last executing test programs: 6m2.236066329s ago: executing program 1 (id=6882): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x800}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x3fffffffffb, 0x401, 0x2000004000f0, 0x200000000120, 0xba, 0x20000000020004], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT, @ANYRESHEX=r0]}, 0xca) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x800}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x3fffffffffb, 0x401, 0x2000004000f0, 0x200000000120, 0xba, 0x20000000020004], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT, @ANYRESHEX=r0]}, 0xca) (async) 6m1.797245516s ago: executing program 1 (id=6885): accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000031c0)=ANY=[@ANYBLOB="48000000420001000000000000000000030100000f0000002600010000112233445566778899aabb08004500001c00002000011100000101010102020202000004000280040003"], 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000000c0000000400000001000004010000000a00000003000000060000000000000000000003000000000200000001000000a30000000000000000000003000000000200000002000000000000000061002e2e61612e61005f0074affd2aa81f01a79efe71acb70ce0fb4a40c7d8a5341fb8db1de3cbf84186d4b4aeb5f58d26"], 0x0, 0x6c}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r7], 0x40}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e20, @local}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000000140), 0x4) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9) (async) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9) close(0x4) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000005c0)=@ethtool_channels={0x3c, 0x2b6, 0x9, 0x72, 0x5, 0x2, 0xe680, 0x401, 0x4}}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x1, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x1070bd2a, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x140, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0xa054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) socket(0x10, 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) 5m58.848445545s ago: executing program 1 (id=6903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001340)={0x0, 0xfffffffffffffd29, &(0x7f0000001300)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0xc000) 5m58.179810861s ago: executing program 1 (id=6905): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x200, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000d0000000739af1ff00000000ce09020000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m57.200005918s ago: executing program 1 (id=6911): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xb}, {0xfff1, 0x1}, {0x9, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x800) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getpid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000500), &(0x7f0000001200)=@tcp, 0x1}, 0x20) 5m56.563207994s ago: executing program 0 (id=6913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r2, 0x89e0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x47, 0x0, &(0x7f0000001740)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 5m56.268764584s ago: executing program 0 (id=6914): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000001040100000000000000000002000000050001000100000032c19deab076fef59cc491203ab5d63acba39785153154d10754"], 0x1c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) (async) shutdown(r3, 0x1) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x25dfdbfd, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x800081, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x8, 0xb, 0x1e, 0x6, 0xca11, 0x10000}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8814}, 0x10040090) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) (async) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5m55.229393677s ago: executing program 1 (id=6917): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) 5m55.154969695s ago: executing program 0 (id=6919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x18e0, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_fw={{0x7}, {0x18b4, 0x2, [@TCA_FW_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_FW_ACT={0x1894, 0x4, [@m_simple={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'clsact\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'flower\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7, 0x2}}]}, {0x9, 0x6, "6a1c6ea0d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x100, 0x1d, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x6, 0x8, 0x4, 0x8}, 0x6}}]}, {0x81, 0x6, "8214bbf9e0d7de70d7fea0e2ef21f582c9c974b6f8d5338a704eb572ff4005ef383fd0f76037f285c08deeb539e677711d67cc79faa4ed41580bc4047a927a1f05baf1101c46e79730f4785185c4b077e25b9d1c7fb5ba75b8451fc322cc77fc06ee7ab08957026b043491bd8bfb233ea8205a164557aa04567850d3eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x190, 0x1d, 0x0, 0x0, {{0x8}, {0x94, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0xfffffffc, 0x1, 0x12, 0x8}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x3, 0xffffffffffffffff, 0x61e, 0x4}, 0x1}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x800}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0xfffffffffffffe06, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xb9, 0xfffffff3, 0x1, 0xffffffff}, 0x1}}]}, {0xd7, 0x6, "082062f97c241ba0fb29e329438bb5c39d6d9a592c16257ef5ab3c4b41e478630c21d4b52daf526823b4ac4afe3c8fdb6101b9113f446fc260cf7eb39e5db9e72d5da595006c9a4e803d1db985f6a2509794b9608d74a249b4ba541c69d3875f890148d08244e516a80df2c662dbd38d28094cd40b413f1aa2ea83e6f8477747c57075b57eb468a7f5c0df380c8dba6ebaf53601c9cd9434a7ba981749283233ef2c0fefccde824a7f15085b8f6253d60a90cfef7897eab5c52a67c344aa712c9e2f521e3dca47be6a15a8015ad9377ed19f07"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x108, 0x6, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xbb, 0x6, "e68f20333f12e8b90913d1dae1a05546aa582ebd415bdcb237db2af887255c50fbd6888052096be62227a4ede764232d59daac5a17bb2fc9856432e42d467ab98dd86a70845f119935fd58da7c615c61a551b996ee3ebdb706c57635667decec03f7162f9e095fd2aec164545fdd09950fc36b63ee33585a6a5f7de62cee44e955038173e10bc19ee056cad0278a34b1442f3c0540ae09841d119e07a2580ff84a3d2e11a340b3fedd8d0e0368950b6c2704d6a7e2ae51"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x138, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x2, 0x2, 0x0, 0xffff43a2}, @broadcast, @multicast2, 0xff}}]}, {0xe8, 0x6, "8048d52e4a6ba69d659bdb60fb2cbbf61be8849647667907fcdc9d6186043e5982a4a2a323be7d716f675c82aa38500440aced38e261e08ad37edc35b4d6f881bda5a4e81669ee2731476ad4dd84ba2171b1bed1646603370454370e2517e51800aadb4525eb256c1d00739dc92cc04c64df8da1a33c31df19760b2d392ed708eee0102b5495c6d1bea03b7e2767c6585bbec1e37fa9c72f5a74c3f7e4f3361bf52ef8e63fb42de0f3b7ba92d2568a53ed50046aea92b1f2e72d884660bdcfe6b01a90857e65fc656740f6b406c1194c00a7eb6f4304f01816c36b37c63e04750e7b163d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x158, 0xf, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xf4, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0xc4, 0x6, "051abda3d6286a3023f74135bae6e38ccc5e6df5ce6afe982acb64492021f5e332ded1c25d742387711fc7faf39d42b5a484cf74305100519a80177c7c5a9781341c61c4162413c6f80f33591f6b345dfd7a5136c5fdbf0ede94190f2bdecdddba70c76d899e614840d444e9f2d017351c87e8db52b19ca197cfd3dd959f4b200909d7049775347cd781101f697b8c29dd4fefec7b8dfe247966f31fde74a171091bc1a73dfbf0369c020027f26e91efb096e81b758346c7add8da3d2bf80da8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x110c, 0x1e, 0x0, 0x0, {{0xb}, {0xe0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0x6, 0x101, 0x4}}, @TCA_DEF_DATA={0xa, 0x3, '!^!.(\x00'}, @TCA_DEF_DATA={0xb, 0x3, 'clsact\x00'}, @TCA_DEF_DATA={0x2e, 0x3, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, @TCA_DEF_DATA={0xd, 0x3, '-@\xc9],*$[\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x800, 0x1, 0x3, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x4, 0x8, 0x1, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ed, 0x1, 0x3, 0x3, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x100, 0x2, 0x7, 0x5, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'clsact\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}]}}]}, 0x18e0}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 5m54.620311762s ago: executing program 0 (id=6923): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @mcast1, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000012c0)=[{0x81, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r3, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x10040810}, 0x20000004) 5m54.120667265s ago: executing program 0 (id=6924): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2, {0x2}}, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) (async, rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x3c}}, 0x400400c) (async, rerun: 64) r10 = socket(0x10, 0x3, 0x4) (rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000002900)=r11, 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x40000) 5m52.656523055s ago: executing program 0 (id=6930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="12000100000000000000000000000000000000000000000008000000269528c15f1e4d83a766d871d1dbfed6676469574ba453fdc3b5775005c8bebc12a616af92df05e9689c700e3a0ffd90e71decb448a5c1d413fd68e9a456317aeff818adb79ff8d38dfcfd579a1d7df18eb9177b5e55150a1438d41453675427d86e8b991e82bbc2955bc1bfed02157e278b82c703e7b6ce54c4a0b27f9a53491d85dbb5f3238bdaf256e8f087a400d4fe569e5db7c84e7fd704cb81458c1ea7c0c82997b167dd01c085ec649f6a5249825b8b59daaec75095aca1a7df563d6daee1d8723a75eb8fe2ba8323a52cb7baef189de0f0aa7b9432a97151b78e9c89c321d750bfd1005b8fcab210192977b967666e0043bfbe55740f96fc80792f77e828acc2720137171b3802d20860ba8bb11c0429f74589e35d94f24114a02ce2c27b6b29f1afc5d4cad06f746354362208da1ffed8789f7484e7811f637d103f2ae1b2a8755ba15b705364d92eda31a96cbdd24aba91dfb5647915791f05b037ed128c7ebc1b3ca792f7767ca0c83900dac31fff7517d72e675ab676b86ed3c9aaead6348f8c15914f870742c2e9e58dbc85fb080a998f52d3eaca29d548ae172bde35a50f490ae14f", @ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0], 0x48) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc6665000) socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebd, 0x0) close(0x4) splice(r2, 0x0, r5, 0x0, 0x8000000000025a5, 0x0) shutdown(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES16=r6, @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0x40841) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) unshare(0x20000400) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x2000}, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000004000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x64a9477fdd794c2e}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000000240)={0x0, 0x6, 0x17, &(0x7f0000000200)=""/23}) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff0600000001004500000025000000190004000400ad000200000000000006040000000000f93132", 0x37}], 0x1) socket$kcm(0x10, 0x2, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x2794, @any, 0x0, 0x2}, 0xe) 5m40.114371528s ago: executing program 32 (id=6917): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) 5m37.343722314s ago: executing program 33 (id=6930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="12000100000000000000000000000000000000000000000008000000269528c15f1e4d83a766d871d1dbfed6676469574ba453fdc3b5775005c8bebc12a616af92df05e9689c700e3a0ffd90e71decb448a5c1d413fd68e9a456317aeff818adb79ff8d38dfcfd579a1d7df18eb9177b5e55150a1438d41453675427d86e8b991e82bbc2955bc1bfed02157e278b82c703e7b6ce54c4a0b27f9a53491d85dbb5f3238bdaf256e8f087a400d4fe569e5db7c84e7fd704cb81458c1ea7c0c82997b167dd01c085ec649f6a5249825b8b59daaec75095aca1a7df563d6daee1d8723a75eb8fe2ba8323a52cb7baef189de0f0aa7b9432a97151b78e9c89c321d750bfd1005b8fcab210192977b967666e0043bfbe55740f96fc80792f77e828acc2720137171b3802d20860ba8bb11c0429f74589e35d94f24114a02ce2c27b6b29f1afc5d4cad06f746354362208da1ffed8789f7484e7811f637d103f2ae1b2a8755ba15b705364d92eda31a96cbdd24aba91dfb5647915791f05b037ed128c7ebc1b3ca792f7767ca0c83900dac31fff7517d72e675ab676b86ed3c9aaead6348f8c15914f870742c2e9e58dbc85fb080a998f52d3eaca29d548ae172bde35a50f490ae14f", @ANYRES16=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0], 0x48) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc6665000) socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebd, 0x0) close(0x4) splice(r2, 0x0, r5, 0x0, 0x8000000000025a5, 0x0) shutdown(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES16=r6, @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x4040044}, 0x40841) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) unshare(0x20000400) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x2000}, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000004000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x64a9477fdd794c2e}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000000240)={0x0, 0x6, 0x17, &(0x7f0000000200)=""/23}) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff0600000001004500000025000000190004000400ad000200000000000006040000000000f93132", 0x37}], 0x1) socket$kcm(0x10, 0x2, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x2794, @any, 0x0, 0x2}, 0xe) 7.952787898s ago: executing program 2 (id=8282): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xabe24530d817671a}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8011}, 0x24048080) 6.771124398s ago: executing program 2 (id=8289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a00001c"], 0x4a) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000300)={{@align=0x101, {0x2, 0xff, 0xfa61, 0x7}}, {{[0x7, 0x7fff, 0x6, 0x4]}, 0x0, 0x0, 0x7f, 0x0, &(0x7f0000000180)=[{{@_ha_fsid={[0x3, 0x7f]}, {0x90, 0x5, 0xeb, 0x5}}, 0x3b4d, 0x0, '&\x00'}, {{@align=0x8, {0xcdf, 0xa, 0xffffffff, 0x5}}, 0x7fffffff, 0x0, '/dev/net/tun\x00'}, {{@align=0x80, {0x6a, 0x3, 0x8f2e, 0x44}}, 0x1, 0x0, ',%#\'@\x00'}, {{@_ha_fsid={[0xc215, 0xe]}, {0x7, 0x1, 0x80000000, 0x2}}, 0xc3, 0x0, '\xfd)\x00'}, {{@_ha_fsid={[0x6, 0x40]}, {0x2, 0xaf, 0x3, 0x4}}, 0x76dc, 0x0, '\x00'}, {{@_ha_fsid={[0x0, 0x8]}, {0x6, 0x2, 0x4, 0x400}}, 0xffff, 0x0, '$]\x00'}, {{@_ha_fsid={[0x7ff, 0x3]}, {0x63e0, 0x4, 0x5, 0xfffffffffffffff7}}, 0x4, 0x0, 'syzkaller0\x00'}, {{@_ha_fsid={[0x6, 0x4]}, {0xf7, 0x8, 0xff, 0x1000}}, 0x9, 0x0, 'syzkaller0\x00'}, {{@_ha_fsid={[0x2, 0x7]}, {0x2, 0x4, 0x6, 0x2}}, 0x3ff, 0x0, '\x00'}]}}) 6.284383831s ago: executing program 5 (id=8291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000200004000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480"], 0x88}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 5.824030808s ago: executing program 5 (id=8294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 5.279801642s ago: executing program 5 (id=8298): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x8, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r6, 0x1, 0x70bd29, 0x0, {0x2d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x200000c0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20002844}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000040)={'dvmrp0\x00', @random}) 5.188152977s ago: executing program 2 (id=8299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000087632919ddbd0000000000000f20edd240f78cce36e32cac2ebf254eed5223d3bf5f5542260d8f9b1df62d438aa20541a03baffc625f86deacb57e43e53ffa0e18f4db61fdcf5778d36e3307201eb956c4e0dd8187ba86c7a346bcc83ea624f62ae4fd445c1418b5891da0d9d7bfcc8c959d9949edb494"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090200256d0000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="00004a3950b895dfd5ee000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1d, 0x2, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x8, @remote, 0xa}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r3, 0x1) listen(r3, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8001}, {0xffff, 0xffff}, {0xe, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x9, 0x8001}, {0xffe0, 0x8001}, {0x0, 0x10}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0xffffffff, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e1f, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x3391be65e04ff3fb, r5, 0x1, 0x0, 0x6, @local}, 0x14) 3.741763544s ago: executing program 4 (id=8304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00') r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x4, 0x4}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x6a, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x80, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x6a, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x80, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x50, 0x2c, 0x601, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x6}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback=r5, 0x2b, 0x1, 0x9, &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback=r5, 0x2b, 0x1, 0x9, &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000a80)=ANY=[@ANYBLOB="c0047d8c", @ANYRES16=r6, @ANYBLOB="100026bd7000fedbdf251700000040000180080003000300000008000100", @ANYRES64=r8, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="1400020070696d367265670000000000000000000800030002000000440001800800030002000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r10, @ANYRESHEX=r11, @ANYRES32=r6, @ANYBLOB="08000300010000001400020073797a5f74756e000000000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x440c0}, 0x48808) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYRESOCT=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r13, 0x1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r13, 0x1}, 0xc) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000980)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) 2.965126143s ago: executing program 6 (id=8305): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.487904035s ago: executing program 6 (id=8306): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$BTRFS_IOC_ENCODED_READ(0xffffffffffffffff, 0x80809440, &(0x7f0000002b80)={&(0x7f0000002ac0)=[{&(0x7f00000014c0)="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", 0x64a}], 0x1, 0x80, 0x0, 0x96, 0xb, 0x7, 0x8, 0x3ff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.428177979s ago: executing program 5 (id=8307): r0 = socket$netlink(0x10, 0x3, 0x8000000004) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}], 0x1, 0x41) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r5, 0x3, 0x3, "f05a64"}, 0xb) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.268305783s ago: executing program 4 (id=8308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2.200598756s ago: executing program 3 (id=8309): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x58, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, 0x50502, 0x44100}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r8, 0x0) ioctl$BTRFS_IOC_SYNC(r8, 0x9408, 0x0) setsockopt$inet_buf(r3, 0x0, 0x26, 0x0, 0x8d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2.144416537s ago: executing program 2 (id=8310): r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000b00)=""/4096, 0x1000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18d6c1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x38, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0xffffffffffffff46, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x0, 0x4, 0x0, 0x1, @icmp}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x800) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008"], 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001200)=@nat={'nat\x00', 0x19, 0x4, 0x12e, [0x200000000240, 0x0, 0x0, 0x200000000270, 0x2000000002a0], 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]}, 0x104) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x9, 0x0, &(0x7f00000000c0)) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd0, 0x1a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x15}, [@typed={0x8, 0x1bf, 0x0, 0x0, @str='\x00/,\x00'}, @nested={0xb3, 0x139, 0x0, 0x1, [@generic="226e0c514c9a987361c46d7f95e42c330ec02763f67e061a6c68508cb799ab762d725d", @generic="7fb3817cb5f6ed42703351b5d8db1771f84566948d807a100e5b1bb5026cc82ce6060c17b1bf55efbd28a9c443be5d6e1bed350de6b8c900bc25f50be0c14850126ff86241ea50d7d3ef59ae3a60bd33d2a1b482b1d82f8e8abb10fb9a30d8932675381c8b7ae650f62377cb83a6c673e76e60c4b76d83", @generic="c367999c1f", @nested={0x4, 0x159}, @nested={0x4, 0x12c}, @generic, @nested={0x4, 0x102}, @nested={0x4, 0x149}]}]}, 0xd0}}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x1e, 0x4, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000003c0)=0x1c, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000001c0)=0x200, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8304000000000000000001000000340002800c00018008000100050000000c00018008000100070000000c00018008000100030000000c000180080001000400000004000180"], 0x4c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280050001001100000014000180080700000000000000000200ac1e01010c001980080002002a"], 0x44}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) socket$pppoe(0x18, 0x1, 0x0) 1.998057958s ago: executing program 6 (id=8311): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7, 0xe, 0x401}, &(0x7f0000000040)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000040)=0x3, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r3, 0x4) close(0x3) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x8, 0x8, "1ae3c053812c383c"}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x1000}, 0x8) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x1000}, 0x8) 1.919830757s ago: executing program 3 (id=8312): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x0, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'rose0\x00', 0x7}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x4070bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x7, 0xfffa, 0x0, 0x6, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x8947, &(0x7f0000000100)={'vlan0\x00', @ifru_addrs=@isdn={0x22, 0x7, 0x6, 0x81, 0xe1}}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r10, @ANYRES16=r9], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r8}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xffffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r12}, 0xc) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="080074a6bd368c24"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.911424896s ago: executing program 5 (id=8313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffe0, 0xb}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x260}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040a0}, 0x4880) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000020000000000000000b"], 0x0, 0x5a}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) recvmsg$kcm(r4, &(0x7f0000003940)={0x0, 0x0, 0x0}, 0x4000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000000d0a010100000000000000000100000808000440000000030908010073797a3091a156df0900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000940)={"742657ba6aa9caafcad136e03acab66c", 0x0, 0x0, {0x7, 0x5}, {0x3, 0x40}, 0x9, [0x5, 0x5, 0x0, 0x1, 0x5, 0x50, 0x200, 0x3, 0xf, 0x8, 0x9, 0x7fff, 0x4, 0xc2f, 0x1, 0x1]}) 1.725850979s ago: executing program 4 (id=8314): socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x20, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYRES16, @ANYRES32=r1], 0x28}], 0x1, 0x0, 0x0, 0x20000004}, 0x0) 1.603512689s ago: executing program 6 (id=8315): r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) unshare(0x20000400) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) close(0x3) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="140000001000010000040000000000000300000a300000ffff0a010800000000010073797a31000000000900030073797a300000000004000804000000001100010000000000000000000700000a00"/88], 0x58}, 0x1, 0x0, 0x0, 0xb0}, 0x20008894) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000006c0)='cpu.idle\x00', 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESDEC=r7, @ANYRESDEC=r4], 0x5e) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x8050}, 0x20000040) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async, rerun: 64) r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10, 0x800) (rerun: 64) ioctl$sock_inet_SIOCGIFADDR(r9, 0x8915, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @multicast2}}) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xd92e12ed26de4e7b, 0x0) (rerun: 32) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r10, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000280)="d1f147bb0f53c000", 0x8}], 0x2}}], 0x1, 0x20005004) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) 1.183985779s ago: executing program 4 (id=8316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.163052421s ago: executing program 3 (id=8317): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000668120ab00001c000000020000000000000002000006040000000f000000090000000b00000043fd00000000"], 0x0, 0x36, 0x0, 0x4000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r6 = socket(0x21, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000003fc0)}, 0x62) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e2c, 0x3, 'sed\x00', 0x11, 0x10000004, 0x8}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x14, 0x30, 0xffff, 0x70bd27, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x24000881) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000000101010100000000000000000200fffd2000028006000340000300001400018008000100e00000020800020009000000000000000800020099080000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x4, 0xad, 0x95, 0xfffffffffffffff9, 0x4, 0x0, 0x9, 0x6b6, 0xc229, 0x3, 0x0, 0x2, 0xffffffffffffff48, 0x5, 0x7]}, &(0x7f0000000740)=0x100) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000be95185acf555d4500"/36], 0x24}}, 0x0) 959.73716ms ago: executing program 2 (id=8318): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x60, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) 855.454133ms ago: executing program 4 (id=8319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80480000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x160a, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) splice(r1, 0x0, r2, 0x0, 0x200000000005, 0x6) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x4, 0x5, 0x6, 0x60c05, r1, 0x2, '\x00', 0x0, r4, 0x3, 0x1, 0x7, 0x3}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=@flushpolicy={0x58, 0x1d, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@iptfs_max_qsize={0x8, 0x28, 0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2a, 0x70bd2d, 0x70bd2c, 0x70bd27, 0x9, [0x2, 0x4, 0xffffff81, 0x4, 0x5]}}, @replay_thresh={0x8, 0xb, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)="82c5bb79aec03e38bf71174552f2ab2abff00feda071b1c02c7b500776956753be5b8fdc6b7f93e2cd500bde7840fa33d5f267fbddef0c049ecdbad79682cafb00b154b3be54c13f9fc6a982dec93b33a6eab0b77f1897d3f318a415df7a1d46000000000000000000000000286c41507eef8c4bb0b09126d92e4db7d600", 0x0, 0x9, r1, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) (async) pipe(&(0x7f0000000200)) (async) close(r2) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80480000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x160a, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) splice(r1, 0x0, r2, 0x0, 0x200000000005, 0x6) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x4, 0x5, 0x6, 0x60c05, r1, 0x2, '\x00', 0x0, r4, 0x3, 0x1, 0x7, 0x3}, 0x50) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=@flushpolicy={0x58, 0x1d, 0x4, 0x70bd2c, 0x25dfdbfc, "", [@iptfs_max_qsize={0x8, 0x28, 0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2a, 0x70bd2d, 0x70bd2c, 0x70bd27, 0x9, [0x2, 0x4, 0xffffff81, 0x4, 0x5]}}, @replay_thresh={0x8, 0xb, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r5}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)="82c5bb79aec03e38bf71174552f2ab2abff00feda071b1c02c7b500776956753be5b8fdc6b7f93e2cd500bde7840fa33d5f267fbddef0c049ecdbad79682cafb00b154b3be54c13f9fc6a982dec93b33a6eab0b77f1897d3f318a415df7a1d46000000000000000000000000286c41507eef8c4bb0b09126d92e4db7d600", 0x0, 0x9, r1, 0x4}, 0x38) (async) 817.040528ms ago: executing program 3 (id=8320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 676.997145ms ago: executing program 2 (id=8321): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000180)=0x1, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24040021) socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3004c801) shutdown(r2, 0x1) recvfrom(r0, &(0x7f00000001c0)=""/231, 0xe7, 0x4000, 0x0, 0x0) 511.985327ms ago: executing program 3 (id=8322): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b7000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x150, 0x14, 0x101, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x140, 0x4e, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @fd=r0}, @typed={0x3b, 0x2001, 0x0, 0x0, @ipv6=@empty}, @nested={0x110, 0x0, 0x0, 0x1, [@nested={0x0, 0x124, 0x0, 0x1, [@generic="10677ce02d54c47846d4dbeed2d9ef07481c1796264c04f5c4691f2cda3bc415a2edf89e0e150785389369eece7273c37488e0083e7132b9e76ed390c88eb344d9eb404a03f967bdb6292d8d6bc96457d77b8c2ae8bfd533624cee3b32470a145d5768571e9695298960d595c76128c546ea511b4edaf7a9bc0c2edc33de011ce15227fc973c013ecb9bc9263e99faa751f0d3e012d6bef220cceb0e32d71cd81bb7f3dad10884d71ec98e4bc8caf5", @generic="6106d357d318ea1ea32260"]}, @generic="7ebfc2b3fe7949c9dfbe1c2dc2f6b929864b07068c601a7bcb620014cf5c2ab89252acb157ddad3b2c14eb23898e512a81c305f7a68273555928301c05632ad3da566efa35b7c16bd0c5053281e274defb43dcb60c9a4b9067f13bbf55e17756f5b1862bd4a5748b67b6b43f569217d1511cd3ddce889863dc301fcb50f4380dc007a3cbbbb51b91cde0f52beabeaf856bba0ed8ba7c13dd8766448fc01faf15b62d6cbf532d6d97307d832149c86323600e78f17b91a8e517f6757ee16d6780f5d91e9d145fa068a94dbe39b4eafdaef06d3e2750f4519bad"]}, @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x150}], 0x1, 0x0, 0x0, 0x40005}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x3, 0x5f, 0x3}) write(r0, &(0x7f0000000040)="d0dba332c663c84b5513540014407a6c2da2c32eb1ba22e0ed2060e94ebbadfb9431f9b1324bc392edf1d6bbe21afa9bfcac1989c81b6f02809132f219bc5466abfba27687b10996887318b5c469290ccec5e2768cca784baf923b0659962de235de6c8f476dec9ab9b4fe3dbb7d8152394312b31d8a3778b5c53f1470c64ae4007a7397a6e47decce89ec43ae8c1d164f12f1e489e0fe5057ab8f47987c553729a8f13ffda2ac9fa35e27cd0bf1b005e50c1a49c69790", 0xb7) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 509.961986ms ago: executing program 5 (id=8323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000100008002bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a43010000000000040016801400"/32], 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x40448d1) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000200)=@ethtool_eee={0x19, 0x101, 0x6d, 0x8001, 0x6, 0x5, 0x37f0, 0xffffffff, [0x8, 0x33]}}) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3b"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000084) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r6, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r8, r9+60000000}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r11, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) (async) r12 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r12, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 486.482909ms ago: executing program 6 (id=8324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb25210000001f000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 209.220878ms ago: executing program 6 (id=8325): r0 = socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f00000001c0)=0x4) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) unshare(0x6a020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) close(0xffffffffffffffff) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x48c71, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002100)={{r2, &(0x7f0000000140)='\\[#\x00', 0x14880, &(0x7f0000000180)={@_ha_fsid={[0x6, 0x1]}, {0x1, 0x0, 0x4, 0x9}}, 0x0, 0x0, &(0x7f0000000280)=0x100}, 0x4, &(0x7f0000001fc0)=[{0x2, 0x5, 0x0, &(0x7f0000000c40)="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", 0x27c, 0x28}, {0x2, 0x7fffffff, &(0x7f0000001dc0)='\x00', &(0x7f0000001e00), 0x0, 0x20}, {0x2, 0x2, 0x0, 0x0, 0x0, 0x30}, {0x1, 0xff, 0x0, &(0x7f0000001f80)="4e326dcad1c030e6f8a27544cb5eb85d8dd0f34ec188680c1d3387a1431a7e2eac2631ef212ff9d8eb6c0086e5891879b7ff261c", 0x34}]}) syz_genetlink_get_family_id$ipvs(&(0x7f00000021c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000000a40)=ANY=[], 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r4, 0x4}, 0x38) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route_sched_retired(r1, 0x0, 0x0) 208.577258ms ago: executing program 3 (id=8326): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000980)={&(0x7f0000000080), 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x23c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x1b0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ccc1130}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b113d1e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41a3ab06}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61201529}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f530654}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32fcab95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d14ea4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b10faf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x269ded4c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59d6f399}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75f4f903}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56b6ebdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76e8fef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x534dc785}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f338a7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5573a84f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5888ed51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x659b6112}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da93944}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cea7efe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e3d74f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b340fa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7102d5de}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x101ba787}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x880}, 0x4050) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f00000000c0)="2ae0e7102e", 0x5, 0x4c814, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000001200500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000040024000280040001001c0003800c00018008000180"], 0x50}}, 0x0) r8 = socket(0x18, 0x80000, 0x40) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r11 = accept4$alg(r8, 0x0, 0x0, 0x800) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000d40)=@o_path={&(0x7f00000002c0)='./file0\x00', r10, 0x4000, r11}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="487000001932070008000a00", @ANYRES32=r9, @ANYBLOB="31f0b9507c1040cdd893f564952183885ab686d700162db1fe9d5e4282ad3eae7c6ac485c926caa10f0152cf3da3cbcf54627855ac4dcd79c4a4938b7c4226ec4c51909d4df089624230bcd50c7bfca98c2ee0420572f7b9c81745b7e238f8bfca5ec749cc03da8ab6a64c836d50091383399e8bd5b9084be3bb3f29412fb2c9995df394039e23ca3ffb8886f0a6c62d1af130ea2771dad12d53db2e38d249c748e33105e62695acf68774bf5eb2442acf624557b025cec5992eaba95043b07715ebff9edcfc15c7487a60c12009b147f1def510b4699b4220f5621953"], 0x28}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000ac0)={{r6, &(0x7f0000000140)='[\x00', 0x10242, &(0x7f0000000180)={@align=0x7fff, {0x8, 0x7, 0x4, 0x81}}, 0xe2, &(0x7f00000001c0), &(0x7f0000000280)=0x40}, {[0x3ff, 0x0, 0x3]}, 0x8, 0xfd, &(0x7f00000009c0)=""/253}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000b40)={0x0, 0x67, "db03ace6f138e803c730f4a3fcb7b13feac81ab7e5488d30580f865fb950856c203b8f424364bbc3b4ee49c0bf246e6a3e9ad81972c64689173bc3c97907437c1c9b411130c0050ef345f885af740c94332fb07f3b86e87fa1f3a543937edf35d23e39e4193f39"}, &(0x7f0000000bc0)=0x6f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000c40)={r13, 0x3c, &(0x7f0000000c00)=[@in6={0xa, 0x4e22, 0x1000, @private2, 0xd9c8}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000c80)=0x10) 0s ago: executing program 4 (id=8327): unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000002000000000000000800122500000000ed4956bff74b80cc41a71fd192f631169dc5c539eb8886e905b671106cbbf4fe3104fac0719075e6e69d4e2b5b62a42bf97297553b3d87b552080000efbed51290f5ee70ee"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000440)={0x8000, {{0x2, 0x4e20, @multicast2}}}, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0x864a}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x13, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x6c, 0x28, 0x1, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x3, 0x8, 0x4, 0x9, 0xa902, 0x800, 0x400, 0xfffffffc, 0x8, 0x1c, 0x1c, 0xd, 0x2, 0x9, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @remote}], 0x3c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): wmediumd released netlink socket, switching to perfect channel medium [ 1405.713535][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.747517][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.748956][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.750258][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.797983][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.824729][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.835915][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.853376][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.873788][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.875393][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.916343][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.927940][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.972902][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.006193][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.053928][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.058935][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.146627][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.174722][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.178206][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.194722][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.214237][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.215197][ T4026] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 1406.259028][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.263266][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.277085][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.315217][ T4031] macvlan2: entered promiscuous mode [ 1406.315246][ T4031] macvlan2: entered allmulticast mode [ 1406.324696][ T4031] bond1: entered promiscuous mode [ 1406.324766][ T4031] bridge2: entered promiscuous mode [ 1406.328128][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.372538][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.374016][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.378855][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.408102][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.427577][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.429105][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.430207][ T4031] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1406.516144][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.519421][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.543867][ T4022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.611485][ T4031] bond1: left promiscuous mode [ 1406.611516][ T4031] bridge2: left promiscuous mode [ 1406.715118][ T4037] __nla_validate_parse: 19 callbacks suppressed [ 1406.715141][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7267'. [ 1406.785240][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1406.883220][ T4037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.903137][ T4037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.921647][ T4037] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1406.921674][ T4037] batman_adv: batadv0: Removing interface: ipvlan2 [ 1407.251055][ T4051] netlink: 'syz.6.7270': attribute type 1 has an invalid length. [ 1407.251083][ T4051] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7270'. [ 1407.251103][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7270'. [ 1407.442377][ T4057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7272'. [ 1407.783981][ T4065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7276'. [ 1407.875710][ T4065] lo speed is unknown, defaulting to 1000 [ 1407.898104][ T4065] dummy0 speed is unknown, defaulting to 1000 [ 1407.928329][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7273'. [ 1408.502219][ T4076] batman_adv: batadv0: Adding interface: gretap1 [ 1408.502242][ T4076] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.502278][ T4076] batman_adv: batadv0: Interface activated: gretap1 [ 1408.704215][T24801] IPVS: starting estimator thread 0... [ 1408.796748][ T4083] IPVS: using max 23 ests per chain, 55200 per kthread [ 1408.864946][ T4081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7278'. [ 1409.377646][ T4094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7279'. [ 1410.066391][ T4109] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1411.078354][ T4128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7290'. [ 1411.871328][ T4142] syzkaller0: entered promiscuous mode [ 1411.871354][ T4142] syzkaller0: entered allmulticast mode [ 1412.111889][ T4154] x_tables: duplicate underflow at hook 1 [ 1412.376958][ T4172] __nla_validate_parse: 1 callbacks suppressed [ 1412.376983][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7297'. [ 1412.535186][ T4174] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7298'. [ 1412.556322][ T4175] syzkaller0: entered promiscuous mode [ 1412.556496][ T4175] syzkaller0: entered allmulticast mode [ 1412.735548][ T4175] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1412.761183][ T4175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7297'. [ 1412.844005][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1413.839748][ T4205] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1415.128051][ T4165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1415.773668][ T4219] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1415.799274][ T4223] netlink: 'syz.6.7314': attribute type 10 has an invalid length. [ 1415.898046][ T4223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1415.942580][ T4226] netlink: 14207 bytes leftover after parsing attributes in process `syz.6.7314'. [ 1415.964572][ T4223] team0: Port device netdevsim1 added [ 1416.526171][ T4240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7319'. [ 1416.640167][ T4244] netlink: 'syz.5.7321': attribute type 2 has an invalid length. [ 1416.914845][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7324'. [ 1417.014239][ T4258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7323'. [ 1417.014279][ T4258] netlink: 'syz.4.7323': attribute type 10 has an invalid length. [ 1417.014298][ T4258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7323'. [ 1417.129701][ T4258] geneve4: entered promiscuous mode [ 1417.129726][ T4258] geneve4: entered allmulticast mode [ 1417.944757][ T4287] ip_tables: iptables: counters copy to user failed while replacing table [ 1418.517385][ T4300] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7337'. [ 1418.815108][ T4305] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7339'. [ 1418.966702][ T4311] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3040 [ 1419.127362][ T4327] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7342'. [ 1419.868831][ T4343] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1420.069518][ T4342] lo speed is unknown, defaulting to 1000 [ 1420.079210][ T4346] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1420.079239][ T4346] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1420.198807][ T4342] dummy0 speed is unknown, defaulting to 1000 [ 1420.722120][T21630] IPVS: starting estimator thread 0... [ 1420.736659][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7348'. [ 1420.814951][ T4366] IPVS: using max 24 ests per chain, 57600 per kthread [ 1421.374446][ T4376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1421.567735][ T4376] tipc: Started in network mode [ 1421.567777][ T4376] tipc: Node identity dea80d6877d7, cluster identity 4711 [ 1421.568147][ T4376] tipc: Enabled bearer , priority 0 [ 1421.653938][ T4376] syzkaller0: entered promiscuous mode [ 1421.654145][ T4376] syzkaller0: entered allmulticast mode [ 1421.748578][ T4376] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1421.856079][ T4375] tipc: Resetting bearer [ 1421.935243][ T4375] tipc: Disabling bearer [ 1422.469384][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7357'. [ 1422.469419][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7357'. [ 1422.469501][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7357'. [ 1422.630852][ T4403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7359'. [ 1423.636915][ T4429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1423.637507][ T4428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1423.925779][ T4433] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1424.003011][ T4436] sctp: [Deprecated]: syz.5.7370 (pid 4436) Use of int in maxseg socket option. [ 1424.003011][ T4436] Use struct sctp_assoc_value instead [ 1424.150623][ T4433] tipc: Enabled bearer , priority 0 [ 1424.151825][ T4433] syzkaller0: entered promiscuous mode [ 1424.152037][ T4433] syzkaller0: entered allmulticast mode [ 1424.172603][ T4433] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1424.248468][ T4444] netlink: 'syz.6.7373': attribute type 25 has an invalid length. [ 1424.248496][ T4444] netlink: 'syz.6.7373': attribute type 3 has an invalid length. [ 1424.248512][ T4444] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7373'. [ 1424.286677][ T4446] sctp: [Deprecated]: syz.4.7371 (pid 4446) Use of int in maxseg socket option. [ 1424.286677][ T4446] Use struct sctp_assoc_value instead [ 1424.322588][ T4444] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 1424.409813][ T4432] tipc: Resetting bearer [ 1424.575977][ T4432] tipc: Disabling bearer [ 1426.316550][ T4499] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1426.351929][ T4499] tipc: Enabled bearer , priority 0 [ 1426.352776][ T4499] syzkaller0: entered promiscuous mode [ 1426.352797][ T4499] syzkaller0: entered allmulticast mode [ 1426.359081][ T4499] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1427.064580][ T4498] tipc: Resetting bearer [ 1427.406321][ T4498] tipc: Disabling bearer [ 1427.649017][ T4511] ip6t_srh: unknown srh match flags 4000 [ 1427.713361][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7392'. [ 1427.713388][ T4522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7392'. [ 1427.713584][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7392'. [ 1427.713602][ T4522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7392'. [ 1427.867412][ T4521] bridge0: port 3(bond0) entered blocking state [ 1427.867509][ T4521] bridge0: port 3(bond0) entered disabled state [ 1427.867698][ T4521] bond0: entered allmulticast mode [ 1427.867716][ T4521] bond_slave_0: entered allmulticast mode [ 1427.921839][ T4521] bond_slave_1: entered allmulticast mode [ 1427.929877][ T4521] bond0: entered promiscuous mode [ 1427.929900][ T4521] bond_slave_0: entered promiscuous mode [ 1427.930091][ T4521] bond_slave_1: entered promiscuous mode [ 1428.136661][ T4529] netlink: 'syz.5.7394': attribute type 1 has an invalid length. [ 1428.191616][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7394'. [ 1428.191658][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7394'. [ 1428.384276][ T4529] bond1: entered promiscuous mode [ 1428.385839][ T4529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1428.716944][ T4536] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7395'. [ 1428.855180][ T4539] netlink: 'syz.3.7397': attribute type 1 has an invalid length. [ 1428.910333][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7397'. [ 1429.069887][ T4546] netlink: 'syz.3.7397': attribute type 10 has an invalid length. [ 1429.069913][ T4546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7397'. [ 1429.186700][ T4549] netlink: 'syz.3.7397': attribute type 1 has an invalid length. [ 1429.222104][ T4551] netlink: 'syz.3.7397': attribute type 10 has an invalid length. [ 1429.222129][ T4551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7397'. [ 1429.282710][ T4539] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1429.297772][ T4535] netlink: 'syz.2.7396': attribute type 15 has an invalid length. [ 1429.347739][ T4535] netlink: 'syz.2.7396': attribute type 1 has an invalid length. [ 1429.819849][ T4569] netlink: 'syz.5.7402': attribute type 1 has an invalid length. [ 1429.834327][ T4570] netlink: 'syz.5.7402': attribute type 1 has an invalid length. [ 1429.935107][ T4569] bond2: entered promiscuous mode [ 1429.935647][ T4569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1429.986380][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7403'. [ 1430.059219][ T4569] ipvlan2: entered allmulticast mode [ 1430.059244][ T4569] bond2: entered allmulticast mode [ 1430.187858][ T4570] ipvlan3: entered allmulticast mode [ 1430.289541][ T4572] ipvlan4: entered allmulticast mode [ 1430.373908][ T4579] ipvlan5: entered allmulticast mode [ 1430.547221][ T4569] bond2: (slave bridge3): making interface the new active one [ 1430.547251][ T4569] bridge3: entered promiscuous mode [ 1430.547500][ T4569] bridge3: entered allmulticast mode [ 1430.606922][ T4569] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1430.669306][ T4599] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7405'. [ 1430.986917][ T4603] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7407'. [ 1431.383277][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7412'. [ 1431.529487][ T4617] netlink: zone id is out of range [ 1431.529508][ T4617] netlink: zone id is out of range [ 1431.529518][ T4617] netlink: zone id is out of range [ 1431.529528][ T4617] netlink: zone id is out of range [ 1431.529538][ T4617] netlink: zone id is out of range [ 1431.529548][ T4617] netlink: zone id is out of range [ 1431.529561][ T4617] netlink: zone id is out of range [ 1431.529570][ T4617] netlink: zone id is out of range [ 1431.529581][ T4617] netlink: zone id is out of range [ 1431.529590][ T4617] netlink: zone id is out of range [ 1431.966317][ T4627] FAULT_INJECTION: forcing a failure. [ 1431.966317][ T4627] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.966353][ T4627] CPU: 0 UID: 0 PID: 4627 Comm: syz.3.7417 Not tainted syzkaller #0 PREEMPT(full) [ 1431.966387][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1431.966401][ T4627] Call Trace: [ 1431.966412][ T4627] [ 1431.966422][ T4627] dump_stack_lvl+0xe8/0x150 [ 1431.966466][ T4627] should_fail_ex+0x410/0x560 [ 1431.966501][ T4627] should_failslab+0xa8/0x100 [ 1431.966535][ T4627] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1431.966564][ T4627] ? __get_vm_area_node+0x155/0x2f0 [ 1431.966597][ T4627] ? __get_vm_area_node+0x155/0x2f0 [ 1431.966637][ T4627] __get_vm_area_node+0x155/0x2f0 [ 1431.966678][ T4627] __vmalloc_node_range_noprof+0x343/0x1540 [ 1431.966715][ T4627] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1431.966745][ T4627] ? __lock_acquire+0x747/0x2de0 [ 1431.966800][ T4627] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1431.966847][ T4627] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1431.966873][ T4627] __vmalloc_noprof+0xd2/0x120 [ 1431.966913][ T4627] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1431.966944][ T4627] bpf_prog_alloc_no_stats+0x47/0x560 [ 1431.966972][ T4627] ? bpf_prog_alloc+0x2a/0x1a0 [ 1431.967001][ T4627] bpf_prog_alloc+0x3c/0x1a0 [ 1431.967031][ T4627] bpf_prog_load+0x7f8/0x1c20 [ 1431.967071][ T4627] ? __pfx_bpf_prog_load+0x10/0x10 [ 1431.967124][ T4627] __sys_bpf+0xd0d/0xd90 [ 1431.967159][ T4627] ? __pfx___sys_bpf+0x10/0x10 [ 1431.967199][ T4627] ? __fget_files+0x2a/0x420 [ 1431.967252][ T4627] ? ksys_write+0x242/0x270 [ 1431.967291][ T4627] ? __pfx_ksys_write+0x10/0x10 [ 1431.967332][ T4627] __x64_sys_bpf+0xba/0xd0 [ 1431.967364][ T4627] do_syscall_64+0x166/0x520 [ 1431.967395][ T4627] ? trace_irq_disable+0x3b/0x140 [ 1431.967418][ T4627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.967443][ T4627] ? clear_bhb_loop+0x70/0xc0 [ 1431.967471][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.967495][ T4627] RIP: 0033:0x7f63b259e159 [ 1431.967515][ T4627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.967535][ T4627] RSP: 002b:00007f63b33b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1431.967560][ T4627] RAX: ffffffffffffffda RBX: 00007f63b2825fa0 RCX: 00007f63b259e159 [ 1431.967578][ T4627] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1431.967593][ T4627] RBP: 00007f63b33b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.967608][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.967622][ T4627] R13: 00007f63b2826038 R14: 00007f63b2825fa0 R15: 00007ffed1069f18 [ 1431.967658][ T4627] [ 1431.978551][ T4627] syz.3.7417: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1431.978813][ T4627] CPU: 0 UID: 0 PID: 4627 Comm: syz.3.7417 Not tainted syzkaller #0 PREEMPT(full) [ 1431.978870][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1431.978905][ T4627] Call Trace: [ 1431.978933][ T4627] [ 1431.978955][ T4627] dump_stack_lvl+0xe8/0x150 [ 1431.979049][ T4627] warn_alloc+0x24d/0x270 [ 1431.979113][ T4627] ? __kasan_kmalloc+0x22/0xb0 [ 1431.979197][ T4627] ? __pfx_warn_alloc+0x10/0x10 [ 1431.979250][ T4627] ? __get_vm_area_node+0x155/0x2f0 [ 1431.979355][ T4627] ? __get_vm_area_node+0x2a9/0x2f0 [ 1431.979460][ T4627] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1431.979551][ T4627] ? __lock_acquire+0x747/0x2de0 [ 1431.979677][ T4627] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1431.979785][ T4627] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1431.979847][ T4627] __vmalloc_noprof+0xd2/0x120 [ 1431.979930][ T4627] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 1431.980003][ T4627] bpf_prog_alloc_no_stats+0x47/0x560 [ 1431.980067][ T4627] ? bpf_prog_alloc+0x2a/0x1a0 [ 1431.980163][ T4627] bpf_prog_alloc+0x3c/0x1a0 [ 1431.980236][ T4627] bpf_prog_load+0x7f8/0x1c20 [ 1431.980339][ T4627] ? __pfx_bpf_prog_load+0x10/0x10 [ 1431.980484][ T4627] __sys_bpf+0xd0d/0xd90 [ 1431.980567][ T4627] ? __pfx___sys_bpf+0x10/0x10 [ 1431.980662][ T4627] ? __fget_files+0x2a/0x420 [ 1431.980830][ T4627] ? ksys_write+0x242/0x270 [ 1431.980927][ T4627] ? __pfx_ksys_write+0x10/0x10 [ 1431.981053][ T4627] __x64_sys_bpf+0xba/0xd0 [ 1431.981125][ T4627] do_syscall_64+0x166/0x520 [ 1431.981198][ T4627] ? trace_irq_disable+0x3b/0x140 [ 1431.981260][ T4627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.981321][ T4627] ? clear_bhb_loop+0x70/0xc0 [ 1431.981394][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.981456][ T4627] RIP: 0033:0x7f63b259e159 [ 1431.981516][ T4627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.981574][ T4627] RSP: 002b:00007f63b33b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1431.981635][ T4627] RAX: ffffffffffffffda RBX: 00007f63b2825fa0 RCX: 00007f63b259e159 [ 1431.981678][ T4627] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1431.981719][ T4627] RBP: 00007f63b33b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.981766][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.981799][ T4627] R13: 00007f63b2826038 R14: 00007f63b2825fa0 R15: 00007ffed1069f18 [ 1431.981888][ T4627] [ 1431.993995][ T4627] Mem-Info: [ 1431.994012][ T4627] active_anon:10611 inactive_anon:0 isolated_anon:0 [ 1431.994012][ T4627] active_file:17 inactive_file:44177 isolated_file:0 [ 1431.994012][ T4627] unevictable:0 dirty:161 writeback:0 [ 1431.994012][ T4627] slab_reclaimable:13996 slab_unreclaimable:149959 [ 1431.994012][ T4627] mapped:32249 shmem:2732 pagetables:3352 [ 1431.994012][ T4627] sec_pagetables:0 bounce:0 [ 1431.994012][ T4627] kernel_misc_reclaimable:0 [ 1431.994012][ T4627] free:1179772 free_pcp:8553 free_cma:0 [ 1431.994071][ T4627] Node 0 active_anon:42444kB inactive_anon:0kB active_file:68kB inactive_file:176508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128996kB dirty:644kB writeback:0kB shmem:10928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19540kB pagetables:13236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1431.994130][ T4627] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1431.994184][ T4627] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.994242][ T4627] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1431.994281][ T4627] Node 0 DMA32 free:763412kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42444kB inactive_anon:0kB active_file:68kB inactive_file:176508kB unevictable:0kB writepending:644kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:34212kB local_pcp:20300kB free_cma:0kB [ 1431.994345][ T4627] lowmem_reserve[]: 0 0 0 0 0 [ 1431.994390][ T4627] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.994449][ T4627] lowmem_reserve[]: 0 0 0 0 0 [ 1431.994485][ T4627] Node 1 Normal free:3940316kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.994571][ T4627] lowmem_reserve[]: 0 0 0 0 0 [ 1431.994696][ T4627] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1431.995031][ T4627] Node 0 DMA32: 106*4kB (UE) 1090*8kB (UM) 538*16kB (UM) 590*32kB (UM) 121*64kB (UME) 27*128kB (UME) 137*256kB (UM) 197*512kB (UM) 92*1024kB (UME) 11*2048kB (UME) 113*4096kB (UM) = 763352kB [ 1432.003837][ T4627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1432.004113][ T4627] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 8*16kB (UM) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3940316kB [ 1432.004604][ T4627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1432.004648][ T4627] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1432.004699][ T4627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1432.004741][ T4627] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1432.004782][ T4627] 46922 total pagecache pages [ 1432.004792][ T4627] 0 pages in swap cache [ 1432.004800][ T4627] Free swap = 124996kB [ 1432.004809][ T4627] Total swap = 124996kB [ 1432.004818][ T4627] 2097051 pages RAM [ 1432.004826][ T4627] 0 pages HighMem/MovableOnly [ 1432.004834][ T4627] 428700 pages reserved [ 1432.004842][ T4627] 0 pages cma reserved [ 1432.818099][ T4631] tipc: Enabling of bearer rejected, media not registered [ 1433.415266][ T4650] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1433.432839][ T4650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1433.587300][ T4645] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7408'. [ 1433.587327][ T4645] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7408'. [ 1433.849853][ T4664] __nla_validate_parse: 2 callbacks suppressed [ 1433.849878][ T4664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7426'. [ 1434.654828][ T4685] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1434.739451][ T4684] xt_LOG: level 115 >= 8 [ 1434.870176][ T4690] veth0: entered promiscuous mode [ 1435.223497][ T4697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7438'. [ 1435.407034][ T4682] veth0: left promiscuous mode [ 1435.603426][ T4701] syzkaller0: entered promiscuous mode [ 1435.603454][ T4701] syzkaller0: entered allmulticast mode [ 1435.730070][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1435.734177][ T4712] netlink: 'syz.4.7442': attribute type 2 has an invalid length. [ 1435.734240][ T4712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7442'. [ 1435.770916][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1435.799827][ T4711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1435.924427][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1435.925901][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1435.926173][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1435.926411][ T4714] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7440'. [ 1435.968893][ T4717] bridge_slave_0: left allmulticast mode [ 1435.969863][ T4717] bridge_slave_0: left promiscuous mode [ 1435.972011][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.050560][ T4717] bridge_slave_1: left allmulticast mode [ 1436.050591][ T4717] bridge_slave_1: left promiscuous mode [ 1436.050826][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.198526][ T4717] bond0: (slave bond_slave_0): Releasing backup interface [ 1436.226093][ T4717] bond0: (slave bond_slave_1): Releasing backup interface [ 1436.333365][ T4717] team0: Port device team_slave_0 removed [ 1436.358608][ T4717] team0: Port device team_slave_1 removed [ 1436.515065][ T4733] netlink: 'syz.5.7445': attribute type 12 has an invalid length. [ 1436.990058][ T4739] net_ratelimit: 3 callbacks suppressed [ 1436.990082][ T4739] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1437.147124][ T4739] tipc: Started in network mode [ 1437.147160][ T4739] tipc: Node identity 56b360c4de83, cluster identity 4711 [ 1437.147462][ T4739] tipc: Enabled bearer , priority 0 [ 1437.148195][ T4739] syzkaller0: entered promiscuous mode [ 1437.148217][ T4739] syzkaller0: entered allmulticast mode [ 1437.200710][ T4739] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1437.365492][ T4737] tipc: Resetting bearer [ 1437.465068][ T4737] tipc: Disabling bearer [ 1438.192710][ T4776] xt_LOG: prefix is not null-terminated [ 1439.209958][ T4800] __nla_validate_parse: 29 callbacks suppressed [ 1439.209982][ T4800] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7461'. [ 1439.210012][ T4800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7461'. [ 1439.248771][ T4800] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7461'. [ 1439.390795][ T4809] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1439.469692][ T4809] tipc: Enabled bearer , priority 0 [ 1439.481636][ T4809] syzkaller0: entered promiscuous mode [ 1439.481663][ T4809] syzkaller0: entered allmulticast mode [ 1439.487748][ T4809] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1439.909864][ T4807] tipc: Resetting bearer [ 1439.986386][ T4807] tipc: Disabling bearer [ 1440.279489][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1440.280106][ T4828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1440.280134][ T4828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1440.283590][ T4827] netlink: 'syz.2.7472': attribute type 1 has an invalid length. [ 1440.369912][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7470'. [ 1440.471148][ T4834] netlink: zone id is out of range [ 1440.471165][ T4834] netlink: zone id is out of range [ 1440.471175][ T4834] netlink: zone id is out of range [ 1440.471183][ T4834] netlink: zone id is out of range [ 1440.471192][ T4834] netlink: zone id is out of range [ 1440.471200][ T4834] netlink: zone id is out of range [ 1440.471213][ T4834] netlink: zone id is out of range [ 1440.471222][ T4834] netlink: zone id is out of range [ 1440.527668][ T4827] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1440.928723][ T4851] netlink: 'syz.4.7476': attribute type 1 has an invalid length. [ 1440.945913][ T4852] netlink: 'syz.4.7476': attribute type 1 has an invalid length. [ 1441.113787][ T4860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7480'. [ 1441.113816][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7480'. [ 1441.170213][ T4862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7480'. [ 1441.414785][ T4851] bond4: entered promiscuous mode [ 1441.416016][ T4851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1441.602915][ T4856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1441.604143][ T4856] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 1441.604167][ T4856] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1441.631168][ T4856] bond4: (slave gre2): making interface the new active one [ 1441.631195][ T4856] gre2: entered promiscuous mode [ 1441.658868][ T4856] bond4: (slave gre2): Enslaving as an active interface with an up link [ 1441.954707][T27712] Bluetooth: hci6: Malformed Event: 0x02 [ 1442.102676][ T4874] net_ratelimit: 434 callbacks suppressed [ 1442.102701][ T4874] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1442.476581][ T4874] tipc: Enabled bearer , priority 0 [ 1442.476896][ T4880] syzkaller0: entered promiscuous mode [ 1442.476918][ T4880] syzkaller0: entered allmulticast mode [ 1442.504678][ T4883] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1442.745373][ T4871] tipc: Resetting bearer [ 1443.049373][ T4871] tipc: Disabling bearer [ 1443.166319][ T4904] netlink: 'syz.3.7490': attribute type 1 has an invalid length. [ 1443.437162][ T4901] vlan2: entered allmulticast mode [ 1443.437188][ T4901] bridge5: entered allmulticast mode [ 1443.528337][ T4912] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1443.544219][ T4904] bridge5: port 1(erspan0) entered blocking state [ 1443.544365][ T4904] bridge5: port 1(erspan0) entered disabled state [ 1443.544564][ T4904] erspan0: entered allmulticast mode [ 1443.605070][ T4904] erspan0: entered promiscuous mode [ 1444.404639][ T4887] __nla_validate_parse: 2 callbacks suppressed [ 1444.404665][ T4887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7486'. [ 1444.454119][ T4921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7493'. [ 1444.468492][ T4912] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1444.514860][ T4902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7486'. [ 1444.514889][ T4902] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7486'. [ 1445.877554][ T4958] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1446.113597][ T4959] syzkaller0: entered promiscuous mode [ 1446.113622][ T4959] syzkaller0: entered allmulticast mode [ 1446.174208][ T4959] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1446.404775][ T4968] FAULT_INJECTION: forcing a failure. [ 1446.404775][ T4968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.404812][ T4968] CPU: 0 UID: 0 PID: 4968 Comm: syz.3.7506 Not tainted syzkaller #0 PREEMPT(full) [ 1446.404839][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1446.404854][ T4968] Call Trace: [ 1446.404863][ T4968] [ 1446.404874][ T4968] dump_stack_lvl+0xe8/0x150 [ 1446.404913][ T4968] should_fail_ex+0x410/0x560 [ 1446.404946][ T4968] strncpy_from_user+0x36/0x2c0 [ 1446.405064][ T4968] bpf_prog_load+0xdef/0x1c20 [ 1446.405107][ T4968] ? __pfx_bpf_prog_load+0x10/0x10 [ 1446.405175][ T4968] __sys_bpf+0xd0d/0xd90 [ 1446.405211][ T4968] ? __pfx___sys_bpf+0x10/0x10 [ 1446.405252][ T4968] ? __fget_files+0x2a/0x420 [ 1446.405308][ T4968] ? ksys_write+0x242/0x270 [ 1446.405347][ T4968] ? __pfx_ksys_write+0x10/0x10 [ 1446.405389][ T4968] __x64_sys_bpf+0xba/0xd0 [ 1446.405417][ T4968] do_syscall_64+0x166/0x520 [ 1446.405448][ T4968] ? trace_irq_disable+0x3b/0x140 [ 1446.405473][ T4968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.405498][ T4968] ? clear_bhb_loop+0x70/0xc0 [ 1446.405527][ T4968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.405551][ T4968] RIP: 0033:0x7f63b259e159 [ 1446.405573][ T4968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.405592][ T4968] RSP: 002b:00007f63b33b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1446.405616][ T4968] RAX: ffffffffffffffda RBX: 00007f63b2825fa0 RCX: 00007f63b259e159 [ 1446.405633][ T4968] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1446.405649][ T4968] RBP: 00007f63b33b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.405664][ T4968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.405679][ T4968] R13: 00007f63b2826038 R14: 00007f63b2825fa0 R15: 00007ffed1069f18 [ 1446.405717][ T4968] [ 1446.947163][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7507'. [ 1447.370572][ T4985] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1447.727421][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7509'. [ 1447.997372][ T4934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1448.469489][ T4999] netlink: 'syz.6.7512': attribute type 11 has an invalid length. [ 1448.749419][ T5009] macsec2: entered promiscuous mode [ 1449.272107][ T5019] netlink: 'syz.6.7520': attribute type 1 has an invalid length. [ 1449.291847][ T5013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7519'. [ 1449.415016][ T5029] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1449.652532][ T5032] syzkaller0: entered promiscuous mode [ 1449.652559][ T5032] syzkaller0: entered allmulticast mode [ 1449.684231][ T5032] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1450.628472][ T3941] udevd[3941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1450.689887][ T3941] udevd[3941]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1451.212263][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7527'. [ 1451.613353][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7533'. [ 1451.715674][ T5070] vlan0: entered promiscuous mode [ 1451.732059][ T5070] sctp: [Deprecated]: syz.6.7534 (pid 5070) Use of int in maxseg socket option. [ 1451.732059][ T5070] Use struct sctp_assoc_value instead [ 1451.733007][ T5067] syzkaller0: entered promiscuous mode [ 1451.733207][ T5067] syzkaller0: entered allmulticast mode [ 1451.815584][ T5075] macsec3: entered promiscuous mode [ 1452.104079][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1452.459954][ T5099] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1452.650115][ T5099] tipc: Enabled bearer , priority 0 [ 1452.690962][ T5099] syzkaller0: entered promiscuous mode [ 1452.690990][ T5099] syzkaller0: entered allmulticast mode [ 1452.713145][ T5099] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1452.904039][ T5107] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1452.908573][ T5098] tipc: Resetting bearer [ 1453.101298][ T5098] tipc: Disabling bearer [ 1453.440575][ T5119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7545'. [ 1453.450968][ T5114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7543'. [ 1453.795931][ T5130] Unsupported ieee802154 address type: 0 [ 1453.801106][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1454.893369][ T5154] syzkaller0: entered promiscuous mode [ 1454.893396][ T5154] syzkaller0: entered allmulticast mode [ 1455.194989][ T5160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1455.421776][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7557'. [ 1456.198263][ T5167] tipc: Enabled bearer , priority 0 [ 1456.231135][ T5171] syzkaller0: entered promiscuous mode [ 1456.231165][ T5171] syzkaller0: entered allmulticast mode [ 1456.503583][ T5171] tipc: Resetting bearer [ 1456.704895][ T5171] tipc: Disabling bearer [ 1456.826050][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7560'. [ 1457.346252][ T5207] x_tables: duplicate underflow at hook 1 [ 1458.371066][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7570'. [ 1458.371096][ T5227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7570'. [ 1458.514635][ T5227] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7570'. [ 1458.869733][ T5235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7572'. [ 1458.931628][ T5238] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1459.064192][ T5238] tipc: Enabled bearer , priority 0 [ 1459.069063][ T5238] syzkaller0: entered promiscuous mode [ 1459.069272][ T5238] syzkaller0: entered allmulticast mode [ 1459.129506][ T5238] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1459.362414][ T5236] tipc: Resetting bearer [ 1459.556584][ T5236] tipc: Disabling bearer [ 1460.116755][ T5262] tipc: New replicast peer: 255.255.255.255 [ 1460.117956][ T5262] tipc: Enabled bearer , priority 26 [ 1460.706387][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1461.123158][ T5294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1461.219747][ T5294] tipc: Enabled bearer , priority 0 [ 1461.225806][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7587'. [ 1461.236532][ T5294] syzkaller0: entered promiscuous mode [ 1461.236558][ T5294] syzkaller0: entered allmulticast mode [ 1461.263571][ T5294] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1461.299491][ T5296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7589'. [ 1461.463711][ T5296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1461.550069][ T5292] tipc: Resetting bearer [ 1461.652448][ T5292] tipc: Disabling bearer [ 1462.052844][ T5319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1462.433238][ T5321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7595'. [ 1462.433305][ T5321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7595'. [ 1462.488458][ T5314] lo speed is unknown, defaulting to 1000 [ 1462.621745][ T5314] dummy0 speed is unknown, defaulting to 1000 [ 1462.628531][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7596'. [ 1462.628560][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7596'. [ 1462.628591][ T5327] netlink: 'syz.5.7596': attribute type 6 has an invalid length. [ 1462.628609][ T5327] netlink: 'syz.5.7596': attribute type 5 has an invalid length. [ 1462.802463][T24802] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.803661][T24802] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.803713][T24802] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.803758][T24802] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.207581][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7598'. [ 1463.443235][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1463.769977][ T5349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7603'. [ 1464.109366][ T5364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1464.367620][ T5364] tipc: Enabled bearer , priority 0 [ 1464.368245][ T5368] syzkaller0: entered promiscuous mode [ 1464.368295][ T5368] syzkaller0: entered allmulticast mode [ 1464.398116][ T5373] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1464.564030][ T5361] tipc: Resetting bearer [ 1464.829633][ T5361] tipc: Disabling bearer [ 1465.050600][ T5383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7610'. [ 1465.072131][ T5383] 8021q: VLANs not supported on ip6gre0 [ 1465.089718][ T5382] syzkaller1: entered promiscuous mode [ 1465.089924][ T5382] syzkaller1: entered allmulticast mode [ 1465.883384][ T5414] syzkaller0: entered promiscuous mode [ 1465.883410][ T5414] syzkaller0: entered allmulticast mode [ 1465.951615][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7617'. [ 1465.951842][ T5414] netlink: 'syz.3.7617': attribute type 1 has an invalid length. [ 1465.951861][ T5414] netlink: 'syz.3.7617': attribute type 2 has an invalid length. [ 1466.116678][ T5407] 0: reclassify loop, rule prio 0, protocol 800 [ 1466.294297][ T5418] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1466.349684][ T8448] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1466.470143][ T5426] syzkaller0: entered promiscuous mode [ 1466.470171][ T5426] syzkaller0: entered allmulticast mode [ 1466.511908][ T5426] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1469.239567][ T5422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1469.744229][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7631'. [ 1469.744296][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7631'. [ 1469.866059][ T5468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7632'. [ 1469.986286][ T5476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7632'. [ 1470.372621][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7635'. [ 1470.801688][ T5492] tipc: Enabled bearer , priority 0 [ 1471.153066][ T5491] syzkaller0: entered promiscuous mode [ 1471.153097][ T5491] syzkaller0: entered allmulticast mode [ 1471.157091][ T5491] tipc: Resetting bearer [ 1471.256032][ T5488] tipc: Resetting bearer [ 1472.178241][ T5515] netlink: 'syz.6.7643': attribute type 11 has an invalid length. [ 1477.714016][ T5488] tipc: Disabling bearer [ 1477.727754][ T5496] netlink: 'syz.2.7639': attribute type 26 has an invalid length. [ 1478.071799][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7649'. [ 1478.077537][ T5540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7649'. [ 1479.533376][ T5563] netlink: 'syz.2.7656': attribute type 9 has an invalid length. [ 1480.135465][ T31] audit: type=1107 audit(1790054814.818:18): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='oêqþÉÁ½­ƒå„»½E-¨•„G¬=ãÝÜX,6ôkúÌõ&ã [ 1480.135465][ T31] `èY)F!¥‡bâOoo-ØPì_ýT4ÂYO/=»#N†ÀNÎ%–×IŸ^ÄØ.빡Ü4åÙRaO” {L5äVw§§Íž±u8EüÔ”NF^¼¢€aaËÌÅöŸ¿Ÿ' [ 1480.373830][ T5580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7661'. [ 1480.373942][ T5580] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1481.552262][ T5600] lo speed is unknown, defaulting to 1000 [ 1481.587479][ T5600] dummy0 speed is unknown, defaulting to 1000 [ 1481.727233][ T5612] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7664'. [ 1482.424084][ T5620] nbd: socks must be embedded in a SOCK_ITEM attr [ 1482.959366][ T5638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7671'. [ 1483.066172][ T5641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1483.116205][ T5620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1483.278725][ T5602] geneve1: entered promiscuous mode [ 1483.316185][ T5602] IPVS: rr: UDP [::1]:8080 - no destination available [ 1483.369766][ T5602] netlink: 'syz.5.7663': attribute type 15 has an invalid length. [ 1483.369792][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7663'. [ 1483.459355][ T5649] netlink: 'syz.4.7675': attribute type 10 has an invalid length. [ 1483.513090][ T5650] netlink: 'syz.4.7675': attribute type 10 has an invalid length. [ 1483.587668][ T5649] bond2: (slave dummy0): Releasing active interface [ 1483.771863][ T5649] team0: Port device dummy0 added [ 1484.168967][ T5650] team0: Port device dummy0 removed [ 1484.939508][ T5685] bond0: (slave gtp2): The slave device specified does not support setting the MAC address [ 1484.971678][ T5685] bond0: (slave gtp2): Error -95 calling set_mac_address [ 1485.127532][ T5676] bridge_slave_0: default FDB implementation only supports local addresses [ 1485.130203][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7680'. [ 1485.597886][ T5703] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 1485.650025][ T5714] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved [ 1485.727303][ T5718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7685'. [ 1485.727469][ T5718] gre0: entered promiscuous mode [ 1485.809690][ T5718] syzkaller1: entered promiscuous mode [ 1485.809716][ T5718] syzkaller1: entered allmulticast mode [ 1486.570751][ T5761] netlink: 'syz.6.7692': attribute type 1 has an invalid length. [ 1486.776403][ T5761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1486.853403][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7692'. [ 1487.035327][ T5759] bond3: (slave veth0_to_bond): making interface the new active one [ 1487.052411][ T5759] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1487.252895][ T5761] macvlan2: entered promiscuous mode [ 1487.252922][ T5761] macvlan2: entered allmulticast mode [ 1487.758449][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7700'. [ 1488.215093][ T5808] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1488.266134][ T5808] tipc: Enabled bearer , priority 0 [ 1488.269419][ T5808] syzkaller0: entered promiscuous mode [ 1488.269442][ T5808] syzkaller0: entered allmulticast mode [ 1488.333848][ T5807] tipc: Resetting bearer [ 1488.493939][ T5807] tipc: Disabling bearer [ 1488.630611][ T5812] lo: MTU too low for tipc bearer [ 1488.630655][ T5812] tipc: Enabling of bearer rejected, failed to enable media [ 1488.975288][ T5817] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7704'. [ 1488.991962][ T5817] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7704'. [ 1488.997639][ T5817] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7704'. [ 1489.831818][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7708'. [ 1490.506551][ T5861] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7717'. [ 1490.506856][ T5861] 0·: renamed from hsr0 [ 1490.541695][ T8448] nci: nci_rx_work: unknown MT 0x6 [ 1490.958896][ T5861] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1490.958926][ T5861] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1490.982284][ T5861] 0·: entered allmulticast mode [ 1490.982312][ T5861] hsr_slave_0: entered allmulticast mode [ 1490.982689][ T5861] hsr_slave_1: entered allmulticast mode [ 1491.023157][ T5861] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1491.026274][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7718'. [ 1491.540796][ T5887] ip_tables: iptables: counters copy to user failed while replacing table [ 1491.636717][ T5888] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1492.236779][ T5900] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1492.269004][ T5900] bond0: left allmulticast mode [ 1492.269032][ T5900] bond_slave_0: left allmulticast mode [ 1492.269411][ T5900] bond_slave_1: left allmulticast mode [ 1492.270146][ T5900] bond0: left promiscuous mode [ 1492.270164][ T5900] bond_slave_0: left promiscuous mode [ 1492.310103][ T5900] bond_slave_1: left promiscuous mode [ 1492.322558][ T5900] bridge0: port 3(bond0) entered disabled state [ 1492.367836][ T5900] bridge_slave_0: left allmulticast mode [ 1492.367875][ T5900] bridge_slave_0: left promiscuous mode [ 1492.369899][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.419323][ T5904] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7728'. [ 1492.447781][ T5900] bridge_slave_1: left allmulticast mode [ 1492.447813][ T5900] bridge_slave_1: left promiscuous mode [ 1492.448044][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.486816][ T5900] bond0: (slave bond_slave_0): Releasing backup interface [ 1492.506155][ T5900] bond0: (slave bond_slave_1): Releasing backup interface [ 1492.538134][ T5900] team0: Port device team_slave_0 removed [ 1492.552688][ T5900] team0: Port device team_slave_1 removed [ 1492.553357][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.557502][ T5900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.563602][ T5900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1493.066408][ T5845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1493.753206][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7733'. [ 1493.753319][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7733'. [ 1493.927782][ T5928] netlink: 'syz.2.7734': attribute type 3 has an invalid length. [ 1494.411473][ T5941] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1494.411534][ T5941] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1494.490687][ T5945] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7740'. [ 1494.774425][ T5946] netlink: 136 bytes leftover after parsing attributes in process `syz.6.7739'. [ 1494.774451][ T5946] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1494.890100][ T5957] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7743'. [ 1495.049355][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7745'. [ 1495.137523][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7743'. [ 1495.411478][ T5969] FAULT_INJECTION: forcing a failure. [ 1495.411478][ T5969] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.411517][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.2.7748 Not tainted syzkaller #0 PREEMPT(full) [ 1495.411543][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1495.411558][ T5969] Call Trace: [ 1495.411567][ T5969] [ 1495.411578][ T5969] dump_stack_lvl+0xe8/0x150 [ 1495.411618][ T5969] should_fail_ex+0x410/0x560 [ 1495.411651][ T5969] should_failslab+0xa8/0x100 [ 1495.411682][ T5969] __kvmalloc_node_noprof+0x176/0x820 [ 1495.411711][ T5969] ? __kvmalloc_node_noprof+0x345/0x820 [ 1495.411736][ T5969] ? sort_subprogs_topo+0xf5/0xf20 [ 1495.411761][ T5969] ? sort_subprogs_topo+0xf5/0xf20 [ 1495.411795][ T5969] sort_subprogs_topo+0xf5/0xf20 [ 1495.411822][ T5969] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 1495.411873][ T5969] bpf_check+0x25a5/0x2e10 [ 1495.411913][ T5969] ? ktime_get_with_offset+0x93/0x2d0 [ 1495.411993][ T5969] ? __pfx_bpf_check+0x10/0x10 [ 1495.412023][ T5969] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1495.412061][ T5969] bpf_prog_load+0x14d6/0x1c20 [ 1495.412103][ T5969] ? __pfx_bpf_prog_load+0x10/0x10 [ 1495.412168][ T5969] __sys_bpf+0xd0d/0xd90 [ 1495.412205][ T5969] ? __pfx___sys_bpf+0x10/0x10 [ 1495.412244][ T5969] ? __fget_files+0x2a/0x420 [ 1495.412296][ T5969] ? ksys_write+0x242/0x270 [ 1495.412334][ T5969] ? __pfx_ksys_write+0x10/0x10 [ 1495.412376][ T5969] __x64_sys_bpf+0xba/0xd0 [ 1495.412404][ T5969] do_syscall_64+0x166/0x520 [ 1495.412434][ T5969] ? trace_irq_disable+0x3b/0x140 [ 1495.412458][ T5969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.412483][ T5969] ? clear_bhb_loop+0x70/0xc0 [ 1495.412512][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.412536][ T5969] RIP: 0033:0x7f7ff3f9e159 [ 1495.412559][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.412580][ T5969] RSP: 002b:00007f7ff4f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1495.412606][ T5969] RAX: ffffffffffffffda RBX: 00007f7ff4225fa0 RCX: 00007f7ff3f9e159 [ 1495.412625][ T5969] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1495.412641][ T5969] RBP: 00007f7ff4f26090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.412657][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.412672][ T5969] R13: 00007f7ff4226038 R14: 00007f7ff4225fa0 R15: 00007ffd8c25b988 [ 1495.412709][ T5969] [ 1496.093092][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7751'. [ 1496.093525][ T5972] team0: entered allmulticast mode [ 1496.093550][ T5972] team_slave_0: entered allmulticast mode [ 1496.093582][ T5972] team_slave_1: entered allmulticast mode [ 1496.093609][ T5972] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 1496.219003][ T5968] team0: left allmulticast mode [ 1496.219029][ T5968] team_slave_0: left allmulticast mode [ 1496.219051][ T5968] team_slave_1: left allmulticast mode [ 1496.264033][ T5968] netdevsim netdevsim6 netdevsim1: left allmulticast mode [ 1496.433307][ T6001] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7754'. [ 1497.200795][ T6016] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7758'. [ 1497.226046][ T6016] netlink: 'syz.4.7758': attribute type 2 has an invalid length. [ 1497.547655][ T6021] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 1498.036506][ T6033] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7764'. [ 1498.687946][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7769'. [ 1498.688026][ T6048] FAULT_INJECTION: forcing a failure. [ 1498.688026][ T6048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.688056][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz.4.7769 Not tainted syzkaller #0 PREEMPT(full) [ 1498.688082][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1498.688096][ T6048] Call Trace: [ 1498.688106][ T6048] [ 1498.688116][ T6048] dump_stack_lvl+0xe8/0x150 [ 1498.688157][ T6048] should_fail_ex+0x410/0x560 [ 1498.688190][ T6048] _copy_from_user+0x2d/0xb0 [ 1498.688224][ T6048] kstrtouint_from_user+0xd6/0x180 [ 1498.688256][ T6048] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1498.688292][ T6048] ? lock_acquire+0x115/0x350 [ 1498.688323][ T6048] proc_fail_nth_write+0x8e/0x210 [ 1498.688360][ T6048] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1498.688391][ T6048] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1498.688414][ T6048] vfs_write+0x296/0xba0 [ 1498.688476][ T6048] ? __pfx_vfs_write+0x10/0x10 [ 1498.688513][ T6048] ? __fget_files+0x2a/0x420 [ 1498.688550][ T6048] ? __fget_files+0x3a2/0x420 [ 1498.688579][ T6048] ? __fget_files+0x2a/0x420 [ 1498.688621][ T6048] ksys_write+0x150/0x270 [ 1498.688653][ T6048] ? __pfx_ksys_write+0x10/0x10 [ 1498.688701][ T6048] do_syscall_64+0x166/0x520 [ 1498.688729][ T6048] ? trace_irq_disable+0x3b/0x140 [ 1498.688753][ T6048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.688777][ T6048] ? clear_bhb_loop+0x70/0xc0 [ 1498.688807][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.688830][ T6048] RIP: 0033:0x7f33cf15e98e [ 1498.688852][ T6048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1498.688872][ T6048] RSP: 002b:00007f33d0099fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1498.688904][ T6048] RAX: ffffffffffffffda RBX: 00007f33d009a6c0 RCX: 00007f33cf15e98e [ 1498.688921][ T6048] RDX: 0000000000000001 RSI: 00007f33d009a0a0 RDI: 0000000000000004 [ 1498.688936][ T6048] RBP: 00007f33d009a090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.688950][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.688965][ T6048] R13: 00007f33cf426038 R14: 00007f33cf425fa0 R15: 00007fff5feae978 [ 1498.689002][ T6048] [ 1499.833301][ T8448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.833327][ T8448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.013603][ T6080] vcan0: entered allmulticast mode [ 1500.014581][ T6082] vcan0: left allmulticast mode [ 1500.039718][ T6080] netlink: 'syz.4.7776': attribute type 1 has an invalid length. [ 1500.051737][ T6082] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7776'. [ 1500.359895][ T6080] bond5: option mode: invalid value (9) [ 1500.373520][ T6095] netlink: 'syz.2.7777': attribute type 3 has an invalid length. [ 1500.412901][ T6080] bond5 (unregistering): Released all slaves [ 1501.626220][ T6114] netlink: NAT attribute has 5 unknown bytes [ 1501.626286][ T6114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1501.984148][ T6128] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7787'. [ 1502.073850][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.074021][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.074186][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.074391][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.074550][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.074704][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.074869][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.075018][ T6130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.164959][ T6129] netlink: 'syz.2.7786': attribute type 8 has an invalid length. [ 1502.432326][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.432525][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.432689][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.432872][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.433034][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.433213][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.433400][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.433564][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.437714][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.437880][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.438049][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.438212][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.438392][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.438578][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.438736][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.438895][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.439060][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.518573][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.519137][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.519710][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.520189][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.584047][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.584382][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.584821][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.585223][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.588908][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.598764][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.675107][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.677019][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.678092][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.689769][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.690332][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.720024][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.722930][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.723131][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.723310][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.752796][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.768049][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.769205][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.796773][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.822372][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.823690][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.828018][ T6132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.828745][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.903156][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.904574][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.914922][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.922839][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.924106][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.926607][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1502.976688][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.038675][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.039227][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.039745][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.071947][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.091591][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.092102][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.092613][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.093142][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.093652][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.094172][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.094682][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.095242][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.095757][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.096303][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.096810][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.097321][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.097836][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.098366][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.098878][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.099396][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.099902][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.193816][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.194349][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.194808][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.219063][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.219756][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.220029][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.220210][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.264096][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.264680][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.265243][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.306334][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.306692][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.307091][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.326105][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.326630][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.327034][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.327480][ T6130] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1503.535814][ T6152] netlink: 'syz.5.7791': attribute type 1 has an invalid length. [ 1503.616080][ T6155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7791'. [ 1503.735701][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7791'. [ 1503.800126][ T6152] bond3: (slave bridge4): making interface the new active one [ 1503.815983][ T6152] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1504.517154][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7795'. [ 1504.584086][ T6185] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1504.887274][ T6190] netlink: 'syz.4.7797': attribute type 1 has an invalid length. [ 1504.950404][ T6193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7797'. [ 1505.110550][ T6190] bond5: option mode: invalid value (7) [ 1505.113277][ T6190] bond5 (unregistering): Released all slaves [ 1505.290630][ T6207] netlink: 'syz.6.7801': attribute type 27 has an invalid length. [ 1505.290657][ T6207] netlink: 'syz.6.7801': attribute type 3 has an invalid length. [ 1505.939754][ T6222] netlink: 'syz.5.7802': attribute type 1 has an invalid length. [ 1506.103750][ T6226] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1506.259125][ T6225] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1506.269695][ T6222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7802'. [ 1506.331536][ T6222] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1506.512180][ T6228] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1506.847360][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7806'. [ 1507.041354][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7808'. [ 1507.081300][ T6244] syzkaller0: entered promiscuous mode [ 1507.081505][ T6244] syzkaller0: entered allmulticast mode [ 1507.771134][ T6267] netlink: 'syz.3.7814': attribute type 1 has an invalid length. [ 1508.178592][ T6267] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1508.429529][ T38] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1508.621046][ T6295] syzkaller0: entered promiscuous mode [ 1508.621070][ T6295] syzkaller0: entered allmulticast mode [ 1508.689055][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7819'. [ 1509.505590][ T6314] netlink: 268 bytes leftover after parsing attributes in process `syz.5.7824'. [ 1511.004953][ T6275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1512.012015][ T6358] netlink: 'syz.3.7836': attribute type 3 has an invalid length. [ 1512.177916][ T6362] net_ratelimit: 34 callbacks suppressed [ 1512.177938][ T6362] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1512.351410][ T6364] netlink: 'syz.6.7838': attribute type 1 has an invalid length. [ 1512.512835][ T6364] bond4: entered promiscuous mode [ 1512.513675][ T6364] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1512.541934][ T8448] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1512.612880][ T6364] bond4: (slave bridge3): making interface the new active one [ 1512.612909][ T6364] bridge3: entered promiscuous mode [ 1512.614478][ T6364] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1512.884864][ T6391] lo: entered promiscuous mode [ 1512.885338][ T6391] tunl0: entered promiscuous mode [ 1512.885981][ T6391] gre0: entered promiscuous mode [ 1512.886373][ T6391] gretap0: entered promiscuous mode [ 1512.886899][ T6391] erspan0: entered promiscuous mode [ 1512.887329][ T6391] ip_vti0: entered promiscuous mode [ 1512.887722][ T6391] ip6_vti0: entered promiscuous mode [ 1512.888343][ T6391] sit0: entered promiscuous mode [ 1512.888787][ T6391] ip6tnl0: entered promiscuous mode [ 1512.889336][ T6391] ip6gre0: entered promiscuous mode [ 1515.350030][ T6366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1515.665640][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7846'. [ 1515.757126][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7847'. [ 1515.757153][ T6400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7847'. [ 1516.090580][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7846'. [ 1516.317753][ T6419] FAULT_INJECTION: forcing a failure. [ 1516.317753][ T6419] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.317794][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.5.7853 Not tainted syzkaller #0 PREEMPT(full) [ 1516.317820][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1516.317836][ T6419] Call Trace: [ 1516.317846][ T6419] [ 1516.317856][ T6419] dump_stack_lvl+0xe8/0x150 [ 1516.317898][ T6419] should_fail_ex+0x410/0x560 [ 1516.317938][ T6419] should_failslab+0xa8/0x100 [ 1516.317972][ T6419] __kvmalloc_node_noprof+0x176/0x820 [ 1516.318002][ T6419] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1516.318029][ T6419] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1516.318064][ T6419] bpf_compute_live_registers+0x14f/0x1ff0 [ 1516.318094][ T6419] ? kfree+0x1c5/0x650 [ 1516.318134][ T6419] ? bpf_compute_scc+0xab6/0xb10 [ 1516.318166][ T6419] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1516.318207][ T6419] bpf_check+0x25ed/0x2e10 [ 1516.318250][ T6419] ? ktime_get_with_offset+0x93/0x2d0 [ 1516.318281][ T6419] ? __pfx_bpf_check+0x10/0x10 [ 1516.318311][ T6419] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1516.318350][ T6419] bpf_prog_load+0x14d6/0x1c20 [ 1516.318392][ T6419] ? __pfx_bpf_prog_load+0x10/0x10 [ 1516.318448][ T6419] __sys_bpf+0xd0d/0xd90 [ 1516.318484][ T6419] ? __pfx___sys_bpf+0x10/0x10 [ 1516.318524][ T6419] ? __fget_files+0x2a/0x420 [ 1516.318577][ T6419] ? ksys_write+0x242/0x270 [ 1516.318616][ T6419] ? __pfx_ksys_write+0x10/0x10 [ 1516.318658][ T6419] __x64_sys_bpf+0xba/0xd0 [ 1516.318686][ T6419] do_syscall_64+0x166/0x520 [ 1516.318715][ T6419] ? trace_irq_disable+0x3b/0x140 [ 1516.318739][ T6419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.318763][ T6419] ? clear_bhb_loop+0x70/0xc0 [ 1516.318793][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.318817][ T6419] RIP: 0033:0x7f278199e159 [ 1516.318839][ T6419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.318860][ T6419] RSP: 002b:00007f277fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1516.318886][ T6419] RAX: ffffffffffffffda RBX: 00007f2781c25fa0 RCX: 00007f278199e159 [ 1516.318904][ T6419] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1516.318926][ T6419] RBP: 00007f277fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.318942][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.318956][ T6419] R13: 00007f2781c26038 R14: 00007f2781c25fa0 R15: 00007ffcd3392868 [ 1516.318993][ T6419] [ 1516.707929][ T6426] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7856'. [ 1516.905134][ T6434] netlink: 'syz.5.7857': attribute type 11 has an invalid length. [ 1517.905221][ T6464] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7864'. [ 1518.098084][ T6460] netlink: 'syz.2.7864': attribute type 4 has an invalid length. [ 1518.164155][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7867'. [ 1518.187032][ T6460] openvswitch: netlink: Multiple metadata blocks provided [ 1519.194465][ T6500] SET target dimension over the limit! [ 1519.288516][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7874'. [ 1519.305997][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7874'. [ 1519.306022][ T6500] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1519.339629][ T6504] tc action pedit offset must be on 32 bit boundaries [ 1519.597353][ T6517] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1519.898906][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.898934][ T6524] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1519.899128][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.899334][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.899519][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.899696][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.899908][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.900075][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.990396][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1519.991251][ T6524] netlink: 'syz.2.7883': attribute type 4 has an invalid length. [ 1520.148341][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.171555][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.221745][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.241604][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.261767][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.282801][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.302789][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.322524][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.343349][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.372418][ T6524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.599301][ T6536] FAULT_INJECTION: forcing a failure. [ 1520.599301][ T6536] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.599343][ T6536] CPU: 0 UID: 0 PID: 6536 Comm: syz.3.7886 Not tainted syzkaller #0 PREEMPT(full) [ 1520.599369][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1520.599384][ T6536] Call Trace: [ 1520.599394][ T6536] [ 1520.599405][ T6536] dump_stack_lvl+0xe8/0x150 [ 1520.599447][ T6536] should_fail_ex+0x410/0x560 [ 1520.599483][ T6536] should_failslab+0xa8/0x100 [ 1520.599518][ T6536] __kvmalloc_node_noprof+0x176/0x820 [ 1520.599546][ T6536] ? rcu_is_watching+0x16/0xb0 [ 1520.599578][ T6536] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1520.599652][ T6536] ? trace_kmalloc+0x2a/0xf0 [ 1520.599675][ T6536] ? call_instance+0x263/0x560 [ 1520.599701][ T6536] ? call_instance+0x263/0x560 [ 1520.599738][ T6536] call_instance+0x263/0x560 [ 1520.599777][ T6536] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1520.599810][ T6536] ? bpf_base_func_proto+0x270/0xb00 [ 1520.599846][ T6536] ? __pfx_lwt_in_func_proto+0x10/0x10 [ 1520.600028][ T6536] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1520.600068][ T6536] ? __kvmalloc_node_noprof+0x345/0x820 [ 1520.600096][ T6536] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1520.600126][ T6536] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1520.600167][ T6536] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1520.600226][ T6536] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1520.600273][ T6536] bpf_check+0x25ed/0x2e10 [ 1520.600317][ T6536] ? ktime_get_with_offset+0x93/0x2d0 [ 1520.600351][ T6536] ? __pfx_bpf_check+0x10/0x10 [ 1520.600382][ T6536] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1520.600425][ T6536] bpf_prog_load+0x14d6/0x1c20 [ 1520.600471][ T6536] ? __pfx_bpf_prog_load+0x10/0x10 [ 1520.600547][ T6536] __sys_bpf+0xd0d/0xd90 [ 1520.600585][ T6536] ? __pfx___sys_bpf+0x10/0x10 [ 1520.600635][ T6536] ? __fget_files+0x2a/0x420 [ 1520.600690][ T6536] ? ksys_write+0x242/0x270 [ 1520.600730][ T6536] ? __pfx_ksys_write+0x10/0x10 [ 1520.600774][ T6536] __x64_sys_bpf+0xba/0xd0 [ 1520.600803][ T6536] do_syscall_64+0x166/0x520 [ 1520.600835][ T6536] ? trace_irq_disable+0x3b/0x140 [ 1520.600859][ T6536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.600885][ T6536] ? clear_bhb_loop+0x70/0xc0 [ 1520.600916][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.600942][ T6536] RIP: 0033:0x7f63b259e159 [ 1520.600966][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.600988][ T6536] RSP: 002b:00007f63b33b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1520.601016][ T6536] RAX: ffffffffffffffda RBX: 00007f63b2825fa0 RCX: 00007f63b259e159 [ 1520.601036][ T6536] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1520.601053][ T6536] RBP: 00007f63b33b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.601069][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.601085][ T6536] R13: 00007f63b2826038 R14: 00007f63b2825fa0 R15: 00007ffed1069f18 [ 1520.601126][ T6536] [ 1520.758676][ T6531] __nla_validate_parse: 26 callbacks suppressed [ 1520.758735][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7885'. [ 1521.539077][ T6544] openvswitch: netlink: VXLAN extension 248 out of range max 1 [ 1521.647506][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7891'. [ 1521.809907][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7890'. [ 1521.809937][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7890'. [ 1521.809955][ T6544] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7890'. [ 1522.168319][ T6571] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7895'. [ 1522.655321][ T6582] FAULT_INJECTION: forcing a failure. [ 1522.655321][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.655361][ T6582] CPU: 1 UID: 0 PID: 6582 Comm: syz.5.7899 Not tainted syzkaller #0 PREEMPT(full) [ 1522.655403][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1522.655418][ T6582] Call Trace: [ 1522.655427][ T6582] [ 1522.655438][ T6582] dump_stack_lvl+0xe8/0x150 [ 1522.655479][ T6582] should_fail_ex+0x410/0x560 [ 1522.655511][ T6582] should_failslab+0xa8/0x100 [ 1522.655543][ T6582] __kvmalloc_node_noprof+0x176/0x820 [ 1522.655568][ T6582] ? rcu_is_watching+0x16/0xb0 [ 1522.655598][ T6582] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1522.655626][ T6582] ? trace_kmalloc+0x2a/0xf0 [ 1522.655657][ T6582] ? call_instance+0x263/0x560 [ 1522.655680][ T6582] ? call_instance+0x263/0x560 [ 1522.655712][ T6582] call_instance+0x263/0x560 [ 1522.655746][ T6582] bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 1522.655772][ T6582] ? bpf_base_func_proto+0x270/0xb00 [ 1522.655800][ T6582] ? __pfx_lwt_in_func_proto+0x10/0x10 [ 1522.655871][ T6582] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1522.655912][ T6582] ? __kvmalloc_node_noprof+0x345/0x820 [ 1522.655937][ T6582] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1522.655964][ T6582] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1522.656000][ T6582] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1522.656050][ T6582] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1522.656090][ T6582] bpf_check+0x25ed/0x2e10 [ 1522.656129][ T6582] ? ktime_get_with_offset+0x93/0x2d0 [ 1522.656159][ T6582] ? __pfx_bpf_check+0x10/0x10 [ 1522.656188][ T6582] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1522.656227][ T6582] bpf_prog_load+0x14d6/0x1c20 [ 1522.656268][ T6582] ? __pfx_bpf_prog_load+0x10/0x10 [ 1522.656324][ T6582] __sys_bpf+0xd0d/0xd90 [ 1522.656360][ T6582] ? __pfx___sys_bpf+0x10/0x10 [ 1522.656406][ T6582] ? __fget_files+0x2a/0x420 [ 1522.656458][ T6582] ? ksys_write+0x242/0x270 [ 1522.656496][ T6582] ? __pfx_ksys_write+0x10/0x10 [ 1522.656536][ T6582] __x64_sys_bpf+0xba/0xd0 [ 1522.656564][ T6582] do_syscall_64+0x166/0x520 [ 1522.656591][ T6582] ? trace_irq_disable+0x3b/0x140 [ 1522.656615][ T6582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.656640][ T6582] ? clear_bhb_loop+0x70/0xc0 [ 1522.656669][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.656693][ T6582] RIP: 0033:0x7f278199e159 [ 1522.656715][ T6582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.656735][ T6582] RSP: 002b:00007f277fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1522.656760][ T6582] RAX: ffffffffffffffda RBX: 00007f2781c25fa0 RCX: 00007f278199e159 [ 1522.656777][ T6582] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1522.656793][ T6582] RBP: 00007f277fbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.656808][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1522.656822][ T6582] R13: 00007f2781c26038 R14: 00007f2781c25fa0 R15: 00007ffcd3392868 [ 1522.656859][ T6582] [ 1523.574810][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7905'. [ 1523.588966][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7907'. [ 1523.589048][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7907'. [ 1523.746414][ T6610] validate_nla: 18 callbacks suppressed [ 1523.746438][ T6610] netlink: 'syz.3.7909': attribute type 7 has an invalid length. [ 1523.746454][ T6610] netlink: 'syz.3.7909': attribute type 8 has an invalid length. [ 1524.395725][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7911'. [ 1524.995583][ T31] audit: type=1804 audit(1790054859.688:19): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7917" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=969 res=1 errno=0 [ 1524.995645][ T31] audit: type=1800 audit(1790054859.688:20): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7917" name="cgroup.controllers" dev="tmpfs" ino=969 res=0 errno=0 [ 1525.563071][ T6649] netlink: 'syz.2.7922': attribute type 3 has an invalid length. [ 1525.912019][ T6661] __nla_validate_parse: 1 callbacks suppressed [ 1525.912041][ T6661] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7923'. [ 1525.915974][ T6662] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7923'. [ 1526.056595][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7923'. [ 1526.056595][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7923'. [ 1526.056648][ T6661] batman_adv: batadv0: Interface deactivated: gretap1 [ 1526.056855][ T6661] batman_adv: batadv0: Removing interface: gretap1 [ 1526.109561][ T6664] netlink: 284 bytes leftover after parsing attributes in process `syz.2.7924'. [ 1526.385053][ T6674] netlink: 'syz.3.7926': attribute type 29 has an invalid length. [ 1526.717430][ T6681] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1526.838536][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7930'. [ 1527.108231][ T6694] netlink: 'syz.5.7934': attribute type 3 has an invalid length. [ 1527.196953][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7932'. [ 1527.344795][ T6700] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1527.424570][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7932'. [ 1527.617755][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7936'. [ 1527.852097][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7937'. [ 1528.588474][ T6729] netlink: 'syz.6.7945': attribute type 3 has an invalid length. [ 1530.116049][ T6757] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 1530.722836][ T6779] netlink: 'syz.2.7958': attribute type 3 has an invalid length. [ 1530.823227][ T6782] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1530.939781][ T6791] netlink: 'syz.4.7963': attribute type 1 has an invalid length. [ 1530.939807][ T6791] __nla_validate_parse: 5 callbacks suppressed [ 1530.939820][ T6791] netlink: 756 bytes leftover after parsing attributes in process `syz.4.7963'. [ 1531.221680][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7962'. [ 1531.445331][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7964'. [ 1531.779709][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7969'. [ 1531.878692][ T6829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7969'. [ 1531.949056][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7970'. [ 1532.410010][ T6844] netlink: 'syz.6.7972': attribute type 3 has an invalid length. [ 1532.458673][ T6849] : renamed from bond0 [ 1533.134019][ T6864] netlink: 'syz.3.7977': attribute type 1 has an invalid length. [ 1533.206264][ T6864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1533.309859][ T6867] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1533.322937][ T6867] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1533.323625][ T6867] bond7: (slave xfrm1): Error -95 calling set_mac_address [ 1534.359143][ T6894] lo speed is unknown, defaulting to 1000 [ 1534.426724][ T6894] dummy0 speed is unknown, defaulting to 1000 [ 1535.099574][ T6916] netlink: 'syz.5.7985': attribute type 3 has an invalid length. [ 1536.240595][ T6934] netlink: 'syz.2.7993': attribute type 1 has an invalid length. [ 1536.338371][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1536.353670][ T6934] bond8: entered promiscuous mode [ 1536.354213][ T6934] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1536.485402][ T6944] vlan0: entered allmulticast mode [ 1536.485429][ T6944] bond8: entered allmulticast mode [ 1536.553784][ T6946] bridge_slave_0: left allmulticast mode [ 1536.553814][ T6946] bridge_slave_0: left promiscuous mode [ 1536.554080][ T6946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.607042][ T6946] bridge_slave_1: left allmulticast mode [ 1536.607074][ T6946] bridge_slave_1: left promiscuous mode [ 1536.608687][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.647827][ T6946] bond3: (slave veth0_to_bond): Releasing active interface [ 1536.674030][ T6946] bond0: (slave bond_slave_0): Releasing backup interface [ 1536.707394][ T6946] bond0: (slave bond_slave_1): Releasing backup interface [ 1536.732591][ T6946] team0: Port device team_slave_0 removed [ 1536.748218][ T6946] team0: Port device team_slave_1 removed [ 1536.756594][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.756620][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.786558][ T6946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.786587][ T6946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.827103][ T6946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1536.934607][ T6934] bond8: (slave bridge10): making interface the new active one [ 1536.934654][ T6934] bridge10: entered promiscuous mode [ 1536.934858][ T6934] bridge10: entered allmulticast mode [ 1536.974522][ T6934] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 1537.213626][ T6955] x_tables: duplicate underflow at hook 1 [ 1537.217296][ T6954] x_tables: duplicate underflow at hook 3 [ 1537.564485][ T6963] netlink: 'syz.4.7998': attribute type 3 has an invalid length. [ 1538.432959][ T6983] sock: sock_timestamping_bind_phc: sock not bind to device [ 1539.006145][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8008'. [ 1539.328971][ T7005] netlink: 'syz.6.8011': attribute type 3 has an invalid length. [ 1539.373704][ T7004] netlink: 'syz.5.8010': attribute type 1 has an invalid length. [ 1539.465691][ T7007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8010'. [ 1539.513682][ T7004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1539.574484][ T7004] macvlan2: entered promiscuous mode [ 1539.574513][ T7004] macvlan2: entered allmulticast mode [ 1539.574940][ T7004] bond5: entered allmulticast mode [ 1539.575025][ T7004] bond5: entered promiscuous mode [ 1539.575782][ T7004] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1539.614397][ T7004] team0: Port device macvlan2 added [ 1539.691875][ T7016] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1539.693875][ T7016] netlink: 'syz.2.8014': attribute type 1 has an invalid length. [ 1539.693896][ T7016] netlink: 244 bytes leftover after parsing attributes in process `syz.2.8014'. [ 1539.784034][ T7004] bond5: (slave ip6gretap1): making interface the new active one [ 1539.784072][ T7004] ip6gretap1: entered promiscuous mode [ 1539.784257][ T7004] ip6gretap1: entered allmulticast mode [ 1539.788428][ T7004] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1540.677684][ T7028] geneve4: entered promiscuous mode [ 1540.895944][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8016'. [ 1540.971050][T24801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.979133][T21621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.979413][T21621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.979458][T21621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.205168][ T7052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8022'. [ 1541.309071][ T7044] syzkaller0: entered promiscuous mode [ 1541.309099][ T7044] syzkaller0: entered allmulticast mode [ 1541.639991][ T7062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8023'. [ 1541.659452][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8024'. [ 1542.163804][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8029'. [ 1542.516290][ T7090] syzkaller0: entered promiscuous mode [ 1542.516494][ T7090] syzkaller0: entered allmulticast mode [ 1542.548677][ T7090] 0: reclassify loop, rule prio 0, protocol 800 [ 1543.531402][ T7116] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1543.538325][ T7117] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1544.165269][ T7138] netlink: 2 bytes leftover after parsing attributes in process `syz.6.8044'. [ 1544.268169][T27712] block nbd5: Receive control failed (result -32) [ 1546.258907][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8058'. [ 1546.583202][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8062'. [ 1547.515749][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8066'. [ 1548.310115][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1548.310144][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1548.310163][ T7225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1548.348312][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1548.377234][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8071'. [ 1549.229422][ T7251] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8076'. [ 1549.281183][ T7249] netlink: 'syz.6.8076': attribute type 3 has an invalid length. [ 1549.281207][ T7249] netlink: 'syz.6.8076': attribute type 7 has an invalid length. [ 1549.758926][ T7258] netlink: 'syz.3.8077': attribute type 1 has an invalid length. [ 1549.758953][ T7258] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8077'. [ 1549.976690][ T7263] syzkaller0: entered promiscuous mode [ 1549.976717][ T7263] syzkaller0: entered allmulticast mode [ 1550.044813][ T7263] tipc: Enabled bearer , priority 0 [ 1550.046974][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8081'. [ 1550.656073][ T7264] syzkaller0: entered promiscuous mode [ 1550.656103][ T7264] syzkaller0: entered allmulticast mode [ 1550.703286][ T7275] tipc: Resetting bearer [ 1550.737088][ T7260] tipc: Resetting bearer [ 1550.795838][ T7290] netlink: 'syz.6.8084': attribute type 1 has an invalid length. [ 1550.795858][ T7290] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8084'. [ 1550.909262][ T7260] tipc: Disabling bearer [ 1551.412718][ T7300] nbd: couldn't find a device at index 64 [ 1556.281990][ T7294] __nla_validate_parse: 1 callbacks suppressed [ 1556.282012][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8085'. [ 1556.398715][ T7297] IPVS: Error connecting to the multicast addr [ 1556.576173][ T7304] syzkaller0: entered promiscuous mode [ 1556.576379][ T7304] syzkaller0: entered allmulticast mode [ 1556.679098][ T7303] syzkaller0: left promiscuous mode [ 1556.679304][ T7303] syzkaller0: left allmulticast mode [ 1556.792954][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8091'. [ 1556.794832][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8091'. [ 1556.974074][ T7322] netlink: zone id is out of range [ 1556.974093][ T7322] netlink: zone id is out of range [ 1556.974197][ T7322] netlink: zone id is out of range [ 1556.974213][ T7322] netlink: zone id is out of range [ 1556.974225][ T7322] netlink: zone id is out of range [ 1556.974236][ T7322] netlink: zone id is out of range [ 1556.974254][ T7322] netlink: zone id is out of range [ 1556.974299][ T7322] netlink: zone id is out of range [ 1556.974311][ T7322] netlink: zone id is out of range [ 1556.974323][ T7322] netlink: zone id is out of range [ 1557.157523][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8094'. [ 1560.066465][ T7317] geneve1: left promiscuous mode [ 1560.404118][ T7317] gre1: left allmulticast mode [ 1560.421449][ T7317] bond1: left promiscuous mode [ 1560.426187][ T7317] bond2: left promiscuous mode [ 1560.426208][ T7317] bridge3: left promiscuous mode [ 1560.452649][ T7317] ipvlan2: left allmulticast mode [ 1560.452863][ T7317] ipvlan3: left allmulticast mode [ 1560.453027][ T7317] ipvlan4: left allmulticast mode [ 1560.453192][ T7317] ipvlan5: left allmulticast mode [ 1560.453206][ T7317] bond2: left allmulticast mode [ 1560.453220][ T7317] bridge3: left allmulticast mode [ 1560.459823][ T7317] macsec2: left promiscuous mode [ 1560.512410][ T7317] macsec3: left promiscuous mode [ 1560.646859][ T7317] bond5: left allmulticast mode [ 1560.646889][ T7317] ip6gretap1: left allmulticast mode [ 1560.646909][ T7317] bond5: left promiscuous mode [ 1560.646925][ T7317] ip6gretap1: left promiscuous mode [ 1560.647376][ T7317] macvlan2: left promiscuous mode [ 1560.647395][ T7317] macvlan2: left allmulticast mode [ 1560.699181][T24801] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.699247][T24801] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.699308][T24801] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.699337][T24801] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.699594][T24801] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.699625][T24801] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.699771][T24801] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.699801][T24801] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.972255][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8100'. [ 1561.039320][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8100'. [ 1561.726132][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8102'. [ 1562.884672][ T7404] netlink: 'syz.2.8109': attribute type 2 has an invalid length. [ 1562.963027][ T7404] siw: device registration error -23 [ 1563.126432][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8111'. [ 1563.152825][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8115'. [ 1564.246899][ T7439] tipc: Enabled bearer , priority 0 [ 1564.290538][ T7439] syzkaller0: entered promiscuous mode [ 1564.290566][ T7439] syzkaller0: entered allmulticast mode [ 1564.317717][ T7439] tipc: Resetting bearer [ 1564.321246][ T7421] net_ratelimit: 497 callbacks suppressed [ 1564.321266][ T7421] ip_tables: iptables: counters copy to user failed while replacing table [ 1564.389360][ T7438] tipc: Resetting bearer [ 1564.465448][ T7438] tipc: Disabling bearer [ 1565.477446][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8126'. [ 1565.478589][ T7462] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1565.479328][ T7462] bridge0: port 1(bond9) entered blocking state [ 1565.515349][ T7462] bridge0: port 1(bond9) entered disabled state [ 1565.515581][ T7462] bond9: entered allmulticast mode [ 1565.574534][ T7462] bond9: entered promiscuous mode [ 1565.648928][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8127'. [ 1565.649377][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8127'. [ 1566.521458][ T7492] netlink: 'syz.2.8130': attribute type 2 has an invalid length. [ 1566.521486][ T7492] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8130'. [ 1566.522175][T21622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1566.522196][T21622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.840114][ T7506] IPVS: set_ctl: invalid protocol: 65535 0.0.0.0:6656 [ 1567.137914][ T7517] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1567.690635][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8139'. [ 1568.256617][ T7550] xt_nfacct: accounting object `syz0' does not exist [ 1569.007310][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8151'. [ 1569.046918][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8152'. [ 1569.608429][ T7584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.009571][ T7570] netlink: 'syz.5.8149': attribute type 10 has an invalid length. [ 1570.134896][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1570.171591][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1570.172028][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1570.176379][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1570.176885][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1570.177040][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 1570.381095][ T7622] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8162'. [ 1570.536727][ T7622] xt_connbytes: Forcing CT accounting to be enabled [ 1570.552022][ T7622] xt_ct_set_helper: 6 callbacks suppressed [ 1570.552044][ T7622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1570.687714][ T7622] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1571.095277][ T7649] netlink: 'syz.3.8170': attribute type 2 has an invalid length. [ 1571.095303][ T7649] netlink: 'syz.3.8170': attribute type 1 has an invalid length. [ 1571.872559][ T7667] netlink: 'syz.6.8173': attribute type 1 has an invalid length. [ 1571.960090][ T7658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.018606][ T7669] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1572.066775][ T7672] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1573.093929][ T7702] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1573.121606][ T7705] syzkaller0: entered promiscuous mode [ 1573.121633][ T7705] syzkaller0: entered allmulticast mode [ 1573.390154][ T7706] v: renamed from veth0_vlan [ 1574.376252][ T7740] __nla_validate_parse: 8 callbacks suppressed [ 1574.376276][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8190'. [ 1574.494752][ T7738] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1575.235816][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8195'. [ 1575.718647][ T7784] syzkaller1: entered promiscuous mode [ 1575.718700][ T7784] syzkaller1: entered allmulticast mode [ 1576.423372][ T7795] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8200'. [ 1577.339735][ T7807] batman_adv: batadv0: Adding interface: syzkaller0 [ 1577.339759][ T7807] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.339983][ T7807] batman_adv: batadv0: Interface activated: syzkaller0 [ 1577.550119][ T7800] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1577.743283][ T7800] batman_adv: batadv0: Removing interface: syzkaller0 [ 1577.946717][ T7821] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1577.946825][ T7821] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 1577.947172][ T7821] veth0_virt_wifi: entered allmulticast mode [ 1577.949560][ T7821] veth0_virt_wifi: entered promiscuous mode [ 1577.950275][ T7821] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 1577.950391][ T7821] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 1578.151774][ T7833] lo: left promiscuous mode [ 1578.188032][ T7833] tunl0: left promiscuous mode [ 1578.205875][ T7833] gre0: left promiscuous mode [ 1578.248420][ T7833] gretap0: left promiscuous mode [ 1578.274878][ T7833] erspan0: left promiscuous mode [ 1578.359329][ T7833] ip_vti0: left promiscuous mode [ 1578.406120][ T7833] ip6_vti0: left promiscuous mode [ 1578.443748][ T7833] sit0: left promiscuous mode [ 1578.469890][ T7833] ip6tnl0: left promiscuous mode [ 1578.506375][ T7833] ip6gre0: left promiscuous mode [ 1578.594469][ T7833] bridge0: left promiscuous mode [ 1578.598070][ T7833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.664328][ T7833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.794757][ T7852] netlink: Invalid conntrack timeout [ 1578.794792][ T7852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1578.839574][ T7833] batadv_slave_1: entered promiscuous mode [ 1578.873908][ T7833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1578.873939][ T7833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1578.878960][ T7833] veth1_vlan: left promiscuous mode [ 1578.944914][ T7833] veth0_vlan: left promiscuous mode [ 1578.947835][ T7833] veth0_vlan: entered promiscuous mode [ 1578.949321][ T7833] veth1_vlan: entered promiscuous mode [ 1578.997497][ T7833] veth1_vlan: entered allmulticast mode [ 1579.043619][ T7833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1579.056946][ T7833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1579.106577][ T7833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1579.137767][ T7833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1579.177318][ T7833] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1579.203614][ T7833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1579.206545][ T7833] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1579.229865][ T7833] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1579.306516][ T7833] bond5: left promiscuous mode [ 1579.306558][ T7833] gre1: left promiscuous mode [ 1579.476129][ T7833] bond8: left promiscuous mode [ 1579.476148][ T7833] bridge10: left promiscuous mode [ 1579.551065][T21622] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.551103][T21622] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.551148][T21622] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.551176][T21622] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.551216][T21622] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.551244][T21622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.551285][T21622] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.551313][T21622] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.556890][ T968] bridge0: entered promiscuous mode [ 1580.329342][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8216'. [ 1580.566816][ T8448] ip6_tunnel: L xmit: Local address not yet configured! [ 1580.568937][ T8448] ip6_tunnel: L xmit: Local address not yet configured! [ 1580.592606][ T7355] ip6_tunnel: L xmit: Local address not yet configured! [ 1580.631688][ T8448] ip6_tunnel:  xmit: Local address not yet configured! [ 1580.719196][ T7354] ip6_tunnel: L xmit: Local address not yet configured! [ 1581.156097][ T7894] tipc: Enabled bearer , priority 0 [ 1581.264436][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8223'. [ 1581.469408][ T7893] tipc: Disabling bearer [ 1581.576607][ T968] ip6_tunnel: L xmit: Local address not yet configured! [ 1582.038032][ T7914] netlink: 'syz.5.8226': attribute type 3 has an invalid length. [ 1582.130851][ T7903] syzkaller0: entered promiscuous mode [ 1582.131057][ T7903] syzkaller0: entered allmulticast mode [ 1582.158591][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8228'. [ 1582.158633][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8228'. [ 1582.195733][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8228'. [ 1582.195766][ T7916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8228'. [ 1582.315463][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8229'. [ 1582.315490][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8229'. [ 1582.315518][ T7920] netlink: 'syz.6.8229': attribute type 19 has an invalid length. [ 1582.315534][ T7920] netlink: 'syz.6.8229': attribute type 20 has an invalid length. [ 1582.452886][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8229'. [ 1582.452911][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8229'. [ 1582.452940][ T7921] netlink: 'syz.6.8229': attribute type 19 has an invalid length. [ 1582.452956][ T7921] netlink: 'syz.6.8229': attribute type 20 has an invalid length. [ 1584.361743][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 1584.840685][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1588.230596][ T8448] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.231097][ T8448] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.231516][ T8448] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.231563][ T8448] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.345107][ T7942] syzkaller0: entered promiscuous mode [ 1588.345132][ T7942] syzkaller0: entered allmulticast mode [ 1588.425167][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8234'. [ 1588.594107][ T7950] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8236'. [ 1588.777656][ T7952] netlink: 'syz.3.8237': attribute type 1 has an invalid length. [ 1588.924467][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8238'. [ 1588.924497][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8238'. [ 1589.238322][ T7952] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1589.254833][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8238'. [ 1589.281097][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8239'. [ 1589.367615][ T7956] bond9: (slave gretap2): making interface the new active one [ 1589.370084][ T7956] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 1589.761708][ T7974] netlink: 'syz.2.8241': attribute type 3 has an invalid length. [ 1589.836162][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8243'. [ 1589.836190][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8243'. [ 1590.465044][ T7978] syzkaller0: entered promiscuous mode [ 1590.465219][ T7978] syzkaller0: entered allmulticast mode [ 1590.865623][ T8007] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8249'. [ 1591.025423][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8248'. [ 1592.051023][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 1593.340398][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1596.394756][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8251'. [ 1596.394788][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8251'. [ 1596.394808][ T8018] netlink: 'syz.5.8251': attribute type 4 has an invalid length. [ 1596.834499][ T8036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8257'. [ 1596.839719][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8257'. [ 1596.873338][T27712] Bluetooth: hci6: link tx timeout [ 1596.873358][T27712] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1596.898532][ T8036] syzkaller1: entered promiscuous mode [ 1596.898558][ T8036] syzkaller1: entered allmulticast mode [ 1596.923383][ T8045] netlink: 'syz.3.8254': attribute type 3 has an invalid length. [ 1596.976001][ T8047] block nbd0: reconnected socket [ 1596.976028][ T8047] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1597.023880][ T8044] block nbd0: Receive control failed (result -32) [ 1597.121534][T24793] bridge_slave_1: left allmulticast mode [ 1597.121937][T24793] bridge_slave_1: left promiscuous mode [ 1597.125040][T24793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.161377][T24793] bridge_slave_0: left allmulticast mode [ 1597.161691][T24793] bridge_slave_0: left promiscuous mode [ 1597.163749][T24793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.313852][ T8053] netlink: 'syz.3.8258': attribute type 4 has an invalid length. [ 1597.313969][ T8052] netlink: 'syz.3.8258': attribute type 4 has an invalid length. [ 1597.391885][T24793] pim6reg: left allmulticast mode [ 1597.392058][T24793] dvmrp0: left allmulticast mode [ 1597.392165][T24793] dvmrp1: left allmulticast mode [ 1597.392300][T24793] bond12: left allmulticast mode [ 1597.392316][T24793] ipip0: left allmulticast mode [ 1597.874873][T24793] bond1 (unregistering): (slave ip6erspan1): Releasing active interface [ 1598.413990][T24793] bond12 (unregistering): (slave ipip0): Releasing backup interface [ 1598.414022][T24793] ipip0 (unregistering): left promiscuous mode [ 1598.644314][T24793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.644711][T24793] bond_slave_0: left allmulticast mode [ 1598.648694][T24793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.649267][T24793] bond_slave_1: left allmulticast mode [ 1598.687567][T24793] bond0 (unregistering): Released all slaves [ 1598.703086][T24793] bond1 (unregistering): Released all slaves [ 1598.730950][T24793] bond2 (unregistering): Released all slaves [ 1598.762184][T24793] bond3 (unregistering): Released all slaves [ 1598.784688][T24793] bond4 (unregistering): Released all slaves [ 1598.817374][T24793] bond5 (unregistering): Released all slaves [ 1598.847522][T24793] bond6 (unregistering): Released all slaves [ 1598.877599][T24793] bond7 (unregistering): (slave veth3): Releasing active interface [ 1598.877632][T24793] batadv1: entered promiscuous mode [ 1598.900022][T24793] bond7 (unregistering): (slave batadv1): Releasing active interface [ 1598.900055][T24793] batadv1: left promiscuous mode [ 1598.924436][ T8044] Bluetooth: hci6: command 0x0405 tx timeout [ 1598.961400][T24793] bond7 (unregistering): Released all slaves [ 1598.989898][T24793] bond8 (unregistering): (slave veth5): Releasing active interface [ 1599.014661][T24793] bond8 (unregistering): Released all slaves [ 1599.039123][T24793] bond9 (unregistering): Released all slaves [ 1599.063258][T24793] bond10 (unregistering): Released all slaves [ 1599.120844][T24793] bond11 (unregistering): Released all slaves [ 1599.157294][T24793] bond12 (unregistering): Released all slaves [ 1599.195377][T24793] bond13 (unregistering): Released all slaves [ 1599.222527][T24793] bond14 (unregistering): Released all slaves [ 1599.245747][T24793] bond15 (unregistering): Released all slaves [ 1599.661989][T24793] : left promiscuous mode [ 1599.895416][T24793] tipc: Disabling bearer [ 1599.895947][T24793] tipc: Left network mode [ 1600.035451][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8265'. [ 1600.070386][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8265'. [ 1600.174726][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8266'. [ 1600.561156][ T8098] netlink: 'syz.4.8268': attribute type 3 has an invalid length. [ 1601.047421][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8271'. [ 1601.047453][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8271'. [ 1601.477416][ T8124] netlink: 'syz.2.8273': attribute type 1 has an invalid length. [ 1601.513291][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8274'. [ 1601.513334][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8274'. [ 1602.578609][ T8140] netlink: 'syz.6.8276': attribute type 1 has an invalid length. [ 1602.578639][ T8140] netlink: 'syz.6.8276': attribute type 2 has an invalid length. [ 1602.669425][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8276'. [ 1602.669453][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8276'. [ 1602.669473][ T8147] netlink: 31 bytes leftover after parsing attributes in process `syz.6.8276'. [ 1603.069500][ T8158] syzkaller0: entered promiscuous mode [ 1603.069703][ T8158] syzkaller0: entered allmulticast mode [ 1603.228133][ T8160] bond0: option miimon: invalid value (18446744073357230079) [ 1603.228158][ T8160] bond0: option miimon: allowed values 0 - 2147483647 [ 1603.249435][ T8160] bond0 (unregistering): Released all slaves [ 1603.314910][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8284'. [ 1603.542209][ T8176] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8284'. [ 1603.542257][ T8176] openvswitch: netlink: Message has 512 unknown bytes. [ 1603.849085][ T8183] syzkaller0: entered promiscuous mode [ 1603.849282][ T8183] syzkaller0: entered allmulticast mode [ 1603.892665][ T8174] tipc: Enabled bearer , priority 0 [ 1604.014810][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8287'. [ 1604.271176][ T8178] tipc: Resetting bearer [ 1604.334963][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1604.484323][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8290'. [ 1604.507659][ T8173] tipc: Resetting bearer [ 1604.735971][ T8173] tipc: Disabling bearer [ 1605.336721][ T8212] netlink: 'syz.5.8294': attribute type 3 has an invalid length. [ 1606.120374][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 1606.268826][T24793] hsr_slave_0: left promiscuous mode [ 1606.280736][T24793] hsr_slave_1: left promiscuous mode [ 1606.281865][T24793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1606.281888][T24793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.513177][T24793] veth1_macvtap: left promiscuous mode [ 1606.526560][T24793] veth1_vlan: left promiscuous mode [ 1606.886715][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1607.137607][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8303'. [ 1608.355872][T21624] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 1608.515297][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8302'. [ 1608.517095][T28092] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 1608.662667][ T8261] gre2: entered promiscuous mode [ 1608.847036][ T8264] netlink: 'syz.4.8308': attribute type 3 has an invalid length. [ 1608.928300][ T8267] netlink: 'syz.3.8312': attribute type 1 has an invalid length. [ 1609.003477][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8310'. [ 1609.318590][ T8278] syzkaller0: entered promiscuous mode [ 1609.318618][ T8278] syzkaller0: entered allmulticast mode [ 1609.345919][ T8284] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1609.399041][T24793] IPVS: stop unused estimator thread 0... [ 1609.499373][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8310'. [ 1609.516032][ T8268] netlink: 49 bytes leftover after parsing attributes in process `syz.2.8310'. [ 1609.588326][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8313'. [ 1610.106964][ T8299] ip_tables: iptables: counters copy to user failed while replacing table [ 1610.524077][ T8317] netlink: 'syz.6.8324': attribute type 3 has an invalid length. [ 1610.600828][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1610.887814][ T8326] dummy0 speed is unknown, defaulting to 1000 [ 1610.892970][ T8330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8326'. [ 1611.000116][ T8330] [ 1611.002526][ T8330] ====================================================== [ 1611.009576][ T8330] WARNING: possible circular locking dependency detected [ 1611.016634][ T8330] syzkaller #0 Not tainted [ 1611.021077][ T8330] ------------------------------------------------------ [ 1611.028113][ T8330] syz.3.8326/8330 is trying to acquire lock: [ 1611.034113][ T8330] ffff8880854e6518 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1611.043074][ T8330] [ 1611.043074][ T8330] but task is already holding lock: [ 1611.050462][ T8330] ffff88802b7b1828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1611.060116][ T8330] [ 1611.060116][ T8330] which lock already depends on the new lock. [ 1611.060116][ T8330] [ 1611.070544][ T8330] [ 1611.070544][ T8330] the existing dependency chain (in reverse order) is: [ 1611.079583][ T8330] [ 1611.079583][ T8330] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 1611.087453][ T8330] __mutex_lock+0x19d/0x1550 [ 1611.092624][ T8330] elevator_change+0x1af/0x480 [ 1611.097948][ T8330] elevator_set_none+0xb5/0x140 [ 1611.103357][ T8330] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1611.109833][ T8330] nbd_start_device+0x189/0xb30 [ 1611.115335][ T8330] nbd_genl_connect+0x167d/0x1cd0 [ 1611.120913][ T8330] genl_family_rcv_msg_doit+0x233/0x340 [ 1611.127077][ T8330] genl_rcv_msg+0x614/0x7a0 [ 1611.132152][ T8330] netlink_rcv_skb+0x226/0x4a0 [ 1611.137525][ T8330] genl_rcv+0x28/0x40 [ 1611.142066][ T8330] netlink_unicast+0x7bd/0x940 [ 1611.147415][ T8330] netlink_sendmsg+0x813/0xb40 [ 1611.152761][ T8330] sock_sendmsg_nosec+0x13a/0x180 [ 1611.158361][ T8330] ____sys_sendmsg+0x54e/0x850 [ 1611.163687][ T8330] ___sys_sendmsg+0x2a5/0x360 [ 1611.168934][ T8330] __x64_sys_sendmsg+0x1b1/0x290 [ 1611.174439][ T8330] do_syscall_64+0x166/0x520 [ 1611.179599][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.186051][ T8330] [ 1611.186051][ T8330] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1611.194745][ T8330] blk_alloc_queue+0x544/0x690 [ 1611.200073][ T8330] __blk_mq_alloc_disk+0x194/0x390 [ 1611.205781][ T8330] nbd_dev_add+0x494/0xb60 [ 1611.210763][ T8330] nbd_init+0x168/0x1f0 [ 1611.215595][ T8330] do_one_initcall+0x250/0x870 [ 1611.220933][ T8330] do_initcall_level+0x10a/0x1a0 [ 1611.226435][ T8330] do_initcalls+0x59/0xa0 [ 1611.231326][ T8330] kernel_init_freeable+0x29d/0x3e0 [ 1611.237090][ T8330] kernel_init+0x22/0x1d0 [ 1611.241990][ T8330] ret_from_fork+0x514/0xb70 [ 1611.247167][ T8330] ret_from_fork_asm+0x1a/0x30 [ 1611.252499][ T8330] [ 1611.252499][ T8330] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 1611.259747][ T8330] fs_reclaim_acquire+0x71/0x100 [ 1611.265246][ T8330] __kmalloc_cache_node_noprof+0x66/0x620 [ 1611.271533][ T8330] create_worker+0x112/0x7c0 [ 1611.276709][ T8330] workqueue_prepare_cpu+0xe4/0x170 [ 1611.282471][ T8330] cpuhp_invoke_callback+0x434/0x810 [ 1611.288330][ T8330] _cpu_up+0x2ce/0x5b0 [ 1611.292972][ T8330] cpu_up+0x1d2/0x220 [ 1611.297520][ T8330] cpuhp_bringup_mask+0xb2/0x1a0 [ 1611.303167][ T8330] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 1611.309550][ T8330] bringup_nonboot_cpus+0x17/0x30 [ 1611.315158][ T8330] smp_init+0x32/0x110 [ 1611.319877][ T8330] kernel_init_freeable+0x27f/0x3e0 [ 1611.325646][ T8330] kernel_init+0x22/0x1d0 [ 1611.330556][ T8330] ret_from_fork+0x514/0xb70 [ 1611.335705][ T8330] ret_from_fork_asm+0x1a/0x30 [ 1611.341046][ T8330] [ 1611.341046][ T8330] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 1611.348816][ T8330] cpus_read_lock+0x42/0x160 [ 1611.353961][ T8330] static_key_slow_inc+0x12/0x30 [ 1611.359460][ T8330] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1611.365742][ T8330] nbd_genl_foreach_sock+0x265/0x450 [ 1611.371582][ T8330] nbd_genl_reconfigure+0xbbb/0x1040 [ 1611.377422][ T8330] genl_family_rcv_msg_doit+0x233/0x340 [ 1611.383523][ T8330] genl_rcv_msg+0x614/0x7a0 [ 1611.388577][ T8330] netlink_rcv_skb+0x226/0x4a0 [ 1611.393893][ T8330] genl_rcv+0x28/0x40 [ 1611.398423][ T8330] netlink_unicast+0x7bd/0x940 [ 1611.403734][ T8330] netlink_sendmsg+0x813/0xb40 [ 1611.409045][ T8330] sock_sendmsg_nosec+0x13a/0x180 [ 1611.414613][ T8330] ____sys_sendmsg+0x54e/0x850 [ 1611.419927][ T8330] ___sys_sendmsg+0x2a5/0x360 [ 1611.425142][ T8330] __x64_sys_sendmsg+0x1b1/0x290 [ 1611.430634][ T8330] do_syscall_64+0x166/0x520 [ 1611.435775][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.442225][ T8330] [ 1611.442225][ T8330] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 1611.449914][ T8330] __mutex_lock+0x19d/0x1550 [ 1611.455051][ T8330] nbd_queue_rq+0x373/0xff0 [ 1611.460094][ T8330] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1611.466184][ T8330] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1611.473131][ T8330] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1611.479685][ T8330] blk_mq_run_work_fn+0x16c/0x300 [ 1611.485263][ T8330] process_scheduled_works+0xc3d/0x1630 [ 1611.491352][ T8330] worker_thread+0xa47/0xfb0 [ 1611.496486][ T8330] kthread+0x38b/0x480 [ 1611.501176][ T8330] ret_from_fork+0x514/0xb70 [ 1611.506340][ T8330] ret_from_fork_asm+0x1a/0x30 [ 1611.511672][ T8330] [ 1611.511672][ T8330] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 1611.518918][ T8330] __mutex_lock+0x19d/0x1550 [ 1611.524059][ T8330] nbd_queue_rq+0xc1/0xff0 [ 1611.529111][ T8330] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1611.535213][ T8330] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1611.542088][ T8330] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1611.549044][ T8330] blk_mq_run_work_fn+0x16c/0x300 [ 1611.554624][ T8330] process_scheduled_works+0xc3d/0x1630 [ 1611.560715][ T8330] worker_thread+0xa47/0xfb0 [ 1611.565862][ T8330] kthread+0x38b/0x480 [ 1611.570495][ T8330] ret_from_fork+0x514/0xb70 [ 1611.575632][ T8330] ret_from_fork_asm+0x1a/0x30 [ 1611.580948][ T8330] [ 1611.580948][ T8330] -> #0 (set->srcu){.+.+}-{0:0}: [ 1611.588089][ T8330] __lock_acquire+0x164c/0x2de0 [ 1611.593482][ T8330] lock_sync+0xb3/0x130 [ 1611.598177][ T8330] __synchronize_srcu+0xc9/0x2f0 [ 1611.603650][ T8330] elevator_switch+0x1e8/0x7b0 [ 1611.608953][ T8330] elevator_change+0x2fa/0x480 [ 1611.614259][ T8330] elevator_set_default+0x375/0x440 [ 1611.620033][ T8330] blk_register_queue+0x3f3/0x4e0 [ 1611.625668][ T8330] __add_disk+0x6b8/0xdb0 [ 1611.630548][ T8330] add_disk_fwnode+0x100/0x3a0 [ 1611.635864][ T8330] nbd_dev_add+0x733/0xb60 [ 1611.640821][ T8330] nbd_genl_connect+0x96c/0x1cd0 [ 1611.646295][ T8330] genl_family_rcv_msg_doit+0x233/0x340 [ 1611.652385][ T8330] genl_rcv_msg+0x614/0x7a0 [ 1611.657431][ T8330] netlink_rcv_skb+0x226/0x4a0 [ 1611.662746][ T8330] genl_rcv+0x28/0x40 [ 1611.667270][ T8330] netlink_unicast+0x7bd/0x940 [ 1611.672576][ T8330] netlink_sendmsg+0x813/0xb40 [ 1611.677883][ T8330] sock_sendmsg_nosec+0x13a/0x180 [ 1611.683446][ T8330] ____sys_sendmsg+0x54e/0x850 [ 1611.688776][ T8330] ___sys_sendmsg+0x2a5/0x360 [ 1611.693995][ T8330] __x64_sys_sendmsg+0x1b1/0x290 [ 1611.699481][ T8330] do_syscall_64+0x166/0x520 [ 1611.704615][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.711047][ T8330] [ 1611.711047][ T8330] other info that might help us debug this: [ 1611.711047][ T8330] [ 1611.721294][ T8330] Chain exists of: [ 1611.721294][ T8330] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 1611.721294][ T8330] [ 1611.734982][ T8330] Possible unsafe locking scenario: [ 1611.734982][ T8330] [ 1611.742448][ T8330] CPU0 CPU1 [ 1611.747861][ T8330] ---- ---- [ 1611.753278][ T8330] lock(&q->elevator_lock); [ 1611.757895][ T8330] lock(&q->q_usage_counter(io)#51); [ 1611.765898][ T8330] lock(&q->elevator_lock); [ 1611.773032][ T8330] sync(set->srcu); [ 1611.776947][ T8330] [ 1611.776947][ T8330] *** DEADLOCK *** [ 1611.776947][ T8330] [ 1611.785107][ T8330] locks held by syz.3.8326/8330: 6, last CPU#1: [ 1611.791453][ T8330] #0: ffffffff902c46a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1611.799672][ T8330] #1: ffffffff902c44e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1611.808675][ T8330] #2: ffff88803bea59c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 1611.819069][ T8330] #3: ffff88802b7b18b0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 1611.828935][ T8330] #4: ffff88802b7b1338 (&q->q_usage_counter(queue)#55){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1611.839852][ T8330] #5: ffff88802b7b1828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1611.849739][ T8330] [ 1611.849739][ T8330] stack backtrace: [ 1611.855648][ T8330] CPU: 1 UID: 0 PID: 8330 Comm: syz.3.8326 Not tainted syzkaller #0 PREEMPT(full) [ 1611.864954][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1611.875030][ T8330] Call Trace: [ 1611.878328][ T8330] [ 1611.881279][ T8330] dump_stack_lvl+0xe8/0x150 [ 1611.885917][ T8330] print_circular_bug+0x2e2/0x300 [ 1611.890979][ T8330] check_noncircular+0x12f/0x150 [ 1611.895956][ T8330] __lock_acquire+0x164c/0x2de0 [ 1611.900831][ T8330] ? lockdep_unlock+0x5c/0xd0 [ 1611.905538][ T8330] ? __lock_acquire+0x1511/0x2de0 [ 1611.910588][ T8330] lock_sync+0xb3/0x130 [ 1611.914773][ T8330] ? __synchronize_srcu+0xb5/0x2f0 [ 1611.919905][ T8330] ? __synchronize_srcu+0xb5/0x2f0 [ 1611.925038][ T8330] __synchronize_srcu+0xc9/0x2f0 [ 1611.930016][ T8330] ? __pfx___synchronize_srcu+0x10/0x10 [ 1611.935594][ T8330] ? do_raw_spin_lock+0x12b/0x2f0 [ 1611.940651][ T8330] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1611.946489][ T8330] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1611.952074][ T8330] ? synchronize_srcu+0x20a/0x260 [ 1611.957137][ T8330] elevator_switch+0x1e8/0x7b0 [ 1611.961939][ T8330] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1611.967428][ T8330] elevator_change+0x2fa/0x480 [ 1611.972219][ T8330] ? do_raw_spin_unlock+0xf5/0x200 [ 1611.977375][ T8330] elevator_set_default+0x375/0x440 [ 1611.982600][ T8330] ? __pfx_elevator_set_default+0x10/0x10 [ 1611.988354][ T8330] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 1611.995547][ T8330] ? blk_crypto_sysfs_register+0x11c/0x170 [ 1612.001418][ T8330] blk_register_queue+0x3f3/0x4e0 [ 1612.006471][ T8330] __add_disk+0x6b8/0xdb0 [ 1612.010833][ T8330] add_disk_fwnode+0x100/0x3a0 [ 1612.015634][ T8330] nbd_dev_add+0x733/0xb60 [ 1612.020098][ T8330] ? __pfx_nbd_dev_add+0x10/0x10 [ 1612.025109][ T8330] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1612.030989][ T8330] ? bpf_lsm_capable+0x9/0x20 [ 1612.035693][ T8330] ? security_capable+0x7e/0x2c0 [ 1612.040661][ T8330] ? radix_tree_lookup+0x25c/0x290 [ 1612.045915][ T8330] nbd_genl_connect+0x96c/0x1cd0 [ 1612.050888][ T8330] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1612.056290][ T8330] ? rcu_is_watching+0x16/0xb0 [ 1612.061084][ T8330] ? trace_kmalloc+0x2a/0xf0 [ 1612.065700][ T8330] ? __kmalloc_noprof+0x38c/0x720 [ 1612.070747][ T8330] ? __nla_parse+0x40/0x60 [ 1612.075211][ T8330] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1612.081575][ T8330] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1612.087935][ T8330] genl_family_rcv_msg_doit+0x233/0x340 [ 1612.093542][ T8330] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1612.099642][ T8330] ? __lock_acquire+0x747/0x2de0 [ 1612.104603][ T8330] genl_rcv_msg+0x614/0x7a0 [ 1612.109132][ T8330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1612.114182][ T8330] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1612.119587][ T8330] netlink_rcv_skb+0x226/0x4a0 [ 1612.124387][ T8330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1612.129447][ T8330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1612.134769][ T8330] ? down_read+0x2be/0x330 [ 1612.139307][ T8330] genl_rcv+0x28/0x40 [ 1612.143337][ T8330] netlink_unicast+0x7bd/0x940 [ 1612.148133][ T8330] netlink_sendmsg+0x813/0xb40 [ 1612.152925][ T8330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.158329][ T8330] ? apparmor_socket_sendmsg+0x98/0x360 [ 1612.163897][ T8330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.169221][ T8330] sock_sendmsg_nosec+0x13a/0x180 [ 1612.174280][ T8330] ____sys_sendmsg+0x54e/0x850 [ 1612.179075][ T8330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1612.184405][ T8330] ? import_iovec+0x73/0xa0 [ 1612.188932][ T8330] ___sys_sendmsg+0x2a5/0x360 [ 1612.193644][ T8330] ? __lock_acquire+0x747/0x2de0 [ 1612.198606][ T8330] ? __pfx____sys_sendmsg+0x10/0x10 [ 1612.203866][ T8330] ? futex_wait+0x2a2/0x390 [ 1612.208412][ T8330] ? __fget_files+0x2a/0x420 [ 1612.213045][ T8330] ? __fget_files+0x3a2/0x420 [ 1612.217753][ T8330] __x64_sys_sendmsg+0x1b1/0x290 [ 1612.222721][ T8330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1612.228223][ T8330] do_syscall_64+0x166/0x520 [ 1612.232841][ T8330] ? trace_irq_disable+0x3b/0x140 [ 1612.237890][ T8330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.243984][ T8330] ? clear_bhb_loop+0x70/0xc0 [ 1612.248683][ T8330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.254598][ T8330] RIP: 0033:0x7f63b259e159 [ 1612.259035][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.278656][ T8330] RSP: 002b:00007f63b33b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1612.287093][ T8330] RAX: ffffffffffffffda RBX: 00007f63b2825fa0 RCX: 00007f63b259e159 [ 1612.295083][ T8330] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 1612.303248][ T8330] RBP: 00007f63b263506b R08: 0000000000000000 R09: 0000000000000000 [ 1612.311240][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1612.319229][ T8330] R13: 00007f63b2826038 R14: 00007f63b2825fa0 R15: 00007ffed1069f18 [ 1612.327239][ T8330] [ 1612.744702][ T8335] dummy0 speed is unknown, defaulting to 1000