last executing test programs: 4.594180464s ago: executing program 3 (id=8515): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000001000085000000550000001500020037000000bf010000000000008500000056000000b70000000200000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.216075137s ago: executing program 0 (id=8517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000706010800020000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r2, 0x25a2c000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r3, &(0x7f00000009c0)="b9ba", 0x2) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000007c0)={&(0x7f0000000780)=[{&(0x7f0000000580)="0382441dec9ea9f7961e5914c1b40aa0e5046f0ab3237e7181aa6585be6690fdf8db84ce5c12f36281bea28076176115cc45b73c24f0a5c677e11f4b9db6b774cb67ea52d1c90b1030637f533a8e1d0829ef685d79ea2297024cf307ef129634868a2be56b55a7681f059e087a83afe0ae2ffd214c000d8051", 0x79}, {&(0x7f0000000600)="20a1d18d375e7c106ae1e74aa934059a71a8069059531942f837d18d6a84dce54a58e68493280a9d5f9dc8bc9961b3cd3873e8146afbd489424386988620c0d2f821dba5e8a5cf9d59ab45a892d63d4e", 0x50}, {&(0x7f0000000680)="72a2fdc6503bb35e04f51fbd20fbed1e3d025ac8f1fb3c160f430d6834d9911d45bfb42be3cddb785b2a1396c7f03d5be5cf0b2dbd48ca13cc9b2124198441e3a2c4d954e3fb048b4fb47ffeb2e9dce1159b66c13d4bdcfe65885b9bd4cd49c8611069e7c42a0bb4ef2c48eda319affc66497c6e7c9b1f268159f173ee41cb", 0x7f}, {&(0x7f0000000700)="52aa9f5465c3bd527a003d00bd45a9cbea8e69bc0cd1da935369694505b16040c943ec358edfa14807b44cd166efe6a8e96dde25bc858f393b320bbdb9750042fa", 0x41}], 0x4, 0xfffffffffff00000, 0x0, 0x7, 0x8d7, 0x2, 0x6, 0x2}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000001c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x3}], 0x1, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000840)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000880)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)='ip6tnl0\x00'}) recvmsg(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="080025bd7000fffbdf250100000005009a4ef98f1621b12e0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x94) recvmmsg(r4, &(0x7f0000000a80), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, r4, 0xffffd000) 4.046361572s ago: executing program 4 (id=8519): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000000e"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r4}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000880)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3, 0x0, 0x100, 0x20000000000008, 0x46000a, r6}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000e40)={&(0x7f0000000d40), 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x70, 0x2, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x85}, 0x20000800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x27, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2a00000, 0x0, 0x0, 0x0, 0x80000001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x43}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x8, 0xe, &(0x7f0000000b00)=""/14, 0x1f00, 0x8, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xe, 0x6, 0x8}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000bc0)=[{0x2, 0x4, 0x2, 0x6}, {0x1, 0x1, 0x2, 0x6}, {0x4, 0x1, 0x3}, {0x4, 0x5, 0xf, 0x7}, {0x0, 0x3, 0x8, 0x8}, {0x4, 0x3, 0x1, 0x7}, {0x1, 0x4, 0xd, 0x4}, {0x5, 0x4, 0x2, 0x1}, {0x5, 0x2, 0x2}, {0x4, 0x2, 0xf, 0xb}], 0x10, 0x7}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000108080604"], 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socketpair(0x2b, 0x4, 0x6, &(0x7f0000000780)) r11 = openat$cgroup_ro(r0, &(0x7f0000000440)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000780)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2800003, 0x1010, r1, 0xaa2c5000) ioctl$TUNSETCARRIER(r11, 0x400454e2, &(0x7f00000007c0)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000280)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) 3.94922447s ago: executing program 3 (id=8520): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x36, 0x301, 0x70bd25, 0xfffffffc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300000008004a000100000008004b00cc000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000006f14e90a00001400078008001140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 3.948798098s ago: executing program 2 (id=8521): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000004100872adc5ffcb6f104ffff017c0000040042800c000180060006000a01000010000280090014800400028076000000"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xfffffffffffffffb, 0x1) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x5, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0xc, 0x3, [{0x1, 0x6, "5c1df659"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x100}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffe3c, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000400)=0x0) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="400109"], 0x87) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000006c0)={0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000700)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x5}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r12, 0x84, 0x83, &(0x7f00000007c0)={r13, 0x2}, &(0x7f0000000800)=0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 3.666987259s ago: executing program 3 (id=8523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000001800850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.642147338s ago: executing program 0 (id=8524): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{*\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x5]}, {0x1800, 0x9, 0x4c8f, 0xd043}}, 0x7ff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000440)=':@\x00', 0x600401, &(0x7f0000000480)={@_ha_fsid={[0x6, 0x8]}, {0x3, 0x5, 0x8, 0x3}}, 0x1, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xa}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x1b, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x58f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0xff, 0xb, 0x2, 0x7, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0x8, 0x18, &(0x7f00000003c0)=""/24, 0x41000, 0x4d, '\x00', r3, @fallback=0xd, r4, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x5, 0x3, 0x10001}, 0x10, r5, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000900)=[{0x1, 0x2, 0x5, 0x3}, {0x1, 0x4, 0xe, 0x8}, {0x3, 0x1, 0x8, 0x5}], 0x10, 0x7ba6}, 0x94) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000a00)=0x2, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000a40)={{0x8, @private=0xa010102, 0x4e20, 0x0, 'rr\x00', 0x70, 0x800, 0x33}, {@loopback, 0x4e20, 0x2, 0x7, 0x120, 0x7}}, 0x44) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@cgroup=r4, 0x2f, 0x0, 0x6, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@cgroup=r4, 0xffffffffffffffff, 0x18, 0x2020, 0x0, @void, @void, @value, @void, r6}, 0x20) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000c40)=0x697d) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001200)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d00)={0x4c0, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xed04d24}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d2143e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4389}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa329}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x724929ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x473d8a9a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f8b76a9}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c3fb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20bedbe8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x937d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26403b9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0c5}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17496221}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x260d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51cd9775}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x582aa13b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fa6c763}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7280}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6616}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x158, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x262d654d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x624fc7e1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dedf226}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d8a3704}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2ac772}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10cd4993}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x340e73eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a517bae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeaed4eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x123e3b80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7784b843}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31211c16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x362f54b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x492aa7d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37cff5e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x15c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe74f762}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6de05af3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x508a5acf}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25ad2dd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x881e3e5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82a0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x741897bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17fa6c95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x372c3c9d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb33a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e734989}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd5e83be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb32c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaed6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf41c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4435fe3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ded799e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a8f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c11e016}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc24b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6053908b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bb8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3572a0fc}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe80df19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25293778}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cbce147}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb49926a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x647f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x487b80f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c7962c7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x459a2f59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19e62e04}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43009e16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2b2506}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cd3f6da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c3cdcda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26db3a61}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39e142a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4373cdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b829449}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x24004841}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001280), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000012c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001300)=0x0) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, r9, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001400), &(0x7f0000001440)=0xc) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000014c0), r7) r13 = socket(0x29, 0x5, 0x10001) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x88, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x582}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x750676ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '['}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 3.26881213s ago: executing program 0 (id=8526): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02eaff0020bb4500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="010000000300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYRES8=r0], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.2133579s ago: executing program 3 (id=8527): syz_emit_ethernet(0x38, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x2, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, {[], '\a\x00'}}}}}, 0x0) r0 = socket(0x26, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket(0x8, 0x80000, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0x3, 0x2}], 0x10, 0xe840}, 0x94) accept4$tipc(r2, 0x0, &(0x7f0000000100), 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) write(r1, &(0x7f0000000140)="3c026385308d4de9070a654fa68df79057c2105f2b163339221f5ac3f8a7ccb1f287362d0f114f3246fa726cf836862b7f42318549b4ec0df2ea25ef18ecf0dd9aafaa111c459dfa05d77ba81a58bfeb090caed15ff66420a6108bd294c92a41fca5944e1a9551ea834b24a0e8ea282467c311049da45253528c25553ffb94b25305c3c079f90932bb0961db04c4d83e50e50b2a986a033114f1e79c00f712af80703c638079ecb2c31cf30add64", 0xae) syz_emit_ethernet(0x38, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x2, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, {[], '\a\x00'}}}}}, 0x0) (async) socket(0x26, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket(0x8, 0x80000, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0x3, 0x2}], 0x10, 0xe840}, 0x94) (async) accept4$tipc(r2, 0x0, &(0x7f0000000100), 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) (async) write(r1, &(0x7f0000000140)="3c026385308d4de9070a654fa68df79057c2105f2b163339221f5ac3f8a7ccb1f287362d0f114f3246fa726cf836862b7f42318549b4ec0df2ea25ef18ecf0dd9aafaa111c459dfa05d77ba81a58bfeb090caed15ff66420a6108bd294c92a41fca5944e1a9551ea834b24a0e8ea282467c311049da45253528c25553ffb94b25305c3c079f90932bb0961db04c4d83e50e50b2a986a033114f1e79c00f712af80703c638079ecb2c31cf30add64", 0xae) (async) 2.996903432s ago: executing program 0 (id=8528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000ac0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000b00)={&(0x7f0000000b40)=""/74, 0x513000, 0x1000, 0x0, 0x1}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYRES64=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x20, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000002540)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000f, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002580)={@fallback=r5, 0x2f, 0x0, 0x0, &(0x7f00000025c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000020000100ffffffffffdbdf250200000000000002efff010008000400fbffffff0c001400", @ANYRES32, @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r7) recvmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000980)={&(0x7f00000009c0)=""/200, 0x1210000, 0x1000, 0x7, 0x3}, 0x20) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r11, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x6, 0x704, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000c00)={'netdevsim0\x00', &(0x7f0000000c40)=@ethtool_ringparam={0x11, 0xfffffffc, 0x7, 0x7f, 0x1, 0x9, 0xffffffff, 0x0, 0x6}}) connect$packet(r8, &(0x7f0000000680)={0x11, 0x2, r11, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@getqdisc={0x40, 0x26, 0x202, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0xffe0}, {0x4, 0x10}, {0x0, 0x7}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x4) 2.977751502s ago: executing program 2 (id=8529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) pread64(r0, &(0x7f0000000f00)=""/173, 0xad, 0x10001) (async) pread64(r0, &(0x7f0000000f00)=""/173, 0xad, 0x10001) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="9f0e3969de6500322569f897c10e8d65a6d86a1927679ee2d1fe838ef696764ab359bb51ed23591b08003823c060e589d8031432713e2caff22a2d9e0584f64ff7a76ed54d625c4e211d9f15288ef7cdd9c0aaf26519de1089d96d218389b61e5d100ab71a56820207bbaf885b45d4360f15c8ea3baf4bedf17392faef94c56d7e8f846726ae89e24c6c9b1bc3bbe2385fddfac6"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8000000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r4}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0xe501, 0x3, 0x258, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074"], 0x104}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000840)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xb}, {0xfff8, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r11 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000b80)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000000000000000000000000000ff020000000000000000000000000001042081000002892f00000800000086dd88a888be000000001000000001000000000000f5070022eb00000000200000000200000000000000000000000c006558000000004fdf80805dd5958e4bb1c3eb1bbb04ec2ca439a1ff81d09c2040ebc6ef46075f3aa238"], 0x0) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000b00)=0x207, 0x4) (async) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000b00)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000b40)={'syzkaller0\x00'}) 2.760339779s ago: executing program 4 (id=8530): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000300), 0x40000000000009f, 0x0) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="49d3", 0x2}], 0x1}}], 0x1, 0x20008000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000580)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000005c0)={r3}, 0x8) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x4c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="9fb5a0e728e146f1d3de5302d99b54e3b7bf2abfdc970e7224f72d"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000"], 0x0, 0x3c}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r6}, &(0x7f00000008c0), &(0x7f0000000900)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r6}, &(0x7f0000000980), &(0x7f00000009c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{r6}, &(0x7f0000000a40), &(0x7f0000000a80)='%+9llu \x00'}, 0x20) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/112, 0x70}], 0x1}, 0x121) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c40)={'syzkaller0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x9c2) sendmsg$can_raw(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@can={{0x1, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "72abcfd66c3dcc7f"}, 0x10}, 0x1, 0x0, 0x0, 0x4004044}, 0x80) shutdown(r1, 0x1) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.730962577s ago: executing program 0 (id=8532): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000080)=[{r0, 0xc511}], 0x1, 0x0, &(0x7f00000002c0)={[0x4]}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) close(0x3) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ab00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000280)="4c00000011000f140011000200001a0002000000200000", 0x17) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000640)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0xa002a0, 0x10, 0x18, &(0x7f0000000700)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000780)=""/24, 0x6414, 0x0, 0x24, 0x0, &(0x7f00000007c0), &(0x7f0000000800)}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000008c0)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r4, &(0x7f0000000900)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000940)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000980)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000a80), 0x4) sendto$inet(r4, &(0x7f0000000ac0), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000b00)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, 0x0, 0x20000081) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b80)={'ipvlan1\x00', 0x4000}) (async) socket(0x1, 0x80000, 0x10001) 1.649875767s ago: executing program 2 (id=8533): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000100), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000b80), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000bc0)={0x1}, 0x8) sendmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="04a735cf54b54d01ad3c1441652985ec5d969287caff5fe471b737e2f8adb88a162a38c4efad42379a409030ba11e7cc4c7481f4c8e91760c55c", 0x3a}], 0x1, 0x0, 0x3}}], 0x1, 0x24008094) close(0x4) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) setsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz0\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x76, 0xae7, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000d00)={0x1f, 0x0, 0x1}, 0x6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40), 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESDEC=r0], 0xfdb3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r7, 0x81f42000) 1.607156915s ago: executing program 4 (id=8534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000a80)={r0, &(0x7f0000000080)='ip6_vti0\x00', 0x2000, &(0x7f00000009c0)={@align=0x1, {0xc0, 0x40, 0x2, 0x3}}, 0x8b8e, &(0x7f0000000a00)={@_ha_fsid}, &(0x7f0000000a40)=0xc5}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000706010800020000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000007c0)={&(0x7f0000000780)=[{&(0x7f0000000580)="0382441dec9ea9f7961e5914c1b40aa0e5046f0ab3237e7181aa6585be6690fdf8db84ce5c12f36281bea28076176115cc45b73c24f0a5c677e11f4b9db6b774cb67ea52d1c90b1030637f533a8e1d0829ef685d79ea2297024cf307ef129634868a2be56b55a7681f059e087a83afe0ae2ffd214c000d8051", 0x79}, {&(0x7f0000000600)="20a1d18d375e7c106ae1e74aa934059a71a8069059531942f837d18d6a84dce54a58e68493280a9d5f9dc8bc9961b3cd3873e8146afbd489424386988620c0d2f821dba5e8a5cf9d59ab45a892d63d4e", 0x50}, {&(0x7f0000000680)="72a2fdc6503bb35e04f51fbd20fbed1e3d025ac8f1fb3c160f430d6834d9911d45bfb42be3cddb785b2a1396c7f03d5be5cf0b2dbd48ca13cc9b2124198441e3a2c4d954e3fb048b4fb47ffeb2e9dce1159b66c13d4bdcfe65885b9bd4cd49c8611069e7c42a0bb4ef2c48eda319affc66497c6e7c9b1f268159f173ee41cb", 0x7f}, {&(0x7f0000000700)="52aa9f5465c3bd527a003d00bd45a9cbea8e69bc0cd1da935369694505b16040c943ec358edfa14807b44cd166efe6a8e96dde25bc858f393b320bbdb9750042fa", 0x41}], 0x4, 0xfffffffffff00000, 0x0, 0x3, 0x8d7, 0x2, 0x6, 0x2}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000180)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000001c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026", 0x39}], 0x3}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000840)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000880)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)='ip6tnl0\x00'}) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="002e000100"/22], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x94) recvmmsg(r2, &(0x7f0000000a80), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, r2, 0xffffd000) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000ac0)={0x0, @broadcast, 0x4e21, 0x4, 'sh\x00', 0x20, 0x5, 0x24}, 0x2c) 1.499437051s ago: executing program 1 (id=8535): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380700001000014025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b0000000000080029000000010008000d0080000000"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001e00010026bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000a00020008001300", @ANYRES32=0x0, @ANYBLOB="08000f0007000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000780)=""/222, 0x0, 0x8}, 0x78) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f00000008c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x31, &(0x7f0000000900)=0x6, 0x4) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f00000003c0)=0x7, 0x4) getsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000000980)=""/33, &(0x7f00000009c0)=0x21) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) socket$inet6(0xa, 0x80002, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) 1.299618488s ago: executing program 1 (id=8536): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000100)=0x10) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000200)=""/4145, &(0x7f0000001240)=0x1031) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) 1.10635859s ago: executing program 4 (id=8537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 784.796721ms ago: executing program 2 (id=8538): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{*\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x5]}, {0x1800, 0x9, 0x4c8f, 0xd043}}, 0x7ff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x7}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00'}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000440)=':@\x00', 0x600401, &(0x7f0000000480)={@_ha_fsid={[0x6, 0x8]}, {0x3, 0x5, 0x8, 0x3}}, 0x1, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xa}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0x1b, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x58f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @generic={0xff, 0xb, 0x2, 0x7, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0x8, 0x18, &(0x7f00000003c0)=""/24, 0x41000, 0x4d, '\x00', r3, @fallback=0xd, r4, 0x8, &(0x7f0000000580)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x5, 0x3, 0x10001}, 0x10, r5, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000900)=[{0x1, 0x2, 0x5, 0x3}, {0x1, 0x4, 0xe, 0x8}, {0x3, 0x1, 0x8, 0x5}], 0x10, 0x7ba6}, 0x94) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000a00)=0x2, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000a40)={{0x8, @private=0xa010102, 0x4e20, 0x0, 'rr\x00', 0x70, 0x800, 0x33}, {@loopback, 0x4e20, 0x2, 0x7, 0x120, 0x7}}, 0x44) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@cgroup=r4, 0x2f, 0x0, 0x6, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@cgroup=r4, 0xffffffffffffffff, 0x18, 0x2020, 0x0, @void, @void, @value, @void, r6}, 0x20) ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000c40)=0x697d) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001200)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000d00)={0x4c0, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x108, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xed04d24}]}, {0x4}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d2143e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4389}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa329}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x724929ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x473d8a9a}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f8b76a9}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c3fb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20bedbe8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x937d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26403b9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0c5}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17496221}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x260d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51cd9775}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x582aa13b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fa6c763}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7280}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6616}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x158, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x262d654d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x624fc7e1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dedf226}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d8a3704}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2ac772}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10cd4993}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x340e73eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a517bae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeaed4eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x123e3b80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7784b843}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31211c16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x362f54b5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x492aa7d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37cff5e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x15c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe74f762}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6de05af3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x508a5acf}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x49c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25ad2dd8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x881e3e5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82a0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x741897bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17fa6c95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x372c3c9d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb33a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e734989}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd5e83be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb32c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaed6}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf41c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4435fe3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ded799e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc09}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7a8f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c11e016}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc24b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6053908b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bb8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3572a0fc}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe80df19}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25293778}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cbce147}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca8a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb49926a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x647f}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x487b80f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c7962c7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x459a2f59}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19e62e04}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43009e16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2b2506}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cd3f6da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c3cdcda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26db3a61}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39e142a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4373cdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b829449}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x24004841}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001280), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000012c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001300)=0x0) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, r9, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001400), &(0x7f0000001440)=0xc) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000014c0), r7) r13 = socket(0x29, 0x5, 0x10001) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001600)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x88, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x582}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x750676ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '['}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 771.692271ms ago: executing program 1 (id=8539): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) 662.123771ms ago: executing program 1 (id=8540): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa20000000000000702b0ffc0ffffff85000000cf000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 638.163132ms ago: executing program 3 (id=8541): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='a', 0x1}], 0x1000017c, 0x0, 0x0, 0x44}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000ec0)='N', 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000e80)=0x804, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000d40)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x42, 0xfe, 0x0, 0xfe, 0x0, 0x8}, 0xe) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000b40)=0x40, 0x4) sendmmsg$inet_sctp(r2, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000f00)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=ANY=[@ANYBLOB="05000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0c00000004000400040000800000008020240500", @ANYRES32=r5, @ANYRES8=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r2, @ANYRES32, @ANYBLOB], 0x50) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000f40)=""/4096) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r6, 0x4221c000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x13, r6, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000d00)={0x1100, 0x0, 0x52, 0x11000}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="240000000206010200000000000000000a0000070d0103e46c6973743a73657400000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000811) recvmsg$kcm(r2, &(0x7f0000002040)={0x0, 0x32, 0x0}, 0x400000a2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x24, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002080)={0x0, 0xfffffffffffffff7, 0xfffffffffffffffe}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000980)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000580)={r9, 0x9, 0x4000000000000000, 0x1}) 517.733038ms ago: executing program 1 (id=8542): socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x366, 0x10, &(0x7f0000000540), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getpeername$packet(r2, 0x0, &(0x7f0000000380)) 513.231289ms ago: executing program 4 (id=8543): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000100)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r3, 0x205, 0x72bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x2}}]}, 0x44}}, 0x20000000) 512.095079ms ago: executing program 2 (id=8544): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x0, @void}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000840)={'syztnl0\x00', r6, 0x10, 0x40, 0x8, 0x3, {{0x15, 0x4, 0x3, 0x1a, 0x54, 0x65, 0x0, 0xb, 0x4, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x6, 0x8, "e19b6f33a4e5"}, {0x0, 0x4, "0fe2"}, {0x3, 0x12, "62cf2c36eebdfdea61e82daa2a7df221"}]}, @noop, @rr={0x7, 0xf, 0x91, [@loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ra={0x94, 0x4, 0x1}, @noop, @end]}}}}}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = socket$inet6(0xa, 0x3, 0x7) socketpair(0x1e, 0x3, 0xc330, &(0x7f0000000140)={0xffffffffffffffff}) connect(r12, &(0x7f0000000480)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80) setsockopt$inet6_buf(r11, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r11, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r11, 0x29, 0x3b, &(0x7f0000000200)={0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 466.032035ms ago: executing program 0 (id=8545): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000001ac0)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0x5) syz_emit_ethernet(0x36, &(0x7f0000001b00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e21, 0x4e20, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183fdfffffffddbdf2519000000180001801400020076657468315f746f5f626f6e640000008721d5e47489141ef85232c65dc7cf0b7e41363a634f9d9392379c831713648c4a0b29a1ca486d7e239233877b9d30060a06e9d3f375e8e254993bc0dd463c1dd31be2c69c7a14e1a82b52cb8dd480349b07296c2d000edb27ef41"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x406c810) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)={0x28, r5, 0x301, 0x30bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80001040}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x64, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001dc0), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001e00)={'wg0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="2c0000001800835e00000000f7bfffff021480fc0202fe020003000008000400", @ANYRES32=r8, @ANYBLOB="0800070080"], 0x2c}, 0x1, 0xffffff7f, 0x0, 0xe823c84796510d52}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001f80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000019c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x24, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x8004) r9 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r9, &(0x7f00000018c0)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x6, &(0x7f0000001800)=""/181, 0xb5}, 0x2000) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r10, 0x0, 0xcf, 0xfffffffffffffffd, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001a80)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x18, 0xb1, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 249.395429ms ago: executing program 2 (id=8546): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000002000000000000000200000d0a00000001000000030000000500000002000000000000000002000604"], &(0x7f0000000640)=""/4079, 0x72, 0xfef, 0x1, 0x410}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000400)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000480)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000004c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffff"], 0x4c}}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}}, 0x0) 153.915467ms ago: executing program 1 (id=8547): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x400, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x77}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x0, 0x7fffd}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0xa, 0x3, 0x3a) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfa78}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x4048000) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, 0x10, 0x20, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x4, 0x6, 0x0, 0x2, 0x2, 0x6, 0x158, 0x100}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4082) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000b00), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x54, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x93, 0xb, 0xb5a}, {0x6}, {0x8, 0x13, 0x100}, {0x5, 0x14, 0xfd}}]}, 0x54}}, 0xc000) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) 47.876931ms ago: executing program 4 (id=8548): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd703004000000050008000600010005000000080009000200000008000b000000000008000c00a80a0000c956184fc67c5f858bcef8515bdb58ebcf23a5a1e277cb774295e19a4a014be43b69f9d4195d0eed2fa6d1ffe182e3ce6fcbf90f9bb4852273de32b1e7254be79620dd63759cb153059d67615bee956ca989e31c05ca729a78655400d135e0d3002ce7943c2208e3102d8c2daeb69ef81f80"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x2040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010000304000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="30080096000000ee7582258009000100626f6e64000000001c0002800600190007000400000008001a00e07529f3d030b8a429fd3b766a00000201edffffffff028ffd4b704365f09eed1d3a4545a9473ed5a591c2c18ab69d3398b000557361feb3b5b19bf09e8afa52072686a02185623f0158dfb969a137b7713fa06a239470912d932c086e69acb99a199df9845db934352950664759c21eb6315513fcb756097775757fae83d6f120bdc69445d6f3a8bd70182fce633eda9837ec39db22b97599728edf9b13bf0cdbebfd004e7aab670c30d5a36b60758bc952f1b526aec92f052e2b"], 0x4c}, 0x1, 0xba01}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd703004000000050008000600010005000000080009000200000008000b000000000008000c00a80a0000c956184fc67c5f858bcef8515bdb58ebcf23a5a1e277cb774295e19a4a014be43b69f9d4195d0eed2fa6d1ffe182e3ce6fcbf90f9bb4852273de32b1e7254be79620dd63759cb153059d67615bee956ca989e31c05ca729a78655400d135e0d3002ce7943c2208e3102d8c2daeb69ef81f80"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x2040) (async) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010000304000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="30080096000000ee7582258009000100626f6e64000000001c0002800600190007000400000008001a00e07529f3d030b8a429fd3b766a00000201edffffffff028ffd4b704365f09eed1d3a4545a9473ed5a591c2c18ab69d3398b000557361feb3b5b19bf09e8afa52072686a02185623f0158dfb969a137b7713fa06a239470912d932c086e69acb99a199df9845db934352950664759c21eb6315513fcb756097775757fae83d6f120bdc69445d6f3a8bd70182fce633eda9837ec39db22b97599728edf9b13bf0cdbebfd004e7aab670c30d5a36b60758bc952f1b526aec92f052e2b"], 0x4c}, 0x1, 0xba01}, 0x0) (async) 0s ago: executing program 3 (id=8549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000010c0)=ANY=[@ANYRESOCT], 0x118}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r1], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x4004040) r2 = socket(0x2b, 0x1, 0x41) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x4) connect$inet6(r2, &(0x7f0000000b80)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000002}, 0x1c) connect$inet6(r2, &(0x7f0000000bc0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x81}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x11, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000008000000000", @ANYRESHEX=r1, @ANYRES32=r6, @ANYRES8=r5], 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000f00)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000f40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x8, 0x10, &(0x7f0000001080), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'veth1_vlan\x00'}) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0xfddf, &(0x7f0000000ac0)={&(0x7f0000000200)=ANY=[], 0x128}}, 0x40) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000001200), 0x0, 0x20044000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000008c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES8=r1, @ANYBLOB="050003491b92dfa8c52f8ef4af290ff9760279f81c8b2671bc9f64734124613fa0bcbed2fd68fbd0de2ff41b7951f8ebea1be00b0ba44e5f223ccfbeecf5c8774b5536b915a1cd48757f9629e32410e91762c69e93a48cd88b80b8cb95d81f8b0e6300eb7df73fcea044201f01d968d651171e7c72954ae66bb4a694efd56fc08f0eb1e6292ef467a401184b83c7e86bc2e09727024a6846fbb393bf01db23c50734537d13373f7e3950d418b0b597715ffb6a63792dcee0"], 0x28}}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000e22f5e1aeab3651900010000007fffe400", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001100)=ANY=[@ANYBLOB="60000010", @ANYBLOB="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", @ANYBLOB="010026bd70000000000039000000080003000bbba4809f51c9d5f688d38c6aef831e1d5c7cb52dfa725dc00c8a9477afb18e262b885164d8727303a80000000000", @ANYRES8=r9, @ANYBLOB="04005a80"], 0x20}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x1c, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 7f96a7507090 R08: 0000000000000000 R09: 0000000000000000 [ 972.540909][ T2536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.540920][ T2536] R13: 00007f96a6826038 R14: 00007f96a6825fa0 R15: 00007fff79594d48 [ 972.540953][ T2536] [ 972.858616][ T2540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7568'. [ 972.962382][ T2540] syzkaller1: entered promiscuous mode [ 972.962407][ T2540] syzkaller1: entered allmulticast mode [ 972.978299][ T2540] 0: reclassify loop, rule prio 0, protocol 03 [ 973.156101][ T2555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7573'. [ 973.218305][ T2558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7574'. [ 973.219935][ T2559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7575'. [ 973.219954][ T2559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7575'. [ 973.281631][ T2567] FAULT_INJECTION: forcing a failure. [ 973.281631][ T2567] name failslab, interval 1, probability 0, space 0, times 0 [ 973.281663][ T2567] CPU: 1 UID: 0 PID: 2567 Comm: syz.0.7576 Not tainted syzkaller #0 PREEMPT(full) [ 973.281683][ T2567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 973.281694][ T2567] Call Trace: [ 973.281702][ T2567] [ 973.281714][ T2567] dump_stack_lvl+0xe8/0x150 [ 973.281747][ T2567] should_fail_ex+0x410/0x560 [ 973.281778][ T2567] should_failslab+0xa8/0x100 [ 973.281804][ T2567] __kmalloc_noprof+0xfe/0x720 [ 973.281826][ T2567] ? security_sk_alloc+0x52/0x360 [ 973.281843][ T2567] ? security_sk_alloc+0x52/0x360 [ 973.281868][ T2567] security_sk_alloc+0x52/0x360 [ 973.281889][ T2567] sk_prot_alloc+0x101/0x210 [ 973.281906][ T2567] ? sk_alloc+0x27/0x390 [ 973.281925][ T2567] sk_alloc+0x3a/0x390 [ 973.281946][ T2567] bpf_prog_test_run_skb+0x3a6/0x2230 [ 973.281970][ T2567] ? lock_acquire+0x115/0x350 [ 973.282003][ T2567] ? __fget_files+0x3a2/0x420 [ 973.282028][ T2567] ? __fget_files+0x2a/0x420 [ 973.282057][ T2567] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 973.282081][ T2567] bpf_prog_test_run+0x2c5/0x340 [ 973.282105][ T2567] __sys_bpf+0xa22/0xd90 [ 973.282132][ T2567] ? __pfx___sys_bpf+0x10/0x10 [ 973.282172][ T2567] ? __fget_files+0x2a/0x420 [ 973.282215][ T2567] ? ksys_write+0x242/0x270 [ 973.282236][ T2567] ? __pfx_ksys_write+0x10/0x10 [ 973.282261][ T2567] __x64_sys_bpf+0xba/0xd0 [ 973.282283][ T2567] do_syscall_64+0x166/0x520 [ 973.282308][ T2567] ? trace_irq_disable+0x3b/0x140 [ 973.282327][ T2567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.282346][ T2567] ? clear_bhb_loop+0x70/0xc0 [ 973.282368][ T2567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.282386][ T2567] RIP: 0033:0x7f31fff9e559 [ 973.282402][ T2567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.282417][ T2567] RSP: 002b:00007f3200f47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 973.282437][ T2567] RAX: ffffffffffffffda RBX: 00007f3200225fa0 RCX: 00007f31fff9e559 [ 973.282450][ T2567] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 973.282462][ T2567] RBP: 00007f3200f47090 R08: 0000000000000000 R09: 0000000000000000 [ 973.282474][ T2567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.282485][ T2567] R13: 00007f3200226038 R14: 00007f3200225fa0 R15: 00007fffc782e808 [ 973.282515][ T2567] [ 973.490230][ T2559] netlink: 'syz.4.7575': attribute type 62 has an invalid length. [ 973.561576][ T2573] lo: Caught tx_queue_len zero misconfig [ 973.752536][ T2579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7577'. [ 973.752567][ T2579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7577'. [ 973.957046][ T2586] netlink: 'syz.3.7580': attribute type 26 has an invalid length. [ 974.505539][ T2599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 974.713454][ T2614] FAULT_INJECTION: forcing a failure. [ 974.713454][ T2614] name failslab, interval 1, probability 0, space 0, times 0 [ 974.713487][ T2614] CPU: 1 UID: 0 PID: 2614 Comm: syz.0.7587 Not tainted syzkaller #0 PREEMPT(full) [ 974.713507][ T2614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 974.713518][ T2614] Call Trace: [ 974.713526][ T2614] [ 974.713537][ T2614] dump_stack_lvl+0xe8/0x150 [ 974.713566][ T2614] should_fail_ex+0x410/0x560 [ 974.713595][ T2614] should_failslab+0xa8/0x100 [ 974.713621][ T2614] __kmalloc_node_noprof+0x100/0x720 [ 974.713640][ T2614] ? __get_vm_area_node+0x200/0x2f0 [ 974.713666][ T2614] ? __get_vm_area_node+0x283/0x2f0 [ 974.713691][ T2614] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 974.713708][ T2614] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 974.713733][ T2614] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 974.713766][ T2614] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 974.713803][ T2614] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 974.713824][ T2614] ? apparmor_capable+0x126/0x170 [ 974.713845][ T2614] ? bpf_lsm_capable+0x9/0x20 [ 974.713864][ T2614] ? security_capable+0x7e/0x2c0 [ 974.713890][ T2614] ? bpf_check+0x115b/0x2ef0 [ 974.713910][ T2614] __vmalloc_noprof+0xd2/0x120 [ 974.713929][ T2614] ? bpf_check+0x115b/0x2ef0 [ 974.713951][ T2614] bpf_check+0x115b/0x2ef0 [ 974.713990][ T2614] ? __pfx_bpf_check+0x10/0x10 [ 974.714014][ T2614] ? bpf_obj_name_cpy+0x194/0x1e0 [ 974.714044][ T2614] bpf_prog_load+0x14d6/0x1c20 [ 974.714085][ T2614] ? __pfx_bpf_prog_load+0x10/0x10 [ 974.714130][ T2614] __sys_bpf+0xd0d/0xd90 [ 974.714160][ T2614] ? __pfx___sys_bpf+0x10/0x10 [ 974.714192][ T2614] ? __fget_files+0x2a/0x420 [ 974.714234][ T2614] ? ksys_write+0x242/0x270 [ 974.714256][ T2614] ? __pfx_ksys_write+0x10/0x10 [ 974.714279][ T2614] __x64_sys_bpf+0xba/0xd0 [ 974.714302][ T2614] do_syscall_64+0x166/0x520 [ 974.714326][ T2614] ? trace_irq_disable+0x3b/0x140 [ 974.714345][ T2614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.714365][ T2614] ? clear_bhb_loop+0x70/0xc0 [ 974.714388][ T2614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.714406][ T2614] RIP: 0033:0x7f31fff9e559 [ 974.714422][ T2614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.714437][ T2614] RSP: 002b:00007f3200f47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.714458][ T2614] RAX: ffffffffffffffda RBX: 00007f3200225fa0 RCX: 00007f31fff9e559 [ 974.714472][ T2614] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 974.714484][ T2614] RBP: 00007f3200f47090 R08: 0000000000000000 R09: 0000000000000000 [ 974.714496][ T2614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.714508][ T2614] R13: 00007f3200226038 R14: 00007f3200225fa0 R15: 00007fffc782e808 [ 974.714538][ T2614] [ 974.756044][ T2614] syz.0.7587: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 974.756119][ T2614] CPU: 1 UID: 0 PID: 2614 Comm: syz.0.7587 Not tainted syzkaller #0 PREEMPT(full) [ 974.756140][ T2614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 974.756152][ T2614] Call Trace: [ 974.756161][ T2614] [ 974.756170][ T2614] dump_stack_lvl+0xe8/0x150 [ 974.756202][ T2614] warn_alloc+0x24d/0x270 [ 974.756229][ T2614] ? __pfx_warn_alloc+0x10/0x10 [ 974.756256][ T2614] ? __kmalloc_node_noprof+0x4d7/0x720 [ 974.756275][ T2614] ? __get_vm_area_node+0x200/0x2f0 [ 974.756302][ T2614] ? __get_vm_area_node+0x283/0x2f0 [ 974.756327][ T2614] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 974.756345][ T2614] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 974.756372][ T2614] __vmalloc_node_range_noprof+0x969/0x1540 [ 974.756405][ T2614] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 974.756444][ T2614] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 974.756466][ T2614] ? apparmor_capable+0x126/0x170 [ 974.756489][ T2614] ? bpf_lsm_capable+0x9/0x20 [ 974.756508][ T2614] ? security_capable+0x7e/0x2c0 [ 974.756535][ T2614] ? bpf_check+0x115b/0x2ef0 [ 974.756554][ T2614] __vmalloc_noprof+0xd2/0x120 [ 974.756574][ T2614] ? bpf_check+0x115b/0x2ef0 [ 974.756597][ T2614] bpf_check+0x115b/0x2ef0 [ 974.756637][ T2614] ? __pfx_bpf_check+0x10/0x10 [ 974.756661][ T2614] ? bpf_obj_name_cpy+0x194/0x1e0 [ 974.756692][ T2614] bpf_prog_load+0x14d6/0x1c20 [ 974.756727][ T2614] ? __pfx_bpf_prog_load+0x10/0x10 [ 974.756775][ T2614] __sys_bpf+0xd0d/0xd90 [ 974.756805][ T2614] ? __pfx___sys_bpf+0x10/0x10 [ 974.756839][ T2614] ? __fget_files+0x2a/0x420 [ 974.756883][ T2614] ? ksys_write+0x242/0x270 [ 974.756904][ T2614] ? __pfx_ksys_write+0x10/0x10 [ 974.756929][ T2614] __x64_sys_bpf+0xba/0xd0 [ 974.756952][ T2614] do_syscall_64+0x166/0x520 [ 974.756976][ T2614] ? trace_irq_disable+0x3b/0x140 [ 974.756996][ T2614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.757015][ T2614] ? clear_bhb_loop+0x70/0xc0 [ 974.757038][ T2614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.757057][ T2614] RIP: 0033:0x7f31fff9e559 [ 974.757082][ T2614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.757098][ T2614] RSP: 002b:00007f3200f47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.757117][ T2614] RAX: ffffffffffffffda RBX: 00007f3200225fa0 RCX: 00007f31fff9e559 [ 974.757132][ T2614] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 974.757144][ T2614] RBP: 00007f3200f47090 R08: 0000000000000000 R09: 0000000000000000 [ 974.757156][ T2614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.757167][ T2614] R13: 00007f3200226038 R14: 00007f3200225fa0 R15: 00007fffc782e808 [ 974.757199][ T2614] [ 974.757206][ T2614] Mem-Info: [ 974.757215][ T2614] active_anon:6491 inactive_anon:2 isolated_anon:0 [ 974.757215][ T2614] active_file:3 inactive_file:43831 isolated_file:0 [ 974.757215][ T2614] unevictable:0 dirty:136 writeback:0 [ 974.757215][ T2614] slab_reclaimable:13465 slab_unreclaimable:133758 [ 974.757215][ T2614] mapped:29788 shmem:526 pagetables:3383 [ 974.757215][ T2614] sec_pagetables:0 bounce:0 [ 974.757215][ T2614] kernel_misc_reclaimable:0 [ 974.757215][ T2614] free:1273404 free_pcp:10230 free_cma:0 [ 974.757262][ T2614] Node 0 active_anon:25964kB inactive_anon:8kB active_file:12kB inactive_file:175124kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119152kB dirty:544kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:21620kB pagetables:13400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 974.757312][ T2614] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 974.757358][ T2614] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.757409][ T2614] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 974.757444][ T2614] Node 0 DMA32 free:1140928kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25964kB inactive_anon:8kB active_file:12kB inactive_file:175124kB unevictable:0kB writepending:544kB zspages:0kB present:3129332kB managed:2527704kB mlocked:0kB bounce:0kB free_pcp:40916kB local_pcp:22924kB free_cma:0kB [ 974.852001][ T2614] lowmem_reserve[]: 0 0 0 0 0 [ 974.852041][ T2614] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.852089][ T2614] lowmem_reserve[]: 0 0 0 0 0 [ 974.852120][ T2614] Node 1 Normal free:3937328kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.852171][ T2614] lowmem_reserve[]: 0 0 0 0 0 [ 974.852202][ T2614] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 974.852304][ T2614] Node 0 DMA32: 3299*4kB (UME) 918*8kB (UME) 390*16kB (UM) 1472*32kB (UME) 452*64kB (UME) 114*128kB (UM) 156*256kB (UME) 201*512kB (UME) 136*1024kB (U) 6*2048kB (UM) 178*4096kB (UM) = 1140892kB [ 974.852443][ T2614] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 974.852528][ T2614] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 9*16kB (UM) 8*32kB (UM) 10*64kB (UM) 6*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3937328kB [ 974.852670][ T2614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.852685][ T2614] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 974.852699][ T2614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.852713][ T2614] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 974.852726][ T2614] 44335 total pagecache pages [ 974.852734][ T2614] 0 pages in swap cache [ 974.852741][ T2614] Free swap = 124996kB [ 974.852748][ T2614] Total swap = 124996kB [ 974.852756][ T2614] 2097051 pages RAM [ 974.852763][ T2614] 0 pages HighMem/MovableOnly [ 974.852770][ T2614] 433509 pages reserved [ 974.852776][ T2614] 0 pages cma reserved [ 975.874260][ T2644] netlink: 'syz.4.7592': attribute type 62 has an invalid length. [ 975.901550][ T2651] 8021q: VLANs not supported on xfrm0 [ 976.459134][ T2669] FAULT_INJECTION: forcing a failure. [ 976.459134][ T2669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.459168][ T2669] CPU: 0 UID: 0 PID: 2669 Comm: syz.2.7599 Not tainted syzkaller #0 PREEMPT(full) [ 976.459189][ T2669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 976.459201][ T2669] Call Trace: [ 976.459208][ T2669] [ 976.459218][ T2669] dump_stack_lvl+0xe8/0x150 [ 976.459248][ T2669] should_fail_ex+0x410/0x560 [ 976.459279][ T2669] _copy_to_user+0x31/0xb0 [ 976.459312][ T2669] bpf_test_finish+0x1cf/0x690 [ 976.459346][ T2669] ? __pfx_bpf_test_finish+0x10/0x10 [ 976.459382][ T2669] bpf_prog_test_run_skb+0x11fe/0x2230 [ 976.459428][ T2669] ? __fget_files+0x3a2/0x420 [ 976.459455][ T2669] ? __fget_files+0x2a/0x420 [ 976.459485][ T2669] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 976.459509][ T2669] bpf_prog_test_run+0x2c5/0x340 [ 976.459536][ T2669] __sys_bpf+0xa22/0xd90 [ 976.459565][ T2669] ? __pfx___sys_bpf+0x10/0x10 [ 976.459596][ T2669] ? __fget_files+0x2a/0x420 [ 976.459639][ T2669] ? ksys_write+0x242/0x270 [ 976.459660][ T2669] ? __pfx_ksys_write+0x10/0x10 [ 976.459683][ T2669] __x64_sys_bpf+0xba/0xd0 [ 976.459707][ T2669] do_syscall_64+0x166/0x520 [ 976.459731][ T2669] ? trace_irq_disable+0x3b/0x140 [ 976.459750][ T2669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.459769][ T2669] ? clear_bhb_loop+0x70/0xc0 [ 976.459791][ T2669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.459810][ T2669] RIP: 0033:0x7f54c879e559 [ 976.459828][ T2669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.459845][ T2669] RSP: 002b:00007f54c96dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 976.459873][ T2669] RAX: ffffffffffffffda RBX: 00007f54c8a25fa0 RCX: 00007f54c879e559 [ 976.459887][ T2669] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 976.459899][ T2669] RBP: 00007f54c96dd090 R08: 0000000000000000 R09: 0000000000000000 [ 976.459910][ T2669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.459921][ T2669] R13: 00007f54c8a26038 R14: 00007f54c8a25fa0 R15: 00007ffc3ebb76d8 [ 976.459952][ T2669] [ 976.749027][ T2683] __nla_validate_parse: 9 callbacks suppressed [ 976.749046][ T2683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7601'. [ 976.749062][ T2683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7601'. [ 976.749078][ T2683] netlink: 'syz.1.7601': attribute type 4 has an invalid length. [ 976.799217][ T2683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7601'. [ 976.900078][ T2687] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7604'. [ 976.910529][ T2687] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7604'. [ 977.094746][ T2693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7605'. [ 977.447671][ T2708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7608'. [ 977.492599][ T2710] ip_tables: iptables: counters copy to user failed while replacing table [ 977.554732][ T2713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7611'. [ 977.554755][ T2713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7611'. [ 977.648612][ T2718] FAULT_INJECTION: forcing a failure. [ 977.648612][ T2718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.648646][ T2718] CPU: 1 UID: 0 PID: 2718 Comm: syz.1.7612 Not tainted syzkaller #0 PREEMPT(full) [ 977.648667][ T2718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 977.648678][ T2718] Call Trace: [ 977.648686][ T2718] [ 977.648695][ T2718] dump_stack_lvl+0xe8/0x150 [ 977.648727][ T2718] should_fail_ex+0x410/0x560 [ 977.648756][ T2718] _copy_to_user+0x31/0xb0 [ 977.648785][ T2718] bpf_test_finish+0x4ea/0x690 [ 977.648819][ T2718] ? __pfx_bpf_test_finish+0x10/0x10 [ 977.648857][ T2718] bpf_prog_test_run_skb+0x11fe/0x2230 [ 977.648903][ T2718] ? __fget_files+0x3a2/0x420 [ 977.648930][ T2718] ? __fget_files+0x2a/0x420 [ 977.648961][ T2718] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 977.648985][ T2718] bpf_prog_test_run+0x2c5/0x340 [ 977.649012][ T2718] __sys_bpf+0xa22/0xd90 [ 977.649045][ T2718] ? __pfx___sys_bpf+0x10/0x10 [ 977.649077][ T2718] ? __fget_files+0x2a/0x420 [ 977.649122][ T2718] ? ksys_write+0x242/0x270 [ 977.649142][ T2718] ? __pfx_ksys_write+0x10/0x10 [ 977.649164][ T2718] __x64_sys_bpf+0xba/0xd0 [ 977.649185][ T2718] do_syscall_64+0x166/0x520 [ 977.649208][ T2718] ? trace_irq_disable+0x3b/0x140 [ 977.649226][ T2718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.649245][ T2718] ? clear_bhb_loop+0x70/0xc0 [ 977.649278][ T2718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.649296][ T2718] RIP: 0033:0x7f0de939e559 [ 977.649314][ T2718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.649331][ T2718] RSP: 002b:00007f0de75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 977.649352][ T2718] RAX: ffffffffffffffda RBX: 00007f0de9625fa0 RCX: 00007f0de939e559 [ 977.649366][ T2718] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 977.649379][ T2718] RBP: 00007f0de75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 977.649391][ T2718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.649403][ T2718] R13: 00007f0de9626038 R14: 00007f0de9625fa0 R15: 00007ffd96f510c8 [ 977.649434][ T2718] [ 977.932457][ T2727] netlink: 'syz.0.7611': attribute type 62 has an invalid length. [ 977.938021][ T2727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 977.938036][ T2727] IPv6: NLM_F_CREATE should be set when creating new route [ 977.938066][ T2727] IPv6: NLM_F_CREATE should be set when creating new route [ 978.258151][ T2746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7617'. [ 978.263400][ T2734] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 978.284728][ T2734] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.387413][ T2734] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 978.387449][ T2734] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.558705][ T2734] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 978.558740][ T2734] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.809556][ T2734] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 978.838920][ T2734] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.000379][ T2776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.056516][ T2776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.110874][ T2775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.221554][ T2780] FAULT_INJECTION: forcing a failure. [ 979.221554][ T2780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.221589][ T2780] CPU: 0 UID: 0 PID: 2780 Comm: syz.1.7623 Not tainted syzkaller #0 PREEMPT(full) [ 979.221611][ T2780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 979.221623][ T2780] Call Trace: [ 979.221631][ T2780] [ 979.221640][ T2780] dump_stack_lvl+0xe8/0x150 [ 979.221671][ T2780] should_fail_ex+0x410/0x560 [ 979.221702][ T2780] _copy_to_user+0x31/0xb0 [ 979.221731][ T2780] bpf_test_finish+0x52e/0x690 [ 979.221773][ T2780] ? __pfx_bpf_test_finish+0x10/0x10 [ 979.221813][ T2780] bpf_prog_test_run_skb+0x11fe/0x2230 [ 979.221859][ T2780] ? __fget_files+0x3a2/0x420 [ 979.221886][ T2780] ? __fget_files+0x2a/0x420 [ 979.221916][ T2780] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 979.221942][ T2780] bpf_prog_test_run+0x2c5/0x340 [ 979.221970][ T2780] __sys_bpf+0xa22/0xd90 [ 979.222000][ T2780] ? __pfx___sys_bpf+0x10/0x10 [ 979.222034][ T2780] ? __fget_files+0x2a/0x420 [ 979.222077][ T2780] ? ksys_write+0x242/0x270 [ 979.222099][ T2780] ? __pfx_ksys_write+0x10/0x10 [ 979.222122][ T2780] __x64_sys_bpf+0xba/0xd0 [ 979.222146][ T2780] do_syscall_64+0x166/0x520 [ 979.222170][ T2780] ? trace_irq_disable+0x3b/0x140 [ 979.222189][ T2780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.222209][ T2780] ? clear_bhb_loop+0x70/0xc0 [ 979.222232][ T2780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.222251][ T2780] RIP: 0033:0x7f0de939e559 [ 979.222269][ T2780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.222285][ T2780] RSP: 002b:00007f0de75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.222306][ T2780] RAX: ffffffffffffffda RBX: 00007f0de9625fa0 RCX: 00007f0de939e559 [ 979.222320][ T2780] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 979.222332][ T2780] RBP: 00007f0de75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 979.222343][ T2780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.222354][ T2780] R13: 00007f0de9626038 R14: 00007f0de9625fa0 R15: 00007ffd96f510c8 [ 979.222384][ T2780] [ 979.434763][T18335] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 4352 - 0 [ 979.434817][T18335] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.484885][ T50] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 4352 - 0 [ 979.484917][ T50] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.524677][T18335] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 4352 - 0 [ 979.524710][T18335] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.526300][ T1958] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 4352 - 0 [ 979.526326][ T1958] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.772490][ T2798] netlink: 'syz.2.7627': attribute type 1 has an invalid length. [ 979.837661][ T2798] 8021q: adding VLAN 0 to HW filter on device bond14 [ 980.007290][ T2813] syzkaller0: entered promiscuous mode [ 980.007312][ T2813] syzkaller0: entered allmulticast mode [ 980.221603][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.221836][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.222025][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.222206][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.222382][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.222628][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.222904][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.223092][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.223295][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.223488][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.249746][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.250028][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.250228][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.250418][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.250670][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.250879][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.251118][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.251313][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.251499][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.251756][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.251965][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.252205][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.252390][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.252580][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.252851][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.253037][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.253281][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.253467][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.259855][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.260052][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.260241][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.260426][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.260685][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.260897][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.261082][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.261267][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.261450][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.261698][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.261910][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.262105][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.262290][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.262473][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.262666][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.280809][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.281018][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.281914][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.282126][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.283036][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.283241][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.293443][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.294093][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.294286][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.294476][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.294677][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.296234][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.296437][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.296631][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.296844][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.299952][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.300149][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.301707][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.301927][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.302120][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.302310][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.304748][ T2817] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 980.866867][ T2855] FAULT_INJECTION: forcing a failure. [ 980.866867][ T2855] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 980.866898][ T2855] CPU: 1 UID: 0 PID: 2855 Comm: syz.3.7636 Not tainted syzkaller #0 PREEMPT(full) [ 980.866917][ T2855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 980.866954][ T2855] Call Trace: [ 980.866961][ T2855] [ 980.866969][ T2855] dump_stack_lvl+0xe8/0x150 [ 980.866996][ T2855] should_fail_ex+0x410/0x560 [ 980.867023][ T2855] prepare_alloc_pages+0x223/0x600 [ 980.867048][ T2855] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 980.867072][ T2855] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 980.867096][ T2855] ? __pfx_policy_nodemask+0x10/0x10 [ 980.867117][ T2855] ? __get_vm_area_node+0x155/0x2f0 [ 980.867138][ T2855] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 980.867154][ T2855] ? __vmalloc_noprof+0xd2/0x120 [ 980.867168][ T2855] ? bpf_prog_calc_tag+0x51/0x370 [ 980.867186][ T2855] ? check_and_resolve_insns+0xbb/0x21d0 [ 980.867206][ T2855] ? bpf_prog_load+0x14d6/0x1c20 [ 980.867225][ T2855] ? __sys_bpf+0xd0d/0xd90 [ 980.867240][ T2855] ? __x64_sys_bpf+0xba/0xd0 [ 980.867256][ T2855] ? do_syscall_64+0x166/0x520 [ 980.867277][ T2855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.867298][ T2855] alloc_pages_mpol+0x21e/0x390 [ 980.867326][ T2855] alloc_pages_noprof+0xb1/0x2b0 [ 980.867351][ T2855] get_free_pages_noprof+0xf/0x80 [ 980.867372][ T2855] __kasan_populate_vmalloc+0x38/0x1c0 [ 980.867390][ T2855] ? do_raw_spin_unlock+0xf5/0x200 [ 980.867418][ T2855] alloc_vmap_area+0xd1a/0x1420 [ 980.867454][ T2855] ? __pfx_alloc_vmap_area+0x10/0x10 [ 980.867480][ T2855] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 980.867499][ T2855] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 980.867518][ T2855] ? __get_vm_area_node+0x155/0x2f0 [ 980.867546][ T2855] __get_vm_area_node+0x200/0x2f0 [ 980.867575][ T2855] __vmalloc_node_range_noprof+0x343/0x1540 [ 980.867591][ T2855] ? bpf_prog_calc_tag+0x51/0x370 [ 980.867612][ T2855] ? __x64_sys_bpf+0xba/0xd0 [ 980.867628][ T2855] ? do_syscall_64+0x166/0x520 [ 980.867654][ T2855] ? __kasan_kmalloc+0x93/0xb0 [ 980.867675][ T2855] ? bpf_prog_load+0x14d6/0x1c20 [ 980.867693][ T2855] ? __sys_bpf+0xd0d/0xd90 [ 980.867711][ T2855] ? __x64_sys_bpf+0xba/0xd0 [ 980.867739][ T2855] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 980.867768][ T2855] ? bpf_prog_calc_tag+0x51/0x370 [ 980.867788][ T2855] __vmalloc_noprof+0xd2/0x120 [ 980.867806][ T2855] ? bpf_prog_calc_tag+0x51/0x370 [ 980.867829][ T2855] bpf_prog_calc_tag+0x51/0x370 [ 980.867850][ T2855] ? __pfx_cmp_subprogs+0x10/0x10 [ 980.867874][ T2855] check_and_resolve_insns+0xbb/0x21d0 [ 980.867898][ T2855] ? add_subprog+0x2e2/0x3f0 [ 980.867922][ T2855] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 980.867961][ T2855] bpf_check+0x18f7/0x2ef0 [ 980.867998][ T2855] ? __pfx_bpf_check+0x10/0x10 [ 980.868020][ T2855] ? bpf_obj_name_cpy+0x194/0x1e0 [ 980.868048][ T2855] bpf_prog_load+0x14d6/0x1c20 [ 980.868082][ T2855] ? __pfx_bpf_prog_load+0x10/0x10 [ 980.868120][ T2855] __sys_bpf+0xd0d/0xd90 [ 980.868144][ T2855] ? __pfx___sys_bpf+0x10/0x10 [ 980.868173][ T2855] ? __fget_files+0x2a/0x420 [ 980.868214][ T2855] ? ksys_write+0x242/0x270 [ 980.868235][ T2855] ? __pfx_ksys_write+0x10/0x10 [ 980.868256][ T2855] __x64_sys_bpf+0xba/0xd0 [ 980.868277][ T2855] do_syscall_64+0x166/0x520 [ 980.868300][ T2855] ? trace_irq_disable+0x3b/0x140 [ 980.868318][ T2855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.868335][ T2855] ? clear_bhb_loop+0x70/0xc0 [ 980.868356][ T2855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.868373][ T2855] RIP: 0033:0x7f96a659e559 [ 980.868391][ T2855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.868406][ T2855] RSP: 002b:00007f96a7507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 980.868426][ T2855] RAX: ffffffffffffffda RBX: 00007f96a6825fa0 RCX: 00007f96a659e559 [ 980.868440][ T2855] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 980.868451][ T2855] RBP: 00007f96a7507090 R08: 0000000000000000 R09: 0000000000000000 [ 980.868463][ T2855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 980.868474][ T2855] R13: 00007f96a6826038 R14: 00007f96a6825fa0 R15: 00007fff79594d48 [ 980.868504][ T2855] [ 981.181599][ T2859] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 981.502248][ T2878] team0: Port device team_slave_0 removed [ 981.530957][ T2886] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 981.557908][ T2888] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 981.581889][ T2888] ip6gre1: entered promiscuous mode [ 981.581911][ T2888] ip6gre1: entered allmulticast mode [ 981.591899][ T2884] netlink: 'syz.1.7642': attribute type 1 has an invalid length. [ 982.105551][ T2914] __nla_validate_parse: 7 callbacks suppressed [ 982.105571][ T2914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7651'. [ 982.187256][ T2914] syzkaller1: entered promiscuous mode [ 982.187281][ T2914] syzkaller1: entered allmulticast mode [ 982.529938][ T2931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7654'. [ 982.529970][ T2931] netlink: 'syz.1.7654': attribute type 1 has an invalid length. [ 982.913974][ T2944] IPVS: set_ctl: invalid protocol: 206 172.30.1.2:20003 [ 983.100729][ T2942] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 983.140703][ T2950] dummy0: entered promiscuous mode [ 983.146398][ T2950] dummy0: left promiscuous mode [ 983.430442][ T2968] ip_tables: iptables: counters copy to user failed while replacing table [ 983.430907][ T2968] netlink: 'syz.1.7669': attribute type 1 has an invalid length. [ 983.456708][ T2968] 8021q: adding VLAN 0 to HW filter on device bond12 [ 983.465368][ T2967] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7667'. [ 983.479608][ T2968] bond12: (slave gretap3): making interface the new active one [ 983.487746][ T2968] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 983.621179][ T2973] bond18: entered allmulticast mode [ 983.802554][ T2981] netlink: 'syz.2.7671': attribute type 1 has an invalid length. [ 983.892170][ T2981] bond15: entered promiscuous mode [ 983.892737][ T2981] 8021q: adding VLAN 0 to HW filter on device bond15 [ 983.968907][ T2990] 8021q: adding VLAN 0 to HW filter on device bond15 [ 983.969253][ T2990] bond15: (slave xfrm0): The slave device specified does not support setting the MAC address [ 983.969272][ T2990] bond15: (slave xfrm0): Setting fail_over_mac to active for active-backup mode [ 984.033679][ T2990] bond15: (slave xfrm0): making interface the new active one [ 984.033702][ T2990] xfrm0: entered promiscuous mode [ 984.038282][ T2990] bond15: (slave xfrm0): Enslaving as an active interface with an up link [ 984.650142][ T3024] ip_tables: iptables: counters copy to user failed while replacing table [ 984.653040][ T3024] netlink: 'syz.3.7682': attribute type 1 has an invalid length. [ 984.749300][ T3024] 8021q: adding VLAN 0 to HW filter on device bond9 [ 984.789595][ T3031] bond9: (slave gretap3): making interface the new active one [ 984.805567][ T3031] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 984.906053][ T3042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7687'. [ 985.001905][ T3048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7689'. [ 985.132667][ T3055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7692'. [ 985.391607][ T3067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7695'. [ 985.391643][ T3067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7695'. [ 985.416715][ T3069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7696'. [ 986.137399][ T3092] netlink: 'syz.0.7702': attribute type 1 has an invalid length. [ 986.198861][ T3092] bond19: entered promiscuous mode [ 986.199300][ T3092] 8021q: adding VLAN 0 to HW filter on device bond19 [ 986.321825][ T3101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7703'. [ 986.593006][ T3113] syzkaller1: entered allmulticast mode [ 987.147402][ T3141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 987.180229][ T3139] sctp: [Deprecated]: syz.4.7711 (pid 3139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 987.180229][ T3139] Use struct sctp_sack_info instead [ 987.193647][ T3139] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000 [ 987.612210][ T3159] xt_l2tp: invalid flags combination: 8 [ 987.617239][ T3161] xt_cgroup: invalid path, errno=-2 [ 987.723438][ T3168] SET target dimension over the limit! [ 987.731842][ T3170] netlink: 'syz.0.7722': attribute type 1 has an invalid length. [ 987.731864][ T3170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7722'. [ 987.752964][ T3170] mac80211_hwsim hwsim35 ..ãc¤±: renamed from wlan1 [ 987.878767][ T3167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7721'. [ 988.156555][ T3190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7726'. [ 988.287720][ T3193] ip6tnl1: entered allmulticast mode [ 988.310417][ T1971] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 988.310635][ T1971] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 988.337431][ T5613] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 988.450189][ T3202] gre0: Caught tx_queue_len zero misconfig [ 988.529758][ T3211] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.7731'. [ 988.533962][ T3208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7731'. [ 988.533980][ T3208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7731'. [ 988.539047][ T3211] 0ªX¹¦Dö»: renamed from gretap0 [ 988.638572][ T3211] 0ªX¹¦Dö»: entered allmulticast mode [ 988.668868][ T3202] syzkaller1: entered promiscuous mode [ 988.668892][ T3202] syzkaller1: entered allmulticast mode [ 988.738889][ T191] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 988.792475][ T3220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7732'. [ 988.810657][ T3220] vlan2: entered allmulticast mode [ 988.810677][ T3220] macsec0: entered allmulticast mode [ 988.811496][ T3220] batman_adv: batadv0: Adding interface: vlan2 [ 988.811508][ T3220] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.811527][ T3220] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 988.948631][ T3220] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7732'. [ 989.264527][ T5613] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 989.377685][ T3250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7739'. [ 989.401389][ T3254] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7741'. [ 989.864878][ T3276] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 990.082699][ T3285] netlink: 'syz.2.7750': attribute type 3 has an invalid length. [ 990.265024][ T3294] xt_hashlimit: size too large, truncated to 1048576 [ 990.776549][ T3309] bond0: (slave macvlan2): Opening slave failed [ 991.974909][ T3350] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 991.995620][ T3349] netlink: 'syz.2.7766': attribute type 61 has an invalid length. [ 992.623761][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 993.249099][ T1967] pim6reg: left allmulticast mode [ 993.551646][ T3409] netlink: 'syz.4.7777': attribute type 1 has an invalid length. [ 993.671446][ T3416] __nla_validate_parse: 5 callbacks suppressed [ 993.671465][ T3416] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7779'. [ 993.839819][ T3424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7780'. [ 993.939154][ T1967] bond28 (unregistering): (slave gretap4): Releasing active interface [ 993.968474][ T1967] bond26 (unregistering): (slave gretap3): Releasing active interface [ 993.972705][ T3431] nbd: couldn't find a device at index 0 [ 994.012642][ T1967] bond25 (unregistering): (slave gretap0): Releasing active interface [ 994.036193][ T1967] batman_adv: batadv0: Removing interface: gretap2 [ 994.098096][ T1967] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 994.098113][ T1967] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - 52:83:ef:98:09:57 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 994.152064][ T1967] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 994.207772][ T1967] team0: Port device bridge5 removed [ 994.212616][ T1967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.212980][ T1967] bond_slave_0: left promiscuous mode [ 994.213347][ T1967] bond0 (unregistering): Released all slaves [ 994.222181][ T1967] bond1 (unregistering): Released all slaves [ 994.244326][ T1967] bond2 (unregistering): Released all slaves [ 994.257544][ T1967] bond3 (unregistering): Released all slaves [ 994.270953][ T1967] bond4 (unregistering): Released all slaves [ 994.281944][ T1967] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 994.282578][ T1967] bond5 (unregistering): Released all slaves [ 994.313509][ T1967] bond6 (unregistering): Released all slaves [ 994.323077][ T1967] bond7 (unregistering): Released all slaves [ 994.360616][ T1967] bond8 (unregistering): Released all slaves [ 994.378749][ T1967] bond9 (unregistering): Released all slaves [ 994.395030][ T1967] bond10 (unregistering): Released all slaves [ 994.411611][ T1967] bond11 (unregistering): Released all slaves [ 994.438269][ T1967] bond12 (unregistering): Released all slaves [ 994.453138][ T1967] bond13 (unregistering): Released all slaves [ 994.468248][ T1967] bond14 (unregistering): Released all slaves [ 994.496393][ T1967] bond15 (unregistering): Released all slaves [ 994.512875][ T1967] bond16 (unregistering): Released all slaves [ 994.527358][ T1967] bond17 (unregistering): Released all slaves [ 994.541245][ T1967] bond18 (unregistering): Released all slaves [ 994.576119][ T1967] bond19 (unregistering): Released all slaves [ 994.596261][ T1967] bond20 (unregistering): Released all slaves [ 994.624970][ T1967] bond21 (unregistering): Released all slaves [ 994.643492][ T1967] bond22 (unregistering): Released all slaves [ 994.658156][ T1967] bond23 (unregistering): Released all slaves [ 994.668146][ T1967] bond24 (unregistering): Released all slaves [ 994.682600][ T1967] bond25 (unregistering): Released all slaves [ 994.698530][ T1967] bond26 (unregistering): Released all slaves [ 994.714695][ T1967] bond27 (unregistering): Released all slaves [ 994.731071][ T1967] bond28 (unregistering): Released all slaves [ 994.744181][ T1967] bond29 (unregistering): Released all slaves [ 994.751400][ T1967] bond30 (unregistering): Released all slaves [ 994.771654][ T1967] bond31 (unregistering): Released all slaves [ 994.794927][ T1967] bond32 (unregistering): Released all slaves [ 994.802049][ T1967] bond33 (unregistering): Released all slaves [ 994.814056][ T1967] bond34 (unregistering): Released all slaves [ 994.827798][ T1967] bond35 (unregistering): Released all slaves [ 994.842115][ T1967] bond36 (unregistering): Released all slaves [ 994.858814][ T1967] bond37 (unregistering): Released all slaves [ 994.920049][ T3415] veth5: entered allmulticast mode [ 994.940917][ T3415] bond22: (slave veth5): Enslaving as an active interface with a down link [ 994.955898][ T3405] bond22: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 994.989163][ T3427] macvlan2: entered promiscuous mode [ 994.989186][ T3427] macvlan2: entered allmulticast mode [ 994.990271][ T3427] bond22: entered promiscuous mode [ 994.992502][ T3427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 995.063066][ T3427] bond22: left promiscuous mode [ 995.185583][ T3436] netlink: 'syz.2.7782': attribute type 27 has an invalid length. [ 995.268077][ T3436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7782'. [ 995.485612][ T1967] tipc: Left network mode [ 995.787452][ T3460] ebt_limit: overflow, try lower: 4294901760/65535 [ 995.847982][ T3468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7790'. [ 995.848005][ T3468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7790'. [ 996.189793][ T1967] hsr_slave_0: left promiscuous mode [ 996.192010][ T1967] hsr_slave_1: left promiscuous mode [ 996.192801][ T1967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.202484][ T3468] netlink: 'syz.1.7790': attribute type 62 has an invalid length. [ 996.221080][ T1967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.222231][ T3479] ip_tables: iptables: counters copy to user failed while replacing table [ 996.606395][ T3495] Cannot find del_set index 17 as target [ 997.224246][ T1967] team0 (unregistering): Port device team_slave_1 removed [ 997.246771][ T1967] team0 (unregistering): Port device team_slave_0 removed [ 997.872696][ T3497] tipc: New replicast peer: 127.0.0.1 [ 997.873396][ T3497] tipc: Enabled bearer , priority 10 [ 998.311596][ T3532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7800'. [ 998.414815][ T3536] netlink: 'syz.0.7803': attribute type 2 has an invalid length. [ 998.414839][ T3536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7803'. [ 998.416665][ T3536] ip6tnl0: Caught tx_queue_len zero misconfig [ 998.486675][ T3538] netlink: 'syz.4.7801': attribute type 2 has an invalid length. [ 998.527031][ T1967] IPVS: stop unused estimator thread 0... [ 998.778643][ T3547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7802'. [ 998.781584][ T3542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7802'. [ 998.985148][ T5825] tipc: Node number set to 1958154828 [ 999.020974][ T3561] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7806'. [ 999.086447][ T3568] netlink: 'syz.3.7807': attribute type 1 has an invalid length. [ 999.304756][ T3577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7808'. [ 999.308652][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7810'. [ 999.308697][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7810'. [ 999.340614][ T3573] bridge0: port 3(syz_tun) entered blocking state [ 999.340729][ T3573] bridge0: port 3(syz_tun) entered listening state [ 999.352025][ T3573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.372983][ T3573] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.436102][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.505725][ T1957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.508029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.510615][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.510871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.548237][ T1971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.552338][T16503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.553000][T14339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.556044][ T1957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.557201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.622573][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.624624][ T3582] netlink: 'syz.4.7808': attribute type 6 has an invalid length. [ 999.632138][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.652804][ T3573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 999.652829][ T3573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.769970][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.770087][ T50] bridge0: port 1(bridge_slave_0) entered listening state [ 999.782952][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.783072][ T50] bridge0: port 2(bridge_slave_1) entered listening state [ 999.798420][ T3592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7811'. [ 999.993348][ T3600] netlink: 'syz.1.7814': attribute type 16 has an invalid length. [ 999.993372][ T3600] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7814'. [ 1000.281504][ T3622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7817'. [ 1000.429576][ T3612] netlink: 236 bytes leftover after parsing attributes in process `syz.2.7816'. [ 1000.474253][ T3622] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1000.703211][ T3509] udevd[3509]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1000.751373][ T3509] udevd[3509]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1001.273882][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1001.368242][ T3509] udevd[3509]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1001.814751][ T3686] netlink: 'syz.3.7832': attribute type 2 has an invalid length. [ 1001.841410][ T3686] : entered promiscuous mode [ 1002.122479][ T3709] netlink: 'syz.1.7836': attribute type 28 has an invalid length. [ 1002.127888][ T3709] netlink: 'syz.1.7836': attribute type 28 has an invalid length. [ 1002.218649][ T3701] syzkaller0: entered promiscuous mode [ 1002.218672][ T3701] syzkaller0: entered allmulticast mode [ 1002.945492][ T3736] net_ratelimit: 43 callbacks suppressed [ 1002.945513][ T3736] ip_tables: iptables: counters copy to user failed while replacing table [ 1002.986169][ T3738] TC_ACT_REPEAT abuse ? [ 1003.046604][ T3743] Bluetooth: hci0: unsupported parameter 5135 [ 1003.046624][ T3743] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1003.046840][ T3744] Bluetooth: hci0: unsupported parameter 5135 [ 1003.046851][ T3744] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1003.865512][ T3781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1003.929120][ T3781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.077841][ T3775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.088722][ T3791] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 1004.109620][ T3775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.134906][ T3775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.314757][ T3775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.319980][ T3775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.333244][ T3775] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1004.352095][ T1971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.352212][ T1971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.359724][ T1971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.359872][ T1971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.366187][ T3798] __nla_validate_parse: 9 callbacks suppressed [ 1004.366205][ T3798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7855'. [ 1004.791749][ T3805] siw: device registration error -23 [ 1005.012769][ T3810] can: request_module (can-proto-0) failed. [ 1005.069527][ T3810] can: request_module (can-proto-0) failed. [ 1005.120063][ T3810] can: request_module (can-proto-0) failed. [ 1005.172110][ T3810] can: request_module (can-proto-0) failed. [ 1005.223320][ T3810] can: request_module (can-proto-0) failed. [ 1005.307345][ T3810] can: request_module (can-proto-0) failed. [ 1005.353011][ T3810] can: request_module (can-proto-0) failed. [ 1005.399988][ T3810] can: request_module (can-proto-0) failed. [ 1005.447983][ T3810] can: request_module (can-proto-0) failed. [ 1005.498613][ T3810] can: request_module (can-proto-0) failed. [ 1006.141676][ T3799] erspan0: left promiscuous mode [ 1006.189958][ T3811] bridge0: port 1(syz_tun) entered blocking state [ 1006.190111][ T3811] bridge0: port 1(syz_tun) entered disabled state [ 1006.190284][ T3811] syz_tun: entered allmulticast mode [ 1006.216317][ T3811] bridge0: port 1(syz_tun) entered blocking state [ 1006.216421][ T3811] bridge0: port 1(syz_tun) entered listening state [ 1006.415886][ T3851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1006.492585][ T3851] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7864'. [ 1006.631147][ T3867] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1006.666341][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1006.666366][ T3869] netlink: 22 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1006.696756][ T3869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1006.696802][ T3869] netlink: 22 bytes leftover after parsing attributes in process `syz.0.7870'. [ 1006.696819][ T3869] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1007.201014][ T3898] wg2: Caught tx_queue_len zero misconfig [ 1007.227283][ T3898] netlink: 'syz.0.7876': attribute type 1 has an invalid length. [ 1007.861622][ T3932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7882'. [ 1007.968951][ T3948] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1007.989161][ T3948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.048636][ T3948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.091914][ T3956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7882'. [ 1008.109699][ T3948] bond0 (unregistering): Released all slaves [ 1008.121219][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1008.643686][ T3980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.810570][ T3988] netlink: 'syz.2.7894': attribute type 1 has an invalid length. [ 1009.158726][ T4006] tun0: tun_chr_ioctl cmd 2148553947 [ 1009.609617][ T4032] __nla_validate_parse: 5 callbacks suppressed [ 1009.609639][ T4032] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7901'. [ 1009.634658][ T52] block nbd3: Receive control failed (result -32) [ 1009.874247][ T4042] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1010.073328][ T4057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7908'. [ 1010.123175][ T4060] siw: device registration error -23 [ 1010.502950][ T4075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7915'. [ 1010.827708][ T4093] IPv6: sit1: Disabled Multicast RS [ 1011.094956][ T4102] siw: device registration error -23 [ 1011.330703][ T4117] netlink: 'syz.2.7928': attribute type 9 has an invalid length. [ 1011.379027][ T4117] bridge7: entered promiscuous mode [ 1011.819247][ T4131] nbd: must specify a size in bytes for the device [ 1011.821695][ T4131] dummy0: entered allmulticast mode [ 1011.890029][ T4133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1012.023337][ T4135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7933'. [ 1012.438571][ T4156] netlink: 'syz.0.7936': attribute type 1 has an invalid length. [ 1012.634232][ T4156] bond20: entered promiscuous mode [ 1012.634659][ T4156] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1012.690241][ T4156] bond20: (slave bridge10): making interface the new active one [ 1012.690266][ T4156] bridge10: entered promiscuous mode [ 1012.691831][ T4156] bond20: (slave bridge10): Enslaving as an active interface with an up link [ 1012.719942][ T4160] siw: device registration error -23 [ 1012.997853][ T4174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.121265][ T4178] siw: device registration error -23 [ 1013.545128][ T4188] syzkaller0: entered promiscuous mode [ 1013.545150][ T4188] syzkaller0: entered allmulticast mode [ 1013.725229][ T4198] siw: device registration error -23 [ 1013.915275][ T4203] netlink: 'syz.1.7952': attribute type 1 has an invalid length. [ 1014.035644][ T4212] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1014.043419][ T4203] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1014.078304][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7952'. [ 1014.115123][ T4211] bond13: (slave ip6erspan0): making interface the new active one [ 1014.116705][ T4211] bond13: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1014.132664][ T4212] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1014.142473][ T4203] 8021q: VLANs not supported on vxcan0 [ 1014.365338][ T4227] syzkaller1: entered promiscuous mode [ 1014.365359][ T4227] syzkaller1: entered allmulticast mode [ 1014.614169][ T4238] siw: device registration error -23 [ 1014.630709][ T4240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1014.709574][ C0] bridge0: port 3(syz_tun) entered learning state [ 1015.273906][ T4259] syzkaller1: entered allmulticast mode [ 1015.346717][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1015.346960][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1015.521763][ T4266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1015.540456][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7965'. [ 1015.813132][ T4284] siw: device registration error -23 [ 1015.972006][ T4291] netlink: 'syz.4.7975': attribute type 1 has an invalid length. [ 1015.972029][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7975'. [ 1016.525308][ T4323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7979'. [ 1016.866328][ T4335] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1016.968723][ T4339] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7985'. [ 1017.162978][ T4350] netlink: 'syz.2.7986': attribute type 2 has an invalid length. [ 1017.487703][ T4353] siw: device registration error -23 [ 1017.653494][ T4359] set_match_v1_checkentry: 23 callbacks suppressed [ 1017.654626][ T4359] Cannot find set identified by id 0 to match [ 1017.806548][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7991'. [ 1017.808335][ T4361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.850713][ T4361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.949094][ T4366] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7992'. [ 1018.223442][ T4386] siw: device registration error -23 [ 1018.432773][ T4399] netlink: 'syz.3.8002': attribute type 4 has an invalid length. [ 1018.456405][ T4393] wlan0: mtu greater than device maximum [ 1018.456425][ T4393] team0: Device wlan0 failed to change mtu [ 1018.541149][ T4405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8005'. [ 1018.544082][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1018.583042][ T4405] netlink: 'syz.4.8005': attribute type 1 has an invalid length. [ 1018.583063][ T4405] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8005'. [ 1018.598970][ T4399] netlink: 'syz.3.8002': attribute type 4 has an invalid length. [ 1018.858625][ T4419] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8009'. [ 1019.088543][ T4436] siw: device registration error -23 [ 1019.150278][ T4439] xt_MASQUERADE: bad MAP_IPS. [ 1019.155402][ T4433] syzkaller0: entered promiscuous mode [ 1019.155425][ T4433] syzkaller0: entered allmulticast mode [ 1021.753650][ C0] bridge0: port 1(syz_tun) entered learning state [ 1023.338717][ T4426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8012'. [ 1023.342223][ T4441] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1023.943176][ T4480] bond16: option arp_all_targets: invalid value (3) [ 1023.970212][ T4480] bond16 (unregistering): Released all slaves [ 1024.266169][ T4497] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8023'. [ 1024.683492][ T4520] FAULT_INJECTION: forcing a failure. [ 1024.683492][ T4520] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.691895][ T4520] CPU: 0 UID: 0 PID: 4520 Comm: syz.3.8030 Not tainted syzkaller #0 PREEMPT(full) [ 1024.691920][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1024.691931][ T4520] Call Trace: [ 1024.691939][ T4520] [ 1024.691948][ T4520] dump_stack_lvl+0xe8/0x150 [ 1024.691982][ T4520] should_fail_ex+0x410/0x560 [ 1024.692013][ T4520] should_failslab+0xa8/0x100 [ 1024.692041][ T4520] __kvmalloc_node_noprof+0x176/0x820 [ 1024.692065][ T4520] ? __kvmalloc_node_noprof+0x345/0x820 [ 1024.692085][ T4520] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1024.692107][ T4520] ? bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1024.692136][ T4520] bpf_compute_subprog_arg_access+0x187/0x14d0 [ 1024.692161][ T4520] ? pe_prog_func_proto+0x65/0xb0 [ 1024.692204][ T4520] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1024.692232][ T4520] ? __kvmalloc_node_noprof+0x345/0x820 [ 1024.692253][ T4520] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1024.692275][ T4520] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1024.692304][ T4520] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1024.692345][ T4520] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1024.692379][ T4520] bpf_check+0x2744/0x2ef0 [ 1024.692428][ T4520] ? __pfx_bpf_check+0x10/0x10 [ 1024.692452][ T4520] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1024.692482][ T4520] bpf_prog_load+0x14d6/0x1c20 [ 1024.692516][ T4520] ? __pfx_bpf_prog_load+0x10/0x10 [ 1024.692559][ T4520] __sys_bpf+0xd0d/0xd90 [ 1024.692589][ T4520] ? __pfx___sys_bpf+0x10/0x10 [ 1024.692621][ T4520] ? __fget_files+0x2a/0x420 [ 1024.692662][ T4520] ? ksys_write+0x242/0x270 [ 1024.692682][ T4520] ? __pfx_ksys_write+0x10/0x10 [ 1024.692707][ T4520] __x64_sys_bpf+0xba/0xd0 [ 1024.692730][ T4520] do_syscall_64+0x166/0x520 [ 1024.692754][ T4520] ? trace_irq_disable+0x3b/0x140 [ 1024.692774][ T4520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.692792][ T4520] ? clear_bhb_loop+0x70/0xc0 [ 1024.692813][ T4520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.692830][ T4520] RIP: 0033:0x7f96a659e559 [ 1024.692847][ T4520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.692861][ T4520] RSP: 002b:00007f96a7507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1024.692880][ T4520] RAX: ffffffffffffffda RBX: 00007f96a6825fa0 RCX: 00007f96a659e559 [ 1024.692892][ T4520] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1024.692902][ T4520] RBP: 00007f96a7507090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.692912][ T4520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1024.692921][ T4520] R13: 00007f96a6826038 R14: 00007f96a6825fa0 R15: 00007fff79594d48 [ 1024.692948][ T4520] [ 1025.373962][ T4536] pimreg: entered allmulticast mode [ 1025.433700][ T4541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8034'. [ 1025.459255][ T4543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1025.502139][ T4535] pimreg: left allmulticast mode [ 1025.778426][ T31] audit: type=1804 audit(1792090929.912:58): pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8036" name="/newroot/413/cgroup.controllers" dev="tmpfs" ino=2129 res=1 errno=0 [ 1025.778480][ T31] audit: type=1800 audit(1792090929.912:59): pid=4549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8036" name="cgroup.controllers" dev="tmpfs" ino=2129 res=0 errno=0 [ 1025.848560][ T4557] netlink: 'syz.0.8040': attribute type 1 has an invalid length. [ 1025.913488][ T4562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1026.029510][ T4557] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1026.102837][ T4569] netlink: 'syz.3.8042': attribute type 1 has an invalid length. [ 1026.130428][ T4561] bond21: (slave gretap8): making interface the new active one [ 1026.145614][ T4561] bond21: (slave gretap8): Enslaving as an active interface with an up link [ 1026.159150][ T4580] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1026.411465][ T4581] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1026.432637][ T4581] bond11: (slave bond12): making interface the new active one [ 1026.433136][ T4581] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1026.494849][ T4583] bond11: (slave gretap4): Enslaving as a backup interface with an up link [ 1026.526486][ T4563] team0: Port device wlan0 removed [ 1026.681810][ T4600] netlink: 'syz.2.8046': attribute type 4 has an invalid length. [ 1026.681832][ T4600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8046'. [ 1026.705983][ T4602] netlink: 'syz.2.8046': attribute type 4 has an invalid length. [ 1026.706005][ T4602] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8046'. [ 1026.771917][ T4604] pimreg: entered allmulticast mode [ 1026.773328][ T4604] pimreg: left allmulticast mode [ 1026.935117][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8049'. [ 1026.935202][ T4613] bridge0: left promiscuous mode [ 1026.935223][ T4613] bridge0: entered allmulticast mode [ 1027.009393][ T4619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8052'. [ 1027.298468][ T4645] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8054'. [ 1027.778826][ T4662] siw: device registration error -23 [ 1027.789262][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1027.789328][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1027.790109][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1027.793225][ T4665] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1027.793253][ T4665] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1027.793285][ T4665] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1027.890975][ T4669] sctp: [Deprecated]: syz.1.8063 (pid 4669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.890975][ T4669] Use struct sctp_sack_info instead [ 1028.004527][ T4669] geneve3: entered promiscuous mode [ 1028.012740][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.016985][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.018643][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.020261][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.021891][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.023990][ T1963] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.024030][ T1963] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.024063][ T1963] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.024094][ T1963] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.030679][ T4677] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1028.140142][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.177422][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.183351][ T4665] virt_wifi0 speed is unknown, defaulting to 1000 [ 1028.294810][ T4679] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1028.789667][ T4713] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8073'. [ 1028.792726][ T4713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8073'. [ 1029.067717][ T4735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1029.151630][ T4738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1029.598771][ T4755] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1029.613058][ T4757] x_tables: duplicate underflow at hook 1 [ 1029.770218][ T4763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8084'. [ 1030.053120][ T4776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8089'. [ 1030.064388][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 1030.064411][ C0] bridge0: topology change detected, propagating [ 1030.098470][ T4776] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8089'. [ 1030.541917][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8094'. [ 1030.570161][ T4795] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8092'. [ 1030.696208][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8095'. [ 1030.704191][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.704215][ C0] bridge0: topology change detected, propagating [ 1030.704390][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.704405][ C0] bridge0: topology change detected, propagating [ 1030.911534][ T4814] FAULT_INJECTION: forcing a failure. [ 1030.911534][ T4814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.911569][ T4814] CPU: 0 UID: 0 PID: 4814 Comm: syz.2.8101 Not tainted syzkaller #0 PREEMPT(full) [ 1030.911599][ T4814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1030.911617][ T4814] Call Trace: [ 1030.911629][ T4814] [ 1030.911642][ T4814] dump_stack_lvl+0xe8/0x150 [ 1030.911681][ T4814] should_fail_ex+0x410/0x560 [ 1030.911707][ T4814] _copy_from_user+0x2d/0xb0 [ 1030.911734][ T4814] __sys_bpf+0x2e7/0xd90 [ 1030.911761][ T4814] ? __pfx___sys_bpf+0x10/0x10 [ 1030.911789][ T4814] ? __fget_files+0x2a/0x420 [ 1030.911829][ T4814] ? ksys_write+0x242/0x270 [ 1030.911848][ T4814] ? __pfx_ksys_write+0x10/0x10 [ 1030.911869][ T4814] __x64_sys_bpf+0xba/0xd0 [ 1030.911896][ T4814] do_syscall_64+0x166/0x520 [ 1030.911917][ T4814] ? trace_irq_disable+0x3b/0x140 [ 1030.911934][ T4814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.911950][ T4814] ? clear_bhb_loop+0x70/0xc0 [ 1030.911970][ T4814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.911985][ T4814] RIP: 0033:0x7f54c879e559 [ 1030.912001][ T4814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.912014][ T4814] RSP: 002b:00007f54c96dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1030.912032][ T4814] RAX: ffffffffffffffda RBX: 00007f54c8a25fa0 RCX: 00007f54c879e559 [ 1030.912044][ T4814] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1030.912054][ T4814] RBP: 00007f54c96dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.912064][ T4814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.912073][ T4814] R13: 00007f54c8a26038 R14: 00007f54c8a25fa0 R15: 00007ffc3ebb76d8 [ 1030.912100][ T4814] [ 1031.701672][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1031.701713][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1031.746261][ T4840] ip_tables: iptables: counters copy to user failed while replacing table [ 1031.746839][ T4840] netlink: 'syz.2.8106': attribute type 1 has an invalid length. [ 1031.778902][ T4851] : option downdelay: invalid value (18446744073709547007) [ 1031.778918][ T4851] : option downdelay: allowed values 0 - 2147483647 [ 1031.781604][ T4851]  (unregistering): Released all slaves [ 1031.891031][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1031.891071][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1031.891452][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1031.891482][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1031.891807][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1031.891837][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1031.892154][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1031.892183][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.074748][ T4840] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1032.127925][ T4858] bond16: (slave gretap4): making interface the new active one [ 1032.141919][ T4858] bond16: (slave gretap4): Enslaving as an active interface with an up link [ 1032.142271][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.142293][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.142705][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.142737][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.248357][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.248383][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.275475][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.275515][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.275846][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.275881][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.276184][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.276220][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.276520][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.276547][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.276850][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.276879][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.337829][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.337863][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.338229][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.338256][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.338557][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.338584][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.338880][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.338905][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.339206][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.339235][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.475673][ T4849] syzkaller0: MTU not usable for tipc bearer [ 1032.475722][ T4849] tipc: Enabling of bearer rejected, failed to enable media [ 1032.480963][ T4876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8112'. [ 1032.512056][ T4874] ip_tables: iptables: counters copy to user failed while replacing table [ 1032.691941][ T4881] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8114'. [ 1032.841354][ T4885] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1033.300925][ T4916] can_create: 6 callbacks suppressed [ 1033.300945][ T4916] can: request_module (can-proto-5) failed. [ 1033.538091][ T4928] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1033.538856][ T4928] pim6reg1: entered promiscuous mode [ 1033.538874][ T4928] pim6reg1: entered allmulticast mode [ 1033.756136][ T4948] FAULT_INJECTION: forcing a failure. [ 1033.756136][ T4948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.756167][ T4948] CPU: 1 UID: 0 PID: 4948 Comm: syz.0.8131 Not tainted syzkaller #0 PREEMPT(full) [ 1033.756188][ T4948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1033.756198][ T4948] Call Trace: [ 1033.756205][ T4948] [ 1033.756216][ T4948] dump_stack_lvl+0xe8/0x150 [ 1033.756245][ T4948] should_fail_ex+0x410/0x560 [ 1033.756275][ T4948] _copy_from_user+0x2d/0xb0 [ 1033.756302][ T4948] bpf_test_init+0xd8/0x150 [ 1033.756329][ T4948] bpf_prog_test_run_skb+0x31e/0x2230 [ 1033.756352][ T4948] ? lock_acquire+0x115/0x350 [ 1033.756387][ T4948] ? __fget_files+0x3a2/0x420 [ 1033.756411][ T4948] ? __fget_files+0x2a/0x420 [ 1033.756439][ T4948] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1033.756463][ T4948] bpf_prog_test_run+0x2c5/0x340 [ 1033.756491][ T4948] __sys_bpf+0xa22/0xd90 [ 1033.756520][ T4948] ? __pfx___sys_bpf+0x10/0x10 [ 1033.756548][ T4948] ? __fget_files+0x2a/0x420 [ 1033.756598][ T4948] ? ksys_write+0x242/0x270 [ 1033.756620][ T4948] ? __pfx_ksys_write+0x10/0x10 [ 1033.756645][ T4948] __x64_sys_bpf+0xba/0xd0 [ 1033.756665][ T4948] do_syscall_64+0x166/0x520 [ 1033.756688][ T4948] ? trace_irq_disable+0x3b/0x140 [ 1033.756706][ T4948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.756725][ T4948] ? clear_bhb_loop+0x70/0xc0 [ 1033.756748][ T4948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.756766][ T4948] RIP: 0033:0x7f31fff9e559 [ 1033.756785][ T4948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.756801][ T4948] RSP: 002b:00007f3200f47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1033.756822][ T4948] RAX: ffffffffffffffda RBX: 00007f3200225fa0 RCX: 00007f31fff9e559 [ 1033.756836][ T4948] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1033.756849][ T4948] RBP: 00007f3200f47090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.756860][ T4948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.756869][ T4948] R13: 00007f3200226038 R14: 00007f3200225fa0 R15: 00007fffc782e808 [ 1033.756896][ T4948] [ 1033.756953][ T4945] netlink: 'syz.2.8128': attribute type 33 has an invalid length. [ 1033.760904][ T4942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1033.777553][ T4937] wg2 speed is unknown, defaulting to 1000 [ 1033.896343][ T4937] virt_wifi0 speed is unknown, defaulting to 1000 [ 1034.138138][ T4955] __nla_validate_parse: 5 callbacks suppressed [ 1034.138158][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8132'. [ 1034.381475][ T4978] netlink: 'syz.3.8135': attribute type 19 has an invalid length. [ 1034.381500][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1034.420212][ T4982] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1034.474942][ T1957] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.474968][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8138'. [ 1034.474982][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8138'. [ 1034.475004][ T4982] netlink: 'syz.0.8138': attribute type 12 has an invalid length. [ 1034.476410][ T4978] netlink: 'syz.3.8135': attribute type 19 has an invalid length. [ 1034.476427][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1034.578133][ T1963] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.578298][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8138'. [ 1034.578314][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8138'. [ 1034.578336][ T4982] netlink: 'syz.0.8138': attribute type 12 has an invalid length. [ 1034.579964][ T1958] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.580005][ T1958] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.590582][ T1971] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.595002][ T1958] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1034.595449][ T1958] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.871105][ T4997] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8141'. [ 1034.886989][ T4997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1035.137714][ T5015] FAULT_INJECTION: forcing a failure. [ 1035.137714][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.137747][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.4.8144 Not tainted syzkaller #0 PREEMPT(full) [ 1035.137772][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1035.137783][ T5015] Call Trace: [ 1035.137791][ T5015] [ 1035.137800][ T5015] dump_stack_lvl+0xe8/0x150 [ 1035.137831][ T5015] should_fail_ex+0x410/0x560 [ 1035.137862][ T5015] should_failslab+0xa8/0x100 [ 1035.137889][ T5015] __kmalloc_noprof+0xfe/0x720 [ 1035.137911][ T5015] ? sk_prot_alloc+0xe7/0x210 [ 1035.137929][ T5015] ? sk_prot_alloc+0xe7/0x210 [ 1035.137953][ T5015] sk_prot_alloc+0xe7/0x210 [ 1035.137970][ T5015] ? sk_alloc+0x27/0x390 [ 1035.137990][ T5015] sk_alloc+0x3a/0x390 [ 1035.138020][ T5015] bpf_prog_test_run_skb+0x3a6/0x2230 [ 1035.138045][ T5015] ? lock_acquire+0x115/0x350 [ 1035.138082][ T5015] ? __fget_files+0x3a2/0x420 [ 1035.138109][ T5015] ? __fget_files+0x2a/0x420 [ 1035.138140][ T5015] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1035.138165][ T5015] bpf_prog_test_run+0x2c5/0x340 [ 1035.138193][ T5015] __sys_bpf+0xa22/0xd90 [ 1035.138223][ T5015] ? __pfx___sys_bpf+0x10/0x10 [ 1035.138256][ T5015] ? __fget_files+0x2a/0x420 [ 1035.138300][ T5015] ? ksys_write+0x242/0x270 [ 1035.138322][ T5015] ? __pfx_ksys_write+0x10/0x10 [ 1035.138346][ T5015] __x64_sys_bpf+0xba/0xd0 [ 1035.138370][ T5015] do_syscall_64+0x166/0x520 [ 1035.138394][ T5015] ? trace_irq_disable+0x3b/0x140 [ 1035.138414][ T5015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.138433][ T5015] ? clear_bhb_loop+0x70/0xc0 [ 1035.138456][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.138474][ T5015] RIP: 0033:0x7f6e5b99e559 [ 1035.138492][ T5015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.138507][ T5015] RSP: 002b:00007f6e5c843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1035.138528][ T5015] RAX: ffffffffffffffda RBX: 00007f6e5bc25fa0 RCX: 00007f6e5b99e559 [ 1035.138541][ T5015] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1035.138554][ T5015] RBP: 00007f6e5c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.138566][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.138578][ T5015] R13: 00007f6e5bc26038 R14: 00007f6e5bc25fa0 R15: 00007ffe92733ea8 [ 1035.138608][ T5015] [ 1035.405951][ T5017] Cannot find set identified by id 65534 to match [ 1035.444704][ T4995] rds_sendmsg: 55 callbacks suppressed [ 1035.444723][ T4995] atomic_op ffff8880543e89e0 conn xmit_atomic 0000000000000000 [ 1035.681825][ T5028] ip_tables: iptables: counters copy to user failed while replacing table [ 1035.719697][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8150'. [ 1036.055440][ T5053] FAULT_INJECTION: forcing a failure. [ 1036.055440][ T5053] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.055473][ T5053] CPU: 1 UID: 0 PID: 5053 Comm: syz.4.8155 Not tainted syzkaller #0 PREEMPT(full) [ 1036.055494][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1036.055505][ T5053] Call Trace: [ 1036.055512][ T5053] [ 1036.055524][ T5053] dump_stack_lvl+0xe8/0x150 [ 1036.055555][ T5053] should_fail_ex+0x410/0x560 [ 1036.055584][ T5053] should_failslab+0xa8/0x100 [ 1036.055611][ T5053] __kmalloc_noprof+0xfe/0x720 [ 1036.055633][ T5053] ? security_sk_alloc+0x52/0x360 [ 1036.055651][ T5053] ? security_sk_alloc+0x52/0x360 [ 1036.055677][ T5053] security_sk_alloc+0x52/0x360 [ 1036.055699][ T5053] sk_prot_alloc+0x101/0x210 [ 1036.055716][ T5053] ? sk_alloc+0x27/0x390 [ 1036.055736][ T5053] sk_alloc+0x3a/0x390 [ 1036.055756][ T5053] bpf_prog_test_run_skb+0x3a6/0x2230 [ 1036.055781][ T5053] ? lock_acquire+0x115/0x350 [ 1036.055813][ T5053] ? __fget_files+0x3a2/0x420 [ 1036.055838][ T5053] ? __fget_files+0x2a/0x420 [ 1036.055868][ T5053] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1036.055892][ T5053] bpf_prog_test_run+0x2c5/0x340 [ 1036.055918][ T5053] __sys_bpf+0xa22/0xd90 [ 1036.055947][ T5053] ? __pfx___sys_bpf+0x10/0x10 [ 1036.055988][ T5053] ? __fget_files+0x2a/0x420 [ 1036.056029][ T5053] ? ksys_write+0x242/0x270 [ 1036.056049][ T5053] ? __pfx_ksys_write+0x10/0x10 [ 1036.056071][ T5053] __x64_sys_bpf+0xba/0xd0 [ 1036.056090][ T5053] do_syscall_64+0x166/0x520 [ 1036.056113][ T5053] ? trace_irq_disable+0x3b/0x140 [ 1036.056130][ T5053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.056149][ T5053] ? clear_bhb_loop+0x70/0xc0 [ 1036.056170][ T5053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.056188][ T5053] RIP: 0033:0x7f6e5b99e559 [ 1036.056205][ T5053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.056220][ T5053] RSP: 002b:00007f6e5c843028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1036.056239][ T5053] RAX: ffffffffffffffda RBX: 00007f6e5bc25fa0 RCX: 00007f6e5b99e559 [ 1036.056253][ T5053] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1036.056264][ T5053] RBP: 00007f6e5c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.056276][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.056287][ T5053] R13: 00007f6e5bc26038 R14: 00007f6e5bc25fa0 R15: 00007ffe92733ea8 [ 1036.056317][ T5053] [ 1036.438919][ T5058] ipvlan0: left allmulticast mode [ 1036.438941][ T5058] veth0_vlan: left allmulticast mode [ 1036.509561][ T5068] netlink: 'syz.2.8159': attribute type 10 has an invalid length. [ 1036.586669][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8161'. [ 1036.702251][ T5068] netlink: 'syz.2.8159': attribute type 10 has an invalid length. [ 1036.739957][ T5072] ip6gretap2: entered allmulticast mode [ 1036.741426][ T5072] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1036.742141][ T5072] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1036.742155][ T5072] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.742182][ T5072] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1037.103683][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 1037.103708][ C0] bridge0: topology change detected, propagating [ 1037.347931][ T5099] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1037.421616][ T5099] bond14 (unregistering): Released all slaves [ 1037.671142][ T5126] xt_IDLETIMER: timeout value is too big [ 1037.687820][ T5126] macvlan0: entered promiscuous mode [ 1037.802469][ T5146] siw: device registration error -23 [ 1037.856969][ T5149] netlink: 'syz.2.8178': attribute type 1 has an invalid length. [ 1037.988533][ T5149] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1038.015010][ T5150] bond12: (slave veth0_to_bond): Releasing active interface [ 1038.083263][ T5150] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1038.149911][ T5149] bridge8: entered promiscuous mode [ 1038.161610][ T5149] bond17: (slave bridge8): Enslaving as an active interface with an up link [ 1038.192038][ T5163] netlink: 'syz.4.8180': attribute type 10 has an invalid length. [ 1038.202684][ T5163] bridge0: port 3(syz_tun) entered disabled state [ 1038.202922][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.203116][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.227786][ T5163] bridge0: left allmulticast mode [ 1038.231112][ T5163] bridge0: port 3(syz_tun) entered blocking state [ 1038.231243][ T5163] bridge0: port 3(syz_tun) entered listening state [ 1038.231508][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.231626][ T5163] bridge0: port 2(bridge_slave_1) entered listening state [ 1038.231908][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.232076][ T5163] bridge0: port 1(bridge_slave_0) entered listening state [ 1038.284234][ T5163] bridge0: entered promiscuous mode [ 1038.287462][ T5163] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1038.375100][ T5163] syz_tun: left allmulticast mode [ 1038.375343][ T5163] bridge0: port 3(syz_tun) entered disabled state [ 1038.399023][ T5163] bridge_slave_1: left allmulticast mode [ 1038.399260][ T5163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.419882][ T5163] bridge_slave_0: left allmulticast mode [ 1038.420878][ T5163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.589344][ T5163] bond0: (slave bridge0): Releasing backup interface [ 1038.590491][ T5163] bridge0 (unregistering): left promiscuous mode [ 1039.013953][ T5204] syzkaller1: entered promiscuous mode [ 1039.013978][ T5204] syzkaller1: entered allmulticast mode [ 1039.266717][ T5213] ip_tables: iptables: counters copy to user failed while replacing table [ 1039.270319][ T5213] netlink: 'syz.1.8194': attribute type 1 has an invalid length. [ 1039.371475][ T5213] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1039.445294][ T5221] __nla_validate_parse: 12 callbacks suppressed [ 1039.445317][ T5221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8195'. [ 1039.445413][ T5223] bond14: (slave gretap0): making interface the new active one [ 1039.449737][ T5223] bond14: (slave gretap0): Enslaving as an active interface with an up link [ 1039.883873][ T5245] syzkaller0: entered promiscuous mode [ 1039.883896][ T5245] syzkaller0: entered allmulticast mode [ 1039.900434][ T5245] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8205'. [ 1039.936703][ T5247] xt_hashlimit: size too large, truncated to 1048576 [ 1040.025623][ T5249] tc_dump_action: action bad kind [ 1040.729232][ T5290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8212'. [ 1041.208439][ T5308] xt_hashlimit: size too large, truncated to 1048576 [ 1041.441503][ T5317] tipc: Enabling of bearer rejected, failed to enable media [ 1041.859808][ T5319] netlink: 'syz.3.8220': attribute type 1 has an invalid length. [ 1041.927027][ T5317] wg2 speed is unknown, defaulting to 1000 [ 1041.930495][ T5317] virt_wifi0 speed is unknown, defaulting to 1000 [ 1042.144223][ T5323] syzkaller0: entered promiscuous mode [ 1042.144280][ T5323] syzkaller0: entered allmulticast mode [ 1042.203106][ T5323] tipc: Enabled bearer , priority 0 [ 1042.462010][ T5322] tipc: Resetting bearer [ 1042.520552][ T5322] tipc: Disabling bearer [ 1042.844159][ T5358] ip_tables: iptables: counters copy to user failed while replacing table [ 1042.845819][ T5358] netlink: 'syz.0.8230': attribute type 1 has an invalid length. [ 1042.934288][ T5358] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1043.022068][ T5361] bond22: (slave gretap9): making interface the new active one [ 1043.041029][ T5361] bond22: (slave gretap9): Enslaving as an active interface with an up link [ 1055.023799][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1085.113825][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1095.353836][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1099.139216][ T5373] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1099.146207][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146207][ T5388] Use struct sctp_sack_info instead [ 1099.146287][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146287][ T5388] Use struct sctp_sack_info instead [ 1099.146328][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146328][ T5388] Use struct sctp_sack_info instead [ 1099.146366][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146366][ T5388] Use struct sctp_sack_info instead [ 1099.146402][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146402][ T5388] Use struct sctp_sack_info instead [ 1099.146438][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146438][ T5388] Use struct sctp_sack_info instead [ 1099.146498][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146498][ T5388] Use struct sctp_sack_info instead [ 1099.146536][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146536][ T5388] Use struct sctp_sack_info instead [ 1099.146573][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146573][ T5388] Use struct sctp_sack_info instead [ 1099.146619][ T5388] sctp: [Deprecated]: syz.4.8236 (pid 5388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1099.146619][ T5388] Use struct sctp_sack_info instead [ 1099.665044][ T5395] tipc: Enabling of bearer rejected, failed to enable media [ 1099.766312][ T5403] tipc: Enabling of bearer rejected, failed to enable media [ 1099.859043][ T5411] ip_tables: iptables: counters copy to user failed while replacing table [ 1099.859433][ T5411] netlink: 'syz.2.8241': attribute type 1 has an invalid length. [ 1099.899529][ T5411] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1099.922605][ T5411] bond18: (slave gretap5): making interface the new active one [ 1099.934783][ T5411] bond18: (slave gretap5): Enslaving as an active interface with an up link [ 1100.019660][ T5415] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8243'. [ 1100.415476][ T5429] ip_tables: iptables: counters copy to user failed while replacing table [ 1100.619124][ T5440] netlink: 312 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1100.960718][ T5449] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8251'. [ 1100.960806][ T5449] netlink: 'syz.3.8251': attribute type 8 has an invalid length. [ 1100.983058][ T5449] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1100.983095][ T5449] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1101.050667][ T5450] Bluetooth: ISO socket layer initialized [ 1101.064174][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8252'. [ 1101.221721][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8253'. [ 1101.243118][ T5457] netlink: 'syz.1.8254': attribute type 2 has an invalid length. [ 1102.449501][ T5500] dvmrp0: entered allmulticast mode [ 1102.457920][ T5502] ip_tables: iptables: counters copy to user failed while replacing table [ 1102.460973][ T5502] netlink: 'syz.1.8266': attribute type 1 has an invalid length. [ 1102.530687][ T5501] ksmbd: Unknown IPC event: 8, ignore. [ 1102.545578][ T5502] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1102.546593][ T5500] dvmrp0: left allmulticast mode [ 1102.644402][ T5507] bond15: (slave gretap4): making interface the new active one [ 1102.651962][ T5507] bond15: (slave gretap4): Enslaving as an active interface with an up link [ 1102.984502][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8270'. [ 1103.122667][ T5524] batman_adv: batadv0: Adding interface: syzkaller0 [ 1103.122686][ T5524] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.122718][ T5524] batman_adv: batadv0: Interface activated: syzkaller0 [ 1103.189472][ T5517] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1103.256490][ T5517] batman_adv: batadv0: Removing interface: syzkaller0 [ 1103.366430][ T5533] ip_tables: iptables: counters copy to user failed while replacing table [ 1103.797220][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1103.829795][ T5546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1103.937164][ T5554] ip_tables: iptables: counters copy to user failed while replacing table [ 1103.937617][ T5554] netlink: 'syz.4.8281': attribute type 1 has an invalid length. [ 1103.984818][ T5554] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1104.006852][ T5554] bond23: (slave gretap8): making interface the new active one [ 1104.007913][ T5554] bond23: (slave gretap8): Enslaving as an active interface with an up link [ 1104.942740][ T5582] x_tables: unsorted underflow at hook 3 [ 1105.210651][ T5584] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 1105.296810][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8289'. [ 1105.710467][ T5605] xt_nfacct: accounting object `' does not exist [ 1105.759304][ T5605] netlink: 'syz.4.8292': attribute type 2 has an invalid length. [ 1105.892962][ T5608] ip_tables: iptables: counters copy to user failed while replacing table [ 1105.920499][ T5608] netlink: 'syz.3.8293': attribute type 1 has an invalid length. [ 1105.969306][ T5608] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1106.064954][ T5608] bond13: (slave gretap5): making interface the new active one [ 1106.068012][ T5608] bond13: (slave gretap5): Enslaving as an active interface with an up link [ 1106.223094][ T5620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1106.445446][ T5624] netlink: 'syz.3.8297': attribute type 83 has an invalid length. [ 1106.812500][ T5632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8299'. [ 1106.870218][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8302'. [ 1106.870243][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8302'. [ 1107.284545][ T5649] ip6gre2: entered allmulticast mode [ 1107.478657][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.528409][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8308'. [ 1107.685631][ T5662] netlink: 'syz.4.8305': attribute type 3 has an invalid length. [ 1107.685667][ T5662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8305'. [ 1107.804106][ T5649] netlink: Failed to add helper -22 [ 1107.804157][ T5649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.873987][T15149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.962024][T18335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.122508][ T5675] ip_tables: iptables: counters copy to user failed while replacing table [ 1108.171496][ T5675] netlink: 'syz.1.8313': attribute type 16 has an invalid length. [ 1108.171533][ T5675] netlink: 'syz.1.8313': attribute type 17 has an invalid length. [ 1108.215904][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.240958][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.304341][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1108.309648][ T5675] 0ªX¹¦Dö»: left allmulticast mode [ 1108.417003][ T5675] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.417197][ T5675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.424633][T15149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.462810][ T5675] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.463011][ T5675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.523407][ T5675] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1108.606880][ T1958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.754429][ T5701] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1282) ! [ 1108.759409][ T5700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1108.763101][ T5700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8318'. [ 1108.991656][ T5715] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8322'. [ 1109.055612][ T5722] xt_NFQUEUE: number of total queues is 0 [ 1109.129724][ T5720] ip6gretap1: entered allmulticast mode [ 1109.131517][ T5720] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1109.131534][ T5720] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.131776][ T5720] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1109.149224][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8323'. [ 1109.259124][ T5733] tipc: Enabled bearer , priority 0 [ 1109.275075][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1109.419959][ T5741] netlink: 'syz.4.8327': attribute type 1 has an invalid length. [ 1110.907360][ T50] net_ratelimit: 5 callbacks suppressed [ 1110.907382][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.368031][ T1958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.443182][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.043024][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.591157][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.281125][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.735019][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.492265][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.562588][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.563081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.130626][ T1957] net_ratelimit: 2 callbacks suppressed [ 1116.130682][ T1957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.152704][ T5750] syzkaller0: entered promiscuous mode [ 1116.152744][ T5750] syzkaller0: entered allmulticast mode [ 1116.238232][ T5751] ipvlan2: entered promiscuous mode [ 1116.244499][ T5751] bridge0: port 1(ipvlan2) entered blocking state [ 1116.244596][ T5751] bridge0: port 1(ipvlan2) entered disabled state [ 1116.244756][ T5751] ipvlan2: entered allmulticast mode [ 1116.244772][ T5751] bridge0: entered allmulticast mode [ 1116.258785][ T5751] ipvlan2: left allmulticast mode [ 1116.258804][ T5751] bridge0: left allmulticast mode [ 1116.262795][ T5761] __nla_validate_parse: 2 callbacks suppressed [ 1116.262815][ T5761] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8331'. [ 1116.342507][ T5731] tipc: Resetting bearer [ 1116.450745][ T5731] tipc: Disabling bearer [ 1116.758049][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8334'. [ 1116.813665][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.929533][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8336'. [ 1117.105791][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.244472][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.458016][ T5796] batman_adv: batadv0: Adding interface: gretap5 [ 1117.458034][ T5796] batman_adv: batadv0: The MTU of interface gretap5 is too small (1244) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 1117.458063][ T5796] batman_adv: batadv0: Interface activated: gretap5 [ 1117.495500][ T5807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.495794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.535658][ T5808] siw: device registration error -23 [ 1117.674396][ T5805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.675324][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.675629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.718701][ T5813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8343'. [ 1117.924634][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.175816][ T5835] netlink: 'syz.0.8350': attribute type 1 has an invalid length. [ 1118.409926][ T5835] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1118.477924][ T5840] bond23: (slave gretap10): making interface the new active one [ 1118.493986][ T5840] bond23: (slave gretap10): Enslaving as an active interface with an up link [ 1118.560752][ T5843] netlink: 296 bytes leftover after parsing attributes in process `syz.4.8351'. [ 1118.918413][ T5857] x_tables: duplicate entry at hook 1 [ 1119.211531][ T5857] netlink: 'syz.3.8355': attribute type 1 has an invalid length. [ 1119.484508][ T5872] bond24: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1119.641285][ T5877] netlink: 'syz.1.8359': attribute type 21 has an invalid length. [ 1119.641310][ T5877] IPv6: NLM_F_CREATE should be specified when creating new route [ 1119.641463][ T5877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.641474][ T5877] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.641512][ T5877] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.641535][ T5877] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.714997][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8358'. [ 1120.021899][ T5872] bond24 (unregistering): Released all slaves [ 1120.208475][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8362'. [ 1120.208592][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8362'. [ 1120.513034][ T5893] netlink: 'syz.4.8362': attribute type 62 has an invalid length. [ 1121.100766][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8368'. [ 1121.100826][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8368'. [ 1121.296137][ T50] net_ratelimit: 9 callbacks suppressed [ 1121.296159][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.714405][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.414524][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.836640][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.861570][ T5957] netlink: 'syz.2.8381': attribute type 1 has an invalid length. [ 1122.879590][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.253108][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1123.270159][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1123.271094][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1123.296674][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1123.297346][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1123.299079][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8386'. [ 1123.537217][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.882362][ T52] block nbd10: Receive control failed (result -32) [ 1123.883460][ T5614] block nbd10: Receive control failed (result -32) [ 1123.947714][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.992889][ T5992] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8391'. [ 1124.219310][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8394'. [ 1124.351502][ T6001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8397'. [ 1124.374552][ T6001] netlink: 'syz.1.8397': attribute type 10 has an invalid length. [ 1124.374572][ T6001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8397'. [ 1124.636535][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.738378][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.738868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.842801][ T6013] žÿ: renamed from team_slave_1 (while UP) [ 1125.286426][ T6033] bridge_slave_1: left allmulticast mode [ 1125.286453][ T6033] bridge_slave_1: left promiscuous mode [ 1125.286667][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.336857][ T6033] bridge_slave_0: left allmulticast mode [ 1125.336887][ T6033] bridge_slave_0: left promiscuous mode [ 1125.337136][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.574143][ T6057] siw: device registration error -23 [ 1126.794664][ T6059] netlink: 'syz.3.8412': attribute type 11 has an invalid length. [ 1126.794703][ T6059] netlink: 'syz.3.8412': attribute type 11 has an invalid length. [ 1126.953856][ T133] net_ratelimit: 3 callbacks suppressed [ 1126.953877][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.393909][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.064808][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.261854][ T6080] ip_tables: iptables: counters copy to user failed while replacing table [ 1128.262356][ T6080] netlink: 'syz.1.8417': attribute type 1 has an invalid length. [ 1128.274478][ T6092] __nla_validate_parse: 9 callbacks suppressed [ 1128.274514][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1128.411556][ T6080] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1128.504183][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.527138][ T6089] bond17: (slave gretap6): making interface the new active one [ 1128.532485][ T6089] bond17: (slave gretap6): Enslaving as an active interface with an up link [ 1128.651714][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.981875][ T6103] siw: device registration error -23 [ 1129.164761][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.614135][T18335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.720593][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8427'. [ 1130.273914][ T1964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.327032][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8431'. [ 1130.545238][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.722336][ T6138] netlink: 'syz.3.8435': attribute type 1 has an invalid length. [ 1130.763455][ T6142] x_tables: duplicate underflow at hook 1 [ 1130.918603][ T6138] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1130.984509][ T6149] bond15: (slave gretap6): making interface the new active one [ 1130.990165][ T6149] bond15: (slave gretap6): Enslaving as an active interface with an up link [ 1130.991933][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8436'. [ 1131.185975][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1131.447997][ T6165] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8437'. [ 1132.275384][ T6191] netlink: 'syz.3.8445': attribute type 2 has an invalid length. [ 1132.316298][ T6194] net_ratelimit: 5 callbacks suppressed [ 1132.316318][ T6194] ip_tables: iptables: counters copy to user failed while replacing table [ 1132.316756][ T6194] netlink: 'syz.4.8448': attribute type 1 has an invalid length. [ 1132.446468][ T6194] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1132.461924][ T6200] siw: device registration error -23 [ 1132.535442][ T6198] bond24: (slave gretap9): making interface the new active one [ 1132.536903][ T6198] bond24: (slave gretap9): Enslaving as an active interface with an up link [ 1132.585440][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.904120][ T6211] xt_socket: unknown flags 0x4c [ 1133.034851][ T1962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.115028][ T6220] netlink: 'syz.3.8455': attribute type 21 has an invalid length. [ 1133.115056][ T6220] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1133.115132][ T6220] netlink: 'syz.3.8455': attribute type 4 has an invalid length. [ 1133.115146][ T6220] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8455'. [ 1133.605578][ T6231] ip_tables: iptables: counters copy to user failed while replacing table [ 1133.818012][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8460'. [ 1133.975279][ T6247] ip_tables: iptables: counters copy to user failed while replacing table [ 1134.035853][ T6247] netlink: 'syz.0.8463': attribute type 1 has an invalid length. [ 1134.138324][ T6247] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1134.174466][ T1963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.241143][ T6253] bond24: (slave gretap11): making interface the new active one [ 1134.243076][ T6253] bond24: (slave gretap11): Enslaving as an active interface with an up link [ 1134.352226][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1134.397002][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.518464][ T6274] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1134.587932][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8467'. [ 1134.587955][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8467'. [ 1134.642613][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1134.642823][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1134.643000][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1134.653920][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1134.654274][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1134.654594][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1134.772279][ T6263] tipc: Enabled bearer , priority 10 [ 1134.922712][ T6283] netlink: 'syz.4.8467': attribute type 62 has an invalid length. [ 1135.314693][ T1957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.717534][ T6314] bridge0: port 1(vlan3) entered blocking state [ 1135.717759][ T6314] bridge0: port 1(vlan3) entered disabled state [ 1135.718083][ T6314] vlan3: entered allmulticast mode [ 1135.718119][ T6314] geneve0: entered allmulticast mode [ 1135.837187][ T6318] netlink: 'syz.4.8474': attribute type 62 has an invalid length. [ 1135.884152][ T9] tipc: Node number set to 3139480394 [ 1136.021946][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.146613][ T6325] netlink: 'syz.1.8477': attribute type 17 has an invalid length. [ 1136.270256][ T6332] FAULT_INJECTION: forcing a failure. [ 1136.270256][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.270307][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.4.8478 Not tainted syzkaller #0 PREEMPT(full) [ 1136.270330][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1136.270342][ T6332] Call Trace: [ 1136.270348][ T6332] [ 1136.270357][ T6332] dump_stack_lvl+0xe8/0x150 [ 1136.270386][ T6332] should_fail_ex+0x410/0x560 [ 1136.270413][ T6332] _copy_from_iter+0x1d3/0x1660 [ 1136.270441][ T6332] ? __alloc_skb+0x27a/0x7a0 [ 1136.270468][ T6332] ? __alloc_skb+0x27a/0x7a0 [ 1136.270498][ T6332] ? __alloc_skb+0x27a/0x7a0 [ 1136.270523][ T6332] ? __pfx__copy_from_iter+0x10/0x10 [ 1136.270544][ T6332] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1136.270562][ T6332] ? __alloc_skb+0x27a/0x7a0 [ 1136.270584][ T6332] ? __alloc_skb+0x27a/0x7a0 [ 1136.270619][ T6332] ? netlink_sendmsg+0x650/0xb40 [ 1136.270641][ T6332] ? skb_put+0x112/0x210 [ 1136.270660][ T6332] netlink_sendmsg+0x6c0/0xb40 [ 1136.270691][ T6332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.270722][ T6332] ? apparmor_socket_sendmsg+0x98/0x360 [ 1136.270747][ T6332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1136.270766][ T6332] sock_sendmsg_nosec+0x14e/0x190 [ 1136.270793][ T6332] ____sys_sendmsg+0x54e/0x850 [ 1136.270815][ T6332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1136.270841][ T6332] ? import_iovec+0x73/0xa0 [ 1136.270870][ T6332] ___sys_sendmsg+0x2a5/0x360 [ 1136.270887][ T6332] ? __lock_acquire+0x747/0x2de0 [ 1136.270910][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1136.270961][ T6332] ? __fget_files+0x2a/0x420 [ 1136.270988][ T6332] ? __fget_files+0x3a2/0x420 [ 1136.271022][ T6332] __x64_sys_sendmsg+0x1b1/0x290 [ 1136.271044][ T6332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1136.271081][ T6332] do_syscall_64+0x166/0x520 [ 1136.271102][ T6332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.271119][ T6332] ? clear_bhb_loop+0x70/0xc0 [ 1136.271141][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.271160][ T6332] RIP: 0033:0x7f6e5b99e559 [ 1136.271188][ T6332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.271203][ T6332] RSP: 002b:00007f6e5c843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1136.271222][ T6332] RAX: ffffffffffffffda RBX: 00007f6e5bc25fa0 RCX: 00007f6e5b99e559 [ 1136.271235][ T6332] RDX: 0000000000000080 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1136.271246][ T6332] RBP: 00007f6e5c843090 R08: 0000000000000000 R09: 0000000000000000 [ 1136.271258][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1136.271268][ T6332] R13: 00007f6e5bc26038 R14: 00007f6e5bc25fa0 R15: 00007ffe92733ea8 [ 1136.271298][ T6332] [ 1136.578727][ T6332] ip6_vti0: left promiscuous mode [ 1136.909203][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.202832][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.232288][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.258687][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.283821][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.287275][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.290963][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.329282][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.352960][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.368859][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.372252][ T6357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.495438][ T6360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.598275][ T1966] net_ratelimit: 5 callbacks suppressed [ 1137.598308][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.686823][ T6362] nbd4: detected capacity change from 0 to 2 [ 1137.789549][ T1985] block nbd4: Dead connection, failed to find a fallback [ 1138.249531][ T6389] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1138.284977][ T1958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.285434][ T6389] netlink: 'syz.4.8496': attribute type 2 has an invalid length. [ 1138.292798][ T6389] : entered promiscuous mode [ 1138.746923][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.837320][ T6410] __nla_validate_parse: 141 callbacks suppressed [ 1138.837344][ T6410] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8504'. [ 1139.141434][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8503'. [ 1139.141459][ T6427] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8503'. [ 1139.141477][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8503'. [ 1139.141640][ T6427] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8503'. [ 1139.426583][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.872983][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8511'. [ 1139.873011][ T6437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8511'. [ 1139.896520][ T1957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.989392][ T6435] tc_dump_action: action bad kind [ 1140.149696][ T1968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.585068][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.671277][ T6465] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1140.712303][ T6465] bond26: entered promiscuous mode [ 1140.727540][ T6471] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8516'. [ 1140.778154][ T6465] team0: Port device bond26 added [ 1141.024538][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.075830][ T6482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1141.241931][ T6487] siw: device registration error -23 [ 1141.347843][ T1962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.655905][ T6500] nbd: couldn't find a device at index 0 [ 1142.764222][ T6541] net_ratelimit: 3 callbacks suppressed [ 1142.764243][ T6541] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1142.834212][ T1957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.283536][ T1958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.516481][ T6558] Bluetooth: hci0: unsupported parameter 5135 [ 1143.516520][ T6558] Bluetooth: hci0: unsupported parameter 8192 [ 1143.516547][ T6558] Bluetooth: hci0: unsupported parameter 5135 [ 1143.516573][ T6558] Bluetooth: hci0: unsupported parameter 8192 [ 1143.547651][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.552330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.949465][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.394507][ T1965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.414458][ T6586] nbd: couldn't find a device at index 2 [ 1144.657433][ T6594] tap0: tun_chr_ioctl cmd 2148553947 [ 1144.682397][ T6596] veth0: entered promiscuous mode [ 1144.699936][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8543'. [ 1144.772292][ T6602] netlink: 'syz.0.8545': attribute type 21 has an invalid length. [ 1144.772417][ T6602] netlink: 'syz.0.8545': attribute type 6 has an invalid length. [ 1144.772448][ T6602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8545'. [ 1144.867375][ T6606] netlink: Conntrack attr has 8 unknown bytes [ 1144.867412][ T6606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1144.868856][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8547'. [ 1144.913071][ T6607] syzkaller0: entered promiscuous mode [ 1144.913127][ T6607] syzkaller0: entered allmulticast mode [ 1144.969412][ T6610] [ 1144.971793][ T6610] ====================================================== [ 1144.978836][ T6610] WARNING: possible circular locking dependency detected [ 1144.985884][ T6610] syzkaller #0 Not tainted [ 1144.990312][ T6610] ------------------------------------------------------ [ 1144.997343][ T6610] syz.4.8548/6610 is trying to acquire lock: [ 1145.002918][ T6606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8547'. [ 1145.012256][ T6610] ffffffff8fe90360 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 1145.021866][ T6610] [ 1145.021866][ T6610] but task is already holding lock: [ 1145.029239][ T6610] ffff888053772530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 1145.038876][ T6610] [ 1145.038876][ T6610] which lock already depends on the new lock. [ 1145.038876][ T6610] [ 1145.049304][ T6610] [ 1145.049304][ T6610] the existing dependency chain (in reverse order) is: [ 1145.058401][ T6610] [ 1145.058401][ T6610] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 1145.065966][ T6610] __mutex_lock+0x19d/0x1550 [ 1145.071082][ T6610] __ipv6_dev_mc_inc+0x4e/0xaf0 [ 1145.076458][ T6610] addrconf_join_solict+0x104/0x190 [ 1145.082184][ T6610] __ipv6_dev_ac_inc+0x8fd/0xb90 [ 1145.087640][ T6610] ipv6_sock_ac_join+0x665/0x820 [ 1145.093100][ T6610] do_ipv6_setsockopt+0x1f56/0x2960 [ 1145.098819][ T6610] ipv6_setsockopt+0x59/0x170 [ 1145.104015][ T6610] do_sock_setsockopt+0x17c/0x1b0 [ 1145.109583][ T6610] __x64_sys_setsockopt+0x13d/0x1b0 [ 1145.115314][ T6610] do_syscall_64+0x166/0x520 [ 1145.120437][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.126855][ T6610] [ 1145.126855][ T6610] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1145.134591][ T6610] lock_sock_nested+0x41/0x100 [ 1145.139896][ T6610] inet_shutdown+0x6a/0x390 [ 1145.144931][ T6610] nbd_mark_nsock_dead+0x2cb/0x550 [ 1145.150650][ T6610] sock_shutdown+0x15e/0x260 [ 1145.155764][ T6610] nbd_clear_sock+0x24/0x170 [ 1145.160879][ T6610] nbd_config_put+0x477/0x7e0 [ 1145.166080][ T6610] nbd_genl_connect+0x19b8/0x1cd0 [ 1145.171744][ T6610] genl_family_rcv_msg_doit+0x233/0x340 [ 1145.177828][ T6610] genl_rcv_msg+0x614/0x7a0 [ 1145.182855][ T6610] netlink_rcv_skb+0x226/0x4a0 [ 1145.188150][ T6610] genl_rcv+0x28/0x40 [ 1145.192663][ T6610] netlink_unicast+0x7bd/0x940 [ 1145.197954][ T6610] netlink_sendmsg+0x813/0xb40 [ 1145.203246][ T6610] sock_sendmsg_nosec+0x14e/0x190 [ 1145.208793][ T6610] ____sys_sendmsg+0x54e/0x850 [ 1145.214081][ T6610] ___sys_sendmsg+0x2a5/0x360 [ 1145.219300][ T6610] __x64_sys_sendmsg+0x1b1/0x290 [ 1145.224846][ T6610] do_syscall_64+0x166/0x520 [ 1145.229967][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.236380][ T6610] [ 1145.236380][ T6610] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1145.244037][ T6610] __mutex_lock+0x19d/0x1550 [ 1145.249174][ T6610] nbd_queue_rq+0x373/0xff0 [ 1145.256465][ T6610] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1145.262550][ T6610] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1145.269418][ T6610] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1145.276183][ T6610] blk_mq_run_work_fn+0x16c/0x300 [ 1145.281736][ T6610] process_scheduled_works+0xc3d/0x1630 [ 1145.287800][ T6610] worker_thread+0xa47/0xfb0 [ 1145.292908][ T6610] kthread+0x38b/0x480 [ 1145.297488][ T6610] ret_from_fork+0x514/0xb70 [ 1145.302603][ T6610] ret_from_fork_asm+0x1a/0x30 [ 1145.307889][ T6610] [ 1145.307889][ T6610] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1145.315099][ T6610] __mutex_lock+0x19d/0x1550 [ 1145.320217][ T6610] nbd_queue_rq+0xc1/0xff0 [ 1145.325160][ T6610] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1145.331226][ T6610] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1145.338074][ T6610] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1145.344587][ T6610] blk_mq_run_work_fn+0x16c/0x300 [ 1145.350165][ T6610] process_scheduled_works+0xc3d/0x1630 [ 1145.356250][ T6610] worker_thread+0xa47/0xfb0 [ 1145.361380][ T6610] kthread+0x38b/0x480 [ 1145.365968][ T6610] ret_from_fork+0x514/0xb70 [ 1145.371088][ T6610] ret_from_fork_asm+0x1a/0x30 [ 1145.376376][ T6610] [ 1145.376376][ T6610] -> #3 (set->srcu){.+.+}-{0:0}: [ 1145.383498][ T6610] __synchronize_srcu+0xc9/0x2f0 [ 1145.388996][ T6610] elevator_switch+0x1e8/0x7b0 [ 1145.394283][ T6610] elevator_change+0x2fa/0x480 [ 1145.399568][ T6610] elevator_set_default+0x375/0x440 [ 1145.405292][ T6610] blk_register_queue+0x3f3/0x4e0 [ 1145.410854][ T6610] __add_disk+0x6b8/0xdb0 [ 1145.415716][ T6610] add_disk_fwnode+0x100/0x3a0 [ 1145.421011][ T6610] nbd_dev_add+0x733/0xb60 [ 1145.425951][ T6610] nbd_init+0x168/0x1f0 [ 1145.430624][ T6610] do_one_initcall+0x250/0x870 [ 1145.435913][ T6610] do_initcall_level+0x10a/0x1a0 [ 1145.441372][ T6610] do_initcalls+0x59/0xa0 [ 1145.446244][ T6610] kernel_init_freeable+0x29d/0x3e0 [ 1145.451958][ T6610] kernel_init+0x22/0x1d0 [ 1145.456823][ T6610] ret_from_fork+0x514/0xb70 [ 1145.461938][ T6610] ret_from_fork_asm+0x1a/0x30 [ 1145.467226][ T6610] [ 1145.467226][ T6610] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1145.475042][ T6610] __mutex_lock+0x19d/0x1550 [ 1145.480155][ T6610] elevator_change+0x1af/0x480 [ 1145.485438][ T6610] elevator_set_none+0xb5/0x140 [ 1145.490819][ T6610] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1145.497146][ T6610] nbd_start_device+0x189/0xb30 [ 1145.502519][ T6610] nbd_genl_connect+0x167d/0x1cd0 [ 1145.508061][ T6610] genl_family_rcv_msg_doit+0x233/0x340 [ 1145.514123][ T6610] genl_rcv_msg+0x614/0x7a0 [ 1145.519138][ T6610] netlink_rcv_skb+0x226/0x4a0 [ 1145.524421][ T6610] genl_rcv+0x28/0x40 [ 1145.528923][ T6610] netlink_unicast+0x7bd/0x940 [ 1145.534201][ T6610] netlink_sendmsg+0x813/0xb40 [ 1145.539487][ T6610] sock_sendmsg_nosec+0x14e/0x190 [ 1145.545034][ T6610] ____sys_sendmsg+0x54e/0x850 [ 1145.550309][ T6610] ___sys_sendmsg+0x2a5/0x360 [ 1145.555500][ T6610] __x64_sys_sendmsg+0x1b1/0x290 [ 1145.560952][ T6610] do_syscall_64+0x166/0x520 [ 1145.566059][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.572475][ T6610] [ 1145.572475][ T6610] -> #1 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 1145.581077][ T6610] blk_alloc_queue+0x544/0x690 [ 1145.586362][ T6610] __blk_mq_alloc_disk+0x194/0x390 [ 1145.591997][ T6610] nbd_dev_add+0x494/0xb60 [ 1145.596929][ T6610] nbd_init+0x168/0x1f0 [ 1145.601612][ T6610] do_one_initcall+0x250/0x870 [ 1145.606903][ T6610] do_initcall_level+0x10a/0x1a0 [ 1145.612360][ T6610] do_initcalls+0x59/0xa0 [ 1145.617206][ T6610] kernel_init_freeable+0x29d/0x3e0 [ 1145.622929][ T6610] kernel_init+0x22/0x1d0 [ 1145.627773][ T6610] ret_from_fork+0x514/0xb70 [ 1145.632887][ T6610] ret_from_fork_asm+0x1a/0x30 [ 1145.638176][ T6610] [ 1145.638176][ T6610] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1145.645379][ T6610] __lock_acquire+0x164c/0x2de0 [ 1145.650755][ T6610] lock_acquire+0x115/0x350 [ 1145.655779][ T6610] fs_reclaim_acquire+0x71/0x100 [ 1145.661246][ T6610] __kmalloc_cache_noprof+0x61/0x600 [ 1145.667071][ T6610] __ipv6_dev_mc_inc+0x447/0xaf0 [ 1145.672531][ T6610] ipv6_add_dev+0xe6d/0x1400 [ 1145.677642][ T6610] addrconf_notify+0x771/0x1050 [ 1145.683015][ T6610] notifier_call_chain+0x1a5/0x3d0 [ 1145.688647][ T6610] register_netdevice+0x1c03/0x2280 [ 1145.694366][ T6610] l2tp_eth_create+0x7f1/0xbd0 [ 1145.699754][ T6610] l2tp_nl_cmd_session_create+0x714/0xbe0 [ 1145.706019][ T6610] genl_family_rcv_msg_doit+0x233/0x340 [ 1145.712092][ T6610] genl_rcv_msg+0x614/0x7a0 [ 1145.717550][ T6610] netlink_rcv_skb+0x226/0x4a0 [ 1145.722844][ T6610] genl_rcv+0x28/0x40 [ 1145.727351][ T6610] netlink_unicast+0x7bd/0x940 [ 1145.732650][ T6610] netlink_sendmsg+0x813/0xb40 [ 1145.737961][ T6610] sock_sendmsg_nosec+0x14e/0x190 [ 1145.743535][ T6610] ____sys_sendmsg+0x54e/0x850 [ 1145.749279][ T6610] ___sys_sendmsg+0x2a5/0x360 [ 1145.754481][ T6610] __x64_sys_sendmsg+0x1b1/0x290 [ 1145.759947][ T6610] do_syscall_64+0x166/0x520 [ 1145.765060][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.771990][ T6610] [ 1145.771990][ T6610] other info that might help us debug this: [ 1145.771990][ T6610] [ 1145.782221][ T6610] Chain exists of: [ 1145.782221][ T6610] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 1145.782221][ T6610] [ 1145.794817][ T6610] Possible unsafe locking scenario: [ 1145.794817][ T6610] [ 1145.802436][ T6610] CPU0 CPU1 [ 1145.807984][ T6610] ---- ---- [ 1145.813341][ T6610] lock(&idev->mc_lock); [ 1145.818451][ T6610] lock(sk_lock-AF_INET6); [ 1145.825469][ T6610] lock(&idev->mc_lock); [ 1145.832312][ T6610] lock(fs_reclaim); [ 1145.836288][ T6610] [ 1145.836288][ T6610] *** DEADLOCK *** [ 1145.836288][ T6610] [ 1145.844418][ T6610] locks held by syz.4.8548/6610: 4, last CPU#0: [ 1145.850649][ T6610] #0: ffffffff912b9c28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1145.858827][ T6610] #1: ffffffff912b9a60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1145.867786][ T6610] #2: ffffffff91255d20 (rtnl_mutex){+.+.}-{4:4}, at: l2tp_eth_create+0x7c9/0xbd0 [ 1145.877014][ T6610] #3: ffff888053772530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 1145.886697][ T6610] [ 1145.886697][ T6610] stack backtrace: [ 1145.892582][ T6610] CPU: 0 UID: 0 PID: 6610 Comm: syz.4.8548 Not tainted syzkaller #0 PREEMPT(full) [ 1145.901857][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1145.911908][ T6610] Call Trace: [ 1145.915196][ T6610] [ 1145.918122][ T6610] dump_stack_lvl+0xe8/0x150 [ 1145.922716][ T6610] print_circular_bug+0x2e2/0x300 [ 1145.927754][ T6610] check_noncircular+0x12f/0x150 [ 1145.932737][ T6610] __lock_acquire+0x164c/0x2de0 [ 1145.937601][ T6610] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1145.943493][ T6610] ? rcu_is_watching+0x16/0xb0 [ 1145.948257][ T6610] ? trace_contention_end+0x3d/0x140 [ 1145.953541][ T6610] ? __mutex_lock+0x30b/0x1550 [ 1145.958305][ T6610] lock_acquire+0x115/0x350 [ 1145.962803][ T6610] ? __kmalloc_cache_noprof+0x61/0x600 [ 1145.968261][ T6610] ? __pfx___mutex_lock+0x10/0x10 [ 1145.973294][ T6610] fs_reclaim_acquire+0x71/0x100 [ 1145.978225][ T6610] ? __kmalloc_cache_noprof+0x61/0x600 [ 1145.983682][ T6610] __kmalloc_cache_noprof+0x61/0x600 [ 1145.988964][ T6610] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 1145.994069][ T6610] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 1145.999183][ T6610] __ipv6_dev_mc_inc+0x447/0xaf0 [ 1146.004116][ T6610] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 1146.009840][ T6610] ipv6_add_dev+0xe6d/0x1400 [ 1146.014812][ T6610] addrconf_notify+0x771/0x1050 [ 1146.019674][ T6610] notifier_call_chain+0x1a5/0x3d0 [ 1146.024795][ T6610] register_netdevice+0x1c03/0x2280 [ 1146.029999][ T6610] ? __pfx_register_netdevice+0x10/0x10 [ 1146.035549][ T6610] ? __pfx_l2tp_session_register+0x10/0x10 [ 1146.041355][ T6610] ? l2tp_eth_create+0x37e/0xbd0 [ 1146.046383][ T6610] l2tp_eth_create+0x7f1/0xbd0 [ 1146.051153][ T6610] ? l2tp_eth_create+0x37e/0xbd0 [ 1146.056095][ T6610] ? __pfx_l2tp_eth_create+0x10/0x10 [ 1146.061392][ T6610] l2tp_nl_cmd_session_create+0x714/0xbe0 [ 1146.067114][ T6610] ? trace_kmalloc+0x2a/0xf0 [ 1146.071701][ T6610] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 1146.077956][ T6610] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1146.084280][ T6610] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1146.090691][ T6610] genl_family_rcv_msg_doit+0x233/0x340 [ 1146.096242][ T6610] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1146.102314][ T6610] ? bpf_lsm_capable+0x9/0x20 [ 1146.106993][ T6610] ? security_capable+0x7e/0x2c0 [ 1146.111932][ T6610] genl_rcv_msg+0x614/0x7a0 [ 1146.116435][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.121452][ T6610] ? __pfx_l2tp_nl_cmd_session_create+0x10/0x10 [ 1146.127723][ T6610] netlink_rcv_skb+0x226/0x4a0 [ 1146.132489][ T6610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1146.137511][ T6610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1146.142806][ T6610] ? down_read+0x2be/0x330 [ 1146.147227][ T6610] genl_rcv+0x28/0x40 [ 1146.151208][ T6610] netlink_unicast+0x7bd/0x940 [ 1146.155972][ T6610] netlink_sendmsg+0x813/0xb40 [ 1146.160748][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.166039][ T6610] ? apparmor_socket_sendmsg+0x98/0x360 [ 1146.171585][ T6610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.176885][ T6610] sock_sendmsg_nosec+0x14e/0x190 [ 1146.181926][ T6610] ____sys_sendmsg+0x54e/0x850 [ 1146.186693][ T6610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1146.191978][ T6610] ? import_iovec+0x73/0xa0 [ 1146.196490][ T6610] ___sys_sendmsg+0x2a5/0x360 [ 1146.201161][ T6610] ? __lock_acquire+0x747/0x2de0 [ 1146.206099][ T6610] ? __pfx____sys_sendmsg+0x10/0x10 [ 1146.211296][ T6610] ? futex_wait+0x2a2/0x390 [ 1146.215804][ T6610] ? __fget_files+0x2a/0x420 [ 1146.220391][ T6610] ? __fget_files+0x3a2/0x420 [ 1146.225077][ T6610] __x64_sys_sendmsg+0x1b1/0x290 [ 1146.230015][ T6610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1146.235474][ T6610] do_syscall_64+0x166/0x520 [ 1146.240063][ T6610] ? trace_irq_disable+0x3b/0x140 [ 1146.245090][ T6610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.251152][ T6610] ? clear_bhb_loop+0x70/0xc0 [ 1146.255830][ T6610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.261724][ T6610] RIP: 0033:0x7f6e5b99e559 [ 1146.266136][ T6610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.285740][ T6610] RSP: 002b:00007f6e5c843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.294156][ T6610] RAX: ffffffffffffffda RBX: 00007f6e5bc25fa0 RCX: 00007f6e5b99e559 [ 1146.302129][ T6610] RDX: 0000000000002040 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1146.310098][ T6610] RBP: 00007f6e5ba358b0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.318068][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.326030][ T6610] R13: 00007f6e5bc26038 R14: 00007f6e5bc25fa0 R15: 00007ffe92733ea8 [ 1146.334011][ T6610] [ 1146.373330][ T1958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.407771][ T6610] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8548'. [ 1146.424993][ T6615] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8548'. [ 1146.498978][ T6619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8549'. [ 1147.954102][ T1966] net_ratelimit: 5 callbacks suppressed [ 1147.954124][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.634641][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.094000][ T1962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.734231][T18327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.213793][T18335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.844030][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.323960][T18327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.664772][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.943971][T18327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.443797][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.043750][ T1966] net_ratelimit: 2 callbacks suppressed [ 1153.043773][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.563832][ T1966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.153830][ T1962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.664257][ T1958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog