last executing test programs: 7.358050625s ago: executing program 3 (id=2371): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38040000f303040026bd7000fcdbdf25010000000100000029000000dc000000030000000004000002000000ff0f000003000000010400000400000007000000000000000500000001fcffff02000000fbfff7ff0180000001000080000100008d210000fcffff09020000000300000006000000000100001107000004000000060000000a000000ffffffff75ff00000800000000080000f7ffffff0100000008000000ff03000077000000ffffffff06000000ffffff7f00000000f708000081ffffff000000000000000000008900ffffffff00000000040000000a000000f40000003d200000faffffff02000000e2fcffffff0100000700000000040000820000000600000000000000090000000900000009000000010000000700000009000000fbffffff050000000e000000df000000fffeffff0900000006000000e7000000a9d80000010100001a08000004000000070000000c000000050000005e000000000000300000000000000000e40500009b090000010000000200000006000000faffffff04000000018000000002000004000000060000000000100001800000010000000300000005000000010000800800000002000000f9ffffff0700000006000000ffff000003000000040000000c0000000000008009000000050000000900000001000000060000000d0000000200000007000000fe7f00000500000088ad0000ffffff7f01000000030000008100000010000000030000000100010004000000dd00000001000000020000000400000002000000fc000000ff7fffff01000000040000000000400005000000010001004000000001000000060000000900000009000000241600000200000001000000090000000400000082000000fbffffff06000000ffffff7f030000000a410000452e00003d380000ff7f0000509b0000d8c90000ff0f000005000000010000000600000000000100c3ffffff080000000300000010000000000002080500000078df00800c0000000200000004000000ef0000000800000002000000d60700000b0400000900000050f8050003000000ff7f00000300000004000000060000000a000000ff7f0000feffffffffffff7f09000000080000000200000009000000ff0300000000008002000000c60000000900000008000000090000000000008000001000dbbb5a58010000800d00000008000000ffffffff827b0000ffffffff060000009800000000020000030000000008000003000000010000008900000007000000010000000800000009000000070000000d000000060000000300000004000000000000000b00000002000000ff0f0000250800000400000005000000050000007f000000ffffffff0900000005000000000000000500000004000000020000008100000007000000d73b000003000000060000000c00000009000000060000001800000073797a3200252a5cda2f5db10073797a31000073797a31001d151bd40ebb45a3a2329e2184bb3b5d7a6ad14926d313a4f1baff03f20b72dacf8ea08bd603f810fd33c2e18190cca9ccc3be12f550735dc802f6520d056f2a7a0f"], 0x438}, 0x1, 0x0, 0x0, 0x80080}, 0x24000000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x20, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) close(0x3) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x8003, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}]}, &(0x7f0000000140)=0x10) accept4(r7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x4, 0x0, 0x1, 0x5d17, 0x3, 0x6}}, {0x10, 0x2, [0x4, 0x0, 0x7f, 0xed7d, 0x7ff, 0x2]}}, {{0x1c, 0x1, {0x5, 0x3, 0xc7, 0xe, 0x2, 0x5412, 0xe, 0x3}}, {0xa, 0x2, [0x7f, 0x4, 0x5]}}, {{0x1c, 0x1, {0x40, 0x0, 0x8b7, 0x3, 0x1, 0x80000001, 0xffff22e7, 0x3}}, {0xa, 0x2, [0x0, 0x7ff, 0x0]}}, {{0x1c, 0x1, {0x5, 0x40, 0x5, 0xffff, 0x0, 0x9, 0x3, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0xf, 0x7, 0xd83, 0x5, 0x0, 0x3, 0x97, 0x1}}, {0x6, 0x2, [0x400]}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 5.959359127s ago: executing program 3 (id=2385): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x1e, 0x1, {0x9, 0x6, 0x9, 0xfffffffc, 0x4, {0x5, 0x2, 0xff69, 0x1, 0x7, 0xffffffff}, {0x1, 0x1, 0xb5, 0x0, 0x9, 0x1}, 0x3, 0x80, 0x6f5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="410400000150010008000a00", @ANYRES32=r5, @ANYBLOB="1400128009000100766574680000000004000280"], 0x3c}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000001400000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) 5.824770742s ago: executing program 0 (id=2387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="3611000004a8a900000000000000c3b7118105be02113e67ad2dead5ba29a61f19048d4aee8cc963cf55134542c2978975ee207df182ce97481cc283e30f", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000064f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x8, 0xa, 0xc, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r7, r2}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7}}]}}]}, 0x48}}, 0x20040084) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x700}, {0xa}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x3, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x0, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xc, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r14 = socket$kcm(0x11, 0x3, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r15) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, 0x0, 0x44000093) sendmsg$kcm(r14, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r16, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) 5.380137288s ago: executing program 3 (id=2392): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) bind$xdp(r1, &(0x7f0000000000)={0x2c, 0x1, r3, 0x25}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.076730577s ago: executing program 0 (id=2396): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xa000000}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.832818178s ago: executing program 0 (id=2399): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB="33b240dc0d2924ed0600a758cb47e726b20ade50ca0444379024eb5ebb5db8b80f5e7febe9dee9885052e2546d92df37f7c9808616816e7961826344c4ead4491c4cb729322451f69733c505ebcb8115065edae5f9aa6312dafe224f20be65ecc5c1000c9cb2c037fc71885a9588b17f500c588865ff1f56ce9f80c414cd1e559043b05c823d899083cc264d03f3"], 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001780)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0xfffffff2, 0x5, 0x7, 0x33, 0x10, 0x7, 0x6}, 0x9c) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) (async) listen(r5, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) (async) listen(r6, 0x50) close(0x3) r7 = socket(0x29, 0x2, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600894f0000100002"], 0x34}}, 0x20000040) 4.631388079s ago: executing program 0 (id=2401): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000098"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x8, 0x4, 0x3) getpeername$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6c6180, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000402000389e50004"], 0x12) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) socket(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r7, 0x3) accept4(r7, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.466115408s ago: executing program 2 (id=2405): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000060006000200010007000100fbff"], 0x40}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xa8, r2, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x8000}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0xd3413b0fb5e4f866}, 0xc004) 2.290656743s ago: executing program 4 (id=2408): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000)=r3, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) (async, rerun: 64) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth1_to_team\x00', 0x2000}) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x4, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) r7 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x8, @none, 0xea1}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="a83bbcf27e78bc426454e731bba0ed83dbad0c3d1c59244665ad3c404ecb6b98c9683b5b", 0x24}, {&(0x7f0000001480)="168f911e311c131f88ebb2f200de4cdc4dc350938863cee3dc88260f4bb705a67ec070700e2dcd8c29bf71fe797226963c6b6508425664cfd7849f9296389abe4cefc549a40f7fb07786b61004d24d2fd554c5332ac566f77fc0732740b753a9ae342dbbf62ce993a5afd5d501f756b7d0fa6ea1ee5b046a5eb362ffd217b2633fe8af7ee66e9a19fc1930b4d6540fb822f60d133dc50affba50c46dbaaf408c55f85dfb52ccf0d7b55825084b7c15256ae7d714031064b61a3270185ebbd333ce44d8763a8320eea82bfd621adbc2893eabb58941b21976ed333f3fa2ab", 0xde}, {&(0x7f0000001580)="1274b875ad13c99b86c411a91a96daa5c8d4075f8317de27c8d7225f63f09cd0aca2292b6063fa600d267fccf810cf67dd1b212edd78756f5932d3af47167c452cdcbe00ecc6db5248c0d79b5c5010c8f808bb71", 0x54}, {&(0x7f0000001600)="16c5bc21e09b4b89b691db6deca5dffa943afd611f2f7d3be06e", 0x1a}, {&(0x7f0000001640)="d1cdbd14", 0x4}], 0x6, &(0x7f0000001700)}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001740)="327ee21b002d6a210812e972da17fcfe97b870aad4c4eb8046c437b5738cbe609749662c60c0cb4fb9a2acdb10", 0x2d}, {&(0x7f0000001780)="25fbb04df70f7e8d23b8192837253ceeaa38275681f9639d748a669f9fb753ee641b449420b5bd2f90755e1705fdbedad31b69525599ebeb5470c93222a2a017abbbd94cfeb4482414428bef25c59aa71be1d892037f0e3c97980936997032543431bb5bc3e1255edaa908a1d150144bd013c2e84816d96c7c6e775bb036a277fbd84a53ea1723f473c3f57836d7543b7c7d0ca3c0e9", 0x96}, {&(0x7f0000001840)="2686e546b6d5fc23b64a859dea838d05b356", 0x12}, {&(0x7f0000001880)="751de0397611eaf3f6c3d1fa3d39c092ef64ce1cbcb71178c4fd7558513f0e94cb728c09c917f155a9c63b7932f17e017830c1bae1b1feddb5903053caef1858d76c6fa6e63d36fd845c7fbf375d4bb0f72369da9fcafc38446be150db479a5d222edfc90a2ffd6e95349e278a67580c7a0222d4fe8e4e01b9d7c4b441b9494dec80aa5a472e27c5659205916db4ced5f82c", 0x92}, {&(0x7f0000001940)="6ebcb34c4eea26887b95618a4f96912a7466facd78d8ea979aa747bba7ba58a6e292bdd0d2aa52474ac2ee69904f86feac3278394a6626251dc73b37ec60d324269f62494985da294b8f7f7b7bee355b6b41934221568e9fb80174830ac5be2f2519ad1c1471b4d10f519bc949b499645d4e3971489f", 0x76}, {&(0x7f00000019c0)="eebe5a4a243fbc8def11bbcde5315d2ed6903e918ef97d1fb27285ea7c4251620e7671e693bbe7428d60afdb99ebc0486dc32e55efc1a6a88d50257568cbaf1affe051df28e0a256584dc2407d5f5b82e70242d39155807fc5907342cc018058827bcbfadbe49bd7ed11b70e8742c93e1c373aac8005effebbb822c1eaae271cd0464c83391a051bf21345ac573c47e1408c368f75e2eed72f880206f0960299aefef7b04b46de2183e488f130f213cec0e33566dfe2ae28dcf65b445d10f2e70115ddceab941a1e62f0a8cac0c53d2a1b85150b07ca2579c08b4d9dba4e0c4bed2f972636c8825a1f8ab857", 0xec}, {&(0x7f0000001ac0)="c47d9b1c9eeb9d5133a528eab4ac7aea6a8084effd7b70f5273f74974bf1a7509f3d030a2b5ee62804a4c97e383c5d8d0e6478083a6ad94d6737d666f9ae72bb873a63b1ee649f5ea72b6191c10120d007ff42c0510c3947449211de2b29bedfc8ad75fd31189ef28c494e10943abb991b15d76710ef4d0c91f7898de9", 0x7d}, {&(0x7f0000001b40)="8eec4ded5704a5fc8c2d96d7f388ba3347409467fb6662b7eedb70495214b49d3f75a8b2bb2a1f583c197670c56c8e9a939138b0a06a14adea0f73f3e456cbdd", 0x40}], 0x8}}], 0x2, 0x4010) (async) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) (async, rerun: 32) pipe(&(0x7f0000000300)) (async, rerun: 32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000000000000000d9f7ab070008bf1cf5c698e96fac53740a2cec804f045e348113ebe889eddc7271de4902a10b6eea56bd0d0a443f01e5b21ec3b7ee25c7118295d30b41f5ea94727b83b6bfe60000000000200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4, 0xffffffffffffffff}, 0x4) (rerun: 32) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57621bc", 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.28143351s ago: executing program 2 (id=2409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0xb6, @dev={0xfe, 0x80, '\x00', 0x1d}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_256={{0x304}, "04e0c2f09d667335", "4ae9f8bb6a42755de868bc0ae8d65e1e6a7e49ec00117ceb723ebcd708aba02d", "05eed16d", "475becab40c78f7d"}, 0x38) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x80003, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000000000b"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0xfffffffffffffffe, 0xd) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) sendmsg$NL80211_CMD_GET_INTERFACE(r9, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r10, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x200400c0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66) close(r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x34}}, 0x0) 2.01969545s ago: executing program 1 (id=2410): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, 0xffffffff, 0x1, 0x2, 0x41, 0x80, 0xa, 0x5}, 0x9c) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfff, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x1) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000001740)=[{&(0x7f00000002c0)="61ba70d54a154034e1b765f800b032f51416a5f781e40140d487208b2dc6746d086af3e9f912583d1e9cd3168f5ca7b481212423531fccf23d359c339d528edaf3ec945260e84454649ec110193cf9d6087b91ed962f8b6dad3a62ad7b46f9a7af55e3948e2ecbc99d90156bfe232feee643ad771ce579b96d38d8808239c7b2dd5fb47f7f9c113dd3300880b68e1b043f405dde80c4492bc9fc3df3789c646df0c1d499c208c123182974327af9c5c9400724e0fb135b8202e39f766bb9fb104b0f957207da23fe62a1bccbf284142d806307074abfde4c0dfb8a09f4a29a0c", 0xe0}, {&(0x7f00000003c0)="b403e2b4c3c10e388dc6bd15aa620fbe30f6fc2ea1b7cd2a99dcac8710e2e7d125b8a90933702cb37e052f6482eaf6fd8ddcd6cb55c0bb692e56436beb1e347769cfa73523490b878f32a577cee22058cc939307d4929027676cf6c06b491cfa579c6fe79dca10e05f02f655a894e63a2eab", 0x72}, {&(0x7f0000000440)="7ae8fa91ffa4d4", 0x7}, {&(0x7f0000000480)="9b4e693663e4b679d0c024c29d", 0xd}, {&(0x7f00000004c0)="dad8fcb4fbe6f66298087800a2d9c225f8de5bf4a1", 0x15}, {&(0x7f0000000500)="14bb7ebff3b75684a870b154825cd804229411c34770c2e0699c01b4b82948196124b1fe82fe7e2fcb1832d625c20acd4360978263846442281989e9ff74c1ea49e8a575b45a507f363aba53f767c788bf7afd3a8e40be0ead0335e6de05b387a912ebc89694c5b8c5e64b71f6e91748e7b5282c6c135812b7de0d81e00eed4de1113f0f1e4088f45025fdc462c80f111b5cc6768532040d240971ad6dd85cbe6283feb070005dcdf9ebf9217dd2a774c4d9", 0xb2}, {&(0x7f00000005c0)="ce54a5bdcd46032e1f31d6ed3aa3663cb54a6d4477852465ce399a11f88be7d6b76304bb8444ec6c2dbedfe0fa413199e8c428041c336b77376cd705fd87992fa606f8ffd3ea55f11982c97828641fb424fbe6484cfd28e7dff809e6b20d0c9ae7a4ebd60859f5a9e6fa9a", 0x6b}, {&(0x7f0000000640)="0b9950ec53ce00cb8d226563abc6dd6aaba6325362c35947fe9fc35220384183c6714ac812ba44ff03a36dad9a6acb226c2792b904feb6d6cc91ca97cf097508183ecd811bed2dc87f11a702f17a21af503686569a5187ef0d950e128b7b62afedf5ac1b7cf2b3f26904e2f28cc44dcb3b206a4f1e6657ff21c2c569cbdd0de1dba306960b146ec950f97bd4e7c8572698bc753dd082fccdade43fe0e0018a963011cddd13d6b4ca74a4e6ec5c6fc9e62a761e9c1c93fd208e57d6faec191727f06ac1ad6191985b0f412ce8280e373dad1db81d3c91d4c3688ec043f46637a3fe6712c65fc59267f22a84aaa931e51f258afe40f53de5bbe5c5b1efd968e9a863b52ecddf1a8140a5fc23cff52b14e0a6ba1c5d87a237372e71d8de346beb9f0747ab482e3ac00e42e49525eb29b041269f336fc0f01539a0c6111fc155e88b15247e166175af0b58286aceba641a384f8901adebb8eee280a85ac064152c20314eb5b521b3845e14cf9fdb55eb12e412725aef43967c9cf1dec6cc3b756ac27f9570e9865821abf6888a4d2946da476f1b6115430f4a55a756ad027dfab420bc2d822d03b7cd6ec397fc87c79629b702446ae094f1e335aa839234ce6eafd9056bfe13ed4190c2835766e81649e08dad226ecfd16a0346c8e89eeb4bac0ce7aeae7b8516278af5403a363407cd829e0eccbcb7842c0b9695115b5a98e4d44b5bdbd56b856dc30921b3ff4c01d1f4d07f1a183289635f6dacd2ba03b0ef6d457a8f7f4462a4d5a2ae65deb0e332f284cfae4ea347022415ff5c665f9e148ed0f64b9b1ab80cee3d207fbf1a057463f525fdc969ec6acea4b43f2304e4f63526d2a075557ceb837b04e50c0586417fd7c764a217797bfa82fdd721c014976fd8555c3a6da9879580405f8b60370797d6ea124e74e73c2fed3cc11f5a569e4ef3853c9c7d0270d7c9664f589e7c9fa9045743831d7f8aa7da03d1aa8802294517adaf5fe7d247e34d3a8d751ff91c39eafa6fba1d794541b18548c132c6232abb30b4b87ae44034544043bc86b4a3d3a5a424ec4b0713f438da7f1b17369164b2b0dca9cf8e38f7803b7cfeb7ca62cbffc27978f1fe838e5261f8aeeb6618f9e43b41c779c421be6fafd8bbe312e72d1a6332acbbd536673e316ea9d3171ad5f1ebe175ad68da69173f840710918333b35bf48b90589dc8d303d26f9883ee1cc6ab53caa8846daa74a1d70f182ff8d6dce1eefdfdf7b423b1edddc3417172e1871e72acd05139893d6693fd0de9c5d9967889ccfa5dbfc13646517e4db51f92adfb6828b0e997488816a690dabe71d79e7c86ea8835f0535872c10fbdb3a9bfdb530cf8a5d004e8bca9a3ad0073150e5789079ea37d4fe4d52b0059b19463deb97f6b5841759af1373a0f96ea78a16a9ad692c9fb892e95dcaaed46398169c390d32651ef03d582b8cfd607e3ad5f4967f71abc3dc0726ea103ceb0cc25793bd06bc18d65328f4511aac8e0c43546a5a707a91099e4c76787574ec4078f1fcfdcc9deb8c2e3602ba87968a3b0a099b9e4bda899f9da7470ff289bdea0f566cf8e8f306011fe1ca7e987021f706a78bf9ce1c386530ce3da56465cdbbf089c3e516b60335fa1cd57d117cb8da77464f6b0356d15f3d2764f899acdf39b217896cfe113a384074cfce1b5066c83c11915b8aac5d2141ab83cfcc839aa74d0f498a93ef2dc6673b96c573d7ec696ff3280863ff5237221cb86e694cb64c297e3ed63b4c375482b13cf2434b66090b82c3ac9cbcee0407ea5882df95969ed89c794f0d67310cc6c61f8fb2b038bc3d82b6e1ad35643d17aaaaf8589795e0a0df277f61657018f84a4bfa92e79eda9e85f63363f26de06ab7341ca5a6bfaa6e76001d65bbf24f4d9191ca7cb13d478aa62c47300b529c0d6d8980528947fd942054b69c167772832d1f4ac7b2653a802c065910807225f948c6e08e135ee8589635dfadea93d4a75cb528a2f023feda735b7a183171b0895090b8840c09ea5c24a55e292aa1a7ecd3c8d8e0da1de841f542bf1c46ca4fb22cf2000b4249fef72dedfc00b756d5682c42cddd4d751da6ca7d079983cf0d31a966a593501c03708e0ba9ff8ecc575abab08ed7a91d94d87707965ec80bed307ec491676b30416b04bda3531f47ecad8c62d9ed48934285f60661177c1fb45bdbfb96abd3bc13e6c9806c127ccfc14d5636659293679d21f1b4a00feb5fa7fde687aeaa9882b820cc718e3a1986754a19cab7bdaf155734852fad86825bbad236ef5c695114d55e16ef2979a52a52c95589067dc30782d398b6d43847ea4389aa173f87a2bf379213e90d053956d55eed99e18d0c2f924cb2f0a64a4ee422212dd52aad8f409ce0c7711807f3bdaff69c1b284f1e3713f3e7b2e138a2ca4f5f23e3bb62aec41d3eaeee2bb22257da317c9b9a702d3950968327bc18492c97a3a5d1b7339af975976abf83bd9cb9c92a171688224c3a8349cff91f00c0edf98ecfa35a2bb6e2dfac51e405a799005c61f04cdff1ce237c52fc50385fb0308998214c3f6d77ffe051cf70aa50353286fff2916f7e983d2c071ec1e46b64b3e1edf5c4afa258df911b60c7effc473fe2592ad8dafa10a19e4af4690e4b181d9e5fa29caa5d543dede3adc42d14b78f1280f1b6a21ca20d425804f89c5eede231fd745de19e13b3a851fb081839a860d29dc594aa17167d5dcd88574d0f6319b18c930a4f984cb69e184cc066524c8e31c3b2e851ebdac6cb430d1ea1236a9fcb0d701c7db1970bcb4458ae5f07a0154d7c7e7eab7dd7d9544945080eac24484122f86d19bdcf1581f6cc52d596ac1dc3f458de74b76789d3f8f2e4c7c52f5d4319bacfaa843c3686a7ef1e2249a278cadd47a89424499f34c4ff10f05c71e8b27963f048224bbd2a9a30f860ffa685a8b5daff197ce29596aacec71a3e1f327430669824cf9a9bbdaa12c8c17327cc1eac9e849c48bfedb808230726b8083460511dcc30462a521c92f897cc2d82f4bb1ac28c79f2e096c3d3fa0eeb99247beaee7c985275c8b5f40bd8711b092ebf2f8833d9f07505b0e59a06ab180399406ec925744f42a9ceae1a3f16815685e863db575ab7fead93eb1337fa56e8be076068b31f51a2f0a024e2223698564dbd691096769a30b919df540b2cd6a6e1f39ee783adf64e2d0f6b7822421d3802f9a73ebce9fa25ed615234f7629d148ade4ef1c9837bf3f7f47a9b6a1aeccb82df43df34e31eb8bb403a6e6ad056c503f1c7feb1030b32f866ddd3b31ac322a45c1a3f04fe70755b9c43adc1fd10aa1c4e394e879232b476582d016a5284b6e7d85c8b56eeca70fa2de57da321c98251214ade4fe8a0432b9f8a19ec28aecfb85496609dfdbe0e6996a508f330e77c6e1c8cec56f1e9f1e2d0e88354a45f20dbbb7bdd7fec16fab2e4cd12ddccec7fbd009d254cd37c495496cc4661f6975f338ba98992006e5ff4380992834d51a97414480667f1a80c2c9b8788e7650f0e77c088621f652bf3b0330829eabe9586387fbadd7e7804bde4616bda6c23667f07b481648c3dc51ccb8adcf3cf6f518051b4863a390c8236dc7b899f055dc4d9a2bca201da2b6f46cac33787ba1b3e475b4decb3fba294a5c48694830cb9d7f6ea416e366d5c70e31c4ca012ebb1c6f77ae57f129c2ebc3f8add931ff09783ccc7e032921d0c599a4e4a512fe62227b4043af2175af172f6a770d5c49bc56b7bfb2bfe9276e41cf9e25054793aec7520a87acdfa60e61ff9cb9430e60154309e0216c267db707ecc87898bb75a6ed27e534febd275a4aba186609edfeb9f30144bcbad3ba9e91c3c271caeef4d98ae9f9393dcc755d24688a200db022a5f7ad49e2f2f0a82e1e498a2f06f8197c30e338a62bef4fa71eae4b9b44ee0aaf5c7b4456807eea76efd1a6eca0b628574270fcf668db6d8cb806eeb69950c0a50c5d768c58fdd84e0fb2fdab78ec1995c4682d1131555112bde6ff6efb569be52617c04c46e732a95e35dbfa3ea9fbfd360c9ea8938f1e463aaade287b4c26508f9c9f112143c0c864499a0dd128a829dac0e9b06d20c1588f0518eb8e5bb3ad2fdaa83581a270a69ba3e46e1df30a4e29a7f7dc32aaf9582270550b03407940e0f198cb2a9d2f8d15b7b961f41f2e321fe5cec3b555a0a0e24e524b48ae619df25ca46bfdb32c1301595cf7bee31f1a511913596a9fd144a2c47cba1269b17fc6866f42a047ab503d0a01f5719ce4311dbd8e12b1b860c6ce3d7698b73c425f6e3d9eef6403ed1116c9dd976d71cad877574b4e28d54b223a851b12b106d591cd35a8b78f01fb7371b74a6f4fc28595bfa39fbb0cbf7cf2cfd27bb62406626986abe43597534ca3d2f8e930f19901843d899ebbf91dcfb3f43d7bf2b7e46c31652688e7bfdb53fa9707628cf7b8431b6895b8e774c4d488ecd21152a7c17d847775ecb4d08bc2784dfbb14c6309fc6692a48e8600c05d9af1f7eb4db64ebfa8ce974c0dc09880c1665335200d32fc96af58a0efbc53601b500d649292f328a66eeb63d1ecd72566398733f75e47118318329f538d726243436cd06a5408a076d211ccd242910d131441ea8202a51878d1d00d1b2246550d4fd9c44504d1b2273bfddefa392e6f67b396b50e542ce3308654729dad8b5d38cb2f30e6856b2abed9bb140621e273dde6fcf6e501a5e0607bc66fe583045e1fdcfcd7571f72677c42098692acb5ee9b3b590182af3e82924dbf521025e7fa6a521d942d1efb485d0081df1f3ae493be859a2a1ba8e03caea1621df0c22c670c0086bdfcdcb85d4f79df2211e54c13e33bea7e893ec05742eca5861d09219d7f5e4d6aada2ffef237e52f0d46e336abccfccf129f7b14cf5b46d3fdf9ddedfbb6b457cb06d33828c334f69c2337d1cc565eb1b36bb3a1d0367589cd1f1ae30b56b5272c15311f4405ec16721f6fe19fee627daee5d5e56c91ec9edfe7d3ce92f846a4ceec37ce5f86a699c37b952d36bc4093ab8643203d20c09c19450dacf52b606e2febcb6cad58d2ac06f50da9f5e912826eecaa4867bd8ed147ea5f32716a163b7084fb224a6e6ea090f2d2f559c2adef248f404a3843ad11c374a0c7cbcd8b2f2b9bef29df1d0ecafb61413f810332fb5019ee9d4bfb54ccf08f48507ce43a0addb227e7109e34919adf1bda0d9c44af50dbe624d1cf3199b2ed1613fe2b6b6a0a390a12addedd1db1e7055c56f78487e5b46a4842cad1d0eeaf23de65ef94bbea90e63e3b11c3c54ffbbf1d877c2cdd17369b04feb22eb36dd8707050897763ec2f839bf9479530c6c5db4277eb11d9fd6cb507886e5ed4768e254980af5d275913c1d0625616ad7ae97fefd5082b98a5921c01395510b59598b196e2479299bcdac8dd972bd6fdaae6c754009d9e9fd4046cd39e2082d7e4de2b31ee3cb62927af66b1b588ca4c05610b3063b578ce6baae672bf677f4062c56833ca576ee23f61aa62bde8219cb5666ba742f538ec046e5a222244542895c42714bc44064153a6dc8a7ad7aca52f1ea6862edca3a85ae8103deedd0532f9cb250dd7dd59ba2157f26df90267aab47e4bffd7a3bb7394fe11334779c40e200056bc0178d0c769c578f0284ae8d3c48cf85fb6bf8236767894a1284143a2c172b23fdd9fd80c9ae2cc600c8cb44fd1c2a9aea40f316007c824f7bac39ff71168efa3386cc1bca41d5ba73f6d9d6c2b69b4c1068d6e7fb6d438812ba92a14a758c77b96895ff6af88da44d46e4ba", 0x1000}, {&(0x7f0000001640)="a7ded30f94605708c99040ca5941cc5d9c2aac5b4bab51523a0d98a46f4e754bfbb1050aa551f0d94d343a227aa33d93fae28aa5a47ba93694609660132cbf7f29ee01aeb1a788291e7837e743ae1b30350c2a35368d7cfcb077af4f05b2da37e1d0dcec6652e0dff3447f9b8f49f8e4117e04518242d461a6aac5d7da635ccb07ed075bc8e4961922ab1a6142b1f653607cd52d2d70f8427f0404644bf6f613fd7bf346420d15852b4eb8d07e9531ced6533f0ca6ff8ae5fb53f6ce2ee71dd4ccfdc124f28d87107ae3f4e26673ce7e697ca1f793b9", 0xd6}], 0x9, 0x1) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7fffffff, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000085}, 0x41) (async) sendto$inet(r3, &(0x7f0000001900)="36a7c2f21a91713ee6143377d34a36927fdccd52948e55c49b3f7fe1494bfb4cd1245be659abeb4dd691373cf13c8c9d21badd06b9e008ac63f67ebeff3c44012d342d9818b1c890cf64ed74569a64a34947eea838685ec1bc575c7d7ade2dd9c982236f7f9931c41e799254808dc4e92449fdcb996eb249d35dc6070caef00a096e8ead578e7be4b85830e39ba45224", 0x90, 0x20000000, 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f00000019c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x26, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x24, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xca}}, @cf={0x4, 0x6, {0x10, 0x6, 0x9}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004854}, 0x20000041) connect$can_bcm(r3, &(0x7f0000001b40), 0x10) (async) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000001b80)={'filter\x00', 0x0, [0x0, 0xffffff80, 0x4]}, &(0x7f0000001c00)=0x44) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001c40)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000001c80)={0x1d, r5, 0x3, {0x2, 0x1, 0x4}, 0x3}, 0x18) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x60810) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e40), r3) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x7c6bffcf299bbcc9}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e80)={0x90, r8, 0x10, 0x70bd26, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x68, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44010}, 0xba71d730d2df5677) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000002140)=0x0) sendmsg$nl_xfrm(r4, &(0x7f00000022c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002280)={&(0x7f0000002180)=@flushpolicy={0xf4, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@sa={0xe4, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x4e22, 0x3, 0x4e22, 0x2800, 0x2, 0x0, 0x80, 0x2f, r5, r9}, {@in=@loopback, 0x4d2, 0x3c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x1, 0x8, 0xffb4, 0x3, 0x4, 0x1, 0xfffffffffffffffc, 0x3}, {0x7ff, 0x0, 0x1, 0x8}, {0x3, 0x5}, 0x70bd27, 0x3504, 0x2, 0x0, 0x6, 0xd}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4080}, 0x5) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000002300)) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x28, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000050}, 0xc000) openat$tun(0xffffffffffffff9c, &(0x7f0000002480), 0x404000, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x38, r0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd744, 0x29}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, 0x38}, 0x1, 0x0, 0x0, 0x845}, 0x40000d0) syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), r2) 2.016382832s ago: executing program 2 (id=2411): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00'}) gettid() r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)=0x2) write$cgroup_int(r0, &(0x7f0000000140), 0x12) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) nanosleep(&(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = socket(0x1f, 0x5, 0xa87b) sendmsg$802154_raw(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000380)={&(0x7f0000000280)="59dae7d7e2fdd6512b7b4aec585230432bd7a4a1e2b2f8088209212ec80712ba5700a30803f798a70fab3e4fb605e812286007269b850bfd493b447bc9d41db1d90fbe45fe016df94c3782f8e9416691dbe28541f4d3062069e5c3a90fe15bf2ec36c287ddcc5985f1d3f00e8565bce58f3ae5d7e1ea4431998b84c666d2cb3825da0c81079bd1833608d12d54d5f8199cf46d1679183360266f20d6754d0ad6d5254eacf19b57ae5528e2ed842d840db15d87c5a5c765e114a56405544b13244a7c3d6cebcd624a54c9c8c2f81380f6838f535c4cdee2", 0xd7}, 0x1, 0x0, 0x0, 0x4805}, 0x4048000) r7 = accept4$inet(r6, &(0x7f0000000400)={0x2, 0x0, @dev}, &(0x7f0000000440)=0x10, 0x80800) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @empty}, {0x306, @multicast}, 0x52, {0x2, 0x4e21, @broadcast}, 'syz_tun\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000500)) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x1407, 0x2, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080001}, 0x20000058) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x2, 0x30c, [0x0, 0x2000000006c0, 0x2000000006f0, 0x20000000099c], 0x0, &(0x7f0000000680), &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x8, 0x8914, 'wlan1\x00', 'bridge_slave_0\x00', 'netpci0\x00', 'veth0_to_hsr\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0x0, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xcd8, 'syz1\x00', {0x1}}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xf}}}}, {0x9, 0x53, 0x6088, 'nicvf0\x00', 'hsr0\x00', 'caif0\x00', 'veth0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0xff], 0xe6, 0x15e, 0x18e, [@time={{'time\x00', 0x0, 0x18}, {{0x40, 0x10000, 0x33ae, 0xa3e3, 0x1, 0xfc, 0x2}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x9d, 0xd}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x1, 0x0, 0x8, 0x0, 0x0, "54a18d56dc90b42b91a88e141f262f495ccf52328214911db294e81dd17842540f6039cc40f502bf19ebcaf92aee6e6dc64852073695e5be14a46801264f331c"}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x384) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b00), r5) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x9670}, @GTPA_FAMILY={0x5, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040080}, 0x4040) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000c00)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x28) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000c80)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000d80)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)=@can_delroute={0x144, 0x19, 0x8, 0x70bd2d, 0x25dfdbfb, {0x1d, 0x1, 0x7}, [@CGW_CS_CRC8={0x11e, 0x6, {0x66, 0x4a, 0x6c, 0x6, 0x3, "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", 0x3, "bff78ed4af95036acfb30bed7dd88e0846ce8ca8"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x7, 0x1, 0x8}}, @CGW_MOD_UID={0x8, 0xe, r12}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004805}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x80, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000001000)={'\x00', @multicast}) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001040), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001080)=r14, 0x4) 1.943483285s ago: executing program 4 (id=2412): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010005081000418e0fff0004fcff", 0x58}], 0x1) 1.906829208s ago: executing program 1 (id=2413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001180)={'syzkaller1\x00', @random="5f5d1330d501"}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f907800006558"], 0xfdef) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000190003040000000000000000fe8000000000000000001500000000aaac1e010100000000000000ce0000000000000000fffcf800020000003e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0700000000100000000000000000000001800000000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000100000200000000"], 0xb8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x89, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x0, 0x0, 0x3, 0x8e}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x2000c810) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/110, 0x4e, 0x6e, 0x1, 0x6}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001280)={0x1, {{0x2, 0x4e20, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000001040)=ANY=[@ANYRESHEX=r2, @ANYRES8, @ANYRES64=r2, @ANYBLOB="606ab2646dba1cbac2462db665341474312910ec046b662fd42fe413d89ea03be797859768a1035cf92f8d692ab471a3a3c0cf7c8b3584b1250985c4f0296221b7e946914bcc3f9234a87201b00458835e6d19803919c4bbac18ae97ab2e3b8536b4fe01cd1fd0acee0c6920e542a18f596ce268dd73becce261346c3fe15f36d9b74f1d84092a4e9c"], 0x72) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200400d0}, 0x4008054) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='B\x00', @ANYRES8=r5], 0x14) 1.821374223s ago: executing program 4 (id=2414): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000140)={0x0, 0xea60}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r7, &(0x7f00000001c0)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x0, 0x3, 0x0, 0x0, "00000010000300"}, 0x10}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) read(r7, &(0x7f0000002340)=""/232, 0xe8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @private}, &(0x7f0000000180)=0xc) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r14) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "4af1c787262f43baa44f6af78c8b7e82a2db1bcf423afe5d787928e21771ce0d", "7f859ffcd43656d39e09312599ccd911ad5b94275f847174da851496ea71c3ea26439207bdf5183a9ff4a72eca1ea4c0", "e943b2773be386948391815a945faa8a2e75e180155a3215d35f0056", {"99a38817e8ae9ec8aa3816cb67e7e226", "e9222dc9c5a324be389d9901ae71595f"}}}}}}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x7}}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x0, 0x2, @private2, @remote, 0x700, 0x7, 0x40, 0x3}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x180, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40000}, 0x400d0) 1.23876778s ago: executing program 1 (id=2415): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xed, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}]}, @generic={0x82, 0x6, "25201421"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @loopback}}}], 0x68}, 0x0) socket$kcm(0xa, 0x2, 0x73) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') (async) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) (async) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xed, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}]}, @generic={0x82, 0x6, "25201421"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @loopback}}}], 0x68}, 0x0) (async) 1.238436543s ago: executing program 1 (id=2416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x1a) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r3}, 0x38) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @empty, 0xef4}, @in={0x2, 0x4, @multicast1}]}, &(0x7f0000000180)=0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$nl_generic(r5, 0x0, 0x20000084) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) unshare(0x400) r8 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r7, @ANYBLOB="f0311f321728068d22a694ffd41df6eccc5d6c9b742e55eb8fa3ad43f9d007f00c593014d40c2d2af4eafdf2af0acbaad8e47cd7a860bfbe70900177c3533186a8346f995d6b1923e45bb4342015f2bfab480ac11e24f30836b61c67116079ada3d306a10acfb72fca224d3c3a8b8517ad5deacae5e84381f525f39d0fb8f482f1b18c917b19b0b4ac7cdf07fd3ab13d2cff2d"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.09024267s ago: executing program 3 (id=2417): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000009, 0x10010, r1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x1000, 0x81) getsockopt$IPT_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000000300000090000180380004001400010002000000ac5414aa0000000000000000200002000a004e2200000d617000000000000000000000080000000077e800000d0001007564703a73790000000000004400028008000100008000"], 0xa4}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000007c0)={&(0x7f0000000080), 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x2e0, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "644ecfb5f4004799594c4300de5c79931139848fc5a2e0a1b797506c9f12c56c01746ac3fb01d29641ad6ba913145c8ea2f8d5158d2d72ceadce1caa7be5055c865dffa2c836fd0885a378384bacd2324f4ebb66fb1d2cebd91ad62f5c56da2a51760abab4397996ae7470657b9c43a331a23647a8f2197819ea950f6863679031eacc77373d3d0da1d3a61d9134c866704308444c1646e743c89eaf6d4b59894a646f45ac02eb7bcc4e9784710519dc7c527615211377cfaddeb48a2cba"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "2fbc118531e73e6b156dfcefc6a3f7efd4bb1a5554834741afd91075daa378fc65"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'veth1_vlan\x00'}}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3d5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc1c8}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.011022372s ago: executing program 1 (id=2418): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="0d010000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}}}}}]}, 0x50}}, 0x0) 1.001689884s ago: executing program 2 (id=2419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x850) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x6a, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x1, {{0xa, 0x4e20, 0x31, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)="13959a808f41a988e9e8fb3cc4ec62565faf66fe81527fb6777b12538db3815b35494ed61a32ab3273813e5b9756415ef6bc0552701daf27bfdd5e113b46c862547a3784de91546c8c6b8e00b236fff46661118066fa6d9ae7affe1f7bbb8896327660cd0368ca491c767d0e73144a3bcfd5d58fa30f9ccc682ccd02c84b1200aff824d1a65a7d786d307bdf3f75af9868255265e7ac99d99bb304e53de6ed7b97e08497821c72f1f31e78d625fdfee6644dec10a2", 0xb5}, {&(0x7f0000000300)="62541ef3a8c7a42e0769ebb0f8c16b26ff730295468f0a80cf38f6d2826ae61e2350ccea334367426347c0c18ef3cb1270bdf6a7957ab530d7ceb9cbc889474b22f4453af6df014a1a356f8946d83cf0b115", 0x52}, {&(0x7f00000018c0)="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", 0x17f}], 0x3}, 0x48090) 923.315482ms ago: executing program 3 (id=2420): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x3, 0x4) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x28, 0x25, 0xfffffffffffffffd, 0x70bd29, 0x25dfdbfe, {0x11}, [@nested={0x14, 0x138, 0x0, 0x1, [@nested={0x10, 0x3d, 0x0, 0x1, [@typed={0xc, 0xaa, 0x0, 0x0, @u64=0x8000000000000000}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400400d}, 0x0) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x4a}], 0x1}, 0x41) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000004ff0000000000000000000085005a01cb3532f67e1c09a500002a00000085000000110000000000000100000012c7457b36c0c46caa9e665b06c9f6784cd56d56d55c146abbf26c27566a29db791c6d0f11c20a77"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000380)="78dea6c5", 0x4}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01bd29379a0ceb74fed54719d64d286382130b4f8357acd6bf700000dcdfc0ffffffcf08000300f165f1fe617783dc172b5cc8d9da57ef2cc542e3820d96248edabe597868e2c5f872c709f73fd4c7dda24e4b13cdb72307cb16a4800c", @ANYRES32=r10, @ANYBLOB="0c009900ff07000056000000080005000a000000"], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x54, r7, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x14}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008050}, 0x24000010) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, 0x0, 0x0) close(r1) 847.860413ms ago: executing program 2 (id=2421): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x72, &(0x7f00000002c0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) setsockopt$inet6_udp_encap(r6, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80800) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newtfilter={0x450, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x424, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_SEL={0x414, 0x5, {0x3, 0xbf, 0x40, 0xfff, 0x8000, 0x3, 0x8, 0x9c19, [{0x5b5, 0x0, 0xa, 0x10001}, {0x1, 0x7fffffff, 0xa6b7, 0x9}, {0xf16, 0x1ff, 0x5, 0x40}, {0x59c, 0x4, 0x7, 0x9}, {0x7ff, 0x2, 0x0, 0x10000}, {0x2, 0x2, 0xffff, 0x7}, {0x5, 0x6, 0x9, 0x23903cef}, {0x2, 0x9, 0x7, 0x6}, {0xfffffff7, 0x8, 0x80000000, 0x2}, {0x40, 0x80000001, 0x2, 0x2}, {0xa, 0x5, 0x545, 0xd}, {0x7, 0x5, 0xa52, 0x8}, {0x1, 0x3, 0x4, 0x5a8}, {0x7, 0x8b5, 0xff, 0x3}, {0x7ff, 0x0, 0x6, 0x1}, {0x4, 0x8, 0xffff, 0x4}, {0xffffffff, 0x2, 0x1, 0xe}, {0x126c, 0x2ba70bc3, 0x7, 0x7}, {0xc, 0x8, 0x3, 0xb}, {0x8, 0x7, 0x7, 0x7}, {0x4, 0x1, 0x1, 0x56}, {0x0, 0x4, 0x0, 0x1}, {0xfffffffd, 0x8001, 0x200, 0x7}, {0x0, 0xa, 0x7, 0xd849}, {0x5, 0x9, 0x3, 0x2db}, {0x13318b36, 0xffff, 0x9, 0x6}, {0x6, 0x3, 0x8, 0x7}, {0x80000001, 0x9b5d, 0x4c71, 0x1}, {0x6, 0x5, 0x4d2, 0x292b}, {0x4, 0x1ff, 0x5, 0x4}, {0x80, 0x5, 0xff, 0x1}, {0x4, 0x9b0, 0x2, 0x3}, {0x2000, 0x3, 0x2c, 0x8}, {0x793dd766, 0x3f, 0x7, 0x81ff}, {0x6, 0x2, 0x48b, 0x4}, {0xd, 0xfffffffc, 0x8, 0x57}, {0x687, 0x1, 0x4, 0x1}, {0x4, 0x1bc, 0x1000, 0x9}, {0x6, 0xfffffff9, 0xfffffff9, 0x5}, {0x5, 0x4, 0x4, 0x5}, {0x4, 0x9, 0x1, 0x3}, {0x1, 0x416a, 0xe0000000, 0x40}, {0x2, 0x1, 0x7fff, 0x1}, {0x7, 0x7fff, 0x800, 0x8000}, {0x3, 0x9, 0xfff, 0x7}, {0xbd7, 0xd0c, 0xf, 0x8}, {0x7, 0x2, 0x5, 0x3}, {0x80, 0xe, 0xc09c}, {0xd, 0x9, 0x0, 0x9}, {0x4, 0x4, 0x0, 0x3}, {0x1, 0x8, 0x8, 0x7}, {0x3, 0x2, 0x9, 0x6}, {0x1, 0xd6a1, 0xe9a3, 0xb07}, {0x3, 0xfff, 0x0, 0x1}, {0x48000000, 0x9, 0x4, 0x3fd}, {0x8, 0xfb, 0x800, 0x1}, {0x62, 0x3, 0x5, 0x5}, {0xd5a, 0xffffe007, 0xfffffffb, 0x1000}, {0x81, 0x7, 0x66, 0x1ff}, {0x5, 0xffff8001, 0x1, 0x401}, {0xf, 0x4, 0xffffff09, 0x3bfd}, {0x5, 0x3, 0x5, 0x5}, {0x0, 0x6, 0x9, 0x8}, {0x990, 0x40, 0x2, 0xb}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0x7}}]}}]}, 0x450}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000740)={0x1d, r11}, 0x10, &(0x7f0000000b00)={&(0x7f0000000a80)=@canfd={{0x2, 0x0, 0x0, 0x1}, 0x2a, 0x6, 0x0, 0x0, "7a5b27b02a7d4d6059c96dad0f57147d9ca6582bb49bea516428330dd14e439ace8660df96c22f7ca77bfcf0deb9ffcd6595e0e319991de5b75618b79fe0f135"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40) recvmsg$unix(r8, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0xfffffffffffffdd3, &(0x7f0000000640)=[{&(0x7f0000000300)=""/140}, {&(0x7f00000007c0)=""/207}, {&(0x7f0000000580)=""/87}, {&(0x7f00000001c0)=""/28}]}, 0x40012143) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x80489439, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000cd7c00000000000095000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xcd, &(0x7f0000000980)=""/205, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000003000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xc) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01002000"], 0x0, 0x3e, 0x0, 0xa}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000090000000200000009000000c0000100", @ANYRES32=r5, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="03000000040000000200"/24, @ANYRES32=r7, @ANYBLOB="c082badacb14b33acbdba504d1645f3a60f28f8be68ea2778d2750c431c4a96150cf5472d7f146181b02a0764c05428843e5c990abbd4b4eb2d2c7ef2741e7491cf5adf51157c7249cac28e3f706cdb5f0d6a9922ec600b50ec2496f6d78205121cc534a6ea0ddb605a3d542a9d1205444f667a250c1c1f176544518034e3f07c026de3b5850390800ae9857392f2a42c3cd00"], 0x50) 834.761997ms ago: executing program 4 (id=2422): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 745.986205ms ago: executing program 0 (id=2423): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c20000000000000000000800450000700000000000019078acfa8a877cd48d3ae81e2a7add830d72271e0001ac1414aa0c0090780000000045800000000000000089000000000000ac141400443c0001ac1e0001000000000000000000000000ac1414aa000000000000000000000000ac14140000000000ffffffff00000000ac1414000000000000000000eaaf2590078297d7e6bd8050d1fdfc732feae7cb"], 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b0000000000080028003a"], 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r6, &(0x7f00000000c0)={0x2a, 0x1, 0x1}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000140)=r11, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x48000) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000140)="24000000010006", 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r7, @ANYRES32=r13, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000024002211c42ed8fe770d88a025df47e400c412aaca15db381fe8f496d5bc95fa0c6b0f16a1f1850c89c040347da408ce9291048c12ccef51775c9a29f61e0f0257d61963f2fcc98728bffc6afcee08fbd790b77699b198788394078d752045a03737e760490a2d838d683e7be2a1fe00006c13f20446c80bb22c09ebf51dffdf46da36c3a3f6f924c9ee", @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf257b00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900ff0f00001d000000"], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x24044014) 651.496664ms ago: executing program 4 (id=2424): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010101}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, r5, 0x62a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x198, 0x20a, 0x278, 0x198, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffff00], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) 330.60072ms ago: executing program 1 (id=2425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0xfff, &(0x7f00000014c0)=""/4095, 0x0, 0xd}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f0000000e80)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @from_mac=@broadcast, @device_b, {0x7, 0x6}, "", @value={0x7, 0x0, 0x1, 0x0, 0xff}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x9, "59b2a3d5adbf9bd0aa"}, {@broadcast, @broadcast, 0xc1, "c77e8c0971184b5d9e937bf98e76557af0c7beef95f95771fdc18ec9986c5a57e2b88ad629fc4f731515d0d7a2d3807f61b5d5537a2d41a8865d9598e342ea55f2b01d76a105e3377bd153c24976f1fd5dec39a0794a47d47519aeb4cf42fda6778507623034b934d3fd764f8aadc720f1821bfdbe0a326a3b78d4d723f8f321f36252aedc1246f47051eebca13dcfe671d56eea575d9699ec288a2cbffb5d7ff5090329c1d9c831ab71193d53ed4797f06cfeb6d57dfe7ff31745e7e34e2d4df8"}, {@device_a, @device_b, 0xac, "3c579d66d6ea1a153a73ef2098d754b581ed7902ad2a8827ca57675abb39fc0e0f1a7e0a88c19886067df7c3bd345d26827580281affbd943fd48b2a1205deb2dff4e25b276816b1d8c537b7403ebcdd54dbb9815da53ab0007f7a994c0d4077c3c75ee4cc29390724632d0db0d4525f51ca298f4b640e960079ade1cf6858a91ed7f3fa6d8206aebad700f0a03c47b4a160739bd4468fefb74b6672dfae88845c950abe6914bcbebc1a5e89"}, {@broadcast, @broadcast, 0x9, "509ea1ddaf9b15f054"}, {@device_a, @device_b, 0x82, "33e57621aecb07f27385459e82dbc9f351ef27a644fee0ebf09c165959de765858aa0ee2cfbc6ee308204eab60b595437fcf96a44a1644f84642076a8a9e1b957a43b1c45fea3f45450e84b6e8df1fe720ad58e0755348ea1de7a1d1ca37d9ced77c6a43ceb703a6046b38ba23c8cba7fb88408abc9eea7bd1433706abac42dcbcdf"}, {@broadcast, @device_a, 0xc9, "804f08e6a8a72d75faff77bae28c99724ebcccc58adece3da4952964853b9d3fe18c49cd19c76571b7af0c06b1b4ff8826c6bedcdc9586edabbc5836d8bd037ef770806d820694733d0669baa89dcd6a633ca97b9e7e7caaad5ffffffe0617ced40645323c2e31cf4482dbce93cb4d33ac281914fd17140c3168c83c1f656e7980821c94520a88f450b0748efd7e4364ea355eda384fa0526af93526a27797c12962e29a7445937ef0a2a07f84fb7d703e2606c6c6316818c57839036aa2c165cfa50e62f8eda69bda"}]}, 0x342) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="2481d2bad7", 0x5}], 0x1}, 0x2004085) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 296.811817ms ago: executing program 4 (id=2426): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff01000000000000000000000000000114000400fe80b7b44d67000000000000000000bb0800074000000001"], 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="980000000001050516000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400fe8000000000000000000000000000bb0c00028005000100000000003c0001800c00028005000100000000002c000180f7ff0200ff02000000000000000000011400040020010000000000000000000000000001080007400000001204000680bcda491a71382bc1062eb3ba54f30b869155264a0faead755ac0b12efd68c14f1a9639344a89aacb72ef23d2859ad54b9e47bebd0b480fa4f8b7446d75"], 0x98}}, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000002640)=0x9) listen(r1, 0x1) r4 = accept4(r1, 0x0, 0x0, 0x80800) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000600000008000000ad00000078a00100", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000fcffffff010000000000010000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r4}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02bb0000040000001b617a87150924d380000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000300)={r13, 0x1, 0x0, @broadcast}, 0x49) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000200)={r13, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f0000000240)={r13, 0x1, 0x6, @broadcast}, 0x10) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r10], 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000005) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r11, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050200000000004608f0ff76000000bf9800000000000056080000000000008500000007d1b7da1c000000000000009512ea8855bc1ec4df698b6a2c40dd77622cdf9683975cf3a22a163722b8521f868b050099c0ee24dbdc06dcc059f77793b2cd5adc74929d11d0490574e3fcef844316228e8f1066c5f577989650a37473619df050eef10cb47c7542c64397ec209af78040ef662564e614cc45b1bdc85fe1c80524505ba29e5a70b10e1c18e99ba4581b7f5aa7c4db1e7916ce9d526070873b80c9319d5a92907011603a43b27d6f3ba094cfa891ff942a3c401d41f49983700a267df8e4157dd5"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x40080) 225.887858ms ago: executing program 0 (id=2427): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r8, &(0x7f0000000800)=[{&(0x7f0000000f80)="4191062c14", 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x9) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x1, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 99.915787ms ago: executing program 2 (id=2428): syz_emit_ethernet(0x45a, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "2aa958", 0x424, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1, {[@hopopts={0x2, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @pad1, @ra={0x5, 0x2, 0x200}]}, @fragment={0x2e, 0x0, 0x3, 0x1, 0x0, 0x3, 0x64}, @fragment={0x5c, 0x0, 0x20, 0x0, 0x0, 0x5, 0x64}, @dstopts={0x2e, 0x14, '\x00', [@generic={0x0, 0x9e, "70568023e27d26cc6a2e1cfc6ae94da55d83934f6ef856162a7759e3a67ad084c404423706f42290d3efd70a70d540d04738168a785339a42e6f1f1f8f51ad2fccd9cab92a7988ce3c116dc9d4d1eb60b895e4562009e5e1dd538397723e8e27464fa1b6029bd13d2aaae6e00822bfb905bad5b3032262286521b9db564c06ccd3b2abd8b8906ca1972bc3ff1cedecbe687a83d3bd2b59a26c3c6733f3e2"}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x1}]}, @dstopts={0x16, 0x7, '\x00', [@jumbo, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x4}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x38, 0x1, [], "e27ddce9951ad8bf01ff6f63263303ec1d746adf8be161b02817dc0f01102b826db54e59813bb6cee709545625b1f5f92b9930a1405bebf4"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "e35921304c8720f57bc5822b8cd654aa92266f502e6db6fc923df27293e94d6cd5b4d161580c968cf39da2e2dc3414978e41ed6e6ba15a5c78a43f7798c681e3ac40e0c9205e6a0a9609e5e4b4b6bfd882b4cb24c5f358269106e35601d10b99c893b3ed49e362c774ba01cebf06fc3be721279415d843cb7e9bdc2c69573b0cce5d70ca61111367dec7dcc927a97e87c0cf60a17ef1209bada74295f75b6bb1ecad30827737a634a33eb93cd290a3a4d8ba615c7d8b5b2e41ecc64f77874e"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x2, 0x2], "502ae9af19905ecbbc2c0979bf7d3fe144a919c2e853ba0923679b09be529735eb07f14769c867a42066ec15dbf39fbaa0ab33cfa79a2d4097949258243fed9bdeb2ccee07149c894b9f1f2b558a2b7956390c15732527e27cee14b3bf08d0ffd99ffee5349e7002bb1052b38fceb7d17c6dfbb43004e50b57645e2c26dcd4bcbe27941853fc043b506bac603634527620605c46f85f8db8030edc5043f7133b89dbcd2648dabd796bf94cb05f7830af00ca7a9af6a4c06c"}, {0x8, 0x88be, 0x1, {{0x5, 0x1, 0x9, 0x0, 0x1, 0x2, 0x0, 0x3}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0x7, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x2, {0x8, 0x8001, 0x3, 0x4, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) write$nci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYBLOB="c100320d"], 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd0, 0x0, 0x10a, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1edae42d}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x728a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3355}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48dd2bee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x212d6a4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b87ef06}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5332984d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bbbfc1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ce91d86}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b67d61a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x669a4ee5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x37d17a0f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x616e}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x81}, 0xc001) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r7) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b8028d6b12c7c7363b72b00039f6ea00efcf2bc9ec520c1baa396f9f7fd5c6bd1bfc7ad4360c00"/64, @ANYRES16=r8, @ANYBLOB="000229bd7000fbdbdf250200000008000500ac1414aa1400060076657468315f746f5f6272696467650008000500ac1414bb14000300fe8000000000000000000000000000aa14000300fe88000000000000000000000000010114000300fc0000000000000000000000000000011400060064766d727031000000000000000000002700070073797374656d5f753a6f626a6563745f723a7570647077645f657865635f743a73300000080005000a010100"], 0xb8}, 0x1, 0x0, 0x0, 0x48005}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x44, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004810}, 0x400c0d0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r10, 0x0, 0x24004804) 0s ago: executing program 3 (id=2429): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x6e22, @loopback}, 0x3, 0x1}}, 0x26) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="81000000", @ANYRES16=r1, @ANYBLOB="010028bd7010040000000500000005000400070000000800090002000000050013000700000005000400520000001400080064756d6d7930000000000000000000000800090000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x48030) kernel console output (not intermixed with test programs): T11304] RSP: 002b:00007f636361afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.571108][T11304] RAX: ffffffffffffffda RBX: 00007f636361b6c0 RCX: 00007f636275d60e [ 250.571121][T11304] RDX: 000000000000000f RSI: 00007f636361b0a0 RDI: 0000000000000006 [ 250.571132][T11304] RBP: 00007f636361b090 R08: 0000000000000000 R09: 0000000000000000 [ 250.571142][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.571151][T11304] R13: 00007f6362a16128 R14: 00007f6362a16090 R15: 00007ffddbd29788 [ 250.571181][T11304] [ 250.999992][T11309] bond0: (slave bond_slave_0): Releasing backup interface [ 251.067473][T11309] bond0: (slave bond_slave_1): Releasing backup interface [ 251.087383][T11309] team0: Port device team_slave_0 removed [ 251.102838][T11309] team0: Port device team_slave_1 removed [ 251.114503][T11309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.127761][T11310] team0: Mode changed to "activebackup" [ 251.256941][T11323] tipc: Started in network mode [ 251.273530][T11323] tipc: Node identity da5fed604182, cluster identity 4711 [ 251.299337][T11323] tipc: Enabled bearer , priority 0 [ 251.363222][T11330] d: renamed from syzkaller0 [ 251.373251][T11329] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 251.387434][T11330] tipc: Disabling bearer [ 251.938299][T11352] __nla_validate_parse: 7 callbacks suppressed [ 251.938318][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1502'. [ 252.002064][T11352] nbd: couldn't find a device at index 1074921480 [ 252.061969][T11357] syzkaller0: entered promiscuous mode [ 252.074044][T11357] syzkaller0: entered allmulticast mode [ 252.084057][ T348] syzkaller0: tun_net_xmit 70 [ 252.349596][T11378] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 252.482636][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'. [ 252.523410][T11378] bond4: (slave bridge5): making interface the new active one [ 252.534183][T11378] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 252.562935][T11378] ip6gretap0: entered promiscuous mode [ 252.568726][T11378] ip6gretap0: entered allmulticast mode [ 252.578552][T11378] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 252.679991][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 252.770320][T11394] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.778167][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 252.789204][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 252.802767][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 252.825817][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 252.849061][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 252.898113][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 252.907500][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 253.358416][T11423] netlink: 'syz.1.1521': attribute type 4 has an invalid length. [ 253.367466][T11425] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 253.375444][T11425] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 253.393347][T11425] netlink: 'syz.4.1522': attribute type 4 has an invalid length. [ 253.412080][T11425] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 253.433405][T11425] netlink: 'syz.4.1522': attribute type 4 has an invalid length. [ 254.298589][ T348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.311249][ T133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.162210][T11480] net_ratelimit: 3322 callbacks suppressed [ 255.162229][T11480] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 255.239532][T11480] pim6reg1: entered promiscuous mode [ 255.266135][T11480] pim6reg1: entered allmulticast mode [ 255.634058][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.783368][T11529] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 257.066192][T11537] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 257.157041][T11545] __nla_validate_parse: 35 callbacks suppressed [ 257.157069][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 257.181919][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 257.217267][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 257.236943][T11545] netlink: 'syz.2.1561': attribute type 18 has an invalid length. [ 257.495171][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 257.837078][T11574] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 257.963896][T11574] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.046259][T11578] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.075490][T11578] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 258.119556][T11578] bond7: (slave vcan1): Error -95 calling set_mac_address [ 258.406075][T11589] pim6reg: entered allmulticast mode [ 258.469241][T11589] pim6reg: left allmulticast mode [ 258.758951][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 258.899742][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 259.067487][T11629] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 259.136172][T11635] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 259.157572][T11636] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 259.168293][T11635] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 259.219324][T11629] bond5: entered promiscuous mode [ 259.262699][T11629] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.297124][T11644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1587'. [ 259.328593][T11644] bond5: entered allmulticast mode [ 259.359605][T11650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1593'. [ 259.406281][ T133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.491057][T11629] bond5: (slave bridge4): making interface the new active one [ 259.500602][T11629] bridge4: entered promiscuous mode [ 259.509936][T11629] bridge4: entered allmulticast mode [ 259.528985][T11629] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 259.559307][T11635] lo speed is unknown, defaulting to 1000 [ 259.722258][T11662] netlink: 'syz.4.1597': attribute type 1 has an invalid length. [ 259.733050][T11664] FAULT_INJECTION: forcing a failure. [ 259.733050][T11664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.755663][T11664] CPU: 0 UID: 0 PID: 11664 Comm: syz.2.1599 Not tainted syzkaller #0 PREEMPT(full) [ 259.755690][T11664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.755701][T11664] Call Trace: [ 259.755708][T11664] [ 259.755716][T11664] dump_stack_lvl+0xe8/0x150 [ 259.755741][T11664] should_fail_ex+0x412/0x560 [ 259.755769][T11664] _copy_from_iter+0x1d3/0x1670 [ 259.755796][T11664] ? rcu_is_watching+0x15/0xb0 [ 259.755823][T11664] ? __pfx__copy_from_iter+0x10/0x10 [ 259.755853][T11664] ? netlink_sendmsg+0x650/0xb40 [ 259.755875][T11664] ? skb_put+0x11b/0x210 [ 259.755899][T11664] netlink_sendmsg+0x6c0/0xb40 [ 259.755929][T11664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.755955][T11664] ? aa_sock_msg_perm+0xf1/0x1b0 [ 259.755979][T11664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.756006][T11664] ____sys_sendmsg+0x972/0x9f0 [ 259.756029][T11664] ? __might_fault+0xaf/0x130 [ 259.756057][T11664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.756088][T11664] ? import_iovec+0x73/0xa0 [ 259.756116][T11664] ___sys_sendmsg+0x2a5/0x360 [ 259.756137][T11664] ? __lock_acquire+0x6b5/0x2cf0 [ 259.756161][T11664] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.756181][T11664] ? __lock_acquire+0x6b5/0x2cf0 [ 259.756205][T11664] ? kstrtouint+0x6e/0xe0 [ 259.756259][T11664] __sys_sendmmsg+0x27c/0x4e0 [ 259.756286][T11664] ? __pfx___sys_sendmmsg+0x10/0x10 [ 259.756307][T11664] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 259.756352][T11664] ? ksys_write+0x242/0x270 [ 259.756379][T11664] ? __pfx_ksys_write+0x10/0x10 [ 259.756410][T11664] __x64_sys_sendmmsg+0xa0/0xc0 [ 259.756436][T11664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.756455][T11664] do_syscall_64+0x15f/0xf80 [ 259.756475][T11664] ? trace_irq_disable+0x3b/0x140 [ 259.756501][T11664] ? clear_bhb_loop+0x40/0x90 [ 259.756524][T11664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.756541][T11664] RIP: 0033:0x7f906259cdd9 [ 259.756559][T11664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.756575][T11664] RSP: 002b:00007f90633a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 259.756593][T11664] RAX: ffffffffffffffda RBX: 00007f9062815fa0 RCX: 00007f906259cdd9 [ 259.756612][T11664] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 259.756624][T11664] RBP: 00007f90633a2090 R08: 0000000000000000 R09: 0000000000000000 [ 259.756636][T11664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.756646][T11664] R13: 00007f9062816038 R14: 00007f9062815fa0 R15: 00007ffec1e995e8 [ 259.756675][T11664] [ 260.063609][T11662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.090213][ T3276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.216671][T11667] bond5: (slave veth11): Enslaving as an active interface with a down link [ 260.236405][T11668] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.245939][T11668] bond5: (slave batadv1): making interface the new active one [ 260.254770][T11668] batadv1: entered promiscuous mode [ 260.260587][T11668] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 260.325361][T11662] bond5 (unregistering): (slave veth11): Releasing active interface [ 260.393850][T11662] bond5 (unregistering): (slave batadv1): Releasing active interface [ 260.421439][T11662] bond5 (unregistering): Released all slaves [ 260.431615][T11679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1604'. [ 260.671836][T11689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.760417][T11691] netlink: 'syz.3.1605': attribute type 16 has an invalid length. [ 260.796677][T11691] netlink: 'syz.3.1605': attribute type 17 has an invalid length. [ 260.912285][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.947203][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.067292][T11694] smc: net device wlan0 applied user defined pnetid SYZ0 [ 261.094138][T11691] team0: left promiscuous mode [ 261.103631][T11691] team_slave_0: left promiscuous mode [ 261.115273][T11691] team_slave_1: left promiscuous mode [ 261.130206][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.148483][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.155722][T11691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.167670][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.174866][T11691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.208034][T11691] veth1_vlan: left promiscuous mode [ 261.219422][T11691] veth0_vlan: left promiscuous mode [ 261.231402][T11691] veth0_vlan: entered promiscuous mode [ 261.244501][T11691] veth1_vlan: entered promiscuous mode [ 261.259261][T11691] veth1_macvtap: left promiscuous mode [ 261.267701][T11691] veth0_macvtap: left promiscuous mode [ 261.273352][T11691] veth0_macvtap: left allmulticast mode [ 261.281407][T11691] veth0_macvtap: entered promiscuous mode [ 261.291761][T11691] veth1_macvtap: entered promiscuous mode [ 261.309395][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 261.328098][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 261.340143][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 261.360082][T11691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.389310][T11691] bond1: left promiscuous mode [ 261.397347][T11691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.418133][T11691] veth3: left allmulticast mode [ 261.442657][T11691] veth5: left allmulticast mode [ 261.471073][T11691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.481182][T11691] gretap1: left allmulticast mode [ 261.500238][T11691] macsec1: left promiscuous mode [ 261.512478][T11691] bond3: left promiscuous mode [ 261.521664][T11691] bond3: left allmulticast mode [ 261.532237][T11691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.545840][T11691] geneve2: left promiscuous mode [ 261.556579][T11691] bond4: left allmulticast mode [ 261.562178][T11691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.570395][T11691] vxcan3: left promiscuous mode [ 261.575391][T11691] vxcan3: left allmulticast mode [ 261.583632][T11691] bond5: left promiscuous mode [ 261.588788][T11691] bridge4: left promiscuous mode [ 261.593896][T11691] bond5: left allmulticast mode [ 261.598806][T11691] bridge4: left allmulticast mode [ 261.641915][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.651507][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.669557][T11705] FAULT_INJECTION: forcing a failure. [ 261.669557][T11705] name failslab, interval 1, probability 0, space 0, times 0 [ 261.703790][T11705] CPU: 1 UID: 0 PID: 11705 Comm: syz.1.1610 Not tainted syzkaller #0 PREEMPT(full) [ 261.703815][T11705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.703826][T11705] Call Trace: [ 261.703833][T11705] [ 261.703841][T11705] dump_stack_lvl+0xe8/0x150 [ 261.703867][T11705] should_fail_ex+0x412/0x560 [ 261.703895][T11705] should_failslab+0xa8/0x100 [ 261.703921][T11705] ? skb_clone+0x212/0x3a0 [ 261.703944][T11705] kmem_cache_alloc_noprof+0x87/0x650 [ 261.703968][T11705] ? __netlink_lookup+0xc6/0x8b0 [ 261.703996][T11705] skb_clone+0x212/0x3a0 [ 261.704022][T11705] __netlink_deliver_tap+0x404/0x850 [ 261.704056][T11705] ? netlink_deliver_tap+0x2e/0x1b0 [ 261.704079][T11705] netlink_deliver_tap+0x19c/0x1b0 [ 261.704102][T11705] netlink_unicast+0x730/0x8e0 [ 261.704132][T11705] netlink_sendmsg+0x813/0xb40 [ 261.704164][T11705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.704190][T11705] ? aa_sock_msg_perm+0xf1/0x1b0 [ 261.704214][T11705] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.704249][T11705] ____sys_sendmsg+0x972/0x9f0 [ 261.704272][T11705] ? __might_fault+0xaf/0x130 [ 261.704301][T11705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.704333][T11705] ? import_iovec+0x73/0xa0 [ 261.704364][T11705] ___sys_sendmsg+0x2a5/0x360 [ 261.704386][T11705] ? __lock_acquire+0x6b5/0x2cf0 [ 261.704410][T11705] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.704430][T11705] ? __lock_acquire+0x6b5/0x2cf0 [ 261.704454][T11705] ? kstrtouint+0x6e/0xe0 [ 261.704514][T11705] __sys_sendmmsg+0x27c/0x4e0 [ 261.704543][T11705] ? __pfx___sys_sendmmsg+0x10/0x10 [ 261.704563][T11705] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 261.704611][T11705] ? ksys_write+0x242/0x270 [ 261.704638][T11705] ? __pfx_ksys_write+0x10/0x10 [ 261.704669][T11705] __x64_sys_sendmmsg+0xa0/0xc0 [ 261.704691][T11705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.704710][T11705] do_syscall_64+0x15f/0xf80 [ 261.704730][T11705] ? trace_irq_disable+0x3b/0x140 [ 261.704755][T11705] ? clear_bhb_loop+0x40/0x90 [ 261.704777][T11705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.704795][T11705] RIP: 0033:0x7fbf1f99cdd9 [ 261.704812][T11705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.704827][T11705] RSP: 002b:00007fbf20787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 261.704846][T11705] RAX: ffffffffffffffda RBX: 00007fbf1fc15fa0 RCX: 00007fbf1f99cdd9 [ 261.704859][T11705] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 261.704871][T11705] RBP: 00007fbf20787090 R08: 0000000000000000 R09: 0000000000000000 [ 261.704882][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.704892][T11705] R13: 00007fbf1fc16038 R14: 00007fbf1fc15fa0 R15: 00007ffe2d8d1d28 [ 261.704918][T11705] [ 262.068790][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.099567][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.258994][T11717] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.434600][T11729] netlink: 'syz.4.1616': attribute type 2 has an invalid length. [ 262.462894][T11729] netlink: 'syz.4.1616': attribute type 2 has an invalid length. [ 262.502754][T11729] netlink: 'syz.4.1616': attribute type 2 has an invalid length. [ 262.644105][T11736] lo speed is unknown, defaulting to 1000 [ 262.743510][ T348] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.754077][ T348] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.791148][ T348] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.809405][T11742] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1621'. [ 262.821930][ T348] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.846925][T11742] syzkaller0: entered promiscuous mode [ 262.862712][T11742] syzkaller0: entered allmulticast mode [ 262.897302][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.905674][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.912493][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.919330][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.926142][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.932933][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.939763][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.946569][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.953344][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.960168][T11742] tc action pedit offset must be on 32 bit boundaries [ 262.966993][T11742] 0: reclassify loop, rule prio 0, protocol 800 [ 262.980512][T11751] FAULT_INJECTION: forcing a failure. [ 262.980512][T11751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.995741][T11751] CPU: 0 UID: 0 PID: 11751 Comm: syz.4.1624 Not tainted syzkaller #0 PREEMPT(full) [ 262.995765][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.995775][T11751] Call Trace: [ 262.995782][T11751] [ 262.995789][T11751] dump_stack_lvl+0xe8/0x150 [ 262.995815][T11751] should_fail_ex+0x412/0x560 [ 262.995840][T11751] _copy_from_iter+0x1d3/0x1670 [ 262.995865][T11751] ? rcu_is_watching+0x15/0xb0 [ 262.995891][T11751] ? __pfx__copy_from_iter+0x10/0x10 [ 262.995921][T11751] ? netlink_sendmsg+0x650/0xb40 [ 262.995941][T11751] ? skb_put+0x11b/0x210 [ 262.995965][T11751] netlink_sendmsg+0x6c0/0xb40 [ 262.995997][T11751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.996019][T11751] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.996044][T11751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.996070][T11751] ____sys_sendmsg+0x972/0x9f0 [ 262.996092][T11751] ? __might_fault+0xaf/0x130 [ 262.996119][T11751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.996148][T11751] ? import_iovec+0x73/0xa0 [ 262.996175][T11751] ___sys_sendmsg+0x2a5/0x360 [ 262.996197][T11751] ? __lock_acquire+0x6b5/0x2cf0 [ 262.996220][T11751] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.996239][T11751] ? __lock_acquire+0x6b5/0x2cf0 [ 262.996276][T11751] ? kstrtouint+0x6e/0xe0 [ 262.996334][T11751] __sys_sendmmsg+0x27c/0x4e0 [ 262.996362][T11751] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.996383][T11751] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 262.996429][T11751] ? ksys_write+0x242/0x270 [ 262.996455][T11751] ? __pfx_ksys_write+0x10/0x10 [ 262.996485][T11751] __x64_sys_sendmmsg+0xa0/0xc0 [ 262.996507][T11751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.996526][T11751] do_syscall_64+0x15f/0xf80 [ 262.996545][T11751] ? trace_irq_disable+0x3b/0x140 [ 262.996571][T11751] ? clear_bhb_loop+0x40/0x90 [ 262.996593][T11751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.996610][T11751] RIP: 0033:0x7fef9d19cdd9 [ 262.996628][T11751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.996643][T11751] RSP: 002b:00007fef9e0bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.996662][T11751] RAX: ffffffffffffffda RBX: 00007fef9d415fa0 RCX: 00007fef9d19cdd9 [ 262.996675][T11751] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 262.996687][T11751] RBP: 00007fef9e0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 262.996697][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.996707][T11751] R13: 00007fef9d416038 R14: 00007fef9d415fa0 R15: 00007ffc1a18efd8 [ 262.996737][T11751] [ 263.398920][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 263.428718][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 263.490371][ T348] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.498923][ T348] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.507931][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 263.530903][ T348] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.555152][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 263.565709][ T348] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.878495][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'. [ 263.969066][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'. [ 263.978271][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'. [ 264.022116][T11788] syzkaller1: entered promiscuous mode [ 264.049362][T11788] syzkaller1: entered allmulticast mode [ 264.226619][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'. [ 264.235849][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1634'. [ 264.700255][T11810] xt_hashlimit: size too large, truncated to 1048576 [ 264.837630][ T9] IPVS: starting estimator thread 0... [ 264.855673][T11812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.935090][T11817] IPVS: using max 38 ests per chain, 91200 per kthread [ 265.170059][ T1016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.278558][T11812] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.291051][T11812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.365848][T11812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.391619][T11812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.423275][T11812] veth1_vlan: left promiscuous mode [ 265.435834][T11812] vlan0: left promiscuous mode [ 265.442591][T11812] veth1_vlan: entered promiscuous mode [ 265.472535][T11812] veth1_macvtap: left promiscuous mode [ 265.484481][T11812] veth0_macvtap: left promiscuous mode [ 265.522380][T11812] veth0_macvtap: entered promiscuous mode [ 265.535709][T11812] veth1_macvtap: entered promiscuous mode [ 265.556986][T11812] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 265.594702][ T5628] lo speed is unknown, defaulting to 1000 [ 265.600988][T11814] –: renamed from dummy0 (while UP) [ 265.618426][ T5628] sqz0: Port: 1 Link ACTIVE [ 265.751695][ T1016] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.773933][ T1016] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.803489][ T1221] lo speed is unknown, defaulting to 1000 [ 265.811340][ T3324] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.866500][ T1016] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.913835][ T1016] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.328011][T11870] lo speed is unknown, defaulting to 1000 [ 267.171618][T11912] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 268.183795][T11969] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.226707][T11969] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.297139][T11974] __nla_validate_parse: 8 callbacks suppressed [ 268.297157][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 268.349851][T11969] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.381612][T11969] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.388465][T11974] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 268.425058][T11976] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 268.503553][T11969] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.537002][T11969] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.628086][T11969] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.663609][T11969] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.872996][ T133] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.893262][ T133] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.935461][ T133] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.958026][ T133] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.059914][ T1016] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.075076][ T1016] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.095270][T11985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.113294][ T1016] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.123676][ T1016] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.197651][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1693'. [ 269.279785][T11993] lo speed is unknown, defaulting to 1000 [ 269.481588][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 269.619727][T12007] : entered promiscuous mode [ 269.708679][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 269.749323][T11994] lo speed is unknown, defaulting to 1000 [ 270.053706][T12016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.150850][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 270.183811][T12016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.196060][T12016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.218919][T12010] lo speed is unknown, defaulting to 1000 [ 270.446690][T12022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.478018][T12016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.528479][T12016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.849349][T12016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.905151][T12016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.933662][ T133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.934409][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.956215][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.972173][ T348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.980928][ T348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.995447][ T5946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.011877][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.148885][T12031] syzkaller0: entered promiscuous mode [ 271.261849][T12016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.284327][T12016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.446929][T12038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.517591][T12041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1707'. [ 271.576850][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.891684][ T3276] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.907309][ T3276] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.917695][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 272.032480][ T3276] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.040998][ T3276] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.175253][ T3276] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.201696][ T3276] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.270391][ T348] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.284824][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'. [ 272.293291][ T348] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.371022][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'. [ 272.834311][T12085] netlink: 'syz.4.1721': attribute type 17 has an invalid length. [ 272.883664][T12085] netlink: 'syz.4.1721': attribute type 49 has an invalid length. [ 272.932735][T12090] nbd: must specify a size in bytes for the device [ 273.216396][T12096] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 273.371135][T12113] __nla_validate_parse: 3 callbacks suppressed [ 273.371153][T12113] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1729'. [ 273.402755][T12099] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 273.554591][T12099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1725'. [ 273.594362][T12096] veth9: entered promiscuous mode [ 273.622542][T12096] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 273.664645][T12099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.669691][ T348] net_ratelimit: 12 callbacks suppressed [ 273.669711][ T348] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 273.878710][ T348] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 273.911567][T12133] nbd: must specify a size in bytes for the device [ 274.486030][T12137] netlink: 'syz.1.1737': attribute type 1 has an invalid length. [ 274.507238][T12137] netlink: 'syz.1.1737': attribute type 2 has an invalid length. [ 274.527787][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 274.649617][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'. [ 275.012114][T12171] xt_l2tp: v2 sid > 0xffff: 8388608 [ 275.124546][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1739'. [ 275.161560][T12146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1739'. [ 275.178385][T12176] nbd: must specify a size in bytes for the device [ 275.324688][T12179] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 275.365582][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.387255][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.427541][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.526331][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.573849][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.610330][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.670704][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 275.727163][T12179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 276.692663][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.778006][T12233] nbd: must specify a size in bytes for the device [ 276.992429][T12239] ip6erspan0: entered allmulticast mode [ 277.105722][T12222] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 277.299341][T12260] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1770'. [ 277.326439][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.535341][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1771'. [ 277.557931][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 277.594455][T12264] tc_dump_action: action bad kind [ 277.619615][T12278] netlink: 'syz.4.1771': attribute type 4 has an invalid length. [ 278.274158][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 278.326613][T12309] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 278.348118][T12309] netlink: 'syz.0.1782': attribute type 2 has an invalid length. [ 278.830781][T12331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.873581][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'. [ 278.945663][T12331] set match dimension is over the limit! [ 279.025843][T12340] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 279.034707][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 279.045735][T12305] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 279.056795][T12340] ipvlan0: entered allmulticast mode [ 279.080068][T12340] veth0_vlan: entered allmulticast mode [ 279.115217][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1791'. [ 279.438046][T12360] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1796'. [ 280.082497][T12385] syzkaller1: entered promiscuous mode [ 280.095209][T12385] syzkaller1: entered allmulticast mode [ 280.282997][T12394] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 280.583225][T12405] macsec2: entered promiscuous mode [ 280.611992][T12405] macsec2: entered allmulticast mode [ 280.857662][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'. [ 281.170645][T12434] netlink: 'syz.0.1824': attribute type 4 has an invalid length. [ 281.199871][T12436] netlink: 'syz.0.1824': attribute type 4 has an invalid length. [ 281.211631][T12440] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 281.737106][T12469] FAULT_INJECTION: forcing a failure. [ 281.737106][T12469] name failslab, interval 1, probability 0, space 0, times 0 [ 281.753693][T12469] CPU: 0 UID: 0 PID: 12469 Comm: syz.3.1835 Not tainted syzkaller #0 PREEMPT(full) [ 281.753714][T12469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.753722][T12469] Call Trace: [ 281.753728][T12469] [ 281.753734][T12469] dump_stack_lvl+0xe8/0x150 [ 281.753756][T12469] should_fail_ex+0x412/0x560 [ 281.753777][T12469] should_failslab+0xa8/0x100 [ 281.753799][T12469] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 281.753819][T12469] ? __alloc_skb+0x1d0/0x7d0 [ 281.753833][T12469] ? __local_bh_enable_ip+0xd0/0x130 [ 281.753851][T12469] __alloc_skb+0x1d0/0x7d0 [ 281.753870][T12469] pfkey_send_policy_notify+0x145/0x990 [ 281.753891][T12469] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 281.753913][T12469] km_policy_notify+0x121/0x200 [ 281.753935][T12469] ? km_policy_notify+0x28/0x200 [ 281.753955][T12469] xfrm_add_policy+0x4ef/0x820 [ 281.753980][T12469] ? __pfx_xfrm_add_policy+0x10/0x10 [ 281.753998][T12469] ? apparmor_capable+0x126/0x170 [ 281.754024][T12469] ? __nla_parse+0x40/0x60 [ 281.754048][T12469] xfrm_user_rcv_msg+0x7ae/0xc40 [ 281.754072][T12469] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 281.754130][T12469] ? __pfx___mutex_trylock_common+0x10/0x10 [ 281.754154][T12469] ? rcu_is_watching+0x15/0xb0 [ 281.754172][T12469] ? trace_contention_end+0x3d/0x140 [ 281.754191][T12469] ? __mutex_lock+0x319/0x1550 [ 281.754214][T12469] netlink_rcv_skb+0x232/0x4b0 [ 281.754234][T12469] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 281.754258][T12469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.754287][T12469] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.754304][T12469] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.754324][T12469] xfrm_netlink_rcv+0x79/0x90 [ 281.754345][T12469] netlink_unicast+0x75c/0x8e0 [ 281.754369][T12469] netlink_sendmsg+0x813/0xb40 [ 281.754394][T12469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.754415][T12469] ? aa_sock_msg_perm+0xf1/0x1b0 [ 281.754434][T12469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.754457][T12469] ____sys_sendmsg+0x972/0x9f0 [ 281.754476][T12469] ? __might_fault+0xaf/0x130 [ 281.754499][T12469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.754526][T12469] ? import_iovec+0x73/0xa0 [ 281.754550][T12469] ___sys_sendmsg+0x2a5/0x360 [ 281.754570][T12469] ? __lock_acquire+0x6b5/0x2cf0 [ 281.754591][T12469] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.754646][T12469] ? __fget_files+0x2a/0x420 [ 281.754671][T12469] ? __fget_files+0x3a0/0x420 [ 281.754700][T12469] __x64_sys_sendmsg+0x1bd/0x2a0 [ 281.754724][T12469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.754755][T12469] ? __pfx_ksys_write+0x10/0x10 [ 281.754786][T12469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.754803][T12469] do_syscall_64+0x15f/0xf80 [ 281.754822][T12469] ? trace_irq_disable+0x3b/0x140 [ 281.754846][T12469] ? clear_bhb_loop+0x40/0x90 [ 281.754867][T12469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.754884][T12469] RIP: 0033:0x7f432759cdd9 [ 281.754900][T12469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.754912][T12469] RSP: 002b:00007f432847c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.754930][T12469] RAX: ffffffffffffffda RBX: 00007f4327815fa0 RCX: 00007f432759cdd9 [ 281.754943][T12469] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 281.754953][T12469] RBP: 00007f432847c090 R08: 0000000000000000 R09: 0000000000000000 [ 281.754963][T12469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.754973][T12469] R13: 00007f4327816038 R14: 00007f4327815fa0 R15: 00007ffe09f43f78 [ 281.755002][T12469] [ 281.778569][T12471] vlan2: entered allmulticast mode [ 281.824287][T12473] net_ratelimit: 57 callbacks suppressed [ 281.824305][T12473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.849270][T12471] bond0: entered allmulticast mode [ 282.186176][T12480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1839'. [ 282.210516][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 282.220076][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1841'. [ 282.430226][T12491] bridge7: entered promiscuous mode [ 282.446868][ T3276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.446896][ T1016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.468476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.650220][T12508] netlink: 'syz.2.1847': attribute type 27 has an invalid length. [ 282.706135][T12512] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1847'. [ 283.087815][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.109795][T12508] veth3: left promiscuous mode [ 283.119486][T12508] ip6gre1: left promiscuous mode [ 283.126729][T12508] ip6gre1: left allmulticast mode [ 283.143426][ T5631] lo speed is unknown, defaulting to 1000 [ 283.162298][ T5631] sqz0: Port: 1 Link DOWN [ 283.171994][ T348] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.198007][ T348] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.214638][ T348] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.223685][ T348] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.235659][ T348] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.244385][ T348] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.254328][ T1221] lo speed is unknown, defaulting to 1000 [ 283.266168][ T348] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.291453][ T348] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.309697][T12525] lo speed is unknown, defaulting to 1000 [ 283.373322][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 283.537011][T12540] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 283.861133][T12524] lo speed is unknown, defaulting to 1000 [ 284.102224][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.141312][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.179174][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.191041][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.200720][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.218946][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.235754][T12566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.389263][T12574] __nla_validate_parse: 1 callbacks suppressed [ 284.389281][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 284.407949][T12574] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1866'. [ 284.429633][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1866'. [ 284.677487][T12583] netlink: 'syz.1.1868': attribute type 10 has an invalid length. [ 285.167887][T12605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1875'. [ 285.341353][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 285.408294][T12617] bridge0: port 3(team0) entered blocking state [ 285.447645][T12617] bridge0: port 3(team0) entered disabled state [ 285.480818][T12617] team0: entered allmulticast mode [ 285.492087][T12617] team_slave_0: entered allmulticast mode [ 285.504044][T12617] team_slave_1: entered allmulticast mode [ 285.538074][T12617] team0: entered promiscuous mode [ 285.548766][T12617] team_slave_0: entered promiscuous mode [ 285.563648][T12617] team_slave_1: entered promiscuous mode [ 285.581824][T12617] bridge0: port 3(team0) entered blocking state [ 285.589819][T12617] bridge0: port 3(team0) entered forwarding state [ 285.770789][T12638] netlink: 'syz.1.1883': attribute type 10 has an invalid length. [ 285.812209][T12638] dummy0: entered promiscuous mode [ 285.831545][T12638] dummy0: entered allmulticast mode [ 285.859870][T12638] team0: Port device dummy0 added [ 285.899851][T12645] veth0: entered promiscuous mode [ 285.943107][T12638] bond0: entered promiscuous mode [ 285.964499][T12638] bond_slave_0: entered promiscuous mode [ 285.991396][T12638] bond_slave_1: entered promiscuous mode [ 286.002100][T12650] sctp: [Deprecated]: syz.0.1886 (pid 12650) Use of int in max_burst socket option. [ 286.002100][T12650] Use struct sctp_assoc_value instead [ 286.024526][T12647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 286.105810][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1885'. [ 286.193036][T12647] : entered promiscuous mode [ 286.209725][T12653] openvswitch: : Dropping previously announced user features [ 286.445876][T12663] lo speed is unknown, defaulting to 1000 [ 286.506504][T12636] bond0: left promiscuous mode [ 286.518256][T12636] bond_slave_0: left promiscuous mode [ 286.540547][T12636] bond_slave_1: left promiscuous mode [ 286.555037][T12636] veth0: left promiscuous mode [ 286.828894][T12679] netlink: 'syz.3.1894': attribute type 12 has an invalid length. [ 286.925672][ T13] net_ratelimit: 73 callbacks suppressed [ 286.925690][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.939757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.456693][T12690] lo speed is unknown, defaulting to 1000 [ 287.566732][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.576568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.587780][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.010174][T12694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1898'. [ 288.029391][T12710] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 288.425519][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 288.455773][T12724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1910'. [ 288.839860][T12729] syzkaller0: left promiscuous mode [ 288.845675][ T1016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.886056][T12729] syzkaller0: left allmulticast mode [ 289.207500][T12735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.216360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.401944][T12741] netlink: 'syz.0.1915': attribute type 1 has an invalid length. [ 289.435313][T12741] __nla_validate_parse: 2 callbacks suppressed [ 289.435332][T12741] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1915'. [ 289.450881][T12741] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1915'. [ 289.460054][T12741] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1915'. [ 289.495717][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 290.402933][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 290.430281][T12769] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1923'. [ 290.552234][T12773] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1925'. [ 290.644050][T12779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1926'. [ 290.698383][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 290.715523][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1926'. [ 290.960843][T12791] pim6reg: entered allmulticast mode [ 291.036192][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'. [ 291.189166][ T5631] IPVS: starting estimator thread 0... [ 291.255290][T12795] pim6reg: left allmulticast mode [ 291.285455][T12803] IPVS: using max 31 ests per chain, 74400 per kthread [ 291.413424][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.419233][T12813] netlink: 'syz.2.1932': attribute type 4 has an invalid length. [ 291.423395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.447839][T12813] netlink: 'syz.2.1932': attribute type 4 has an invalid length. [ 291.525701][ T5946] lo speed is unknown, defaulting to 1000 [ 291.549885][ T5946] sqz0: Port: 1 Link ACTIVE [ 291.563177][ T5946] lo speed is unknown, defaulting to 1000 [ 291.583012][T12826] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 291.583490][T12825] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 291.750995][T12833] netlink: 'syz.3.1939': attribute type 5 has an invalid length. [ 292.062801][T12849] bond6: (slave vcan1): refused to change device type [ 292.070959][T12856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.081136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.103280][T12855] syzkaller1: entered promiscuous mode [ 292.109141][T12855] syzkaller1: entered allmulticast mode [ 292.443547][T12874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.452356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.505490][T12874] FAULT_INJECTION: forcing a failure. [ 292.505490][T12874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.521242][T12874] CPU: 0 UID: 0 PID: 12874 Comm: syz.4.1952 Not tainted syzkaller #0 PREEMPT(full) [ 292.521268][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.521278][T12874] Call Trace: [ 292.521285][T12874] [ 292.521293][T12874] dump_stack_lvl+0xe8/0x150 [ 292.521319][T12874] should_fail_ex+0x412/0x560 [ 292.521342][T12874] _copy_from_user+0x2d/0xb0 [ 292.521356][T12874] ___sys_sendmsg+0x1c6/0x360 [ 292.521370][T12874] ? __lock_acquire+0x6b5/0x2cf0 [ 292.521383][T12874] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.521398][T12874] ? kstrtouint+0x6e/0xe0 [ 292.521421][T12874] ? __fget_files+0x2a/0x420 [ 292.521433][T12874] ? __fget_files+0x3a0/0x420 [ 292.521449][T12874] __sys_sendmmsg+0x27c/0x4e0 [ 292.521464][T12874] ? __pfx___sys_sendmmsg+0x10/0x10 [ 292.521476][T12874] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 292.521501][T12874] ? ksys_write+0x242/0x270 [ 292.521516][T12874] ? __pfx_ksys_write+0x10/0x10 [ 292.521532][T12874] __x64_sys_sendmmsg+0xa0/0xc0 [ 292.521545][T12874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.521555][T12874] do_syscall_64+0x15f/0xf80 [ 292.521566][T12874] ? trace_irq_disable+0x3b/0x140 [ 292.521581][T12874] ? clear_bhb_loop+0x40/0x90 [ 292.521592][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.521602][T12874] RIP: 0033:0x7fef9d19cdd9 [ 292.521613][T12874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.521621][T12874] RSP: 002b:00007fef9e0bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.521632][T12874] RAX: ffffffffffffffda RBX: 00007fef9d415fa0 RCX: 00007fef9d19cdd9 [ 292.521640][T12874] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006 [ 292.521646][T12874] RBP: 00007fef9e0bd090 R08: 0000000000000000 R09: 0000000000000000 [ 292.521652][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.521657][T12874] R13: 00007fef9d416038 R14: 00007fef9d415fa0 R15: 00007ffc1a18efd8 [ 292.521672][T12874] [ 292.727040][ T133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.738407][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.746771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.103719][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.139582][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.157541][T12897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.206896][T12904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.389601][ T29] audit: type=1804 audit(1777822867.167:9): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1961" name="/newroot/403/memory.events" dev="tmpfs" ino=2078 res=1 errno=0 [ 293.412740][ T29] audit: type=1800 audit(1777822867.167:10): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1961" name="memory.events" dev="tmpfs" ino=2078 res=0 errno=0 [ 293.633553][T12927] FAULT_INJECTION: forcing a failure. [ 293.633553][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.647151][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.3.1964 Not tainted syzkaller #0 PREEMPT(full) [ 293.647166][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.647173][T12927] Call Trace: [ 293.647177][T12927] [ 293.647181][T12927] dump_stack_lvl+0xe8/0x150 [ 293.647197][T12927] should_fail_ex+0x412/0x560 [ 293.647213][T12927] _copy_from_user+0x2d/0xb0 [ 293.647227][T12927] __copy_msghdr+0x3c5/0x5b0 [ 293.647242][T12927] ___sys_sendmsg+0x213/0x360 [ 293.647254][T12927] ? __lock_acquire+0x6b5/0x2cf0 [ 293.647268][T12927] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.647283][T12927] ? kstrtouint+0x6e/0xe0 [ 293.647306][T12927] ? __fget_files+0x2a/0x420 [ 293.647317][T12927] ? __fget_files+0x3a0/0x420 [ 293.647333][T12927] __sys_sendmmsg+0x27c/0x4e0 [ 293.647348][T12927] ? __pfx___sys_sendmmsg+0x10/0x10 [ 293.647359][T12927] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 293.647384][T12927] ? ksys_write+0x242/0x270 [ 293.647399][T12927] ? __pfx_ksys_write+0x10/0x10 [ 293.647416][T12927] __x64_sys_sendmmsg+0xa0/0xc0 [ 293.647428][T12927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.647438][T12927] do_syscall_64+0x15f/0xf80 [ 293.647449][T12927] ? trace_irq_disable+0x3b/0x140 [ 293.647464][T12927] ? clear_bhb_loop+0x40/0x90 [ 293.647475][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.647485][T12927] RIP: 0033:0x7f432759cdd9 [ 293.647495][T12927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.647504][T12927] RSP: 002b:00007f432847c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.647515][T12927] RAX: ffffffffffffffda RBX: 00007f4327815fa0 RCX: 00007f432759cdd9 [ 293.647522][T12927] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006 [ 293.647528][T12927] RBP: 00007f432847c090 R08: 0000000000000000 R09: 0000000000000000 [ 293.647534][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.647540][T12927] R13: 00007f4327816038 R14: 00007f4327815fa0 R15: 00007ffe09f43f78 [ 293.647555][T12927] [ 294.605658][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.787763][T12881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.009414][T12936] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.182569][T12946] __nla_validate_parse: 14 callbacks suppressed [ 296.182587][T12946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1973'. [ 296.320861][T12954] FAULT_INJECTION: forcing a failure. [ 296.320861][T12954] name failslab, interval 1, probability 0, space 0, times 0 [ 296.343859][T12954] CPU: 0 UID: 0 PID: 12954 Comm: syz.2.1975 Not tainted syzkaller #0 PREEMPT(full) [ 296.343885][T12954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.343896][T12954] Call Trace: [ 296.343903][T12954] [ 296.343910][T12954] dump_stack_lvl+0xe8/0x150 [ 296.343936][T12954] should_fail_ex+0x412/0x560 [ 296.343965][T12954] should_failslab+0xa8/0x100 [ 296.343993][T12954] __kmalloc_cache_noprof+0x88/0x660 [ 296.344019][T12954] ? sctp_association_new+0x89/0x25e0 [ 296.344052][T12954] sctp_association_new+0x89/0x25e0 [ 296.344081][T12954] ? sctp_has_association+0x1cd/0x1f0 [ 296.344099][T12954] ? sctp_has_association+0x2f/0x1f0 [ 296.344120][T12954] ? __ipv6_addr_type+0x247/0x2f0 [ 296.344151][T12954] sctp_connect_new_asoc+0x2e4/0x6b0 [ 296.344181][T12954] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 296.344208][T12954] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 296.344234][T12954] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 296.344258][T12954] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 296.344285][T12954] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 296.344310][T12954] ? security_sctp_bind_connect+0x7e/0x2c0 [ 296.344332][T12954] sctp_sendmsg+0x1528/0x2c10 [ 296.344373][T12954] ? __pfx_sctp_sendmsg+0x10/0x10 [ 296.344416][T12954] ? aa_sk_perm+0x6d5/0x900 [ 296.344447][T12954] ? __pfx_aa_sk_perm+0x10/0x10 [ 296.344472][T12954] ? sock_rps_record_flow+0x19/0x350 [ 296.344500][T12954] ? inet_sendmsg+0x2f4/0x370 [ 296.344522][T12954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.344549][T12954] ____sys_sendmsg+0x80a/0x9f0 [ 296.344582][T12954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.344613][T12954] ? import_iovec+0x73/0xa0 [ 296.344643][T12954] ___sys_sendmsg+0x2a5/0x360 [ 296.344664][T12954] ? __lock_acquire+0x6b5/0x2cf0 [ 296.344688][T12954] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.344717][T12954] ? kstrtouint+0x6e/0xe0 [ 296.344764][T12954] ? __fget_files+0x2a/0x420 [ 296.344784][T12954] ? __fget_files+0x3a0/0x420 [ 296.344816][T12954] __sys_sendmmsg+0x27c/0x4e0 [ 296.344844][T12954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 296.344871][T12954] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 296.344915][T12954] ? ksys_write+0x242/0x270 [ 296.344941][T12954] ? __pfx_ksys_write+0x10/0x10 [ 296.344971][T12954] __x64_sys_sendmmsg+0xa0/0xc0 [ 296.344994][T12954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.345013][T12954] do_syscall_64+0x15f/0xf80 [ 296.345032][T12954] ? trace_irq_disable+0x3b/0x140 [ 296.345057][T12954] ? clear_bhb_loop+0x40/0x90 [ 296.345080][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.345097][T12954] RIP: 0033:0x7f906259cdd9 [ 296.345115][T12954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.345129][T12954] RSP: 002b:00007f90633a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.345149][T12954] RAX: ffffffffffffffda RBX: 00007f9062815fa0 RCX: 00007f906259cdd9 [ 296.345162][T12954] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006 [ 296.345173][T12954] RBP: 00007f90633a2090 R08: 0000000000000000 R09: 0000000000000000 [ 296.345184][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.345195][T12954] R13: 00007f9062816038 R14: 00007f9062815fa0 R15: 00007ffec1e995e8 [ 296.345224][T12954] [ 296.975771][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 297.166189][ T133] net_ratelimit: 4 callbacks suppressed [ 297.166206][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.181544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.292743][T12985] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1981'. [ 297.382958][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1984'. [ 297.427655][T12998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1982'. [ 297.558561][T13003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.577749][T13003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.594551][T13003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.604059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.614027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.622220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.810194][T13018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1989'. [ 297.829089][ T5631] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 297.871545][T13018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1989'. [ 297.985976][T13024] fido_id[13024]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 297.989464][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 298.019069][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 298.043871][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.057042][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.107088][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.135420][T13029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.245664][T13032] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1993'. [ 298.433495][T13055] syzkaller0: entered promiscuous mode [ 298.439451][T13055] syzkaller0: entered allmulticast mode [ 298.466018][T13055] 8021q: VLANs not supported on vcan0 [ 298.591158][T13067] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 298.718950][T13067] bond7: entered promiscuous mode [ 298.734270][T13067] 8021q: adding VLAN 0 to HW filter on device bond7 [ 298.775754][T13071] bond7: (slave veth11): making interface the new active one [ 298.783475][T13071] veth11: entered promiscuous mode [ 298.803792][T13071] bond7: (slave veth11): Enslaving as an active interface with an up link [ 299.001135][T13075] lo speed is unknown, defaulting to 1000 [ 299.036860][T13091] syzkaller1: entered promiscuous mode [ 299.061582][T13091] syzkaller1: entered allmulticast mode [ 299.156838][T13087] IPVS: set_ctl: invalid protocol: 1 100.1.1.1:20001 [ 299.476231][T13102] syzkaller0: entered promiscuous mode [ 299.496672][T13102] syzkaller0: entered allmulticast mode [ 299.518998][T13096] lo speed is unknown, defaulting to 1000 [ 301.659424][T13126] __nla_validate_parse: 6 callbacks suppressed [ 301.659442][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 302.141169][T13143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.193986][T13147] siw: device registration error -23 [ 302.199088][T13143] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.211344][T13143] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.213509][T13147] sctp: [Deprecated]: syz.3.2029 (pid 13147) Use of int in maxseg socket option. [ 302.213509][T13147] Use struct sctp_assoc_value instead [ 302.373815][T13143] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.383918][T13143] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.504473][T13143] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.525320][T13143] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.567782][T13158] netlink: 'syz.1.2031': attribute type 4 has an invalid length. [ 302.669489][T13143] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.693073][T13143] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.920619][ T3276] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.935950][T13168] netlink: 'syz.1.2031': attribute type 4 has an invalid length. [ 302.936114][ T133] net_ratelimit: 6 callbacks suppressed [ 302.936127][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.957990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.985665][ T3276] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.024372][T13158] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2031'. [ 303.037679][ T133] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.046802][ T133] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.079713][ T133] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.090255][ T133] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.126757][ T133] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.135332][ T133] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.233331][T13174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.368423][T13174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 303.391846][T13177] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 303.404684][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.415910][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.675173][T13174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 303.941149][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 303.973024][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 303.991116][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 304.012102][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 304.033304][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 304.057466][T13174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 304.068442][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 304.083203][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 304.093884][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2043'. [ 304.150441][T13174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 304.201365][T13212] Cannot find del_set index 1 as target [ 304.208854][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.217297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.226644][ T3276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.373330][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 304.398106][ T3276] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 304.424109][ T3276] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 304.519229][ T3276] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 304.736633][T13233] netlink: 'syz.2.2046': attribute type 13 has an invalid length. [ 304.848230][ T7797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.856587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.927988][T13219] FAULT_INJECTION: forcing a failure. [ 304.927988][T13219] name failslab, interval 1, probability 0, space 0, times 0 [ 304.965309][T13219] CPU: 1 UID: 0 PID: 13219 Comm: syz.4.2045 Not tainted syzkaller #0 PREEMPT(full) [ 304.965336][T13219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.965347][T13219] Call Trace: [ 304.965354][T13219] [ 304.965362][T13219] dump_stack_lvl+0xe8/0x150 [ 304.965388][T13219] should_fail_ex+0x412/0x560 [ 304.965417][T13219] should_failslab+0xa8/0x100 [ 304.965445][T13219] __kmalloc_cache_noprof+0x88/0x660 [ 304.965468][T13219] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 304.965491][T13219] ? sctp_add_bind_addr+0x8c/0x370 [ 304.965518][T13219] sctp_add_bind_addr+0x8c/0x370 [ 304.965545][T13219] sctp_copy_local_addr_list+0x314/0x4f0 [ 304.965571][T13219] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 304.965593][T13219] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 304.965618][T13219] ? sctp_v6_is_any+0x64/0x80 [ 304.965642][T13219] ? sctp_copy_one_addr+0x93/0x360 [ 304.965676][T13219] sctp_bind_addr_copy+0xb3/0x3c0 [ 304.965699][T13219] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 304.965724][T13219] sctp_connect_new_asoc+0x2ff/0x6b0 [ 304.965753][T13219] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 304.965785][T13219] ? sctp_get_af_specific+0x29/0x80 [ 304.965805][T13219] ? sctp_inet6_send_verify+0x80/0x300 [ 304.965825][T13219] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 304.965854][T13219] __sctp_connect+0x5cb/0xdc0 [ 304.965892][T13219] ? __pfx___sctp_connect+0x10/0x10 [ 304.965917][T13219] ? security_sctp_bind_connect+0x7e/0x2c0 [ 304.965939][T13219] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 304.965963][T13219] sctp_getsockopt_connectx3+0x227/0x360 [ 304.965984][T13219] ? lock_sock_nested+0x6a/0x100 [ 304.966004][T13219] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 304.966031][T13219] ? sctp_getsockopt+0x12f/0xb90 [ 304.966057][T13219] ? __local_bh_enable_ip+0xd0/0x130 [ 304.966081][T13219] sctp_getsockopt+0x984/0xb90 [ 304.966106][T13219] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 304.966126][T13219] do_sock_getsockopt+0x51d/0x7e0 [ 304.966155][T13219] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 304.966194][T13219] ? __fget_files+0x3a0/0x420 [ 304.966215][T13219] ? __fget_files+0x2a/0x420 [ 304.966243][T13219] __x64_sys_getsockopt+0x1a4/0x240 [ 304.966272][T13219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.966292][T13219] do_syscall_64+0x15f/0xf80 [ 304.966312][T13219] ? trace_irq_disable+0x3b/0x140 [ 304.966337][T13219] ? clear_bhb_loop+0x40/0x90 [ 304.966360][T13219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.966381][T13219] RIP: 0033:0x7fef9d19cdd9 [ 304.966398][T13219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.966413][T13219] RSP: 002b:00007fef9e0bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 304.966433][T13219] RAX: ffffffffffffffda RBX: 00007fef9d415fa0 RCX: 00007fef9d19cdd9 [ 304.966446][T13219] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000005 [ 304.966456][T13219] RBP: 00007fef9e0bd090 R08: 0000200000000140 R09: 0000000000000000 [ 304.966467][T13219] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 304.966479][T13219] R13: 00007fef9d416038 R14: 00007fef9d415fa0 R15: 00007ffc1a18efd8 [ 304.966509][T13219] [ 305.752269][T13236] bridge0: port 3(team0) entered disabled state [ 305.758811][T13236] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.766588][T13236] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.158143][ T5642] block nbd2: Receive control failed (result -32) [ 306.165514][ T5638] block nbd2: Receive control failed (result -32) [ 306.332957][T13270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.439013][ T5761] syz1: Port: 1 Link DOWN [ 306.488547][T13270] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.521013][T13270] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.650866][ T7797] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 306.675182][ T7797] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 306.744090][T13274] bond5: option tlb_dynamic_lb: invalid value (5) [ 306.752856][T13274] bond5 (unregistering): Released all slaves [ 306.816940][ T7797] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 306.835113][ T7797] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 306.902215][T13270] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.925715][T13270] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.965861][T13289] batadv_slave_0: Caught tx_queue_len zero misconfig [ 306.984807][T13292] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 307.037151][T13291] tipc: Invalid UDP bearer configuration [ 307.037566][T13291] tipc: Enabling of bearer rejected, failed to enable media [ 307.067639][T13289] __nla_validate_parse: 11 callbacks suppressed [ 307.067655][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 307.087183][T13270] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.115477][T13270] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.240382][T13270] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.259098][T13270] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.530023][ T7797] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.565319][ T7797] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.671483][T13306] netlink: 'syz.3.2066': attribute type 1 has an invalid length. [ 307.685398][T13306] netlink: 'syz.3.2066': attribute type 2 has an invalid length. [ 307.724543][ T7797] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.756830][ T7797] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.813851][ T133] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.843929][ T133] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.884343][ T133] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.911698][ T133] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.067507][T13317] tipc: Started in network mode [ 308.087830][T13317] tipc: Node identity c21a37e3e90c, cluster identity 4711 [ 308.106666][T13317] tipc: Enabled bearer , priority 0 [ 308.241249][T13321] syzkaller0: entered promiscuous mode [ 308.255352][T13321] syzkaller0: entered allmulticast mode [ 308.270026][T13321] tipc: Resetting bearer [ 308.376077][T13316] tipc: Resetting bearer [ 308.668241][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2074'. [ 308.686348][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.694796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.968880][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.975313][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.989302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.611465][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.619904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.931082][T13316] tipc: Disabling bearer [ 310.976164][ T1221] tipc: Node number set to 722876387 [ 311.415185][T13373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.889540][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.942341][T13393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.955637][T13393] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 312.130252][T13393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 312.159542][T13393] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 312.196157][T13393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.228199][T13393] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 312.240014][T13414] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2087'. [ 312.257197][T13414] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2087'. [ 312.279042][T13411] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2086'. [ 312.320946][T13393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.347708][T13393] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 312.427587][T13416] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2088'. [ 312.457877][T13393] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.478416][T13393] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 312.593467][T13423] syzkaller0: entered promiscuous mode [ 312.599175][T13423] syzkaller0: entered allmulticast mode [ 312.996204][T13437] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2093'. [ 314.450024][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.459709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.005405][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.013793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.050914][ T1221] lo speed is unknown, defaulting to 1000 [ 315.076221][ T1221] sqz0: Port: 1 Link DOWN [ 315.085862][ T133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.099256][ T1221] lo speed is unknown, defaulting to 1000 [ 315.149891][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2099'. [ 315.405116][T13477] lo speed is unknown, defaulting to 1000 [ 315.866361][T13499] syzkaller0: entered promiscuous mode [ 315.890228][T13499] syzkaller0: entered allmulticast mode [ 315.973113][T13504] FAULT_INJECTION: forcing a failure. [ 315.973113][T13504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.999639][T13504] CPU: 0 UID: 0 PID: 13504 Comm: syz.3.2106 Not tainted syzkaller #0 PREEMPT(full) [ 315.999664][T13504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 315.999674][T13504] Call Trace: [ 315.999682][T13504] [ 315.999689][T13504] dump_stack_lvl+0xe8/0x150 [ 315.999716][T13504] should_fail_ex+0x412/0x560 [ 315.999743][T13504] _copy_from_user+0x2d/0xb0 [ 315.999767][T13504] ___sys_sendmsg+0x1c6/0x360 [ 315.999790][T13504] ? __lock_acquire+0x6b5/0x2cf0 [ 315.999814][T13504] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.999870][T13504] ? __fget_files+0x2a/0x420 [ 315.999890][T13504] ? __fget_files+0x3a0/0x420 [ 315.999919][T13504] __x64_sys_sendmsg+0x1bd/0x2a0 [ 315.999945][T13504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.999976][T13504] ? __pfx_ksys_write+0x10/0x10 [ 316.000008][T13504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.000026][T13504] do_syscall_64+0x15f/0xf80 [ 316.000046][T13504] ? trace_irq_disable+0x3b/0x140 [ 316.000071][T13504] ? clear_bhb_loop+0x40/0x90 [ 316.000092][T13504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.000109][T13504] RIP: 0033:0x7f432759cdd9 [ 316.000126][T13504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.000141][T13504] RSP: 002b:00007f432847c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.000160][T13504] RAX: ffffffffffffffda RBX: 00007f4327815fa0 RCX: 00007f432759cdd9 [ 316.000173][T13504] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 316.000184][T13504] RBP: 00007f432847c090 R08: 0000000000000000 R09: 0000000000000000 [ 316.000195][T13504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.000205][T13504] R13: 00007f4327816038 R14: 00007f4327815fa0 R15: 00007ffe09f43f78 [ 316.000234][T13504] [ 316.370316][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.378865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.417652][T13513] netlink: 'syz.3.2110': attribute type 178 has an invalid length. [ 316.700210][T13522] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 316.994328][T13528] syzkaller0: entered promiscuous mode [ 317.009557][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.023016][T13528] syzkaller0: entered allmulticast mode [ 317.063870][T13530] netlink: 'syz.1.2117': attribute type 1 has an invalid length. [ 317.343143][T13534] syzkaller0: entered promiscuous mode [ 317.357068][T13534] syzkaller0: entered allmulticast mode [ 317.359016][T13539] netlink: 'syz.3.2119': attribute type 3 has an invalid length. [ 317.377034][T13539] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 317.655934][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.750463][T13553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2125'. [ 319.728018][T13562] xt_limit: Overflow, try lower: 268435456/134217728 [ 319.907862][ T29] audit: type=1804 audit(1777822893.687:11): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2130" name="/newroot/440/cgroup.controllers" dev="tmpfs" ino=2257 res=1 errno=0 [ 319.940413][ T29] audit: type=1800 audit(1777822893.687:12): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2130" name="cgroup.controllers" dev="tmpfs" ino=2257 res=0 errno=0 [ 320.203020][T13582] lo speed is unknown, defaulting to 1000 [ 320.209820][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.218235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.227514][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.699026][T13596] syzkaller0: entered promiscuous mode [ 320.714172][T13596] syzkaller0: entered allmulticast mode [ 320.726404][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2139'. [ 322.129427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.139323][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.147859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.437340][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.872245][T13637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.880830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.977037][T13647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.991956][T13647] FAULT_INJECTION: forcing a failure. [ 323.991956][T13647] name failslab, interval 1, probability 0, space 0, times 0 [ 324.025563][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2152'. [ 324.035834][T13647] CPU: 0 UID: 0 PID: 13647 Comm: syz.4.2147 Not tainted syzkaller #0 PREEMPT(full) [ 324.035859][T13647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.035869][T13647] Call Trace: [ 324.035877][T13647] [ 324.035884][T13647] dump_stack_lvl+0xe8/0x150 [ 324.035909][T13647] should_fail_ex+0x412/0x560 [ 324.035937][T13647] should_failslab+0xa8/0x100 [ 324.035966][T13647] __kmalloc_cache_noprof+0x88/0x660 [ 324.035996][T13647] ? sctp_datamsg_from_user+0x88/0xef0 [ 324.036024][T13647] sctp_datamsg_from_user+0x88/0xef0 [ 324.036045][T13647] ? __sk_mem_raise_allocated+0x290/0x1290 [ 324.036072][T13647] ? __genradix_ptr+0x1e1/0x220 [ 324.036104][T13647] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 324.036135][T13647] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 324.036158][T13647] ? __asan_memcpy+0x40/0x70 [ 324.036187][T13647] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 324.036227][T13647] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 324.036253][T13647] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 324.036280][T13647] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 324.036305][T13647] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 324.036327][T13647] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 324.036353][T13647] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 324.036377][T13647] ? security_sctp_bind_connect+0x7e/0x2c0 [ 324.036400][T13647] sctp_sendmsg+0x1b3d/0x2c10 [ 324.036449][T13647] ? __pfx_sctp_sendmsg+0x10/0x10 [ 324.036477][T13647] ? aa_sk_perm+0x6d5/0x900 [ 324.036508][T13647] ? __pfx_aa_sk_perm+0x10/0x10 [ 324.036530][T13647] ? sock_rps_record_flow+0x19/0x350 [ 324.036558][T13647] ? inet_sendmsg+0x2f4/0x370 [ 324.036580][T13647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.036606][T13647] ____sys_sendmsg+0x80a/0x9f0 [ 324.036637][T13647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.036676][T13647] ? import_iovec+0x73/0xa0 [ 324.036704][T13647] ___sys_sendmsg+0x2a5/0x360 [ 324.036725][T13647] ? __lock_acquire+0x6b5/0x2cf0 [ 324.036749][T13647] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.036778][T13647] ? kstrtouint+0x6e/0xe0 [ 324.036824][T13647] ? __fget_files+0x2a/0x420 [ 324.036844][T13647] ? __fget_files+0x3a0/0x420 [ 324.036875][T13647] __sys_sendmmsg+0x27c/0x4e0 [ 324.036903][T13647] ? __pfx___sys_sendmmsg+0x10/0x10 [ 324.036924][T13647] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 324.036972][T13647] ? ksys_write+0x242/0x270 [ 324.036999][T13647] ? __pfx_ksys_write+0x10/0x10 [ 324.037030][T13647] __x64_sys_sendmmsg+0xa0/0xc0 [ 324.037053][T13647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.037072][T13647] do_syscall_64+0x15f/0xf80 [ 324.037092][T13647] ? trace_irq_disable+0x3b/0x140 [ 324.037117][T13647] ? clear_bhb_loop+0x40/0x90 [ 324.037139][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.037157][T13647] RIP: 0033:0x7fef9d19cdd9 [ 324.037174][T13647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.037190][T13647] RSP: 002b:00007fef9e09c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.037209][T13647] RAX: ffffffffffffffda RBX: 00007fef9d416090 RCX: 00007fef9d19cdd9 [ 324.037222][T13647] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006 [ 324.037233][T13647] RBP: 00007fef9e09c090 R08: 0000000000000000 R09: 0000000000000000 [ 324.037244][T13647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 324.037255][T13647] R13: 00007fef9d416128 R14: 00007fef9d416090 R15: 00007ffc1a18efd8 [ 324.037285][T13647] [ 324.047597][T13648] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 324.190860][T13657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.197548][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2152'. [ 324.203308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.213714][T13648] pim6reg0: linktype set to 6 [ 324.458733][T13650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.490093][T13651] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 324.536847][T13655] bond6 (unregistering): Released all slaves [ 324.655765][T13664] netlink: 'syz.2.2155': attribute type 6 has an invalid length. [ 324.672729][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 324.707909][T13668] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 324.719458][T13668] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2156'. [ 324.900473][T13675] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2157'. [ 325.035299][T13679] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 325.326285][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.921253][T13699] lo speed is unknown, defaulting to 1000 [ 325.967222][ T133] net_ratelimit: 5 callbacks suppressed [ 325.967240][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.981379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.995876][T13708] FAULT_INJECTION: forcing a failure. [ 325.995876][T13708] name failslab, interval 1, probability 0, space 0, times 0 [ 326.045717][T13708] CPU: 0 UID: 0 PID: 13708 Comm: syz.2.2163 Not tainted syzkaller #0 PREEMPT(full) [ 326.045742][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.045751][T13708] Call Trace: [ 326.045759][T13708] [ 326.045766][T13708] dump_stack_lvl+0xe8/0x150 [ 326.045791][T13708] should_fail_ex+0x412/0x560 [ 326.045816][T13708] should_failslab+0xa8/0x100 [ 326.045842][T13708] __kmalloc_cache_noprof+0x88/0x660 [ 326.045869][T13708] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 326.045890][T13708] ? sctp_add_bind_addr+0x8c/0x370 [ 326.045917][T13708] sctp_add_bind_addr+0x8c/0x370 [ 326.045943][T13708] sctp_copy_local_addr_list+0x314/0x4f0 [ 326.045967][T13708] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 326.045988][T13708] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 326.046010][T13708] ? sctp_v6_is_any+0x64/0x80 [ 326.046032][T13708] ? sctp_copy_one_addr+0x93/0x360 [ 326.046057][T13708] sctp_bind_addr_copy+0xb3/0x3c0 [ 326.046079][T13708] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 326.046102][T13708] sctp_connect_new_asoc+0x2ff/0x6b0 [ 326.046132][T13708] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 326.046164][T13708] ? __local_bh_enable_ip+0xd0/0x130 [ 326.046180][T13708] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 326.046203][T13708] ? security_sctp_bind_connect+0x7e/0x2c0 [ 326.046225][T13708] sctp_sendmsg+0x1528/0x2c10 [ 326.046264][T13708] ? __pfx_sctp_sendmsg+0x10/0x10 [ 326.046293][T13708] ? aa_sk_perm+0x6d5/0x900 [ 326.046322][T13708] ? __pfx_aa_sk_perm+0x10/0x10 [ 326.046346][T13708] ? sock_rps_record_flow+0x19/0x350 [ 326.046373][T13708] ? inet_sendmsg+0x2f4/0x370 [ 326.046401][T13708] ____sys_sendmsg+0x80a/0x9f0 [ 326.046435][T13708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.046466][T13708] ? import_iovec+0x73/0xa0 [ 326.046502][T13708] ___sys_sendmsg+0x2a5/0x360 [ 326.046523][T13708] ? __lock_acquire+0x6b5/0x2cf0 [ 326.046547][T13708] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.046576][T13708] ? kstrtouint+0x6e/0xe0 [ 326.046624][T13708] ? __fget_files+0x2a/0x420 [ 326.046642][T13708] ? __fget_files+0x3a0/0x420 [ 326.046672][T13708] __sys_sendmmsg+0x27c/0x4e0 [ 326.046699][T13708] ? __pfx___sys_sendmmsg+0x10/0x10 [ 326.046718][T13708] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 326.046762][T13708] ? ksys_write+0x242/0x270 [ 326.046788][T13708] ? __pfx_ksys_write+0x10/0x10 [ 326.046818][T13708] __x64_sys_sendmmsg+0xa0/0xc0 [ 326.046839][T13708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.046856][T13708] do_syscall_64+0x15f/0xf80 [ 326.046874][T13708] ? trace_irq_disable+0x3b/0x140 [ 326.046898][T13708] ? clear_bhb_loop+0x40/0x90 [ 326.046918][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.046935][T13708] RIP: 0033:0x7f906259cdd9 [ 326.046951][T13708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.046967][T13708] RSP: 002b:00007f9063381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 326.046986][T13708] RAX: ffffffffffffffda RBX: 00007f9062816090 RCX: 00007f906259cdd9 [ 326.046998][T13708] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000006 [ 326.047009][T13708] RBP: 00007f9063381090 R08: 0000000000000000 R09: 0000000000000000 [ 326.047019][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.047030][T13708] R13: 00007f9062816128 R14: 00007f9062816090 R15: 00007ffec1e995e8 [ 326.047061][T13708] [ 326.439608][T13713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2160'. [ 327.017058][T13738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2173'. [ 327.305553][T13734] syzkaller0: entered promiscuous mode [ 327.313734][T13734] syzkaller0: entered allmulticast mode [ 327.453475][T13755] netlink: 'syz.3.2177': attribute type 2 has an invalid length. [ 327.464801][T13755] netlink: 'syz.3.2177': attribute type 2 has an invalid length. [ 327.663404][T13762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 327.887183][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.895670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.139841][T13764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.191949][T13765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.200748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.274046][T13769] netlink: 'syz.4.2180': attribute type 1 has an invalid length. [ 328.526236][ T348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.708298][T13769] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 329.833930][T13780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2182'. [ 329.982625][T13784] bond8 (unregistering): Released all slaves [ 330.009864][T13788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2182'. [ 330.047656][T13788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2182'. [ 330.115593][T13784] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2182'. [ 330.140646][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'. [ 330.174696][T13797] netlink: 'syz.1.2187': attribute type 3 has an invalid length. [ 330.298827][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 330.319558][T13805] openvswitch: netlink: Invalid VLAN frame [ 330.320507][T13808] FAULT_INJECTION: forcing a failure. [ 330.320507][T13808] name failslab, interval 1, probability 0, space 0, times 0 [ 330.369981][T13808] CPU: 1 UID: 0 PID: 13808 Comm: syz.0.2190 Not tainted syzkaller #0 PREEMPT(full) [ 330.370008][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.370018][T13808] Call Trace: [ 330.370026][T13808] [ 330.370034][T13808] dump_stack_lvl+0xe8/0x150 [ 330.370059][T13808] should_fail_ex+0x412/0x560 [ 330.370087][T13808] should_failslab+0xa8/0x100 [ 330.370123][T13808] __kmalloc_cache_noprof+0x88/0x660 [ 330.370149][T13808] ? nfnetlink_rcv+0xfdf/0x27b0 [ 330.370175][T13808] nfnetlink_rcv+0xfdf/0x27b0 [ 330.370229][T13808] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 330.370267][T13808] ? ref_tracker_free+0x693/0x840 [ 330.370319][T13808] ? __netlink_deliver_tap+0x807/0x850 [ 330.370350][T13808] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.370371][T13808] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.370399][T13808] netlink_unicast+0x75c/0x8e0 [ 330.370430][T13808] netlink_sendmsg+0x813/0xb40 [ 330.370461][T13808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.370487][T13808] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.370511][T13808] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.370538][T13808] ____sys_sendmsg+0x972/0x9f0 [ 330.370561][T13808] ? __might_fault+0xaf/0x130 [ 330.370589][T13808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.370622][T13808] ? import_iovec+0x73/0xa0 [ 330.370650][T13808] ___sys_sendmsg+0x2a5/0x360 [ 330.370671][T13808] ? __lock_acquire+0x6b5/0x2cf0 [ 330.370695][T13808] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.370754][T13808] ? __fget_files+0x2a/0x420 [ 330.370774][T13808] ? __fget_files+0x3a0/0x420 [ 330.370805][T13808] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.370831][T13808] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.370864][T13808] ? __pfx_ksys_write+0x10/0x10 [ 330.370895][T13808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.370915][T13808] do_syscall_64+0x15f/0xf80 [ 330.370935][T13808] ? trace_irq_disable+0x3b/0x140 [ 330.370959][T13808] ? clear_bhb_loop+0x40/0x90 [ 330.370979][T13808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.370996][T13808] RIP: 0033:0x7f636279cdd9 [ 330.371014][T13808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.371028][T13808] RSP: 002b:00007f636363c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.371051][T13808] RAX: ffffffffffffffda RBX: 00007f6362a15fa0 RCX: 00007f636279cdd9 [ 330.371063][T13808] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 330.371073][T13808] RBP: 00007f636363c090 R08: 0000000000000000 R09: 0000000000000000 [ 330.371084][T13808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.371102][T13808] R13: 00007f6362a16038 R14: 00007f6362a15fa0 R15: 00007ffddbd29788 [ 330.371130][T13808] [ 331.087602][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.577683][T13856] FAULT_INJECTION: forcing a failure. [ 331.577683][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 331.659353][T13856] CPU: 1 UID: 0 PID: 13856 Comm: syz.2.2204 Not tainted syzkaller #0 PREEMPT(full) [ 331.659379][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.659390][T13856] Call Trace: [ 331.659397][T13856] [ 331.659406][T13856] dump_stack_lvl+0xe8/0x150 [ 331.659433][T13856] should_fail_ex+0x412/0x560 [ 331.659461][T13856] should_failslab+0xa8/0x100 [ 331.659489][T13856] __kmalloc_noprof+0xe8/0x760 [ 331.659514][T13856] ? sctp_bind_addrs_to_raw+0x10a/0x380 [ 331.659543][T13856] sctp_bind_addrs_to_raw+0x10a/0x380 [ 331.659570][T13856] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 331.659596][T13856] ? kasan_save_track+0x4f/0x80 [ 331.659616][T13856] ? kasan_save_track+0x3e/0x80 [ 331.659636][T13856] ? __kasan_slab_alloc+0x6c/0x80 [ 331.659665][T13856] sctp_make_init+0x174/0xe00 [ 331.659686][T13856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.659716][T13856] ? __pfx_sctp_make_init+0x10/0x10 [ 331.659759][T13856] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 331.659782][T13856] sctp_do_sm+0x238/0x5cf0 [ 331.659800][T13856] ? __pfx_sctp_pname+0x10/0x10 [ 331.659818][T13856] ? kmem_cache_alloc_noprof+0x307/0x650 [ 331.659849][T13856] ? radix_tree_node_alloc+0xbc/0x3a0 [ 331.659869][T13856] ? __pfx_sctp_do_sm+0x10/0x10 [ 331.659890][T13856] ? idr_get_free+0x8dc/0xa70 [ 331.659948][T13856] ? sctp_assoc_set_id+0x1b3/0x350 [ 331.659968][T13856] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 331.660000][T13856] __sctp_connect+0x911/0xdc0 [ 331.660038][T13856] ? __pfx___sctp_connect+0x10/0x10 [ 331.660062][T13856] ? security_sctp_bind_connect+0x7e/0x2c0 [ 331.660084][T13856] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 331.660107][T13856] sctp_getsockopt_connectx3+0x227/0x360 [ 331.660136][T13856] ? lock_sock_nested+0x6a/0x100 [ 331.660155][T13856] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 331.660182][T13856] ? sctp_getsockopt+0x12f/0xb90 [ 331.660206][T13856] ? __local_bh_enable_ip+0xd0/0x130 [ 331.660230][T13856] sctp_getsockopt+0x984/0xb90 [ 331.660255][T13856] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 331.660274][T13856] do_sock_getsockopt+0x51d/0x7e0 [ 331.660302][T13856] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 331.660341][T13856] ? __fget_files+0x3a0/0x420 [ 331.660362][T13856] ? __fget_files+0x2a/0x420 [ 331.660394][T13856] __x64_sys_getsockopt+0x1a4/0x240 [ 331.660422][T13856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.660442][T13856] do_syscall_64+0x15f/0xf80 [ 331.660462][T13856] ? trace_irq_disable+0x3b/0x140 [ 331.660487][T13856] ? clear_bhb_loop+0x40/0x90 [ 331.660509][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.660526][T13856] RIP: 0033:0x7f906259cdd9 [ 331.660543][T13856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.660559][T13856] RSP: 002b:00007f90633a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 331.660578][T13856] RAX: ffffffffffffffda RBX: 00007f9062815fa0 RCX: 00007f906259cdd9 [ 331.660591][T13856] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 331.660601][T13856] RBP: 00007f90633a2090 R08: 0000200000000140 R09: 0000000000000000 [ 331.660613][T13856] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 331.660625][T13856] R13: 00007f9062816038 R14: 00007f9062815fa0 R15: 00007ffec1e995e8 [ 331.660655][T13856] [ 331.991811][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.000224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.024922][T13865] netlink: 'syz.1.2206': attribute type 3 has an invalid length. [ 332.052832][T13865] netlink: 'syz.1.2206': attribute type 3 has an invalid length. [ 332.321575][T13879] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2211'. [ 332.446997][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 332.543133][T13890] netlink: 'syz.2.2213': attribute type 1 has an invalid length. [ 332.848769][T13890] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.859055][T13891] netlink: 'syz.4.2212': attribute type 1 has an invalid length. [ 333.311314][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2226'. [ 333.343104][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2226'. [ 333.470337][T13939] syzkaller0: entered promiscuous mode [ 333.493588][T13939] syzkaller0: entered allmulticast mode [ 333.586473][T13939] tipc: Enabled bearer , priority 0 [ 333.610303][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.647080][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.647589][ T1016] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.655600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.675906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.684450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.708151][T13939] tipc: Resetting bearer [ 333.768594][T13939] tipc: Disabling bearer [ 333.849242][T13923] FAULT_INJECTION: forcing a failure. [ 333.849242][T13923] name failslab, interval 1, probability 0, space 0, times 0 [ 333.915263][T13923] CPU: 1 UID: 0 PID: 13923 Comm: syz.3.2223 Not tainted syzkaller #0 PREEMPT(full) [ 333.915289][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.915299][T13923] Call Trace: [ 333.915307][T13923] [ 333.915314][T13923] dump_stack_lvl+0xe8/0x150 [ 333.915340][T13923] should_fail_ex+0x412/0x560 [ 333.915368][T13923] should_failslab+0xa8/0x100 [ 333.915398][T13923] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 333.915421][T13923] ? __alloc_skb+0x1d0/0x7d0 [ 333.915439][T13923] ? __local_bh_enable_ip+0xd0/0x130 [ 333.915462][T13923] __alloc_skb+0x1d0/0x7d0 [ 333.915481][T13923] ? kasan_save_track+0x4f/0x80 [ 333.915507][T13923] _sctp_make_chunk+0x59/0x290 [ 333.915534][T13923] sctp_make_init+0x5e3/0xe00 [ 333.915553][T13923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.915584][T13923] ? __pfx_sctp_make_init+0x10/0x10 [ 333.915635][T13923] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 333.915658][T13923] sctp_do_sm+0x238/0x5cf0 [ 333.915676][T13923] ? __pfx_sctp_pname+0x10/0x10 [ 333.915694][T13923] ? kmem_cache_alloc_noprof+0x307/0x650 [ 333.915723][T13923] ? radix_tree_node_alloc+0xbc/0x3a0 [ 333.915745][T13923] ? __pfx_sctp_do_sm+0x10/0x10 [ 333.915764][T13923] ? idr_get_free+0x8dc/0xa70 [ 333.915823][T13923] ? sctp_assoc_set_id+0x1b3/0x350 [ 333.915841][T13923] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 333.915871][T13923] __sctp_connect+0x911/0xdc0 [ 333.915907][T13923] ? __pfx___sctp_connect+0x10/0x10 [ 333.915929][T13923] ? security_sctp_bind_connect+0x7e/0x2c0 [ 333.915949][T13923] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 333.915970][T13923] sctp_getsockopt_connectx3+0x227/0x360 [ 333.915990][T13923] ? lock_sock_nested+0x6a/0x100 [ 333.916009][T13923] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 333.916036][T13923] ? sctp_getsockopt+0x12f/0xb90 [ 333.916063][T13923] ? __local_bh_enable_ip+0xd0/0x130 [ 333.916086][T13923] sctp_getsockopt+0x984/0xb90 [ 333.916111][T13923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 333.916130][T13923] do_sock_getsockopt+0x51d/0x7e0 [ 333.916158][T13923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 333.916198][T13923] ? __fget_files+0x3a0/0x420 [ 333.916218][T13923] ? __fget_files+0x2a/0x420 [ 333.916246][T13923] __x64_sys_getsockopt+0x1a4/0x240 [ 333.916275][T13923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.916295][T13923] do_syscall_64+0x15f/0xf80 [ 333.916315][T13923] ? trace_irq_disable+0x3b/0x140 [ 333.916340][T13923] ? clear_bhb_loop+0x40/0x90 [ 333.916366][T13923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.916384][T13923] RIP: 0033:0x7f432759cdd9 [ 333.916401][T13923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.916416][T13923] RSP: 002b:00007f432847c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 333.916435][T13923] RAX: ffffffffffffffda RBX: 00007f4327815fa0 RCX: 00007f432759cdd9 [ 333.916448][T13923] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 333.916459][T13923] RBP: 00007f432847c090 R08: 0000200000000140 R09: 0000000000000000 [ 333.916470][T13923] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 333.916481][T13923] R13: 00007f4327816038 R14: 00007f4327815fa0 R15: 00007ffe09f43f78 [ 333.916513][T13923] [ 334.400212][T13956] bridge_slave_0 (unregistering): left allmulticast mode [ 334.409967][T13956] bridge_slave_0 (unregistering): left promiscuous mode [ 334.443696][T13956] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.512579][T13972] openvswitch: netlink: IP tunnel dst address not specified [ 335.327664][T14000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.347908][T14006] __nla_validate_parse: 1 callbacks suppressed [ 335.347926][T14006] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2241'. [ 335.372186][T14000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.448463][T14009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2242'. [ 335.563999][T14009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'. [ 335.852018][T14029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2244'. [ 335.923658][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2247'. [ 335.935932][T14031] syzkaller0: entered promiscuous mode [ 335.944701][T14031] syzkaller0: entered allmulticast mode [ 336.224419][T14043] pimreg: entered allmulticast mode [ 336.242186][T14043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2249'. [ 336.397145][T14052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2250'. [ 336.469802][T14053] netlink: 'syz.1.2251': attribute type 3 has an invalid length. [ 336.485380][T14046] xfrm0: entered allmulticast mode [ 336.532360][T14046] xt_bpf: check failed: parse error [ 336.565382][T14046] netlink: 'syz.0.2250': attribute type 3 has an invalid length. [ 336.845900][ T7797] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.004793][T14076] bond5 (unregistering): Released all slaves [ 337.211379][T14095] netlink: 'syz.1.2261': attribute type 13 has an invalid length. [ 337.254410][T14095] gretap0: refused to change device tx_queue_len [ 337.277212][T14095] net_ratelimit: 72 callbacks suppressed [ 337.277228][T14095] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 337.481055][T14115] netlink: 'syz.0.2265': attribute type 1 has an invalid length. [ 337.491994][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.501212][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.541650][T14119] netlink: 'syz.1.2268': attribute type 13 has an invalid length. [ 337.567689][T14119] netlink: 'syz.1.2268': attribute type 17 has an invalid length. [ 337.699394][T14130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.709638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.722665][T14119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.732787][T14119] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.765579][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.802957][T14119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.814139][T14119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.840380][T14119] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 337.889176][T14126] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.917675][ T348] bridge0: port 3(team0) entered blocking state [ 337.924099][ T348] bridge0: port 3(team0) entered forwarding state [ 338.027814][ T9] syz1: Port: 1 Link ACTIVE [ 338.146238][T14153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.206372][T14145] syzkaller1: entered allmulticast mode [ 338.240052][T14153] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.250592][T14153] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.276227][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 338.288767][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 338.328222][T14157] syzkaller0: entered promiscuous mode [ 338.333819][T14157] syzkaller0: entered allmulticast mode [ 338.396555][T14153] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.418552][T14153] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.586619][T14153] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.616931][T14153] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.907993][T14153] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.925524][T14153] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.055252][T14187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.083116][T14186] sctp: [Deprecated]: syz.4.2283 (pid 14186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.083116][T14186] Use struct sctp_sack_info instead [ 339.197461][ T7797] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.220660][T14199] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2285'. [ 339.220676][ T7797] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.260265][T14199] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 339.278163][T14195] lo speed is unknown, defaulting to 1000 [ 339.350939][ T7797] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.380098][ T7797] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.405571][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.405588][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.459281][ T43] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.478311][ T43] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.526705][ T43] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.550437][ T43] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.974679][T14209] lo speed is unknown, defaulting to 1000 [ 340.103371][T14229] netlink: 'syz.3.2293': attribute type 1 has an invalid length. [ 340.532055][T14243] netlink: 'syz.3.2296': attribute type 3 has an invalid length. [ 340.540138][T14243] __nla_validate_parse: 1 callbacks suppressed [ 340.540156][T14243] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2296'. [ 340.616512][T14247] bridge2: entered promiscuous mode [ 340.622101][T14247] bridge2: entered allmulticast mode [ 340.632421][T14247] team0: Port device bridge2 added [ 340.639003][T14248] bridge0: port 1(team0) entered blocking state [ 340.645974][T14248] bridge0: port 1(team0) entered disabled state [ 340.652547][T14248] team0: entered allmulticast mode [ 340.662802][T14248] team0: entered promiscuous mode [ 341.262753][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2300'. [ 341.312341][T14262] veth1_to_bond: entered allmulticast mode [ 341.410460][T14264] veth1_to_bond (unregistering): left allmulticast mode [ 341.457435][T14264] bond0: (slave bond_slave_1): Releasing backup interface [ 341.506272][T14273] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2301'. [ 341.569491][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2303'. [ 341.880804][T14283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2305'. [ 341.904310][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 342.453322][T14303] lo speed is unknown, defaulting to 1000 [ 342.525548][T14301] bridge_slave_0 (unregistering): left allmulticast mode [ 342.570618][T14301] bridge_slave_0 (unregistering): left promiscuous mode [ 342.606254][ T348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.618365][T14301] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.101689][T14320] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 343.245545][ T348] net_ratelimit: 523 callbacks suppressed [ 343.245563][ T348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.262019][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.270379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.289956][T14337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.307345][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2322'. [ 343.339830][T14337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.363361][T14337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.385116][T14337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.393705][T14337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.413876][T14337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.442509][T14337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.947523][T14363] netlink: 996 bytes leftover after parsing attributes in process `syz.0.2327'. [ 344.963878][T14399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2339'. [ 345.134841][T14407] lo speed is unknown, defaulting to 1000 [ 345.137752][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 345.166935][ T348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.513324][T14415] netlink: 'syz.1.2343': attribute type 3 has an invalid length. [ 345.522964][T14415] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 345.923809][T14419] lo speed is unknown, defaulting to 1000 [ 346.281670][ T5628] IPVS: starting estimator thread 0... [ 346.425033][T14439] IPVS: using max 28 ests per chain, 67200 per kthread [ 346.456597][T14444] __nla_validate_parse: 4 callbacks suppressed [ 346.456616][T14444] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2350'. [ 346.491957][T14429] lo speed is unknown, defaulting to 1000 [ 346.932747][T14449] bond9: entered allmulticast mode [ 347.377294][T14472] netlink: 'syz.4.2358': attribute type 2 has an invalid length. [ 347.395168][T14472] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2358'. [ 347.607844][T14480] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2360'. [ 348.367267][ T7797] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.586897][T14521] net_ratelimit: 1023 callbacks suppressed [ 348.586916][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.603058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.614780][T14525] "syz.4.2372" (14525) uses obsolete ecb(arc4) skcipher [ 348.628049][T14520] lo speed is unknown, defaulting to 1000 [ 348.649381][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.661874][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.664369][T14524] SET target dimension over the limit! [ 348.696074][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.707034][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.731508][ T5628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.741628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.776637][T14521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.006922][ T7797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.028963][T14538] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2375'. [ 349.253486][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'. [ 349.271626][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'. [ 349.409622][T14549] pimreg0: tun_chr_ioctl cmd 1074025681 [ 350.031348][T14574] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2386'. [ 350.081994][T14573] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2386'. [ 350.277612][T14587] netlink: 'syz.2.2389': attribute type 9 has an invalid length. [ 350.293336][T14587] netlink: 'syz.2.2389': attribute type 6 has an invalid length. [ 350.436586][T14591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2391'. [ 350.442176][T14587] bond10: (slave bond_slave_1): Device is not bonding slave [ 350.446985][T14591] netlink: 'syz.4.2391': attribute type 7 has an invalid length. [ 350.461913][T14591] netlink: 'syz.4.2391': attribute type 8 has an invalid length. [ 350.470684][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 350.477710][T14587] bond10: option active_slave: invalid value (bond_slave_1) [ 350.512883][T14587] bond10 (unregistering): Released all slaves [ 350.563131][T14581] syzkaller0: entered promiscuous mode [ 350.575942][T14581] syzkaller0: entered allmulticast mode [ 350.594100][T14591] erspan0: entered promiscuous mode [ 350.607984][T14591] gretap0: entered promiscuous mode [ 350.614369][T14591] erspan0: left promiscuous mode [ 350.620839][T14591] gretap0: left promiscuous mode [ 350.701232][T14597] lo speed is unknown, defaulting to 1000 [ 350.926538][ T76] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.938784][T14603] syzkaller0: entered promiscuous mode [ 350.961999][T14603] syzkaller0: entered allmulticast mode [ 353.167876][T14638] netlink: 'syz.4.2402': attribute type 1 has an invalid length. [ 353.176710][T14638] netlink: 'syz.4.2402': attribute type 2 has an invalid length. [ 353.377302][T14626] ipvlan2: entered promiscuous mode [ 353.509717][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'. [ 353.524536][T14629] lo speed is unknown, defaulting to 1000 [ 353.612502][T14660] net_ratelimit: 6 callbacks suppressed [ 353.612520][T14660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.628482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.642764][T14660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.651771][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.653681][T14658] nbd1: detected capacity change from 0 to 128 [ 353.684441][T10422] block nbd1: Dead connection, failed to find a fallback [ 353.700382][T10422] block nbd1: shutting down sockets [ 353.712290][T14667] lo: Caught tx_queue_len zero misconfig [ 353.723355][T14661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.723758][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.800015][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 353.811354][T14661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.823692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.824563][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.869827][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 353.905133][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.935295][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 353.951374][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.974595][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 353.990809][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.010492][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 354.020752][T14679] syzkaller1: entered promiscuous mode [ 354.036113][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.068438][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 354.095291][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.107096][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 354.115484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.125942][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.126407][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.146672][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 354.154787][T10422] ldm_validate_partition_table(): Disk read failed. [ 354.162490][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.172369][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 354.181091][T10422] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 354.184019][T14679] syzkaller1: left promiscuous mode [ 354.190800][T10422] Buffer I/O error on dev nbd1, logical block 0, async page read [ 354.191168][T10422] Dev nbd1: unable to read RDB block 0 [ 354.216905][T10422] nbd1: unable to read partition table [ 354.251097][T10422] ldm_validate_partition_table(): Disk read failed. [ 354.268732][T10422] Dev nbd1: unable to read RDB block 0 [ 354.283953][T10422] nbd1: unable to read partition table [ 354.356923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.388527][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2414'. [ 354.449610][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2414'. [ 354.771108][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.835746][T14704] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2417'. [ 355.074076][T14708] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 355.179892][T14708] bond6: entered promiscuous mode [ 355.201397][T14708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.254269][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 355.327551][T14712] veth13: entered promiscuous mode [ 355.340425][T14712] veth13: entered allmulticast mode [ 355.376863][T14712] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 355.398067][T14728] xt_TCPMSS: Only works on TCP SYN packets [ 355.476043][ T5628] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 355.668416][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2426'. [ 355.686963][T14732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.689387][T14734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2426'. [ 355.722699][T14736] netlink: 'syz.0.2427': attribute type 1 has an invalid length. [ 355.750669][T14734] batadv_slave_0: entered promiscuous mode [ 355.827498][T14736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2427'. [ 355.851136][T14739] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.875416][ T5631] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 355.894093][T14739] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 355.922680][T14746] [ 355.925047][T14746] ====================================================== [ 355.932068][T14746] WARNING: possible circular locking dependency detected [ 355.939109][T14746] syzkaller #0 Not tainted [ 355.943526][T14746] ------------------------------------------------------ [ 355.950540][T14746] syz.2.2428/14746 is trying to acquire lock: [ 355.956936][T14746] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 355.966977][T14746] [ 355.966977][T14746] but task is already holding lock: [ 355.974604][T14746] ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 355.985255][T14746] [ 355.985255][T14746] which lock already depends on the new lock. [ 355.985255][T14746] [ 355.995658][T14746] [ 355.995658][T14746] the existing dependency chain (in reverse order) is: [ 356.004687][T14746] [ 356.004687][T14746] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 356.012505][T14746] __mutex_lock+0x1a3/0x1550 [ 356.017725][T14746] kobject_uevent_net_broadcast+0x27e/0x560 [ 356.024146][T14746] kobject_uevent_env+0x55c/0x9e0 [ 356.029691][T14746] device_add+0x557/0xbb0 [ 356.034550][T14746] device_create+0x269/0x300 [ 356.039655][T14746] msr_device_create+0x33/0x50 [ 356.045026][T14746] cpuhp_invoke_callback+0x445/0x860 [ 356.050833][T14746] cpuhp_thread_fun+0x36b/0x780 [ 356.056279][T14746] smpboot_thread_fn+0x541/0xa50 [ 356.061732][T14746] kthread+0x388/0x470 [ 356.066331][T14746] ret_from_fork+0x514/0xb70 [ 356.071433][T14746] ret_from_fork_asm+0x1a/0x30 [ 356.076710][T14746] [ 356.076710][T14746] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 356.084261][T14746] cpuhp_thread_fun+0x127/0x780 [ 356.089628][T14746] smpboot_thread_fn+0x541/0xa50 [ 356.095083][T14746] kthread+0x388/0x470 [ 356.099667][T14746] ret_from_fork+0x514/0xb70 [ 356.104766][T14746] ret_from_fork_asm+0x1a/0x30 [ 356.110128][T14746] [ 356.110128][T14746] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 356.118372][T14746] cpus_read_lock+0x42/0x160 [ 356.123565][T14746] static_key_slow_inc+0x12/0x30 [ 356.129014][T14746] udp_tunnel_encap_enable+0x86/0xb0 [ 356.135329][T14746] udp_lib_setsockopt+0x2da/0x6b0 [ 356.140859][T14746] udpv6_setsockopt+0x67/0xb0 [ 356.146043][T14746] do_sock_setsockopt+0x17c/0x1b0 [ 356.151756][T14746] __x64_sys_setsockopt+0x13d/0x1b0 [ 356.157645][T14746] do_syscall_64+0x15f/0xf80 [ 356.162832][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.169321][T14746] [ 356.169321][T14746] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 356.177048][T14746] lock_sock_nested+0x41/0x100 [ 356.182498][T14746] inet_shutdown+0x6a/0x390 [ 356.187516][T14746] nbd_mark_nsock_dead+0x2e9/0x560 [ 356.193135][T14746] recv_work+0x1c2e/0x1d40 [ 356.198068][T14746] process_scheduled_works+0xb5d/0x1860 [ 356.204223][T14746] worker_thread+0xa53/0xfc0 [ 356.209444][T14746] kthread+0x388/0x470 [ 356.214044][T14746] ret_from_fork+0x514/0xb70 [ 356.219241][T14746] ret_from_fork_asm+0x1a/0x30 [ 356.224609][T14746] [ 356.224609][T14746] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 356.232255][T14746] __mutex_lock+0x1a3/0x1550 [ 356.237368][T14746] nbd_queue_rq+0x37b/0x1100 [ 356.242472][T14746] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 356.248533][T14746] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 356.255374][T14746] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 356.261980][T14746] blk_mq_run_hw_queue+0x348/0x4f0 [ 356.267635][T14746] blk_mq_dispatch_list+0xd16/0xe10 [ 356.273377][T14746] blk_mq_flush_plug_list+0x48d/0x570 [ 356.279377][T14746] __blk_flush_plug+0x3ed/0x4d0 [ 356.284762][T14746] __submit_bio+0x28d/0x580 [ 356.289787][T14746] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 356.295941][T14746] block_read_full_folio+0x7b7/0x830 [ 356.301738][T14746] filemap_read_folio+0x137/0x3b0 [ 356.307282][T14746] do_read_cache_folio+0x358/0x590 [ 356.312922][T14746] read_part_sector+0xb6/0x2b0 [ 356.318326][T14746] adfspart_check_ICS+0xb1/0x960 [ 356.323800][T14746] bdev_disk_changed+0x817/0x1770 [ 356.329345][T14746] blkdev_get_whole+0x380/0x510 [ 356.334729][T14746] bdev_open+0x31e/0xd30 [ 356.339488][T14746] blkdev_open+0x470/0x610 [ 356.344936][T14746] do_dentry_open+0x785/0x14e0 [ 356.350572][T14746] vfs_open+0x3b/0x340 [ 356.355162][T14746] path_openat+0x2e08/0x3860 [ 356.360374][T14746] do_file_open+0x23e/0x4a0 [ 356.365394][T14746] do_sys_openat2+0x113/0x200 [ 356.370583][T14746] __x64_sys_openat+0x138/0x170 [ 356.375942][T14746] do_syscall_64+0x15f/0xf80 [ 356.381044][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.387448][T14746] [ 356.387448][T14746] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 356.394650][T14746] __mutex_lock+0x1a3/0x1550 [ 356.399752][T14746] nbd_queue_rq+0xc6/0x1100 [ 356.404768][T14746] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 356.410837][T14746] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 356.417684][T14746] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 356.424272][T14746] blk_mq_run_hw_queue+0x348/0x4f0 [ 356.429912][T14746] blk_mq_dispatch_list+0xd16/0xe10 [ 356.435656][T14746] blk_mq_flush_plug_list+0x48d/0x570 [ 356.441567][T14746] __blk_flush_plug+0x3ed/0x4d0 [ 356.446944][T14746] __submit_bio+0x28d/0x580 [ 356.451975][T14746] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 356.458124][T14746] block_read_full_folio+0x7b7/0x830 [ 356.463937][T14746] filemap_read_folio+0x137/0x3b0 [ 356.469482][T14746] do_read_cache_folio+0x358/0x590 [ 356.475112][T14746] read_part_sector+0xb6/0x2b0 [ 356.480394][T14746] adfspart_check_ICS+0xb1/0x960 [ 356.485848][T14746] bdev_disk_changed+0x817/0x1770 [ 356.491398][T14746] blkdev_get_whole+0x380/0x510 [ 356.496765][T14746] bdev_open+0x31e/0xd30 [ 356.501535][T14746] blkdev_open+0x470/0x610 [ 356.506460][T14746] do_dentry_open+0x785/0x14e0 [ 356.511735][T14746] vfs_open+0x3b/0x340 [ 356.516312][T14746] path_openat+0x2e08/0x3860 [ 356.521510][T14746] do_file_open+0x23e/0x4a0 [ 356.526530][T14746] do_sys_openat2+0x113/0x200 [ 356.531718][T14746] __x64_sys_openat+0x138/0x170 [ 356.537165][T14746] do_syscall_64+0x15f/0xf80 [ 356.542269][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.548669][T14746] [ 356.548669][T14746] -> #3 (set->srcu){.+.+}-{0:0}: [ 356.555794][T14746] __synchronize_srcu+0xca/0x300 [ 356.561250][T14746] elevator_switch+0x1e8/0x7a0 [ 356.566529][T14746] elevator_change+0x2cc/0x450 [ 356.571873][T14746] elevator_set_default+0x36c/0x430 [ 356.577591][T14746] blk_register_queue+0x3e9/0x4e0 [ 356.583222][T14746] __add_disk+0x677/0xd50 [ 356.588057][T14746] add_disk_fwnode+0xfb/0x480 [ 356.593243][T14746] nbd_dev_add+0x72c/0xb50 [ 356.598179][T14746] nbd_init+0x168/0x1f0 [ 356.602855][T14746] do_one_initcall+0x250/0x870 [ 356.608131][T14746] do_initcall_level+0x104/0x190 [ 356.613589][T14746] do_initcalls+0x59/0xa0 [ 356.618431][T14746] kernel_init_freeable+0x2a6/0x3e0 [ 356.624142][T14746] kernel_init+0x1d/0x1d0 [ 356.628997][T14746] ret_from_fork+0x514/0xb70 [ 356.634096][T14746] ret_from_fork_asm+0x1a/0x30 [ 356.639371][T14746] [ 356.639371][T14746] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 356.647183][T14746] __mutex_lock+0x1a3/0x1550 [ 356.652285][T14746] elevator_change+0x1b3/0x450 [ 356.657568][T14746] elevator_set_none+0xb5/0x140 [ 356.662934][T14746] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 356.669252][T14746] nbd_start_device+0x17f/0xb10 [ 356.674611][T14746] nbd_genl_connect+0x165b/0x1cf0 [ 356.680142][T14746] genl_family_rcv_msg_doit+0x22a/0x330 [ 356.686207][T14746] genl_rcv_msg+0x61c/0x7a0 [ 356.691229][T14746] netlink_rcv_skb+0x232/0x4b0 [ 356.696504][T14746] genl_rcv+0x28/0x40 [ 356.701003][T14746] netlink_unicast+0x75c/0x8e0 [ 356.706276][T14746] netlink_sendmsg+0x813/0xb40 [ 356.711555][T14746] ____sys_sendmsg+0x972/0x9f0 [ 356.716927][T14746] ___sys_sendmsg+0x2a5/0x360 [ 356.722120][T14746] __x64_sys_sendmsg+0x1bd/0x2a0 [ 356.727568][T14746] do_syscall_64+0x15f/0xf80 [ 356.732683][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.739096][T14746] [ 356.739096][T14746] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 356.747882][T14746] blk_alloc_queue+0x546/0x680 [ 356.753424][T14746] __blk_mq_alloc_disk+0x197/0x390 [ 356.759049][T14746] nbd_dev_add+0x499/0xb50 [ 356.763979][T14746] nbd_init+0x168/0x1f0 [ 356.768652][T14746] do_one_initcall+0x250/0x870 [ 356.773928][T14746] do_initcall_level+0x104/0x190 [ 356.779389][T14746] do_initcalls+0x59/0xa0 [ 356.784252][T14746] kernel_init_freeable+0x2a6/0x3e0 [ 356.789988][T14746] kernel_init+0x1d/0x1d0 [ 356.794851][T14746] ret_from_fork+0x514/0xb70 [ 356.799959][T14746] ret_from_fork_asm+0x1a/0x30 [ 356.805286][T14746] [ 356.805286][T14746] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 356.812585][T14746] __lock_acquire+0x15a5/0x2cf0 [ 356.817948][T14746] lock_acquire+0x106/0x350 [ 356.822963][T14746] fs_reclaim_acquire+0x71/0x100 [ 356.828419][T14746] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 356.834738][T14746] __alloc_skb+0x1d0/0x7d0 [ 356.839661][T14746] alloc_uevent_skb+0x7d/0x230 [ 356.844943][T14746] kobject_uevent_net_broadcast+0x2fa/0x560 [ 356.851460][T14746] kobject_uevent_env+0x55c/0x9e0 [ 356.857098][T14746] rfkill_set_block+0x364/0x4e0 [ 356.862459][T14746] rfkill_fop_open+0x299/0x580 [ 356.867738][T14746] misc_open+0x2d5/0x350 [ 356.872510][T14746] chrdev_open+0x4cd/0x5e0 [ 356.877434][T14746] do_dentry_open+0x785/0x14e0 [ 356.882707][T14746] vfs_open+0x3b/0x340 [ 356.887342][T14746] path_openat+0x2e08/0x3860 [ 356.892532][T14746] do_file_open+0x23e/0x4a0 [ 356.897547][T14746] do_sys_openat2+0x113/0x200 [ 356.902736][T14746] __x64_sys_openat+0x138/0x170 [ 356.908110][T14746] do_syscall_64+0x15f/0xf80 [ 356.913230][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.919633][T14746] [ 356.919633][T14746] other info that might help us debug this: [ 356.919633][T14746] [ 356.929847][T14746] Chain exists of: [ 356.929847][T14746] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 356.929847][T14746] [ 356.942544][T14746] Possible unsafe locking scenario: [ 356.942544][T14746] [ 356.949995][T14746] CPU0 CPU1 [ 356.955356][T14746] ---- ---- [ 356.960707][T14746] lock(uevent_sock_mutex); [ 356.965377][T14746] lock(cpuhp_state-up); [ 356.972216][T14746] lock(uevent_sock_mutex); [ 356.979315][T14746] lock(fs_reclaim); [ 356.983285][T14746] [ 356.983285][T14746] *** DEADLOCK *** [ 356.983285][T14746] [ 356.991414][T14746] 3 locks held by syz.2.2428/14746: [ 356.996596][T14746] #0: ffffffff8f227340 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 357.005053][T14746] #1: ffffffff900dbbe0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12a/0x580 [ 357.015068][T14746] #2: ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 357.026064][T14746] [ 357.026064][T14746] stack backtrace: [ 357.031941][T14746] CPU: 0 UID: 0 PID: 14746 Comm: syz.2.2428 Not tainted syzkaller #0 PREEMPT(full) [ 357.031961][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.031971][T14746] Call Trace: [ 357.031981][T14746] [ 357.031988][T14746] dump_stack_lvl+0xe8/0x150 [ 357.032009][T14746] print_circular_bug+0x2e1/0x300 [ 357.032032][T14746] check_noncircular+0x12e/0x150 [ 357.032055][T14746] __lock_acquire+0x15a5/0x2cf0 [ 357.032072][T14746] ? lockdep_unlock+0x5d/0xd0 [ 357.032086][T14746] ? __lock_acquire+0x146e/0x2cf0 [ 357.032103][T14746] ? __mutex_trylock_common+0x158/0x260 [ 357.032128][T14746] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 357.032148][T14746] lock_acquire+0x106/0x350 [ 357.032164][T14746] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 357.032186][T14746] ? lock_acquire+0x106/0x350 [ 357.032204][T14746] fs_reclaim_acquire+0x71/0x100 [ 357.032227][T14746] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 357.032247][T14746] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 357.032268][T14746] ? __alloc_skb+0x1d0/0x7d0 [ 357.032285][T14746] ? __local_bh_enable_ip+0xd0/0x130 [ 357.032303][T14746] __alloc_skb+0x1d0/0x7d0 [ 357.032322][T14746] alloc_uevent_skb+0x7d/0x230 [ 357.032348][T14746] kobject_uevent_net_broadcast+0x2fa/0x560 [ 357.032373][T14746] kobject_uevent_env+0x55c/0x9e0 [ 357.032399][T14746] rfkill_set_block+0x364/0x4e0 [ 357.032418][T14746] rfkill_fop_open+0x299/0x580 [ 357.032440][T14746] ? __pfx_rfkill_fop_open+0x10/0x10 [ 357.032459][T14746] misc_open+0x2d5/0x350 [ 357.032486][T14746] chrdev_open+0x4cd/0x5e0 [ 357.032502][T14746] ? __pfx_chrdev_open+0x10/0x10 [ 357.032516][T14746] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 357.032541][T14746] ? __pfx_chrdev_open+0x10/0x10 [ 357.032554][T14746] do_dentry_open+0x785/0x14e0 [ 357.032576][T14746] vfs_open+0x3b/0x340 [ 357.032591][T14746] ? path_openat+0x2df0/0x3860 [ 357.032614][T14746] path_openat+0x2e08/0x3860 [ 357.032641][T14746] ? __pfx_stack_trace_save+0x10/0x10 [ 357.032666][T14746] ? stack_depot_save_flags+0x33/0x810 [ 357.032689][T14746] ? __pfx_path_openat+0x10/0x10 [ 357.032709][T14746] ? __x64_sys_openat+0x138/0x170 [ 357.032729][T14746] ? __lock_acquire+0x6b5/0x2cf0 [ 357.032748][T14746] do_file_open+0x23e/0x4a0 [ 357.032772][T14746] ? __pfx_do_file_open+0x10/0x10 [ 357.032800][T14746] ? _raw_spin_unlock+0x28/0x50 [ 357.032815][T14746] ? alloc_fd+0x64b/0x6c0 [ 357.032836][T14746] do_sys_openat2+0x113/0x200 [ 357.032853][T14746] ? __se_sys_futex+0x3a8/0x450 [ 357.032872][T14746] ? __pfx_do_sys_openat2+0x10/0x10 [ 357.032892][T14746] ? rcu_is_watching+0x15/0xb0 [ 357.032912][T14746] __x64_sys_openat+0x138/0x170 [ 357.032931][T14746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.032947][T14746] do_syscall_64+0x15f/0xf80 [ 357.032966][T14746] ? trace_irq_disable+0x3b/0x140 [ 357.032989][T14746] ? clear_bhb_loop+0x40/0x90 [ 357.033006][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.033023][T14746] RIP: 0033:0x7f906259cdd9 [ 357.033038][T14746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.033052][T14746] RSP: 002b:00007f9063381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.033070][T14746] RAX: ffffffffffffffda RBX: 00007f9062816090 RCX: 00007f906259cdd9 [ 357.033082][T14746] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 357.033093][T14746] RBP: 00007f9062632d69 R08: 0000000000000000 R09: 0000000000000000 [ 357.033103][T14746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.033113][T14746] R13: 00007f9062816128 R14: 00007f9062816090 R15: 00007ffec1e995e8 [ 357.033130][T14746] [ 357.399630][T14737] batadv_slave_0: left promiscuous mode [ 357.411362][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.461955][T14736] bond8: (slave bridge9): Enslaving as an active interface with a down link [ 357.474172][T14744] macvlan2: entered promiscuous mode [ 357.485773][T14744] macvlan2: entered allmulticast mode [ 357.492365][T14744] bond8: entered promiscuous mode [ 357.498284][T14744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 357.507494][T14744] bond8: left promiscuous mode [ 357.965242][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 359.246006][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.525803][ T7797] net_ratelimit: 11 callbacks suppressed [ 360.525821][ T7797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.525839][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.547885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.445493][ T7797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.453778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.086468][ T7797] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.086591][ T1016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.105295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.365726][ T348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration