last executing test programs: 3m15.289752438s ago: executing program 4 (id=1224): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}, @typed={0x8, 0x9, 0x0, 0x0, @str='-))\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3m15.205393915s ago: executing program 4 (id=1225): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 3m15.045211677s ago: executing program 4 (id=1227): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={&(0x7f0000000000)=@task, 0x10}}, 0x20) 3m14.9383846s ago: executing program 4 (id=1229): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 3m14.791881742s ago: executing program 4 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m14.579580318s ago: executing program 4 (id=1231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) 2m59.417875446s ago: executing program 32 (id=1231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xffff8000}]}, 0x1c}}, 0x4000080) 2m30.937896839s ago: executing program 2 (id=1576): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x0) 2m30.694985191s ago: executing program 2 (id=1579): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 2m30.465928212s ago: executing program 2 (id=1581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000e0601030000000000000000e8ffffff050001000c000000"], 0x1c}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xbb8bf000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x29}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.397023625s ago: executing program 2 (id=1588): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 2m29.073832404s ago: executing program 2 (id=1593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r2, &(0x7f0000000280), &(0x7f0000000300)=0x60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x38, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x17, 0x0, 0x1, [@nested={0x4, 0x10f}, @typed={0x8, 0x158, 0x0, 0x0, @uid}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m28.798645977s ago: executing program 2 (id=1597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = epoll_create1(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaa00aaaaaa0002"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) poll(&(0x7f0000000bc0)=[{r3, 0x480}, {r2, 0x4}, {r4, 0x8200}, {r1, 0xa26b}, {r0, 0x684}, {r1}, {r3, 0x218}, {r1, 0x102}, {r3, 0x84}, {r0, 0x9000}], 0xa, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400c0a012100000000000000000afff0030900020073797a31000000000900010073797a3100000000100003800c0000800800010000000000000000000000000000000000ed866a2c9a623a5b82529cdae9ffdbbf2203f66b2164c5d86cb9744e5a0d62abaf6575c6dcb3e7256c7a10f790cec05b"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() sendmsg$nl_generic(r7, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x14, 0x27, 0x1, 0x70bd2c, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x90) 2m13.708182804s ago: executing program 33 (id=1597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = epoll_create1(0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaa00aaaaaa0002"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) poll(&(0x7f0000000bc0)=[{r3, 0x480}, {r2, 0x4}, {r4, 0x8200}, {r1, 0xa26b}, {r0, 0x684}, {r1}, {r3, 0x218}, {r1, 0x102}, {r3, 0x84}, {r0, 0x9000}], 0xa, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400c0a012100000000000000000afff0030900020073797a31000000000900010073797a3100000000100003800c0000800800010000000000000000000000000000000000ed866a2c9a623a5b82529cdae9ffdbbf2203f66b2164c5d86cb9744e5a0d62abaf6575c6dcb3e7256c7a10f790cec05b"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() sendmsg$nl_generic(r7, &(0x7f0000000b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x14, 0x27, 0x1, 0x70bd2c, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x90) 13.199703223s ago: executing program 1 (id=2857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newsa={0x154, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@local, {0x0, 0x1, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x6, 0x1f, 0x1ff}, {0x0, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e22, 0x4e20, @in6=@empty}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 13.028523772s ago: executing program 1 (id=2859): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x20) 12.736262325s ago: executing program 1 (id=2861): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000f600000000000000000000000000000000000000000000000000000000000000fe7d49a728cd77161305534cbad6ffffffffffffffffffffff00020000000000000009000000ffffffffffffffff000000ba6b6e000100000368b73400db46914a9fe15b16caa3cf0b02a143f7566840ec0dab0d52c38a415de94659dda5e8c9d2a51ca6435a795383f9f3b8cab794342fd2079ef3ff3fd027d5704bb4c03c90a99a6a00"/184], 0xb8}}, 0x0) 12.54580599s ago: executing program 1 (id=2863): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e80)=@can_delroute={0x17c, 0x19, 0x1, 0x70bd2d, 0x1, {0x1d, 0x1, 0x4}, [@CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "8af2c31ca9670fd1"}, 0x2}}, @CGW_MOD_AND={0x15, 0x1, {{{0x1}, 0x7, 0x3, 0x0, 0x0, "5aa1bec69cbaa511"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "4fcb2874f1dfbf2a"}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x45, 0x45, 0x67, 0x0, 0xf, "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", 0x3, "2a6450235e8ec9099d13a38dcef8c762f9882b51"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001040)}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)}, 0x62) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) vmsplice(r2, &(0x7f0000002380)=[{&(0x7f00000010c0)="7fa638caf8d8392d52bb75ffac4a6caee04d56396d583222ec057371d176fb7d1b4b032eba52b7ae90697f4131abda188231eb4fc1f21e2f9e5f6cdb5109accc3c397984f985e520e9d63ac52da96535ff122b9724fdca1daac1032dbf6e8325ff0797e318786bda17f5ec32fb59901e60645ee7b5135261da1b269c3db2eb3254ba4e39f9cbf7ba0dc76a798f8d1117029f69facdab1e689986d5c67dcb2d0f518e16853ae26b899fa59d41f6fc7703ce66a24d49466342ad6f589fb2488b1e443f785d54223883a7c16ff9f8d1eb37355c69a68bea74161af4d0656116826c8d4ed270a1f9a19408d56997", 0xec}, {&(0x7f00000011c0)="76d7e7a76906f33ae5572ce6e6d8e349c81e4bd74d16baad04fefa5caa2d932ef51dee6717098250b2109bc926fd70830fec95608736d9cd230621ff6163e7f7e3601509627e8661e4480e871793fcf98d57ca7d88a0eeddd240b8612a07686d4b9831e299c17112612d9a50067b35d9498efe70d69b2355a80bf161654ae60b6620cf690befa76d4f86013a9b5d040eb015", 0x92}, {&(0x7f0000001280)="b87b762ae7e90ec0c5660aff8544916756d79d92e93572698c7827865a89407193f2f8dcb3e5ef0e858b235915a90e58d93e40c62a6936e0a08605304e91a970108174df47f6bcb1d1afea1c303d3f02e14e89b0cdfe854a060cd937a72f5df4cd6fbabcd1b4f9401bbf455d079c01be96", 0x71}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="2c3dc985246ffc90cfdaa1e255613e7554ab4d698293b5c214896807621e8f8a13212adcdbbe7fb186259119b4d0b8b255385da1811876e6669da7e8b5faa0d676bd09f8c4cae5c0a708cb3b24e448549e47043c45670830ad75f865753a6edf3e47", 0x62}], 0x5, 0x0) connect$inet6(r0, &(0x7f0000001040)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000001000)=0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}}, 0x4, 0xc, 0x1, 0x3, 0x46, 0xfffffffc, 0x5}, &(0x7f00000001c0)=0x9c) 11.474437083s ago: executing program 1 (id=2868): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000884) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x5, 0x6, 0x7, 0x7fff, 0x6ca], 0x2, 0x0, 0x0, [{}, {}]}, 0x98) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05062bbd7000ffdbdf250a00000040000380060007004e240000080001"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 10.001155336s ago: executing program 1 (id=2881): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = socket(0x28, 0x5, 0xe89) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x20, 0x700, 0x2a40000, 0x5, {{0x36, 0x4, 0x1, 0x2, 0xd8, 0x66, 0x0, 0x6, 0x2f, 0x0, @broadcast, @broadcast, {[@noop, @timestamp_addr={0x44, 0x54, 0xc3, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010101, 0x6}, {@remote, 0x4}, {@private=0xa010101}, {@multicast2, 0x3}, {@loopback, 0xf9}, {@rand_addr=0x64010101, 0x265}, {@broadcast, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0xff}]}, @cipso={0x86, 0x41, 0x2, [{0x7, 0xb, "b1b7d07c3c9e7d62c0"}, {0x2, 0x9, "d55374a748e073"}, {0x0, 0x11, "eb660356de5ee5e05df771ade0df18"}, {0x0, 0xd, "14a773692ad49caba98100"}, {0x6, 0x9, "b289dfd7f7a08e"}]}, @end, @generic={0x82, 0x2}, @rr={0x7, 0xb, 0xb2, [@rand_addr=0x64010101, @empty]}, @ssrr={0x89, 0x1f, 0x3a, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast1]}]}}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffffffffffd4a, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x8, 0x4, 0x10, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x700, 0x2, 0x9000000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x7, 0x3, {{0xd, 0x4, 0x0, 0x14, 0x34, 0x65, 0x0, 0x4, 0x4, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x5, [{@remote, 0x7}, {@private=0xa010100, 0xe3}, {@empty}]}, @end, @end]}}}}}) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000600)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x80, 0x7831, 0xdc, 0x1, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0xc, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x97, 0x3, 0x9, [{@empty, 0x9}, {@loopback, 0x2af}, {@rand_addr=0x64010100, 0x5}, {@empty, 0x2}, {@multicast2, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x3, 0xc, {{0x25, 0x4, 0x2, 0x9, 0x94, 0x67, 0x0, 0x9, 0x29, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x1b, 0x8d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @multicast1, @empty, @rand_addr=0x64010101]}, @ssrr={0x89, 0x13, 0x48, [@rand_addr=0x64010102, @loopback, @local, @empty]}, @ssrr={0x89, 0xb, 0x78, [@remote, @rand_addr=0x64010102]}, @rr={0x7, 0x1b, 0x19, [@remote, @private=0xa010100, @local, @local, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x47, 0x1, 0x3, [{@empty, 0x7}, {@broadcast, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x19, 0x1, 0x2, [{@multicast2, 0x7fffffff}]}, @end, @generic={0x83, 0x9, "cb4b4158029062"}]}}}}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000940), &(0x7f00000009c0)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000058) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a80)={'gre0\x00', 0x0, 0x1, 0x700, 0x7, 0x36, {{0x8, 0x4, 0x0, 0x30, 0x20, 0x64, 0x0, 0xb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010102, {[@end, @end, @ssrr={0x89, 0x7, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)={0x1dc, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4040081}, 0x24000000) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.999809354s ago: executing program 5 (id=2898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) getsockopt$inet_int(r1, 0x0, 0x5, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x14, "5c83276f6c0200000000aae21f084c884bdd3d51"}}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x402c081}, 0x20004800) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$int_out(r1, 0x5460, &(0x7f00000002c0)) getsockopt$inet_buf(r4, 0x0, 0x4, 0x0, &(0x7f0000000300)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000000)={0x2, 0x4e27, @multicast2}, 0x10, 0x0}}], 0x1, 0x40440c0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(r4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r6, 0x2}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @str='ip6tnl0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x42015}, 0x80000) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) getsockname$inet(r5, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) 7.765796487s ago: executing program 5 (id=2900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008051}, 0x850) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffff001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.241540376s ago: executing program 3 (id=2907): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ea03000000000000000000000000000005000000c26f3af1490da18c95f0ed97345c51af7df7bb30d6786f8b285ff95822bb38c1e60a092048846ead5c891c95b26f5cd37c997f3c7daffce6bed4e7f0"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r4, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x2}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a010102"], 0x40}, 0xfffe) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x8, 0x7, 0x8, 0x7, 0x9, 0x4, 0xfffffffffffff001, 0x3}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000001580)=[{{&(0x7f0000001140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x240400d4}}, {{&(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="52add215825ff5d2833b39c599c1e5f856077cfff4c1453980000132148dbd87d73e3608747b124215c8236e53a3ecad487ae3468d915c342030fd441b00ce2a0362b2fbce134c7d0cf4e4c98516897d20f910a6c37154b28fe39faf71db33380205629dc2ff2eb466cb90a74a41c028d39ad38b7338bb29e65c9e51a6ca07662b7e0b13b8ce15deb2f161867e82d88af8ce66840b19c3482c76bb7f1d8e53887e1758ec5f630994eece6d165a3897ab48b03a3b070af905c4b433f1fc1296c89ea8ccba7814bd364eeb5a237b27efead415c7ec5a5f885ed75cc527131371012611b6d2b2a56a8244047e46", 0xec}, {&(0x7f0000000740)="8cc99e7c7c252c21502742fe4beeaf9725645fe3323c5f35f5dcab9f281bbd49584f423230115b9bcdb3ec4bd77136797b5d85f0048b891bea69fdf4ef1fa65b8593bf6f463fa2e348ebf2d23e5dc8266d878d33047f613e42073cf09ab9b85ccc514e6f2a9e4dbe40a7a70cee988a36ed21", 0x72}, {&(0x7f00000007c0)="9e9b8cfed89a2c35bee65a99d3481620087e27bc0d4aa4eb0ed6a4682df3f3bd8b546afde85b2998138bba48aa070f698108b67b1dc745af6e", 0x39}], 0x3, 0x0, 0x0, 0x400c0f0}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000008c0)="4c5c6ebd65ed89caf47f1f356842f12b2fcd5ed536d370e4d92f069b42616bbfe2c4542816ab1029716685e3847f44aaa759a58f5e7b8ed3cf07f896fe40ffc7f232591ab925016730541f2fd27423f0c662f71ffe9ab121116fd64d033693aa169f61ab731815a7dbca8c13fef2e5ce660b1ec3eca7a5ae7a2464f28a9420427ce16ca6af7e838df59d19a8fae3d40cfed9cc41c27b6e32d70a508b9b1bc03d8431b8f8", 0xa4}, {&(0x7f0000000980)="ece21139814ee8888b2de6a04599e1b5bdab5c02dd7ccd86c26f0291cac5f88ea528cc5fe679be0a629217485ab73d284fe534d642dae654d357745f4af78b1b21b2e47758226319b0299ba3a72c6745aef50035286e7ae226f61847849a4ddb9702b322b9c5e6937b1a08dc8c4cb97608e24c6b7e9972d7e0fa9db894136a", 0x7f}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120, 0x884}}, {{&(0x7f0000000f00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f80)="557623f2b55fb96702dd3ed486713a46d7d2a72f5b03d6e0fff5b78ee1ed9a85a07f94e547ed2dea923dfa01ee000b34ae3bfde2b1d5dd11c15bc6a72db76db7d7b164489d3fb45510dae295fbdf04705fedc4b223502933a1e43375", 0x5c}, {&(0x7f0000001000)="b06a80280eef03b077bbc01025535a3fa86cd383bde1b652c4be1bbebeae47392b9458d3c4a4fe8d155af1d43256", 0x2e}, {&(0x7f0000001040)="8a95a6a602d2077f1bd3b5c4215d395d355c4c22fa68d16919ce332a9e07ae771daf4de2c0e4c1f27d4544a71adc9fd1a69f686e683ec0c42fdbbbb0eb8c4b5fe6e629c5c751ea9222eb0ff4bd54e56a745a3b94f73f618b8702c86a42ecb3f64e00ba723ec8aca3ed2426fecb13c292e814ae293ff63544e373d75cf01f36b8c49ce8a8d8676ca6191b7758f5257e0ae3a61384250067adec0692b6aadca13bc65f", 0xa2}], 0x1000000000000272, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8, 0x80}}], 0x5, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.241181304s ago: executing program 5 (id=2908): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8, 0x9, 0xffff}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfcffffff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3.130417068s ago: executing program 5 (id=2909): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf60, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0xa, 0x28, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x39a}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x8, 0x0, 0xffffffffffffffe0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000a80)='GPL\x00'}, 0x94) 3.062032586s ago: executing program 5 (id=2911): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200)) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0xa0ce, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="585e00000000000000000000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffd3f}, 0x94) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0xf955, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) 2.491855804s ago: executing program 6 (id=2915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.299077314s ago: executing program 0 (id=2917): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80800) close(r0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x10001, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x80002000}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x864}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r2, &(0x7f0000000480)="cde94d94641c6171b3d69c64797fc761acbabb5bff48fce277394c86d418b37d8c502d034d844abfc747ab574796c4493b961c7e6c6631d794b0e68502bdec19bd47a0d0d9", &(0x7f0000000500)=""/185}, 0x20) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f0000000600)={0x4, 0x5, 0x2, 0x2, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0xd, 0x3, 0x41, @mcast2, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8, 0x20, 0x4, 0x7}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x7f, 0x0, r2, 0x587, '\x00', r4, r5, 0x3, 0x1}, 0x50) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f00000007c0)="8762bc027ad558245cc037dd85f78e0027a69c9c83377eaa7f512f965a24ba602104583f78865b65c9dff6e8ae01d9838b9ba97c5b30e9ae696c542dc50599aff4899be5d0fa4f8d30b7cf8ca277b3f560e25b43d7d911a4a5c49c9a7eebe30f024b52fb74645cb8fca091865e8497c4fa8004d21f979c8800e02e0b1b7b2f0d79948129c8539bf925d590374a4a4de1c633068cb8f668146e5b9c9405aafc9c4573fc9c5a546e97f0a2e8a9d9749483d31b338e5ab5") setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000880)="37e93f0d8c08f208d6da5d1b5b670d63e79ca67393400ac3b83b21c37e7c3aa51a3f4bf27d93b96fe44a1a17e11e4d6cb6f5a9a9163eac26a505845495b6f2eff38cdffd232f0ddc35ad0fe0429f38caa3da0cb15982f6461c169a50c92302ce8869240f194e4577b2811e1caf4068354eab8192359b0953265fd12fa930e3a830f76358df8d9609c1da18df7dded62f4aec5cc04006533305223e14a11a9db64320d5f31bde10226f969e609c53785548f8af1c80434be8cdf549e100919c833e86c8731cb0c6b40dd86848cac0345203afe3551e3749c9a37c9c6bc85745137bb95d04606f09a649063a4ddf96c8d625331456ad7675", 0xf7) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', r4, r5, 0x3, 0x1, 0x1}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c40)={0xffffffffffffffff, 0x8, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c80)={r2, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x37, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2020000}, @generic={0x2, 0x9, 0x9, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x7}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0xfffffff8, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x3, '\x00', r4, 0x25, r2, 0x8, &(0x7f0000001c00)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[r2, r2, r6, r2, r2, r8, r6, r6, r9], 0x0, 0x10, 0x6}, 0x94) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000001dc0)=@gcm_256={{0x303}, "883d5dea7515d33e", "2b11556b3a77be00efc5e4ec8abe0b3e8a12d1e4a38ac227ec6546a700cd2ae1", "921405ca", "d6230560523eef17"}, 0x38) shutdown(r1, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000001f40)={&(0x7f0000001e00), 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0x94, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x37e876de, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x3c4229fde2218f1) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000002080)={0x2, 0x81, 0xc2, &(0x7f0000001f80)=""/194}) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000002300)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002100)={0x1a4, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) vmsplice(r2, &(0x7f0000002680)=[{&(0x7f0000002340)="1863f890364a5a4e8e2a757e396a94a06abd8114224713c43d2858ac3e8b970b36bb2aedba23744b55a60a47a3d9db2ba3ac4886cc803fff443cadaec97b949817db72bb9c6dda4ceef59554", 0x4c}, {&(0x7f00000023c0)="26307329f96974cc64480c9030e497d8d4acef39e3b7944bef3a8800da8e9ac1ac10d39249786fd9ad3f79a3214087dcab7b620d980d04f26ddda4e07d431fea64e12bb5a911e771a73fabe0e382cae22426284824010fc6c1916293dc84c885dcbf5c509989e6d6a6ab6926dd9c", 0x6e}, {&(0x7f0000002440)="2a9733aaa1727eeb3069dacee9", 0xd}, {&(0x7f0000002480)="d70589131cdacda56599daedada6fabab0b1dd147b83ac0c490495064dde0046f14972b2738383ce176e3d017cfec84ad95aa45473209bd08ac2e4dc0f973ce9d81907a4b6442d224ee00920ff9b46f279aa35e55d1f2fd373f3cf2781218e8952a4f9e881e00bd1535d73e96af0fd018ebfa2dde227099fd8e6fe4e87869ddc75ae1916e61d3d62526eb8348015f78835bc697e1ecbf4caa5f41b9b08cbff5a8b72fe24b2ffefeea3960e378d667e5748638100979886d528b4b5848070b66ce6", 0xc1}, {&(0x7f0000002580)="c4ec4c691c159b57ff63208830544d40462c4a742a06d74888459b0175bd1899cc5f3eafd1b5ede288a3e16d6071a4edee76b385e9ef0a498a8657491adf975cbde28fefd08d7672a95b058d105e82badf0698be65369f79b164cb735b5d8573e3c3e9c18d16d8eba32e2874e4abfc601750eed0fc5976214ef4336244379fe6ec3700359d8f0bf3970baaec2f8493ca816903a2fbd60d1eb61f6977937bb5768349ee9e02f4e176759fd3c47572c1165bc94b621cb176bb331b8ddb71c9dbf5f7d18862b2bc78fdbc04d2b53f6e3f4f60416bcc", 0xd4}], 0x5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002700)={0x7, 0x2, 0x4, 0x8, 0x0}, &(0x7f0000002740)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000002780)={r11, 0x49, "50f240f2bb1c5cc724f2fe8c104bd06732d2ab2777a460b04f6c94b10aba9193c0e7b9c60793a151aed86a461921439389f29ba4828783aa857a2320f25cb4280be7d135448647edf7"}, &(0x7f0000002800)=0x51) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002840)={'wg0\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) 2.267396621s ago: executing program 6 (id=2918): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x20) 2.165968022s ago: executing program 0 (id=2919): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8, 0x9, 0xffff}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.149340749s ago: executing program 6 (id=2920): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2000000, 0xe4, 0x0, &(0x7f00000008c0)="6f432266524be5cc0208c5880bc0680900d0dfb71bd9e0319888bd6f192f1b5c72e6c393805265d13b27d9f7d9b5f0667dcd41677688d09a7e02cff874bbcecafa1cbd77f94b3308fe09afa126f6f730f9d1610b09620955b990e1778f08124628ef04b0a07e0351bc7544c28d4273722ee369a7d02e4ee9d590c1ee435e6e33855953ebaa6c8bfbe8c2acf4597faf54ba82daa6f84285956b98609ae6de2ee27af3f4b0c43387aa85082e764bc4c32dfbcab6f269d25e9f5c1ba4938e2ad0dda7b01eeca537ef25e6cb0bb2325096a32b06a156fb62cd4d413d5534030ad10be5450c5a", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000440)={{[0x0, 0x4, 0x6000, 0x4]}, 0x0, 0x3, 0x8, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f00000001c0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r5 = socket$inet(0x2, 0x3, 0x30) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="000426bd8e00fcdbdf250500000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000700000049000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="34000000bf813368ade263655d61adef07aafc9ecc41e18ad2a2be5b102b26bc3471fee16ac8f9372869fc392382af94023c0544af26577aedb49883bdd1a6", @ANYRES16=r7, @ANYBLOB="000300000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900070000004a00000004005b000600650009000000", @ANYBLOB="60374e4f644ded5c1a6455e79e22db7d9e06653fc64b599c672fa36faab814770e40d234849aa1164da26ce06c9e1d132b11f46524318ba43d47a5124cb2b91551c4a0b023d60873c0ee42de44c48f8be31d0b1cf329769e8aa900189ec7cbffb55fcb3ec26cd050710c058626c4f67e844d5ec5eeaf28efd9eca66c49224158ee47cfc70fd5775c04e7fe76eeca55c8285d73d96e4f400ce9514e33ee24233f48f6a8622c9b54edf87f2c71105f2f145416c1654a59b970d46fb5a280660b2e18ccf32496e4ac757b2c88bf0d2740c5d9aa", @ANYRES16=r8], 0x34}}, 0x48040) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004080}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000a6a800009f0400"/22, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100fdff0300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.10027939s ago: executing program 0 (id=2921): r0 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) syz_open_procfs$namespace(r0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x9, 0x9}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b907ef19edfff00702000ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) shutdown(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000100)={0x9, 0x10001, 0x5, 0x0, 0x0, [{{}, 0xcd}, {{}, 0x1}, {{r3}, 0x5c7a698d}, {{r3}, 0x477e}, {{r3}, 0x7}]}) 1.990197091s ago: executing program 3 (id=2922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0xac, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x8}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a2, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa29}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100000, 0x6, 0x2, 0x6, 0xb}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe0}}]}, 0xac}}, 0x800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="f0c850ef56e041f32000"/25, @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf2519000000040001803000018014000200626f6e645f736c6176655f30000000000800030003000000080003000500000008000100", @ANYRES32=r2, @ANYBLOB="2800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300040000001400020073797a5f74756e000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20040800}, 0x54040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x9}, 0x8) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000000c0)) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r11) socket$can_raw(0x1d, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r13, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) recvmsg(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/205, 0xcd}], 0x1, &(0x7f0000000140)=""/19, 0x13}, 0x40000010) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 1.989594008s ago: executing program 6 (id=2923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 1.906032904s ago: executing program 6 (id=2924): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab971573", 0x32}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd", 0xc7}, {&(0x7f0000000800)="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", 0xe14}], 0x3}, 0x24000008) 1.782956521s ago: executing program 6 (id=2925): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x14}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000003600000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x14aa, &(0x7f0000001f80)=ANY=[], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x80000) ioctl$int_in(r6, 0x5452, &(0x7f0000000580)=0x3) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r4, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbfffe}, 0x50) setsockopt(r8, 0x6e, 0x8, &(0x7f00000004c0)="28239bb0712504107f46150e0d42778e5d526c54d091964b9be84b9cfee3280b899c412c744620da99f33afdfc1eac0f0abe2d1c4b277cefd92d15bf5c1aba75276d3ffe1c18cff5c5a2063da3efb46c54e7e947e7b3ee7b90599866261d232e00129c7476a04870d596b7f5c56f8e68b84264b548862cb6cd378a64375e2d12f30cee970c3b8f773a251790856f8b1bf9ae230d5fc4c1e5b45334c92b913a7724936db17fa0dd39d5e20f4ffd52528d81c8ecea8da88728ef9477bef7a8c62bf3fd740244b7419337354e196c0a3539b788ca7953dfb104", 0xd8) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0xa930bb9f3fd061f1) ioctl$sock_SIOCETHTOOL(r9, 0x89f6, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000740)=@ethtool_per_queue_op={0x4b, 0xf, [0x9, 0x6, 0x4, 0xe, 0x9, 0x100, 0x0, 0x80000, 0x6d, 0xffff, 0xfffffffc, 0x100, 0x800, 0x7, 0x4, 0x3, 0x9, 0x7ff, 0x390, 0x4, 0x10001, 0xfff, 0x1c00, 0x3, 0x7, 0x5, 0x3, 0x8000, 0x416a, 0x2, 0xff, 0xffffff80, 0x0, 0x7fff, 0x9, 0x5, 0xfffffffd, 0x2, 0x2f59, 0x9, 0xf, 0x10, 0x4, 0x4, 0x5, 0x9, 0x8, 0x3, 0x6c4, 0x336, 0x1, 0x1ff, 0x10, 0x8, 0x3, 0xf, 0x8, 0x1ff, 0x4, 0x3015, 0x7, 0x401, 0x3ff, 0x7, 0x3, 0x4, 0x101, 0xcc3, 0x9, 0x0, 0x6, 0x4, 0xffff, 0x6, 0x775e7203, 0x8, 0x40, 0x401, 0x2, 0x1ff, 0xa6bf, 0x0, 0x10001, 0x4, 0x101, 0xff, 0x1, 0x0, 0x7, 0x5, 0x9f2e, 0x1, 0x3, 0x6a51, 0x6, 0x9, 0x6, 0x3, 0x3, 0x1, 0x6, 0x6, 0xd3b, 0x401, 0x4, 0x1ff, 0x1, 0x800, 0x1, 0x5, 0x3, 0x1ff, 0x6, 0x7, 0x2, 0x4, 0x0, 0x10001, 0x9d, 0x1, 0x4, 0xb59, 0x3, 0x2, 0x4, 0xbe4f, 0xfffffe0f, 0x9], "0ad8cbeb55b136bb188da483afdedd6d3df5a3511b8a52e6034d0a51ab075a6db844b22fb326dc96296cd2f45f7e83c7a495a93a72dfd840b7cdc90ee8dfe9dc278e4c6b6d0cfa7aaca2d7565f8219bbb27b9f171dd796adfa1c48892a910cd3b159ff25baf57f47023c6cfa8f0abc3aeffae7ed2591e58d623cca2f5f42e747dbc88c68da247caa805fb9dd9890432f9b45cedc134eb632a10cbb651d4fbec2d78198f405b60c96a4a7ee036f670ea45862ee98ece0e2854428ae7fab073e50ddf28c732414883de55cc938803023832b0cf966000000000000000000"}}) 1.575842387s ago: executing program 3 (id=2926): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.342016174s ago: executing program 3 (id=2927): r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe6, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 1.013176483s ago: executing program 3 (id=2928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005dfc000000000000000000000000000002"], 0x0, 0xfc5f}, 0x28) (async) close(r1) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10000003, 0x7, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x1, 0x6, [@random="815ad7cb84b9", @local, @remote, @link_local, @local, @multicast]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'pim6reg1\x00', 0x1000}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r5}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000200)=r5) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xfffd, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0) (async) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @multicast}, 0x14) 655.530861ms ago: executing program 0 (id=2929): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x20) 549.727355ms ago: executing program 0 (id=2930): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$IPSET_CMD_SWAP(r0, 0xfffffffffffffffc, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5d}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x64}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf47}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x114}, 0x1, 0x0, 0x0, 0x200048e0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6f}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "45c6ee1046beaa"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a07d7569aa24acbade154870b9"}, @NL80211_ATTR_KEY={0x6c, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7abe36cc5a"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8723a69e67d0c70ada51846c04"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4008410}, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f00000004c0)=0x547a) sendto$x25(r0, &(0x7f0000000500)="1fc770ef924debc8e6f7b5cd6f3f7db921c740d49a728cdf90c8da34a0c7bdde34df66617fe337c737cc380483960233c2606d834fb877ace621dc93590f4a529ac061f962bb7439078d144923fc9c72e8a6e3f9e9e0a29d71f0e81e84fddc5529bbf439f4b8bf6649ee5c3c76f0e889fbf65f4dafc3e1277627926827f9157d7fabec6fd88fdaa1059e86a7e2b7d37e3c5d62c7218e595fc55c5123f54ccc818637f3ebd2b49b374b11b66c17ec3b09b156bc84baeb9a4c0c18c37c60e9bd3f30cc3010302f704e8028a393b15d5442e9113d985b3d73ec384cbb085910a5ee921dbdc5f245e9fa5d00039ad14fc9d9dcb710a54711", 0xf6, 0x24000080, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) getpeername$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x1, '\x00', r5, r0, 0x1, 0x5}, 0x50) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000740)={0x42, "8ce91d5e176e5df3a51b0c078ed92a9830c633ae9ba066f2aa36473797551500f8b62c2e49643b4a5cc5dd85585ab44cfc0da0f921f853a42cd55bbc9abe7589d07dbbe6c6ad1f1f9fb4d83ed36c6faaf5e5dae0656b3bac61b9b4823eb88a82843bba63fdcf4464e6cf929200240b79cbe20d2475eb1965c3509d65584c5b74"}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000800)={r3, 0x8, 0x5, 0x4}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000840)={0x0, 0x2, 0x9, 0x8, 0xf, 0xe}, &(0x7f0000000880)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000940)={r7, 0x78, &(0x7f00000008c0)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0xfffff220, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7b}, @in6={0xa, 0x4e20, 0x21c6, @mcast2, 0x3}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000980)=0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x1d, r5}, 0x10, &(0x7f0000000a40)={&(0x7f0000000a00)=@can={{0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "adf120ec60e968ca"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x10000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b40)=0x14) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000b80)={r7, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000c40)={0x6, 0x8000, 0x3ff}, 0xc) setsockopt$inet_buf(r9, 0x0, 0x24, &(0x7f0000000c80)="33d4867d2366f56a5314510abf95e63edf960ea800a27311183f98f94fef26f03940d768ce02c4c9470bad64f2c9254850406397228429e278b33e9e023902e03eec565467c5fc6a9e72309abd393ef9a9220b8e12a073a794a0f4180b7678d802832d7ed545da1910ab64c32908759f944e036a0b1a2d", 0x77) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000dc0)={r6, r0, 0xfff, 0xa3, &(0x7f0000000d00)="33497aa0ade5766ae9f953449a9d27b46bbc10761967eae6250f5aa796fd6721c50bbe3e03ac50a3cfa932c896f1534c0fc3941546d13cee197fd73862eaf8d0c6394d19f56790561e56ac7a5411155fb26c309cd168b7134899ec34dca56157df2eaae7b1e0c7c4da7c4b791af2d4a014e115b3dd99047f26393e7df6063000ea9a22f7742f6646c9a9bc4976993addf05c887576529330e4df962fa5ce21f823a73b", 0x73, 0x6, 0xde6, 0xf, 0x0, 0x0, 0xfffeffff, 'syz1\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000e80)={r8, 0x4, 0x0, 0x2}) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000ec0)) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x7, 0x4, 0x3f8, 0x200, 0x200, 0x310, 0x310, 0x310, 0x310, 0x4, &(0x7f0000000f00), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @remote, 0xf}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7f, 0x7f, 0x9, 0x2}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0xff, 0x0, 0x5, 0x0, {@mac, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x7, 0x2, 0x3b, 0x2, 0x1, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0xc2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x14}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) ioctl$AUTOFS_IOC_CATATONIC(r10, 0x9362, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000013c0)={r0}, 0x8) read$nci(r10, &(0x7f0000001400)=""/244, 0xf4) 519.606905ms ago: executing program 3 (id=2931): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1, {0xa, 0x4e21, 0xf9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x80, 0x0}, 0x4000804) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r2) socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4884) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) unshare(0x22020600) r7 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) pread64(r8, &(0x7f0000000000)=""/95, 0x5f, 0x4) write$cgroup_pid(r6, 0x0, 0x0) 200.988736ms ago: executing program 0 (id=2932): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000640)={0x400, 0x2bae, 0x7, 0x8000, 0x6}, 0x70) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000880)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0], 0x0, 0x80000001, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x59, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[@ANYBLOB="3201000000000000c2040000090001020000000000000000"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd3}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) bind$phonet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0x6672, 0x840, 0x0, 0x0) read(r6, &(0x7f0000001400)=""/4046, 0xffd8) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r7, &(0x7f0000000840)={&(0x7f0000000a80)=@xdp, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/157, 0x9d}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000a00)=""/75, 0x4b}, {&(0x7f0000000a80)}, {&(0x7f0000000740)=""/6, 0x6}], 0x7}, 0x10041) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18f3ff00030000000000000011003c079111c300000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 0s ago: executing program 5 (id=2933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffffffff00000000ffffffff4400010008000000950000bc8b893e00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80802, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000100)={0xfffffffd}, 0x4) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x400, 0x2}, 0x6) write$bt_hci(r3, &(0x7f0000000080)={0x1, @inquiry={{0x401, 0x5}, {"dbfcec", 0x8, 0x7}}}, 0x9) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000009050001000700000005000100070000000900020073797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r6, 0x0, 0x0, 0x800) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) unshare(0x22020600) kernel console output (not intermixed with test programs): envswitch: netlink: IPv4 tunnel dst address is zero [ 302.348373][T12155] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 302.382311][T12155] netlink: 'syz.3.1688': attribute type 2 has an invalid length. [ 302.489859][T12157] __nla_validate_parse: 4 callbacks suppressed [ 302.489901][T12157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1689'. [ 302.523188][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 302.717987][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076150000: rx timeout, send abort [ 302.726220][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cb80400: abort rx timeout. Force session deactivation [ 303.070233][T12173] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.204448][T12177] bridge0: port 1(vlan2) entered blocking state [ 303.210891][T12177] bridge0: port 1(vlan2) entered disabled state [ 303.228800][ C1] vcan0: j1939_tp_rxtimer: 0xffff888076150000: abort rx timeout. Force session deactivation [ 303.286992][T12177] vlan2: entered allmulticast mode [ 303.298941][T12177] geneve0: entered allmulticast mode [ 303.315023][T12177] vlan2: entered promiscuous mode [ 303.322051][T12177] geneve0: entered promiscuous mode [ 303.650448][T12173] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.964680][T12193] gretap1: entered promiscuous mode [ 304.149465][T12173] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.163247][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 304.306383][T12201] netlink: 'syz.1.1705': attribute type 49 has an invalid length. [ 304.370224][T12173] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.457271][T12208] netlink: 'syz.3.1706': attribute type 1 has an invalid length. [ 304.500440][T12208] netlink: 'syz.3.1706': attribute type 2 has an invalid length. [ 304.542349][T12212] netlink: 'syz.0.1709': attribute type 1 has an invalid length. [ 304.565055][T12212] netlink: 'syz.0.1709': attribute type 2 has an invalid length. [ 304.868546][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'. [ 304.963001][T12230] tipc: Started in network mode [ 304.968112][T12230] tipc: Node identity c68de0d2fa01, cluster identity 4711 [ 304.975576][T12230] tipc: Enabled bearer , priority 0 [ 305.083015][ T47] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.148060][T12229] tipc: Disabling bearer [ 305.190376][ T47] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.204082][T12237] vlan2: entered promiscuous mode [ 305.308591][T12237] hsr0: entered promiscuous mode [ 305.358448][T12237] vlan2: entered allmulticast mode [ 305.363927][T12237] hsr0: entered allmulticast mode [ 305.369785][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1717'. [ 305.393678][T12237] hsr_slave_0: entered allmulticast mode [ 305.409899][T12237] hsr_slave_1: entered allmulticast mode [ 305.422872][T12245] Bluetooth: MGMT ver 1.23 [ 305.436603][T12245] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 305.490432][T12242] hsr_slave_0: left promiscuous mode [ 305.515176][T12242] hsr_slave_1: left promiscuous mode [ 305.765330][ T3343] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.924310][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.247197][T12271] openvswitch: netlink: Tunnel attr 324 out of range max 16 [ 306.283560][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1726'. [ 306.585356][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 306.781160][T12280] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 307.167508][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 307.742374][T12299] can: request_module (can-proto-0) failed. [ 307.849454][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.853528][T12299] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 307.895588][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.917613][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.946197][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.951759][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1741'. [ 307.963474][T12305] team0: Port device dummy0 removed [ 307.990326][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.095258][T12299] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 308.413460][T12336] veth1_to_team: Caught tx_queue_len zero misconfig [ 308.487732][T12336] syzkaller0: entered promiscuous mode [ 308.515218][T12336] syzkaller0: entered allmulticast mode [ 308.727519][T12351] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1749'. [ 308.753118][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1749'. [ 308.758395][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 308.852599][T12351] netlink: 'syz.5.1749': attribute type 1 has an invalid length. [ 308.860368][T12351] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1749'. [ 308.893486][ T6927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.021703][T12313] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 309.116816][T12367] netlink: 'syz.5.1752': attribute type 61 has an invalid length. [ 309.441556][ T6927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.540505][T12374] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 309.568232][T12374] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 310.017765][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.029259][ T50] Bluetooth: hci6: command tx timeout [ 310.845006][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.874966][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.889599][T12313] bridge_slave_0: entered allmulticast mode [ 310.917748][T12313] bridge_slave_0: entered promiscuous mode [ 311.018550][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.029423][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.036643][T12313] bridge_slave_1: entered allmulticast mode [ 311.044355][T12313] bridge_slave_1: entered promiscuous mode [ 311.194050][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.206295][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.306129][T12418] netlink: 'syz.5.1764': attribute type 61 has an invalid length. [ 311.320899][T12313] team0: Port device team_slave_0 added [ 311.352308][T12313] team0: Port device team_slave_1 added [ 311.575070][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.601066][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.710740][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.767177][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.787698][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.890137][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.936156][T12428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.016187][T12428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.116498][ T50] Bluetooth: hci6: command tx timeout [ 312.291991][T12313] hsr_slave_0: entered promiscuous mode [ 312.317761][T12313] hsr_slave_1: entered promiscuous mode [ 312.334768][T12313] debugfs: 'hsr0' already exists in 'hsr' [ 312.354077][T12313] Cannot create hsr debugfs directory [ 312.751909][ T6928] IPVS: starting estimator thread 0... [ 312.763071][T12434] xt_hashlimit: size too large, truncated to 1048576 [ 313.026475][T12436] IPVS: using max 27 ests per chain, 64800 per kthread [ 313.037216][T12434] netlink: 'syz.0.1769': attribute type 11 has an invalid length. [ 313.045059][T12434] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1769'. [ 313.203706][T12313] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.213704][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.244881][T12443] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 313.252650][T12443] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1771'. [ 313.262759][T12313] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.301249][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.309233][T12313] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.320598][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.347294][T12313] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.398183][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.438483][T12445] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.1772'. [ 313.459770][T12445] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 313.528965][T12447] IPv6: addrconf: prefix option has invalid lifetime [ 313.663075][T12459] netlink: 'syz.5.1776': attribute type 61 has an invalid length. [ 313.858843][T12464] netlink: 'syz.0.1778': attribute type 40 has an invalid length. [ 314.095121][T12480] x_tables: duplicate underflow at hook 4 [ 314.103097][T12480] netlink: 'syz.5.1784': attribute type 61 has an invalid length. [ 314.108311][T12478] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 314.110927][T12480] netlink: 'syz.5.1784': attribute type 62 has an invalid length. [ 314.199469][T12477] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 314.249493][ T50] Bluetooth: hci6: command tx timeout [ 314.255722][T12313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.411052][T12313] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.628830][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1788'. [ 314.662009][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.669252][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.852310][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.859482][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.129322][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1792'. [ 315.249339][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1794'. [ 315.258260][T12519] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1794'. [ 315.637880][T12519] geneve2: entered promiscuous mode [ 315.654629][T12519] geneve2: entered allmulticast mode [ 315.692688][T12524] tipc: Enabling of bearer rejected, failed to enable media [ 315.722580][T12528] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 316.174087][ T29] audit: type=1800 audit(1783229681.857:9): pid=12532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1797" name="memory.events" dev="tmpfs" ino=2038 res=0 errno=0 [ 316.198784][T12535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.227076][T12532] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 316.234850][T12532] netlink: 'syz.1.1797': attribute type 2 has an invalid length. [ 316.255669][T12539] openvswitch: netlink: Missing valid actions attribute. [ 316.287659][T12539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.307643][ T50] Bluetooth: hci6: command tx timeout [ 316.389424][T12545] netlink: 'syz.5.1801': attribute type 1 has an invalid length. [ 317.064052][T12575] FAULT_INJECTION: forcing a failure. [ 317.064052][T12575] name failslab, interval 1, probability 0, space 0, times 0 [ 317.090982][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.210569][T12575] CPU: 1 UID: 0 PID: 12575 Comm: syz.3.1810 Not tainted syzkaller #0 PREEMPT(full) [ 317.210594][T12575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.210604][T12575] Call Trace: [ 317.210611][T12575] [ 317.210619][T12575] dump_stack_lvl+0xe8/0x150 [ 317.210651][T12575] should_fail_ex+0x40c/0x560 [ 317.210676][T12575] should_failslab+0xa8/0x100 [ 317.210706][T12575] __kmalloc_cache_noprof+0xa8/0x660 [ 317.210731][T12575] ? __inet_diag_dump_start+0x90/0xbb0 [ 317.210759][T12575] ? __inet_diag_dump_start+0x90/0xbb0 [ 317.210787][T12575] __inet_diag_dump_start+0x90/0xbb0 [ 317.210813][T12575] ? netlink_lookup+0x30/0x200 [ 317.210838][T12575] ? netlink_lookup+0x30/0x200 [ 317.210867][T12575] __netlink_dump_start+0x442/0x7b0 [ 317.210895][T12575] inet_diag_rcv_msg_compat+0x214/0x420 [ 317.210922][T12575] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 317.210951][T12575] ? sock_diag_rcv_msg+0x184/0x5f0 [ 317.210973][T12575] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 317.210996][T12575] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 317.211018][T12575] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 317.211044][T12575] ? sock_diag_rcv_msg+0x184/0x5f0 [ 317.211071][T12575] sock_diag_rcv_msg+0x4b0/0x5f0 [ 317.211098][T12575] netlink_rcv_skb+0x226/0x4a0 [ 317.211125][T12575] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 317.211148][T12575] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.211185][T12575] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.211215][T12575] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.211247][T12575] netlink_unicast+0x7bb/0x940 [ 317.211282][T12575] netlink_sendmsg+0x813/0xb40 [ 317.211320][T12575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.211352][T12575] ? aa_sock_msg_perm+0xf1/0x1b0 [ 317.211376][T12575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.211401][T12575] sock_sendmsg_nosec+0x13a/0x180 [ 317.211424][T12575] ____sys_sendmsg+0x54e/0x850 [ 317.211464][T12575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.211498][T12575] ? import_iovec+0x73/0xa0 [ 317.211526][T12575] ___sys_sendmsg+0x2a5/0x360 [ 317.211551][T12575] ? __lock_acquire+0x683/0x2cf0 [ 317.211577][T12575] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.211638][T12575] ? __fget_files+0x2a/0x420 [ 317.211660][T12575] ? __fget_files+0x3a2/0x420 [ 317.211693][T12575] __x64_sys_sendmsg+0x1b1/0x290 [ 317.211722][T12575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.211767][T12575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.211788][T12575] do_syscall_64+0x174/0x580 [ 317.211811][T12575] ? trace_irq_disable+0x3b/0x140 [ 317.211835][T12575] ? clear_bhb_loop+0x40/0x90 [ 317.211857][T12575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.211874][T12575] RIP: 0033:0x7f977df9de59 [ 317.211891][T12575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.211907][T12575] RSP: 002b:00007f977ef0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.211927][T12575] RAX: ffffffffffffffda RBX: 00007f977e225fa0 RCX: 00007f977df9de59 [ 317.211939][T12575] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 317.211950][T12575] RBP: 00007f977ef0e090 R08: 0000000000000000 R09: 0000000000000000 [ 317.211960][T12575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.211970][T12575] R13: 00007f977e226038 R14: 00007f977e225fa0 R15: 00007ffe75123e08 [ 317.211999][T12575] [ 317.699146][T12313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.124574][T12601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.195364][T12601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.252269][T12601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.260557][T12601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.396069][T12606] bond3: option packets_per_slave: invalid value (1048582) [ 318.404625][T12606] bond3: option packets_per_slave: allowed values 0 - 65535 [ 318.421712][T12606] bond3 (unregistering): Released all slaves [ 318.470822][T12313] veth0_vlan: entered promiscuous mode [ 318.484337][T12618] FAULT_INJECTION: forcing a failure. [ 318.484337][T12618] name failslab, interval 1, probability 0, space 0, times 0 [ 318.487374][T12313] veth1_vlan: entered promiscuous mode [ 318.539081][T12618] CPU: 1 UID: 0 PID: 12618 Comm: syz.1.1822 Not tainted syzkaller #0 PREEMPT(full) [ 318.539114][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.539125][T12618] Call Trace: [ 318.539133][T12618] [ 318.539141][T12618] dump_stack_lvl+0xe8/0x150 [ 318.539174][T12618] should_fail_ex+0x40c/0x560 [ 318.539198][T12618] should_failslab+0xa8/0x100 [ 318.539225][T12618] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 318.539247][T12618] ? skb_clone+0x212/0x3a0 [ 318.539270][T12618] ? skb_clone+0x212/0x3a0 [ 318.539300][T12618] skb_clone+0x212/0x3a0 [ 318.539329][T12618] __netlink_deliver_tap+0x413/0x860 [ 318.539365][T12618] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.539392][T12618] netlink_deliver_tap+0x19c/0x1b0 [ 318.539420][T12618] __netlink_sendskb+0x47/0x90 [ 318.539445][T12618] netlink_dump+0xa8c/0xee0 [ 318.539470][T12618] ? rcu_is_watching+0x15/0xb0 [ 318.539506][T12618] ? __pfx_netlink_dump+0x10/0x10 [ 318.539527][T12618] ? __inet_diag_dump_start+0x90/0xbb0 [ 318.539561][T12618] ? netlink_lookup+0x30/0x200 [ 318.539586][T12618] ? netlink_lookup+0x30/0x200 [ 318.539615][T12618] __netlink_dump_start+0x589/0x7b0 [ 318.539647][T12618] inet_diag_rcv_msg_compat+0x214/0x420 [ 318.539675][T12618] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 318.539704][T12618] ? sock_diag_rcv_msg+0x184/0x5f0 [ 318.539727][T12618] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 318.539749][T12618] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 318.539771][T12618] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 318.539801][T12618] ? sock_diag_rcv_msg+0x184/0x5f0 [ 318.539836][T12618] sock_diag_rcv_msg+0x4b0/0x5f0 [ 318.539861][T12618] netlink_rcv_skb+0x226/0x4a0 [ 318.539886][T12618] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 318.539912][T12618] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.539950][T12618] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.539975][T12618] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.540008][T12618] netlink_unicast+0x7bb/0x940 [ 318.540044][T12618] netlink_sendmsg+0x813/0xb40 [ 318.540082][T12618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.540111][T12618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.540136][T12618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.540163][T12618] sock_sendmsg_nosec+0x13a/0x180 [ 318.540187][T12618] ____sys_sendmsg+0x54e/0x850 [ 318.540220][T12618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.540256][T12618] ? import_iovec+0x73/0xa0 [ 318.540281][T12618] ___sys_sendmsg+0x2a5/0x360 [ 318.540303][T12618] ? __lock_acquire+0x683/0x2cf0 [ 318.540330][T12618] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.540389][T12618] ? __fget_files+0x2a/0x420 [ 318.540413][T12618] ? __fget_files+0x3a2/0x420 [ 318.540446][T12618] __x64_sys_sendmsg+0x1b1/0x290 [ 318.540476][T12618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.540521][T12618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.540542][T12618] do_syscall_64+0x174/0x580 [ 318.540566][T12618] ? trace_irq_disable+0x3b/0x140 [ 318.540587][T12618] ? clear_bhb_loop+0x40/0x90 [ 318.540610][T12618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.540629][T12618] RIP: 0033:0x7f99b1f9de59 [ 318.540646][T12618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.540661][T12618] RSP: 002b:00007f99b01f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.540680][T12618] RAX: ffffffffffffffda RBX: 00007f99b2225fa0 RCX: 00007f99b1f9de59 [ 318.540693][T12618] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 318.540704][T12618] RBP: 00007f99b01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.540714][T12618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.540724][T12618] R13: 00007f99b2226038 R14: 00007f99b2225fa0 R15: 00007ffc8411dc08 [ 318.540753][T12618] [ 318.583872][T12313] veth0_macvtap: entered promiscuous mode [ 318.994871][T12313] veth1_macvtap: entered promiscuous mode [ 319.153666][T12622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.162516][T12313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.218085][T12313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.323782][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.332577][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.349748][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.358533][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.530489][T12641] netlink: 'syz.5.1830': attribute type 61 has an invalid length. [ 319.539260][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1830'. [ 319.648140][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.655989][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.698109][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.710239][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.985452][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1834'. [ 320.017584][T12653] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1834'. [ 320.447199][T12668] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.988617][T12687] xt_l2tp: missing protocol rule (udp|l2tpip) [ 321.323953][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 321.560577][T12668] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.865536][T12668] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.087437][T12668] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.184962][T12716] syzkaller0: entered promiscuous mode [ 322.190487][T12716] syzkaller0: entered allmulticast mode [ 322.199282][T12716] tipc: Started in network mode [ 322.204587][T12716] tipc: Node identity 4604f63df54f, cluster identity 4711 [ 322.225752][T12716] tipc: Enabled bearer , priority 0 [ 322.247023][T12715] tipc: Resetting bearer [ 322.317798][T12715] tipc: Disabling bearer [ 322.440724][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1852'. [ 322.989758][ T3033] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.100803][ T3033] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.256154][ T35] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.290568][ T35] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.385999][T12742] netlink: 'syz.6.1858': attribute type 25 has an invalid length. [ 323.500674][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1860'. [ 323.858886][T12762] netlink: 16170 bytes leftover after parsing attributes in process `syz.6.1866'. [ 324.169811][T12767] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1868'. [ 324.295009][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1868'. [ 324.388144][T12783] netlink: 'syz.1.1873': attribute type 1 has an invalid length. [ 324.489195][T12783] bond8: entered promiscuous mode [ 324.494726][T12783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 324.549539][T12790] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1874'. [ 324.606536][T12786] netlink: 'syz.3.1874': attribute type 3 has an invalid length. [ 324.705855][T12786] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 324.757887][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 324.909792][T12808] sctp: [Deprecated]: syz.5.1877 (pid 12808) Use of int in max_burst socket option deprecated. [ 324.909792][T12808] Use struct sctp_assoc_value instead [ 325.503290][T12834] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1885'. [ 325.544491][T12832] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 325.602558][T12826] netlink: 'syz.5.1884': attribute type 15 has an invalid length. [ 325.692424][T12843] netlink: 'syz.6.1882': attribute type 1 has an invalid length. [ 325.830928][T12843] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1882'. [ 327.173782][T12902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.181031][T12902] IPv6: NLM_F_CREATE should be set when creating new route [ 327.308859][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.597614][T12921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1908'. [ 327.877976][T12921] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 328.117957][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 328.140680][T12937] xt_hashlimit: size too large, truncated to 1048576 [ 328.441150][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 328.498849][T12929] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1909'. [ 328.521105][T12929] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1909'. [ 328.541417][T12929] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1909'. [ 328.711579][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 329.112280][T12963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 329.594966][T12982] __nla_validate_parse: 1 callbacks suppressed [ 329.594985][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1922'. [ 329.891010][T12980] nbd3: detected capacity change from 0 to 63 [ 329.899587][T12984] block nbd3: NBD_DISCONNECT [ 329.907128][T12984] block nbd3: Disconnected due to user request. [ 329.916109][T12984] block nbd3: shutting down sockets [ 329.916232][ T4953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 329.934308][ T4953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 330.002054][ T1574] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 330.030518][ T1574] Buffer I/O error on dev nbd3, logical block 1, async page read [ 330.038322][ T1574] Buffer I/O error on dev nbd3, logical block 2, async page read [ 330.046114][ T1574] Buffer I/O error on dev nbd3, logical block 3, async page read [ 330.070771][ T1574] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 330.079895][ T1574] Buffer I/O error on dev nbd3, logical block 0, async page read [ 330.087667][ T1574] Buffer I/O error on dev nbd3, logical block 1, async page read [ 330.095447][ T1574] Buffer I/O error on dev nbd3, logical block 2, async page read [ 330.103233][ T1574] Buffer I/O error on dev nbd3, logical block 3, async page read [ 330.122439][ T4953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 330.131667][ T4953] Buffer I/O error on dev nbd3, logical block 0, async page read [ 330.139601][ T4953] Buffer I/O error on dev nbd3, logical block 1, async page read [ 330.149180][ T4953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 330.161723][T12997] netlink: 'syz.1.1923': attribute type 61 has an invalid length. [ 330.166054][ T4953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 330.184773][ T4953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 330.194538][ T4953] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.203902][ T4953] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.213331][ T4953] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 330.224707][ T5628] ldm_validate_partition_table(): Disk read failed. [ 330.256872][ T5628] Dev nbd3: unable to read RDB block 0 [ 330.289790][ T5628] nbd3: unable to read partition table [ 330.300921][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1927'. [ 330.326023][ T5628] ldm_validate_partition_table(): Disk read failed. [ 330.335756][T13005] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1927'. [ 330.342484][ T5628] Dev nbd3: unable to read RDB block 0 [ 330.353518][ T5628] nbd3: unable to read partition table [ 330.360867][T13005] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1927'. [ 330.447503][T13009] netlink: 'syz.5.1928': attribute type 3 has an invalid length. [ 330.511549][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1928'. [ 331.068632][T13022] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1932'. [ 332.063046][T13055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1942'. [ 332.498908][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1944'. [ 333.881300][T13094] bond9: entered promiscuous mode [ 333.900405][T13094] bond9: entered allmulticast mode [ 333.986609][T13094] 8021q: adding VLAN 0 to HW filter on device bond9 [ 334.708036][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1955'. [ 334.736687][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1955'. [ 335.343292][T13113] syzkaller0: entered promiscuous mode [ 335.437266][T13113] syzkaller0: entered allmulticast mode [ 335.504266][T13113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1957'. [ 335.918826][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 335.960918][T13122] netlink: 'syz.1.1961': attribute type 12 has an invalid length. [ 336.524909][T13132] lo: Caught tx_queue_len zero misconfig [ 336.559082][T13132] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 336.707134][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 336.737457][T13132] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1964'. [ 336.750101][T13122] netlink: 'syz.1.1961': attribute type 12 has an invalid length. [ 337.237412][ T29] audit: type=1800 audit(1783229702.897:10): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1967" name="memory.events" dev="tmpfs" ino=2238 res=0 errno=0 [ 337.327349][ T29] audit: type=1804 audit(1783229702.897:11): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1967" name="/newroot/439/memory.events" dev="tmpfs" ino=2238 res=1 errno=0 [ 337.678756][T13149] netlink: 'syz.1.1970': attribute type 3 has an invalid length. [ 337.686522][T13149] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1970'. [ 337.957025][T13153] block nbd3: Unsupported socket: should be TCP or UNIX. [ 338.542162][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 339.344647][T13187] syzkaller1: entered promiscuous mode [ 339.356048][T13187] syzkaller1: entered allmulticast mode [ 339.642108][T13196] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 339.853728][T13214] FAULT_INJECTION: forcing a failure. [ 339.853728][T13214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.875045][T13214] CPU: 1 UID: 0 PID: 13214 Comm: syz.0.1988 Not tainted syzkaller #0 PREEMPT(full) [ 339.875070][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.875081][T13214] Call Trace: [ 339.875089][T13214] [ 339.875096][T13214] dump_stack_lvl+0xe8/0x150 [ 339.875130][T13214] should_fail_ex+0x40c/0x560 [ 339.875157][T13214] _copy_from_user+0x2d/0xb0 [ 339.875184][T13214] ___sys_sendmsg+0x1c6/0x360 [ 339.875208][T13214] ? __lock_acquire+0x683/0x2cf0 [ 339.875238][T13214] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.875300][T13214] ? __fget_files+0x2a/0x420 [ 339.875323][T13214] ? __fget_files+0x3a2/0x420 [ 339.875357][T13214] __x64_sys_sendmsg+0x1b1/0x290 [ 339.875387][T13214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.875432][T13214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.875453][T13214] do_syscall_64+0x174/0x580 [ 339.875477][T13214] ? trace_irq_disable+0x3b/0x140 [ 339.875501][T13214] ? clear_bhb_loop+0x40/0x90 [ 339.875523][T13214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.875542][T13214] RIP: 0033:0x7f7afe19de59 [ 339.875560][T13214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.875577][T13214] RSP: 002b:00007f7aff06c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.875597][T13214] RAX: ffffffffffffffda RBX: 00007f7afe426090 RCX: 00007f7afe19de59 [ 339.875611][T13214] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000003 [ 339.875623][T13214] RBP: 00007f7aff06c090 R08: 0000000000000000 R09: 0000000000000000 [ 339.875634][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.875646][T13214] R13: 00007f7afe426128 R14: 00007f7afe426090 R15: 00007ffcafc80268 [ 339.875677][T13214] [ 340.389690][T13231] netlink: 'syz.5.1996': attribute type 50 has an invalid length. [ 340.398000][T13231] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1996'. [ 340.409000][T13231] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1996'. [ 340.454300][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 340.509824][T13238] ip6gre0: Caught tx_queue_len zero misconfig [ 340.515985][T13238] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 341.038680][T13264] FAULT_INJECTION: forcing a failure. [ 341.038680][T13264] name failslab, interval 1, probability 0, space 0, times 0 [ 341.085644][T13264] CPU: 0 UID: 0 PID: 13264 Comm: syz.6.2002 Not tainted syzkaller #0 PREEMPT(full) [ 341.085670][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.085681][T13264] Call Trace: [ 341.085688][T13264] [ 341.085697][T13264] dump_stack_lvl+0xe8/0x150 [ 341.085730][T13264] should_fail_ex+0x40c/0x560 [ 341.085756][T13264] should_failslab+0xa8/0x100 [ 341.085786][T13264] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 341.085808][T13264] ? local_lock_release+0x9c/0x160 [ 341.085834][T13264] ? __alloc_skb+0x1d7/0x7a0 [ 341.085856][T13264] ? __alloc_skb+0x1d7/0x7a0 [ 341.085886][T13264] __alloc_skb+0x1d7/0x7a0 [ 341.085921][T13264] netlink_sendmsg+0x5d4/0xb40 [ 341.085963][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.085996][T13264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 341.086020][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.086047][T13264] sock_sendmsg_nosec+0x13a/0x180 [ 341.086071][T13264] ____sys_sendmsg+0x54e/0x850 [ 341.086104][T13264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.086140][T13264] ? import_iovec+0x73/0xa0 [ 341.086170][T13264] ___sys_sendmsg+0x2a5/0x360 [ 341.086195][T13264] ? __lock_acquire+0x683/0x2cf0 [ 341.086225][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.086289][T13264] ? __fget_files+0x2a/0x420 [ 341.086311][T13264] ? __fget_files+0x3a2/0x420 [ 341.086344][T13264] __x64_sys_sendmsg+0x1b1/0x290 [ 341.086374][T13264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.086420][T13264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.086441][T13264] do_syscall_64+0x174/0x580 [ 341.086465][T13264] ? trace_irq_disable+0x3b/0x140 [ 341.086488][T13264] ? clear_bhb_loop+0x40/0x90 [ 341.086512][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.086531][T13264] RIP: 0033:0x7f546a39de59 [ 341.086549][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.086565][T13264] RSP: 002b:00007f546b2e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.086585][T13264] RAX: ffffffffffffffda RBX: 00007f546a626090 RCX: 00007f546a39de59 [ 341.086599][T13264] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000003 [ 341.086612][T13264] RBP: 00007f546b2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.086623][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.086634][T13264] R13: 00007f546a626128 R14: 00007f546a626090 R15: 00007fff399fcb78 [ 341.086666][T13264] [ 341.605960][T13270] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.613296][T13270] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.622322][T13270] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 341.664890][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 341.997937][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2015'. [ 342.103942][T13301] netlink: 'syz.3.2015': attribute type 29 has an invalid length. [ 342.290234][T13309] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2018'. [ 342.301218][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2018'. [ 342.492911][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2021'. [ 342.587393][T13326] netlink: 3752 bytes leftover after parsing attributes in process `syz.5.2022'. [ 343.322368][T13360] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 343.389037][T13360] bond11: entered promiscuous mode [ 343.394604][T13360] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.432687][T13365] FAULT_INJECTION: forcing a failure. [ 343.432687][T13365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.445778][T13365] CPU: 1 UID: 0 PID: 13365 Comm: syz.0.2033 Not tainted syzkaller #0 PREEMPT(full) [ 343.445803][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.445815][T13365] Call Trace: [ 343.445822][T13365] [ 343.445830][T13365] dump_stack_lvl+0xe8/0x150 [ 343.445861][T13365] should_fail_ex+0x40c/0x560 [ 343.445886][T13365] _copy_from_iter+0x1d3/0x1660 [ 343.445906][T13365] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 343.445929][T13365] ? rcu_is_watching+0x15/0xb0 [ 343.445957][T13365] ? trace_kmem_cache_alloc+0x29/0xe0 [ 343.445981][T13365] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 343.446002][T13365] ? __pfx__copy_from_iter+0x10/0x10 [ 343.446025][T13365] ? __alloc_skb+0x276/0x7a0 [ 343.446047][T13365] ? __alloc_skb+0x276/0x7a0 [ 343.446076][T13365] ? netlink_sendmsg+0x650/0xb40 [ 343.446104][T13365] ? skb_put+0x112/0x210 [ 343.446131][T13365] netlink_sendmsg+0x6c0/0xb40 [ 343.446168][T13365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.446200][T13365] ? aa_sock_msg_perm+0xf1/0x1b0 [ 343.446224][T13365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.446251][T13365] sock_sendmsg_nosec+0x13a/0x180 [ 343.446275][T13365] ____sys_sendmsg+0x54e/0x850 [ 343.446307][T13365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.446340][T13365] ? import_iovec+0x73/0xa0 [ 343.446370][T13365] ___sys_sendmsg+0x2a5/0x360 [ 343.446395][T13365] ? __lock_acquire+0x683/0x2cf0 [ 343.446424][T13365] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.446486][T13365] ? __fget_files+0x2a/0x420 [ 343.446509][T13365] ? __fget_files+0x3a2/0x420 [ 343.446542][T13365] __x64_sys_sendmsg+0x1b1/0x290 [ 343.446571][T13365] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.446616][T13365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.446637][T13365] do_syscall_64+0x174/0x580 [ 343.446661][T13365] ? trace_irq_disable+0x3b/0x140 [ 343.446685][T13365] ? clear_bhb_loop+0x40/0x90 [ 343.446708][T13365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.446727][T13365] RIP: 0033:0x7f7afe19de59 [ 343.446745][T13365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.446761][T13365] RSP: 002b:00007f7aff06c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.446788][T13365] RAX: ffffffffffffffda RBX: 00007f7afe426090 RCX: 00007f7afe19de59 [ 343.446802][T13365] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000003 [ 343.446815][T13365] RBP: 00007f7aff06c090 R08: 0000000000000000 R09: 0000000000000000 [ 343.446827][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.446839][T13365] R13: 00007f7afe426128 R14: 00007f7afe426090 R15: 00007ffcafc80268 [ 343.446870][T13365] [ 343.461032][T13360] netlink: 'syz.1.2031': attribute type 5 has an invalid length. [ 343.969859][ T6927] bridge0: entered promiscuous mode [ 344.308339][T13386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.520430][T13401] syzkaller0: entered promiscuous mode [ 344.544994][T13401] syzkaller0: entered allmulticast mode [ 344.586810][T13399] macsec0: entered promiscuous mode [ 344.592710][T13399] macsec0: left promiscuous mode [ 344.761451][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 345.484407][T13424] vxcan3: entered allmulticast mode [ 345.646150][T13430] ipvlan0: Caught tx_queue_len zero misconfig [ 345.827959][T13430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.921552][T13449] netlink: 'syz.3.2059': attribute type 1 has an invalid length. [ 345.971081][T13449] netlink: 'syz.3.2059': attribute type 2 has an invalid length. [ 346.065439][T13461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2056'. [ 346.115517][T13458] syzkaller0: entered promiscuous mode [ 346.122508][T13458] syzkaller0: entered allmulticast mode [ 346.135760][T13454] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 346.147639][T13454] batman_adv: batadv0: Adding interface: gretap1 [ 346.154377][T13454] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.184305][T13454] batman_adv: batadv0: Interface activated: gretap1 [ 346.478525][T13473] FAULT_INJECTION: forcing a failure. [ 346.478525][T13473] name failslab, interval 1, probability 0, space 0, times 0 [ 346.505855][T13472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.534420][T13473] CPU: 1 UID: 0 PID: 13473 Comm: syz.0.2063 Not tainted syzkaller #0 PREEMPT(full) [ 346.534448][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.534459][T13473] Call Trace: [ 346.534466][T13473] [ 346.534475][T13473] dump_stack_lvl+0xe8/0x150 [ 346.534508][T13473] should_fail_ex+0x40c/0x560 [ 346.534544][T13473] should_failslab+0xa8/0x100 [ 346.534573][T13473] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 346.534597][T13473] ? skb_clone+0x212/0x3a0 [ 346.534623][T13473] ? skb_clone+0x212/0x3a0 [ 346.534656][T13473] skb_clone+0x212/0x3a0 [ 346.534688][T13473] __netlink_deliver_tap+0x413/0x860 [ 346.534729][T13473] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.534758][T13473] netlink_deliver_tap+0x19c/0x1b0 [ 346.534787][T13473] netlink_sendskb+0x68/0x140 [ 346.534815][T13473] netlink_rcv_skb+0x2a4/0x4a0 [ 346.534843][T13473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.534871][T13473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.534922][T13473] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.534949][T13473] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.534981][T13473] netlink_unicast+0x7bb/0x940 [ 346.535017][T13473] netlink_sendmsg+0x813/0xb40 [ 346.535052][T13473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.535085][T13473] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.535110][T13473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.535136][T13473] sock_sendmsg_nosec+0x13a/0x180 [ 346.535161][T13473] ____sys_sendmsg+0x54e/0x850 [ 346.535195][T13473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.535232][T13473] ? import_iovec+0x73/0xa0 [ 346.535262][T13473] ___sys_sendmsg+0x2a5/0x360 [ 346.535288][T13473] ? __lock_acquire+0x683/0x2cf0 [ 346.535318][T13473] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.535382][T13473] ? __fget_files+0x2a/0x420 [ 346.535405][T13473] ? __fget_files+0x3a2/0x420 [ 346.535440][T13473] __x64_sys_sendmsg+0x1b1/0x290 [ 346.535470][T13473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.535517][T13473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.535544][T13473] do_syscall_64+0x174/0x580 [ 346.535569][T13473] ? trace_irq_disable+0x3b/0x140 [ 346.535592][T13473] ? clear_bhb_loop+0x40/0x90 [ 346.535616][T13473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.535635][T13473] RIP: 0033:0x7f7afe19de59 [ 346.535653][T13473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.535670][T13473] RSP: 002b:00007f7aff06c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.535690][T13473] RAX: ffffffffffffffda RBX: 00007f7afe426090 RCX: 00007f7afe19de59 [ 346.535704][T13473] RDX: 0000000000040010 RSI: 0000200000006040 RDI: 0000000000000003 [ 346.535717][T13473] RBP: 00007f7aff06c090 R08: 0000000000000000 R09: 0000000000000000 [ 346.535729][T13473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.535740][T13473] R13: 00007f7afe426128 R14: 00007f7afe426090 R15: 00007ffcafc80268 [ 346.535772][T13473] [ 346.587955][T13475] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2065'. [ 346.843677][T13479] syzkaller0: entered promiscuous mode [ 346.898518][T13479] syzkaller0: entered allmulticast mode [ 347.917385][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2079'. [ 347.972146][T13530] FAULT_INJECTION: forcing a failure. [ 347.972146][T13530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.039932][T13530] CPU: 1 UID: 0 PID: 13530 Comm: syz.6.2078 Not tainted syzkaller #0 PREEMPT(full) [ 348.039958][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.039970][T13530] Call Trace: [ 348.039977][T13530] [ 348.039985][T13530] dump_stack_lvl+0xe8/0x150 [ 348.040019][T13530] should_fail_ex+0x40c/0x560 [ 348.040045][T13530] _copy_to_user+0x31/0xb0 [ 348.040070][T13530] simple_read_from_buffer+0xe1/0x170 [ 348.040110][T13530] proc_fail_nth_read+0x1bb/0x230 [ 348.040140][T13530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.040168][T13530] ? rw_verify_area+0x24a/0x4c0 [ 348.040197][T13530] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.040221][T13530] vfs_read+0x213/0xa80 [ 348.040253][T13530] ? __pfx___mutex_lock+0x10/0x10 [ 348.040280][T13530] ? __pfx_vfs_read+0x10/0x10 [ 348.040306][T13530] ? __fget_files+0x2a/0x420 [ 348.040332][T13530] ? __fget_files+0x3a2/0x420 [ 348.040353][T13530] ? __fget_files+0x2a/0x420 [ 348.040382][T13530] ksys_read+0x150/0x270 [ 348.040412][T13530] ? __pfx_ksys_read+0x10/0x10 [ 348.040446][T13530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.040466][T13530] do_syscall_64+0x174/0x580 [ 348.040488][T13530] ? trace_irq_disable+0x3b/0x140 [ 348.040517][T13530] ? clear_bhb_loop+0x40/0x90 [ 348.040540][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.040565][T13530] RIP: 0033:0x7f546a35e68e [ 348.040582][T13530] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.040597][T13530] RSP: 002b:00007f546b2e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.040617][T13530] RAX: ffffffffffffffda RBX: 00007f546b2e66c0 RCX: 00007f546a35e68e [ 348.040631][T13530] RDX: 000000000000000f RSI: 00007f546b2e60a0 RDI: 0000000000000005 [ 348.040642][T13530] RBP: 00007f546b2e6090 R08: 0000000000000000 R09: 0000000000000000 [ 348.040653][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.040664][T13530] R13: 00007f546a626128 R14: 00007f546a626090 R15: 00007fff399fcb78 [ 348.040694][T13530] [ 348.359377][T13535] netlink: 'syz.5.2082': attribute type 1 has an invalid length. [ 348.474247][T13540] FAULT_INJECTION: forcing a failure. [ 348.474247][T13540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.487641][T13540] CPU: 1 UID: 0 PID: 13540 Comm: syz.5.2085 Not tainted syzkaller #0 PREEMPT(full) [ 348.487667][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.487677][T13540] Call Trace: [ 348.487684][T13540] [ 348.487691][T13540] dump_stack_lvl+0xe8/0x150 [ 348.487724][T13540] should_fail_ex+0x40c/0x560 [ 348.487751][T13540] _copy_to_user+0x31/0xb0 [ 348.487780][T13540] simple_read_from_buffer+0xe1/0x170 [ 348.487810][T13540] proc_fail_nth_read+0x1bb/0x230 [ 348.487840][T13540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.487868][T13540] ? rw_verify_area+0x24a/0x4c0 [ 348.487897][T13540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.487920][T13540] vfs_read+0x213/0xa80 [ 348.487953][T13540] ? __pfx___mutex_lock+0x10/0x10 [ 348.487979][T13540] ? __pfx_vfs_read+0x10/0x10 [ 348.488008][T13540] ? __fget_files+0x2a/0x420 [ 348.488037][T13540] ? __fget_files+0x3a2/0x420 [ 348.488059][T13540] ? __fget_files+0x2a/0x420 [ 348.488092][T13540] ksys_read+0x150/0x270 [ 348.488121][T13540] ? __pfx_ksys_read+0x10/0x10 [ 348.488157][T13540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.488178][T13540] do_syscall_64+0x174/0x580 [ 348.488202][T13540] ? trace_irq_disable+0x3b/0x140 [ 348.488225][T13540] ? clear_bhb_loop+0x40/0x90 [ 348.488249][T13540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.488267][T13540] RIP: 0033:0x7fa88c95e68e [ 348.488285][T13540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.488302][T13540] RSP: 002b:00007fa88d929fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.488322][T13540] RAX: ffffffffffffffda RBX: 00007fa88d92a6c0 RCX: 00007fa88c95e68e [ 348.488336][T13540] RDX: 000000000000000f RSI: 00007fa88d92a0a0 RDI: 0000000000000005 [ 348.488347][T13540] RBP: 00007fa88d92a090 R08: 0000000000000000 R09: 0000000000000000 [ 348.488359][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.488370][T13540] R13: 00007fa88cc26038 R14: 00007fa88cc25fa0 R15: 00007ffe4cb2c408 [ 348.488410][T13540] [ 349.002744][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2087'. [ 353.292619][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e4a400: rx timeout, send abort [ 353.333066][T13637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.792752][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805780bc00: rx timeout, send abort [ 353.801252][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e4a400: abort rx timeout. Force session deactivation [ 353.960373][T13666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.301076][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805780bc00: abort rx timeout. Force session deactivation [ 354.318767][T13688] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 354.364141][T13688] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 354.441391][T13677] syzkaller1: entered promiscuous mode [ 354.479087][T13677] syzkaller1: entered allmulticast mode [ 354.644193][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2128'. [ 354.933727][T13709] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2132'. [ 355.506650][T13730] nbd3: detected capacity change from 0 to 63 [ 355.521286][T13734] block nbd3: NBD_DISCONNECT [ 355.531469][T13734] block nbd3: Disconnected due to user request. [ 355.559072][T13734] block nbd3: shutting down sockets [ 355.583572][ C1] blk_print_req_error: 117 callbacks suppressed [ 355.583591][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.599165][ C1] buffer_io_error: 138 callbacks suppressed [ 355.599183][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 355.633569][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.642868][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 355.652793][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.662015][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 355.669803][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.678970][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 355.687133][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.699373][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 355.707604][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.717337][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 355.725303][ T25] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.734963][ T25] Buffer I/O error on dev nbd3, logical block 2, async page read [ 355.743209][ T25] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.752507][ T25] Buffer I/O error on dev nbd3, logical block 3, async page read [ 355.762132][ T25] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.771463][ T25] Buffer I/O error on dev nbd3, logical block 0, async page read [ 355.781249][ T25] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.791946][ T25] Buffer I/O error on dev nbd3, logical block 1, async page read [ 355.807309][ T5628] ldm_validate_partition_table(): Disk read failed. [ 355.818361][ T5628] Dev nbd3: unable to read RDB block 0 [ 355.828993][ T5628] nbd3: unable to read partition table [ 355.849585][ T5628] ldm_validate_partition_table(): Disk read failed. [ 355.875927][ T5628] Dev nbd3: unable to read RDB block 0 [ 355.965510][ T5628] nbd3: unable to read partition table [ 356.505184][T13773] gretap1: entered allmulticast mode [ 356.747135][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 356.827983][T13794] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2155'. [ 356.966552][T13796] xt_l2tp: missing protocol rule (udp|l2tpip) [ 357.090291][T13768] xt_l2tp: missing protocol rule (udp|l2tpip) [ 357.412670][T13809] syzkaller0: entered promiscuous mode [ 357.443612][T13809] syzkaller0: entered allmulticast mode [ 357.513582][T13814] netlink: 'syz.6.2162': attribute type 2 has an invalid length. [ 357.596270][T13814] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2162'. [ 358.312467][T13838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2167'. [ 359.755746][T13908] sctp: [Deprecated]: syz.1.2178 (pid 13908) Use of int in maxseg socket option. [ 359.755746][T13908] Use struct sctp_assoc_value instead [ 359.929936][T13904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.943807][T13922] tunl0: Caught tx_queue_len zero misconfig [ 359.957232][T13922] sch_fq: defrate 3881 ignored. [ 360.000576][T13924] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 360.161060][T13924] bond3: entered promiscuous mode [ 360.175083][T13924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 360.274690][T13934] rdma_op ffff88804a9409f0 conn xmit_rdma 0000000000000000 [ 360.415179][T13932] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 360.446758][T13943] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2186'. [ 360.465997][T13943] NCSI netlink: No device for ifindex 0 [ 361.006225][T13964] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2192'. [ 361.020162][T13964] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2192'. [ 361.031615][T13964] openvswitch: netlink: Actions may not be safe on all matching packets [ 361.216997][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.078479][T14016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 362.289959][T14023] syzkaller0: entered promiscuous mode [ 362.310188][T14023] syzkaller0: entered allmulticast mode [ 362.369065][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2210'. [ 362.420173][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.484139][T14036] sctp: [Deprecated]: syz.1.2213 (pid 14036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.484139][T14036] Use struct sctp_sack_info instead [ 362.507783][ T7235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.518753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.603069][T13997] netlink: 'syz.3.2202': attribute type 4 has an invalid length. [ 362.666176][T13997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2202'. [ 362.679389][T13997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2202'. [ 362.701316][T13997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2202'. [ 362.760629][T14040] syzkaller1: entered promiscuous mode [ 362.769437][T14040] syzkaller1: entered allmulticast mode [ 362.854245][T14040] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 362.861562][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 363.053035][T14055] xt_hashlimit: size too large, truncated to 1048576 [ 363.090085][T14057] sctp: [Deprecated]: syz.0.2218 (pid 14057) Use of int in max_burst socket option. [ 363.090085][T14057] Use struct sctp_assoc_value instead [ 363.164814][T14060] netlink: 'syz.3.2217': attribute type 11 has an invalid length. [ 363.211191][T14058] bridge_slave_0 (unregistering): left allmulticast mode [ 363.240113][T14060] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2217'. [ 363.301359][T14058] bridge_slave_0 (unregistering): left promiscuous mode [ 363.352902][T14058] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.698342][T13872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.708537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.728137][T14060] veth0_virt_wifi: entered promiscuous mode [ 363.738521][T14083] netlink: 'syz.5.2224': attribute type 1 has an invalid length. [ 364.953214][ T3033] tipc: Subscription rejected, illegal request [ 365.098780][T14136] lo speed is unknown, defaulting to 1000 [ 365.122171][T14136] lo speed is unknown, defaulting to 1000 [ 365.181732][T14141] ±ÿ: renamed from lo (while UP) [ 365.212034][T14140] netlink: 'syz.3.2237': attribute type 18 has an invalid length. [ 365.265997][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 365.276899][T14140] netlink: 'syz.3.2237': attribute type 18 has an invalid length. [ 365.323815][T14136] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 365.361537][T14136] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 365.386914][T14136] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 365.494913][T14136] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 365.574485][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 365.613210][T14154] bond0: (slave bond_slave_1): Releasing backup interface [ 365.667848][T14154] bond_slave_1: left promiscuous mode [ 365.700852][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 365.753528][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 365.806971][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 365.872910][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 365.999435][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 366.035272][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 366.042780][T14166] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 366.052135][T14136] ±ÿ speed is unknown, defaulting to 1000 [ 366.413281][T14184] __nla_validate_parse: 3 callbacks suppressed [ 366.413301][T14184] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2250'. [ 366.983528][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.992045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.149386][T14216] vti0: entered promiscuous mode [ 367.163488][T14216] vti0: entered allmulticast mode [ 367.171562][T14214] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 367.205865][T14214] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2259'. [ 367.273243][T14214] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 367.409709][T14224] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2263'. [ 367.599757][T14236] netlink: 'syz.0.2268': attribute type 1 has an invalid length. [ 367.618769][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.639568][T14246] netlink: zone id is out of range [ 367.641998][T14236] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 367.669557][T14246] netlink: zone id is out of range [ 367.737281][T14246] netlink: zone id is out of range [ 367.785316][T14246] netlink: zone id is out of range [ 367.828667][T14246] netlink: zone id is out of range [ 367.860321][T14246] netlink: zone id is out of range [ 367.886096][T14246] netlink: zone id is out of range [ 368.110452][T14258] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 368.130579][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2273'. [ 368.181067][T14258] ±ÿ speed is unknown, defaulting to 1000 [ 368.256553][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.537447][T14270] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 368.615302][T14270] ±ÿ speed is unknown, defaulting to 1000 [ 369.053869][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2272'. [ 369.069984][T14287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2278'. [ 369.295215][T14288] 8021q: VLANs not supported on ip6gre0 [ 369.351242][T14290] dummy0: left promiscuous mode [ 369.384183][T14295] netlink: 'syz.0.2278': attribute type 10 has an invalid length. [ 369.411882][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2278'. [ 369.615561][T14295] dummy0: entered promiscuous mode [ 370.036861][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2286'. [ 370.116262][ T50] block nbd3: Receive control failed (result -107) [ 370.163740][T14320] x_tables: duplicate underflow at hook 1 [ 371.477679][ T6937] IPVS: starting estimator thread 0... [ 371.586739][T14384] IPVS: using max 36 ests per chain, 86400 per kthread [ 371.663480][T14393] syzkaller0: left promiscuous mode [ 371.682636][T14393] syzkaller0: left allmulticast mode [ 371.721080][T14389] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 371.765699][T14389] ±ÿ speed is unknown, defaulting to 1000 [ 371.855825][T14402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2310'. [ 372.104532][ T12] net_ratelimit: 727 callbacks suppressed [ 372.104551][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.118967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.125969][T14417] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2314'. [ 372.201066][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.211966][T14421] netlink: 279 bytes leftover after parsing attributes in process `syz.3.2315'. [ 372.212649][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.231131][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.248963][T14417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.259723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.261263][T14421] veth0_to_bond: default FDB implementation only supports local addresses [ 372.278203][T14417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2314'. [ 372.301224][T14416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.350462][T14416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.366821][T14424] netlink: 'syz.5.2316': attribute type 1 has an invalid length. [ 372.540264][T14430] netlink: 'syz.5.2318': attribute type 1 has an invalid length. [ 372.737457][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.419339][T14467] netlink: 'syz.1.2328': attribute type 1 has an invalid length. [ 373.822267][T14491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.829549][T14491] IPv6: NLM_F_CREATE should be set when creating new route [ 373.836854][T14491] IPv6: NLM_F_CREATE should be set when creating new route [ 373.844104][T14491] IPv6: NLM_F_CREATE should be set when creating new route [ 373.861228][T14491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.908162][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2337'. [ 374.001428][ T7646] IPVS: starting estimator thread 0... [ 374.101330][T14497] can: request_module (can-proto-0) failed. [ 374.146927][T14500] IPVS: using max 27 ests per chain, 64800 per kthread [ 374.171308][T14495] netdevsim netdevsim6: Direct firmware load for á failed with error -2 [ 374.182969][T14495] netdevsim netdevsim6: Falling back to sysfs fallback for: á [ 374.201930][T14499] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 374.244978][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2342'. [ 374.287882][T14505] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2341'. [ 374.377132][T14511] FAULT_INJECTION: forcing a failure. [ 374.377132][T14511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.418438][T14511] CPU: 1 UID: 0 PID: 14511 Comm: syz.1.2343 Not tainted syzkaller #0 PREEMPT(full) [ 374.418466][T14511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.418484][T14511] Call Trace: [ 374.418492][T14511] [ 374.418501][T14511] dump_stack_lvl+0xe8/0x150 [ 374.418536][T14511] should_fail_ex+0x40c/0x560 [ 374.418563][T14511] _copy_from_iter+0x1d3/0x1660 [ 374.418588][T14511] ? trace_kmem_cache_alloc+0x29/0xe0 [ 374.418614][T14511] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 374.418636][T14511] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 374.418656][T14511] ? __build_skb+0x62/0x440 [ 374.418677][T14511] ? __build_skb+0x62/0x440 [ 374.418701][T14511] ? __pfx__copy_from_iter+0x10/0x10 [ 374.418729][T14511] ? __build_skb+0x2a2/0x440 [ 374.418754][T14511] ? netlink_sendmsg+0x650/0xb40 [ 374.418782][T14511] ? skb_put+0x112/0x210 [ 374.418810][T14511] netlink_sendmsg+0x6c0/0xb40 [ 374.418847][T14511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.418880][T14511] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.418904][T14511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.418931][T14511] sock_sendmsg_nosec+0x13a/0x180 [ 374.418956][T14511] sock_write_iter+0x2de/0x3e0 [ 374.418979][T14511] ? __pfx_sock_write_iter+0x10/0x10 [ 374.419007][T14511] ? bpf_lsm_file_permission+0x9/0x20 [ 374.419028][T14511] ? security_file_permission+0x75/0x260 [ 374.419062][T14511] vfs_write+0x612/0xba0 [ 374.419099][T14511] ? __pfx_vfs_write+0x10/0x10 [ 374.419137][T14511] ? __fget_files+0x2a/0x420 [ 374.419177][T14511] ksys_write+0x150/0x270 [ 374.419208][T14511] ? __pfx_ksys_write+0x10/0x10 [ 374.419245][T14511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.419266][T14511] do_syscall_64+0x174/0x580 [ 374.419290][T14511] ? trace_irq_disable+0x3b/0x140 [ 374.419314][T14511] ? clear_bhb_loop+0x40/0x90 [ 374.419337][T14511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.419356][T14511] RIP: 0033:0x7f99b1f9de59 [ 374.419375][T14511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.419392][T14511] RSP: 002b:00007f99b01f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.419412][T14511] RAX: ffffffffffffffda RBX: 00007f99b2225fa0 RCX: 00007f99b1f9de59 [ 374.419425][T14511] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 374.419437][T14511] RBP: 00007f99b01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 374.419448][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.419459][T14511] R13: 00007f99b2226038 R14: 00007f99b2225fa0 R15: 00007ffc8411dc08 [ 374.419491][T14511] [ 374.875814][T14515] netlink: 'syz.1.2345': attribute type 4 has an invalid length. [ 374.960432][T14520] netlink: 'syz.1.2345': attribute type 4 has an invalid length. [ 374.974038][ T809] ±ÿ speed is unknown, defaulting to 1000 [ 374.992697][ T809] syú2: Port: 1 Link DOWN [ 375.053696][ T7648] ±ÿ speed is unknown, defaulting to 1000 [ 375.064064][ T7648] syú2: Port: 1 Link ACTIVE [ 375.106141][T14523] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 375.180481][T14523] ±ÿ speed is unknown, defaulting to 1000 [ 375.235320][T14533] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 375.253328][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2351'. [ 375.598153][T14547] IPVS: Error connecting to the multicast addr [ 375.831742][T14555] FAULT_INJECTION: forcing a failure. [ 375.831742][T14555] name failslab, interval 1, probability 0, space 0, times 0 [ 375.894491][T14555] CPU: 1 UID: 0 PID: 14555 Comm: syz.6.2355 Not tainted syzkaller #0 PREEMPT(full) [ 375.894520][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.894532][T14555] Call Trace: [ 375.894539][T14555] [ 375.894547][T14555] dump_stack_lvl+0xe8/0x150 [ 375.894582][T14555] should_fail_ex+0x40c/0x560 [ 375.894609][T14555] should_failslab+0xa8/0x100 [ 375.894638][T14555] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 375.894661][T14555] ? skb_clone+0x212/0x3a0 [ 375.894688][T14555] ? skb_clone+0x212/0x3a0 [ 375.894721][T14555] skb_clone+0x212/0x3a0 [ 375.894751][T14555] __netlink_deliver_tap+0x413/0x860 [ 375.894791][T14555] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.894819][T14555] netlink_deliver_tap+0x19c/0x1b0 [ 375.894847][T14555] netlink_unicast+0x77f/0x940 [ 375.894884][T14555] netlink_sendmsg+0x813/0xb40 [ 375.894922][T14555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.894955][T14555] ? aa_sock_msg_perm+0xf1/0x1b0 [ 375.894979][T14555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.895006][T14555] sock_sendmsg_nosec+0x13a/0x180 [ 375.895031][T14555] sock_write_iter+0x2de/0x3e0 [ 375.895054][T14555] ? __pfx_sock_write_iter+0x10/0x10 [ 375.895082][T14555] ? bpf_lsm_file_permission+0x9/0x20 [ 375.895108][T14555] ? security_file_permission+0x75/0x260 [ 375.895142][T14555] vfs_write+0x612/0xba0 [ 375.895179][T14555] ? __pfx_vfs_write+0x10/0x10 [ 375.895223][T14555] ? __fget_files+0x2a/0x420 [ 375.895257][T14555] ksys_write+0x150/0x270 [ 375.895287][T14555] ? __pfx_ksys_write+0x10/0x10 [ 375.895323][T14555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.895344][T14555] do_syscall_64+0x174/0x580 [ 375.895369][T14555] ? trace_irq_disable+0x3b/0x140 [ 375.895392][T14555] ? clear_bhb_loop+0x40/0x90 [ 375.895416][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.895435][T14555] RIP: 0033:0x7f546a39de59 [ 375.895453][T14555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.895469][T14555] RSP: 002b:00007f546b307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.895490][T14555] RAX: ffffffffffffffda RBX: 00007f546a625fa0 RCX: 00007f546a39de59 [ 375.895504][T14555] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 375.895516][T14555] RBP: 00007f546b307090 R08: 0000000000000000 R09: 0000000000000000 [ 375.895528][T14555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.895539][T14555] R13: 00007f546a626038 R14: 00007f546a625fa0 R15: 00007fff399fcb78 [ 375.895571][T14555] [ 376.146713][T14555] netlink: 'syz.6.2355': attribute type 1 has an invalid length. [ 376.714854][T14585] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2366'. [ 376.972984][T14592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2367'. [ 377.474740][T14596] syzkaller0: entered promiscuous mode [ 377.486495][T14596] syzkaller0: entered allmulticast mode [ 377.858609][ T7235] net_ratelimit: 8 callbacks suppressed [ 377.858626][ T7235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.873189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.011621][T14622] tipc: Enabling of bearer rejected, failed to enable media [ 378.052199][T14620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.497817][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.500697][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.515416][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.644239][T14644] xt_hashlimit: size too large, truncated to 1048576 [ 378.751483][T14646] netlink: 'syz.0.2384': attribute type 11 has an invalid length. [ 378.785627][T14646] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2384'. [ 378.842201][T14652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2384'. [ 379.141053][T14663] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2388'. [ 379.791743][ T3292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.800710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.982721][T14697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2392'. [ 380.419012][ T7230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.427552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.607949][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2398'. [ 380.640833][T14714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.705169][T14718] syzkaller0: entered promiscuous mode [ 380.728498][T14718] syzkaller0: entered allmulticast mode [ 380.744328][T14714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.755046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.789097][T14714] team0: Unable to change to the same mode the team is in [ 380.981486][T14734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 381.082982][T14734] 8021q: VLANs not supported on ip6tnl0 [ 381.115077][T14736] bridge_slave_0: left allmulticast mode [ 381.122960][T14736] bridge_slave_0: left promiscuous mode [ 381.144257][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.202930][T14736] bridge_slave_1: left allmulticast mode [ 381.211208][T14736] bridge_slave_1: left promiscuous mode [ 381.221026][T14736] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.235437][T14736] bond0: (slave bond_slave_0): Releasing backup interface [ 381.250502][T14736] bond0: (slave bond_slave_1): Releasing backup interface [ 381.267840][T14736] team0: Port device team_slave_0 removed [ 381.278157][T14736] team0: Port device team_slave_1 removed [ 381.299850][T14743] team0: Port device xfrm0 added [ 381.304983][T14745] tipc: Started in network mode [ 381.310373][T14745] tipc: Node identity 86247e81d50a, cluster identity 4711 [ 381.319865][T14745] tipc: Enabled bearer , priority 0 [ 381.662856][T14768] IPv6: Can't replace route, no match found [ 382.198150][T14790] IPVS: Unknown mcast interface: vcan0 [ 382.271509][T14796] syzkaller0: entered promiscuous mode [ 382.296576][T14796] syzkaller0: entered allmulticast mode [ 382.358181][T14796] tipc: Enabled bearer , priority 0 [ 382.414889][T14791] tipc: Resetting bearer [ 382.479652][T14791] tipc: Disabling bearer [ 382.483625][T14807] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2421'. [ 382.540052][ T6927] tipc: Node number set to 1395555969 [ 382.587854][T14811] xt_NFQUEUE: number of total queues is 0 [ 382.600685][T14811] x_tables: duplicate underflow at hook 1 [ 382.838273][ T6927] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 382.850465][T14822] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:256 [ 382.909811][T14833] ÿethì8²ùcvtap: renamed from vlan0 [ 383.173979][T14842] net_ratelimit: 1 callbacks suppressed [ 383.173997][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.221961][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.243019][T14842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.353972][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2437'. [ 383.357712][ T809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.367305][T14854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2437'. [ 383.407634][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2437'. [ 383.421665][T14855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2437'. [ 383.627939][T13872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.630507][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2439'. [ 383.636794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.654098][ T7227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.830441][T14864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2440'. [ 383.988337][T14840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.000231][T14840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.548764][ T7232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.557881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.765134][T14821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.788616][T14848] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2436'. [ 385.808884][T14848] netlink: 'syz.6.2436': attribute type 2 has an invalid length. [ 385.837364][T14848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2436'. [ 386.044706][T14876] bond12 (unregistering): Released all slaves [ 386.224359][T14890] syzkaller1: entered promiscuous mode [ 386.234957][T14890] syzkaller1: entered allmulticast mode [ 386.467938][T14903] xfrm0: Caught tx_queue_len zero misconfig [ 386.559709][T14907] netlink: 'syz.5.2453': attribute type 1 has an invalid length. [ 386.661285][T14917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2454'. [ 386.709337][T14917] bond0: Device is already in use. [ 387.207886][T14941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.248528][T14938] IPVS: set_ctl: invalid protocol: 101 224.0.0.1:20002 [ 387.719407][T14965] __nla_validate_parse: 4 callbacks suppressed [ 387.719426][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 387.770504][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 387.810426][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 387.838082][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 387.862336][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 387.895359][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 387.923310][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 388.411430][T14988] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2480'. [ 388.433417][T14988] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 388.515781][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 388.529709][T14988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.572720][T14998] netlink: 51 bytes leftover after parsing attributes in process `syz.6.2483'. [ 388.619379][T14988] netlink: 'syz.3.2480': attribute type 10 has an invalid length. [ 388.636739][T14988] dummy0: entered promiscuous mode [ 388.908850][T15012] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 389.048170][T15031] netlink: 'syz.6.2492': attribute type 1 has an invalid length. [ 389.308847][T15031] bond1: entered promiscuous mode [ 389.351539][T15031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.387442][T13872] net_ratelimit: 2 callbacks suppressed [ 389.387460][T13872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.403593][ T7230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.412039][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.484119][T15037] bond1: (slave bridge3): making interface the new active one [ 389.509239][T15037] bridge3: entered promiscuous mode [ 389.524447][T15037] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 389.609962][T15032] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 389.748616][T15063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.072306][T15075] ±ÿ speed is unknown, defaulting to 1000 [ 390.597800][T15096] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 390.607562][T15098] netlink: 'syz.5.2511': attribute type 2 has an invalid length. [ 390.614957][T15096] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 390.797937][T15105] netlink: 'syz.3.2516': attribute type 3 has an invalid length. [ 390.830087][T15105] netlink: 'syz.3.2516': attribute type 1 has an invalid length. [ 391.135072][T15121] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 391.171053][T15121] ±ÿ speed is unknown, defaulting to 1000 [ 391.296794][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.305250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.309134][T15131] veth0_macvtap: Caught tx_queue_len zero misconfig [ 391.599324][T15141] erspan0: entered promiscuous mode [ 391.610300][T15141] macvlan2: entered allmulticast mode [ 391.619493][T15141] erspan0: entered allmulticast mode [ 391.938262][ T133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.947256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.166162][T15156] netlink: 'syz.3.2529': attribute type 1 has an invalid length. [ 392.516371][T15164] team0: Device ipvlan2 failed to register rx_handler [ 392.835580][T15175] tipc: Enabled bearer , priority 10 [ 393.460480][T15201] __nla_validate_parse: 12 callbacks suppressed [ 393.460500][T15201] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2543'. [ 393.542425][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2545'. [ 393.602553][T15204] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2545'. [ 393.618079][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 393.648482][T15208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2546'. [ 393.938210][T15224] netlink: 'syz.3.2549': attribute type 5 has an invalid length. [ 394.077589][T15234] bridge_slave_0: default FDB implementation only supports local addresses [ 394.089852][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 394.625869][T15255] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 394.655428][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 394.668757][T15255] ±ÿ speed is unknown, defaulting to 1000 [ 394.766796][T15255] dvmrp0: left allmulticast mode [ 394.818562][T15263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2559'. [ 395.140269][T13881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.149112][T15282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.157820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.357371][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2568'. [ 395.429803][T15266] debugfs: '1ù!^' already exists in 'ieee80211' [ 395.731489][ T29] audit: type=1800 audit(1783229761.417:12): pid=15314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2569" name="memory.events" dev="tmpfs" ino=1206 res=0 errno=0 [ 396.221282][T15335] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.253953][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2574'. [ 396.891917][T15373] Cannot find map_set index 65532 as target [ 396.974543][T15380] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 397.062527][T15276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.071387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.213118][T15390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.221744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.409443][T15396] syzkaller1: entered promiscuous mode [ 397.432056][T15396] syzkaller1: entered allmulticast mode [ 397.697617][T15411] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.702116][T13881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.716436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.724082][T15411] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.923574][T15424] siw: device registration error -23 [ 397.955358][T15429] netlink: 'syz.0.2600': attribute type 2 has an invalid length. [ 398.268936][T15444] netlink: 'syz.3.2604': attribute type 21 has an invalid length. [ 398.405375][T15447] syzkaller0: entered promiscuous mode [ 398.417639][T15447] syzkaller0: entered allmulticast mode [ 398.534706][T15456] __nla_validate_parse: 13 callbacks suppressed [ 398.534722][T15456] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2607'. [ 398.639012][T15449] syzkaller0: entered promiscuous mode [ 398.649357][T15449] syzkaller0: entered allmulticast mode [ 398.725978][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2609'. [ 398.744842][T15464] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2609'. [ 399.112020][T15482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2612'. [ 400.295494][T15492] nbd: must specify at least one socket [ 400.403276][T15494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.413946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.844381][T15502] syzkaller0: entered promiscuous mode [ 400.851831][T15502] syzkaller0: entered allmulticast mode [ 400.871922][T15509] syzkaller0: entered promiscuous mode [ 400.897386][T15509] syzkaller0: entered allmulticast mode [ 400.898020][T15272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.911955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.921263][T15276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.106095][T15528] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 402.828321][T15279] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.837326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.468739][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.477796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.184159][T15535] tc_dump_action: action bad kind [ 404.527033][T15547] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2627'. [ 404.545648][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 404.571786][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2628'. [ 404.600158][T15555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 404.676700][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2628'. [ 405.162647][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2639'. [ 406.661592][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.670668][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.866866][T15267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.875806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.400557][T15605] syzkaller0: left promiscuous mode [ 408.410031][T15605] syzkaller0: left allmulticast mode [ 408.644328][ T29] audit: type=1804 audit(1783229774.327:13): pid=15621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2649" name="/newroot/139/cgroup.controllers" dev="tmpfs" ino=733 res=1 errno=0 [ 408.698955][T15630] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2648'. [ 408.727788][ T29] audit: type=1800 audit(1783229774.327:14): pid=15621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2649" name="cgroup.controllers" dev="tmpfs" ino=733 res=0 errno=0 [ 408.816174][T15634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 409.055697][T15637] FAULT_INJECTION: forcing a failure. [ 409.055697][T15637] name failslab, interval 1, probability 0, space 0, times 0 [ 409.120814][T15637] CPU: 0 UID: 0 PID: 15637 Comm: syz.0.2652 Not tainted syzkaller #0 PREEMPT(full) [ 409.120862][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.120883][T15637] Call Trace: [ 409.120890][T15637] [ 409.120898][T15637] dump_stack_lvl+0xe8/0x150 [ 409.120930][T15637] should_fail_ex+0x40c/0x560 [ 409.120965][T15637] should_failslab+0xa8/0x100 [ 409.120993][T15637] __kmalloc_noprof+0xfe/0x720 [ 409.121016][T15637] ? nft_pernet+0x23/0x240 [ 409.121040][T15637] ? nf_tables_newrule+0x1524/0x28a0 [ 409.121062][T15637] ? nf_tables_newrule+0x1524/0x28a0 [ 409.121093][T15637] nf_tables_newrule+0x1524/0x28a0 [ 409.121134][T15637] ? __pfx_nf_tables_newrule+0x10/0x10 [ 409.121156][T15637] ? nfnl_pernet+0x23/0x240 [ 409.121181][T15637] ? nfnl_pernet+0x23/0x240 [ 409.121216][T15637] ? __nla_parse+0x40/0x60 [ 409.121245][T15637] nfnetlink_rcv+0x1288/0x28c0 [ 409.121307][T15637] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 409.121350][T15637] ? ref_tracker_free+0x689/0x830 [ 409.121398][T15637] ? skb_clone+0x246/0x3a0 [ 409.121429][T15637] ? __netlink_deliver_tap+0x811/0x860 [ 409.121466][T15637] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.121496][T15637] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.121530][T15637] netlink_unicast+0x7bb/0x940 [ 409.121568][T15637] netlink_sendmsg+0x813/0xb40 [ 409.121605][T15637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.121634][T15637] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.121659][T15637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.121685][T15637] sock_sendmsg_nosec+0x13a/0x180 [ 409.121710][T15637] ____sys_sendmsg+0x54e/0x850 [ 409.121744][T15637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.121781][T15637] ? import_iovec+0x73/0xa0 [ 409.121812][T15637] ___sys_sendmsg+0x2a5/0x360 [ 409.121837][T15637] ? __lock_acquire+0x683/0x2cf0 [ 409.121868][T15637] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.121934][T15637] ? __fget_files+0x2a/0x420 [ 409.121963][T15637] ? __fget_files+0x3a2/0x420 [ 409.121999][T15637] __x64_sys_sendmsg+0x1b1/0x290 [ 409.122027][T15637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.122074][T15637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.122095][T15637] do_syscall_64+0x174/0x580 [ 409.122120][T15637] ? trace_irq_disable+0x3b/0x140 [ 409.122144][T15637] ? clear_bhb_loop+0x40/0x90 [ 409.122167][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.122186][T15637] RIP: 0033:0x7f7afe19de59 [ 409.122204][T15637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.122221][T15637] RSP: 002b:00007f7aff06c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.122240][T15637] RAX: ffffffffffffffda RBX: 00007f7afe426090 RCX: 00007f7afe19de59 [ 409.122254][T15637] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 409.122266][T15637] RBP: 00007f7aff06c090 R08: 0000000000000000 R09: 0000000000000000 [ 409.122278][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.122289][T15637] R13: 00007f7afe426128 R14: 00007f7afe426090 R15: 00007ffcafc80268 [ 409.122321][T15637] [ 409.721493][T15650] IPv6: NLM_F_CREATE should be specified when creating new route [ 409.757732][T15659] sctp: [Deprecated]: syz.1.2662 (pid 15659) Use of int in maxseg socket option. [ 409.757732][T15659] Use struct sctp_assoc_value instead [ 409.775515][T15659] sctp: [Deprecated]: syz.1.2662 (pid 15659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.775515][T15659] Use struct sctp_sack_info instead [ 409.796911][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2661'. [ 409.841737][T15660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2661'. [ 410.069525][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2664'. [ 410.514164][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2671'. [ 410.549865][T15689] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2671'. [ 410.782102][T15700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2673'. [ 410.811067][T15703] netlink: 'syz.6.2675': attribute type 4 has an invalid length. [ 410.833945][T15700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2673'. [ 410.843879][T15702] netlink: 'syz.6.2675': attribute type 4 has an invalid length. [ 410.945322][T15700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2673'. [ 411.018810][T15706] netlink: 'syz.3.2676': attribute type 5 has an invalid length. [ 411.031963][T15700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2673'. [ 411.050273][T15709] netlink: 'syz.3.2676': attribute type 5 has an invalid length. [ 411.070941][T15700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2673'. [ 411.279323][T15718] netlink: 'syz.6.2678': attribute type 2 has an invalid length. [ 411.595370][T15739] netlink: 'syz.6.2686': attribute type 11 has an invalid length. [ 412.011841][T15762] openvswitch: netlink: Message has 512 unknown bytes. [ 412.029138][T15762] netlink: 'syz.6.2692': attribute type 16 has an invalid length. [ 412.418467][T13881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.427424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.795838][T15767] macvlan0: entered promiscuous mode [ 412.821994][T15778] netlink: 'syz.3.2697': attribute type 35 has an invalid length. [ 413.069784][T15267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.078346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.255919][T15788] FAULT_INJECTION: forcing a failure. [ 413.255919][T15788] name failslab, interval 1, probability 0, space 0, times 0 [ 413.301564][T15788] CPU: 1 UID: 0 PID: 15788 Comm: syz.1.2700 Not tainted syzkaller #0 PREEMPT(full) [ 413.301590][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.301599][T15788] Call Trace: [ 413.301606][T15788] [ 413.301613][T15788] dump_stack_lvl+0xe8/0x150 [ 413.301646][T15788] should_fail_ex+0x40c/0x560 [ 413.301671][T15788] should_failslab+0xa8/0x100 [ 413.301699][T15788] __kmalloc_noprof+0xfe/0x720 [ 413.301721][T15788] ? sk_prot_alloc+0xe7/0x210 [ 413.301744][T15788] ? sk_prot_alloc+0xe7/0x210 [ 413.301775][T15788] sk_prot_alloc+0xe7/0x210 [ 413.301798][T15788] ? sk_alloc+0x27/0x390 [ 413.301824][T15788] sk_alloc+0x3a/0x390 [ 413.301852][T15788] bpf_prog_test_run_skb+0x3a6/0x2230 [ 413.301898][T15788] ? __fget_files+0x3a2/0x420 [ 413.301920][T15788] ? __fget_files+0x2a/0x420 [ 413.301948][T15788] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 413.301976][T15788] bpf_prog_test_run+0x2c5/0x340 [ 413.302005][T15788] __sys_bpf+0xa22/0xd90 [ 413.302037][T15788] ? __pfx___sys_bpf+0x10/0x10 [ 413.302072][T15788] ? __fget_files+0x2a/0x420 [ 413.302110][T15788] ? ksys_write+0x242/0x270 [ 413.302140][T15788] ? __pfx_ksys_write+0x10/0x10 [ 413.302171][T15788] __x64_sys_bpf+0xba/0xd0 [ 413.302193][T15788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.302222][T15788] do_syscall_64+0x174/0x580 [ 413.302246][T15788] ? trace_irq_disable+0x3b/0x140 [ 413.302268][T15788] ? clear_bhb_loop+0x40/0x90 [ 413.302290][T15788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.302309][T15788] RIP: 0033:0x7f99b1f9de59 [ 413.302327][T15788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.302343][T15788] RSP: 002b:00007f99b01f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.302362][T15788] RAX: ffffffffffffffda RBX: 00007f99b2225fa0 RCX: 00007f99b1f9de59 [ 413.302375][T15788] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000000a [ 413.302387][T15788] RBP: 00007f99b01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.302398][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.302409][T15788] R13: 00007f99b2226038 R14: 00007f99b2225fa0 R15: 00007ffc8411dc08 [ 413.302439][T15788] [ 413.792707][T15799] dvmrp8: entered allmulticast mode [ 413.864859][T15804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.874047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.023139][T15808] syzkaller0: entered promiscuous mode [ 414.054371][T15808] syzkaller0: entered allmulticast mode [ 414.676698][T15848] block nbd4: server does not support multiple connections per device. [ 414.703013][T15854] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.719850][T15848] block nbd4: shutting down sockets [ 414.748350][T15861] syzkaller1: entered promiscuous mode [ 414.795875][T15861] syzkaller1: entered allmulticast mode [ 414.836113][T15862] __nla_validate_parse: 70 callbacks suppressed [ 414.836134][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2726'. [ 414.904186][T15862] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.926971][T15859] syzkaller1: left promiscuous mode [ 414.942173][T15859] syzkaller1: left allmulticast mode [ 414.953991][T15867] ip6_vti0: entered promiscuous mode [ 414.979618][T15867] ip6_vti0: entered allmulticast mode [ 415.198894][T15881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.465022][T15897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.893440][T15915] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 415.916770][T15915] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 415.924951][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2739'. [ 415.973523][T15915] bond5: entered promiscuous mode [ 415.979468][T15915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.344982][T15938] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2746'. [ 416.382550][T15937] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2746'. [ 416.824577][T15954] bond2: option primary_reselect: invalid value (6) [ 416.851900][T15954] bond2 (unregistering): Released all slaves [ 417.152138][T15969] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.308809][T15979] net_ratelimit: 2 callbacks suppressed [ 417.308828][T15979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.346644][T15969] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.483227][T15985] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2760'. [ 417.551071][T15969] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.631606][T15989] netlink: 'syz.3.2762': attribute type 21 has an invalid length. [ 417.683208][T15969] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.725751][T15995] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2762'. [ 417.767046][T15989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2762'. [ 417.824397][T16002] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 417.840957][T15987] sctp: [Deprecated]: syz.3.2762 (pid 15987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.840957][T15987] Use struct sctp_sack_info instead [ 417.880975][T15987] sctp: [Deprecated]: syz.3.2762 (pid 15987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.880975][T15987] Use struct sctp_sack_info instead [ 417.926967][T15279] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.991029][ T35] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.090951][T13872] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.118535][T13872] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.132969][T16013] netlink: 'syz.6.2771': attribute type 11 has an invalid length. [ 418.143550][T16006] tap0: tun_chr_ioctl cmd 3221513862 [ 418.151629][T16013] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.2771'. [ 418.183217][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.191831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.281857][T16016] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2772'. [ 418.303276][T16019] netlink: 'syz.6.2771': attribute type 30 has an invalid length. [ 418.461166][T16013] tipc: Enabled bearer , priority 0 [ 418.632180][T16033] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2776'. [ 418.762076][T16041] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 418.780497][T16041] ±ÿ speed is unknown, defaulting to 1000 [ 418.820164][T15267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.828823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.746669][ T5716] tipc: Node number set to 3008099901 [ 420.064764][T16050] veth0_to_team: entered promiscuous mode [ 420.132550][T16050] gretap0: entered promiscuous mode [ 420.211722][T16050] debugfs: 'hsr1' already exists in 'hsr' [ 420.275031][T16050] Cannot create hsr debugfs directory [ 420.300035][T16064] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:52766 [ 420.376226][T16064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.385499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.399189][T16060] dummy0: left promiscuous mode [ 420.415449][T16065] __nla_validate_parse: 2 callbacks suppressed [ 420.415470][T16065] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2786'. [ 420.449371][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 420.465488][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 420.476080][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 420.493648][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 420.502494][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 420.737879][T13872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.813861][T16060] veth0_virt_wifi: left promiscuous mode [ 420.854845][T16082] netlink: 'syz.1.2789': attribute type 4 has an invalid length. [ 420.902897][T16060] tipc: Resetting bearer [ 420.982291][T16060] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 420.992888][T16060] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 421.014766][T16085] netlink: 'syz.1.2789': attribute type 4 has an invalid length. [ 421.023613][T16060] ip6gre1: left promiscuous mode [ 421.028939][T16060] ip6gre1: left allmulticast mode [ 421.037669][T16060] gre1: left promiscuous mode [ 421.042490][T16060] gre1: left allmulticast mode [ 421.054257][T16060] bridge1: left promiscuous mode [ 421.060313][T16060] bridge1: left allmulticast mode [ 421.074066][T16060] geneve2: left promiscuous mode [ 421.080568][T16060] geneve2: left allmulticast mode [ 421.089374][T16060] bridge3: left promiscuous mode [ 421.094371][T16060] bridge3: left allmulticast mode [ 421.182680][T16060] bond2: left promiscuous mode [ 421.187560][T16060] ip6gre3: left promiscuous mode [ 421.195503][T16060] ipip1: left promiscuous mode [ 421.202108][T16060] bond3: left promiscuous mode [ 421.230460][T16060] bond5: left promiscuous mode [ 421.455729][T13872] netdevsim netdevsim3 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.479978][T13872] netdevsim netdevsim3 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.508798][T13872] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.525182][T13872] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.534575][ T6925] ±ÿ speed is unknown, defaulting to 1000 [ 421.544637][ T6926] ±ÿ speed is unknown, defaulting to 1000 [ 421.565387][T13872] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.600966][T13872] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.614980][T13872] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.650675][T13872] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.802343][T16106] syzkaller0: left promiscuous mode [ 421.826725][T16106] syzkaller0: left allmulticast mode [ 421.839801][T16106] tipc: Resetting bearer [ 421.916208][T16067] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 421.934752][T16067] ±ÿ speed is unknown, defaulting to 1000 [ 422.081342][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2799'. [ 422.130928][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2798'. [ 422.147661][T16121] 8021q: adding VLAN 0 to HW filter on device bond12 [ 422.356054][T16133] Unsupported ieee802154 address type: 0 [ 422.577991][ T5624] Bluetooth: hci7: command tx timeout [ 422.606897][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2801'. [ 422.660979][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.670007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.749117][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2805'. [ 422.797819][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2805'. [ 422.812083][T16147] block nbd5: Unsupported socket: should be TCP or UNIX. [ 422.883817][T16146] batadv0: entered promiscuous mode [ 422.898645][T16146] macvtap1: entered promiscuous mode [ 422.905248][T16146] macvtap1: entered allmulticast mode [ 422.911712][T16146] batadv0: entered allmulticast mode [ 422.919107][T16146] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 422.961547][T16154] batadv0: left allmulticast mode [ 422.972028][T16154] batadv0: left promiscuous mode [ 422.995861][T16154] macvtap1: left promiscuous mode [ 423.011088][T16154] macvtap1: left allmulticast mode [ 423.111588][T16067] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.130741][T16067] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.154957][T16067] bridge_slave_0: entered allmulticast mode [ 423.169005][T16067] bridge_slave_0: entered promiscuous mode [ 423.224945][T16067] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.257434][T16067] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.284462][T16067] bridge_slave_1: entered allmulticast mode [ 423.312087][T16067] bridge_slave_1: entered promiscuous mode [ 423.318048][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2810'. [ 423.439536][T16067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.457695][T16177] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2812'. [ 423.476862][T16067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.496993][T16178] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2812'. [ 423.600921][T16184] bridge2: entered promiscuous mode [ 423.612262][T16184] bridge2: entered allmulticast mode [ 423.632883][T16067] team0: Port device team_slave_0 added [ 423.651535][T16067] team0: Port device team_slave_1 added [ 423.675375][T16177] syzkaller0: entered promiscuous mode [ 423.699410][T16177] syzkaller0: entered allmulticast mode [ 423.830411][T16067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.846356][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.854255][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2816'. [ 423.884443][T16067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.940180][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.948651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.973490][T16067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.983038][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.009752][T16067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.279020][T16067] hsr_slave_0: entered promiscuous mode [ 424.299644][T16067] hsr_slave_1: entered promiscuous mode [ 424.312408][T16067] debugfs: 'hsr0' already exists in 'hsr' [ 424.318630][T16067] Cannot create hsr debugfs directory [ 424.586757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.599133][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 424.666576][ T5624] Bluetooth: hci7: command tx timeout [ 425.473139][T16259] __nla_validate_parse: 2 callbacks suppressed [ 425.473157][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2833'. [ 425.544637][T16260] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2833'. [ 425.898197][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.905739][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.914365][T16266] bridge0: entered allmulticast mode [ 425.934504][T16268] bridge_slave_1: left allmulticast mode [ 425.955482][T16268] bridge_slave_1: left promiscuous mode [ 425.978392][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.000492][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.433305][T16291] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2842'. [ 426.545170][T16067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 426.608472][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.638650][T16067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 426.697806][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.736639][ T5624] Bluetooth: hci7: command tx timeout [ 426.752932][T16299] pim6reg: entered allmulticast mode [ 426.769113][T16067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 426.886940][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.914179][T16067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.001903][T16067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.031722][ T29] audit: type=1800 audit(1783229792.717:15): pid=16310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2848" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2891 res=0 errno=0 [ 427.064585][ T29] audit: type=1800 audit(1783229792.717:16): pid=16311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2848" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2891 res=0 errno=0 [ 427.344484][T16329] batadv_slave_1: entered promiscuous mode [ 427.364822][T16325] batadv_slave_1: left promiscuous mode [ 427.365198][T16331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.376652][T16067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.477035][T16067] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.494727][T15279] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.501945][T15279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.577893][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.585089][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.631544][T16340] netlink: 'syz.5.2856': attribute type 4 has an invalid length. [ 427.744259][ T29] audit: type=1800 audit(1783229793.427:17): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2856" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1519 res=0 errno=0 [ 427.783277][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2858'. [ 428.024679][T16354] syzkaller1: entered promiscuous mode [ 428.054961][T16354] syzkaller1: entered allmulticast mode [ 428.220929][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 428.245895][T16364] xt_hashlimit: size too large, truncated to 1048576 [ 428.258687][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 428.417468][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.426516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.489917][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2862'. [ 428.557429][T16366] xt_hashlimit: size too large, truncated to 1048576 [ 428.591746][T16366] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 428.820817][T16377] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2866'. [ 428.830482][ T5624] Bluetooth: hci7: command tx timeout [ 428.842365][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2866'. [ 428.888515][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.083299][T16067] veth0_vlan: entered promiscuous mode [ 429.216463][T16067] veth1_vlan: entered promiscuous mode [ 429.237560][T16382] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 429.301400][T16382] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.414006][T16382] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.488433][T16382] bond6: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 429.526249][T16382] bond6: (slave ip6_vti0): Error -95 calling set_mac_address [ 429.619776][T16067] veth0_macvtap: entered promiscuous mode [ 429.681968][T16067] veth1_macvtap: entered promiscuous mode [ 429.708140][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.716990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.747082][T16386] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 429.808463][T16067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.824160][T16396] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2873'. [ 429.862050][T16067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.870235][T16386] ±ÿ speed is unknown, defaulting to 1000 [ 429.900468][ T7227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.939244][ T7227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.086424][ T7227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.137639][ T7227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.184774][T16399] : renamed from dummy0 [ 430.448390][T16414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.461652][T16422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.487436][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.515662][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.536651][T16421] pimreg: entered allmulticast mode [ 430.842815][T15279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.844907][T16414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.862765][T16436] __nla_validate_parse: 2 callbacks suppressed [ 430.862784][T16436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2881'. [ 430.892423][T15279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.113620][T16448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.377151][T16462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.552537][T16462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.801565][ T5624] Bluetooth: hci5: command 0x0406 tx timeout [ 431.978313][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.991582][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.064775][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.084043][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.091802][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.807604][T16497] netlink: 'syz.5.2898': attribute type 12 has an invalid length. [ 432.976119][T16503] netlink: 'syz.5.2900': attribute type 21 has an invalid length. [ 434.246857][ T50] Bluetooth: hci0: command tx timeout [ 434.249105][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.261887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.830792][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 434.839098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.894305][T10756] NFSD: Failed to start, no listeners configured. [ 435.457550][ T7227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.468771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.266652][ T50] Bluetooth: hci0: command tx timeout [ 437.336795][T16512] syzkaller0: entered promiscuous mode [ 437.342313][T16512] syzkaller0: entered allmulticast mode [ 437.501209][T16538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2907'. [ 437.618819][T16538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2907'. [ 437.729342][T16468] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 437.737447][T16468] ±ÿ speed is unknown, defaulting to 1000 [ 437.774355][T16547] sock: sock_timestamping_bind_phc: sock not bind to device [ 437.819613][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2912'. [ 437.829488][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2912'. [ 437.845360][T16547] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.905236][T16554] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2912'. [ 437.914215][T16554] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2912'. [ 437.923772][T16554] netlink: 'syz.6.2912': attribute type 1 has an invalid length. [ 437.931805][T16554] netlink: 'syz.6.2912': attribute type 1 has an invalid length. [ 437.939541][T16554] netlink: 'syz.6.2912': attribute type 1 has an invalid length. [ 437.947493][T16554] netlink: 'syz.6.2912': attribute type 1 has an invalid length. [ 437.956942][T16554] netlink: 'syz.6.2912': attribute type 1 has an invalid length. [ 437.960083][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2913'. [ 437.974814][T16554] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2912'. [ 438.165880][T16547] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.280957][T16564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2915'. [ 438.367048][ T50] Bluetooth: hci0: command tx timeout [ 438.495919][T16547] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.753757][T16547] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.895876][T16468] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.903482][T16468] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.911014][T16468] bridge_slave_0: entered allmulticast mode [ 438.920002][T16468] bridge_slave_0: entered promiscuous mode [ 438.929825][T16468] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.936972][T16468] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.944163][T16468] bridge_slave_1: entered allmulticast mode [ 438.951884][T16468] bridge_slave_1: entered promiscuous mode [ 439.010164][T16580] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 439.110396][T16468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.129696][T16580] ±ÿ speed is unknown, defaulting to 1000 [ 439.194484][T16468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.327861][T16468] team0: Port device team_slave_0 added [ 439.336068][T16468] team0: Port device team_slave_1 added [ 439.554151][T16468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.561134][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.598989][T16468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.683387][T16595] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2921'. [ 439.764911][T13881] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.779085][T16468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.800687][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.856525][T16468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.964139][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.971087][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.979514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.307563][T15279] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.331583][T16610] x_tables: duplicate underflow at hook 1 [ 440.401259][T15279] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.456521][ T50] Bluetooth: hci0: command tx timeout [ 440.570668][T16468] hsr_slave_0: entered promiscuous mode [ 440.584699][T16468] hsr_slave_1: entered promiscuous mode [ 440.597018][T16468] debugfs: 'hsr0' already exists in 'hsr' [ 440.604501][T16468] Cannot create hsr debugfs directory [ 440.656448][T15269] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.753615][T16616] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 440.911766][T16616] ±ÿ speed is unknown, defaulting to 1000 [ 441.282696][ T30] INFO: task syz.2.1597:11901 blocked for more than 143 seconds. [ 441.290481][ T30] Not tainted syzkaller #0 [ 441.295426][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.304104][ T30] task:syz.2.1597 state:D stack:25808 pid:11901 tgid:11886 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 441.316050][ T30] Call Trace: [ 441.319342][ T30] [ 441.322296][ T30] __schedule+0x17d9/0x56c0 [ 441.326826][ T30] ? __lock_acquire+0x683/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 441.331789][ T30] ? __lock_acquire+0x683/0x2cf0 [ 441.338619][T13878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.347181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.453992][ T30] ? __pfx___schedule+0x10/0x10 [ 441.458924][ T30] ? schedule+0x90/0x2b0 [ 441.463196][ T30] schedule+0x164/0x2b0 [ 441.467374][ T30] schedule_preempt_disabled+0x13/0x30 [ 441.472859][ T30] __mutex_lock+0x7bf/0x1550 [ 441.477477][ T30] ? __mutex_lock+0x5d4/0x1550 [ 441.482272][ T30] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 441.672201][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 441.688194][ T30] ? net_generic+0x1e/0x240 [ 441.695115][ T30] ? net_generic+0x1e/0x240 [ 441.723851][ T30] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 441.749133][ T30] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 441.776094][ T30] ? rcu_is_watching+0x15/0xb0 [ 441.787557][ T30] ? trace_kmalloc+0x2a/0xf0 [ 441.793399][ T30] ? __kmalloc_noprof+0x396/0x720 [ 441.798889][ T30] ? __nla_parse+0x40/0x60 [ 441.803370][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 441.810122][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 441.816740][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 441.822351][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 441.829123][ T30] ? bpf_lsm_capable+0x9/0x20 [ 441.833845][ T30] ? security_capable+0x7e/0x2c0 [ 441.853268][ T30] genl_rcv_msg+0x614/0x7a0 [ 441.866776][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.879543][ T30] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 441.886041][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 441.920631][ T30] netlink_rcv_skb+0x226/0x4a0 [ 441.929738][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.942810][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.957721][ T30] ? down_read+0x2be/0x330 [ 441.967788][ T30] genl_rcv+0x28/0x40 [ 441.971838][ T30] netlink_unicast+0x7bb/0x940 [ 441.977048][ T30] netlink_sendmsg+0x813/0xb40 [ 441.981882][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.987593][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.992580][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.000285][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 442.005379][ T30] ____sys_sendmsg+0x54e/0x850 [ 442.010547][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.015908][ T30] ? import_iovec+0x73/0xa0 [ 442.020839][ T30] ___sys_sendmsg+0x2a5/0x360 [ 442.025658][ T30] ? __lock_acquire+0x683/0x2cf0 [ 442.031003][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.036490][ T30] ? futex_wait+0x2a2/0x390 [ 442.041065][ T30] ? __fget_files+0x2a/0x420 [ 442.045673][ T30] ? __fget_files+0x3a2/0x420 [ 442.058792][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 442.063810][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.069377][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.075461][ T30] do_syscall_64+0x174/0x580 [ 442.080139][ T30] ? trace_irq_disable+0x3b/0x140 [ 442.085181][ T30] ? clear_bhb_loop+0x40/0x90 [ 442.089935][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.095836][ T30] RIP: 0033:0x7f377899de59 [ 442.101223][ T30] RSP: 002b:00007f37798c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.109709][ T30] RAX: ffffffffffffffda RBX: 00007f3778c26090 RCX: 00007f377899de59 [ 442.118223][ T30] RDX: 0000000000000090 RSI: 0000200000000b40 RDI: 000000000000000b [ 442.126241][ T30] RBP: 00007f3778a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 442.134632][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.142914][ T30] R13: 00007f3778c26128 R14: 00007f3778c26090 R15: 00007ffebde6eeb8 [ 442.151174][ T30] [ 442.154392][ T30] [ 442.154392][ T30] Showing all locks held in the system: [ 442.163358][ T30] 3 locks held by kworker/0:0/9: [ 442.168988][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.180362][ T30] #1: ffffc900000e7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.248401][ T30] #2: ffff8880226a4250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 442.286715][ T30] 5 locks held by kworker/u8:1/14: [ 442.294806][ T30] 1 lock held by khungtaskd/30: [ 442.316316][ T30] #0: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 442.346355][ T30] 2 locks held by getty/5376: [ 442.356579][ T30] #0: ffff8880369400a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 442.407342][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 442.448323][ T30] 4 locks held by kworker/1:9/6921: [ 442.469050][ T30] 2 locks held by kworker/1:14/6926: [ 442.492031][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.539957][ T30] #1: ffffc9000f747c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.641872][ T30] 3 locks held by kworker/1:17/6929: [ 442.664647][ T30] #0: ffff88801b027140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.739309][ T30] #1: ffffc9000f777c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 442.809178][ T30] #2: ffffffff8eb5fdf8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 442.839083][ T30] 5 locks held by kworker/u8:14/7227: [ 442.856485][ T30] 2 locks held by syz.4.1231/10756: [ 442.876324][ T30] #0: ffffffff9009c368 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.884626][ T30] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b9/0xc30 [ 442.926313][ T30] 2 locks held by syz.2.1597/11901: [ 442.933053][ T30] #0: ffffffff9009c368 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 442.958268][ T30] #1: ffffffff8ee8e3a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 442.968926][ T30] 1 lock held by syz-executor/16067: [ 442.974243][ T30] #0: ffff888036f08ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 442.984618][ T30] 2 locks held by syz-executor/16468: [ 442.997876][ T30] #0: ffff8880487c4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0 [ 443.008460][ T30] #1: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 443.020950][ T30] 3 locks held by syz.6.2925/16591: [ 443.026193][ T30] 3 locks held by syz.3.2931/16616: [ 443.031829][ T30] #0: ffffffff9001cfa8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 443.042990][ T30] #1: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 443.052789][ T30] #2: ffffffff8eb5ff28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 443.065126][ T30] [ 443.067850][ T30] ============================================= [ 443.067850][ T30] [ 443.081779][ T30] NMI backtrace for cpu 0 [ 443.081795][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 443.081815][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.081823][ T30] Call Trace: [ 443.081829][ T30] [ 443.081835][ T30] dump_stack_lvl+0xe8/0x150 [ 443.081861][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 443.081879][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 443.081903][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 443.081923][ T30] sys_info+0x135/0x170 [ 443.081936][ T30] watchdog+0xfd7/0x1030 [ 443.081959][ T30] ? watchdog+0x1c7/0x1030 [ 443.081982][ T30] kthread+0x388/0x470 [ 443.082003][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.082018][ T30] ? __pfx_kthread+0x10/0x10 [ 443.082040][ T30] ret_from_fork+0x514/0xb70 [ 443.082065][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 443.082085][ T30] ? __switch_to+0xc89/0x1420 [ 443.082105][ T30] ? __pfx_kthread+0x10/0x10 [ 443.082126][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.082155][ T30] [ 443.082176][ T30] Sending NMI from CPU 0 to CPUs 1: [ 443.194976][ C1] NMI backtrace for cpu 1 [ 443.194992][ C1] CPU: 1 UID: 0 PID: 15273 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 443.195012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.195024][ C1] Workqueue: krds_cp_wq#4/0 rds_connect_worker [ 443.195052][ C1] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 443.195079][ C1] Code: c7 20 d2 4b 8c 48 c7 c6 60 d2 4b 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 53 65 8b 05 f7 bd 9d 07 65 8b 0d ec bd 9d 07 f7 c1 [ 443.195093][ C1] RSP: 0018:ffffc90004377730 EFLAGS: 00000002 [ 443.195106][ C1] RAX: 0000000000000001 RBX: ffffffff8187ee71 RCX: 0000000080000201 [ 443.195117][ C1] RDX: 0000000000000000 RSI: ffffffff8e229452 RDI: ffffffff8c4bd280 [ 443.195129][ C1] RBP: dffffc0000000000 R08: ffff888033646dd3 R09: 1ffff110066c8dba [ 443.195141][ C1] R10: dffffc0000000000 R11: ffffed10066c8dbb R12: ffff888033646c00 [ 443.195154][ C1] R13: 0000000000000002 R14: ffff8880548bdd00 R15: ffffc90004377840 [ 443.195166][ C1] FS: 0000000000000000(0000) GS:ffff888125060000(0000) knlGS:0000000000000000 [ 443.195180][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 443.195192][ C1] CR2: 0000200000bbf030 CR3: 0000000053bf2000 CR4: 00000000003526f0 [ 443.195210][ C1] Call Trace: [ 443.195216][ C1] [ 443.195222][ C1] lockdep_hardirqs_off+0x56/0xd0 [ 443.195244][ C1] ? __local_bh_enable_ip+0x71/0x130 [ 443.195263][ C1] ? __inet6_bind+0x301/0xf30 [ 443.195285][ C1] trace_hardirqs_off+0x12/0x40 [ 443.195307][ C1] __local_bh_enable_ip+0x71/0x130 [ 443.195326][ C1] __inet6_bind+0x301/0xf30 [ 443.195355][ C1] kernel_bind+0x13e/0x1c0 [ 443.195372][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 443.195396][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 443.195417][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 443.195441][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 443.195457][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 443.195478][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 443.195497][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 443.195519][ C1] rds_connect_worker+0x1d8/0x290 [ 443.195542][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 443.195560][ C1] process_scheduled_works+0xa8e/0x14e0 [ 443.195593][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 443.195615][ C1] ? assign_work+0x3cf/0x5d0 [ 443.195635][ C1] worker_thread+0xa47/0xfb0 [ 443.195660][ C1] ? __kthread_parkme+0x71/0x1f0 [ 443.195686][ C1] kthread+0x388/0x470 [ 443.195707][ C1] ? __pfx_worker_thread+0x10/0x10 [ 443.195725][ C1] ? __pfx_kthread+0x10/0x10 [ 443.195748][ C1] ret_from_fork+0x514/0xb70 [ 443.195772][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 443.195795][ C1] ? __switch_to+0xc89/0x1420 [ 443.195815][ C1] ? __pfx_kthread+0x10/0x10 [ 443.195838][ C1] ret_from_fork_asm+0x1a/0x30 [ 443.195862][ C1] [ 443.495452][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 443.502345][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 443.511474][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.521544][ T30] Call Trace: [ 443.524835][ T30] [ 443.527772][ T30] vpanic+0x56c/0xa60 [ 443.531779][ T30] ? __pfx___schedule+0x10/0x10 [ 443.536650][ T30] ? __pfx_vpanic+0x10/0x10 [ 443.541178][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 443.547357][ T30] panic+0xc5/0xd0 [ 443.551097][ T30] ? __pfx_panic+0x10/0x10 [ 443.555528][ T30] ? preempt_schedule_common+0x82/0xd0 [ 443.561003][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 443.566385][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 443.572568][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 443.578737][ T30] watchdog+0x1030/0x1030 [ 443.583091][ T30] ? watchdog+0x1c7/0x1030 [ 443.587530][ T30] kthread+0x388/0x470 [ 443.591612][ T30] ? __pfx_watchdog+0x10/0x10 [ 443.596295][ T30] ? __pfx_kthread+0x10/0x10 [ 443.600899][ T30] ret_from_fork+0x514/0xb70 [ 443.605511][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 443.610646][ T30] ? __switch_to+0xc89/0x1420 [ 443.615338][ T30] ? __pfx_kthread+0x10/0x10 [ 443.619944][ T30] ret_from_fork_asm+0x1a/0x30 [ 443.624732][ T30] [ 443.628045][ T30] Kernel Offset: disabled [ 443.632361][ T30] Rebooting in 86400 seconds..