last executing test programs: 14m14.813283461s ago: executing program 1 (id=8049): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r1, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r4, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x2b, 0x5, 0x1d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbdff0ffbd9df253400000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000400000002000000140055007626fa25dc1ca975018d0ec01392e5ed1400fe0011c44161b3daa1bad3cd16b9b1d7da3608001f014c000000"], 0x58}, 0x1, 0x0, 0x0, 0x1050}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x7ff) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) 14m14.132644525s ago: executing program 1 (id=8059): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b00000000000000013e110018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500fffffffffff31801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 14m13.93471853s ago: executing program 1 (id=8062): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000040000000700000000000000a00000000000000009000000002000000000000000000002ba0000000000000002000003"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14m13.719373983s ago: executing program 1 (id=8063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x52, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast2, 0x4e21, 0x714, 0x4e23, 0x5}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x192, 0xfffffffffffffff7, 0xccd0, 0x8251c, 0x2, 0xfffffffffffffff8, 0x80}, {0xffffffffffffffff, 0x2, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2b, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}, @tfcpad={0x8, 0x16, 0x7fffffff}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x900) 14m13.638958376s ago: executing program 1 (id=8064): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x40}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000051c700000000000000000000000700000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x88581, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001100010000006ab7ff7bbe26ac746624f77492244900"/35, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r10, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0xff, 0x0}}}, 0x24) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0xf}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r4, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000c40)="a643c307eab75c68980f64636f499fd21e334e73fc95771b1177250488757855e5f7abab34597f94f417aa10bc6307232d8193ea28f8a188a8858bd2207b8fb55e42cee70393df111315e345d1e9528f5dcfdd916c76b5e016cb49328173ef4d277f83f19f4946df9ad541bd7dd5f73a3b29da5b732f600bbbd42863337013032d5c7d573d222d1796677ff03f4db5339057f40883f023999bed238510ec307f1a24596ff63f01a6594f1dcbafef869f5c1304d5bef44f9cf3ba19c3c1f86aafaf85b8616fe0586e", 0xc8}, {&(0x7f0000000e80)="c65be723154b30bf0c02d79da5566aa58f66667930db73d4297fbba0b454ce1026c5f0eb9c5a7e7b4e964126c6d4033e3e55dd55089e4d783521e18fa24a68f9e9f7654f7f934b4c5d24f0d33510f8f2ae5924", 0x53}, {&(0x7f0000000f00)="270d88209d3b30d4083fb45d4066068cce5c7ebdf6c4ed880c1e795f2fd5e28c83f45ff95ae7e717317393face6f1fd004ffe1c5ec390cc1e310d3385ac6334bc242ee7eaf5d09daa37e23e142a3fad36e86ff3083ce2ebfe61a63dbd52289d4e29451a97452a632e8a438fee5c5d98888614b9707ae1a8b5df648e143d7222eb396028dbcb61c1992eafc5315f543941916088f981914494b112bb79a91d7d789e066db98d82f0f91cf77dcdcc3045c09c6b23689c815ca951c", 0xba}, {&(0x7f0000000fc0)="b5e76394694ff84cc350bc780a7e867f6199cc3c7d2622501a42067e7a244bc12e70b69cb06a7e20833a264739310ee8f3f42fafb7793a9c745c57c09e026bd281e65f2f8507ef4c9d30f1a2ff88ecc94fd45ee00339834aedf1e3993dc2f84ba9762c10f4eebb29b1e2e381dbcaab8196ab9befc24c03557eeafa5fc940891f961563930bea992254d21b2646801cd72ce5679a353f83f6cb6f8100a707985a9788f27f19bb58af18c2466af7d6c6e2f9500a68ccbc4a4bfcfb2bbdbbc4b38e9b231c", 0xc3}], 0x4}, 0x8000) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000000a40)={r4, &(0x7f0000000940)='/dev/net/tun\x00', 0x2c8901, &(0x7f0000000980)={@align=0x9, {0xe, 0x800, 0xffff, 0x5}}, 0x8, &(0x7f00000009c0), &(0x7f0000000a00)=0x401}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x14, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xab}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x422a}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x535, 0xae, &(0x7f00000007c0)=""/174, 0x40e00, 0x10, '\x00', r11, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x5, 0x1, 0x8, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r1, r1, r4, r3, r4, r2, r3, r1, r4, r3], 0x0, 0x10, 0x3}, 0x94) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 14m13.173573604s ago: executing program 1 (id=8068): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000003080)=[{{&(0x7f0000002cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/184, 0xb8}, 0x1}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/69, 0x45}], 0x1, &(0x7f0000003040)=""/36, 0x24}, 0x2}], 0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000280), &(0x7f0000000440)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r9 = socket(0x2, 0x2, 0x1) bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xff, 0x9, 0x7}) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000040)=0x11, 0x0) 13m57.881362762s ago: executing program 32 (id=8068): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000003080)=[{{&(0x7f0000002cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/184, 0xb8}, 0x1}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/69, 0x45}], 0x1, &(0x7f0000003040)=""/36, 0x24}, 0x2}], 0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020801"], 0x1c}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000280), &(0x7f0000000440)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r9 = socket(0x2, 0x2, 0x1) bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xff, 0x9, 0x7}) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000040)=0x11, 0x0) 11m8.770717469s ago: executing program 0 (id=9098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000002a00000000400000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b76b6e000000000050001100fc000000000000000002000000000001e0000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000c001c"], 0xb4}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 11m8.555253736s ago: executing program 0 (id=9100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f086dd2de0ffff200000000003000aac14140ce000006a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) 11m8.281858942s ago: executing program 0 (id=9102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1f2f, 0x24, 0x0, &(0x7f0000000000)="1e749f447f700400684010a40800297a5d41726bb1d331200ce375083a37c86b7fd9d7da", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_MASTER={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000080}, 0x4000844) 11m7.874948144s ago: executing program 0 (id=9103): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0xffffffffffffff12) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0xf8, 0x30, 0x1, 0x70bd27, 0x1, {}, [{0xe4, 0x1, [@m_bpf={0xe0, 0x0, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x81, 0x3, 0x498, 0xffff0001}}]}, {0x9f, 0x6, "a82caba68f7d6a0038f7e7bf1f0bb86cfe3fd9fe89a424df3fddc0611b7f78fcc64118a714b66003fcc6bab82cd1e18e1870e3f1a785f5be5f7a74ea6437500f2738a002ebe81dddca547e312e14c77553b289d0d38a3667b6d5009a13f8c584940b5a3401461c15dd5cccbad240e896af70b183e91dd8d1c3906845fef3c3dcaacaa5f47b25e7d833a4734ea9a776a6b936c73f0647b8e603be26"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6}}}}]}]}, 0xf8}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) (async, rerun: 32) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32) sendmmsg$inet6(r2, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02020100000000fe8000000000000000000000000000bb28000000000000002900000039000000bf020201"], 0x50}}], 0x1, 0x4040084) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="c454b28006f30000", @ANYRES8=r3, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000001000000000000000008400088080000080580009801c000080060001000200000008080200ac14141f059a9ffc839f23d00b15f38223000300000000001c000080060001000200000008000200ffffffff05000300030000001c000080060000000000000070000200ac142f40bf9d030003000000240007000000ffffffffffffffffffffffffffffffffff0300000000000000ffffffffff2f1ab473f2fc311a65d8863435cbe7bea5fc"], 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000304fcffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="00200100002000001c00128009000100626f6e64000000000c00038008"], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r5, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async, rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x1, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000200000000000000feffffff010000000500000062000000891476657468305f6d6163767461702aae0000006e6963766630000000000000001000006e65747063693000000000000000000067726530000000000000000000000000ffffffffffffffff00ff8000aaaaaaaaaabb00000000ff806e0023006e0000009e000000000000000000000000000000000000001f0000000000000000000000000000000800000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000"]}, 0x1a6) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 64) sendto$inet(r8, 0x0, 0xf, 0x26000759, &(0x7f0000000440)={0x2, 0x4e25, @multicast1}, 0x10) (rerun: 64) poll(&(0x7f0000000040)=[{r8, 0xa0}], 0x1, 0x10000) (async) sendto$inet(r8, &(0x7f0000000580)='\x00', 0x1, 0x10008095, 0x0, 0x0) 10m49.33252398s ago: executing program 0 (id=9109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x4c, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10m49.229669592s ago: executing program 0 (id=9207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff6770, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000002000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 10m34.137561111s ago: executing program 33 (id=9207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffff6770, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000002000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 8.375398608s ago: executing program 4 (id=13488): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x268, 0x0, 0x5, 0xc00, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0xfff}, 0x7, 0xf2, 0x1, 0x0, 0x4, 'syz1\x00', "69b5a648d2b5445c61994784d3610b9a76be21c9813b886904a6a4f4e4927269", "839232b18e6f7396e41995a01a9a4297b135bec604423a18431aa912bf1e7adf", [{0x5, 0x9e, {0xa7f2fe03fc8b80a8, 0x2}}, {0x12, 0x2, {0x1, 0x10000}}, {0xd342, 0x1, {0x2, 0x6}}, {0x7, 0x2, {0x2, 0x3}}, {0x4, 0x7, {0x1, 0x5}}, {0x8, 0x8, {0x0, 0x8}}, {0x7, 0x7ff, {0x0, 0x5}}, {0x98f3, 0xd46b, {0x0, 0x4}}, {0x7, 0x7f, {0x1, 0x2}}, {0xdd, 0x8d0b, {0x2, 0x3}}, {0x3, 0x9, {0x0, 0x2}}, {0x7, 0x1000, {0x0, 0x8}}, {0xaef2, 0xbe, {0x1, 0x8}}, {0x5, 0x6, {0x3, 0x2e}}, {0x7fff, 0x91f, {0x2, 0x180}}, {0x9, 0x800, {0x2, 0x3}}, {0x6, 0x8, {0x0, 0x6}}, {0x9, 0x1000, {0x3, 0x7f}}, {0x2, 0x3, {0x1, 0x3}}, {0x2, 0x7, {0x3, 0x6}}, {0x0, 0x4, {0x2, 0x7}}, {0xa, 0x101, {0x3, 0x800}}, {0x1, 0x5, {0x3, 0xa20b}}, {0x200, 0x6, {0x0, 0xaae2}}, {0x37, 0x5, {0x0, 0x10}}, {0x7ff, 0x400, {0x0, 0x3}}, {0xf0d2, 0x7fff, {0x2, 0x3}}, {0x5, 0x2, {0x3, 0x7f}}, {0x5, 0x401, {0x0, 0x81}}, {0x2, 0x9, {0x2, 0x8}}, {0x6, 0x9, {0x1, 0x7}}, {0x7, 0x3ff, {0x0, 0x8}}, {0x2, 0x1d3, {0x1, 0x9}}, {0x4, 0x4, {0x2, 0x400}}, {0x0, 0x2, {0x3, 0x814b}}, {0x7, 0x2ab3, {0x0, 0x6}}, {0x3, 0xffff, {0x1, 0x3ff}}, {0xfffb, 0x0, {0x2, 0x1}}, {0xc, 0x4, {0x3, 0x5}}, {0x1, 0x5, {0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4c0c0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000009080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(r2, &(0x7f000000b840)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r4 = socket(0x8, 0x4, 0x3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x400, 0xf, 0x0, 0xffffffffffffffff, 0xd6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c80000025c2de00"/20, @ANYRES32=r6, @ANYBLOB="40400200010000000800200084a9000008001c00", @ANYRES32=r3, @ANYBLOB="05002700010000000a000200aaaaaaaaaabb000005002100020000001a002200c5007c7589807d7e2e4012e5840aeacba0ebd8e376ee000005002700810000001400140070696d726567310000000000000000000800280088aa0000"], 0x8c}, 0x1, 0x0, 0x0, 0x20001000}, 0x4008011) close(r4) 7.475752182s ago: executing program 5 (id=13492): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x600000000000000, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 7.256110559s ago: executing program 5 (id=13495): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030500000000000700000000a1ff", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) 6.674045883s ago: executing program 5 (id=13497): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000240)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000240)=@llc={0x1a, 0x1, 0x9, 0x33, 0x80, 0x81, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="98", 0x1}], 0x1}}], 0x2, 0x40d5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) listen(r0, 0x204) r4 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={0x0, 0x2b}, 0x1, 0x0, 0x0, 0x20000044}, 0x2400c010) sendfile(r5, r6, 0x0, 0xffffffff000) 5.85922576s ago: executing program 4 (id=13505): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00i'], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1700}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 5.702614449s ago: executing program 3 (id=13506): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x268, 0x0, 0x5, 0xc00, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0xfff}, 0x7, 0xf2, 0x1, 0x0, 0x4, 'syz1\x00', "69b5a648d2b5445c61994784d3610b9a76be21c9813b886904a6a4f4e4927269", "839232b18e6f7396e41995a01a9a4297b135bec604423a18431aa912bf1e7adf", [{0x5, 0x9e, {0xa7f2fe03fc8b80a8, 0x2}}, {0x12, 0x2, {0x1, 0x10000}}, {0xd342, 0x1, {0x2, 0x6}}, {0x7, 0x2, {0x2, 0x3}}, {0x4, 0x7, {0x1, 0x5}}, {0x8, 0x8, {0x0, 0x8}}, {0x7, 0x7ff, {0x0, 0x5}}, {0x98f3, 0xd46b, {0x0, 0x4}}, {0x7, 0x7f, {0x1, 0x2}}, {0xdd, 0x8d0b, {0x2, 0x3}}, {0x3, 0x9, {0x0, 0x2}}, {0x7, 0x1000, {0x0, 0x8}}, {0xaef2, 0xbe, {0x1, 0x8}}, {0x5, 0x6, {0x3, 0x2e}}, {0x7fff, 0x91f, {0x2, 0x180}}, {0x9, 0x800, {0x2, 0x3}}, {0x6, 0x8, {0x0, 0x6}}, {0x9, 0x1000, {0x3, 0x7f}}, {0x2, 0x3, {0x1, 0x3}}, {0x2, 0x7, {0x3, 0x6}}, {0x0, 0x4, {0x2, 0x7}}, {0xa, 0x101, {0x3, 0x800}}, {0x1, 0x5, {0x3, 0xa20b}}, {0x200, 0x6, {0x0, 0xaae2}}, {0x37, 0x5, {0x0, 0x10}}, {0x7ff, 0x400, {0x0, 0x3}}, {0xf0d2, 0x7fff, {0x2, 0x3}}, {0x5, 0x2, {0x3, 0x7f}}, {0x5, 0x401, {0x0, 0x81}}, {0x2, 0x9, {0x2, 0x8}}, {0x6, 0x9, {0x1, 0x7}}, {0x7, 0x3ff, {0x0, 0x8}}, {0x2, 0x1d3, {0x1, 0x9}}, {0x4, 0x4, {0x2, 0x400}}, {0x0, 0x2, {0x3, 0x814b}}, {0x7, 0x2ab3, {0x0, 0x6}}, {0x3, 0xffff, {0x1, 0x3ff}}, {0xfffb, 0x0, {0x2, 0x1}}, {0xc, 0x4, {0x3, 0x5}}, {0x1, 0x5, {0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4c0c0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000009080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(r2, &(0x7f000000b840)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r4 = socket(0x8, 0x4, 0x3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x400, 0xf, 0x0, 0xffffffffffffffff, 0xd6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c80000025c2de00"/20, @ANYRES32=r6, @ANYBLOB="40400200010000000800200084a9000008001c00", @ANYRES32=r3, @ANYBLOB="05002700010000000a000200aaaaaaaaaabb000005002100020000001a002200c5007c7589807d7e2e4012e5840aeacba0ebd8e376ee000005002700810000001400140070696d726567310000000000000000000800280088aa0000"], 0x8c}, 0x1, 0x0, 0x0, 0x20001000}, 0x4008011) close(r4) 5.578262193s ago: executing program 4 (id=13507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000000180)=0xfa, 0x4) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc00000000", @ANYRES32=0x0, @ANYBLOB="09001f00"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x20001800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000001c00)=r8) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000200)=0x18ab00f8, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r11) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="30010000", @ANYRES16=r12, @ANYBLOB="010629bd7000fedbdf251700000000010680f9000300"], 0x130}, 0x1, 0x0, 0x0, 0x20044881}, 0x8004) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x178, r12, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7eb3f9c6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @empty, 0x3ff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x613d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x4004) 5.248153408s ago: executing program 5 (id=13509): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f) 4.828017141s ago: executing program 2 (id=13513): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="060000"], 0x72) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r4}, 0x38) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf2502000000", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="410404"], 0x7) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x309) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.793398377s ago: executing program 4 (id=13514): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/161, 0xa1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r3, 0x8913, &(0x7f0000000000)='veth0:') syz_emit_ethernet(0x76, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'vlan1\x00', {'bridge_slave_0\x00'}, 0x504}) r5 = accept4(r0, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0xffffffffffffff65) unshare(0x600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x1000000, 0x0, 0x8000000000000000}, 0x0, 0x0) 4.728236616s ago: executing program 5 (id=13515): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="dc48344400000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000f0005000000bfa9000000000000350901000000000095000000000000008500000047000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.490409498s ago: executing program 3 (id=13517): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, 0x0, 0x0) 4.412146754s ago: executing program 5 (id=13518): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b00000000000000013e11001811d0ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa120000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 3.910679041s ago: executing program 3 (id=13520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x4, @private2, 0x9}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r6, 0x0, 0x20000000002) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0c000000000008004500001c0000000000119078000000000000000000004e2000089078"], 0x0) 3.549157725s ago: executing program 4 (id=13522): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000000000000000000000000000000000000abd500"], 0x48) close(r0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x50, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 2.452920253s ago: executing program 3 (id=13523): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x34, r5, 0x11, 0x2070bd2d, 0x25dfdbfc, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008810}, 0x1000c810) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030328bd7000000000000a"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000240000000020800034000000014080001400000000008000540000000140900010073797a30000000000900020073797a320032c10014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x168, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x24e}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4040881) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/19, 0xfffffffffffffefd}, 0xcf}], 0x1, 0x2023, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004622000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000c000bb000000002b000000fe8800000000000000000000000001010000000000000000000000000000000008000000000000000a0000000000000006000000000000005fc178240000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd7000000000000200020028000000000000004c001200726663343534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000) 2.329118279s ago: executing program 2 (id=13524): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) (async) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 2.020048756s ago: executing program 2 (id=13527): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1b41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0xb, 0x0, 0x400, 0x0, 0x7c, 0xe7, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x201, 0x7, 0xe, 0x82000045, [0x2, 0xc]}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600030000000c0003000800170004"]}, 0x58}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000040)={0x1, 0x5aa, 0x1}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea010018000000000000000c00000000946b1147a601fd130000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b000100000000000000000011"], 0x14}}, 0x4044000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYRESDEC=r5], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.897236122s ago: executing program 6 (id=13528): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x9, 0x87, 0xfa, 0x0, 0x89, 0x5, 0x8, 0x58, 0x0, 0x4, 0xf, 0x0, 0x0, 0x8}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/35, 0x23}, 0x200}], 0x1, 0x40000123, 0x0) unshare(0x22020400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r5, @ANYRES8=r4], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x20004041) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r9], 0x3c}}, 0x4800) r10 = socket$rds(0x15, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001800010300000000000000000a800000ff0300060200000014000200fc0000000000000100000000000000011400050000000000000000000000ffffffffffff140001"], 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c80)={0xffffffffffffffff, 0x0, 0x1000, 0xc7, &(0x7f0000000b40)="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", &(0x7f0000001b40)=""/199, 0x5, 0x0, 0x1000, 0x40, &(0x7f0000001c40)="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", &(0x7f0000002c40)="848a7d38ac8537afd794d8b9d5ce4f8e75adc42d33bfb7625d40a80dd7a125db1cb7334becdbf19aa9bb060f74b8a78b91dc54e21bee198bfd728074565d7bc7", 0x1, 0x0, 0x8}, 0x50) ioctl$sock_proto_private(r10, 0x89e1, &(0x7f00000002c0)="21bfb71f3c83e2c5485da87bf72765e6705255801eb2db0ee8294a4d4071a3a9078323b2868782ea6e6d2ad0071e222ae1752aa7e51b662a60a439b16692196f8c2a4b63d746ccc1183b6b6a1e18cf2d8cf60f0f4cbf") 1.77806664s ago: executing program 4 (id=13529): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x268, 0x0, 0x5, 0xc00, 0x0, 0x0, {0x3, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0xfff}, 0x7, 0xf2, 0x1, 0x0, 0x4, 'syz1\x00', "69b5a648d2b5445c61994784d3610b9a76be21c9813b886904a6a4f4e4927269", "839232b18e6f7396e41995a01a9a4297b135bec604423a18431aa912bf1e7adf", [{0x5, 0x9e, {0xa7f2fe03fc8b80a8, 0x2}}, {0x12, 0x2, {0x1, 0x10000}}, {0xd342, 0x1, {0x2, 0x6}}, {0x7, 0x2, {0x2, 0x3}}, {0x4, 0x7, {0x1, 0x5}}, {0x8, 0x8, {0x0, 0x8}}, {0x7, 0x7ff, {0x0, 0x5}}, {0x98f3, 0xd46b, {0x0, 0x4}}, {0x7, 0x7f, {0x1, 0x2}}, {0xdd, 0x8d0b, {0x2, 0x3}}, {0x3, 0x9, {0x0, 0x2}}, {0x7, 0x1000, {0x0, 0x8}}, {0xaef2, 0xbe, {0x1, 0x8}}, {0x5, 0x6, {0x3, 0x2e}}, {0x7fff, 0x91f, {0x2, 0x180}}, {0x9, 0x800, {0x2, 0x3}}, {0x6, 0x8, {0x0, 0x6}}, {0x9, 0x1000, {0x3, 0x7f}}, {0x2, 0x3, {0x1, 0x3}}, {0x2, 0x7, {0x3, 0x6}}, {0x0, 0x4, {0x2, 0x7}}, {0xa, 0x101, {0x3, 0x800}}, {0x1, 0x5, {0x3, 0xa20b}}, {0x200, 0x6, {0x0, 0xaae2}}, {0x37, 0x5, {0x0, 0x10}}, {0x7ff, 0x400, {0x0, 0x3}}, {0xf0d2, 0x7fff, {0x2, 0x3}}, {0x5, 0x2, {0x3, 0x7f}}, {0x5, 0x401, {0x0, 0x81}}, {0x2, 0x9, {0x2, 0x8}}, {0x6, 0x9, {0x1, 0x7}}, {0x7, 0x3ff, {0x0, 0x8}}, {0x2, 0x1d3, {0x1, 0x9}}, {0x4, 0x4, {0x2, 0x400}}, {0x0, 0x2, {0x3, 0x814b}}, {0x7, 0x2ab3, {0x0, 0x6}}, {0x3, 0xffff, {0x1, 0x3ff}}, {0xfffb, 0x0, {0x2, 0x1}}, {0xc, 0x4, {0x3, 0x5}}, {0x1, 0x5, {0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x4c0c0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000009080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(r2, &(0x7f000000b840)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r3 = socket(0x8, 0x4, 0x3) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x400, 0xf, 0x0, 0xffffffffffffffff, 0xd6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x3c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(r3) 1.692430076s ago: executing program 6 (id=13530): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xc0}, 0x40000002) pipe(&(0x7f0000000080)) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00Xe\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 1.468047405s ago: executing program 6 (id=13531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x73b}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x24040810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xc8}}, 0x20050800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, 0x0, 0x40000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737903000000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0xc, &(0x7f0000000500)=0x6, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000003010102000000000000363f01"], 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r7) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002abd7000fedbdf25110000000600280003000000080031000400000008002b0008000000dd7f3858d39fd0058f9ea209581f8d2438de7da548bae0e11817b27d5b8146f80d88e9987a70ca1bfdb4b2cc8f3e12cc038c87225ee20fcc2f403308c630a7a52877f747775acc669eff2c5548346732d780c8cf07509b9f8345233aaecdf58c381995c0e93678e9e13e3913a768df4cd26250b8d23b3b15e0fcee49dce5a5301d3974b0ee2cc589d48a3111e080f0028b56c182c3d444f93a948f6a900abb5c3dd08d169e5ebc1969843d59319e2d534b21495e1f485d8167fc33962c00fdd1d3ef1a705da2fb"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r13, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006340), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000d9579736125545a1c1d1d70173c9103f397f3916596e5436dc3af4193723e09235680d7fbe1b0f979650d89bf589f8e4975803a44b60c551a667729a0e1fee11575914cb28933e8e72df72cab3eeac9f7e9f5072218a9062fec88bc8074fa205ecfdbc809de703c550f00437beee3c1933c2d8a174614da6d1c0366d9426a1c1874356f284b91c409ab9358d306422a47f4f98dfcab2fd96202be539b8cae15187802fa85433429b70f77785e6b368f929ba38de5c", @ANYRES16=r16, @ANYBLOB="000125bd7000ffdbdf25140000000c0007800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) 1.434998508s ago: executing program 2 (id=13532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000006c0)={{0x0, 0xf0, 0x8b, 0x8e7, 0x8, 0xfffffffffffffffd, 0xb4d, 0x30000000, 0x2, 0xb, 0x0, 0x1, 0x1, 0x100000000, 0x8}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000016c0)={{r1, 0x3, 0x7, 0xe, 0x8, 0x80000001, 0x6, 0x2de5, 0x6, 0x800, 0x2, 0x1000, 0xde7, 0xa, 0x6}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113620000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916be0000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd606410a600080001fc000000000000000000000000000001000000000002d17c47000000000000013200010400000000"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3a00}, 0x48) r4 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x9}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002800)=ANY=[@ANYBLOB="88000000f92b2cea05048045c4bc698d8faf3452e7c211736d985d22595b242272290d9d7f8cda9b7f9ed6f26135e007d275d176a256a129267d053e6c11c9f661ef8de88ea898a7917a73836da4fb3af284bd142d8fd4c6acf457379d9d5e21e7fef0266cca09c14e88d369c273c547d9a915e41083954c60a32adc42c511754c2f70d980ed", @ANYRES16=r7, @ANYBLOB="00022dbd7000fbdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4000084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1a, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x1, 0x3, 0x4, 0x1, 0x7, 0x20, 0xfffffffffffffff0}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) 1.205918031s ago: executing program 3 (id=13533): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) 463.504514ms ago: executing program 6 (id=13534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000001308000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 302.233702ms ago: executing program 6 (id=13535): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f) 216.233204ms ago: executing program 2 (id=13536): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x1, 0x0, 0xdad1124f55525050}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x47}, 0x94) 132.208154ms ago: executing program 6 (id=13537): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r2], 0xfdef) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 93.623615ms ago: executing program 3 (id=13538): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "b7a41f2305009201", "d23c0e8a0e200000efffffff0500e800", '\x00', "ec9300"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xb98, 0x2, 0x1, 0x10012, 0x80, 0x80000000, 0x6}, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000180a0000050900210073017a00000000000901010073797a3100000043180007006e610908c9d162d37400140004800800014000007e0bacab7b00", @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 0s ago: executing program 2 (id=13539): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000700)="390bb453c68a6bdf104bea001fd3660afc27834df56823a6aaf43a4b3a5ee9136842e1ae1108b44437a5b3fe590be56a5f4abf33ca7ff9de200cdf2e4faeaa5537ec3fdf8560276b0625f77621dd176c2606fe50725035b34288d59b6e34e1ea0ef1c2a47f8cfd9b4ba317153646967aeaa347ed3a433c3c1d1e696eb3c1621a69c6ab4a8bfa7a2ff918f47fb1db9f40bc870fb2bed47d9cb100919c3fc236692e51b6ac1a3b374dcc3af8a1a14725dffec25c9b9caf778efb32fd16f83b01f627bf2eb6b387c3f8a19b758e8c0351d24707df37e6b8180fd2055961af15d5a25dc11ea84c711d", 0xe7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000c850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="00004305", 0x4, 0x14000b01, &(0x7f0000000800)={0x11, 0x8100, r7, 0x1, 0xfd}, 0x14) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000feff00007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r11, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r13, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r14 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r14, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r14, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) bind$can_j1939(r8, &(0x7f0000000200)={0x1d, r13, 0x3, {0x2, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x101}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xaa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r15, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xb6d8f7d669d7c055}, 0x0) kernel console output (not intermixed with test programs): 3): link status definitely up, 10000 Mbps full duplex [ 1615.319907][T15185] IPVS: using max 28 ests per chain, 67200 per kthread [ 1615.771434][T15197] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12483'. [ 1615.909407][T27808] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.019738][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12483'. [ 1616.052783][T27805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.253181][T15193] hsr_slave_0: left promiscuous mode [ 1616.254722][T15210] netlink: 'syz.5.12486': attribute type 1 has an invalid length. [ 1616.282803][T15193] hsr_slave_1: left promiscuous mode [ 1616.530423][T31951] Bluetooth: hci4: command tx timeout [ 1616.601376][T15210] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1616.702944][T15225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1616.731825][T15213] bond11: (slave veth13): Enslaving as an active interface with a down link [ 1616.873380][T15215] bond10: left promiscuous mode [ 1616.878438][T15215] bridge8: left promiscuous mode [ 1616.888786][T15215] bond10: left allmulticast mode [ 1616.909052][T15215] bridge8: left allmulticast mode [ 1617.019353][T15235] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1617.245312][T27808] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.286261][T15218] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1617.296156][T15218] bond11: (slave batadv4): making interface the new active one [ 1617.305652][T15218] batadv4: entered promiscuous mode [ 1617.321982][T15218] bond11: (slave batadv4): Enslaving as an active interface with an up link [ 1617.337431][T27803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.841919][T15245] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1617.896232][T27808] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.983665][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.991762][T15249] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1618.016216][T27820] bond11: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 1618.037055][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12496'. [ 1618.069547][T15169] lo speed is unknown, defaulting to 1000 [ 1618.117577][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12497'. [ 1618.257120][T15260] IPv6: Can't replace route, no match found [ 1618.266446][T27808] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.381229][T15259] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1618.415391][T15264] nbd: must specify a device to reconfigure [ 1618.567810][T15268] x_tables: duplicate underflow at hook 2 [ 1618.612936][T31951] Bluetooth: hci4: command tx timeout [ 1618.720219][T27805] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.913884][T27820] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.990410][T27820] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1619.898123][T27808] vlan2: left allmulticast mode [ 1619.936902][T27808] geneve0: left allmulticast mode [ 1619.984886][T27808] vlan2: left promiscuous mode [ 1620.008666][T27808] geneve0: left promiscuous mode [ 1620.036034][T27808] bridge0: port 3(vlan2) entered disabled state [ 1620.106618][T27808] bridge_slave_1: left allmulticast mode [ 1620.148673][T27808] bridge_slave_1: left promiscuous mode [ 1620.187699][T27808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.244550][T27808] bridge_slave_0: left allmulticast mode [ 1620.262803][T27808] bridge_slave_0: left promiscuous mode [ 1620.283634][T27808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.388434][T27808] dvmrp8: left allmulticast mode [ 1620.419557][T27808] batman_adv: batadv0: Interface deactivated: gretap0 [ 1620.689863][T31951] Bluetooth: hci4: command tx timeout [ 1621.741676][T27808] batman_adv: batadv0: Removing interface: gretap0 [ 1621.829029][T27820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1621.889526][T27808] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1622.048000][T27808] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 1622.107977][T27808] bond7 (unregistering): (slave bridge8): Releasing active interface [ 1622.149573][T27808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.164522][T27808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.182886][T27808] bond0 (unregistering): Released all slaves [ 1622.199024][T27808] bond1 (unregistering): Released all slaves [ 1622.235357][T27808] bond2 (unregistering): (slave veth3): Releasing active interface [ 1622.243800][T27808] batadv1: entered promiscuous mode [ 1622.253449][T27808] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1622.264022][T27808] bond2 (unregistering): Released all slaves [ 1622.296820][T27808] bond3 (unregistering): (slave veth5): Releasing active interface [ 1622.305047][T27808] batadv2: entered promiscuous mode [ 1622.321217][T27808] bond3 (unregistering): (slave batadv2): Releasing active interface [ 1622.347292][T27808] bond3 (unregistering): Released all slaves [ 1622.417390][T27808] bond5 (unregistering): Released all slaves [ 1622.483760][T27808] bond4 (unregistering): (slave veth7): Releasing active interface [ 1622.501045][T27808] batadv3: entered promiscuous mode [ 1622.522522][T27808] bond4 (unregistering): (slave batadv3): Releasing active interface [ 1622.556217][T27808] bond4 (unregistering): Released all slaves [ 1622.601227][T27808] bond6 (unregistering): Released all slaves [ 1622.820676][T31951] Bluetooth: hci4: command tx timeout [ 1622.855083][T27808] bond7 (unregistering): Released all slaves [ 1622.877525][T27808] bond8 (unregistering): (slave veth9): Releasing active interface [ 1622.908626][T27808] batadv4: entered promiscuous mode [ 1622.918321][T27808] bond8 (unregistering): (slave batadv4): Releasing active interface [ 1622.929265][T27808] bond8 (unregistering): Released all slaves [ 1622.968712][T27808] bond9 (unregistering): (slave veth11): Releasing active interface [ 1622.991543][T27808] batadv5: entered promiscuous mode [ 1623.018953][T27808] bond9 (unregistering): (slave batadv5): Releasing active interface [ 1623.061826][T27808] bond9 (unregistering): Released all slaves [ 1623.099092][T12497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1623.151908][T27808] bond10 (unregistering): Released all slaves [ 1623.355330][T27808] bond11 (unregistering): Released all slaves [ 1623.424320][T27808] bond12 (unregistering): (slave veth13): Releasing active interface [ 1623.499660][T27808] bond12 (unregistering): (slave batadv6): Releasing active interface [ 1623.512697][T27808] bond12 (unregistering): Released all slaves [ 1623.630803][T12497] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1623.654157][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1623.944588][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12522'. [ 1623.977696][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12523'. [ 1624.027433][T15362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12522'. [ 1624.041487][T15365] netlink: 'syz.6.12523': attribute type 8 has an invalid length. [ 1624.288973][T15372] netlink: 'syz.3.12525': attribute type 1 has an invalid length. [ 1624.432191][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12525'. [ 1624.526938][T15372] bond2: entered promiscuous mode [ 1624.577045][T15372] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1624.628843][T27808] tipc: Left network mode [ 1624.666755][T15381] bond2: entered allmulticast mode [ 1624.861399][T15389] bond2: (slave bridge2): making interface the new active one [ 1624.888181][T15389] bridge2: entered promiscuous mode [ 1624.899285][T15389] bridge2: entered allmulticast mode [ 1624.978486][T15398] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12529'. [ 1625.074633][T15389] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1625.341615][T15401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1625.714611][T15169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.745715][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12532'. [ 1625.763538][T15169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.790263][T15409] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1625.795907][T15169] bridge_slave_0: entered allmulticast mode [ 1625.806877][T15412] netlink: 'syz.6.12532': attribute type 1 has an invalid length. [ 1625.838269][T15169] bridge_slave_0: entered promiscuous mode [ 1625.933122][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1625.947412][T15169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.986495][T15169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.995974][T15169] bridge_slave_1: entered allmulticast mode [ 1626.004618][T15169] bridge_slave_1: entered promiscuous mode [ 1626.103454][T15418] netlink: 300 bytes leftover after parsing attributes in process `syz.3.12534'. [ 1626.406202][T15427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12538'. [ 1626.515848][T15169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.607750][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12541'. [ 1626.628913][T15169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.823722][T27808] hsr_slave_0: left promiscuous mode [ 1626.847619][T27808] hsr_slave_1: left promiscuous mode [ 1626.879185][T27808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1626.905688][T27808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1626.935882][T27803] IPVS: starting estimator thread 0... [ 1626.942302][T27820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.952590][T15445] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1626.975530][T27808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1626.993881][T27808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1627.070387][T15447] IPVS: using max 40 ests per chain, 96000 per kthread [ 1627.179716][T27808] veth1_macvtap: left promiscuous mode [ 1627.198225][T27808] veth0_macvtap: left promiscuous mode [ 1627.574043][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.921805][T15457] netlink: 'syz.2.12545': attribute type 1 has an invalid length. [ 1627.958630][T15457] netlink: 'syz.2.12545': attribute type 4 has an invalid length. [ 1628.018338][T15459] netlink: 46 bytes leftover after parsing attributes in process `syz.2.12545'. [ 1628.305340][T15462] xt_hashlimit: max too large, truncated to 1048576 [ 1628.436078][T27808] team0 (unregistering): Port device team_slave_1 removed [ 1628.479695][T27808] team0 (unregistering): Port device team_slave_0 removed [ 1628.678689][T15169] team0: Port device team_slave_0 added [ 1628.771322][T27803] batadv4: left promiscuous mode [ 1628.796234][T15465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.833774][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1628.853741][T27803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.926795][T15169] team0: Port device team_slave_1 added [ 1629.082457][T15169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.144151][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.273998][T15169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.347869][T15482] __nla_validate_parse: 1 callbacks suppressed [ 1629.347887][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12551'. [ 1629.369462][T15483] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20002 [ 1629.380610][T15169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.404751][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.526912][T15169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.938674][T15169] hsr_slave_0: entered promiscuous mode [ 1630.017747][T15169] hsr_slave_1: entered promiscuous mode [ 1630.035818][T15169] debugfs: 'hsr0' already exists in 'hsr' [ 1630.073764][T15169] Cannot create hsr debugfs directory [ 1630.799277][T15498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.806877][T15498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.836483][T15508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.989740][T15513] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12557'. [ 1631.020209][T15508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1631.118209][T15515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12557'. [ 1631.181281][T15520] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12557'. [ 1631.320374][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12559'. [ 1631.429159][T15498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1631.465240][T15498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.707950][T15498] batman_adv: batadv0: Interface deactivated: gretap1 [ 1632.056238][T12497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.164234][T27815] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.200203][T27815] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.276095][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1632.551518][T27820] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.577694][T27808] IPVS: stop unused estimator thread 0... [ 1632.608553][T27820] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.841273][T12501] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.857253][T15538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.875979][T12501] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.950267][T12497] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.972620][T15541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.997563][T12497] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.075568][T15538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1633.199534][T15545] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1633.628976][T15169] netdevsim netdevsim4 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1633.649314][ T29] audit: type=1107 audit(1786087497.205:23): pid=15549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1633.671659][T15556] netlink: 'syz.5.12567': attribute type 1 has an invalid length. [ 1633.816439][T15560] tipc: Failed to remove unknown binding: 66,0,0/0:2940423185/2940423186 [ 1633.849064][T15560] tipc: Failed to remove unknown binding: 66,0,0/0:2940423185/2940423186 [ 1633.975702][T27820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1634.217362][T15169] netdevsim netdevsim4 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.265866][T15574] netlink: 'syz.3.12573': attribute type 34 has an invalid length. [ 1634.306604][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12573'. [ 1634.353070][T15574] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1634.392516][T15577] syzkaller0: entered promiscuous mode [ 1634.421387][T15577] syzkaller0: entered allmulticast mode [ 1634.671717][T15169] netdevsim netdevsim4 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.977023][T15598] syzkaller0: entered promiscuous mode [ 1635.000543][T15598] syzkaller0: entered allmulticast mode [ 1635.208629][T15169] netdevsim netdevsim4 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1635.402990][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12584'. [ 1635.420071][T23827] Bluetooth: hci3: command 0x0405 tx timeout [ 1635.842692][T15630] FAULT_INJECTION: forcing a failure. [ 1635.842692][T15630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1635.901698][T15630] CPU: 0 UID: 0 PID: 15630 Comm: syz.3.12586 Not tainted syzkaller #0 PREEMPT(full) [ 1635.901722][T15630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1635.901733][T15630] Call Trace: [ 1635.901742][T15630] [ 1635.901750][T15630] dump_stack_lvl+0xe8/0x150 [ 1635.901782][T15630] should_fail_ex+0x40c/0x560 [ 1635.901807][T15630] _copy_from_user+0x2d/0xb0 [ 1635.901830][T15630] do_sock_getsockopt+0x200/0x7e0 [ 1635.901858][T15630] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1635.901891][T15630] ? __fget_files+0x3a2/0x420 [ 1635.901914][T15630] ? __fget_files+0x2a/0x420 [ 1635.901940][T15630] __x64_sys_getsockopt+0x1a4/0x240 [ 1635.901964][T15630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.901984][T15630] do_syscall_64+0x174/0x580 [ 1635.902008][T15630] ? trace_irq_disable+0x3b/0x140 [ 1635.902028][T15630] ? clear_bhb_loop+0x70/0xc0 [ 1635.902057][T15630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.902073][T15630] RIP: 0033:0x7fa8fcb9e0d9 [ 1635.902088][T15630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.902102][T15630] RSP: 002b:00007fa8fda44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1635.902121][T15630] RAX: ffffffffffffffda RBX: 00007fa8fce25fa0 RCX: 00007fa8fcb9e0d9 [ 1635.902135][T15630] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000004 [ 1635.902144][T15630] RBP: 00007fa8fda44090 R08: 0000200000000000 R09: 0000000000000000 [ 1635.902155][T15630] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 1635.902167][T15630] R13: 00007fa8fce26038 R14: 00007fa8fce25fa0 R15: 00007fffc1a521a8 [ 1635.902197][T15630] [ 1636.855896][T15646] FAULT_INJECTION: forcing a failure. [ 1636.855896][T15646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.961857][T15646] CPU: 1 UID: 0 PID: 15646 Comm: syz.3.12589 Not tainted syzkaller #0 PREEMPT(full) [ 1636.961883][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1636.961894][T15646] Call Trace: [ 1636.961902][T15646] [ 1636.961911][T15646] dump_stack_lvl+0xe8/0x150 [ 1636.961950][T15646] should_fail_ex+0x40c/0x560 [ 1636.961975][T15646] _copy_from_user+0x2d/0xb0 [ 1636.961999][T15646] do_sys_poll+0x258/0x1110 [ 1636.962034][T15646] ? __lock_acquire+0x683/0x2cf0 [ 1636.962057][T15646] ? __pfx_do_sys_poll+0x10/0x10 [ 1636.962083][T15646] ? aa_file_perm+0x18b/0x15f0 [ 1636.962196][T15646] ? set_user_sigmask+0xcd/0x1c0 [ 1636.962217][T15646] ? __pfx_set_user_sigmask+0x10/0x10 [ 1636.962235][T15646] ? kmem_cache_free+0x182/0x650 [ 1636.962256][T15646] ? fd_install+0x94/0x3d0 [ 1636.962285][T15646] __se_sys_ppoll+0x209/0x2b0 [ 1636.962311][T15646] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1636.962332][T15646] ? __pfx_ksys_write+0x10/0x10 [ 1636.962363][T15646] ? __x64_sys_ppoll+0x20/0xc0 [ 1636.962382][T15646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.962402][T15646] do_syscall_64+0x174/0x580 [ 1636.962425][T15646] ? trace_irq_disable+0x3b/0x140 [ 1636.962446][T15646] ? clear_bhb_loop+0x70/0xc0 [ 1636.962468][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.962486][T15646] RIP: 0033:0x7fa8fcb9e0d9 [ 1636.962504][T15646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.962518][T15646] RSP: 002b:00007fa8fda44028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1636.962538][T15646] RAX: ffffffffffffffda RBX: 00007fa8fce25fa0 RCX: 00007fa8fcb9e0d9 [ 1636.962551][T15646] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 1636.962563][T15646] RBP: 00007fa8fda44090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.962574][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.962585][T15646] R13: 00007fa8fce26038 R14: 00007fa8fce25fa0 R15: 00007fffc1a521a8 [ 1636.962615][T15646] [ 1637.177841][T15169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1637.237226][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.302995][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1637.311380][T15169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1637.367180][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1637.407628][T15658] netlink: 'syz.3.12595': attribute type 1 has an invalid length. [ 1637.436549][T15169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1637.454719][T15660] FAULT_INJECTION: forcing a failure. [ 1637.454719][T15660] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.468215][T15660] CPU: 1 UID: 0 PID: 15660 Comm: syz.6.12592 Not tainted syzkaller #0 PREEMPT(full) [ 1637.468239][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1637.468250][T15660] Call Trace: [ 1637.468258][T15660] [ 1637.468266][T15660] dump_stack_lvl+0xe8/0x150 [ 1637.468296][T15660] should_fail_ex+0x40c/0x560 [ 1637.468320][T15660] should_failslab+0xa8/0x100 [ 1637.468347][T15660] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1637.468368][T15660] ? local_lock_release+0x9c/0x160 [ 1637.468396][T15660] ? __alloc_skb+0x1d7/0x7a0 [ 1637.468419][T15660] ? __alloc_skb+0x1d7/0x7a0 [ 1637.468449][T15660] __alloc_skb+0x1d7/0x7a0 [ 1637.468478][T15660] netlink_sendmsg+0x5d4/0xb40 [ 1637.468511][T15660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1637.468535][T15660] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1637.468566][T15660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1637.468585][T15660] sock_sendmsg_nosec+0x13a/0x180 [ 1637.468611][T15660] ____sys_sendmsg+0x54e/0x850 [ 1637.468636][T15660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1637.468664][T15660] ? import_iovec+0x73/0xa0 [ 1637.468691][T15660] ___sys_sendmsg+0x2a5/0x360 [ 1637.468710][T15660] ? __lock_acquire+0x683/0x2cf0 [ 1637.468736][T15660] ? __pfx____sys_sendmsg+0x10/0x10 [ 1637.468790][T15660] ? __fget_files+0x2a/0x420 [ 1637.468811][T15660] ? __fget_files+0x3a2/0x420 [ 1637.468842][T15660] __x64_sys_sendmsg+0x1b1/0x290 [ 1637.468864][T15660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1637.468909][T15660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.468929][T15660] do_syscall_64+0x174/0x580 [ 1637.468952][T15660] ? trace_irq_disable+0x3b/0x140 [ 1637.468974][T15660] ? clear_bhb_loop+0x70/0xc0 [ 1637.468995][T15660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.469013][T15660] RIP: 0033:0x7f8f08f9e0d9 [ 1637.469030][T15660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.469045][T15660] RSP: 002b:00007f8f09e32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1637.469066][T15660] RAX: ffffffffffffffda RBX: 00007f8f09225fa0 RCX: 00007f8f08f9e0d9 [ 1637.469079][T15660] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000007 [ 1637.469091][T15660] RBP: 00007f8f09e32090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.469102][T15660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.469113][T15660] R13: 00007f8f09226038 R14: 00007f8f09225fa0 R15: 00007fffaff4c878 [ 1637.469142][T15660] [ 1637.546296][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1637.813269][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.985613][T15658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1638.049533][T15668] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1638.134137][T15670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.141372][T15670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.148925][T15670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.156145][T15670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.264144][T15670] bond1: left promiscuous mode [ 1638.272299][T15670] bridge1: left promiscuous mode [ 1638.277722][T15670] bond1: left allmulticast mode [ 1638.287931][T15670] bridge1: left allmulticast mode [ 1638.347603][T15670] bond2: left promiscuous mode [ 1638.359159][T15670] bridge2: left promiscuous mode [ 1638.379126][T15670] bond2: left allmulticast mode [ 1638.394095][T15670] bridge2: left allmulticast mode [ 1638.412376][T15692] netlink: zone id is out of range [ 1638.455336][T15692] netlink: zone id is out of range [ 1638.492076][T15692] netlink: zone id is out of range [ 1638.513897][T15169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1638.530247][T15692] netlink: zone id is out of range [ 1638.563580][T15169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1638.568389][T15692] netlink: zone id is out of range [ 1638.590111][T15692] netlink: zone id is out of range [ 1638.596813][T27805] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1638.620084][T15692] netlink: zone id is out of range [ 1638.636651][T15692] netlink: zone id is out of range [ 1638.657033][T27805] bond3: (slave veth5): making interface the new active one [ 1638.695712][T27805] bond3: active interface up! [ 1638.802816][T15692] vlan0: entered allmulticast mode [ 1638.815903][T15692] bond0: entered allmulticast mode [ 1638.864492][T15692] bond_slave_0: entered allmulticast mode [ 1638.910751][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12601'. [ 1639.464244][T15169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.560744][T15169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.601835][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12607'. [ 1639.637629][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.644853][T12497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.874130][T15741] netlink: 'syz.3.12610': attribute type 1 has an invalid length. [ 1639.899415][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.906679][T12497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.038225][T15741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1640.244293][T15745] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1640.952819][T27820] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1641.039494][T27820] bond4: (slave veth7): making interface the new active one [ 1641.088672][T27820] bond4: active interface up! [ 1641.245502][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12614'. [ 1641.444637][T15769] syzkaller0: entered promiscuous mode [ 1641.460827][T15769] syzkaller0: entered allmulticast mode [ 1641.506337][T15774] FAULT_INJECTION: forcing a failure. [ 1641.506337][T15774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.560553][T15774] CPU: 0 UID: 0 PID: 15774 Comm: syz.6.12615 Not tainted syzkaller #0 PREEMPT(full) [ 1641.560602][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1641.560625][T15774] Call Trace: [ 1641.560642][T15774] [ 1641.560650][T15774] dump_stack_lvl+0xe8/0x150 [ 1641.560679][T15774] should_fail_ex+0x40c/0x560 [ 1641.560704][T15774] _copy_to_user+0x31/0xb0 [ 1641.560730][T15774] simple_read_from_buffer+0xe1/0x170 [ 1641.560759][T15774] proc_fail_nth_read+0x1bb/0x230 [ 1641.560787][T15774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1641.560813][T15774] ? rw_verify_area+0x24a/0x4c0 [ 1641.560838][T15774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1641.560861][T15774] vfs_read+0x213/0xa80 [ 1641.560890][T15774] ? __pfx___mutex_lock+0x10/0x10 [ 1641.560915][T15774] ? __pfx_vfs_read+0x10/0x10 [ 1641.560941][T15774] ? __fget_files+0x2a/0x420 [ 1641.560965][T15774] ? __fget_files+0x3a2/0x420 [ 1641.560985][T15774] ? __fget_files+0x2a/0x420 [ 1641.561015][T15774] ksys_read+0x150/0x270 [ 1641.561040][T15774] ? __pfx_ksys_read+0x10/0x10 [ 1641.561063][T15774] ? __pfx_sock_ioctl+0x10/0x10 [ 1641.561092][T15774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.561111][T15774] do_syscall_64+0x174/0x580 [ 1641.561136][T15774] ? trace_irq_disable+0x3b/0x140 [ 1641.561157][T15774] ? clear_bhb_loop+0x70/0xc0 [ 1641.561180][T15774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.561197][T15774] RIP: 0033:0x7f8f08f5e90e [ 1641.561214][T15774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1641.561229][T15774] RSP: 002b:00007f8f09e31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1641.561246][T15774] RAX: ffffffffffffffda RBX: 00007f8f09e326c0 RCX: 00007f8f08f5e90e [ 1641.561258][T15774] RDX: 000000000000000f RSI: 00007f8f09e320a0 RDI: 000000000000000e [ 1641.561269][T15774] RBP: 00007f8f09e32090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.561280][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.561290][T15774] R13: 00007f8f09226038 R14: 00007f8f09225fa0 R15: 00007fffaff4c878 [ 1641.561322][T15774] [ 1642.229590][T15785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12617'. [ 1642.518147][T15796] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12620'. [ 1643.093586][T15810] udevd[15810]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1643.183227][T15820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1643.342385][T15820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1643.480487][T15826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1643.573156][T12504] net_ratelimit: 1354 callbacks suppressed [ 1643.573176][T12504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.212674][T12501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1646.779789][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1648.276756][T15865] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1648.345175][T15868] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12634'. [ 1648.577005][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12635'. [ 1648.745523][T31951] block nbd8: Receive control failed (result -32) [ 1648.877735][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12636'. [ 1648.919697][T15169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.073754][T15889] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12639'. [ 1649.204603][T15894] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12639'. [ 1649.334498][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.361734][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12639'. [ 1649.420446][T15893] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1649.604442][T15903] netlink: zone id is out of range [ 1649.637953][T15903] netlink: zone id is out of range [ 1649.673795][T15903] netlink: zone id is out of range [ 1649.746081][T15903] netlink: zone id is out of range [ 1649.783691][T15903] netlink: zone id is out of range [ 1649.817618][T15903] netlink: zone id is out of range [ 1649.855715][T15903] netlink: zone id is out of range [ 1649.884629][T15903] netlink: zone id is out of range [ 1649.924985][T15903] netlink: zone id is out of range [ 1650.176167][T15893] bond12 (unregistering): Released all slaves [ 1650.677436][T15902] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 1650.776807][T31951] Bluetooth: hci2: command 0x0406 tx timeout [ 1651.597888][T15169] veth0_vlan: entered promiscuous mode [ 1651.676611][T15169] veth1_vlan: entered promiscuous mode [ 1651.918712][T15169] veth0_macvtap: entered promiscuous mode [ 1651.965384][T15169] veth1_macvtap: entered promiscuous mode [ 1652.056188][T15169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.118651][T15169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.222867][T27805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.264298][T27820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.341169][T27805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.407487][T27805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.797880][T27805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1652.844480][T27805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1652.986373][T12504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.015399][T12504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.815872][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1653.826767][T15974] batman_adv: batadv0: Adding interface: gretap1 [ 1653.852988][T15974] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.894461][T15974] batman_adv: batadv0: Interface activated: gretap1 [ 1654.126913][T15983] syzkaller0: entered promiscuous mode [ 1654.152853][T15983] syzkaller0: entered allmulticast mode [ 1654.631962][T16004] lo speed is unknown, defaulting to 1000 [ 1654.651688][T16015] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12670'. [ 1654.755702][T16018] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12670'. [ 1654.859582][T16022] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12670'. [ 1655.090862][T27805] net_ratelimit: 52 callbacks suppressed [ 1655.090880][T27805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.814546][T16041] FAULT_INJECTION: forcing a failure. [ 1655.814546][T16041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.919944][T16041] CPU: 0 UID: 0 PID: 16041 Comm: syz.2.12678 Not tainted syzkaller #0 PREEMPT(full) [ 1655.919970][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1655.919981][T16041] Call Trace: [ 1655.919989][T16041] [ 1655.919997][T16041] dump_stack_lvl+0xe8/0x150 [ 1655.920035][T16041] should_fail_ex+0x40c/0x560 [ 1655.920060][T16041] _copy_from_user+0x2d/0xb0 [ 1655.920083][T16041] do_sock_getsockopt+0x200/0x7e0 [ 1655.920107][T16041] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1655.920142][T16041] ? __fget_files+0x3a2/0x420 [ 1655.920162][T16041] ? __fget_files+0x2a/0x420 [ 1655.920189][T16041] __x64_sys_getsockopt+0x1a4/0x240 [ 1655.920213][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.920232][T16041] do_syscall_64+0x174/0x580 [ 1655.920253][T16041] ? trace_irq_disable+0x3b/0x140 [ 1655.920275][T16041] ? clear_bhb_loop+0x70/0xc0 [ 1655.920296][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.920313][T16041] RIP: 0033:0x7ffbbcf9e0d9 [ 1655.920330][T16041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.920343][T16041] RSP: 002b:00007ffbbdf0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1655.920361][T16041] RAX: ffffffffffffffda RBX: 00007ffbbd226090 RCX: 00007ffbbcf9e0d9 [ 1655.920373][T16041] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000003 [ 1655.920383][T16041] RBP: 00007ffbbdf0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.920394][T16041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.920405][T16041] R13: 00007ffbbd226128 R14: 00007ffbbd226090 R15: 00007ffe7a098798 [ 1655.920432][T16041] [ 1656.260509][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12680'. [ 1656.313448][T31951] Bluetooth: hci4: command 0x0405 tx timeout [ 1656.359127][T16045] IPv6: Can't replace route, no match found [ 1656.443154][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12679'. [ 1656.999544][T16070] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1657.305898][T16082] netlink: 'syz.5.12688': attribute type 10 has an invalid length. [ 1657.404175][T16082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1657.539059][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12694'. [ 1657.625966][T16093] IPv6: Can't replace route, no match found [ 1657.654543][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1657.694985][T16086] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12688'. [ 1657.799998][T16082] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1658.021780][T16106] batman_adv: batadv0: Adding interface: gretap1 [ 1658.039851][T16106] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.099839][T16106] batman_adv: batadv0: Interface activated: gretap1 [ 1658.182203][T16112] FAULT_INJECTION: forcing a failure. [ 1658.182203][T16112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1658.257998][T16112] CPU: 1 UID: 0 PID: 16112 Comm: syz.2.12700 Not tainted syzkaller #0 PREEMPT(full) [ 1658.258024][T16112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1658.258034][T16112] Call Trace: [ 1658.258043][T16112] [ 1658.258052][T16112] dump_stack_lvl+0xe8/0x150 [ 1658.258082][T16112] should_fail_ex+0x40c/0x560 [ 1658.258108][T16112] prepare_alloc_pages+0x230/0x650 [ 1658.258142][T16112] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1658.258169][T16112] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1658.258196][T16112] ? __pfx_policy_nodemask+0x10/0x10 [ 1658.258225][T16112] ? __lock_acquire+0x683/0x2cf0 [ 1658.258251][T16112] alloc_pages_mpol+0x212/0x380 [ 1658.258281][T16112] folio_alloc_mpol_noprof+0x39/0x160 [ 1658.258308][T16112] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1658.258335][T16112] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1658.258359][T16112] ? __pte_offset_map+0x29/0x240 [ 1658.258378][T16112] ? __pte_offset_map+0x29/0x240 [ 1658.258399][T16112] do_pte_missing+0x173a/0x34b0 [ 1658.258438][T16112] handle_mm_fault+0x1b36/0x3080 [ 1658.258473][T16112] ? handle_mm_fault+0xec/0x3080 [ 1658.258505][T16112] ? __pfx_handle_mm_fault+0x10/0x10 [ 1658.258524][T16112] ? follow_page_pte+0x6ce/0xe70 [ 1658.258552][T16112] ? __pfx_follow_page_pte+0x10/0x10 [ 1658.258583][T16112] __get_user_pages+0x1678/0x2720 [ 1658.258642][T16112] __gup_longterm_locked+0xd52/0x15c0 [ 1658.258669][T16112] ? gup_fast_fallback+0x20d/0x20e0 [ 1658.258689][T16112] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1658.258722][T16112] gup_fast_fallback+0x1d8c/0x20e0 [ 1658.258771][T16112] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1658.258796][T16112] ? rcu_is_watching+0x15/0xb0 [ 1658.258833][T16112] ? is_valid_gup_args+0x11f/0x200 [ 1658.258860][T16112] ? pin_user_pages_fast+0x4d/0xb0 [ 1658.258880][T16112] iov_iter_extract_pages+0x3a1/0x690 [ 1658.258914][T16112] rds_info_getsockopt+0x28b/0x770 [ 1658.259026][T16112] ? kstrtouint+0x6e/0xe0 [ 1658.259048][T16112] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1658.259080][T16112] ? __might_fault+0xaf/0x130 [ 1658.259101][T16112] ? __might_fault+0xaf/0x130 [ 1658.259128][T16112] rds_getsockopt+0x38b/0x600 [ 1658.259187][T16112] ? __pfx_rds_getsockopt+0x10/0x10 [ 1658.259221][T16112] do_sock_getsockopt+0x6ae/0x7e0 [ 1658.259247][T16112] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1658.259283][T16112] ? __fget_files+0x3a2/0x420 [ 1658.259305][T16112] ? __fget_files+0x2a/0x420 [ 1658.259333][T16112] __x64_sys_getsockopt+0x1a4/0x240 [ 1658.259358][T16112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.259379][T16112] do_syscall_64+0x174/0x580 [ 1658.259401][T16112] ? trace_irq_disable+0x3b/0x140 [ 1658.259422][T16112] ? clear_bhb_loop+0x70/0xc0 [ 1658.259444][T16112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.259461][T16112] RIP: 0033:0x7ffbbcf9e0d9 [ 1658.259480][T16112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.259495][T16112] RSP: 002b:00007ffbbdf2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1658.259514][T16112] RAX: ffffffffffffffda RBX: 00007ffbbd225fa0 RCX: 00007ffbbcf9e0d9 [ 1658.259527][T16112] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000004 [ 1658.259539][T16112] RBP: 00007ffbbdf2d090 R08: 0000200000000000 R09: 0000000000000000 [ 1658.259551][T16112] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 1658.259562][T16112] R13: 00007ffbbd226038 R14: 00007ffbbd225fa0 R15: 00007ffe7a098798 [ 1658.259594][T16112] [ 1659.126542][T16133] sctp: [Deprecated]: syz.3.12708 (pid 16133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1659.126542][T16133] Use struct sctp_sack_info instead [ 1659.233613][T16138] netlink: 'syz.6.12709': attribute type 1 has an invalid length. [ 1659.247071][T16139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1659.347823][T16143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12712'. [ 1659.358286][T16139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1659.470364][T16138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1659.485701][T16139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1659.530902][T16140] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1659.661250][T16144] bond2: left promiscuous mode [ 1659.668775][T16144] bridge0: left promiscuous mode [ 1659.683428][T16144] bond2: left allmulticast mode [ 1659.689680][T16144] bridge0: left allmulticast mode [ 1659.741061][T27803] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.770013][T27803] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.799593][T16151] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 1659.799950][T27803] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1659.944239][T27803] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1659.973959][T27803] bond3: (slave veth7): making interface the new active one [ 1660.003097][T27803] bond3: active interface up! [ 1660.103438][T27803] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1660.296903][T27803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.342772][T16168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1660.378621][T16167] syzkaller0: entered promiscuous mode [ 1660.405284][T16167] syzkaller0: entered allmulticast mode [ 1660.440942][T16172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1660.527539][T16175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12717'. [ 1660.635055][T16178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1662.014686][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12731'. [ 1662.066255][T16204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12731'. [ 1662.412756][T16223] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 1662.714247][T16237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12744'. [ 1662.774478][T27803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.917205][T16241] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1663.313292][T16259] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1663.416075][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.632991][T16260] syzkaller0: entered promiscuous mode [ 1663.670164][T16260] syzkaller0: entered allmulticast mode [ 1663.856624][T16283] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12762'. [ 1667.895662][T27808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.557611][T12504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.736059][T16296] tipc: Enabling of bearer rejected, failed to enable media [ 1669.050851][T16321] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12772'. [ 1669.064758][T16325] netlink: 'syz.5.12773': attribute type 11 has an invalid length. [ 1669.214118][T16330] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12772'. [ 1669.251124][T16330] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12772'. [ 1669.366994][T16339] netlink: 'syz.4.12778': attribute type 1 has an invalid length. [ 1669.421717][T16341] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12777'. [ 1669.502181][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12778'. [ 1669.589335][T16339] ipvlan1: entered allmulticast mode [ 1669.637348][T16339] veth0_vlan: entered allmulticast mode [ 1670.275336][ T29] audit: type=1800 audit(1786087533.835:24): pid=16351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12779" name="r" dev="tmpfs" ino=135 res=0 errno=0 [ 1671.290775][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12788'. [ 1671.430339][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12789'. [ 1671.442914][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12788'. [ 1671.499435][T16382] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12789'. [ 1671.528200][T16375] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12788'. [ 1672.943022][T16383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.950757][T16383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.011115][T27805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.025735][ T1566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.341985][T16383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.399327][T16383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.531010][T16437] xt_ecn: cannot match TCP bits for non-tcp packets [ 1673.565066][T16383] ipvlan1: left allmulticast mode [ 1673.581182][T16383] veth0_vlan: left allmulticast mode [ 1673.662957][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1673.699210][T16383] batman_adv: batadv0: Interface deactivated: gretap1 [ 1673.726821][T27808] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.075935][T16439] lo speed is unknown, defaulting to 1000 [ 1674.087596][T12501] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.097560][T16447] netlink: 228 bytes leftover after parsing attributes in process `syz.5.12806'. [ 1674.271537][T16451] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1674.490155][T27803] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.584331][T16457] netlink: 'syz.3.12812': attribute type 10 has an invalid length. [ 1674.650441][T16462] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12812'. [ 1674.747511][T16457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1674.813248][T16457] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1674.826434][T16466] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12816'. [ 1674.851107][T27803] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.963266][T16467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12816'. [ 1675.051954][T16469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12816'. [ 1675.234795][T27815] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa3 [ 1675.386915][T16488] syzkaller0: entered promiscuous mode [ 1675.421696][T16488] syzkaller0: entered allmulticast mode [ 1676.355980][T16497] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1676.952046][T16515] xt_hashlimit: max too large, truncated to 1048576 [ 1677.050615][T16521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12831'. [ 1677.080060][T16521] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1677.233220][T16527] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1677.240636][T12501] IPVS: starting estimator thread 0... [ 1677.331363][T16528] IPVS: using max 29 ests per chain, 69600 per kthread [ 1677.644274][T16535] netlink: 'syz.5.12836': attribute type 1 has an invalid length. [ 1677.653328][T16535] netlink: 'syz.5.12836': attribute type 2 has an invalid length. [ 1677.664570][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12836'. [ 1678.105197][T16474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1678.360109][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1678.369329][T16545] openvswitch: netlink: IP tunnel dst address not specified [ 1678.460438][T16543] netlink: 'syz.4.12839': attribute type 1 has an invalid length. [ 1678.698484][T16543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1678.733550][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12843'. [ 1678.767160][T16550] 8021q: VLANs not supported on vxcan1 [ 1678.776313][T12501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1678.818601][T16550] netlink: 'syz.2.12842': attribute type 2 has an invalid length. [ 1678.859476][T16550] netlink: 'syz.2.12842': attribute type 2 has an invalid length. [ 1678.910237][T16552] bond1: (slave gretap2): making interface the new active one [ 1678.948673][T16552] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1678.986171][T16557] syzkaller0: entered promiscuous mode [ 1679.002850][T16557] syzkaller0: entered allmulticast mode [ 1679.415132][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.425562][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12848'. [ 1679.717764][T16579] gtp0: entered promiscuous mode [ 1679.737427][T16579] gtp0: entered allmulticast mode [ 1679.746008][T16582] xt_hashlimit: max too large, truncated to 1048576 [ 1679.973757][T16588] netlink: 'syz.6.12854': attribute type 10 has an invalid length. [ 1680.007035][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12853'. [ 1680.044498][T16591] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12854'. [ 1680.053305][T16588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1680.117238][T16588] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1680.464958][T16609] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12859'. [ 1680.728741][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12862'. [ 1680.755125][T16617] netlink: 'syz.4.12865': attribute type 1 has an invalid length. [ 1680.764450][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12862'. [ 1680.809304][T16612] netlink: 'syz.2.12862': attribute type 10 has an invalid length. [ 1680.936926][T16623] veth3: entered allmulticast mode [ 1680.952728][T16623] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1681.006291][T16617] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1681.382696][T16638] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1681.532889][T16640] netlink: 'syz.4.12870': attribute type 10 has an invalid length. [ 1681.589706][T16643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12870'. [ 1681.691388][T16640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1681.755202][T16640] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1681.772901][T16645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1682.186332][T16656] netlink: 'syz.4.12876': attribute type 1 has an invalid length. [ 1682.391784][T16656] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1682.418330][T16668] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1682.613001][T22726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.625778][T16662] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1682.896600][T16665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.915295][T16665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.970248][T16665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.019122][T16690] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1683.042994][T16690] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1683.135905][T16665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.153724][T16665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.185568][T16665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1683.206617][T16665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1683.229130][T16665] veth1_vlan: left promiscuous mode [ 1683.237975][T16665] veth0_vlan: left promiscuous mode [ 1683.251914][T16665] veth0_vlan: entered promiscuous mode [ 1683.276647][T16665] veth1_vlan: entered promiscuous mode [ 1683.301985][T16665] veth1_macvtap: left promiscuous mode [ 1683.311248][T16665] veth0_macvtap: left promiscuous mode [ 1683.318332][T16665] veth0_macvtap: entered promiscuous mode [ 1683.326179][T16665] veth1_macvtap: entered promiscuous mode [ 1683.352533][T16665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1683.365310][T16665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1683.378618][T16665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1683.394820][T16665] batman_adv: batadv0: Interface activated: gretap1 [ 1683.415687][T16665] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1683.428160][T16665] veth3: left allmulticast mode [ 1683.439496][T16657] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1683.478277][T16670] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1683.516159][T16670] bond3: (slave batadv1): making interface the new active one [ 1683.543003][T16701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12889'. [ 1683.546051][T16670] batadv1: entered promiscuous mode [ 1683.558615][T16670] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1683.590324][T12501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.597593][T12501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.645452][T12501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.652715][T12501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.860352][T12501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.889704][T12501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.928140][T12501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.961917][T12501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.025750][T12501] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1684.030784][T16712] netlink: 'syz.3.12893': attribute type 1 has an invalid length. [ 1684.059654][T12501] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1684.094021][T16712] netlink: 'syz.3.12893': attribute type 4 has an invalid length. [ 1684.106078][T12501] bond2: (slave veth3): making interface the new active one [ 1684.137036][T16712] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12893'. [ 1684.173078][T16722] netlink: 64 bytes leftover after parsing attributes in process `syz.6.12895'. [ 1684.177323][T12501] bond2: active interface up! [ 1684.182933][ T5846] hid (null): report_id 33474 is invalid [ 1684.236798][ T5846] hid-generic 0005:4C4A:5505.0003: collection stack underflow [ 1684.258004][ T5846] hid-generic 0005:4C4A:5505.0003: item 0 2 0 12 parsing failed [ 1684.275996][ T5846] hid-generic 0005:4C4A:5505.0003: probe with driver hid-generic failed with error -22 [ 1684.514722][T12503] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1684.540209][T27815] net_ratelimit: 63 callbacks suppressed [ 1684.540227][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1684.813201][T16743] __nla_validate_parse: 3 callbacks suppressed [ 1684.813219][T16743] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12899'. [ 1684.983815][T16747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12899'. [ 1685.099778][T16747] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12899'. [ 1685.170723][T27825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.858763][T16767] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1686.447992][T16780] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12914'. [ 1686.474594][T16788] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1686.830780][T16797] vlan1: entered promiscuous mode [ 1686.853263][T16797] hsr0: entered promiscuous mode [ 1686.868145][T16797] vlan1: entered allmulticast mode [ 1686.887831][T16797] hsr0: entered allmulticast mode [ 1686.915926][T16797] hsr_slave_0: entered allmulticast mode [ 1686.940524][T16797] hsr_slave_1: entered allmulticast mode [ 1687.355418][T16810] netlink: 19 bytes leftover after parsing attributes in process `syz.5.12923'. [ 1687.420564][T16810] netlink: 19 bytes leftover after parsing attributes in process `syz.5.12923'. [ 1687.551844][T16815] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1687.631768][T16811] team0: Port device veth17 added [ 1687.896211][T16821] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12927'. [ 1687.896462][T16825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12929'. [ 1687.936443][T16821] syzkaller1: entered promiscuous mode [ 1687.961137][T16821] syzkaller1: entered allmulticast mode [ 1688.441352][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12935'. [ 1688.557878][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12936'. [ 1688.592332][T16856] IPv6: Can't replace route, no match found [ 1688.790881][T16864] netlink: 'syz.6.12942': attribute type 10 has an invalid length. [ 1688.958531][T16870] FAULT_INJECTION: forcing a failure. [ 1688.958531][T16870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1688.976067][T16870] CPU: 1 UID: 0 PID: 16870 Comm: syz.6.12945 Not tainted syzkaller #0 PREEMPT(full) [ 1688.976093][T16870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1688.976104][T16870] Call Trace: [ 1688.976113][T16870] [ 1688.976121][T16870] dump_stack_lvl+0xe8/0x150 [ 1688.976152][T16870] should_fail_ex+0x40c/0x560 [ 1688.976174][T16870] prepare_alloc_pages+0x230/0x650 [ 1688.976203][T16870] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1688.976228][T16870] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1688.976255][T16870] ? __pfx_policy_nodemask+0x10/0x10 [ 1688.976281][T16870] ? __lock_acquire+0x683/0x2cf0 [ 1688.976306][T16870] alloc_pages_mpol+0x212/0x380 [ 1688.976337][T16870] folio_alloc_mpol_noprof+0x39/0x160 [ 1688.976364][T16870] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1688.976392][T16870] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1688.976416][T16870] ? __pte_offset_map+0x29/0x240 [ 1688.976435][T16870] ? __pte_offset_map+0x29/0x240 [ 1688.976458][T16870] do_pte_missing+0x173a/0x34b0 [ 1688.976499][T16870] handle_mm_fault+0x1b36/0x3080 [ 1688.976538][T16870] ? handle_mm_fault+0xec/0x3080 [ 1688.976564][T16870] ? __pfx_handle_mm_fault+0x10/0x10 [ 1688.976582][T16870] ? follow_page_pte+0x6ce/0xe70 [ 1688.976602][T16870] ? __pfx_follow_page_pte+0x10/0x10 [ 1688.976623][T16870] __get_user_pages+0x1678/0x2720 [ 1688.976667][T16870] __gup_longterm_locked+0xd52/0x15c0 [ 1688.976686][T16870] ? gup_fast_fallback+0x20d/0x20e0 [ 1688.976699][T16870] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1688.976722][T16870] gup_fast_fallback+0x1d8c/0x20e0 [ 1688.976758][T16870] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1688.976776][T16870] ? rcu_is_watching+0x15/0xb0 [ 1688.976795][T16870] ? is_valid_gup_args+0x11f/0x200 [ 1688.976816][T16870] ? pin_user_pages_fast+0x4d/0xb0 [ 1688.976830][T16870] iov_iter_extract_pages+0x3a1/0x690 [ 1688.976854][T16870] rds_info_getsockopt+0x28b/0x770 [ 1688.976870][T16870] ? kstrtouint+0x6e/0xe0 [ 1688.976886][T16870] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1688.976910][T16870] ? __might_fault+0xaf/0x130 [ 1688.976923][T16870] ? __might_fault+0xaf/0x130 [ 1688.976939][T16870] rds_getsockopt+0x38b/0x600 [ 1688.976959][T16870] ? __pfx_rds_getsockopt+0x10/0x10 [ 1688.976983][T16870] do_sock_getsockopt+0x6ae/0x7e0 [ 1688.977003][T16870] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1688.977033][T16870] ? __fget_files+0x3a2/0x420 [ 1688.977048][T16870] ? __fget_files+0x2a/0x420 [ 1688.977068][T16870] __x64_sys_getsockopt+0x1a4/0x240 [ 1688.977085][T16870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.977100][T16870] do_syscall_64+0x174/0x580 [ 1688.977116][T16870] ? trace_irq_disable+0x3b/0x140 [ 1688.977132][T16870] ? clear_bhb_loop+0x70/0xc0 [ 1688.977148][T16870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.977161][T16870] RIP: 0033:0x7f8f08f9e0d9 [ 1688.977175][T16870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.977186][T16870] RSP: 002b:00007f8f09e32028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1688.977202][T16870] RAX: ffffffffffffffda RBX: 00007f8f09225fa0 RCX: 00007f8f08f9e0d9 [ 1688.977211][T16870] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000004 [ 1688.977219][T16870] RBP: 00007f8f09e32090 R08: 0000200000000000 R09: 0000000000000000 [ 1688.977228][T16870] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1688.977236][T16870] R13: 00007f8f09226038 R14: 00007f8f09225fa0 R15: 00007fffaff4c878 [ 1688.977258][T16870] [ 1689.423986][T16875] netlink: 'syz.4.12947': attribute type 1 has an invalid length. [ 1689.565271][T16875] bond4: entered promiscuous mode [ 1689.571997][T16875] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1689.637749][T16875] bond4: (slave bridge2): making interface the new active one [ 1689.647673][T16875] bridge2: entered promiscuous mode [ 1689.670276][T16875] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 1689.745298][T16893] netlink: 'syz.4.12951': attribute type 11 has an invalid length. [ 1689.756820][T16873] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1689.972302][T16903] __nla_validate_parse: 6 callbacks suppressed [ 1689.972324][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12955'. [ 1690.031982][T16903] netlink: 'syz.4.12955': attribute type 10 has an invalid length. [ 1690.059412][T16903] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12955'. [ 1690.075346][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12954'. [ 1690.159240][T16903] geneve2: entered promiscuous mode [ 1690.168265][T16903] geneve2: entered allmulticast mode [ 1690.264166][T16914] syzkaller0: entered promiscuous mode [ 1690.293052][T27811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1690.319655][T16914] syzkaller0: entered allmulticast mode [ 1690.368304][T16916] tipc: Enabled bearer , priority 10 [ 1690.381248][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12960'. [ 1690.466514][T16912] tipc: Resetting bearer [ 1690.642147][T16912] tipc: Disabling bearer [ 1690.743252][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12965'. [ 1690.942219][T27811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.312295][T16936] bond1 (unregistering): Released all slaves [ 1691.330438][T16951] netlink: 428 bytes leftover after parsing attributes in process `syz.6.12971'. [ 1691.387983][T16951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12971'. [ 1691.459688][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12972'. [ 1691.732376][T31951] Bluetooth: hci5: command 0x0405 tx timeout [ 1691.905398][T16973] netlink: 'syz.6.12981': attribute type 1 has an invalid length. [ 1691.910424][T16975] FAULT_INJECTION: forcing a failure. [ 1691.910424][T16975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1692.007549][T16975] CPU: 0 UID: 0 PID: 16975 Comm: syz.4.12976 Not tainted syzkaller #0 PREEMPT(full) [ 1692.007574][T16975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1692.007584][T16975] Call Trace: [ 1692.007593][T16975] [ 1692.007600][T16975] dump_stack_lvl+0xe8/0x150 [ 1692.007629][T16975] should_fail_ex+0x40c/0x560 [ 1692.007655][T16975] _copy_to_user+0x31/0xb0 [ 1692.007680][T16975] simple_read_from_buffer+0xe1/0x170 [ 1692.007708][T16975] proc_fail_nth_read+0x1bb/0x230 [ 1692.007737][T16975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1692.007764][T16975] ? rw_verify_area+0x24a/0x4c0 [ 1692.007791][T16975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1692.007813][T16975] vfs_read+0x213/0xa80 [ 1692.007843][T16975] ? __pfx___mutex_lock+0x10/0x10 [ 1692.007868][T16975] ? __pfx_vfs_read+0x10/0x10 [ 1692.007893][T16975] ? __fget_files+0x2a/0x420 [ 1692.007919][T16975] ? __fget_files+0x3a2/0x420 [ 1692.007939][T16975] ? __fget_files+0x2a/0x420 [ 1692.007969][T16975] ksys_read+0x150/0x270 [ 1692.007993][T16975] ? __pfx_ksys_read+0x10/0x10 [ 1692.008025][T16975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.008045][T16975] do_syscall_64+0x174/0x580 [ 1692.008066][T16975] ? trace_irq_disable+0x3b/0x140 [ 1692.008087][T16975] ? clear_bhb_loop+0x70/0xc0 [ 1692.008109][T16975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1692.008126][T16975] RIP: 0033:0x7f4ff335e90e [ 1692.008142][T16975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1692.008156][T16975] RSP: 002b:00007f4ff431afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1692.008183][T16975] RAX: ffffffffffffffda RBX: 00007f4ff431b6c0 RCX: 00007f4ff335e90e [ 1692.008196][T16975] RDX: 000000000000000f RSI: 00007f4ff431b0a0 RDI: 0000000000000004 [ 1692.008207][T16975] RBP: 00007f4ff431b090 R08: 0000000000000000 R09: 0000000000000000 [ 1692.008219][T16975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1692.008230][T16975] R13: 00007f4ff3626038 R14: 00007f4ff3625fa0 R15: 00007ffccd0f1448 [ 1692.008260][T16975] [ 1692.237890][T16973] bond4: entered promiscuous mode [ 1692.278532][T16980] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12981'. [ 1692.343032][T16973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1692.387588][T16980] bond4: entered allmulticast mode [ 1692.462583][ T9470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.520391][T16973] bond4: (slave bridge3): making interface the new active one [ 1692.558217][T16973] bridge3: entered promiscuous mode [ 1692.571264][T16973] bridge3: entered allmulticast mode [ 1692.581108][T16973] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1692.681929][T16993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12985'. [ 1692.959298][T17005] netlink: 'syz.3.12991': attribute type 10 has an invalid length. [ 1693.683037][T17036] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1694.427678][T17056] netlink: 'syz.5.13009': attribute type 1 has an invalid length. [ 1694.648963][T17060] gretap2: entered allmulticast mode [ 1694.720150][T17060] bond12: (slave gretap2): making interface the new active one [ 1694.783585][T17060] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 1694.837152][T17027] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1694.919075][T17027] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1694.962910][T17027] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1695.102437][T17079] __nla_validate_parse: 9 callbacks suppressed [ 1695.102457][T17079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13015'. [ 1695.162282][T17080] netlink: 666 bytes leftover after parsing attributes in process `syz.3.13015'. [ 1695.365720][T17084] netlink: 'syz.5.13018': attribute type 1 has an invalid length. [ 1695.493341][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13018'. [ 1695.620937][T17084] bond13: entered promiscuous mode [ 1695.635236][T17084] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1695.671371][T12504] batadv1: left promiscuous mode [ 1695.716740][T17087] bond13: entered allmulticast mode [ 1695.727835][T17093] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 1695.793745][T17094] bond13: (slave bridge10): making interface the new active one [ 1695.819013][T17094] bridge10: entered promiscuous mode [ 1695.832633][T17094] bridge10: entered allmulticast mode [ 1695.859171][T17094] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 1696.053389][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.064305][T12503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.271964][T17108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13024'. [ 1696.646804][T17120] syzkaller0: entered promiscuous mode [ 1696.687271][T17120] syzkaller0: entered allmulticast mode [ 1696.740769][T17124] tipc: Enabled bearer , priority 10 [ 1696.786348][T17118] tipc: Resetting bearer [ 1696.815753][T17122] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13029'. [ 1696.925090][T17118] tipc: Disabling bearer [ 1697.030041][T17128] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13029'. [ 1697.229115][T17142] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13029'. [ 1697.367616][T17146] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1697.555683][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13033'. [ 1697.903966][T17154] FAULT_INJECTION: forcing a failure. [ 1697.903966][T17154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1698.031494][T17154] CPU: 1 UID: 0 PID: 17154 Comm: syz.4.13036 Not tainted syzkaller #0 PREEMPT(full) [ 1698.031520][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1698.031532][T17154] Call Trace: [ 1698.031540][T17154] [ 1698.031548][T17154] dump_stack_lvl+0xe8/0x150 [ 1698.031579][T17154] should_fail_ex+0x40c/0x560 [ 1698.031605][T17154] prepare_alloc_pages+0x230/0x650 [ 1698.031645][T17154] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1698.031672][T17154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1698.031700][T17154] ? __pfx_policy_nodemask+0x10/0x10 [ 1698.031728][T17154] ? __lock_acquire+0x683/0x2cf0 [ 1698.031753][T17154] alloc_pages_mpol+0x212/0x380 [ 1698.031783][T17154] folio_alloc_mpol_noprof+0x39/0x160 [ 1698.031810][T17154] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1698.031837][T17154] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1698.031862][T17154] ? __pte_offset_map+0x29/0x240 [ 1698.031881][T17154] ? __pte_offset_map+0x29/0x240 [ 1698.031903][T17154] do_pte_missing+0x173a/0x34b0 [ 1698.031944][T17154] handle_mm_fault+0x1b36/0x3080 [ 1698.031976][T17154] ? handle_mm_fault+0xec/0x3080 [ 1698.032003][T17154] ? __pfx_handle_mm_fault+0x10/0x10 [ 1698.032022][T17154] ? follow_page_pte+0x6ce/0xe70 [ 1698.032050][T17154] ? __pfx_follow_page_pte+0x10/0x10 [ 1698.032080][T17154] __get_user_pages+0x1678/0x2720 [ 1698.032137][T17154] __gup_longterm_locked+0xd52/0x15c0 [ 1698.032164][T17154] ? gup_fast_fallback+0x20d/0x20e0 [ 1698.032183][T17154] ? sanity_check_pinned_pages+0x817/0x8d0 [ 1698.032216][T17154] gup_fast_fallback+0x1d8c/0x20e0 [ 1698.032265][T17154] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1698.032291][T17154] ? rcu_is_watching+0x15/0xb0 [ 1698.032316][T17154] ? is_valid_gup_args+0x11f/0x200 [ 1698.032344][T17154] ? pin_user_pages_fast+0x4d/0xb0 [ 1698.032364][T17154] iov_iter_extract_pages+0x3a1/0x690 [ 1698.032397][T17154] rds_info_getsockopt+0x28b/0x770 [ 1698.032418][T17154] ? kstrtouint+0x6e/0xe0 [ 1698.032439][T17154] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1698.032472][T17154] ? __might_fault+0xaf/0x130 [ 1698.032491][T17154] ? __might_fault+0xaf/0x130 [ 1698.032516][T17154] rds_getsockopt+0x38b/0x600 [ 1698.032544][T17154] ? __pfx_rds_getsockopt+0x10/0x10 [ 1698.032578][T17154] do_sock_getsockopt+0x6ae/0x7e0 [ 1698.032604][T17154] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1698.032647][T17154] ? __fget_files+0x3a2/0x420 [ 1698.032668][T17154] ? __fget_files+0x2a/0x420 [ 1698.032696][T17154] __x64_sys_getsockopt+0x1a4/0x240 [ 1698.032722][T17154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.032742][T17154] do_syscall_64+0x174/0x580 [ 1698.032765][T17154] ? trace_irq_disable+0x3b/0x140 [ 1698.032786][T17154] ? clear_bhb_loop+0x70/0xc0 [ 1698.032808][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.032827][T17154] RIP: 0033:0x7f4ff339e0d9 [ 1698.032844][T17154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.032859][T17154] RSP: 002b:00007f4ff431b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1698.032878][T17154] RAX: ffffffffffffffda RBX: 00007f4ff3625fa0 RCX: 00007f4ff339e0d9 [ 1698.032891][T17154] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000004 [ 1698.032903][T17154] RBP: 00007f4ff431b090 R08: 0000200000000000 R09: 0000000000000000 [ 1698.032915][T17154] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 1698.032926][T17154] R13: 00007f4ff3626038 R14: 00007f4ff3625fa0 R15: 00007ffccd0f1448 [ 1698.032956][T17154] [ 1698.957281][T17169] netlink: 'syz.5.13042': attribute type 1 has an invalid length. [ 1699.042970][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13042'. [ 1699.081643][T17169] bond14: entered promiscuous mode [ 1699.087949][T17169] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1699.107171][T17170] bond14: entered allmulticast mode [ 1699.246906][T17169] bond14: (slave bridge11): making interface the new active one [ 1699.278762][T17169] bridge11: entered promiscuous mode [ 1699.290703][T17169] bridge11: entered allmulticast mode [ 1699.306487][T17169] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 1699.794097][T17197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.847883][T17197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1700.315215][T17209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13054'. [ 1700.371288][T17209] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1700.392021][T17209] bond5 (unregistering): Released all slaves [ 1700.455934][T17217] netlink: 'syz.6.13057': attribute type 1 has an invalid length. [ 1700.522399][T17217] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1700.648431][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13057'. [ 1700.744624][T17221] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1700.957829][T17217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1700.998863][T17217] gtp0: left promiscuous mode [ 1701.017862][T17239] netlink: 428 bytes leftover after parsing attributes in process `syz.5.13063'. [ 1701.022696][T17217] gtp0: left allmulticast mode [ 1701.039140][T17217] bond4: left promiscuous mode [ 1701.044701][T17217] bridge3: left promiscuous mode [ 1701.050602][T17217] bond4: left allmulticast mode [ 1701.055631][T17217] bridge3: left allmulticast mode [ 1701.101945][T17225] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1701.114060][T17225] bond5: (slave batadv2): making interface the new active one [ 1701.123658][T17225] batadv2: entered promiscuous mode [ 1701.129589][T17225] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 1701.173733][T27825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.246846][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13061'. [ 1701.277458][T17239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13063'. [ 1701.317275][T12504] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1701.653642][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13065'. [ 1701.836133][ T1566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.846213][T27825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.553298][T17280] No such timeout policy "syz0" [ 1706.083480][T17300] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1706.291463][T27811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.363518][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13083'. [ 1706.576217][T17309] netlink: 'syz.5.13083': attribute type 16 has an invalid length. [ 1706.624557][T17309] netlink: 'syz.5.13083': attribute type 17 has an invalid length. [ 1706.724566][T17321] netlink: 'syz.3.13087': attribute type 10 has an invalid length. [ 1706.838371][T17322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13087'. [ 1706.856163][T17309] bridge0: left promiscuous mode [ 1706.884545][T17309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1706.908803][T17309] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.948726][T17309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1707.458474][T17309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1707.497528][T17309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1707.547928][T17309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1707.576464][T27811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1707.584931][T17309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1707.667036][T17332] netlink: 'syz.2.13089': attribute type 40 has an invalid length. [ 1707.707542][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1707.742414][T17334] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1707.767323][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1707.785465][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1707.835192][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1707.881418][T17309] batman_adv: batadv0: Interface activated: gretap1 [ 1707.905332][T17309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1707.981668][T17309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1708.003260][T17309] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1708.032334][T17309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1708.057062][T17309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1708.077038][T17309] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1708.092558][T17309] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 1708.104259][T17309] bridge5: left promiscuous mode [ 1708.118254][T17309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1708.134774][T17309] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1708.146026][T17309] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1708.159443][T17309] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1708.172279][T17309] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1708.183582][T17309] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1708.195511][T17309] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1708.204268][T17309] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1708.218355][T17309] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1708.231072][T17309] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1708.271134][T17309] vlan0: left allmulticast mode [ 1708.288803][T17309] bond0: left allmulticast mode [ 1708.307443][T17309] bond_slave_0: left allmulticast mode [ 1708.330959][T17309] vlan1: left promiscuous mode [ 1708.341129][T17309] hsr0: left promiscuous mode [ 1708.357095][T17309] vlan1: left allmulticast mode [ 1708.373959][T17309] hsr0: left allmulticast mode [ 1708.387650][T17309] hsr_slave_0: left allmulticast mode [ 1708.412614][T17309] hsr_slave_1: left allmulticast mode [ 1708.447988][T17309] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1708.477984][T17309] gretap2: left allmulticast mode [ 1708.499018][T17309] bond13: left promiscuous mode [ 1708.517060][T17309] bridge10: left promiscuous mode [ 1708.532605][T17309] bond13: left allmulticast mode [ 1708.547078][T17309] bridge10: left allmulticast mode [ 1708.566014][T17309] bond14: left promiscuous mode [ 1708.581408][T17309] bridge11: left promiscuous mode [ 1708.594531][T17309] bond14: left allmulticast mode [ 1708.607425][T17309] bridge11: left allmulticast mode [ 1708.634584][T16426] bridge0: entered promiscuous mode [ 1708.644184][T16426] bridge5: entered promiscuous mode [ 1708.672370][T27815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.679611][T27815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.733746][T27815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.740996][T27815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.012086][T12504] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.063300][T12504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.120494][T17343] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1709.222325][T12503] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.291136][T12503] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.353251][T17356] netlink: 'syz.5.13097': attribute type 10 has an invalid length. [ 1709.407242][T27815] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.462222][T27815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.526601][T27815] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1709.556615][T27815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.759528][T17366] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1710.000193][T17378] netlink: 'syz.5.13106': attribute type 1 has an invalid length. [ 1710.058672][T17378] bond15: entered promiscuous mode [ 1710.069081][T17378] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1710.286418][T17378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13106'. [ 1710.317239][T17378] bond15: entered allmulticast mode [ 1710.458813][T17378] bond15: (slave bridge12): making interface the new active one [ 1710.499320][T17378] bridge12: entered promiscuous mode [ 1710.521521][T17378] bridge12: entered allmulticast mode [ 1710.558994][T17378] bond15: (slave bridge12): Enslaving as an active interface with an up link [ 1710.782867][T17394] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13109'. [ 1710.871343][T17398] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13109'. [ 1710.966138][T17400] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13109'. [ 1711.022387][T17396] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13110'. [ 1711.582961][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.730834][T13607] Bluetooth: hci4: command 0x0405 tx timeout [ 1712.052778][T27809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.143612][T17438] netlink: 'syz.5.13118': attribute type 21 has an invalid length. [ 1712.331311][T17442] netlink: 'syz.3.13121': attribute type 1 has an invalid length. [ 1712.583908][T17450] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1713.229523][T17471] netlink: 'syz.6.13132': attribute type 10 has an invalid length. [ 1713.314952][T17473] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13132'. [ 1713.337199][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.361518][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13131'. [ 1713.484490][T27809] batadv2: left promiscuous mode [ 1713.556072][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13132'. [ 1713.628129][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13132'. [ 1713.984030][T17487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.191432][T17489] nbd: nbd3 already in use [ 1714.205592][T17489] block nbd3: NBD_DISCONNECT [ 1714.219782][T17489] block nbd3: Send disconnect failed -32 [ 1714.240705][T17489] block nbd3: shutting down sockets [ 1714.755375][T17516] geneve2: entered promiscuous mode [ 1715.218716][T17536] netlink: 14776 bytes leftover after parsing attributes in process `syz.2.13157'. [ 1715.248724][T17538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1715.282667][T17539] netlink: 'syz.5.13158': attribute type 34 has an invalid length. [ 1716.281424][T17568] netlink: 'syz.2.13168': attribute type 11 has an invalid length. [ 1716.367503][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13167'. [ 1716.423474][T17570] batadv_slave_1: entered promiscuous mode [ 1716.436880][T17572] IPv6: Can't replace route, no match found [ 1716.475609][T17570] netlink: 'syz.5.13169': attribute type 34 has an invalid length. [ 1716.524041][T17569] batadv_slave_1: left promiscuous mode [ 1716.631981][T17575] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13171'. [ 1716.706824][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13173'. [ 1716.806697][T17585] x_tables: duplicate underflow at hook 3 [ 1716.934818][T17588] netlink: 'syz.2.13175': attribute type 11 has an invalid length. [ 1717.092355][T12503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.146997][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13179'. [ 1717.169873][T17599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13179'. [ 1717.847531][T17619] tipc: Started in network mode [ 1717.860288][T17619] tipc: Node identity 4246, cluster identity 4711 [ 1717.874805][T17619] tipc: Node number set to 16966 [ 1717.896762][T12503] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1717.928301][T12503] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1717.969972][T12503] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1718.004911][T12503] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1718.462557][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.965542][T17667] __nla_validate_parse: 2 callbacks suppressed [ 1719.965562][T17667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13201'. [ 1720.067271][T17667] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13201'. [ 1720.182592][T17672] IPv6: Can't replace route, no match found [ 1720.302219][T17679] netlink: 'syz.4.13204': attribute type 10 has an invalid length. [ 1720.520496][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.541661][T17692] netlink: 'syz.6.13209': attribute type 10 has an invalid length. [ 1720.660991][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.729592][T17697] sch_tbf: peakrate 7 is lower than or equals to rate 213 ! [ 1720.765434][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.824336][T17701] netlink: 'syz.5.13212': attribute type 210 has an invalid length. [ 1720.942910][T17705] syzkaller0: entered promiscuous mode [ 1720.966998][T17705] syzkaller0: entered allmulticast mode [ 1721.011818][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.039753][T17705] tipc: Enabled bearer , priority 10 [ 1721.046604][T17712] netlink: 'syz.6.13217': attribute type 21 has an invalid length. [ 1721.046631][T17712] netlink: 128 bytes leftover after parsing attributes in process `syz.6.13217'. [ 1721.072464][T17712] netlink: 3 bytes leftover after parsing attributes in process `syz.6.13217'. [ 1721.207344][T17715] IPv6: Can't replace route, no match found [ 1721.245633][T17703] tipc: Resetting bearer [ 1721.355815][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13219'. [ 1721.379844][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13219'. [ 1721.598696][T17719] FAULT_INJECTION: forcing a failure. [ 1721.598696][T17719] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.612875][T17719] CPU: 1 UID: 0 PID: 17719 Comm: syz.6.13220 Not tainted syzkaller #0 PREEMPT(full) [ 1721.612898][T17719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1721.612908][T17719] Call Trace: [ 1721.612916][T17719] [ 1721.612924][T17719] dump_stack_lvl+0xe8/0x150 [ 1721.612958][T17719] should_fail_ex+0x40c/0x560 [ 1721.612991][T17719] should_failslab+0xa8/0x100 [ 1721.613019][T17719] __kmalloc_noprof+0xfe/0x720 [ 1721.613044][T17719] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1721.613071][T17719] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1721.613101][T17719] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1721.613141][T17719] genl_family_rcv_msg_doit+0xda/0x340 [ 1721.613170][T17719] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1721.613201][T17719] ? apparmor_capable+0x126/0x170 [ 1721.613226][T17719] ? bpf_lsm_capable+0x9/0x20 [ 1721.613249][T17719] ? security_capable+0x7e/0x2c0 [ 1721.613281][T17719] genl_rcv_msg+0x614/0x7a0 [ 1721.613313][T17719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1721.613337][T17719] ? __pfx_macsec_upd_offload+0x10/0x10 [ 1721.613450][T17719] ? __pfx_ref_tracker_free+0x10/0x10 [ 1721.613483][T17719] netlink_rcv_skb+0x226/0x4a0 [ 1721.613505][T17719] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1721.613531][T17719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1721.613566][T17719] ? down_read+0x2be/0x330 [ 1721.613598][T17719] genl_rcv+0x28/0x40 [ 1721.613619][T17719] netlink_unicast+0x7bb/0x940 [ 1721.613649][T17719] netlink_sendmsg+0x813/0xb40 [ 1721.613680][T17719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.613705][T17719] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1721.613736][T17719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1721.613754][T17719] sock_sendmsg_nosec+0x13a/0x180 [ 1721.613783][T17719] ____sys_sendmsg+0x54e/0x850 [ 1721.613809][T17719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1721.613839][T17719] ? import_iovec+0x73/0xa0 [ 1721.613866][T17719] ___sys_sendmsg+0x2a5/0x360 [ 1721.613885][T17719] ? __lock_acquire+0x683/0x2cf0 [ 1721.613913][T17719] ? __pfx____sys_sendmsg+0x10/0x10 [ 1721.613969][T17719] ? __fget_files+0x2a/0x420 [ 1721.613992][T17719] ? __fget_files+0x3a2/0x420 [ 1721.614024][T17719] __x64_sys_sendmsg+0x1b1/0x290 [ 1721.614046][T17719] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1721.614086][T17719] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.614107][T17719] do_syscall_64+0x174/0x580 [ 1721.614136][T17719] ? trace_irq_disable+0x3b/0x140 [ 1721.614162][T17719] ? clear_bhb_loop+0x70/0xc0 [ 1721.614185][T17719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.614203][T17719] RIP: 0033:0x7f8f08f9e0d9 [ 1721.614222][T17719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.614237][T17719] RSP: 002b:00007f8f09e32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1721.614256][T17719] RAX: ffffffffffffffda RBX: 00007f8f09225fa0 RCX: 00007f8f08f9e0d9 [ 1721.614270][T17719] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1721.614282][T17719] RBP: 00007f8f09e32090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.614293][T17719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.614304][T17719] R13: 00007f8f09226038 R14: 00007f8f09225fa0 R15: 00007fffaff4c878 [ 1721.614336][T17719] [ 1721.615654][T17703] tipc: Disabling bearer [ 1722.095406][T17726] netlink: 'syz.6.13223': attribute type 10 has an invalid length. [ 1722.132282][T27809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.246246][T17731] netlink: 'syz.6.13225': attribute type 1 has an invalid length. [ 1722.315059][T17733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13224'. [ 1722.412176][T17731] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1722.460026][T17739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13226'. [ 1722.599352][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13225'. [ 1722.666161][T17737] bond6: (slave veth11): Enslaving as an active interface with a down link [ 1722.767005][T17748] netlink: 'syz.2.13230': attribute type 5 has an invalid length. [ 1722.775767][T17750] IPv6: Can't replace route, no match found [ 1722.797505][T17740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1722.831810][T17752] netlink: 'syz.5.13231': attribute type 1 has an invalid length. [ 1722.873084][T27824] bond6: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 1722.885971][T27824] bond6: (slave veth11): making interface the new active one [ 1722.897850][T27824] bond6: active interface up! [ 1723.008848][T17752] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1723.153154][T17755] bond16: (slave veth19): Enslaving as an active interface with a down link [ 1723.351032][T17765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.444772][T17756] bond15: left promiscuous mode [ 1723.451794][T17756] bridge12: left promiscuous mode [ 1723.457353][T17756] bond15: left allmulticast mode [ 1723.464452][T17756] bridge12: left allmulticast mode [ 1723.483561][T17768] netlink: 'syz.6.13235': attribute type 1 has an invalid length. [ 1723.498525][T17765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.528913][T17768] netlink: 'syz.6.13235': attribute type 4 has an invalid length. [ 1723.537730][T17769] netlink: 46 bytes leftover after parsing attributes in process `syz.6.13235'. [ 1723.615051][T17752] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1723.650269][T17752] bond16: (slave batadv5): making interface the new active one [ 1723.671251][T17752] batadv5: entered promiscuous mode [ 1723.677056][T17752] bond16: (slave batadv5): Enslaving as an active interface with an up link [ 1723.711012][T17765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1723.774140][T17773] ¿: entered promiscuous mode [ 1723.804832][T27824] bond16: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 1723.998267][T17781] tipc: Enabling of bearer rejected, failed to enable media [ 1724.229015][T27824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1724.317446][T17788] xt_hashlimit: max too large, truncated to 1048576 [ 1724.787483][T17801] IPv6: Can't replace route, no match found [ 1725.195094][T17796] __nla_validate_parse: 4 callbacks suppressed [ 1725.195116][T17796] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13244'. [ 1725.474337][T17822] validate_nla: 2 callbacks suppressed [ 1725.474355][T17822] netlink: 'syz.2.13245': attribute type 34 has an invalid length. [ 1725.811062][T17831] lo speed is unknown, defaulting to 1000 [ 1726.015579][T17849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13258'. [ 1726.057939][T17849] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13258'. [ 1726.119249][T17851] netlink: 'syz.5.13258': attribute type 32 has an invalid length. [ 1726.173617][T17853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1726.190735][T17851] netlink: 500 bytes leftover after parsing attributes in process `syz.5.13258'. [ 1726.368887][T17859] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1726.485466][T17850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1726.995180][T17883] netlink: 'syz.2.13266': attribute type 10 has an invalid length. [ 1727.081889][T17883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1727.112921][T17884] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13266'. [ 1727.145981][T17883] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1727.413926][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.506631][T17899] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13271'. [ 1727.604765][T17905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13271'. [ 1727.627844][T17902] netlink: 'syz.4.13273': attribute type 6 has an invalid length. [ 1727.682994][T17905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13271'. [ 1728.973815][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13278'. [ 1729.045568][T17927] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13278'. [ 1729.586295][T17940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1729.634984][T17942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1729.668901][ T5715] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1729.703446][ T5715] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1729.737751][T27807] wlan1: authenticated [ 1729.743722][T17942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1729.781435][T27807] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1729.814097][T17953] xt_hashlimit: max too large, truncated to 1048576 [ 1729.979174][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.139050][T17958] netlink: 'syz.2.13288': attribute type 1 has an invalid length. [ 1730.170741][T17958] netlink: 'syz.2.13288': attribute type 4 has an invalid length. [ 1730.225836][T17958] __nla_validate_parse: 1 callbacks suppressed [ 1730.225855][T17958] netlink: 46 bytes leftover after parsing attributes in process `syz.2.13288'. [ 1730.655967][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.756038][T17969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13290'. [ 1730.978176][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13290'. [ 1731.170826][T27824] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 1731.221008][T27824] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 1731.324614][T27824] wlan1: association with 08:02:11:00:00:00 timed out [ 1731.396654][T17980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13294'. [ 1731.662300][T17994] netlink: 'syz.5.13299': attribute type 34 has an invalid length. [ 1731.761582][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13301'. [ 1731.797588][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13301'. [ 1731.990166][T18010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1732.125760][T18010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1732.238535][T18023] xt_hashlimit: max too large, truncated to 1048576 [ 1732.527287][T18025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13309'. [ 1733.171109][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.454339][T18047] netlink: 'syz.3.13317': attribute type 1 has an invalid length. [ 1733.691772][T18047] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1733.913367][T18055] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1734.054213][T18058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1734.284928][T18060] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1734.305130][T18071] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13322'. [ 1734.325905][T18060] bond5: (slave batadv1): making interface the new active one [ 1734.354412][T18060] batadv1: entered promiscuous mode [ 1734.390597][T18060] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 1734.391675][T18072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13322'. [ 1734.446233][T18073] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13322'. [ 1734.608353][T27810] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1734.646120][T18059] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1735.071657][T27815] batadv5: left promiscuous mode [ 1735.171609][T27810] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1735.211909][ T5746] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1735.223183][T27810] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1735.720051][ T5746] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1735.741074][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1735.762851][T12501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.812971][ T5746] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1736.207971][T18114] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1737.435700][T18138] __nla_validate_parse: 3 callbacks suppressed [ 1737.435718][T18138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13346'. [ 1737.546394][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13349'. [ 1737.585776][T18144] bond17: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1737.754237][T18151] netlink: 'syz.2.13351': attribute type 8 has an invalid length. [ 1737.799965][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13351'. [ 1737.845868][T18144] bond17 (unregistering): Released all slaves [ 1738.198889][T18165] netlink: 'syz.3.13356': attribute type 34 has an invalid length. [ 1738.604746][T18178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13359'. [ 1738.706517][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13360'. [ 1738.761162][T18182] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13361'. [ 1738.803398][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13361'. [ 1738.851820][T18182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13361'. [ 1738.897015][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13362'. [ 1738.935208][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.201483][T18192] lo speed is unknown, defaulting to 1000 [ 1739.409993][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1739.451811][T18206] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13366'. [ 1739.803369][T18200] lo speed is unknown, defaulting to 1000 [ 1740.216928][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.498037][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.720177][T18229] tipc: Enabling of bearer rejected, failed to enable media [ 1742.455557][T18239] __nla_validate_parse: 5 callbacks suppressed [ 1742.455587][T18239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13375'. [ 1742.634726][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13375'. [ 1743.926397][T18282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13382'. [ 1744.157375][T18288] netlink: 'syz.4.13384': attribute type 1 has an invalid length. [ 1744.286650][T18292] bridge0: port 3(batadv2) entered blocking state [ 1744.367056][T18292] bridge0: port 3(batadv2) entered disabled state [ 1744.432690][T18292] batadv2: entered allmulticast mode [ 1744.515439][T18297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13387'. [ 1744.525383][T18292] batadv2: entered promiscuous mode [ 1744.635633][T18289] bridge0: port 4(batadv3) entered blocking state [ 1744.640427][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13387'. [ 1744.711036][T27810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.765507][T18289] bridge0: port 4(batadv3) entered disabled state [ 1744.805748][T27815] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1744.815361][T27815] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1744.829066][T18300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13387'. [ 1744.866805][T18289] batadv3: entered allmulticast mode [ 1744.925523][T18289] batadv3: entered promiscuous mode [ 1745.056783][T18304] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13389'. [ 1745.070170][T27815] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 1745.081092][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13389'. [ 1745.081300][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13389'. [ 1745.102075][T27815] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 1745.477215][T18313] FAULT_INJECTION: forcing a failure. [ 1745.477215][T18313] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.616551][T18313] CPU: 1 UID: 0 PID: 18313 Comm: syz.6.13393 Not tainted syzkaller #0 PREEMPT(full) [ 1745.616584][T18313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1745.616595][T18313] Call Trace: [ 1745.616603][T18313] [ 1745.616611][T18313] dump_stack_lvl+0xe8/0x150 [ 1745.616641][T18313] should_fail_ex+0x40c/0x560 [ 1745.616666][T18313] should_failslab+0xa8/0x100 [ 1745.616692][T18313] __kmalloc_noprof+0xfe/0x720 [ 1745.616714][T18313] ? __kmalloc_cache_noprof+0x150/0x660 [ 1745.616739][T18313] ? alloc_pipe_info+0x1f9/0x4c0 [ 1745.616755][T18313] ? alloc_pipe_info+0x1f9/0x4c0 [ 1745.616778][T18313] alloc_pipe_info+0x1f9/0x4c0 [ 1745.616799][T18313] splice_direct_to_actor+0xa41/0xcb0 [ 1745.616837][T18313] ? __pfx_aa_file_perm+0x10/0x10 [ 1745.616863][T18313] ? __pfx_direct_splice_actor+0x10/0x10 [ 1745.616887][T18313] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1745.616920][T18313] do_splice_direct+0x195/0x290 [ 1745.616946][T18313] ? __pfx_do_splice_direct+0x10/0x10 [ 1745.616970][T18313] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1745.616996][T18313] ? bpf_lsm_file_permission+0x9/0x20 [ 1745.617015][T18313] ? security_file_permission+0x75/0x260 [ 1745.617037][T18313] ? rw_verify_area+0x203/0x4c0 [ 1745.617066][T18313] do_sendfile+0x52e/0x7c0 [ 1745.617093][T18313] ? __pfx_do_sendfile+0x10/0x10 [ 1745.617114][T18313] ? __fget_files+0x3a2/0x420 [ 1745.617148][T18313] __se_sys_sendfile64+0x144/0x1a0 [ 1745.617170][T18313] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1745.617197][T18313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.617218][T18313] do_syscall_64+0x174/0x580 [ 1745.617240][T18313] ? trace_irq_disable+0x3b/0x140 [ 1745.617262][T18313] ? clear_bhb_loop+0x70/0xc0 [ 1745.617284][T18313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.617302][T18313] RIP: 0033:0x7f8f08f9e0d9 [ 1745.617319][T18313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1745.617334][T18313] RSP: 002b:00007f8f09e11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1745.617353][T18313] RAX: ffffffffffffffda RBX: 00007f8f09226090 RCX: 00007f8f08f9e0d9 [ 1745.617366][T18313] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 1745.617378][T18313] RBP: 00007f8f09e11090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.617389][T18313] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.617400][T18313] R13: 00007f8f09226128 R14: 00007f8f09226090 R15: 00007fffaff4c878 [ 1745.617431][T18313] [ 1747.151347][T12499] batadv1: left promiscuous mode [ 1747.252164][T27815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.421597][T18331] IPVS: Error connecting to the multicast addr [ 1747.485660][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13401'. [ 1747.635127][T18338] netlink: 'syz.3.13402': attribute type 34 has an invalid length. [ 1747.890263][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1748.209500][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13407'. [ 1748.551928][T18363] netlink: 'syz.3.13411': attribute type 11 has an invalid length. [ 1748.831161][T18372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1748.935937][T18376] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13414'. [ 1748.967156][T18372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1749.084505][T18374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1749.812160][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.822587][T12503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.849205][T18390] netlink: 27 bytes leftover after parsing attributes in process `syz.3.13419'. [ 1749.946473][T18394] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 1750.328455][T18407] netlink: 'syz.4.13426': attribute type 1 has an invalid length. [ 1750.411004][T18412] netlink: 'syz.6.13428': attribute type 1 has an invalid length. [ 1750.584871][T18407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1750.772865][T18413] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1750.929443][T18412] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1751.022899][T18428] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13429'. [ 1751.111938][T18416] bond7: (slave veth15): Enslaving as an active interface with a down link [ 1751.288973][T18414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1751.346609][T18414] bond4: left promiscuous mode [ 1751.362272][T18414] bridge2: left promiscuous mode [ 1751.378337][T18414] geneve2: left promiscuous mode [ 1751.383934][T18414] geneve2: left allmulticast mode [ 1751.401194][T18414] bridge0: port 3(batadv2) entered blocking state [ 1751.407794][T18414] bridge0: port 3(batadv2) entered forwarding state [ 1751.425814][T18414] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1751.441737][T18414] bridge0: port 4(batadv3) entered blocking state [ 1751.448355][T18414] bridge0: port 4(batadv3) entered forwarding state [ 1751.457197][T18414] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1751.588666][T18417] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1751.617299][T18419] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1751.627740][T18419] bond5: (slave batadv4): making interface the new active one [ 1751.638251][T18419] batadv4: entered promiscuous mode [ 1751.645700][T18419] bond5: (slave batadv4): Enslaving as an active interface with an up link [ 1751.694265][T18420] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1751.713653][T18420] bond7: (slave batadv4): making interface the new active one [ 1751.724085][T18420] batadv4: entered promiscuous mode [ 1751.733208][T18420] bond7: (slave batadv4): Enslaving as an active interface with an up link [ 1751.876768][T27815] bond7: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1751.975334][T27815] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1752.381910][T18447] xt_hashlimit: max too large, truncated to 1048576 [ 1752.923033][T18471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1753.011894][T12499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.488815][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13450'. [ 1754.068391][T18507] syzkaller0: entered promiscuous mode [ 1754.085925][T18507] syzkaller0: entered allmulticast mode [ 1754.158979][T18512] tipc: Started in network mode [ 1754.199671][T18512] tipc: Node identity c6d6dd66d306, cluster identity 4711 [ 1754.289676][T18512] tipc: Enabled bearer , priority 10 [ 1754.352479][T18515] netlink: 'syz.2.13460': attribute type 34 has an invalid length. [ 1754.536047][T18506] tipc: Resetting bearer [ 1754.979537][T18506] tipc: Disabling bearer [ 1755.126021][T18544] syz_tun: entered allmulticast mode [ 1755.238145][T18532] syz_tun: left allmulticast mode [ 1755.455836][T18555] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13465'. [ 1755.572611][T27811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.608589][T18564] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13468'. [ 1755.829545][T18566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13468'. [ 1755.991487][T18566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13468'. [ 1756.034553][T18570] netlink: 'syz.5.13471': attribute type 1 has an invalid length. [ 1756.091210][T18570] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13471'. [ 1756.367080][T18585] netlink: 'syz.3.13474': attribute type 1 has an invalid length. [ 1756.428394][T18585] netlink: 'syz.3.13474': attribute type 4 has an invalid length. [ 1756.494364][T18585] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13474'. [ 1756.537402][T18587] IPv6: Can't replace route, no match found [ 1756.579616][T18592] netlink: 46 bytes leftover after parsing attributes in process `syz.3.13474'. [ 1757.276735][T18607] netlink: 'syz.3.13480': attribute type 7 has an invalid length. [ 1757.443153][T18610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13481'. [ 1757.485168][T18611] netlink: 'syz.6.13482': attribute type 1 has an invalid length. [ 1757.671777][T18611] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1757.864921][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13485'. [ 1757.916633][T18614] bond8: (slave veth17): Enslaving as an active interface with a down link [ 1758.110300][T18640] netlink: 'syz.3.13489': attribute type 1 has an invalid length. [ 1758.134944][T16695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.291528][T18611] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1758.349371][T18611] bond8: (slave batadv5): making interface the new active one [ 1758.388091][T18611] batadv5: entered promiscuous mode [ 1758.421723][T18611] bond8: (slave batadv5): Enslaving as an active interface with an up link [ 1758.479203][T18637] gretap0: entered promiscuous mode [ 1758.735767][T27810] bond8: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 1758.820367][T18638] lo speed is unknown, defaulting to 1000 [ 1758.967816][T18655] FAULT_INJECTION: forcing a failure. [ 1758.967816][T18655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1759.002584][T18655] CPU: 1 UID: 0 PID: 18655 Comm: syz.3.13493 Not tainted syzkaller #0 PREEMPT(full) [ 1759.002611][T18655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1759.002622][T18655] Call Trace: [ 1759.002630][T18655] [ 1759.002638][T18655] dump_stack_lvl+0xe8/0x150 [ 1759.002672][T18655] should_fail_ex+0x40c/0x560 [ 1759.002695][T18655] _copy_from_iter+0x1d3/0x1660 [ 1759.002716][T18655] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 1759.002740][T18655] ? rcu_is_watching+0x15/0xb0 [ 1759.002766][T18655] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1759.002788][T18655] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1759.002808][T18655] ? __pfx__copy_from_iter+0x10/0x10 [ 1759.002827][T18655] ? __alloc_skb+0x276/0x7a0 [ 1759.002851][T18655] ? __alloc_skb+0x276/0x7a0 [ 1759.002881][T18655] ? netlink_sendmsg+0x650/0xb40 [ 1759.002902][T18655] ? skb_put+0x112/0x210 [ 1759.002922][T18655] netlink_sendmsg+0x6c0/0xb40 [ 1759.002952][T18655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.002975][T18655] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1759.003005][T18655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1759.003024][T18655] sock_sendmsg_nosec+0x13a/0x180 [ 1759.003052][T18655] ____sys_sendmsg+0x54e/0x850 [ 1759.003077][T18655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1759.003105][T18655] ? import_iovec+0x73/0xa0 [ 1759.003130][T18655] ___sys_sendmsg+0x2a5/0x360 [ 1759.003149][T18655] ? __lock_acquire+0x683/0x2cf0 [ 1759.003175][T18655] ? __pfx____sys_sendmsg+0x10/0x10 [ 1759.003236][T18655] ? __fget_files+0x2a/0x420 [ 1759.003257][T18655] ? __fget_files+0x3a2/0x420 [ 1759.003287][T18655] __x64_sys_sendmsg+0x1b1/0x290 [ 1759.003309][T18655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1759.003346][T18655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.003366][T18655] do_syscall_64+0x174/0x580 [ 1759.003390][T18655] ? trace_irq_disable+0x3b/0x140 [ 1759.003412][T18655] ? clear_bhb_loop+0x70/0xc0 [ 1759.003433][T18655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.003450][T18655] RIP: 0033:0x7fa8fcb9e0d9 [ 1759.003467][T18655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.003480][T18655] RSP: 002b:00007fa8fda44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1759.003499][T18655] RAX: ffffffffffffffda RBX: 00007fa8fce25fa0 RCX: 00007fa8fcb9e0d9 [ 1759.003513][T18655] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1759.003526][T18655] RBP: 00007fa8fda44090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.003537][T18655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.003548][T18655] R13: 00007fa8fce26038 R14: 00007fa8fce25fa0 R15: 00007fffc1a521a8 [ 1759.003578][T18655] [ 1759.336762][T18658] netlink: 'syz.5.13495': attribute type 1 has an invalid length. [ 1759.425799][T18658] bond17: entered promiscuous mode [ 1759.431544][T18658] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1759.439453][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.468337][T18658] __nla_validate_parse: 2 callbacks suppressed [ 1759.468356][T18658] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13495'. [ 1759.487568][T18658] bond17: entered allmulticast mode [ 1759.537232][T18658] bond17: (slave bridge16): making interface the new active one [ 1759.545378][T18658] bridge16: entered promiscuous mode [ 1759.551902][T18658] bridge16: entered allmulticast mode [ 1759.558385][T18658] bond17: (slave bridge16): Enslaving as an active interface with an up link [ 1759.785413][T18671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13499'. [ 1759.924908][T18679] netlink: 'syz.3.13501': attribute type 1 has an invalid length. [ 1759.960872][T18676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.977284][T18679] netlink: 'syz.3.13501': attribute type 4 has an invalid length. [ 1760.004099][T18684] netlink: 'syz.2.13502': attribute type 1 has an invalid length. [ 1760.014024][T18679] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13501'. [ 1760.202990][T18688] netlink: 46 bytes leftover after parsing attributes in process `syz.3.13501'. [ 1760.214929][T18676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1760.280494][T18691] gretap2: entered allmulticast mode [ 1760.293630][T18676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1760.886275][T18708] lo speed is unknown, defaulting to 1000 [ 1761.080284][T18710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13507'. [ 1761.343180][T27807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.448022][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13512'. [ 1761.661528][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13513'. [ 1762.057915][T18743] tipc: Enabling of bearer rejected, failed to enable media [ 1762.210076][T18743] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13516'. [ 1762.245552][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13516'. [ 1762.632527][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13520'. [ 1762.685908][T18754] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1762.769039][T18757] validate_nla: 1 callbacks suppressed [ 1762.769059][T18757] netlink: 'syz.6.13521': attribute type 1 has an invalid length. [ 1763.049951][T18757] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1763.119635][T13607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1763.133683][T12504] batadv4: left promiscuous mode [ 1763.154363][T13607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1763.193322][T13607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1763.211932][T13607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1763.225691][T13607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1763.702806][T18760] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1763.746515][T18760] bond9: (slave batadv6): making interface the new active one [ 1763.796874][T18760] bond9: (slave batadv6): Enslaving as an active interface with an up link [ 1763.810936][T18762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1763.852235][T27810] batadv4: left promiscuous mode [ 1763.896576][T12504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.438653][T18787] openvswitch: netlink: EtherType 300 is less than min 600 [ 1764.499116][T18789] IPv6: Can't replace route, no match found [ 1764.530348][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1764.553363][T12504] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1764.580231][T12504] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.812811][T18795] lo speed is unknown, defaulting to 1000 [ 1764.971759][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13531'. [ 1765.044677][T18803] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13531'. [ 1765.047625][T12504] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.073208][T12504] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.191679][T18810] netlink: 'syz.3.13533': attribute type 1 has an invalid length. [ 1765.267467][T18814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13533'. [ 1765.330389][T31951] Bluetooth: hci1: command tx timeout [ 1765.632931][T18812] nbd3: detected capacity change from 0 to 127 [ 1765.664448][T12504] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1765.692636][T12504] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1765.743945][T31951] block nbd3: Receive control failed (result -104) [ 1765.804672][T18810] bond6: entered promiscuous mode [ 1765.827581][T18810] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1765.895415][T18822] netlink: 'syz.6.13534': attribute type 11 has an invalid length. [ 1765.906036][T18814] bond6: entered allmulticast mode [ 1765.988942][T18817] bond6: (slave bridge5): making interface the new active one [ 1766.036541][T18817] bridge5: entered promiscuous mode [ 1766.075660][T18817] bridge5: entered allmulticast mode [ 1766.104982][T18817] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1766.398265][T12504] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1766.409429][T12504] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.432471][T12504] [ 1766.434825][T12504] ====================================================== [ 1766.441933][T12504] WARNING: possible circular locking dependency detected [ 1766.449093][T12504] syzkaller #0 Not tainted [ 1766.453510][T12504] ------------------------------------------------------ [ 1766.458947][T18830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13538'. [ 1766.460584][T12504] kworker/u8:6/12504 is trying to acquire lock: [ 1766.460597][T12504] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 1766.485804][T12504] [ 1766.485804][T12504] but task is already holding lock: [ 1766.493174][T12504] ffffffff8f5dd680 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1766.502034][T12504] [ 1766.502034][T12504] which lock already depends on the new lock. [ 1766.502034][T12504] [ 1766.512445][T12504] [ 1766.512445][T12504] the existing dependency chain (in reverse order) is: [ 1766.521466][T12504] [ 1766.521466][T12504] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 1766.528871][T12504] __mutex_lock+0x19d/0x1550 [ 1766.534015][T12504] get_device_parent+0x16f/0x3a0 [ 1766.539490][T12504] device_add+0x2d4/0xb80 [ 1766.544350][T12504] device_create+0x269/0x300 [ 1766.549459][T12504] msr_device_create+0x33/0x50 [ 1766.554797][T12504] cpuhp_invoke_callback+0x434/0x810 [ 1766.560632][T12504] cpuhp_thread_fun+0x362/0x780 [ 1766.566005][T12504] smpboot_thread_fn+0x57c/0xa80 [ 1766.571471][T12504] kthread+0x388/0x470 [ 1766.576068][T12504] ret_from_fork+0x514/0xb70 [ 1766.581180][T12504] ret_from_fork_asm+0x1a/0x30 [ 1766.586469][T12504] [ 1766.586469][T12504] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 1766.594096][T12504] cpuhp_thread_fun+0x127/0x780 [ 1766.599474][T12504] smpboot_thread_fn+0x57c/0xa80 [ 1766.604943][T12504] kthread+0x388/0x470 [ 1766.609538][T12504] ret_from_fork+0x514/0xb70 [ 1766.614652][T12504] ret_from_fork_asm+0x1a/0x30 [ 1766.619944][T12504] [ 1766.619944][T12504] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1766.627681][T12504] cpus_read_lock+0x42/0x160 [ 1766.632888][T12504] static_key_slow_inc+0x12/0x30 [ 1766.638391][T12504] nbd_genl_reconfigure+0x1301/0x1e80 [ 1766.644384][T12504] genl_family_rcv_msg_doit+0x233/0x340 [ 1766.650459][T12504] genl_rcv_msg+0x614/0x7a0 [ 1766.655503][T12504] netlink_rcv_skb+0x226/0x4a0 [ 1766.660803][T12504] genl_rcv+0x28/0x40 [ 1766.665323][T12504] netlink_unicast+0x7bb/0x940 [ 1766.670609][T12504] netlink_sendmsg+0x813/0xb40 [ 1766.675894][T12504] sock_sendmsg_nosec+0x13a/0x180 [ 1766.681489][T12504] ____sys_sendmsg+0x54e/0x850 [ 1766.686775][T12504] ___sys_sendmsg+0x2a5/0x360 [ 1766.691962][T12504] __x64_sys_sendmsg+0x1b1/0x290 [ 1766.697403][T12504] do_syscall_64+0x174/0x580 [ 1766.702502][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.708909][T12504] [ 1766.708909][T12504] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 1766.716577][T12504] __mutex_lock+0x19d/0x1550 [ 1766.721692][T12504] nbd_queue_rq+0x373/0x1150 [ 1766.726794][T12504] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1766.732941][T12504] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1766.739822][T12504] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1766.746312][T12504] blk_mq_run_work_fn+0x16c/0x300 [ 1766.751844][T12504] process_scheduled_works+0xa8e/0x14e0 [ 1766.757919][T12504] worker_thread+0xa47/0xfb0 [ 1766.763011][T12504] kthread+0x388/0x470 [ 1766.767583][T12504] ret_from_fork+0x514/0xb70 [ 1766.772678][T12504] ret_from_fork_asm+0x1a/0x30 [ 1766.777949][T12504] [ 1766.777949][T12504] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1766.785141][T12504] __mutex_lock+0x19d/0x1550 [ 1766.790242][T12504] nbd_queue_rq+0xc1/0x1150 [ 1766.795338][T12504] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1766.801389][T12504] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1766.808236][T12504] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1766.814724][T12504] blk_mq_run_work_fn+0x16c/0x300 [ 1766.820258][T12504] process_scheduled_works+0xa8e/0x14e0 [ 1766.826306][T12504] worker_thread+0xa47/0xfb0 [ 1766.831426][T12504] kthread+0x388/0x470 [ 1766.836003][T12504] ret_from_fork+0x514/0xb70 [ 1766.841099][T12504] ret_from_fork_asm+0x1a/0x30 [ 1766.846370][T12504] [ 1766.846370][T12504] -> #5 (set->srcu){.+.+}-{0:0}: [ 1766.853476][T12504] __synchronize_srcu+0xc9/0x2f0 [ 1766.858918][T12504] elevator_switch+0x1e8/0x7b0 [ 1766.864258][T12504] elevator_change+0x2fa/0x480 [ 1766.869549][T12504] elevator_set_default+0x375/0x440 [ 1766.875253][T12504] blk_register_queue+0x3f3/0x4e0 [ 1766.880842][T12504] __add_disk+0x6cb/0xe30 [ 1766.885708][T12504] add_disk_fwnode+0x100/0x3a0 [ 1766.890980][T12504] nbd_dev_add+0x733/0xb60 [ 1766.895903][T12504] nbd_init+0x15f/0x1e0 [ 1766.900899][T12504] do_one_initcall+0x250/0x870 [ 1766.906170][T12504] do_initcall_level+0x10a/0x1a0 [ 1766.911666][T12504] do_initcalls+0x59/0xa0 [ 1766.916501][T12504] kernel_init_freeable+0x29d/0x3e0 [ 1766.922211][T12504] kernel_init+0x1d/0x1d0 [ 1766.927043][T12504] ret_from_fork+0x514/0xb70 [ 1766.932139][T12504] ret_from_fork_asm+0x1a/0x30 [ 1766.937410][T12504] [ 1766.937410][T12504] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1766.945211][T12504] __mutex_lock+0x19d/0x1550 [ 1766.950307][T12504] elevator_change+0x1af/0x480 [ 1766.955572][T12504] elevator_set_none+0xb5/0x140 [ 1766.960926][T12504] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1766.967237][T12504] nbd_start_device+0x189/0xb30 [ 1766.972595][T12504] nbd_genl_connect+0x1597/0x1c10 [ 1766.978122][T12504] genl_family_rcv_msg_doit+0x233/0x340 [ 1766.984195][T12504] genl_rcv_msg+0x614/0x7a0 [ 1766.989207][T12504] netlink_rcv_skb+0x226/0x4a0 [ 1766.994473][T12504] genl_rcv+0x28/0x40 [ 1766.998959][T12504] netlink_unicast+0x7bb/0x940 [ 1767.004238][T12504] netlink_sendmsg+0x813/0xb40 [ 1767.009507][T12504] sock_sendmsg_nosec+0x13a/0x180 [ 1767.015039][T12504] ____sys_sendmsg+0x54e/0x850 [ 1767.020417][T12504] ___sys_sendmsg+0x2a5/0x360 [ 1767.025616][T12504] __x64_sys_sendmsg+0x1b1/0x290 [ 1767.031076][T12504] do_syscall_64+0x174/0x580 [ 1767.036172][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.042569][T12504] [ 1767.042569][T12504] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1767.051224][T12504] blk_alloc_queue+0x544/0x690 [ 1767.056497][T12504] __blk_mq_alloc_disk+0x194/0x390 [ 1767.062116][T12504] nbd_dev_add+0x494/0xb60 [ 1767.067041][T12504] nbd_init+0x15f/0x1e0 [ 1767.071699][T12504] do_one_initcall+0x250/0x870 [ 1767.076969][T12504] do_initcall_level+0x10a/0x1a0 [ 1767.082412][T12504] do_initcalls+0x59/0xa0 [ 1767.087247][T12504] kernel_init_freeable+0x29d/0x3e0 [ 1767.092949][T12504] kernel_init+0x1d/0x1d0 [ 1767.097781][T12504] ret_from_fork+0x514/0xb70 [ 1767.102876][T12504] ret_from_fork_asm+0x1a/0x30 [ 1767.108151][T12504] [ 1767.108151][T12504] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1767.115399][T12504] fs_reclaim_acquire+0x71/0x100 [ 1767.120847][T12504] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1767.127075][T12504] alloc_inode+0xb8/0x1b0 [ 1767.131909][T12504] iget_locked+0x131/0x6a0 [ 1767.136833][T12504] kernfs_get_inode+0x4f/0x770 [ 1767.142111][T12504] kernfs_get_tree+0x5cd/0x980 [ 1767.147384][T12504] vfs_get_tree+0x92/0x2a0 [ 1767.152311][T12504] do_new_mount+0x319/0xdc0 [ 1767.157319][T12504] __se_sys_mount+0x31d/0x420 [ 1767.162498][T12504] do_syscall_64+0x174/0x580 [ 1767.167594][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.173990][T12504] [ 1767.173990][T12504] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 1767.182016][T12504] down_write+0x96/0x200 [ 1767.186771][T12504] kernfs_remove_by_name_ns+0x4e/0x140 [ 1767.192733][T12504] device_links_driver_bound+0x4ab/0x1440 [ 1767.198959][T12504] driver_bound+0xd8/0x2e0 [ 1767.203951][T12504] really_probe+0x774/0xae0 [ 1767.208964][T12504] __driver_probe_device+0x1e8/0x360 [ 1767.214774][T12504] driver_probe_device+0x4f/0x240 [ 1767.220473][T12504] __device_attach_driver+0x270/0x410 [ 1767.226349][T12504] bus_for_each_drv+0x258/0x2f0 [ 1767.231712][T12504] __device_attach+0x2c4/0x450 [ 1767.236978][T12504] device_initial_probe+0xa1/0xd0 [ 1767.242502][T12504] bus_probe_device+0x12a/0x220 [ 1767.247859][T12504] device_add+0x7d7/0xb80 [ 1767.252699][T12504] faux_device_create_with_groups+0x1a5/0x2b0 [ 1767.259359][T12504] regulator_dummy_init+0x19/0x40 [ 1767.264932][T12504] regulator_init+0xca/0x110 [ 1767.270025][T12504] do_one_initcall+0x250/0x870 [ 1767.275300][T12504] do_initcall_level+0x10a/0x1a0 [ 1767.280762][T12504] do_initcalls+0x59/0xa0 [ 1767.285618][T12504] kernel_init_freeable+0x29d/0x3e0 [ 1767.291336][T12504] kernel_init+0x1d/0x1d0 [ 1767.296170][T12504] ret_from_fork+0x514/0xb70 [ 1767.301283][T12504] ret_from_fork_asm+0x1a/0x30 [ 1767.306556][T12504] [ 1767.306556][T12504] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1767.315135][T12504] __lock_acquire+0x1520/0x2cf0 [ 1767.320495][T12504] lock_acquire+0x106/0x350 [ 1767.325502][T12504] down_read+0x4a/0x330 [ 1767.330166][T12504] kernfs_remove+0x35/0x80 [ 1767.335093][T12504] __kobject_del+0xe0/0x310 [ 1767.340104][T12504] kobject_del+0x45/0x60 [ 1767.344854][T12504] cleanup_glue_dir+0x1a3/0x220 [ 1767.350220][T12504] device_del+0x77d/0x8f0 [ 1767.355060][T12504] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1767.362134][T12504] unregister_netdevice_queue+0x2f5/0x340 [ 1767.368464][T12504] nsim_destroy+0x275/0x800 [ 1767.373611][T12504] __nsim_dev_port_del+0x14e/0x200 [ 1767.379238][T12504] nsim_dev_reload_destroy+0x288/0x490 [ 1767.385208][T12504] nsim_dev_reload_down+0x8a/0xc0 [ 1767.390746][T12504] devlink_reload+0x1c5/0x890 [ 1767.395999][T12504] devlink_pernet_pre_exit+0x1ff/0x420 [ 1767.401963][T12504] ops_undo_list+0x17d/0x8d0 [ 1767.407065][T12504] cleanup_net+0x572/0x810 [ 1767.411994][T12504] process_scheduled_works+0xa8e/0x14e0 [ 1767.418044][T12504] worker_thread+0xa47/0xfb0 [ 1767.423138][T12504] kthread+0x388/0x470 [ 1767.427718][T12504] ret_from_fork+0x514/0xb70 [ 1767.432820][T12504] ret_from_fork_asm+0x1a/0x30 [ 1767.438094][T12504] [ 1767.438094][T12504] other info that might help us debug this: [ 1767.438094][T12504] [ 1767.448303][T12504] Chain exists of: [ 1767.448303][T12504] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 1767.448303][T12504] [ 1767.461694][T12504] Possible unsafe locking scenario: [ 1767.461694][T12504] [ 1767.469207][T12504] CPU0 CPU1 [ 1767.474600][T12504] ---- ---- [ 1767.479965][T12504] lock(gdp_mutex); [ 1767.483853][T12504] lock(cpuhp_state-up); [ 1767.490696][T12504] lock(gdp_mutex); [ 1767.497111][T12504] rlock(&root->kernfs_supers_rwsem); [ 1767.502559][T12504] [ 1767.502559][T12504] *** DEADLOCK *** [ 1767.502559][T12504] [ 1767.510687][T12504] 7 locks held by kworker/u8:6/12504: [ 1767.516038][T12504] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1767.526995][T12504] #1: ffffc9000c8cfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1767.537510][T12504] #2: ffffffff90018f08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1767.546815][T12504] #3: ffff8880536f2128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1767.556822][T12504] #4: ffff8880536f6258 (&devlink->lock_key#22){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1767.567689][T12504] #5: ffffffff90027ac0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1767.576638][T12504] #6: ffffffff8f5dd680 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1767.585762][T12504] [ 1767.585762][T12504] stack backtrace: [ 1767.591635][T12504] CPU: 1 UID: 0 PID: 12504 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1767.591652][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1767.591663][T12504] Workqueue: netns cleanup_net [ 1767.591688][T12504] Call Trace: [ 1767.591696][T12504] [ 1767.591703][T12504] dump_stack_lvl+0xe8/0x150 [ 1767.591721][T12504] print_circular_bug+0x2e1/0x300 [ 1767.591742][T12504] check_noncircular+0x12e/0x150 [ 1767.591762][T12504] __lock_acquire+0x1520/0x2cf0 [ 1767.591786][T12504] ? kernfs_remove+0x35/0x80 [ 1767.591803][T12504] lock_acquire+0x106/0x350 [ 1767.591818][T12504] ? kernfs_remove+0x35/0x80 [ 1767.591846][T12504] down_read+0x4a/0x330 [ 1767.591863][T12504] ? kernfs_remove+0x35/0x80 [ 1767.591881][T12504] kernfs_remove+0x35/0x80 [ 1767.591898][T12504] __kobject_del+0xe0/0x310 [ 1767.591912][T12504] kobject_del+0x45/0x60 [ 1767.591924][T12504] cleanup_glue_dir+0x1a3/0x220 [ 1767.591943][T12504] device_del+0x77d/0x8f0 [ 1767.591964][T12504] ? __pfx_device_del+0x10/0x10 [ 1767.591981][T12504] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 1767.592069][T12504] ? netdev_unregister_kobject+0x347/0x450 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1767.592119][T12504] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1767.592142][T12504] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1767.592157][T12504] ? __mutex_lock+0x1092/0x1550 [ 1767.592180][T12504] unregister_netdevice_queue+0x2f5/0x340 [ 1767.592198][T12504] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1767.592216][T12504] nsim_destroy+0x275/0x800 [ 1767.592235][T12504] __nsim_dev_port_del+0x14e/0x200 [ 1767.592254][T12504] nsim_dev_reload_destroy+0x288/0x490 [ 1767.592273][T12504] ? xa_get_mark+0x67/0x7a0 [ 1767.592285][T12504] nsim_dev_reload_down+0x8a/0xc0 [ 1767.592304][T12504] devlink_reload+0x1c5/0x890 [ 1767.592320][T12504] ? __pfx_devlink_reload+0x10/0x10 [ 1767.592339][T12504] devlink_pernet_pre_exit+0x1ff/0x420 [ 1767.592354][T12504] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1767.592366][T12504] ? _raw_spin_unlock+0x28/0x50 [ 1767.592381][T12504] ? iput+0xb84/0xf00 [ 1767.592399][T12504] ops_undo_list+0x17d/0x8d0 [ 1767.592420][T12504] ? __pfx_ops_undo_list+0x10/0x10 [ 1767.592439][T12504] ? idr_destroy+0x218/0x290 [ 1767.592484][T12504] ? do_raw_spin_unlock+0xf5/0x210 [ 1767.592499][T12504] cleanup_net+0x572/0x810 [ 1767.592518][T12504] ? __pfx_cleanup_net+0x10/0x10 [ 1767.592537][T12504] ? rcu_is_watching+0x15/0xb0 [ 1767.592556][T12504] ? process_scheduled_works+0xa20/0x14e0 [ 1767.592569][T12504] process_scheduled_works+0xa8e/0x14e0 [ 1767.592593][T12504] ? __pfx_process_scheduled_works+0x10/0x10 [ 1767.592608][T12504] ? assign_work+0x3cf/0x5d0 [ 1767.592630][T12504] worker_thread+0xa47/0xfb0 [ 1767.592648][T12504] ? __kthread_parkme+0x71/0x1f0 [ 1767.592665][T12504] kthread+0x388/0x470 [ 1767.592681][T12504] ? __pfx_worker_thread+0x10/0x10 [ 1767.592694][T12504] ? __pfx_kthread+0x10/0x10 [ 1767.592710][T12504] ret_from_fork+0x514/0xb70 [ 1767.592727][T12504] ? __pfx_ret_from_fork+0x10/0x10 [ 1767.592743][T12504] ? __switch_to+0xc89/0x1420 [ 1767.592758][T12504] ? __pfx_kthread+0x10/0x10 [ 1767.592774][T12504] ret_from_fork_asm+0x1a/0x30 [ 1767.592796][T12504] [ 1767.702728][T31951] Bluetooth: hci1: command tx timeout [ 1768.088794][T18835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13537'. [ 1768.097973][T18835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13537'. [ 1768.226590][T18835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13537'. [ 1768.253414][T18835] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13537'. [ 1768.282204][T18765] lo speed is unknown, defaulting to 1000 [ 1768.382157][T27824] netdevsim netdevsim5 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.599851][T27820] netdevsim netdevsim5 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.619118][T27820] netdevsim netdevsim5 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.651840][T12504] bridge_slave_1: left allmulticast mode [ 1768.662940][T12504] bridge_slave_1: left promiscuous mode [ 1768.681470][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.735269][T12504] bridge_slave_0: left allmulticast mode [ 1768.763187][T12504] bridge_slave_0: left promiscuous mode [ 1768.769405][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.922573][T12504] batman_adv: batadv0: Interface deactivated: gretap1 [ 1769.016264][T27811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.090769][T17269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.099217][ T1630] block nbd3: Connection timed out, retrying (0/1 alive) [ 1769.107241][ T1630] block nbd3: Connection timed out, retrying (0/1 alive) [ 1769.114912][ T1630] block nbd3: Connection timed out, retrying (0/1 alive) [ 1769.123192][ T1630] block nbd3: Connection timed out, retrying (0/1 alive) [ 1769.131199][ T1630] block nbd3: Dead connection, failed to find a fallback [ 1769.138297][ T1630] block nbd3: shutting down sockets [ 1769.144248][ T1630] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1769.155113][ T1630] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1769.163177][ T1630] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1769.173532][ T1630] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1769.181842][ T1630] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1769.191644][ T1630] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1769.199430][ T1630] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1769.209380][ T1630] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1769.218003][ T1630] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1769.227988][ T1630] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1769.236207][ T1630] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1769.244646][ T1630] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1769.253118][ T1630] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1769.264215][ T1630] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1769.274467][ T1630] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1769.282512][ T1630] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1769.290998][ T1630] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1769.301181][ T1630] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1769.311161][ T1630] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1769.321101][ T1630] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1769.331529][T18581] ldm_validate_partition_table(): Disk read failed. [ 1769.339080][T18581] Dev nbd3: unable to read RDB block 0 [ 1769.346366][T18581] nbd3: unable to read partition table [ 1769.382469][T18581] ldm_validate_partition_table(): Disk read failed. [ 1769.390510][T18581] Dev nbd3: unable to read RDB block 0 [ 1769.397088][T18581] nbd3: unable to read partition table [ 1769.655949][T12504] batman_adv: batadv0: Removing interface: gretap1 [ 1769.670627][T12504] bond12 (unregistering): (slave gretap2): Releasing active interface [ 1769.755516][T12504] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1769.766986][T12504] bond4 (unregistering): (slave bridge5): Releasing active interface [ 1769.787241][T12504] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 1769.803666][T12504] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 1769.822944][T12504] bond13 (unregistering): (slave bridge10): Releasing backup interface [ 1769.837960][T12504] bond14 (unregistering): (slave bridge11): Releasing backup interface [ 1769.850954][T12504] bond15 (unregistering): (slave bridge12): Releasing backup interface [ 1769.875070][T12504] bond17 (unregistering): (slave bridge16): Releasing backup interface [ 1769.883531][T12504] bridge16 (unregistering): left promiscuous mode [ 1769.890329][T12504] bridge16 (unregistering): left allmulticast mode [ 1769.908691][T12504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.918801][T12504] bond0 (unregistering): Released all slaves [ 1769.928921][T12504] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1769.940565][T12504] bond1 (unregistering): Released all slaves [ 1769.954707][T12504] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1769.968986][T12504] bond2 (unregistering): (slave veth5): Releasing active interface [ 1769.979929][T31951] Bluetooth: hci1: command tx timeout [ 1769.981586][T12504] bond2 (unregistering): Released all slaves [ 1769.997407][T12504] bond3 (unregistering): Released all slaves [ 1770.060875][T12504] bond4 (unregistering): Released all slaves [ 1770.072430][T12504] bond5 (unregistering): Released all slaves [ 1770.086626][T12504] bond6 (unregistering): (slave veth9): Releasing active interface [ 1770.101835][T12504] batadv2: entered promiscuous mode [ 1770.109392][T12504] bond6 (unregistering): (slave batadv2): Releasing active interface [ 1770.119250][T12504] bond6 (unregistering): Released all slaves [ 1770.133434][T12504] bond7 (unregistering): Released all slaves [ 1770.145382][T12504] bond8 (unregistering): Released all slaves [ 1770.162637][T12504] bond9 (unregistering): (slave veth11): Releasing active interface [ 1770.170865][T12504] batadv3: entered promiscuous mode [ 1770.178424][T12504] bond9 (unregistering): (slave batadv3): Releasing active interface [ 1770.188627][T12504] bond9 (unregistering): Released all slaves [ 1770.205109][T12504] bond10 (unregistering): Released all slaves [ 1770.221103][T12504] bond11 (unregistering): (slave veth13): Releasing active interface [ 1770.229236][T12504] batadv4: entered promiscuous mode [ 1770.238296][T12504] bond11 (unregistering): (slave batadv4): Releasing active interface [ 1770.253941][T12504] bond11 (unregistering): Released all slaves [ 1770.265579][T12504] bond12 (unregistering): Released all slaves [ 1770.277558][T12504] bond13 (unregistering): Released all slaves [ 1770.289135][T12504] bond14 (unregistering): Released all slaves [ 1770.315914][T12504] bond15 (unregistering): Released all slaves [ 1770.333547][T12504] bond16 (unregistering): (slave veth19): Releasing active interface [ 1770.342087][T12504] batadv5: entered promiscuous mode [ 1770.350317][T12504] bond16 (unregistering): (slave batadv5): Releasing active interface [ 1770.361955][T12504] bond16 (unregistering): Released all slaves [ 1770.375950][T12504] bond17 (unregistering): Released all slaves [ 1770.509909][T16695] netdevsim netdevsim5 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1770.560974][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1770.626097][T12504] tipc: Left network mode [ 1771.115739][T12504] hsr_slave_0: left promiscuous mode [ 1771.126434][T12504] hsr_slave_1: left promiscuous mode [ 1771.135360][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.159849][T12504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.183895][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1771.199987][T12504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1771.674250][T12504] team0 (unregistering): Port device veth17 removed [ 1771.856505][T12504] team0 (unregistering): Port device team_slave_1 removed [ 1771.869123][T12504] team0 (unregistering): Port device team_slave_0 removed [ 1771.994966][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1772.039797][T27810] batadv5: left promiscuous mode [ 1772.464127][T12504] IPVS: stop unused estimator thread 0... [ 1772.616127][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1772.711034][T12504] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.872780][T12504] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.023568][T12504] bond0: (slave netdevsim1): Releasing backup interface [ 1773.035653][T12504] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.053227][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1773.097211][T12504] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.205248][T27810] netdevsim netdevsim2 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.217911][T27810] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.251115][T12504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1773.262490][T12504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.300286][T27811] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.308564][T27811] netdevsim netdevsim2 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1773.410504][T12504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1773.420987][T12504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.537291][T12504] bond0: (slave netdevsim1): Releasing backup interface [ 1773.547655][T12504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1773.566807][T12504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.680886][T12504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1773.701028][T12504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.785273][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1773.884597][T12504] bridge_slave_1: left allmulticast mode [ 1773.901334][T12504] bridge_slave_1: left promiscuous mode [ 1773.915274][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.927846][T12504] bridge_slave_0: left allmulticast mode [ 1773.934198][T12504] bridge_slave_0: left promiscuous mode [ 1773.944666][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.958143][T12504] batadv3: left allmulticast mode [ 1773.965842][T12504] batadv3: left promiscuous mode [ 1773.975316][T12504] bridge0: port 4(batadv3) entered disabled state [ 1773.983364][T12504] batadv2: left allmulticast mode [ 1773.988442][T12504] batadv2: left promiscuous mode [ 1774.007147][T12504] bridge0: port 3(batadv2) entered disabled state [ 1774.015350][T12504] bridge_slave_1: left allmulticast mode [ 1774.021615][T12504] bridge_slave_1: left promiscuous mode [ 1774.027317][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.037672][T12504] bridge_slave_0: left allmulticast mode [ 1774.043669][T12504] bridge_slave_0: left promiscuous mode [ 1774.049347][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.070324][T12504] batman_adv: batadv0: Interface deactivated: gretap1 [ 1774.077595][T12504] batman_adv: batadv0: Interface deactivated: gretap1 [ 1774.130778][T16695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.202724][T12504] batman_adv: batadv0: Removing interface: gretap1 [ 1774.235489][T12504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.246106][T12504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.267507][T12504] bond0 (unregistering): Released all slaves [ 1774.278430][T12504] bond1 (unregistering): Released all slaves [ 1774.424921][T12504] batman_adv: batadv0: Removing interface: gretap1 [ 1774.446582][T12504] bond1 (unregistering): (slave gretap2): Releasing active interface [ 1774.475789][T12504] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 1774.492996][T12504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.511286][T12504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.521104][T12504] bond0 (unregistering): Released all slaves [ 1774.530583][T12504] bond1 (unregistering): Released all slaves [ 1774.542457][T12504] bond2 (unregistering): (slave veth3): Releasing active interface [ 1774.552011][T12504] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1774.566019][T12504] bond2 (unregistering): Released all slaves [ 1774.577888][T12504] bond3 (unregistering): (slave veth5): Releasing active interface [ 1774.585931][T12504] batadv1: entered promiscuous mode [ 1774.592955][T12504] bond3 (unregistering): (slave batadv1): Releasing active interface [ 1774.602416][T12504] bond3 (unregistering): Released all slaves [ 1774.614007][T12504] bond4 (unregistering): Released all slaves [ 1774.629063][T12504] bond5 (unregistering): (slave veth7): Releasing active interface [ 1774.638851][T12504] batadv4: entered promiscuous mode [ 1774.645850][T12504] bond5 (unregistering): (slave batadv4): Releasing active interface [ 1774.655193][T12504] bond5 (unregistering): Released all slaves [ 1774.674239][T27820] netdevsim netdevsim4 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1774.695762][T27820] netdevsim netdevsim4 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 1774.730172][T27820] netdevsim netdevsim4 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 1774.743338][T27820] netdevsim netdevsim4 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 1774.845614][T12504] ¿: left promiscuous mode [ 1774.914765][T12504] tipc: Left network mode [ 1775.334782][T12504] hsr_slave_0: left promiscuous mode [ 1775.341162][T12504] hsr_slave_1: left promiscuous mode [ 1775.347057][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1775.354881][T12504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1775.365850][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1775.379769][T12504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1775.401280][T12504] hsr_slave_0: left promiscuous mode [ 1775.411838][T12504] hsr_slave_1: left promiscuous mode [ 1775.420674][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1775.428066][T12504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1775.446523][T12504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1775.454723][T12504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1775.468375][T12504] veth1_macvtap: left promiscuous mode [ 1775.475748][T12504] veth0_macvtap: left promiscuous mode [ 1775.482150][T12504] veth1_macvtap: left promiscuous mode [ 1775.487647][T12504] veth0_macvtap: left promiscuous mode [ 1775.529395][T27811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.644253][T12504] team0 (unregistering): Port device team_slave_1 removed [ 1775.689320][T12504] team0 (unregistering): Port device team_slave_0 removed [ 1775.875263][T12504] team0 (unregistering): Port device team_slave_1 removed [ 1775.887455][T12504] team0 (unregistering): Port device team_slave_0 removed [ 1775.994840][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10