x7f0000000180)=0xe) (async) ioctl$BTRFS_IOC_ENCODED_READ(r5, 0x80809440, &(0x7f00000009c0)={&(0x7f0000000940)=[{&(0x7f0000000640)="8a33bbcc249080b9e146f83fce097e25f75c6d18a16d63ee53ed1599a27c3b1b85ed694471d96b754bc54b010d4ffabd0c6c05f652d9f892e806bcf2b6bee4ff60ca28cfa37e3678bd604f8aa344debab30759a614e7c7c418220d601311b3e4500b05c7448458a4b9e9399ac26e1c9f41890e1100d9146829a9966c43a467bd76b6d4429c05a4fc3607c48b2bc7ccf5f57a9924af", 0x95}, {&(0x7f0000000700)="d0633529a001f23c4bf26b7cda4e8662ddadf8a0fe151995f98e8d4911d0c06e132f6fa9130f5960d20111dab149eb89e682fa4d120066ff5fc5788209560e7ea8e83bd282475c9ef5705ce4e514d9b542c8c522d7e8ebee1a23fc73482f108207d38b01b14dcac9af81f33b9002b624f174e5f2bb", 0x75}, {&(0x7f0000000780)="42e78cf1fbabdaaf04abd8943ee8ddf197de2e67893cd5e38e53d3d35ca0a77cd23be64f204e0ed5d77897ca985f13d78847bebec32a522d06858735ac9e68bdd34a9e09d53e449fd5bc9227fd327215a2c86a80282a5c40749b6d85c2c36c0d928f02c8b245fb43c4edd28bd46d7eb5d188ee2868d177d049b62d01f36d9689a4ff16f5dc12a77ebe1d7bec15ea4cf4b0cce3d80f5a82e92a50adcdfad22d15b61a2f887c4a5c393d843f0b8c110df68656b53147185d9b37dc76d7a52c2912651eaa6c0761ad3b0e505937", 0xcc}, {&(0x7f0000000880)="8e117b5cdba4", 0x6}, {&(0x7f00000008c0)="48836bf861c9f3e8f7599fba8b2daa6a6fe2ce9ae7d9b3a46beb779a07ea6ec4e76ed75132f32b4177d282db96a0eeae195ad298e5f818eeb42de9f53d3b0acf9b7fb32c0aafd146655506d4cb859e8f08bd666416ff53f3e5308933f31960bb7c680e4ff996510dbb5aaf", 0x6b}], 0x5, 0x9, 0x0, 0xfffffffffffffe4e, 0x8, 0x7, 0x8, 0x9}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000080)=0x5, 0x4) (async) sendmsg$nl_generic(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x14, 0x3e, 0x229, 0x0, 0x25dfdbfa, {0xa}}, 0x14}}, 0x8000) (async) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3.790406968s ago: executing program 2 (id=5438): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES8=r0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003a000100faff070004000000010000000800ec000741000034a83ca175abda3c26d13ca265927399d071be451f2b00b7a3027e83bbe213eeb36d86444c848b9164407617a96c79fcc2c81c1dfec2c6e42d58ff995babd60ee899588e35"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) getsockopt$bt_hci(r5, 0x11c, 0x1, &(0x7f0000000d00)=""/4104, &(0x7f0000001d40)=0x1008) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="101000000000000008000d7fff000000e4031680e00301"], 0x40c}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, &(0x7f0000001dc0)=""/4096, &(0x7f0000002dc0)=0x1000) (async) r9 = socket$inet6(0xa, 0x5, 0x0) listen(r9, 0x10000) (async) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000002e00)=[{&(0x7f0000002e40)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed510000000000000000", 0x47}], 0x1) (async) syz_genetlink_get_family_id$team(&(0x7f0000002ec0), r10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002f00)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002f40)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x12, 0x2f, &(0x7f0000000c40)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r11, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r11, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0) 3.379926923s ago: executing program 6 (id=5439): r0 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x1, 0xa8a, 0x30}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x14, 0xe, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.120435098s ago: executing program 4 (id=5440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32, @ANYBLOB="0800040064010104080002"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008011}, 0x24000000) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fde6634}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60fb83d6}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6aa90970}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7548ef8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70807788}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x10}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000480)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r8, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="0000020008"], 0xe) r10 = socket(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x3, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r10, &(0x7f0000000c80)=@abs={0xa}, 0x6e) getsockname$unix(r10, 0x0, &(0x7f0000000d00)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000800)='GPL\x00'}, 0x94) unshare(0x24020400) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21981}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r12}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r5) 2.597547838s ago: executing program 6 (id=5441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async, rerun: 32) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) (rerun: 32) 2.50388665s ago: executing program 5 (id=5442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000080000000080000000000000", @ANYRES32, @ANYBLOB="0506000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180)="f78b", 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000002040)='syzkaller\x00'}, 0x48) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000001480)="8907040400", 0x5) sendto$inet(r2, 0x0, 0x0, 0x200040c4, &(0x7f00000014c0)={0x2, 0x4e22, @rand_addr=0x64050102}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r0, &(0x7f00000003c0)="cb050a03b6084cf4894455d8dfa0e84993659a110a8e141c4820be02bb16eba7012594a235abef9c46edeafcd42bdbfe9d6485fdb3f1f14a4a167c52739db17e13335dc14b097e6511fd447369980436dcfa4ed28c", &(0x7f0000000440)=""/4096}, 0x20) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x3, 0x7, &(0x7f0000002140)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f0000002180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000002240)="b9ff03076044238cb89e36e9080047e0ffff00004000632f77fb8035140cac14140c", 0x0, 0x100fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000001500)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r6, 0x5) sendmsg(r6, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r6, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r6, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000300)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'sed\x00', 0x3b, 0x800, 0x2c}, 0x2c) socket(0x28, 0x3, 0x2) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000240)='espintcp', 0x8) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0xc4}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x19, @void}, 0x10) 2.49450518s ago: executing program 0 (id=5443): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) socket(0x21, 0x3, 0x3) socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000008680), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b400000000000000791028000000000069003a00000000009500740000000000", @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x2, 0xa4, &(0x7f0000000280)=""/164, 0x0, 0xaf, '\x00', 0x0, @sk_reuseport}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000400000005", @ANYRESDEC=r1], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e04000000000000000000000000000000000000000000000b03000000000000006300000000000000000000000000000000332b5d6061b37370301022dca95fba37598e65b6d4d7b78b0f3029664041161b1198108a0855cc0fa7eef7d33427ddb1853792899cceebe0aeb91a8411806c51578d1fbec658be0482af151307c8d159f7"], 0x0, 0x52}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000e218015400000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123415000280080001007f000001080002"], 0xb0}, 0x1, 0x0, 0x0, 0x4044091}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0xa}, 0x94) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES8=r2, @ANYBLOB="7e6f283ca45cadeee4b567be56753bc386ff9a34d8d1dd9fc2f5f713405cc93dd73a9ca44834ab809e32bb5cd6d4209067e46075f60da34aae6ab8d1c68878bd902dc2464d6a40a8427c920e7cba4ea0a7b36cce549011b732ccd65f8c", @ANYRES32=r4, @ANYRES16=r0], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r6}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) close(r6) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r7, &(0x7f0000000a80)}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000840)={r4}) 2.2125462s ago: executing program 6 (id=5444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x4008000) sendmsg$nl_route(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x0, 0x10, &(0x7f0000000dc0)={0x0, 0x0, 0x7010000}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000fc0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001040), 0x17a, 0x0) recvmmsg(r4, &(0x7f0000001080), 0x78c2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000010c0)={0x20000014}) epoll_wait(r3, &(0x7f0000001100)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000001140)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x3261e) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000011c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000340110800450000308000000000019078ac1e0001ac1414aa0b009078120002282500000000000000479e73be7f000001ac1414aa"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001240)=[{{0x0, 0xd94ea7173a9f1aac, 0x0}}], 0x40001b6, 0x114) close(r7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000280)={0x0, 'macvtap0\x00', {0x2}, 0x101}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @multicast2}], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 1.352847773s ago: executing program 5 (id=5445): socketpair(0x28, 0x5, 0x28, &(0x7f0000000800)) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001014d9ec29c27000fcd9df250800030001000000080001000000000008004b001300000208004a"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$kcm(0xa, 0x3, 0x73) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x4, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000880)="05000000010001", 0x7) bind$bt_hci(0xffffffffffffffff, &(0x7f00000008c0)={0x1f, 0x2}, 0x6) write(0xffffffffffffffff, &(0x7f0000000900)="0d000000010001", 0x7) write(0xffffffffffffffff, &(0x7f0000000940)="3300000008000102030405060101", 0xe) read(0xffffffffffffffff, &(0x7f0000000980)=""/128, 0x80) write(0xffffffffffffffff, &(0x7f0000000a00)="34000000070001020304050601", 0xd) write(0xffffffffffffffff, &(0x7f0000000a40)='4\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00', 0xd) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000780)={0xa, 0x0, @remote}, 0x10, &(0x7f00000007c0), 0x0, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3d}}], 0x50}, 0xff00) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r0, 0x1000) openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYBLOB="ce24376b507f05fe2312ac341db1fcb9c20d7d0fba31382db318c2a9e8a1ddb6d015cf81a7171abc922f9d905b53e3a471066e2a9674be74ce1d29b92fd3be4d42758f6dd13cad64b4d6bbc0bb610a5d182d63c7eb36ae9dbdefd4d8cf561a", @ANYBLOB="763b62c004f3759233f1e999fab4e2d07cb44150a5bd8d085516c35c24f471eba95ddf58e9ecd7a028a7cae9c234df82bdc36321ec1e2632954134f379"], 0x25) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(0xfffffffffffffffe, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) read(r2, &(0x7f0000000080)=""/187, 0xbb) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="fffff8939c89010d000000020000ff", @ANYRES16=r5, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r6, @ANYBLOB="04005a80"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) 987.919559ms ago: executing program 0 (id=5446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x200, 0x10, 0x1, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x2834d, 0x104}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x957f}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x27c, 0x1}}]}]}, @IFLA_MTU={0x8, 0x4, 0xad}, @IFLA_VF_PORTS={0x1a4, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "938a80e45c6906c38e66d1e75029fc71"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "86249fb77fcdaeeb74debbee3c447cb1"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "778da0ba7dde61ed676e7331a8747466"}]}, {0xb4, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '\x9e@^\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "72791a25854462cfda028e53fb262245"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "35797d84e7416d81fa22046069bee470"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e13de4cb8390710ca39855c0f920e08e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9f961e78d4983d6bd2864addc920fc13"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e6873e2bba4a6e7642111915ca2cf1b1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0ea27f3af697df48b072f5541bfd76c0"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a2a93a09413ae199164a55f2448ef022"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "564306d5744c0f208d982c1b21aaf4c5"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ea40b151c5408ff54a61059daecf621a"}, @IFLA_PORT_VF={0x8, 0x1, 0x80000001}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bdf1771fe289e122f1e8fa67ccf73ba6"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '+\'{::\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6547d953c700b34164326b3adf881c32"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a4c0600661ae5fdca96cf0c21e86b327"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "147fb7d5c7f1067a5bf4fe5c979d52e4"}]}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8840) 885.223721ms ago: executing program 4 (id=5447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x80000001}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x2, 0x7, 0x7fff}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf565668f9c435a84}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r4) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000006c0)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000700)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000740), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000780)=@gcm_128={{0x303}, "430000008a000400", "8e883700daf38a6d69e9b5e9c2f133d7", "6a38e046", "12772541f8eb02bb"}, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x4008010) r12 = socket$kcm(0x10, 0x2, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r14}, 0x5c) sendmsg$kcm(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000009157a270", 0x89}], 0x1}, 0x0) 845.42963ms ago: executing program 5 (id=5448): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000480)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8040010}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000071c6ba7af0deec6f22e09bfd363dd26ed992cdd584f3d08bae87b31d95ef5d6feedd0acf8416c357b26b5049c192209fe87cc18f479d10ff7db3f0bbe3208da7f35572f6b365ca119aefa035", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900050000006e000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b00000000000000080009000d000000", 0x24) 728.078526ms ago: executing program 0 (id=5449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xd7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040082}, 0x8040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x4}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 540.313064ms ago: executing program 2 (id=5450): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 410.619618ms ago: executing program 5 (id=5451): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000109500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x2, 0xff5c, &(0x7f00000009c0)=""/222, 0x0, 0x0, '\x00', 0x0, 0xffffff90}, 0x78) 208.045371ms ago: executing program 6 (id=5452): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x8, 0x8, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'pimreg0\x00', 0x7c2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000740)={0x2, 0x1}, &(0x7f0000000780)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000007c0)={0x0, 0x1c, &(0x7f0000000800)=[@in6={0xa, 0x4e1e, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000880)={0x1, [0x0]}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000940)=@assoc_value={r8, 0x401}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x80a, 0x401}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000a40)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000a80)=0x10) getsockopt$inet_sctp6_SCTP_EVENT(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000002280)={0x2, 0x8005}, &(0x7f00000022c0)=0x8) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000002300)=@assoc_value={0x0}, &(0x7f0000002340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000002380)={r14, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002840)={0x0, 0x11, "20597e211b7ec2fe6a1158ddcc6123afdc"}, &(0x7f0000002880)=0x19) sendmmsg$inet_sctp(r5, &(0x7f00000029c0)=[{&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000400)="6c24d930fbe2173495d619b46f97c0ec0a3786603681345ba24dcf64c90787373642ba3ac63745368697bf7715fdf114fc06497fff66890dbfeb34a13db6069d8a7f9c7cb9236c41b1c8cb5a147e503fbff053b40ef742ec5cf1374d56", 0x5d}, {&(0x7f0000000480)="f5896830d10036ec8328f78fbd0c337685", 0x11}, {&(0x7f0000000600)="b142b5c717ad72f277b2669b703dcd064d1e752e58617de7f4726e7af3868998e369a4aa8964f147228ee5e681da829da45e50732f2fa556a742359f388bbaed66ca75da6f2aadefd50ae066a35d0c94608841b55b561fc8094dfc6be481afde87078f4fce52455c1989a03fca3c67d08dce01c4164ad5dfcc5624df8fd6176d6795065ba3dab0d22b75ef1e388ebf349fa94f63e412560d8db2ebdecb04a7392dfa065966edb92f8fb3cc89db7d7d441074a0f218091e5eab680c702202692a3fcda7796fed3558a8d315fa00154f1e91957d30b229fa5d08e9289ca9f2fb2672c8", 0xe2}], 0x3, &(0x7f0000000ac0)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x4008, 0xb92e, 0x4, r6}}, @authinfo={0x18, 0x84, 0x6, {0x3d4}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x40, 0x200, 0x0, 0x7, 0x800, 0x2, 0xba, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @authinfo={0x18, 0x84, 0x6, {0xfc00}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8, 0x6, 0x100, r9}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0x9}, @sndrcv={0x30, 0x84, 0x1, {0xfffd, 0x80, 0x203, 0x1, 0xa13, 0xe043, 0x9, 0x7ff, r10}}], 0x140}, {&(0x7f0000000c00)=@in={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000c40)="46095f3a2d435cca1693dcd245961cdd167d1689c339ff80ee1247f078305cabe8515329cec94977f033d0e75d3f05b6f1f4b472ab60e8d9942535639521b2a54b9594322216f53af78cce77a8499064ec2f6b1a26b9ec0d16296d784e42911ad9544c63b62f5a61a60d703bfcf924d86cb0d1c05c304bfe4590d34a83e52857162f9e5fbbe9084f52096ac6848caeab9357f68c17877ba886a73d12068a7460542fa7a7221bc3356255f7c52d20f77f7c4687db9b177763d0dcd52c0e9f47fa7a36c1d00989ff64f19a932c442e71", 0xcf}, {&(0x7f0000000d40)="55485c6742d0dbf87d10242afa31a307958b8d2ed8b963b087ccd9ab0727118cff3478f98ff6beb5415696d7fba609f215df45ae4f6eadccf80976fe3c442dab02acd472e25ec9373476c0fe939dff3d7e765661", 0x54}, {&(0x7f0000000dc0)="1593f134d26a238b6b2fbd0e9a146801ae27e3aecad6a5264146ac687c06946cfc93", 0x22}], 0x3, 0x0, 0x0, 0x4}, {&(0x7f0000000e40)=@in6={0xa, 0x4e20, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x92}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000e80)="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", 0xfc}, {&(0x7f0000000f80)="5dee9cae0aff1cb9692820bcbcc9cd86a0a7c651b230839d3cab72239366d0bd0d66557a6e67cf6e74bdb90b67c13238770807a9c11066007572652b9efb6296136ff997e40c330251eccee250eb27ab96f04ba2ce8552c5148376ab6103c598c05147dccaedc7ba8d35e854f4eae7e26923965d7b5e950a8c703c6b8883bd3ce4017d6c6e1d9474b1ddf95d91c41ca7159915fc145e20b5e1e83e8e234af1a222db306c3ef5c3b284be4ac456a7", 0xae}, {&(0x7f0000001040)="cfea4cb3448bd9e0ba8c3888a670faa6b4e9646b1980bc86ef3c1771b9530c8ac05db709d213bc1ae9672f1820421be6457adfa3eb1458b18f20b61142058e1cdda1ebd689ca7222f6a782d34ce2bd3f8da1d8313b3530d307267a3161210042faedd92d81567ef7a94a", 0x6a}, {&(0x7f00000010c0)="fea0f1c33331816f3f1eb2a5ad214a76149a93b28c97c01bcf4c750829b69e1c8ad61e9c372d3a6e5cf92ddf82f3e8b63c741c44646ef16376da35fb61a738a62f2489964f5257a27887470447f51ddf0b74fd460b3c00d778abdf736846f10baf499e7d5074a265dfcd772b40c025d506c8494c796f79b882722c6ac06c36fac9f119631a3799aa1842857fd90657c2e6697d4ed45dd6c838fa5548e0ea2853e7d55998ace926d4c7acc242d849", 0xae}], 0x4, &(0x7f00000011c0)=[@authinfo={0x18, 0x84, 0x6, {0x5}}, @init={0x18, 0x84, 0x0, {0x8001, 0x5, 0x401, 0x6}}], 0x30, 0x4c085}, {&(0x7f0000001200)=@in6={0xa, 0x4e22, 0x3, @private2, 0xefe6}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001240)="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", 0x1000}], 0x1, &(0x7f00000023c0)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x33}}, @sndinfo={0x20, 0x84, 0x2, {0xaad, 0x8000, 0x1937}}, @authinfo={0x18, 0x84, 0x6, {0xfc00}}, @sndinfo={0x20, 0x84, 0x2, {0xfe5d, 0x8005, 0xbfd, 0x4, r11}}, @sndinfo={0x20, 0x84, 0x2, {0xa, 0x204, 0x4, 0x7, r14}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}], 0xe0, 0x4004}, {&(0x7f00000024c0)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002500)="e3edb54bed11799f87d22c47d92900a4ecb25806b0c708be644b4917147a8198dc9a32cb4efa249c3f23aa0cc447cf37a5d6fb297e68a184023541c46b0011d65015fc255bcd0e511db19aa029f22f0704236be7728b95ce5a4361ee0df265b740c1335562dc8bb23faac7ec07e0d6f8986641db695f1e611787668911aceb027d038deae6591f90a6f0ee9a4744a6da11415098e7c32f9bf15287b7e3184f290e80036a99887d6231deb8d2082129676a465affa6bcfe6f540cc74df71710c9f61f81990695a852d6bdc6be7fc456ed60aa7e9d3398775e612da0112b4fc08ffb5717cfdf364ed1dd17df4f55209e4231c113d6", 0xf4}, {&(0x7f0000002600)="81d6c76398df5976eff014eac69488bd5c3ba61ac7924eb56b22313dc65d7104dd30a92eab787ad5c014d3baf2e93245bc5e89cf0d993f375a71c6a1801351c5", 0x40}, {&(0x7f0000002640)="34a7a69db35f0ccb4eb47775ac8b68472c77c78d070777a10548", 0x1a}], 0x3, &(0x7f00000026c0)=[@init={0x18, 0x84, 0x0, {0x6, 0xe426, 0x6, 0x6}}], 0x18, 0x4000}, {&(0x7f0000002700)=@in6={0xa, 0x4e21, 0xc, @remote, 0x9}, 0x1c, &(0x7f0000002800)=[{&(0x7f0000002740)="0a5d59c64e6f70e1b876b8b4d9321baab9410e1c51737b8579a964cd353c7f41f95ff7a3c6027fed2a0cff7706847c30c730afa8c934f3e951a4051cf42c6349ddaf9e2f8b59261133120f23ab44c032170af97bb9f23889b2b9f8d1c35fd9421dba8ca4ceb70d0527dbb1535f231afe68948e650e2f96e88ad39ce1db8fede3d00539049f0d1eb652768e2f7251e02742e628ef8e125e673f95b1fc0e8d6866b74c019a8079ef6e91b31fa9ba32a34abf49bc3b40d9783e39029b99b3103057", 0xc0}], 0x1, &(0x7f00000028c0)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x0, 0x8005, 0x0, 0x3, 0x280000, 0x6, 0x1000, r15}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @authinfo={0x18, 0x84, 0x6, {0x99}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @init={0x18, 0x84, 0x0, {0x5, 0x5, 0xffff, 0x3}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x17}}], 0xc8, 0x80}], 0x6, 0x4000000) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 197.640211ms ago: executing program 0 (id=5453): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r1, 0x7, 0x4, &(0x7f0000000280)="5bd52268", 0x6, 0x6, 0x8, 0x200, 0x3, 0x2, 0x9, 'syz0\x00'}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000540)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 0s ago: executing program 2 (id=5454): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0xbe, &(0x7f0000000e40)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "2a995ffbee74ab1b3690842deee3df48f8806827d5c763698c4c288abc85bfcc", "9f6cf565ebbd4ddff9f9c023b431968db6dbc868705956f8baf975b8cbee17048850e8e89f732bcec1e3baee50e5acb8", "112c482ee3d37cb1a7a31c450e403a6ee32477eaeb41d283c8618b26", {"6652725f56c59b04563b19a79d293550", "25b048c89cb27902d8d629c56b49c550"}}}}}}}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000850000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) kernel console output (not intermixed with test programs): 722.831245][T24402] syzkaller0: entered allmulticast mode [ 725.273117][T22980] net_ratelimit: 65 callbacks suppressed [ 725.273143][T22980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.273661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.448000][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.488809][T22976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.489049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.764739][T24440] netlink: 'syz.2.4828': attribute type 1 has an invalid length. [ 728.433538][T24456] rxe_eth0 speed is unknown, defaulting to 1000 [ 728.473910][ T7422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.525184][T24461] __nla_validate_parse: 60 callbacks suppressed [ 728.525209][T24461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4833'. [ 728.536049][T24463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4833'. [ 728.778368][T24469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4836'. [ 729.390368][T24482] syz.0.4837: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 729.390445][T24482] CPU: 1 UID: 0 PID: 24482 Comm: syz.0.4837 Not tainted syzkaller #0 PREEMPT(full) [ 729.390470][T24482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 729.390484][T24482] Call Trace: [ 729.390493][T24482] [ 729.390504][T24482] dump_stack_lvl+0xe8/0x150 [ 729.390543][T24482] warn_alloc+0x24d/0x270 [ 729.390571][T24482] ? stack_depot_save_flags+0x33/0x810 [ 729.390607][T24482] ? __pfx_warn_alloc+0x10/0x10 [ 729.390630][T24482] ? kasan_save_track+0x4f/0x80 [ 729.390657][T24482] ? __kasan_kmalloc+0x93/0xb0 [ 729.390686][T24482] ? xsk_init_queue+0x8a/0xe0 [ 729.390709][T24482] ? xsk_setsockopt+0x52a/0x960 [ 729.390730][T24482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.390767][T24482] __vmalloc_node_range_noprof+0x12c/0x16f0 [ 729.390824][T24482] ? rcu_is_watching+0x16/0xb0 [ 729.390861][T24482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 729.390889][T24482] ? __kmalloc_cache_noprof+0x31c/0x600 [ 729.390915][T24482] ? __kmalloc_cache_noprof+0x148/0x600 [ 729.390940][T24482] ? xskq_create+0x56/0x220 [ 729.390967][T24482] xskq_create+0x148/0x220 [ 729.390991][T24482] ? xsk_init_queue+0x8a/0xe0 [ 729.391016][T24482] xsk_init_queue+0x8a/0xe0 [ 729.391041][T24482] xsk_setsockopt+0x52a/0x960 [ 729.391066][T24482] ? __pfx_xsk_setsockopt+0x10/0x10 [ 729.391088][T24482] ? __pfx_aa_sk_perm+0x10/0x10 [ 729.391133][T24482] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 729.391160][T24482] ? __pfx_xsk_setsockopt+0x10/0x10 [ 729.391184][T24482] do_sock_setsockopt+0x17c/0x1b0 [ 729.391212][T24482] __x64_sys_setsockopt+0x13d/0x1b0 [ 729.391240][T24482] do_syscall_64+0x166/0x520 [ 729.391264][T24482] ? trace_irq_disable+0x3b/0x140 [ 729.391291][T24482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.391313][T24482] ? clear_bhb_loop+0x70/0xc0 [ 729.391340][T24482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.391369][T24482] RIP: 0033:0x7f6dce99fb19 [ 729.391391][T24482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.391410][T24482] RSP: 002b:00007f6dcf821028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 729.391432][T24482] RAX: ffffffffffffffda RBX: 00007f6dcec26270 RCX: 00007f6dce99fb19 [ 729.391448][T24482] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 729.391461][T24482] RBP: 00007f6dcea37b70 R08: 0000000000000004 R09: 0000000000000000 [ 729.391475][T24482] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 729.391489][T24482] R13: 00007f6dcec26308 R14: 00007f6dcec26270 R15: 00007ffef9bdbb48 [ 729.391525][T24482] [ 729.720146][T24482] Mem-Info: [ 729.720165][T24482] active_anon:6013 inactive_anon:0 isolated_anon:0 [ 729.720165][T24482] active_file:2 inactive_file:43991 isolated_file:0 [ 729.720165][T24482] unevictable:0 dirty:171 writeback:0 [ 729.720165][T24482] slab_reclaimable:12909 slab_unreclaimable:135814 [ 729.720165][T24482] mapped:32875 shmem:534 pagetables:3549 [ 729.720165][T24482] sec_pagetables:0 bounce:0 [ 729.720165][T24482] kernel_misc_reclaimable:0 [ 729.720165][T24482] free:1232022 free_pcp:9535 free_cma:0 [ 729.720224][T24482] Node 0 active_anon:24052kB inactive_anon:0kB active_file:8kB inactive_file:175772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131500kB dirty:684kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18144kB pagetables:14056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 729.720282][T24482] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 729.720344][T24482] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.720409][T24482] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 729.720451][T24482] Node 0 DMA32 free:969108kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24052kB inactive_anon:0kB active_file:8kB inactive_file:175772kB unevictable:0kB writepending:684kB zspages:0kB present:3129332kB managed:2523116kB mlocked:0kB bounce:0kB free_pcp:38136kB local_pcp:18488kB free_cma:0kB [ 729.720515][T24482] lowmem_reserve[]: 0 0 1 1 1 [ 729.720554][T24482] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 729.720611][T24482] lowmem_reserve[]: 0 0 0 0 0 [ 729.720650][T24482] Node 1 Normal free:3943620kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.720707][T24482] lowmem_reserve[]: 0 0 0 0 0 [ 729.720745][T24482] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 729.720867][T24482] Node 0 DMA32: 1373*4kB (UME) 474*8kB (UME) 1689*16kB (UM) 543*32kB (UME) 498*64kB (UM) 820*128kB (UME) 405*256kB (UME) 180*512kB (UME) 75*1024kB (UME) 9*2048kB (UME) 119*4096kB (UM) = 969012kB [ 729.721064][T24482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 729.721168][T24482] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 10*16kB (UM) 10*32kB (UM) 8*64kB (UM) 8*128kB (UM) 5*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3943668kB [ 729.721344][T24482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.721362][T24482] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.721380][T24482] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 729.721397][T24482] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 729.721415][T24482] 44523 total pagecache pages [ 729.721424][T24482] 0 pages in swap cache [ 729.721432][T24482] Free swap = 124996kB [ 729.721441][T24482] Total swap = 124996kB [ 729.721451][T24482] 2097051 pages RAM [ 729.721459][T24482] 0 pages HighMem/MovableOnly [ 729.721467][T24482] 434241 pages reserved [ 729.721476][T24482] 0 pages cma reserved [ 730.261552][T24473] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.315479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.619170][T24497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4842'. [ 730.635755][T24498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4842'. [ 730.955302][T22973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.955873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.513289][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.805088][T24515] ipvlan2: entered promiscuous mode [ 731.805520][T24521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 731.832215][T24515] bridge0: port 3(ipvlan2) entered blocking state [ 731.836262][T24515] bridge0: port 3(ipvlan2) entered disabled state [ 731.836730][T24515] ipvlan2: entered allmulticast mode [ 731.836747][T24515] bridge0: entered allmulticast mode [ 731.864017][T24515] ipvlan2: left allmulticast mode [ 731.864041][T24515] bridge0: left allmulticast mode [ 732.003790][T24523] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4849'. [ 732.089616][T24526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4850'. [ 732.244135][T22969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.244365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.284111][T22969] 0ªî{X¹¦: left promiscuous mode [ 732.286111][T22969] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 732.419575][T22969] dvmrp6: left allmulticast mode [ 733.313014][T24552] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4856'. [ 733.398171][T22969] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 733.505324][T22969] bond14 (unregistering): (slave ip6gre2): Releasing backup interface [ 733.505355][T22969] ip6gre2 (unregistering): left promiscuous mode [ 733.797985][T22969] bond15 (unregistering): (slave geneve5): Releasing active interface [ 733.830500][T22969] bond6 (unregistering): (slave geneve3): Releasing active interface [ 733.869260][T22969] bond3 (unregistering): (slave geneve2): Releasing active interface [ 734.015934][T22969] bond8 (unregistering): (slave bridge1): Releasing backup interface [ 734.078638][T22969] bond16 (unregistering): (slave bridge4): Releasing backup interface [ 734.100421][T22969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.114767][T22969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.118063][T22969] bond0 (unregistering): Released all slaves [ 734.136272][T22969] bond1 (unregistering): Released all slaves [ 734.166750][T22969] bond2 (unregistering): Released all slaves [ 734.187238][T22969] bond3 (unregistering): Released all slaves [ 734.217431][T22969] bond4 (unregistering): Released all slaves [ 734.268252][T22969] bond5 (unregistering): (slave veth3): Releasing active interface [ 734.269426][T22969] bond5 (unregistering): Released all slaves [ 734.324960][T22969] bond6 (unregistering): Released all slaves [ 734.369481][T22969] bond7 (unregistering): (slave veth5): Releasing active interface [ 734.378317][T22969] bond7 (unregistering): Released all slaves [ 734.454443][T22969] bond8 (unregistering): Released all slaves [ 734.510564][T22969] bond9 (unregistering): Released all slaves [ 734.562653][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.597011][T22969] team0: Port device macvlan0 removed [ 734.614557][T22969] bond10 (unregistering): Released all slaves [ 734.664695][T22969] bond11 (unregistering): Released all slaves [ 734.718819][T22969] bond12 (unregistering): Released all slaves [ 734.778455][T22969] bond13 (unregistering): Released all slaves [ 734.824480][T22969] bond14 (unregistering): Released all slaves [ 734.870255][T22969] bond15 (unregistering): Released all slaves [ 734.909285][T22969] bond16 (unregistering): Released all slaves [ 734.958562][T24527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4851'. [ 734.958594][T24527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4851'. [ 734.958610][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4851'. [ 734.991255][T24456] lo speed is unknown, defaulting to 1000 [ 735.296499][T24565] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4861'. [ 735.332451][T22969] tipc: Disabling bearer [ 735.333561][T22969] tipc: Left network mode [ 735.334275][T24456] wg0 speed is unknown, defaulting to 1000 [ 736.143613][T24586] FAULT_INJECTION: forcing a failure. [ 736.143613][T24586] name failslab, interval 1, probability 0, space 0, times 0 [ 736.143648][T24586] CPU: 1 UID: 0 PID: 24586 Comm: syz.0.4866 Not tainted syzkaller #0 PREEMPT(full) [ 736.143672][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 736.143686][T24586] Call Trace: [ 736.143695][T24586] [ 736.143704][T24586] dump_stack_lvl+0xe8/0x150 [ 736.143745][T24586] should_fail_ex+0x3eb/0x540 [ 736.143778][T24586] should_failslab+0xa8/0x100 [ 736.143811][T24586] __kmalloc_cache_noprof+0x9e/0x600 [ 736.143848][T24586] ? register_netdevice+0x588/0x2280 [ 736.143872][T24586] ? register_netdevice+0x588/0x2280 [ 736.143910][T24586] register_netdevice+0x588/0x2280 [ 736.143939][T24586] ? __pfx___mutex_trylock_common+0x10/0x10 [ 736.143976][T24586] ? rcu_is_watching+0x16/0xb0 [ 736.144008][T24586] ? trace_contention_end+0x3d/0x140 [ 736.144041][T24586] ? __pfx_register_netdevice+0x10/0x10 [ 736.144069][T24586] ? lock_acquire+0x115/0x350 [ 736.144098][T24586] ? __asan_memset+0x22/0x50 [ 736.144123][T24586] ? ip6_tnl_encap_setup+0x89/0x620 [ 736.144225][T24586] ip6gre_newlink_common+0x403/0x5b0 [ 736.144249][T24586] ? net_generic+0x1e/0x240 [ 736.144277][T24586] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 736.144305][T24586] ? ip6gre_tunnel_find+0x49e/0x530 [ 736.144343][T24586] ip6gre_newlink+0x238/0x8c0 [ 736.144366][T24586] ? rtnl_create_link+0xa04/0xd70 [ 736.144393][T24586] ? __pfx_ip6gre_newlink+0x10/0x10 [ 736.144420][T24586] rtnl_newlink_create+0x305/0x7b0 [ 736.144451][T24586] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 736.144480][T24586] ? __pfx___mutex_lock+0x10/0x10 [ 736.144518][T24586] ? ns_capable+0x84/0xe0 [ 736.144551][T24586] rtnl_newlink+0x167a/0x1c30 [ 736.144591][T24586] ? __pfx_rtnl_newlink+0x10/0x10 [ 736.144610][T24586] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 736.144636][T24586] ? netlink_deliver_tap+0x19c/0x1b0 [ 736.144663][T24586] ? netlink_unicast+0x8c1/0xa80 [ 736.144685][T24586] ? netlink_sendmsg+0x7f0/0xb20 [ 736.144718][T24586] ? sock_sendmsg_nosec+0x14e/0x190 [ 736.144744][T24586] ? ____sys_sendmsg+0x54e/0x850 [ 736.144763][T24586] ? ___sys_sendmsg+0x2a5/0x360 [ 736.144782][T24586] ? __x64_sys_sendmsg+0x1b1/0x290 [ 736.144802][T24586] ? do_syscall_64+0x166/0x520 [ 736.144825][T24586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.144898][T24586] ? kasan_quarantine_put+0xbb/0x1f0 [ 736.144924][T24586] ? lockdep_hardirqs_on+0x7b/0x110 [ 736.144951][T24586] ? nlmon_xmit+0xb0/0x100 [ 736.144974][T24586] ? kmem_cache_free+0x182/0x650 [ 736.145010][T24586] ? __lock_acquire+0x747/0x2de0 [ 736.145044][T24586] ? __pfx_hook_capable+0x10/0x10 [ 736.145064][T24586] ? __dev_queue_xmit+0x29b/0x3920 [ 736.145092][T24586] ? __pfx_hook_capable+0x10/0x10 [ 736.145113][T24586] ? lockdep_hardirqs_on+0x7b/0x110 [ 736.145167][T24586] ? __pfx_rtnl_newlink+0x10/0x10 [ 736.145187][T24586] rtnetlink_rcv_msg+0x802/0xc00 [ 736.145213][T24586] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 736.145233][T24586] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 736.145258][T24586] ? __copy_skb_header+0xa3/0x4a0 [ 736.145294][T24586] netlink_rcv_skb+0x226/0x4a0 [ 736.145323][T24586] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 736.145346][T24586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.145390][T24586] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.145418][T24586] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.145453][T24586] netlink_unicast+0x8ef/0xa80 [ 736.145501][T24586] netlink_sendmsg+0x7f0/0xb20 [ 736.145538][T24586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.145571][T24586] ? aa_sock_msg_perm+0x144/0x210 [ 736.145599][T24586] ? apparmor_socket_sendmsg+0x98/0x360 [ 736.145631][T24586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.145658][T24586] sock_sendmsg_nosec+0x14e/0x190 [ 736.145688][T24586] ____sys_sendmsg+0x54e/0x850 [ 736.145717][T24586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.145751][T24586] ? import_iovec+0x73/0xa0 [ 736.145782][T24586] ___sys_sendmsg+0x2a5/0x360 [ 736.145802][T24586] ? __lock_acquire+0x747/0x2de0 [ 736.145841][T24586] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.145909][T24586] ? __fget_files+0x3a2/0x420 [ 736.145933][T24586] ? __fget_files+0x2a/0x420 [ 736.145968][T24586] __x64_sys_sendmsg+0x1b1/0x290 [ 736.145995][T24586] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.146044][T24586] do_syscall_64+0x166/0x520 [ 736.146066][T24586] ? trace_irq_disable+0x3b/0x140 [ 736.146094][T24586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.146115][T24586] ? clear_bhb_loop+0x70/0xc0 [ 736.146141][T24586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.146162][T24586] RIP: 0033:0x7f6dce99fb19 [ 736.146183][T24586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.146201][T24586] RSP: 002b:00007f6dcf884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.146225][T24586] RAX: ffffffffffffffda RBX: 00007f6dcec25fa0 RCX: 00007f6dce99fb19 [ 736.146241][T24586] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 736.146255][T24586] RBP: 00007f6dcf884090 R08: 0000000000000000 R09: 0000000000000000 [ 736.146268][T24586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.146280][T24586] R13: 00007f6dcec26038 R14: 00007f6dcec25fa0 R15: 00007ffef9bdbb48 [ 736.146317][T24586] [ 736.715442][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 736.736076][T22973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.736590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.841527][T24596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4869'. [ 737.218403][T24602] netlink: 'syz.4.4872': attribute type 4 has an invalid length. [ 737.218430][T24602] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4872'. [ 737.322517][T24602] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 737.592315][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.992854][T22978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.993114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.522830][T24585] netlink: 264 bytes leftover after parsing attributes in process `syz.3.4868'. [ 738.522868][T24585] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4868'. [ 738.702731][T24619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4877'. [ 739.039405][T24625] netlink: 'syz.0.4879': attribute type 1 has an invalid length. [ 739.305747][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4880'. [ 739.474981][T24625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 739.709041][T24630] bond6: (slave geneve2): making interface the new active one [ 739.727599][T24630] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 739.802675][ T29] audit: type=1800 audit(1793715952.980:20): pid=24643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4883" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1670 res=0 errno=-22 [ 740.265558][T24648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.638606][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.038830][T24668] 0: reclassify loop, rule prio 0, protocol 03 [ 741.459477][T22969] hsr_slave_0: left promiscuous mode [ 741.498960][T22969] hsr_slave_1: left promiscuous mode [ 741.527034][T22969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.553624][T22969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.581568][T22969] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 741.582013][T22969] batman_adv: batadv0: Removing interface: syzkaller0 [ 742.324384][T24684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.324598][T24684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.324907][T24684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.368919][T24684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.369546][T24684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.371282][T24684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.373382][T24684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.422375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.502393][T22970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.503000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.771478][T22969] team0 (unregistering): Port device team_slave_1 removed [ 743.814052][T22969] team0 (unregistering): Port device team_slave_0 removed [ 743.873734][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.878499][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.881096][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 743.908402][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.917324][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.290158][T22973] smc: removing ib device syz1 [ 744.368490][T22973] smbdirect: ib_dev[syz1] removed [ 744.850956][T24678] netlink: 'syz.3.4894': attribute type 1 has an invalid length. [ 745.992009][ T5642] Bluetooth: hci0: command tx timeout [ 746.699935][T24737] __nla_validate_parse: 1 callbacks suppressed [ 746.699960][T24737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4904'. [ 747.191093][T24705] rxe_eth0 speed is unknown, defaulting to 1000 [ 747.640364][ T1318] net_ratelimit: 5 callbacks suppressed [ 747.640391][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.899100][T24765] ip_tables: iptables: counters copy to user failed while replacing table [ 748.065850][T24456] syz_tun (unregistering): left allmulticast mode [ 748.072068][ T5642] Bluetooth: hci0: command tx timeout [ 748.140123][T24774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4913'. [ 748.249275][T22982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.249934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.877214][T22980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.877459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.336730][T24795] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 749.336832][T24795] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 749.765782][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.152852][ T5642] Bluetooth: hci0: command tx timeout [ 751.692839][T24846] syzkaller1: entered promiscuous mode [ 751.692866][T24846] syzkaller1: entered allmulticast mode [ 751.872856][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.874596][T24848] bridge_slave_0: left allmulticast mode [ 751.874625][T24848] bridge_slave_0: left promiscuous mode [ 751.874890][T24848] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.042106][T24848] bridge_slave_1: left allmulticast mode [ 752.044504][T24848] bridge_slave_1: left promiscuous mode [ 752.051077][T24848] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.231798][ T5642] Bluetooth: hci0: command tx timeout [ 752.456712][T24848] bond0: (slave bond_slave_0): Releasing backup interface [ 752.461376][T24848] bond_slave_0: left allmulticast mode [ 752.551539][T24848] bond0: (slave bond_slave_1): Releasing backup interface [ 752.578495][T24848] bond_slave_1: left allmulticast mode [ 752.711433][T24848] team0: Port device team_slave_0 removed [ 752.794417][ T7417] net_ratelimit: 1 callbacks suppressed [ 752.794443][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.917995][T24848] team0: Port device team_slave_1 removed [ 752.927300][T24848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.927518][T24848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.965191][T24848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.966394][T24848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.988958][T24848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 753.538393][T24705] lo speed is unknown, defaulting to 1000 [ 753.997234][T22982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.997762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.634965][T22973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.635301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.692662][T24897] sctp: [Deprecated]: syz.0.4933 (pid 24897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 754.692662][T24897] Use struct sctp_sack_info instead [ 754.776666][T24881] syzkaller0: entered promiscuous mode [ 754.776914][T24881] syzkaller0: entered allmulticast mode [ 754.976851][T22969] IPVS: stop unused estimator thread 0... [ 755.250279][T24868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.250560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.272571][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 755.830057][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4939'. [ 755.830088][T24921] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4939'. [ 755.843189][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.277587][T24936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4941'. [ 756.277629][T24936] netlink: 'syz.4.4941': attribute type 1 has an invalid length. [ 758.873033][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.760927][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.763520][T22982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.764036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.967106][T24936] geneve2: entered promiscuous mode [ 760.434361][T22977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.434612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.193971][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.258508][T24977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.258986][T24705] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.259101][T24705] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.260766][T24705] bridge_slave_0: entered allmulticast mode [ 761.323528][T24705] bridge_slave_0: entered promiscuous mode [ 761.462689][T24705] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.462822][T24705] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.462994][T24705] bridge_slave_1: entered allmulticast mode [ 761.465927][T24705] bridge_slave_1: entered promiscuous mode [ 761.495719][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.700701][T24705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.896616][T24705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.925504][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.035592][T24705] team0: Port device team_slave_0 added [ 762.052779][T24705] team0: Port device team_slave_1 added [ 762.085002][T24996] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4954'. [ 762.114316][T24705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.114337][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.114363][T24705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.116520][T24705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.116534][T24705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.116560][T24705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.196140][T24999] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 762.196140][T24999] Please contact the netfilter-devel mailing list or update your nftables rules. [ 762.244696][T25009] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4954'. [ 762.417677][T25003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4953'. [ 762.459597][T25013] lo: entered promiscuous mode [ 762.461632][T25013] tunl0: entered promiscuous mode [ 762.575575][T25013] gre0: entered promiscuous mode [ 762.645653][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4957'. [ 762.706578][T25013] gretap0: entered promiscuous mode [ 762.822782][T25013] erspan0: entered promiscuous mode [ 762.917333][T25013] ip_vti0: entered promiscuous mode [ 762.928864][T25035] netlink: 'syz.2.4957': attribute type 1 has an invalid length. [ 762.928886][T25035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4957'. [ 763.035918][T25013] ip6_vti0: entered promiscuous mode [ 763.126394][T25013] ip6tnl0: entered promiscuous mode [ 763.202700][T25013] ip6gre0: entered promiscuous mode [ 763.292325][T25013] syz_tun: entered promiscuous mode [ 763.381068][T25013] ip6gretap0: entered promiscuous mode [ 763.405147][T25013] bridge0: entered promiscuous mode [ 763.424798][T25013] vcan0: entered promiscuous mode [ 763.448166][T25013] bond_slave_0: left promiscuous mode [ 763.448208][T25013] @0Ù: left promiscuous mode [ 763.448236][T25013] bond0: entered promiscuous mode [ 763.448250][T25013] bond_slave_0: entered promiscuous mode [ 763.448473][T25013] @0Ù: entered promiscuous mode [ 763.568223][T25013] tipc: Resetting bearer [ 764.130000][T25013] nlmon0: entered promiscuous mode [ 764.205003][T25013] batadv0: entered promiscuous mode [ 764.275994][T25013] vxcan0: entered promiscuous mode [ 764.291281][T25013] vxcan1: entered promiscuous mode [ 764.318591][T25013] veth0: entered promiscuous mode [ 764.336806][T25013] veth1: entered promiscuous mode [ 764.355276][T25013] wg0: entered promiscuous mode [ 764.374189][T25013] wg1: entered promiscuous mode [ 764.444568][T25013] wg2: entered promiscuous mode [ 764.520543][T25013] veth1_to_bridge: entered promiscuous mode [ 764.651227][T25013] veth0_to_bond: entered promiscuous mode [ 764.654988][T25013] veth1_to_bond: entered promiscuous mode [ 764.663850][T25013] veth0_to_team: entered promiscuous mode [ 764.675334][T25013] veth1_to_team: entered promiscuous mode [ 764.681004][T25013] veth0_to_batadv: entered promiscuous mode [ 764.685065][T25013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.685121][T25013] batadv_slave_0: entered promiscuous mode [ 764.688791][T25013] veth1_to_batadv: entered promiscuous mode [ 764.691479][T25013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.691527][T25013] batadv_slave_1: entered promiscuous mode [ 764.696941][T25013] xfrm0: entered promiscuous mode [ 764.703521][T25013] veth0_to_hsr: entered promiscuous mode [ 764.708862][T25013] veth1_to_hsr: entered promiscuous mode [ 764.723105][T25013] hsr0: entered promiscuous mode [ 764.729422][T25013] veth1_virt_wifi: entered promiscuous mode [ 764.742668][T25013] veth0_virt_wifi: entered promiscuous mode [ 764.751242][T25013] virt_wifi0: entered promiscuous mode [ 764.789538][T25013] vlan0: entered promiscuous mode [ 764.805796][T25013] vlan1: entered promiscuous mode [ 764.819698][T25013] macvlan0: entered promiscuous mode [ 764.837853][T25013] macvlan1: entered promiscuous mode [ 764.864284][T25013] ipvlan0: entered promiscuous mode [ 764.869772][T25013] ipvlan1: entered promiscuous mode [ 764.930266][T25013] macvtap0: entered promiscuous mode [ 764.941382][T25013] macsec0: entered promiscuous mode [ 764.948841][T25013] geneve0: entered promiscuous mode [ 764.953032][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.955914][T25013] geneve1: entered promiscuous mode [ 764.977597][T25013] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 765.002980][T25013] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 765.012512][T25013] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 765.022099][T25013] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 765.022293][T25013] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 765.023198][T25013] dvmrp6: entered promiscuous mode [ 765.027720][T25013] bond1: entered promiscuous mode [ 765.027867][T25013] macvtap0.2: entered promiscuous mode [ 765.028192][T25013] bridge1: entered promiscuous mode [ 765.028329][T25013] mac80211_hwsim hwsim33 wlan2: entered promiscuous mode [ 765.030537][T25013] veth2: entered promiscuous mode [ 765.030772][T25013] veth3: entered promiscuous mode [ 765.030924][T25013] ip6gre1: entered promiscuous mode [ 765.038473][T25013] vxlan0: entered promiscuous mode [ 765.050279][T25013] bridge_slave_1.: entered promiscuous mode [ 765.089327][T25013] ip6gre2: entered promiscuous mode [ 765.089485][T25013] macvlan2: entered promiscuous mode [ 765.127887][T25013] ip6tnl1: entered promiscuous mode [ 765.128049][T25013] bond4: entered promiscuous mode [ 765.128065][T25013] macvlan3: entered promiscuous mode [ 765.128524][T25013] ip6gretap1: entered promiscuous mode [ 765.147630][T25013] syzkaller0: entered promiscuous mode [ 765.147794][T25013] ip6gre3: entered promiscuous mode [ 765.158943][T25013] bond6: entered promiscuous mode [ 765.163756][T25013] bond7: entered promiscuous mode [ 765.163776][T25013] geneve2: entered promiscuous mode [ 765.174662][T25013] bond8: entered promiscuous mode [ 765.174682][T25013] gretap1: entered promiscuous mode [ 765.183961][T25013] ip6gre4: entered promiscuous mode [ 765.184113][T25013] mac80211_hwsim hwsim36 wlan3: entered promiscuous mode [ 765.184264][T25013] bond9: entered promiscuous mode [ 765.187006][T25013] veth4: entered promiscuous mode [ 765.190439][T25013] veth5: entered promiscuous mode [ 765.193400][T25013] bridge4: entered promiscuous mode [ 765.201354][T25013] ip6_vti1: entered promiscuous mode [ 765.516938][T22980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.517408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.569668][T24705] hsr_slave_0: entered promiscuous mode [ 765.576964][T24705] hsr_slave_1: entered promiscuous mode [ 765.577733][T24705] debugfs: 'hsr0' already exists in 'hsr' [ 765.577752][T24705] Cannot create hsr debugfs directory [ 765.633140][T22980] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.633178][T22980] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.633220][T22980] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.633245][T22980] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.633281][T22980] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.633305][T22980] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.633341][T22980] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.633365][T22980] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.949309][T25090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4965'. [ 766.060339][T25095] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4968'. [ 766.176833][T25102] IPVS: length: 65 != 24 [ 766.248703][T25091] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.332493][T25091] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 766.441551][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4968'. [ 766.610575][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4970'. [ 766.610621][T25110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4970'. [ 767.568599][T24705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 767.613318][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.618577][T24705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 767.649761][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.666794][T24705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 767.696098][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 767.699234][T24705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 767.755923][T24705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 767.765264][T25136] FAULT_INJECTION: forcing a failure. [ 767.765264][T25136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.765293][T25136] CPU: 1 UID: 0 PID: 25136 Comm: syz.3.4978 Not tainted syzkaller #0 PREEMPT(full) [ 767.765314][T25136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 767.765326][T25136] Call Trace: [ 767.765334][T25136] [ 767.765342][T25136] dump_stack_lvl+0xe8/0x150 [ 767.765382][T25136] should_fail_ex+0x3eb/0x540 [ 767.765413][T25136] _copy_from_iter+0x1d3/0x1680 [ 767.765436][T25136] ? __alloc_skb+0x27a/0x7a0 [ 767.765468][T25136] ? __alloc_skb+0x27a/0x7a0 [ 767.765497][T25136] ? __alloc_skb+0x27a/0x7a0 [ 767.765524][T25136] ? __pfx__copy_from_iter+0x10/0x10 [ 767.765542][T25136] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 767.765565][T25136] ? __alloc_skb+0x27a/0x7a0 [ 767.765590][T25136] ? __alloc_skb+0x27a/0x7a0 [ 767.765622][T25136] ? netlink_sendmsg+0x64f/0xb20 [ 767.765649][T25136] ? skb_put+0x112/0x210 [ 767.765671][T25136] netlink_sendmsg+0x6bb/0xb20 [ 767.765703][T25136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.765733][T25136] ? aa_sock_msg_perm+0x144/0x210 [ 767.765759][T25136] ? apparmor_socket_sendmsg+0x98/0x360 [ 767.765787][T25136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.765812][T25136] sock_sendmsg_nosec+0x14e/0x190 [ 767.765840][T25136] ____sys_sendmsg+0x54e/0x850 [ 767.765867][T25136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.765897][T25136] ? import_iovec+0x73/0xa0 [ 767.765924][T25136] ___sys_sendmsg+0x2a5/0x360 [ 767.765942][T25136] ? __lock_acquire+0x747/0x2de0 [ 767.765972][T25136] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.766030][T25136] ? __fget_files+0x3a2/0x420 [ 767.766053][T25136] ? __fget_files+0x2a/0x420 [ 767.766088][T25136] __x64_sys_sendmsg+0x1b1/0x290 [ 767.766120][T25136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.766168][T25136] do_syscall_64+0x166/0x520 [ 767.766192][T25136] ? trace_irq_disable+0x3b/0x140 [ 767.766218][T25136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.766239][T25136] ? clear_bhb_loop+0x70/0xc0 [ 767.766277][T25136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.766296][T25136] RIP: 0033:0x7f6204b9fb19 [ 767.766315][T25136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.766331][T25136] RSP: 002b:00007f6205a58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.766353][T25136] RAX: ffffffffffffffda RBX: 00007f6204e25fa0 RCX: 00007f6204b9fb19 [ 767.766367][T25136] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 767.766380][T25136] RBP: 00007f6205a58090 R08: 0000000000000000 R09: 0000000000000000 [ 767.766392][T25136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.766403][T25136] R13: 00007f6204e26038 R14: 00007f6204e25fa0 R15: 00007ffd4307b338 [ 767.766435][T25136] [ 768.173700][T25149] ip_tables: iptables: counters copy to user failed while replacing table [ 768.389065][T24705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.477098][T24705] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.516283][T22969] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.516403][T22969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.558200][T22969] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.558320][T22969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.914903][T22977] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.126393][T25158] syzkaller0: entered promiscuous mode [ 769.126423][T25158] syzkaller0: entered allmulticast mode [ 769.638426][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4985'. [ 773.192455][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 773.306054][T25178] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 773.386433][T22976] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.386502][T22976] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.623857][T22977] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.974349][T25201] FAULT_INJECTION: forcing a failure. [ 773.974349][T25201] name failslab, interval 1, probability 0, space 0, times 0 [ 773.974383][T25201] CPU: 1 UID: 0 PID: 25201 Comm: syz.3.4990 Not tainted syzkaller #0 PREEMPT(full) [ 773.974407][T25201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 773.974424][T25201] Call Trace: [ 773.974433][T25201] [ 773.974443][T25201] dump_stack_lvl+0xe8/0x150 [ 773.974483][T25201] should_fail_ex+0x3eb/0x540 [ 773.974516][T25201] should_failslab+0xa8/0x100 [ 773.974550][T25201] __kmalloc_noprof+0xf9/0x710 [ 773.974576][T25201] ? fib6_info_alloc+0x30/0xf0 [ 773.974695][T25201] ? fib6_info_alloc+0x30/0xf0 [ 773.974728][T25201] fib6_info_alloc+0x30/0xf0 [ 773.974755][T25201] ip6_route_info_create+0x149/0x890 [ 773.974821][T25201] ip6_route_add+0x49/0x1b0 [ 773.974852][T25201] inet6_rtm_newroute+0x262/0x1ab0 [ 773.974904][T25201] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 773.974928][T25201] ? lock_acquire+0x115/0x350 [ 773.974969][T25201] ? __lock_acquire+0x747/0x2de0 [ 773.974998][T25201] ? is_bpf_text_address+0x292/0x2b0 [ 773.975023][T25201] ? __pfx_hook_capable+0x10/0x10 [ 773.975048][T25201] ? kernel_text_address+0xa5/0xe0 [ 773.975113][T25201] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 773.975136][T25201] rtnetlink_rcv_msg+0x802/0xc00 [ 773.975165][T25201] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 773.975185][T25201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 773.975209][T25201] ? __lock_acquire+0x747/0x2de0 [ 773.975251][T25201] netlink_rcv_skb+0x226/0x4a0 [ 773.975282][T25201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 773.975305][T25201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 773.975350][T25201] ? netlink_deliver_tap+0x2e/0x1b0 [ 773.975379][T25201] ? netlink_deliver_tap+0x2e/0x1b0 [ 773.975414][T25201] netlink_unicast+0x8ef/0xa80 [ 773.975461][T25201] netlink_sendmsg+0x7f0/0xb20 [ 773.975499][T25201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.975533][T25201] ? aa_sock_msg_perm+0x144/0x210 [ 773.975560][T25201] ? apparmor_socket_sendmsg+0x98/0x360 [ 773.975593][T25201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.975622][T25201] sock_sendmsg_nosec+0x14e/0x190 [ 773.975654][T25201] ____sys_sendmsg+0x54e/0x850 [ 773.975684][T25201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 773.975718][T25201] ? import_iovec+0x73/0xa0 [ 773.975749][T25201] ___sys_sendmsg+0x2a5/0x360 [ 773.975769][T25201] ? __lock_acquire+0x747/0x2de0 [ 773.975800][T25201] ? __pfx____sys_sendmsg+0x10/0x10 [ 773.975866][T25201] ? __fget_files+0x3a2/0x420 [ 773.975897][T25201] ? __fget_files+0x2a/0x420 [ 773.975932][T25201] __x64_sys_sendmsg+0x1b1/0x290 [ 773.975956][T25201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 773.976002][T25201] do_syscall_64+0x166/0x520 [ 773.976025][T25201] ? trace_irq_disable+0x3b/0x140 [ 773.976054][T25201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.976076][T25201] ? clear_bhb_loop+0x70/0xc0 [ 773.976103][T25201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.976124][T25201] RIP: 0033:0x7f6204b9fb19 [ 773.976151][T25201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.976171][T25201] RSP: 002b:00007f6205a58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.976196][T25201] RAX: ffffffffffffffda RBX: 00007f6204e25fa0 RCX: 00007f6204b9fb19 [ 773.976210][T25201] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 773.976224][T25201] RBP: 00007f6205a58090 R08: 0000000000000000 R09: 0000000000000000 [ 773.976238][T25201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.976251][T25201] R13: 00007f6204e26038 R14: 00007f6204e25fa0 R15: 00007ffd4307b338 [ 773.976288][T25201] [ 776.160798][T24705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.112363][ T29] audit: type=1107 audit(1793715990.280:21): pid=25255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 777.301359][T25262] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5008'. [ 777.324636][T25262] bridge0: port 3(vlan2) entered disabled state [ 777.459853][T25265] --map-set only usable from mangle table [ 777.684490][T25275] netlink: 'syz.4.5010': attribute type 2 has an invalid length. [ 777.727829][T25275] !: entered promiscuous mode [ 777.849679][T24705] veth0_vlan: entered promiscuous mode [ 777.961671][T24705] veth1_vlan: entered promiscuous mode [ 778.193380][T24705] veth0_macvtap: entered promiscuous mode [ 778.218212][T25285] syzkaller0: left promiscuous mode [ 778.234058][T24705] veth1_macvtap: entered promiscuous mode [ 778.390342][T24705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.414070][T22976] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.436415][T24705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.306259][T25265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.566140][T25295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5014'. [ 781.240974][T22972] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.242561][T22976] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.242995][T22976] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.243458][T22976] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.243882][T22976] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.244268][T22976] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.312038][T22976] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.521688][T25306] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5015'. [ 781.884398][T22976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.884425][T22976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.058761][T22976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.058786][T22976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.938950][T25343] syzkaller0: entered promiscuous mode [ 782.938976][T25343] syzkaller0: entered allmulticast mode [ 783.073847][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5028'. [ 783.218312][T25362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5028'. [ 783.441082][T25368] vlan5: entered allmulticast mode [ 783.441109][T25368] bridge_slave_0: entered allmulticast mode [ 783.534011][T25370] bridge2: entered promiscuous mode [ 783.534038][T25370] bridge2: entered allmulticast mode [ 783.537339][T25370] team0: Port device bridge2 added [ 783.539121][T25373] bridge0: port 3(team0) entered blocking state [ 783.539603][T25373] bridge0: port 3(team0) entered disabled state [ 783.539929][T25373] team0: entered allmulticast mode [ 783.539945][T25373] team_slave_0: entered allmulticast mode [ 783.561225][T25373] team0: entered promiscuous mode [ 783.561246][T25373] team_slave_0: entered promiscuous mode [ 783.578204][T25373] team_slave_1: entered promiscuous mode [ 783.774975][T25377] netlink: 'syz.5.5031': attribute type 1 has an invalid length. [ 783.775001][T25377] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5031'. [ 783.864584][T25384] bond0: entered promiscuous mode [ 783.867537][T25384] batadv0: entered promiscuous mode [ 783.868505][T25384] debugfs: 'hsr1' already exists in 'hsr' [ 783.868530][T25384] Cannot create hsr debugfs directory [ 783.868771][T25384] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 783.870920][T25384] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 783.960249][T25384] bond0: left promiscuous mode [ 783.968338][T25384] batadv0: left promiscuous mode [ 784.099424][T25392] Bluetooth: MGMT ver 1.23 [ 784.510510][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.524564][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.524845][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.525080][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.525561][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.526945][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.530079][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.655257][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 784.655490][T25410] netlink: 'syz.5.5040': attribute type 5 has an invalid length. [ 785.118503][T25427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5042'. [ 785.482994][T25431] syzkaller1: entered promiscuous mode [ 785.483232][T25431] syzkaller1: entered allmulticast mode [ 785.893083][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5049'. [ 785.933823][T25443] xfrm0: left allmulticast mode [ 785.937057][T25443] xfrm0: entered promiscuous mode [ 785.937368][T25443] xfrm0: entered allmulticast mode [ 785.937387][T25443] team0: Device xfrm0 is of different type [ 786.435337][T25461] nbd5: detected capacity change from 0 to 63 [ 786.435981][T25464] nbd: must specify an index to disconnect [ 786.439635][ T5642] block nbd5: Receive control failed (result -32) [ 786.532408][ T4963] block nbd5: Dead connection, failed to find a fallback [ 786.532438][ T4963] block nbd5: shutting down sockets [ 786.532453][ T4963] blk_print_req_error: 27 callbacks suppressed [ 786.532467][ T4963] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.532494][ T4963] buffer_io_error: 27 callbacks suppressed [ 786.532505][ T4963] Buffer I/O error on dev nbd5, logical block 0, async page read [ 786.533546][ T4963] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.533576][ T4963] Buffer I/O error on dev nbd5, logical block 1, async page read [ 786.533719][ T4963] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.533745][ T4963] Buffer I/O error on dev nbd5, logical block 2, async page read [ 786.533865][ T4963] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.533892][ T4963] Buffer I/O error on dev nbd5, logical block 3, async page read [ 786.534021][ T4963] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.534047][ T4963] Buffer I/O error on dev nbd5, logical block 0, async page read [ 786.534151][ T4963] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.534177][ T4963] Buffer I/O error on dev nbd5, logical block 1, async page read [ 786.534290][ T4963] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.534317][ T4963] Buffer I/O error on dev nbd5, logical block 2, async page read [ 786.534425][ T4963] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.534451][ T4963] Buffer I/O error on dev nbd5, logical block 3, async page read [ 786.534568][ T4963] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.534595][ T4963] Buffer I/O error on dev nbd5, logical block 0, async page read [ 786.534997][ T4963] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.535025][ T4963] Buffer I/O error on dev nbd5, logical block 1, async page read [ 786.547616][T25473] ldm_validate_partition_table(): Disk read failed. [ 786.556367][T25473] Dev nbd5: unable to read RDB block 0 [ 786.561808][T25473] nbd5: unable to read partition table [ 786.586638][T25473] ldm_validate_partition_table(): Disk read failed. [ 786.589410][T25473] Dev nbd5: unable to read RDB block 0 [ 786.598051][T25473] nbd5: unable to read partition table [ 787.007107][T25472] ldm_validate_partition_table(): Disk read failed. [ 787.011146][T25472] Dev nbd5: unable to read RDB block 0 [ 787.029947][T25472] nbd5: unable to read partition table [ 787.068532][T25472] ldm_validate_partition_table(): Disk read failed. [ 787.087035][T25472] Dev nbd5: unable to read RDB block 0 [ 787.089930][T25472] nbd5: unable to read partition table [ 787.176774][T25478] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5059'. [ 787.540915][T25484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.617382][T25492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.913493][T25497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5066'. [ 789.159512][T25512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5070'. [ 789.333040][T25512] validate_nla: 58 callbacks suppressed [ 789.333068][T25512] netlink: 'syz.3.5070': attribute type 1 has an invalid length. [ 789.333084][T25512] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5070'. [ 789.489763][T25521] netlink: 'syz.0.5074': attribute type 1 has an invalid length. [ 789.552133][T25529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5072'. [ 789.552162][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5072'. [ 790.839535][T25567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.295502][T25570] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5084'. [ 791.451136][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 791.451167][T25587] netlink: 'syz.3.5090': attribute type 1 has an invalid length. [ 791.458912][T25587] netlink: 'syz.3.5090': attribute type 2 has an invalid length. [ 791.458934][T25587] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5090'. [ 791.458950][T25587] nbd: must specify an index to disconnect [ 791.468463][T25593] netlink: 'syz.3.5090': attribute type 2 has an invalid length. [ 791.468484][T25593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5090'. [ 791.468500][T25593] nbd: must specify an index to disconnect [ 791.682989][T25601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.730181][T25600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5092'. [ 791.730211][T25600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5092'. [ 791.908377][T25600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.940245][T25600] bond1: (slave bond0): making interface the new active one [ 791.994686][T25600] bond1: (slave bond0): Enslaving as an active interface with an up link [ 792.893679][T25629] netlink: 'syz.5.5103': attribute type 1 has an invalid length. [ 792.966057][T25629] bond2 (unregistering): Released all slaves [ 793.173694][T25647] netlink: 'syz.5.5103': attribute type 1 has an invalid length. [ 793.396769][T25629] bond2 (unregistering): Released all slaves [ 794.039967][T25671] netlink: 'syz.3.5113': attribute type 1 has an invalid length. [ 794.170050][T25671] bond10: entered promiscuous mode [ 794.178780][T25671] 8021q: adding VLAN 0 to HW filter on device bond10 [ 794.290558][T25677] 8021q: adding VLAN 0 to HW filter on device bond10 [ 794.307529][T25677] bond10: (slave ip6gre5): The slave device specified does not support setting the MAC address [ 794.307555][T25677] bond10: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode [ 794.366910][T25677] bond10: (slave ip6gre5): making interface the new active one [ 794.366939][T25677] ip6gre5: entered promiscuous mode [ 794.393837][T25677] bond10: (slave ip6gre5): Enslaving as an active interface with an up link [ 794.427197][T25683] __nla_validate_parse: 2 callbacks suppressed [ 794.427220][T25683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5116'. [ 794.696075][T25690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5118'. [ 794.697156][T25691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5117'. [ 794.726836][T25691] netlink: 'syz.5.5117': attribute type 1 has an invalid length. [ 794.909743][T25698] ip_tables: iptables: counters copy to user failed while replacing table [ 795.146801][T25703] tipc: Started in network mode [ 795.146834][T25703] tipc: Node identity 76be2b8c9a4c, cluster identity 4711 [ 795.147304][T25703] tipc: Enabled bearer , priority 0 [ 795.302491][T25703] tipc: Resetting bearer [ 795.459315][T25702] tipc: Disabling bearer [ 795.553312][T25714] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 795.928119][ T29] audit: type=1804 audit(1793716009.100:22): pid=25725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5127" name="/newroot/22/cgroup.controllers" dev="tmpfs" ino=132 res=1 errno=0 [ 795.928180][ T29] audit: type=1800 audit(1793716009.100:23): pid=25725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5127" name="cgroup.controllers" dev="tmpfs" ino=132 res=0 errno=-22 [ 795.929196][ T29] audit: type=1800 audit(1793716009.100:24): pid=25725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5127" name="cgroup.controllers" dev="tmpfs" ino=132 res=0 errno=-22 [ 796.262828][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5130'. [ 796.794931][T25698] rpcbind: server localhost not responding, timed out [ 796.823047][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5134'. [ 796.834184][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5134'. [ 796.855769][T25698] NFSD: Failed to start, no listeners configured. [ 797.104042][T25746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5135'. [ 797.108179][T25746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5135'. [ 797.108351][T25746] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5135'. [ 797.397969][T25748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5136'. [ 797.679653][T25748] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 797.970085][T25758] udevd[25758]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 797.990211][T25758] udevd[25758]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 798.145760][T25763] syzkaller0: entered promiscuous mode [ 798.146002][T25763] syzkaller0: entered allmulticast mode [ 798.196101][T25698] rpcbind: server localhost not responding, timed out [ 798.360973][T25765] sctp: [Deprecated]: syz.4.5140 (pid 25765) Use of int in max_burst socket option deprecated. [ 798.360973][T25765] Use struct sctp_assoc_value instead [ 799.133205][T25778] sctp: [Deprecated]: syz.4.5140 (pid 25778) Use of int in max_burst socket option deprecated. [ 799.133205][T25778] Use struct sctp_assoc_value instead [ 799.234309][T25780] ip_tables: iptables: counters copy to user failed while replacing table [ 799.402260][T25786] netlink: 'syz.0.5143': attribute type 16 has an invalid length. [ 799.402297][T25786] netlink: 'syz.0.5143': attribute type 17 has an invalid length. [ 799.927573][T25786] bond0: left allmulticast mode [ 800.166765][T25786] xfrm0: left promiscuous mode [ 800.166791][T25786] xfrm0: left allmulticast mode [ 800.228084][ T5642] Bluetooth: hci0: link tx timeout [ 800.228107][ T5642] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 800.438574][T25786] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 800.438821][T25786] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 800.469451][T25786] bridge0: port 3(vlan2) entered blocking state [ 800.469598][T25786] bridge0: port 3(vlan2) entered listening state [ 800.522569][T22969] bond1: (slave bridge1): link status up again after 0 ms [ 800.524172][T22969] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 800.536011][T25786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 800.559089][T22969] bond1: (slave bridge1): link status up again after 0 ms [ 800.575696][T22977] bond1: (slave bridge1): link status up again after 0 ms [ 800.597743][T22976] bond1: (slave bridge1): link status up again after 0 ms [ 800.615008][T22976] bond1: (slave bridge1): link status up again after 0 ms [ 800.692660][T22977] bond1: (slave bridge1): link status up again after 0 ms [ 800.699418][T22970] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 800.729563][T22981] bond1: (slave bridge1): link status up again after 0 ms [ 800.756312][T25786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 800.761046][T25786] veth7: left allmulticast mode [ 800.779241][T25786] bond2: left promiscuous mode [ 800.779267][T25786] xfrm1: left promiscuous mode [ 800.816858][T25786] gre1: left promiscuous mode [ 800.870980][T25786] ip6gretap1: left allmulticast mode [ 800.908314][T25786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 800.928809][T25786] veth13: left allmulticast mode [ 801.001043][T25786] bond5: left promiscuous mode [ 801.001069][T25786] bridge5: left promiscuous mode [ 801.001364][T25786] bond5: left allmulticast mode [ 801.001424][T25786] bridge5: left allmulticast mode [ 801.147086][T25786] 8021q: adding VLAN 0 to HW filter on device eth0 [ 801.160706][T25786] 8021q: adding VLAN 0 to HW filter on device eth1 [ 801.183209][T25786] 8021q: adding VLAN 0 to HW filter on device eth2 [ 801.311404][T25811] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5150'. [ 801.330353][T25786] 8021q: adding VLAN 0 to HW filter on device eth3 [ 801.630957][T22973] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 801.648074][T22973] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 801.648789][T22973] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 801.649030][T22973] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 801.660463][T15800] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 801.689982][T15800] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 801.723948][T22973] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.726205][T22973] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 801.772062][T22973] bond3: (slave veth7): making interface the new active one [ 801.803019][T11495] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 801.851192][T22973] bond3: active interface up! [ 801.874404][T22980] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.895950][T25793] netlink: 'syz.4.5147': attribute type 29 has an invalid length. [ 801.900786][T25793] netlink: 'syz.4.5147': attribute type 29 has an invalid length. [ 802.072872][T22976] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.073638][T22980] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.272023][T11495] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 802.312332][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 802.553790][T11495] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 802.633931][T15799] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 802.650470][T25829] x_tables: duplicate underflow at hook 1 [ 803.059258][T25836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5154'. [ 803.060864][T25837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5154'. [ 803.164389][T25799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.233367][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 803.233399][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 803.299256][T25835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 804.314403][T22977] net_ratelimit: 69 callbacks suppressed [ 804.314428][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 804.423441][T22980] bond1: (slave bridge1): failed to get link speed/duplex [ 804.533136][T22969] bond1: (slave bridge1): failed to get link speed/duplex [ 804.642838][T22969] bond1: (slave bridge1): failed to get link speed/duplex [ 804.699711][T25860] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5160'. [ 804.759701][T22969] bond1: (slave bridge1): failed to get link speed/duplex [ 804.872772][T22980] bond1: (slave bridge1): failed to get link speed/duplex [ 804.939942][T25860] netlink: 'syz.2.5160': attribute type 19 has an invalid length. [ 804.983290][T22980] bond1: (slave bridge1): failed to get link speed/duplex [ 805.392281][T22972] bond1: (slave bridge1): failed to get link speed/duplex [ 805.416213][T25844] scsi_nl_rcv_msg: discarding partial skb [ 805.508395][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 805.632438][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 806.098128][T25877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5164'. [ 806.156861][T25872] netlink: 'syz.2.5164': attribute type 1 has an invalid length. [ 806.171173][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5164'. [ 806.202106][T25879] netlink: 'syz.4.5165': attribute type 1 has an invalid length. [ 806.384392][T25876] gretap1: entered allmulticast mode [ 806.400952][T25876] bond10: (slave gretap1): making interface the new active one [ 806.414179][T25876] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 806.465659][T25870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5163'. [ 807.672058][T25912] netlink: 'syz.2.5172': attribute type 12 has an invalid length. [ 807.888261][T25915] syzkaller0: entered promiscuous mode [ 807.888287][T25915] syzkaller0: entered allmulticast mode [ 809.169660][T25954] rxe_eth0 speed is unknown, defaulting to 1000 [ 809.395393][T22977] net_ratelimit: 23 callbacks suppressed [ 809.395419][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 809.602507][T22972] bond1: (slave bridge1): failed to get link speed/duplex [ 809.649738][T25968] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 809.685751][T25966] syzkaller0: entered promiscuous mode [ 809.685992][T25966] syzkaller0: entered allmulticast mode [ 809.737335][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 809.761606][T25967] IPVS: sh: FWM 3 0x00000003 - no destination available [ 809.762980][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 809.812605][T25964] syzkaller0: left promiscuous mode [ 809.812854][T25964] syzkaller0: left allmulticast mode [ 809.845420][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 810.004881][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5185'. [ 810.196325][T25954] lo speed is unknown, defaulting to 1000 [ 810.441738][T22972] bond1: (slave bridge1): failed to get link speed/duplex [ 810.470227][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5188'. [ 810.489621][T25979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5186'. [ 810.611838][T22972] bond1: (slave bridge1): failed to get link speed/duplex [ 810.617730][T25976] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 810.675586][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 810.689822][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 810.758492][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 810.791277][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 810.840975][T25980] netlink: 'syz.5.5188': attribute type 1 has an invalid length. [ 810.840999][T25980] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5188'. [ 810.841019][T25980] nbd: couldn't find device at index 767 [ 810.907129][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 810.907886][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 812.780716][T26040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5198'. [ 813.032988][ T53] Bluetooth: hci4: command tx timeout [ 813.122115][T25981] rxe_eth0 speed is unknown, defaulting to 1000 [ 813.512169][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 813.512194][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 813.519314][T26045] netlink: 'syz.0.5200': attribute type 1 has an invalid length. [ 813.925182][T26045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 814.090441][T26054] netlink: 'syz.2.5202': attribute type 10 has an invalid length. [ 814.090470][T26054] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5202'. [ 814.154197][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 814.402662][T22980] net_ratelimit: 30 callbacks suppressed [ 814.402686][T22980] bond1: (slave bridge1): failed to get link speed/duplex [ 814.403004][T26060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5203'. [ 814.405716][T26037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.405871][T26037] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.514938][T22972] bond1: (slave bridge1): failed to get link speed/duplex [ 814.632528][T22969] bond1: (slave bridge1): failed to get link speed/duplex [ 814.743642][T22972] bond1: (slave bridge1): failed to get link speed/duplex [ 814.851819][T22969] bond1: (slave bridge1): failed to get link speed/duplex [ 814.962245][T22969] bond1: (slave bridge1): failed to get link speed/duplex [ 815.029419][T25981] lo speed is unknown, defaulting to 1000 [ 815.131745][ T53] Bluetooth: hci4: command tx timeout [ 815.220483][T26067] netlink: 'syz.5.5206': attribute type 1 has an invalid length. [ 815.412460][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 815.644540][T22976] bond1: (slave bridge1): failed to get link speed/duplex [ 816.000600][T26094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5212'. [ 816.034555][T26094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5212'. [ 816.071717][ C0] bridge0: port 3(vlan2) entered learning state [ 816.227151][T26096] bridge1: entered promiscuous mode [ 816.227240][T26096] bridge1: entered allmulticast mode [ 816.269968][T26096] team0: Port device bridge1 added [ 816.293782][T26104] pimreg: entered allmulticast mode [ 816.309447][T26098] bridge0: port 3(team0) entered blocking state [ 816.309969][T26098] bridge0: port 3(team0) entered disabled state [ 816.310393][T26098] team0: entered allmulticast mode [ 816.310411][T26098] team_slave_0: entered allmulticast mode [ 816.310859][T26098] team_slave_1: entered allmulticast mode [ 816.359939][T26098] team0: entered promiscuous mode [ 816.359966][T26098] team_slave_0: entered promiscuous mode [ 816.361618][T26098] team_slave_1: entered promiscuous mode [ 816.374100][T26098] bridge0: port 3(team0) entered blocking state [ 816.374192][T26098] bridge0: port 3(team0) entered forwarding state [ 816.831932][T22977] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.832963][T22977] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.833004][T22977] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.833041][T22977] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 817.025510][T25981] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.025639][T25981] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.025824][T25981] bridge_slave_0: entered allmulticast mode [ 817.059185][T25981] bridge_slave_0: entered promiscuous mode [ 817.079954][T25981] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.086685][T25981] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.086873][T25981] bridge_slave_1: entered allmulticast mode [ 817.137813][T25981] bridge_slave_1: entered promiscuous mode [ 817.192533][ T53] Bluetooth: hci4: command tx timeout [ 817.419697][T25981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.457462][T25981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.502307][T26130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5220'. [ 817.502332][T26130] netlink: 468 bytes leftover after parsing attributes in process `syz.4.5220'. [ 817.553888][T26130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5220'. [ 817.608487][T25981] team0: Port device team_slave_0 added [ 817.623170][T25981] team0: Port device team_slave_1 added [ 817.729416][T26133] ebt_limit: overflow, try lower: 4294901760/65535 [ 817.800769][T25981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.800789][T25981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.800815][T25981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.053846][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5223'. [ 818.098930][T26150] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003 [ 818.632878][T25981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.632902][T25981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.632931][T25981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.779492][T25981] hsr_slave_0: entered promiscuous mode [ 818.780730][T25981] hsr_slave_1: entered promiscuous mode [ 818.800285][T25981] debugfs: 'hsr0' already exists in 'hsr' [ 818.800312][T25981] Cannot create hsr debugfs directory [ 819.273092][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 819.277849][ T5642] Bluetooth: hci4: command tx timeout [ 819.483271][T22969] net_ratelimit: 11 callbacks suppressed [ 819.483293][T22969] bond1: (slave bridge1): failed to get link speed/duplex [ 819.511393][T25981] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 819.544042][T25981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.547871][T25981] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 819.576623][T25981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.579567][T25981] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 819.667134][T25981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.689910][T25981] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 819.814312][T26173] x_tables: duplicate underflow at hook 1 [ 820.219165][T25981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 820.320545][T25700] syz_tun (unregistering): left allmulticast mode [ 820.372916][T22977] bond1: (slave bridge1): failed to get link speed/duplex [ 820.403343][T26175] lo: entered promiscuous mode [ 820.480898][T26175] tunl0: entered promiscuous mode [ 820.505036][T26175] gre0: entered promiscuous mode [ 820.596521][T26175] gretap0: entered promiscuous mode [ 820.635663][T26175] erspan0: entered promiscuous mode [ 820.664975][T26175] ip_vti0: entered promiscuous mode [ 820.683113][T26175] ip6_vti0: entered promiscuous mode [ 820.706024][T26175] sit0: entered promiscuous mode [ 820.809591][T26175] ip6tnl0: entered promiscuous mode [ 820.835400][T26175] ip6gre0: entered promiscuous mode [ 820.874807][T26175] ip6gretap0: entered promiscuous mode [ 820.916365][T26175] bridge0: port 3(vlan2) entered disabled state [ 820.967100][T26175] bond0: entered promiscuous mode [ 820.997909][T26175] team0: entered promiscuous mode [ 821.026254][T26175] dummy0: entered promiscuous mode [ 821.078619][T26175] nlmon0: entered promiscuous mode [ 821.090497][T26175] batadv0: entered promiscuous mode [ 821.131201][T26175] veth0: entered promiscuous mode [ 821.162790][T26175] veth1: entered promiscuous mode [ 821.308499][T26175] wg0: entered promiscuous mode [ 821.321010][T26175] wg1: entered promiscuous mode [ 821.354753][T26175] wg2: entered promiscuous mode [ 821.368280][T26175] veth0_to_bridge: entered promiscuous mode [ 821.403646][T26175] bridge_slave_0: entered promiscuous mode [ 821.420652][T26175] veth1_to_bridge: entered promiscuous mode [ 821.445233][T26175] bridge_slave_1: entered promiscuous mode [ 821.469158][T26175] veth0_to_bond: entered promiscuous mode [ 821.494791][T26175] bond_slave_0: entered promiscuous mode [ 821.519196][T26175] veth1_to_bond: entered promiscuous mode [ 821.542853][T26175] bond_slave_1: entered promiscuous mode [ 821.552738][ T53] Bluetooth: hci0: unexpected event 0x0e length: 257 > 255 [ 821.552782][ T53] Bluetooth: hci0: unexpected event for opcode 0x1924 [ 821.585743][T26175] veth0_to_team: entered promiscuous mode [ 821.610206][T26175] team_slave_0: entered promiscuous mode [ 821.633848][T26175] veth1_to_team: entered promiscuous mode [ 821.658276][T26175] team_slave_1: entered promiscuous mode [ 821.683466][T26175] veth0_to_batadv: entered promiscuous mode [ 821.719193][ T53] Bluetooth: hci0: unexpected event 0x0e length: 257 > 255 [ 821.719234][ T53] Bluetooth: hci0: unexpected event for opcode 0x1924 [ 821.737443][T26175] batadv_slave_0: entered promiscuous mode [ 821.759529][T26175] veth1_to_batadv: entered promiscuous mode [ 821.795692][T26175] batadv_slave_1: entered promiscuous mode [ 821.825839][T26175] xfrm0: entered promiscuous mode [ 821.854618][T26175] veth0_to_hsr: entered promiscuous mode [ 821.896011][T26175] veth1_to_hsr: entered promiscuous mode [ 821.947567][T26175] hsr0: entered promiscuous mode [ 821.972645][T26175] veth1_virt_wifi: entered promiscuous mode [ 821.997057][T26175] veth0_virt_wifi: entered promiscuous mode [ 822.030256][T26175] virt_wifi0: entered promiscuous mode [ 822.077382][T26175] vlan0: entered promiscuous mode [ 822.099240][T26175] vlan1: entered promiscuous mode [ 822.170595][T26175] macvlan0: entered promiscuous mode [ 822.193867][T26175] macvlan1: entered promiscuous mode [ 822.215828][T26175] ipvlan0: entered promiscuous mode [ 822.249212][T26175] ipvlan1: entered promiscuous mode [ 822.325109][T26175] macvtap0: entered promiscuous mode [ 822.342430][T26175] macsec0: entered promiscuous mode [ 822.387395][T26175] geneve1: entered promiscuous mode [ 822.433604][T26175] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 822.456398][T26175] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 822.459031][T26175] ip6tnl1: entered promiscuous mode [ 822.506618][T26175] veth0_vlan.0001: entered promiscuous mode [ 822.544156][T26175] mac80211_hwsim hwsim30 wlan2: entered promiscuous mode [ 822.547049][T26175] bond1: entered promiscuous mode [ 822.547072][T26175] bridge1: entered promiscuous mode [ 822.591778][T26175] veth2: entered promiscuous mode [ 822.614327][T26175] veth3: entered promiscuous mode [ 822.642787][T26175] veth4: entered promiscuous mode [ 822.664858][T26175] veth5: entered promiscuous mode [ 822.703241][T26175] mac80211_hwsim hwsim32 wlan3: entered promiscuous mode [ 822.706183][T26175] bridge2: entered promiscuous mode [ 822.745248][T26175] bond3: entered promiscuous mode [ 822.745274][T26175] veth7: entered promiscuous mode [ 822.773324][T26175] veth6: entered promiscuous mode [ 822.806335][T26175] bond2: entered promiscuous mode [ 822.806360][T26175] xfrm1: entered promiscuous mode [ 822.850088][T26175] vlan3: entered promiscuous mode [ 822.878045][T26175] dvmrp6: entered promiscuous mode [ 822.902619][T26175] gre1: entered promiscuous mode [ 822.925069][T26175] veth8: entered promiscuous mode [ 822.949651][T26175] veth9: entered promiscuous mode [ 822.984609][T26175] ifb2: entered promiscuous mode [ 823.014474][T26175] dummy1: entered promiscuous mode [ 823.038400][T26175] bridge3: entered promiscuous mode [ 823.064769][T26175] macsec1: entered promiscuous mode [ 823.093055][T26175] veth10: entered promiscuous mode [ 823.130246][T26175] veth11: entered promiscuous mode [ 823.156335][T26175] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 823.158830][T26175] ip6gretap1: entered promiscuous mode [ 823.205570][T26175] bond4: entered promiscuous mode [ 823.219216][T26175] veth12: entered promiscuous mode [ 823.244358][T26175] veth13: entered promiscuous mode [ 823.270899][T26175] ip6gretap2: entered promiscuous mode [ 823.315315][T26175] ip6tnl2: entered promiscuous mode [ 823.338493][T26175] ip6tnl3: entered promiscuous mode [ 823.368284][T26175] bridge4: entered promiscuous mode [ 823.406822][T26175] bond5: entered promiscuous mode [ 823.406868][T26175] bridge5: entered promiscuous mode [ 823.456709][T26175] bridge6: entered promiscuous mode [ 823.480540][T26175] veth14: entered promiscuous mode [ 823.534468][T26175] veth15: entered promiscuous mode [ 823.539917][T26175] vxlan0: entered promiscuous mode [ 823.555527][T26175] bond6: entered promiscuous mode [ 823.555552][T26175] geneve2: entered promiscuous mode [ 823.619570][T26175] vlan4: entered promiscuous mode [ 823.656982][T26175] bridge7: entered promiscuous mode [ 823.685469][T26175] netdevsim netdevsim0 eth0: entered promiscuous mode [ 823.710852][T26175] netdevsim netdevsim0 eth1: entered promiscuous mode [ 823.743579][T26175] netdevsim netdevsim0 eth2: entered promiscuous mode [ 823.773371][T26175] netdevsim netdevsim0 eth3: entered promiscuous mode [ 823.802827][T26175] bridge0.0257: entered promiscuous mode [ 823.803969][T26175] veth16: entered promiscuous mode [ 823.804155][T26175] veth17: entered promiscuous mode [ 823.818721][T26175] bond7: entered promiscuous mode [ 823.845751][T26175] sit1: entered promiscuous mode [ 823.958006][T26224] FAULT_INJECTION: forcing a failure. [ 823.958006][T26224] name failslab, interval 1, probability 0, space 0, times 0 [ 823.958040][T26224] CPU: 1 UID: 0 PID: 26224 Comm: syz.0.5240 Not tainted syzkaller #0 PREEMPT(full) [ 823.958064][T26224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 823.958077][T26224] Call Trace: [ 823.958086][T26224] [ 823.958096][T26224] dump_stack_lvl+0xe8/0x150 [ 823.958226][T26224] should_fail_ex+0x3eb/0x540 [ 823.958270][T26224] should_failslab+0xa8/0x100 [ 823.958304][T26224] __kmalloc_cache_noprof+0x9e/0x600 [ 823.958340][T26224] ? __kmalloc_cache_noprof+0x148/0x600 [ 823.958367][T26224] ? sctp_add_bind_addr+0x8c/0x370 [ 823.958483][T26224] ? sctp_add_bind_addr+0x8c/0x370 [ 823.958515][T26224] sctp_add_bind_addr+0x8c/0x370 [ 823.958545][T26224] sctp_copy_local_addr_list+0x31a/0x4e0 [ 823.958688][T26224] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 823.958714][T26224] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 823.958743][T26224] ? sctp_v4_is_any+0x35/0x60 [ 823.958768][T26224] ? sctp_copy_one_addr+0x93/0x360 [ 823.958796][T26224] sctp_bind_addr_copy+0xb3/0x3c0 [ 823.958823][T26224] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 823.958881][T26224] sctp_connect_new_asoc+0x2ff/0x6b0 [ 823.958915][T26224] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 823.958953][T26224] ? __local_bh_enable_ip+0xd6/0x140 [ 823.958981][T26224] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 823.959009][T26224] ? security_sctp_bind_connect+0x7e/0x2c0 [ 823.959042][T26224] sctp_sendmsg+0x159b/0x2d00 [ 823.959085][T26224] ? kstrtouint+0x6e/0xe0 [ 823.959126][T26224] ? __pfx_sctp_sendmsg+0x10/0x10 [ 823.959154][T26224] ? lock_acquire+0x115/0x350 [ 823.959213][T26224] ? aa_sock_msg_perm+0xfc/0x210 [ 823.959234][T26224] ? sock_rps_record_flow+0x19/0x350 [ 823.959310][T26224] ? inet_sendmsg+0x298/0x320 [ 823.959337][T26224] ? __pfx_inet_sendmsg+0x10/0x10 [ 823.959364][T26224] sock_sendmsg_nosec+0x10f/0x190 [ 823.959396][T26224] __sys_sendto+0x408/0x5a0 [ 823.959454][T26224] ? ksys_write+0x1e6/0x270 [ 823.959485][T26224] ? __pfx___sys_sendto+0x10/0x10 [ 823.959513][T26224] ? __mutex_unlock_slowpath+0x731/0x900 [ 823.959556][T26224] ? fdget+0x1ac/0x250 [ 823.959596][T26224] ? __pfx_ksys_write+0x10/0x10 [ 823.959631][T26224] __x64_sys_sendto+0xde/0x100 [ 823.959666][T26224] do_syscall_64+0x166/0x520 [ 823.959689][T26224] ? trace_irq_disable+0x3b/0x140 [ 823.959716][T26224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.959738][T26224] ? clear_bhb_loop+0x70/0xc0 [ 823.959765][T26224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.959786][T26224] RIP: 0033:0x7f6dce99fb19 [ 823.959810][T26224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.959829][T26224] RSP: 002b:00007f6dcf884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 823.959874][T26224] RAX: ffffffffffffffda RBX: 00007f6dcec25fa0 RCX: 00007f6dce99fb19 [ 823.959891][T26224] RDX: 000000000000fffd RSI: 0000200000000100 RDI: 0000000000000004 [ 823.959906][T26224] RBP: 00007f6dcf884090 R08: 00002000000000c0 R09: 0000000000000010 [ 823.959920][T26224] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000001 [ 823.959934][T26224] R13: 00007f6dcec26038 R14: 00007f6dcec25fa0 R15: 00007ffef9bdbb48 [ 823.959971][T26224] [ 824.053522][T22972] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.053555][T22972] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.057666][T22972] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.057695][T22972] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.065035][T22972] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.065069][T22972] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.065103][T22972] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 824.065126][T22972] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.900866][T25981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.947573][T26240] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5244'. [ 825.139344][T26244] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5245'. [ 825.222797][T26252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5247'. [ 825.578806][T26256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5248'. [ 825.660236][T26248] syzkaller0: entered promiscuous mode [ 825.660476][T26248] syzkaller0: entered allmulticast mode [ 825.741513][T26252] netlink: 'syz.4.5247': attribute type 1 has an invalid length. [ 825.742098][T26252] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5247'. [ 825.768519][T25981] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.787747][T26262] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 825.790351][T26262] openvswitch: netlink: Unknown key attributes 2 [ 826.144873][T26272] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 827.125705][T26290] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5252'. [ 827.435330][T26293] FAULT_INJECTION: forcing a failure. [ 827.435330][T26293] name failslab, interval 1, probability 0, space 0, times 0 [ 827.435364][T26293] CPU: 1 UID: 0 PID: 26293 Comm: syz.5.5253 Not tainted syzkaller #0 PREEMPT(full) [ 827.435387][T26293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 827.435400][T26293] Call Trace: [ 827.435408][T26293] [ 827.435418][T26293] dump_stack_lvl+0xe8/0x150 [ 827.435456][T26293] should_fail_ex+0x3eb/0x540 [ 827.435488][T26293] should_failslab+0xa8/0x100 [ 827.435529][T26293] __kmalloc_cache_noprof+0x9e/0x600 [ 827.435555][T26293] ? __kmalloc_cache_noprof+0x148/0x600 [ 827.435578][T26293] ? sctp_add_bind_addr+0x8c/0x370 [ 827.435601][T26293] ? sctp_add_bind_addr+0x8c/0x370 [ 827.435632][T26293] sctp_add_bind_addr+0x8c/0x370 [ 827.435661][T26293] sctp_copy_local_addr_list+0x31a/0x4e0 [ 827.435689][T26293] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 827.435715][T26293] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 827.435744][T26293] ? sctp_v4_is_any+0x35/0x60 [ 827.435768][T26293] ? sctp_copy_one_addr+0x93/0x360 [ 827.435797][T26293] sctp_bind_addr_copy+0xb3/0x3c0 [ 827.435823][T26293] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 827.435859][T26293] sctp_connect_new_asoc+0x2ff/0x6b0 [ 827.435892][T26293] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 827.435929][T26293] ? __local_bh_enable_ip+0xd6/0x140 [ 827.435955][T26293] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 827.435982][T26293] ? security_sctp_bind_connect+0x7e/0x2c0 [ 827.436014][T26293] sctp_sendmsg+0x159b/0x2d00 [ 827.436056][T26293] ? kstrtouint+0x6e/0xe0 [ 827.436087][T26293] ? __pfx_sctp_sendmsg+0x10/0x10 [ 827.436114][T26293] ? lock_acquire+0x115/0x350 [ 827.436163][T26293] ? aa_sock_msg_perm+0xfc/0x210 [ 827.436182][T26293] ? sock_rps_record_flow+0x19/0x350 [ 827.436208][T26293] ? inet_sendmsg+0x298/0x320 [ 827.436233][T26293] ? __pfx_inet_sendmsg+0x10/0x10 [ 827.436254][T26293] sock_sendmsg_nosec+0x10f/0x190 [ 827.436285][T26293] __sys_sendto+0x408/0x5a0 [ 827.436316][T26293] ? ksys_write+0x1e6/0x270 [ 827.436346][T26293] ? __pfx___sys_sendto+0x10/0x10 [ 827.436373][T26293] ? __mutex_unlock_slowpath+0x731/0x900 [ 827.436414][T26293] ? fdget+0x1ac/0x250 [ 827.436454][T26293] ? __pfx_ksys_write+0x10/0x10 [ 827.436491][T26293] __x64_sys_sendto+0xde/0x100 [ 827.436616][T26293] do_syscall_64+0x166/0x520 [ 827.436639][T26293] ? trace_irq_disable+0x3b/0x140 [ 827.436665][T26293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.436686][T26293] ? clear_bhb_loop+0x70/0xc0 [ 827.436712][T26293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.436733][T26293] RIP: 0033:0x7fe4c299fb19 [ 827.436753][T26293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.436771][T26293] RSP: 002b:00007fe4c3852028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 827.436794][T26293] RAX: ffffffffffffffda RBX: 00007fe4c2c25fa0 RCX: 00007fe4c299fb19 [ 827.436809][T26293] RDX: 000000000000fffd RSI: 0000200000000100 RDI: 0000000000000004 [ 827.436822][T26293] RBP: 00007fe4c3852090 R08: 00002000000000c0 R09: 0000000000000010 [ 827.436836][T26293] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 827.436849][T26293] R13: 00007fe4c2c26038 R14: 00007fe4c2c25fa0 R15: 00007ffe67e543f8 [ 827.436886][T26293] [ 831.727749][T22978] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.727878][T22978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.998063][T26301] ip6gre2: entered allmulticast mode [ 832.076881][T26309] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5258'. [ 832.085376][T22980] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.085482][T22980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.151129][T26312] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5259'. [ 832.350866][T26320] block nbd0: reconnected socket [ 832.721288][ T53] block nbd0: Receive control failed (result -32) [ 832.890417][T26327] FAULT_INJECTION: forcing a failure. [ 832.890417][T26327] name failslab, interval 1, probability 0, space 0, times 0 [ 832.890450][T26327] CPU: 1 UID: 0 PID: 26327 Comm: syz.0.5263 Not tainted syzkaller #0 PREEMPT(full) [ 832.890473][T26327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 832.890497][T26327] Call Trace: [ 832.890506][T26327] [ 832.890516][T26327] dump_stack_lvl+0xe8/0x150 [ 832.890554][T26327] should_fail_ex+0x3eb/0x540 [ 832.890586][T26327] should_failslab+0xa8/0x100 [ 832.890619][T26327] __kmalloc_cache_noprof+0x9e/0x600 [ 832.890645][T26327] ? __kmalloc_cache_noprof+0x148/0x600 [ 832.890668][T26327] ? sctp_add_bind_addr+0x8c/0x370 [ 832.890690][T26327] ? sctp_add_bind_addr+0x8c/0x370 [ 832.890721][T26327] sctp_add_bind_addr+0x8c/0x370 [ 832.890750][T26327] sctp_copy_local_addr_list+0x31a/0x4e0 [ 832.890777][T26327] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 832.890803][T26327] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 832.890836][T26327] ? sctp_v4_is_any+0x35/0x60 [ 832.890860][T26327] ? sctp_copy_one_addr+0x93/0x360 [ 832.890897][T26327] sctp_bind_addr_copy+0xb3/0x3c0 [ 832.890923][T26327] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 832.890960][T26327] sctp_connect_new_asoc+0x2ff/0x6b0 [ 832.890992][T26327] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 832.891029][T26327] ? __local_bh_enable_ip+0xd6/0x140 [ 832.891055][T26327] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 832.891082][T26327] ? security_sctp_bind_connect+0x7e/0x2c0 [ 832.891125][T26327] sctp_sendmsg+0x159b/0x2d00 [ 832.891167][T26327] ? kstrtouint+0x6e/0xe0 [ 832.891198][T26327] ? __pfx_sctp_sendmsg+0x10/0x10 [ 832.891224][T26327] ? lock_acquire+0x115/0x350 [ 832.891274][T26327] ? aa_sock_msg_perm+0xfc/0x210 [ 832.891293][T26327] ? sock_rps_record_flow+0x19/0x350 [ 832.891319][T26327] ? inet_sendmsg+0x298/0x320 [ 832.891345][T26327] ? __pfx_inet_sendmsg+0x10/0x10 [ 832.891365][T26327] sock_sendmsg_nosec+0x10f/0x190 [ 832.891396][T26327] __sys_sendto+0x408/0x5a0 [ 832.891426][T26327] ? ksys_write+0x1e6/0x270 [ 832.891456][T26327] ? __pfx___sys_sendto+0x10/0x10 [ 832.891491][T26327] ? __mutex_unlock_slowpath+0x731/0x900 [ 832.891531][T26327] ? fdget+0x1ac/0x250 [ 832.891570][T26327] ? __pfx_ksys_write+0x10/0x10 [ 832.891602][T26327] __x64_sys_sendto+0xde/0x100 [ 832.891637][T26327] do_syscall_64+0x166/0x520 [ 832.891660][T26327] ? trace_irq_disable+0x3b/0x140 [ 832.891686][T26327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.891708][T26327] ? clear_bhb_loop+0x70/0xc0 [ 832.891734][T26327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.891754][T26327] RIP: 0033:0x7f6dce99fb19 [ 832.891775][T26327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.891793][T26327] RSP: 002b:00007f6dcf884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 832.891815][T26327] RAX: ffffffffffffffda RBX: 00007f6dcec25fa0 RCX: 00007f6dce99fb19 [ 832.891831][T26327] RDX: 000000000000fffd RSI: 0000200000000100 RDI: 0000000000000004 [ 832.891844][T26327] RBP: 00007f6dcf884090 R08: 00002000000000c0 R09: 0000000000000010 [ 832.891858][T26327] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 832.891871][T26327] R13: 00007f6dcec26038 R14: 00007f6dcec25fa0 R15: 00007ffef9bdbb48 [ 832.891908][T26327] [ 833.870003][T26338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 833.897840][T26330] Cannot find add_set index 2 as target [ 834.096589][T26342] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5267'. [ 834.588860][T26338] team0: left allmulticast mode [ 834.588889][T26338] team_slave_0: left allmulticast mode [ 834.591280][T26338] team0: left promiscuous mode [ 834.591303][T26338] team_slave_0: left promiscuous mode [ 834.618493][T26338] team_slave_1: left promiscuous mode [ 834.619348][T26338] bridge0: port 3(team0) entered disabled state [ 834.647338][T26338] bond9: left allmulticast mode [ 834.647431][T26338] bond9: left promiscuous mode [ 834.647734][T26338] bridge0: port 1(bond9) entered disabled state [ 834.674773][T26338] bridge_slave_1: left allmulticast mode [ 834.674803][T26338] bridge_slave_1: left promiscuous mode [ 834.675047][T26338] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.746640][T26341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5267'. [ 835.134222][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5268'. [ 835.289584][T26366] netlink: 'syz.5.5272': attribute type 1 has an invalid length. [ 835.415256][T26366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 835.488717][T26368] bond2: (slave dummy0): making interface the new active one [ 835.509192][T26368] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 835.582754][T26372] IPVS: length: 116 != 24 [ 835.586156][T26366] netlink: 'syz.5.5272': attribute type 10 has an invalid length. [ 835.586182][T26366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5272'. [ 835.619691][T26366] dummy0: entered promiscuous mode [ 835.706709][T26366] bond2: (slave dummy0): Releasing active interface [ 836.236248][T26391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5274'. [ 836.236277][T26391] openvswitch: netlink: Invalid VLAN frame [ 836.491677][T26395] netlink: 'syz.5.5276': attribute type 12 has an invalid length. [ 836.491705][T26395] netlink: 'syz.5.5276': attribute type 29 has an invalid length. [ 836.491720][T26395] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5276'. [ 836.491739][T26395] netlink: 59 bytes leftover after parsing attributes in process `syz.5.5276'. [ 836.533442][T26394] syzkaller0: entered promiscuous mode [ 836.533655][T26394] syzkaller0: entered allmulticast mode [ 836.878662][T25981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.326555][T26428] __nla_validate_parse: 1 callbacks suppressed [ 837.326581][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5283'. [ 837.326598][T26428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5283'. [ 837.714285][T25981] veth0_vlan: entered promiscuous mode [ 837.823572][T25981] veth1_vlan: entered promiscuous mode [ 837.942382][T26442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5285'. [ 838.104334][T25981] veth0_macvtap: entered promiscuous mode [ 838.135491][T25981] veth1_macvtap: entered promiscuous mode [ 838.240779][T25981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.276641][T25981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.315754][T22970] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.372826][T22977] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.373300][T22972] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.373379][T22972] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.658654][T26428] pim6reg1: entered promiscuous mode [ 838.658679][T26428] pim6reg1: entered allmulticast mode [ 838.892411][T26448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5287'. [ 839.237599][T26459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5287'. [ 839.376470][T22980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.376496][T22980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.670002][T22980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.670027][T22980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.285210][T22972] IPVS: starting estimator thread 0... [ 840.362364][T26483] netlink: 'syz.0.5294': attribute type 10 has an invalid length. [ 840.365652][T26483] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5294'. [ 840.366038][T26483] netlink: 'syz.0.5294': attribute type 10 has an invalid length. [ 840.371745][T26481] IPVS: using max 31 ests per chain, 74400 per kthread [ 840.494054][T26485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5295'. [ 841.955212][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5300'. [ 841.955237][T26517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5300'. [ 842.437257][T26526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5301'. [ 842.843432][T26531] pim6reg1: entered promiscuous mode [ 842.843460][T26531] pim6reg1: entered allmulticast mode [ 843.546733][T26558] netlink: 'syz.5.5303': attribute type 4 has an invalid length. [ 843.546761][T26558] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5303'. [ 844.226426][T26558] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 844.491215][T26572] IPv6: NLM_F_CREATE should be specified when creating new route [ 844.531123][T26572] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 844.785999][T26578] syzkaller0: entered promiscuous mode [ 844.786027][T26578] syzkaller0: entered allmulticast mode [ 844.789417][T26582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5313'. [ 844.872073][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 844.923856][T26570] netlink: 'syz.4.5310': attribute type 2 has an invalid length. [ 844.923885][T26570] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5310'. [ 845.065656][T26586] tipc: Enabled bearer , priority 0 [ 845.261219][T26590] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 845.509642][T15800] bridge0: entered promiscuous mode [ 845.578400][T26577] tipc: Resetting bearer [ 845.602361][T26589] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5315'. [ 845.654563][T26577] tipc: Disabling bearer [ 845.744512][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5317'. [ 846.259833][T26609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5318'. [ 846.351811][T22970] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.354147][T22982] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.355109][T22977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.355150][T22977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 846.720010][T26623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5322'. [ 846.721722][T26622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5322'. [ 846.730662][T26618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5320'. [ 846.943655][T26635] netlink: 'syz.4.5323': attribute type 10 has an invalid length. [ 847.038250][T26616] bond2 (unregistering): Released all slaves [ 847.483816][T26655] netlink: 'syz.6.5329': attribute type 4 has an invalid length. [ 847.549813][T26662] netlink: 'syz.6.5329': attribute type 4 has an invalid length. [ 848.073483][T15800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.103916][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.465008][T26688] __nla_validate_parse: 4 callbacks suppressed [ 848.465031][T26688] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5334'. [ 848.471013][T26685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5335'. [ 848.483671][T26686] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 848.613096][T26686] bond2 (unregistering): Released all slaves [ 849.015009][T26706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5342'. [ 849.015039][T26706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5342'. [ 849.113272][T15800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.261983][T26715] netlink: 712 bytes leftover after parsing attributes in process `syz.0.5343'. [ 849.262013][T26715] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.5343'. [ 849.262028][T26715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5343'. [ 850.013816][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5347'. [ 850.080848][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.162422][T15800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.380359][T26740] pim6reg1: entered promiscuous mode [ 850.380387][T26740] pim6reg1: entered allmulticast mode [ 850.724480][T26747] netlink: zone id is out of range [ 850.724519][T26747] netlink: zone id is out of range [ 850.724529][T26747] netlink: zone id is out of range [ 850.724538][T26747] netlink: zone id is out of range [ 850.724547][T26747] netlink: zone id is out of range [ 850.724556][T26747] netlink: zone id is out of range [ 850.724565][T26747] netlink: zone id is out of range [ 850.724573][T26747] netlink: zone id is out of range [ 852.731079][T26792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5365'. [ 852.858106][T26799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5367'. [ 852.878811][T26799] netlink: 'syz.5.5367': attribute type 11 has an invalid length. [ 853.297058][T26811] syzkaller0: entered promiscuous mode [ 853.297084][T26811] syzkaller0: entered allmulticast mode [ 853.933304][T26836] netlink: 'syz.4.5375': attribute type 2 has an invalid length. [ 854.128534][T26843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5375'. [ 854.128569][T26843] netlink: 'syz.4.5375': attribute type 1 has an invalid length. [ 854.155056][T22976] IPVS: starting estimator thread 0... [ 854.242626][T26844] IPVS: using max 26 ests per chain, 62400 per kthread [ 854.293193][T26850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 854.303857][T26847] netlink: 'syz.0.5376': attribute type 8 has an invalid length. [ 854.567440][T26847] batman_adv: batadv0: Adding interface: veth0 [ 854.567462][T26847] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.567504][T26847] batman_adv: batadv0: Interface activated: veth0 [ 855.018045][T26857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5379'. [ 855.018150][T26857] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 855.117058][T26861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5380'. [ 855.118503][T26858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5380'. [ 855.156722][T26857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5379'. [ 855.179877][T26863] netlink: 'syz.4.5381': attribute type 1 has an invalid length. [ 855.185099][T26866] FAULT_INJECTION: forcing a failure. [ 855.185099][T26866] name failslab, interval 1, probability 0, space 0, times 0 [ 855.185128][T26866] CPU: 1 UID: 0 PID: 26866 Comm: syz.0.5382 Not tainted syzkaller #0 PREEMPT(full) [ 855.185150][T26866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 855.185162][T26866] Call Trace: [ 855.185171][T26866] [ 855.185178][T26866] dump_stack_lvl+0xe8/0x150 [ 855.185215][T26866] should_fail_ex+0x3eb/0x540 [ 855.185244][T26866] should_failslab+0xa8/0x100 [ 855.185273][T26866] __kmalloc_cache_noprof+0x9e/0x600 [ 855.185296][T26866] ? __kmalloc_cache_noprof+0x148/0x600 [ 855.185317][T26866] ? sctp_add_bind_addr+0x8c/0x370 [ 855.185337][T26866] ? sctp_add_bind_addr+0x8c/0x370 [ 855.185365][T26866] sctp_add_bind_addr+0x8c/0x370 [ 855.185395][T26866] sctp_copy_local_addr_list+0x31a/0x4e0 [ 855.185420][T26866] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 855.185443][T26866] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 855.185471][T26866] ? sctp_v4_is_any+0x35/0x60 [ 855.185492][T26866] ? sctp_copy_one_addr+0x93/0x360 [ 855.185518][T26866] sctp_bind_addr_copy+0xb3/0x3c0 [ 855.185541][T26866] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 855.185582][T26866] sctp_connect_new_asoc+0x2ff/0x6b0 [ 855.185612][T26866] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 855.185645][T26866] ? __local_bh_enable_ip+0xd6/0x140 [ 855.185669][T26866] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 855.185694][T26866] ? security_sctp_bind_connect+0x7e/0x2c0 [ 855.185723][T26866] sctp_sendmsg+0x159b/0x2d00 [ 855.185760][T26866] ? kstrtouint+0x6e/0xe0 [ 855.185790][T26866] ? __pfx_sctp_sendmsg+0x10/0x10 [ 855.185814][T26866] ? lock_acquire+0x115/0x350 [ 855.185859][T26866] ? aa_sock_msg_perm+0xfc/0x210 [ 855.185877][T26866] ? sock_rps_record_flow+0x19/0x350 [ 855.185902][T26866] ? inet_sendmsg+0x298/0x320 [ 855.185925][T26866] ? __pfx_inet_sendmsg+0x10/0x10 [ 855.185943][T26866] sock_sendmsg_nosec+0x10f/0x190 [ 855.185972][T26866] __sys_sendto+0x408/0x5a0 [ 855.185999][T26866] ? ksys_write+0x1e6/0x270 [ 855.186028][T26866] ? __pfx___sys_sendto+0x10/0x10 [ 855.186053][T26866] ? __mutex_unlock_slowpath+0x731/0x900 [ 855.186090][T26866] ? fdget+0x1ac/0x250 [ 855.186127][T26866] ? __pfx_ksys_write+0x10/0x10 [ 855.186157][T26866] __x64_sys_sendto+0xde/0x100 [ 855.186189][T26866] do_syscall_64+0x166/0x520 [ 855.186210][T26866] ? trace_irq_disable+0x3b/0x140 [ 855.186234][T26866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.186254][T26866] ? clear_bhb_loop+0x70/0xc0 [ 855.186277][T26866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.186295][T26866] RIP: 0033:0x7f6dce99fb19 [ 855.186314][T26866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.186330][T26866] RSP: 002b:00007f6dcf884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 855.186351][T26866] RAX: ffffffffffffffda RBX: 00007f6dcec25fa0 RCX: 00007f6dce99fb19 [ 855.186365][T26866] RDX: 000000000000fffd RSI: 0000200000000100 RDI: 0000000000000004 [ 855.186378][T26866] RBP: 00007f6dcf884090 R08: 00002000000000c0 R09: 0000000000000010 [ 855.186390][T26866] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 855.186403][T26866] R13: 00007f6dcec26038 R14: 00007f6dcec25fa0 R15: 00007ffef9bdbb48 [ 855.186436][T26866] [ 855.289616][T26868] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5379'. [ 855.355588][T15803] net_ratelimit: 550 callbacks suppressed [ 855.355608][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.146907][T26894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.297750][T26901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.297778][T26901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.304147][T26901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.304377][T26901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.394138][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.657975][T26906] netlink: 'syz.6.5395': attribute type 178 has an invalid length. [ 856.845170][T26908] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5396'. [ 857.200033][ T29] audit: type=1804 audit(1793716070.370:25): pid=26915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5398" name="/newroot/80/cgroup.controllers" dev="tmpfs" ino=431 res=1 errno=0 [ 857.268276][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.330245][T26927] tipc: Enabled bearer , priority 0 [ 857.342638][T26924] syzkaller0: entered promiscuous mode [ 857.342660][T26924] syzkaller0: entered allmulticast mode [ 857.441053][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.711668][T26921] tipc: Resetting bearer [ 857.754466][T26918] tipc: Resetting bearer [ 857.862223][T26918] tipc: Disabling bearer [ 858.077675][T26947] FAULT_INJECTION: forcing a failure. [ 858.077675][T26947] name failslab, interval 1, probability 0, space 0, times 0 [ 858.077708][T26947] CPU: 1 UID: 0 PID: 26947 Comm: syz.2.5407 Not tainted syzkaller #0 PREEMPT(full) [ 858.077731][T26947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 858.077744][T26947] Call Trace: [ 858.077753][T26947] [ 858.077763][T26947] dump_stack_lvl+0xe8/0x150 [ 858.077801][T26947] should_fail_ex+0x3eb/0x540 [ 858.077832][T26947] should_failslab+0xa8/0x100 [ 858.077864][T26947] __kmalloc_cache_noprof+0x9e/0x600 [ 858.077891][T26947] ? __kmalloc_cache_noprof+0x148/0x600 [ 858.077913][T26947] ? sctp_add_bind_addr+0x8c/0x370 [ 858.077936][T26947] ? sctp_add_bind_addr+0x8c/0x370 [ 858.077976][T26947] sctp_add_bind_addr+0x8c/0x370 [ 858.078005][T26947] sctp_copy_local_addr_list+0x31a/0x4e0 [ 858.078033][T26947] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 858.078059][T26947] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 858.078092][T26947] ? sctp_v4_is_any+0x35/0x60 [ 858.078116][T26947] ? sctp_copy_one_addr+0x93/0x360 [ 858.078144][T26947] sctp_bind_addr_copy+0xb3/0x3c0 [ 858.078170][T26947] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 858.078207][T26947] sctp_connect_new_asoc+0x2ff/0x6b0 [ 858.078239][T26947] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 858.078276][T26947] ? __local_bh_enable_ip+0xd6/0x140 [ 858.078302][T26947] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 858.078330][T26947] ? security_sctp_bind_connect+0x7e/0x2c0 [ 858.078362][T26947] sctp_sendmsg+0x159b/0x2d00 [ 858.078403][T26947] ? kstrtouint+0x6e/0xe0 [ 858.078435][T26947] ? __pfx_sctp_sendmsg+0x10/0x10 [ 858.078461][T26947] ? lock_acquire+0x115/0x350 [ 858.078511][T26947] ? aa_sock_msg_perm+0xfc/0x210 [ 858.078530][T26947] ? sock_rps_record_flow+0x19/0x350 [ 858.078557][T26947] ? inet_sendmsg+0x298/0x320 [ 858.078582][T26947] ? __pfx_inet_sendmsg+0x10/0x10 [ 858.078602][T26947] sock_sendmsg_nosec+0x10f/0x190 [ 858.078633][T26947] __sys_sendto+0x408/0x5a0 [ 858.078663][T26947] ? ksys_write+0x1e6/0x270 [ 858.078693][T26947] ? __pfx___sys_sendto+0x10/0x10 [ 858.078721][T26947] ? __mutex_unlock_slowpath+0x731/0x900 [ 858.078762][T26947] ? fdget+0x1ac/0x250 [ 858.078802][T26947] ? __pfx_ksys_write+0x10/0x10 [ 858.078834][T26947] __x64_sys_sendto+0xde/0x100 [ 858.078869][T26947] do_syscall_64+0x166/0x520 [ 858.078892][T26947] ? trace_irq_disable+0x3b/0x140 [ 858.078919][T26947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.078950][T26947] ? clear_bhb_loop+0x70/0xc0 [ 858.078975][T26947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.078996][T26947] RIP: 0033:0x7f87b299fb19 [ 858.079017][T26947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.079035][T26947] RSP: 002b:00007f87b3913028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 858.079059][T26947] RAX: ffffffffffffffda RBX: 00007f87b2c25fa0 RCX: 00007f87b299fb19 [ 858.079075][T26947] RDX: 000000000000fffd RSI: 0000200000000100 RDI: 0000000000000004 [ 858.079089][T26947] RBP: 00007f87b3913090 R08: 00002000000000c0 R09: 0000000000000010 [ 858.079103][T26947] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 858.079117][T26947] R13: 00007f87b2c26038 R14: 00007f87b2c25fa0 R15: 00007fff16df46d8 [ 858.079153][T26947] [ 858.471854][T15800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.479469][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5409'. [ 858.925820][T26968] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5413'. [ 859.088699][T26973] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 859.112061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.112366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.512115][T15799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.618571][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.398797][ T7421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.558455][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.891168][T26980] netlink: 'syz.4.5415': attribute type 4 has an invalid length. [ 861.379517][T27006] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5420'. [ 861.476730][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5421'. [ 861.476757][T27011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5421'. [ 861.592283][T15799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.833752][T27016] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5423'. [ 862.008512][T27026] netlink: 'syz.5.5423': attribute type 1 has an invalid length. [ 862.034151][T27022] bond8: entered allmulticast mode [ 862.048666][T27022] 8021q: adding VLAN 0 to HW filter on device bond8 [ 862.071373][T27016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5423'. [ 862.320791][T27026] bond3: entered promiscuous mode [ 862.333130][T27026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 862.400103][T27024] ip6gretap3: entered allmulticast mode [ 862.405297][T27024] bond8: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 862.456741][T27011] pim6reg1: entered promiscuous mode [ 862.456770][T27011] pim6reg1: entered allmulticast mode [ 862.498296][T22959] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 862.604693][T27032] FAULT_INJECTION: forcing a failure. [ 862.604693][T27032] name failslab, interval 1, probability 0, space 0, times 0 [ 862.604727][T27032] CPU: 1 UID: 0 PID: 27032 Comm: syz.4.5427 Not tainted syzkaller #0 PREEMPT(full) [ 862.604752][T27032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 862.604765][T27032] Call Trace: [ 862.604775][T27032] [ 862.604785][T27032] dump_stack_lvl+0xe8/0x150 [ 862.604826][T27032] should_fail_ex+0x3eb/0x540 [ 862.604864][T27032] should_failslab+0xa8/0x100 [ 862.604898][T27032] __kmalloc_cache_noprof+0x9e/0x600 [ 862.604926][T27032] ? __kmalloc_cache_noprof+0x148/0x600 [ 862.604951][T27032] ? sctp_add_bind_addr+0x8c/0x370 [ 862.604975][T27032] ? sctp_add_bind_addr+0x8c/0x370 [ 862.605009][T27032] sctp_add_bind_addr+0x8c/0x370 [ 862.605041][T27032] sctp_copy_local_addr_list+0x31a/0x4e0 [ 862.605078][T27032] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 862.605105][T27032] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 862.605138][T27032] ? sctp_v4_is_any+0x35/0x60 [ 862.605163][T27032] ? sctp_copy_one_addr+0x93/0x360 [ 862.605194][T27032] sctp_bind_addr_copy+0xb3/0x3c0 [ 862.605221][T27032] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 862.605260][T27032] sctp_connect_new_asoc+0x2ff/0x6b0 [ 862.605293][T27032] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 862.605329][T27032] ? __local_bh_enable_ip+0xd6/0x140 [ 862.605354][T27032] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 862.605381][T27032] ? security_sctp_bind_connect+0x7e/0x2c0 [ 862.605413][T27032] sctp_sendmsg+0x159b/0x2d00 [ 862.605455][T27032] ? kstrtouint+0x6e/0xe0 [ 862.605486][T27032] ? __pfx_sctp_sendmsg+0x10/0x10 [ 862.605513][T27032] ? lock_acquire+0x115/0x350 [ 862.605562][T27032] ? aa_sock_msg_perm+0xfc/0x210 [ 862.605581][T27032] ? sock_rps_record_flow+0x19/0x350 [ 862.605608][T27032] ? inet_sendmsg+0x298/0x320 [ 862.605633][T27032] ? __pfx_inet_sendmsg+0x10/0x10 [ 862.605652][T27032] sock_sendmsg_nosec+0x10f/0x190 [ 862.605683][T27032] __sys_sendto+0x408/0x5a0 [ 862.605713][T27032] ? ksys_write+0x1e6/0x270 [ 862.605743][T27032] ? __pfx___sys_sendto+0x10/0x10 [ 862.605771][T27032] ? __mutex_unlock_slowpath+0x731/0x900 [ 862.605812][T27032] ? fdget+0x1ac/0x250 [ 862.605851][T27032] ? __pfx_ksys_write+0x10/0x10 [ 862.605885][T27032] __x64_sys_sendto+0xde/0x100 [ 862.605919][T27032] do_syscall_64+0x166/0x520 [ 862.605942][T27032] ? trace_irq_disable+0x3b/0x140 [ 862.605969][T27032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.605991][T27032] ? clear_bhb_loop+0x70/0xc0 [ 862.606017][T27032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.606037][T27032] RIP: 0033:0x7fe8a559fb19 [ 862.606058][T27032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.606086][T27032] RSP: 002b:00007fe8a653f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 862.606110][T27032] RAX: ffffffffffffffda RBX: 00007fe8a5825fa0 RCX: 00007fe8a559fb19 [ 862.606126][T27032] RDX: 000000000000fffd RSI: 0000200000000100 RDI: 0000000000000004 [ 862.606140][T27032] RBP: 00007fe8a653f090 R08: 00002000000000c0 R09: 0000000000000010 [ 862.606155][T27032] R10: 000000002000c8d4 R11: 0000000000000246 R12: 0000000000000002 [ 862.606168][T27032] R13: 00007fe8a5826038 R14: 00007fe8a5825fa0 R15: 00007ffc11ae3d38 [ 862.606204][T27032] [ 862.647481][T15800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.727026][T22970] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 863.043865][T27034] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5428'. [ 863.432925][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.674960][T15800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.843546][T27059] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 864.110849][T27049] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5432'. [ 864.132896][T27060] vlan0: entered promiscuous mode [ 864.132922][T27060] bond0: entered promiscuous mode [ 864.132936][T27060] bond_slave_0: entered promiscuous mode [ 864.134748][T27060] bond_slave_1: entered promiscuous mode [ 864.361091][T27054] syzkaller1: entered promiscuous mode [ 864.361119][T27054] syzkaller1: entered allmulticast mode [ 864.714266][T15800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.739029][T27090] Bluetooth: MGMT ver 1.23 [ 864.822607][T27094] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5437'. [ 864.961846][T27100] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5440'. [ 865.528193][T27113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5443'. [ 865.598870][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.601123][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.620740][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.631591][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.634203][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.634570][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.636072][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.636407][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.637190][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.639630][T27109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.661021][T27100] sit0: left promiscuous mode [ 865.723522][T27114] IPVS: set_ctl: invalid protocol: 0 172.30.0.6:20002 [ 866.583851][T27100] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 866.649341][T27070] __nla_validate_parse: 3 callbacks suppressed [ 866.649364][T27070] netlink: 988 bytes leftover after parsing attributes in process `syz.2.5438'. [ 867.130643][T27136] syzkaller0: entered promiscuous mode [ 867.130668][T27136] syzkaller0: entered allmulticast mode [ 867.578525][T27143] bond11: (slave vlan1): Error -34 calling dev_set_mtu [ 867.829904][T15799] hid-generic 0005:0008:020 ** replaying previous printk message ** [ 867.829904][T15799] hid-generic 0005:0008:0200.0002: item fetching failed at offset 0/4 [ 867.836212][T15799] hid-generic 0005:0008:0200.0002: probe with driver hid-generic failed with error -22 [ 867.836335][T15799] [ 867.860750][T15799] ====================================================== [ 867.867886][T15799] WARNING: possible circular locking dependency detected [ 867.875026][T15799] syzkaller #0 Not tainted [ 867.879538][T15799] ------------------------------------------------------ [ 867.886576][T15799] kworker/1:16/15799 is trying to acquire lock: [ 867.892919][T15799] ffff88801cec4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x910 [ 867.903141][T15799] [ 867.903141][T15799] but task is already holding lock: [ 867.910519][T15799] ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 867.920830][T15799] [ 867.920830][T15799] which lock already depends on the new lock. [ 867.920830][T15799] [ 867.931343][T15799] [ 867.931343][T15799] the existing dependency chain (in reverse order) is: [ 867.940380][T15799] [ 867.940380][T15799] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 867.948529][T15799] down_write+0x91/0x200 [ 867.953327][T15799] kernfs_add_one+0x41/0x510 [ 867.958463][T15799] kernfs_create_dir_ns+0x18c/0x220 [ 867.964200][T15799] internal_create_group+0x440/0x1180 [ 867.970126][T15799] cpuhp_invoke_callback+0x434/0x810 [ 867.976047][T15799] cpuhp_issue_call+0x3f0/0x750 [ 867.981432][T15799] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 867.988047][T15799] __cpuhp_setup_state+0x3f/0x60 [ 867.993539][T15799] do_one_initcall+0x250/0x870 [ 867.998874][T15799] do_initcall_level+0x10a/0x1a0 [ 868.004520][T15799] do_initcalls+0x59/0xa0 [ 868.009470][T15799] kernel_init_freeable+0x29d/0x3e0 [ 868.015198][T15799] kernel_init+0x22/0x1d0 [ 868.020064][T15799] ret_from_fork+0x514/0xb70 [ 868.025228][T15799] ret_from_fork_asm+0x1a/0x30 [ 868.030619][T15799] [ 868.030619][T15799] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 868.038545][T15799] [ 868.038545][T15799] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 868.046295][T15799] cpus_read_lock+0x3d/0x160 [ 868.051475][T15799] static_key_slow_inc+0x12/0x30 [ 868.056988][T15799] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 868.063357][T15799] nbd_genl_foreach_sock+0x265/0x450 [ 868.069181][T15799] nbd_genl_reconfigure+0xbbb/0x1040 [ 868.075283][T15799] genl_family_rcv_msg_doit+0x233/0x340 [ 868.081362][T15799] genl_rcv_msg+0x614/0x7a0 [ 868.086402][T15799] netlink_rcv_skb+0x226/0x4a0 [ 868.091698][T15799] genl_rcv+0x28/0x40 [ 868.096214][T15799] netlink_unicast+0x8ef/0xa80 [ 868.101522][T15799] netlink_sendmsg+0x7f0/0xb20 [ 868.107012][T15799] sock_sendmsg_nosec+0x14e/0x190 [ 868.112600][T15799] ____sys_sendmsg+0x54e/0x850 [ 868.117905][T15799] ___sys_sendmsg+0x2a5/0x360 [ 868.123112][T15799] __x64_sys_sendmsg+0x1b1/0x290 [ 868.128578][T15799] do_syscall_64+0x166/0x520 [ 868.133695][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.140141][T15799] [ 868.140141][T15799] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 868.147878][T15799] __mutex_lock+0x197/0x15a0 [ 868.153000][T15799] nbd_queue_rq+0x373/0xff0 [ 868.158029][T15799] blk_mq_dispatch_rq_list+0x499/0x1990 [ 868.164264][T15799] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 868.171137][T15799] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 868.177837][T15799] blk_mq_run_work_fn+0x167/0x2f0 [ 868.183572][T15799] process_scheduled_works+0xc3d/0x1630 [ 868.189655][T15799] worker_thread+0xa47/0xfb0 [ 868.194773][T15799] kthread+0x38b/0x480 [ 868.199452][T15799] ret_from_fork+0x514/0xb70 [ 868.204963][T15799] ret_from_fork_asm+0x1a/0x30 [ 868.210251][T15799] [ 868.210251][T15799] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 868.217461][T15799] __mutex_lock+0x197/0x15a0 [ 868.222578][T15799] nbd_queue_rq+0xc1/0xff0 [ 868.227517][T15799] blk_mq_dispatch_rq_list+0x499/0x1990 [ 868.233590][T15799] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 868.240466][T15799] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 868.247063][T15799] blk_mq_run_work_fn+0x167/0x2f0 [ 868.252642][T15799] process_scheduled_works+0xc3d/0x1630 [ 868.259018][T15799] worker_thread+0xa47/0xfb0 [ 868.264150][T15799] kthread+0x38b/0x480 [ 868.268744][T15799] ret_from_fork+0x514/0xb70 [ 868.274293][T15799] ret_from_fork_asm+0x1a/0x30 [ 868.279581][T15799] [ 868.279581][T15799] -> #4 (set->srcu){.+.+}-{0:0}: [ 868.286708][T15799] __synchronize_srcu+0xca/0x2f0 [ 868.292185][T15799] elevator_switch+0x1e8/0x7b0 [ 868.297717][T15799] elevator_change+0x2fa/0x480 [ 868.303105][T15799] elevator_set_default+0x375/0x440 [ 868.308834][T15799] blk_register_queue+0x404/0x4f0 [ 868.314469][T15799] __add_disk+0x6b8/0xdb0 [ 868.319541][T15799] add_disk_fwnode+0x100/0x3a0 [ 868.324851][T15799] nbd_dev_add+0x733/0xb60 [ 868.329791][T15799] nbd_init+0x168/0x1f0 [ 868.334519][T15799] do_one_initcall+0x250/0x870 [ 868.339906][T15799] do_initcall_level+0x10a/0x1a0 [ 868.345373][T15799] do_initcalls+0x59/0xa0 [ 868.350231][T15799] kernel_init_freeable+0x29d/0x3e0 [ 868.355958][T15799] kernel_init+0x22/0x1d0 [ 868.360830][T15799] ret_from_fork+0x514/0xb70 [ 868.365949][T15799] ret_from_fork_asm+0x1a/0x30 [ 868.371242][T15799] [ 868.371242][T15799] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 868.379153][T15799] __mutex_lock+0x197/0x15a0 [ 868.384270][T15799] elevator_change+0x1af/0x480 [ 868.389570][T15799] elevator_set_none+0xb5/0x140 [ 868.394946][T15799] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 868.401292][T15799] nbd_start_device+0x189/0xb30 [ 868.406675][T15799] nbd_genl_connect+0x167d/0x1cd0 [ 868.412234][T15799] genl_family_rcv_msg_doit+0x233/0x340 [ 868.418307][T15799] genl_rcv_msg+0x614/0x7a0 [ 868.423427][T15799] netlink_rcv_skb+0x226/0x4a0 [ 868.428729][T15799] genl_rcv+0x28/0x40 [ 868.433252][T15799] netlink_unicast+0x8ef/0xa80 [ 868.438566][T15799] netlink_sendmsg+0x7f0/0xb20 [ 868.443862][T15799] sock_sendmsg_nosec+0x14e/0x190 [ 868.449427][T15799] ____sys_sendmsg+0x54e/0x850 [ 868.454713][T15799] ___sys_sendmsg+0x2a5/0x360 [ 868.459915][T15799] __x64_sys_sendmsg+0x1b1/0x290 [ 868.465385][T15799] do_syscall_64+0x166/0x520 [ 868.470679][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.477121][T15799] [ 868.477121][T15799] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 868.485750][T15799] blk_alloc_queue+0x544/0x690 [ 868.491042][T15799] __blk_mq_alloc_disk+0x194/0x390 [ 868.496857][T15799] nbd_dev_add+0x494/0xb60 [ 868.501806][T15799] nbd_init+0x168/0x1f0 [ 868.506690][T15799] do_one_initcall+0x250/0x870 [ 868.511983][T15799] do_initcall_level+0x10a/0x1a0 [ 868.517452][T15799] do_initcalls+0x59/0xa0 [ 868.522306][T15799] kernel_init_freeable+0x29d/0x3e0 [ 868.528307][T15799] kernel_init+0x22/0x1d0 [ 868.533357][T15799] ret_from_fork+0x514/0xb70 [ 868.538498][T15799] ret_from_fork_asm+0x1a/0x30 [ 868.543892][T15799] [ 868.543892][T15799] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 868.551206][T15799] fs_reclaim_acquire+0x71/0x100 [ 868.556677][T15799] kmem_cache_alloc_noprof+0x5f/0x600 [ 868.562596][T15799] __kernfs_iattrs+0xdd/0x380 [ 868.567877][T15799] kernfs_iop_setattr+0xe6/0x3f0 [ 868.573360][T15799] notify_change+0xbba/0xea0 [ 868.578681][T15799] do_truncate+0x1c2/0x250 [ 868.583746][T15799] path_openat+0x18a6/0x20f0 [ 868.588951][T15799] do_file_open+0x23e/0x4a0 [ 868.593984][T15799] do_sys_openat2+0x115/0x200 [ 868.599184][T15799] __x64_sys_openat+0x138/0x170 [ 868.604665][T15799] do_syscall_64+0x166/0x520 [ 868.609789][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.616211][T15799] [ 868.616211][T15799] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 868.624921][T15799] __lock_acquire+0x164c/0x2de0 [ 868.630330][T15799] lock_acquire+0x115/0x350 [ 868.635372][T15799] down_write+0x91/0x200 [ 868.640145][T15799] __kernfs_remove+0x174/0x910 [ 868.645796][T15799] kernfs_remove_by_name_ns+0xc0/0x140 [ 868.651783][T15799] really_probe+0x36e/0xae0 [ 868.656843][T15799] __driver_probe_device+0x1e8/0x360 [ 868.662741][T15799] driver_probe_device+0x4f/0x240 [ 868.668289][T15799] __device_attach_driver+0x270/0x410 [ 868.674185][T15799] bus_for_each_drv+0x258/0x2f0 [ 868.679660][T15799] __device_attach+0x2bd/0x430 [ 868.684960][T15799] device_initial_probe+0x9c/0x100 [ 868.690594][T15799] __bus_probe_device+0x126/0x220 [ 868.696154][T15799] device_add+0x7d7/0xb80 [ 868.701008][T15799] hid_add_device+0x272/0x3e0 [ 868.706467][T15799] hidp_session_dev_work+0x45/0x160 [ 868.712364][T15799] process_scheduled_works+0xc3d/0x1630 [ 868.718446][T15799] worker_thread+0xa47/0xfb0 [ 868.723566][T15799] kthread+0x38b/0x480 [ 868.728159][T15799] ret_from_fork+0x514/0xb70 [ 868.733542][T15799] ret_from_fork_asm+0x1a/0x30 [ 868.738918][T15799] [ 868.738918][T15799] other info that might help us debug this: [ 868.738918][T15799] [ 868.749940][T15799] Chain exists of: [ 868.749940][T15799] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 868.749940][T15799] [ 868.764383][T15799] Possible unsafe locking scenario: [ 868.764383][T15799] [ 868.771923][T15799] CPU0 CPU1 [ 868.777296][T15799] ---- ---- [ 868.782682][T15799] lock(&root->kernfs_rwsem); [ 868.787459][T15799] lock(cpuhp_state_mutex); [ 868.794574][T15799] lock(&root->kernfs_rwsem); [ 868.801951][T15799] lock(&root->kernfs_iattr_rwsem); [ 868.807591][T15799] [ 868.807591][T15799] *** DEADLOCK *** [ 868.807591][T15799] [ 868.815731][T15799] locks held by kworker/1:16/15799: 5, last CPU#1: [ 868.822235][T15799] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 868.833297][T15799] #1: ffffc9000fe1fc40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 868.845663][T15799] #2: ffff88807f661a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 868.854893][T15799] #3: ffff88801cec4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 868.866217][T15799] #4: ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 868.877370][T15799] [ 868.877370][T15799] stack backtrace: [ 868.883274][T15799] CPU: 1 UID: 0 PID: 15799 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 868.892928][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 868.903007][T15799] Workqueue: events hidp_session_dev_work [ 868.908743][T15799] Call Trace: [ 868.912029][T15799] [ 868.914967][T15799] dump_stack_lvl+0xe8/0x150 [ 868.919590][T15799] print_circular_bug+0x2e2/0x300 [ 868.924664][T15799] check_noncircular+0x12f/0x150 [ 868.929626][T15799] __lock_acquire+0x164c/0x2de0 [ 868.934573][T15799] ? __lock_acquire+0x747/0x2de0 [ 868.939522][T15799] lock_acquire+0x115/0x350 [ 868.944052][T15799] ? __kernfs_remove+0x174/0x910 [ 868.949050][T15799] down_write+0x91/0x200 [ 868.953417][T15799] ? __kernfs_remove+0x174/0x910 [ 868.958397][T15799] ? __pfx_down_write+0x10/0x10 [ 868.963262][T15799] ? kernfs_root+0x1c/0x230 [ 868.967786][T15799] ? kernfs_root+0x1c/0x230 [ 868.972390][T15799] ? kernfs_root+0x1ea/0x230 [ 868.977004][T15799] __kernfs_remove+0x174/0x910 [ 868.981980][T15799] ? kernfs_find_ns+0x701/0x800 [ 868.986852][T15799] kernfs_remove_by_name_ns+0xc0/0x140 [ 868.992333][T15799] really_probe+0x36e/0xae0 [ 868.996866][T15799] __driver_probe_device+0x1e8/0x360 [ 869.002158][T15799] driver_probe_device+0x4f/0x240 [ 869.007201][T15799] __device_attach_driver+0x270/0x410 [ 869.012673][T15799] bus_for_each_drv+0x258/0x2f0 [ 869.017627][T15799] ? __pfx___device_attach_driver+0x10/0x10 [ 869.023627][T15799] ? __pfx_bus_for_each_drv+0x10/0x10 [ 869.029010][T15799] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 869.034913][T15799] __device_attach+0x2bd/0x430 [ 869.039772][T15799] ? __pfx___device_attach+0x10/0x10 [ 869.045247][T15799] ? _raw_spin_unlock+0x28/0x50 [ 869.050135][T15799] device_initial_probe+0x9c/0x100 [ 869.055267][T15799] __bus_probe_device+0x126/0x220 [ 869.060302][T15799] ? bus_probe_device+0xd/0x20 [ 869.065253][T15799] device_add+0x7d7/0xb80 [ 869.069588][T15799] hid_add_device+0x272/0x3e0 [ 869.074369][T15799] ? hidp_session_dev_work+0x1e/0x160 [ 869.079940][T15799] ? process_scheduled_works+0x97a/0x1630 [ 869.085693][T15799] hidp_session_dev_work+0x45/0x160 [ 869.090926][T15799] process_scheduled_works+0xc3d/0x1630 [ 869.096553][T15799] ? __pfx_process_scheduled_works+0x10/0x10 [ 869.102584][T15799] ? assign_work+0x3cf/0x5d0 [ 869.107296][T15799] worker_thread+0xa47/0xfb0 [ 869.111998][T15799] kthread+0x38b/0x480 [ 869.116076][T15799] ? __pfx_worker_thread+0x10/0x10 [ 869.121205][T15799] ? __pfx_kthread+0x10/0x10 [ 869.125824][T15799] ret_from_fork+0x514/0xb70 [ 869.130495][T15799] ? __pfx_ret_from_fork+0x10/0x10 [ 869.135625][T15799] ? __switch_to+0xc78/0x1410 [ 869.140333][T15799] ? __pfx_kthread+0x10/0x10 [ 869.144931][T15799] ret_from_fork_asm+0x1a/0x30 [ 869.149723][T15799] [ 869.219530][T27152] sctp: [Deprecated]: syz.6.5452 (pid 27152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.219530][T27152] Use struct sctp_sack_info instead [ 869.221128][T27152] sctp: [Deprecated]: syz.6.5452 (pid 27152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.221128][T27152] Use struct sctp_sack_info instead [ 871.274860][T15799] net_ratelimit: 875 callbacks suppressed [ 871.274887][T15799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.315437][ T9596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.642144][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.355174][T15799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.394784][T15799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.440053][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.672296][ T7417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.477989][T15799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.513071][T15799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog