last executing test programs: 4m53.907011624s ago: executing program 1 (id=2428): socket(0x10, 0x803, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x76}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) r2 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r6}, 0x0, &(0x7f0000001040)}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r8, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5bc}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) 4m50.157482531s ago: executing program 1 (id=2463): socket$kcm(0x2, 0xa, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f1000000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000000980)=[{{&(0x7f0000000300)=@l2tp6, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000380)=""/152, 0x98}], 0x2, &(0x7f00000004c0)=""/12, 0xc}, 0x1}, {{&(0x7f0000000500)=@rc={0x1f, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000a40)=""/250, 0xfa}], 0x1, &(0x7f0000000dc0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000840)=""/107, 0x6b}, 0x81}], 0x3, 0x0, 0x0) 4m49.759403015s ago: executing program 2 (id=2466): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x673}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0x3) 4m49.402401016s ago: executing program 2 (id=2473): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5d1, 0x5b}}}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x30, 0x1}, {}, {0x24}, {0x5e}, {0x9}, {0x3, 0x1}, {0x16, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1b, 0x1}, {0x36}, {0xb}, {0x3}, {0x12}, {0xc, 0x1}, {0x36}, {}, {0x12}, {0x4, 0x1}, {0x1b, 0x1}, {0x5, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x176}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8480}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_IE={0x47, 0x2a, [@ht={0x2d, 0x1a, {0x4000, 0x1, 0x3, 0x0, {0x2, 0x3, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x4}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x1, 0x81, 0x3c, 0xcb}}, @ssid={0x0, 0x8, @random="345f1d5e1a03ee36"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x1}}, @ibss={0x6, 0x2, 0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x850}, 0x4e6c072360f0b1ab) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000200)=@routing={0x1d, 0xa, 0x2, 0xff, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x58) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd3, 0xd3, 0xa, [@enum={0xc, 0x3, 0x0, 0x6, 0x4, [{0x7fff, 0x8}, {0x8, 0x6}, {0x2, 0xfffffffe}]}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @struct={0x5, 0x4, 0x0, 0x4, 0x0, 0x8, [{0xe, 0x0, 0x3ff}, {0xe, 0x2, 0xe}, {0x1, 0x0, 0x4}, {0x8, 0x3, 0xe2}]}, @float={0xf, 0x0, 0x0, 0x10, 0x8}, @restrict={0x6, 0x0, 0x0, 0xb, 0x5}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x5}, @datasec={0xe, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x6, 0x6}], 'T,c'}, @var={0xe, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61, 0x0, 0x3d, 0x61, 0x61, 0x5c, 0x0, 0x30]}}, &(0x7f0000000640)=""/60, 0xf6, 0x3c, 0x1}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f0000000700)=""/53, 0x35, 0x0, &(0x7f0000000740)=""/80, 0x50}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x12, 0x1, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x1, 0x0, 0x2, 0x2, 0x4, 0xffffffffffffffff}], &(0x7f0000000340)='GPL\x00', 0x6, 0xe4, &(0x7f0000000380)=""/228, 0x41100, 0x31, '\x00', r4, @fallback=0x32, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0xf, 0xa035, 0x8}, 0x10, r6, 0xffffffffffffffff, 0x3, &(0x7f0000000840)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000880)=[{0x3, 0x1, 0x10, 0x3}, {0x3, 0x5, 0xb, 0x9}, {0x2, 0x4, 0x10, 0x6}], 0x10, 0x8}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000980)={[{0x2d, 'rdma'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}, {0x2d, 'io'}, {0x2b, 'cpu'}]}, 0x21) (async) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r1, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x480c5) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x14, &(0x7f0000000ac0)=@raw=[@jmp={0x5, 0x1, 0x4, 0x5, 0xb, 0x0, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0x8, 0x7, 0x0, 0x8, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x0, 0x2, 0x6}], &(0x7f0000000b80)='GPL\x00', 0x8, 0x25, &(0x7f0000000bc0)=""/37, 0x40f00, 0x2a, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000c00)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xa, 0x401, 0x9}, 0x10, 0x299f, r3, 0x2, &(0x7f0000000c80)=[r3, r3], &(0x7f0000000cc0)=[{0x5, 0x5, 0x3, 0x7}, {0x3, 0x2, 0x2, 0x3}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r8, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000dc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000e80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000010c0)={0x0, 0x12, "b77c6e5237e6331c006d2946dfa8252ab8f5"}, &(0x7f0000001100)=0x1a) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001140)={r9, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000001200)=0x84) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000001240)=0x2) (async) preadv(r5, &(0x7f0000002740)=[{&(0x7f0000001280)=""/7, 0x7}, {&(0x7f00000012c0)=""/9, 0x9}, {&(0x7f0000001300)=""/187, 0xbb}, {&(0x7f00000013c0)=""/6, 0x6}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/131, 0x83}, {&(0x7f00000024c0)=""/1, 0x1}, {&(0x7f0000002500)=""/109, 0x6d}, {&(0x7f0000002580)=""/236, 0xec}, {&(0x7f0000002680)=""/189, 0xbd}], 0xa, 0x1, 0x80000000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000002800)={0x0, 0xc1c2, 0x30, 0xfffffffffffffff8, 0x5}, &(0x7f0000002840)=0x18) (async) sendmmsg$alg(r7, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002880)="5d07ce159580e4d3694a2e77554e7b7ebcf8d8e8c189e89ff5b29285284a8da40e5f98f9b8a356624668792619dc93e56468baf5d70a", 0x36}, {&(0x7f00000028c0)="a0946ad956d149a228884313c6308f950471879634eed51bda6b843fe0b33ab3a3cb16f5da37b77b06cf375a45d125983b14100b5e542e6fb03aea24a8ffcb37870e962eb668dadc16e91adbd99c88f99527c90d6fb8f23260334a06364ef1f0a9e593942a01f6114c0be37739561945877fe7c81ee3c65333404d54734de1289a81e6f8e8e21286268204cc053462daab2fc6bba317117313a053fcf016f197863846a2c8ace3de5c0e95c1220d3cf6eefaeb98c25cdb3de0198993de412f507c91e75f9febefd5e13cbfb47bb36d2b28c50dce4f4832cdf403", 0xda}, {&(0x7f00000029c0)="9df28f28372071d35ca29e752abf8bc4ea2c4861d356eef567dcd2571d5c7a031c21e496c3c17343730b7fa15a699ae3e6130ebaf49a4b83bc2941e114bfa9fb247b8741cb7f6630a80d4c8fe1ec9191c76993ee4a64da42e11fb28c0ad8811ebb557e48fc", 0x65}, {&(0x7f0000002a40)="6b845bb616", 0x5}, {&(0x7f0000002a80)="02f040578d1c39823cb2d4097b072bef4eacde0d5ab1c65e8b9662ff836a97568003df73ff71fc7510ee2293f2858a1dee337c583ffb561b55c9f97033ae769b52f50652537628d5", 0x48}], 0x5, &(0x7f0000002b80)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30, 0x40}], 0x1, 0x4040000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x20, r10, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x61}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) (async) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x1c, r10, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x1c}}, 0x48000) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000002e40)={0x1d, @remote, 0x4e20, 0xffffff8c, 'none\x00', 0x3, 0x94, 0x74}, 0x2c) (async) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000002e80)) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x804) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000003040), r3) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000003100)={&(0x7f0000003000), 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x1c, r11, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x4044805) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000003280)=@add_del={0x2, &(0x7f0000003240)='ip6gre0\x00'}) 4m49.279313603s ago: executing program 1 (id=2476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000060000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m49.165381564s ago: executing program 2 (id=2477): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x1, 0x7, 0x1, 0xc, {{0x14, 0x4, 0x0, 0x25, 0x50, 0x67, 0x0, 0xd1, 0x4, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x2b, 0x73, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1]}, @rr={0x7, 0xb, 0x98, [@loopback, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x10, 0x10, 0x8, 0xfffffffa, {{0x39, 0x4, 0x2, 0x1, 0xe4, 0x64, 0xffff, 0x4a, 0x52, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, {[@noop, @noop, @cipso={0x86, 0xf, 0x1, [{0x1, 0x9, "1079c43411ee4a"}]}, @rr={0x7, 0x27, 0x29, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @local]}, @timestamp_prespec={0x44, 0x2c, 0x3f, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x4}, {@empty, 0x1}, {@multicast1, 0x4380000}]}, @timestamp_prespec={0x44, 0x1c, 0xb7, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x7ff}, {@loopback, 0x5d2}]}, @ssrr={0x89, 0x17, 0x12, [@multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @empty, @rand_addr=0x64010101]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x3a, 0x3, 0xc, [{@multicast1, 0x4}, {@private=0xa010101, 0x1}, {@empty, 0x8c52}, {@loopback, 0x3}, {@empty, 0x8}, {@multicast1, 0x6}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@mpls_getroute={0x100, 0x1a, 0x8, 0x70bd26, 0x25dfdbfd, {0x1c, 0x14, 0x10, 0x6, 0xfd, 0x2, 0xfd, 0x8, 0x2a00}, [@RTA_MULTIPATH={0xc, 0x9, {0xf655, 0x2c, 0xb, r2}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x4, 0x7, r3}}, @RTA_DST={0x8, 0x1, {0x4}}, @RTA_MULTIPATH={0xc, 0x9, {0xfe7, 0x19, 0x9}}, @RTA_DST={0x8, 0x1, {0xffff7}}, @RTA_DST={0x8, 0x1, {0x8, 0x0, 0x1}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_NEWDST={0x84, 0x13, [{0xffff, 0x0, 0x1}, {0x3ff}, {0xfff, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0x1}, {0x5}, {0xfff}, {0xbdc1e}, {0x6, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xaa, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xe22}, {0x1fba2, 0x0, 0x1}, {0xc}, {0x2}, {0x910d}, {0x7ff}, {0x100, 0x0, 0x1}, {0x5}, {0x7}, {0x3}, {0x3}, {0x8, 0x0, 0x1}, {0xb8}, {0x4}, {}, {0xff44d}, {0xd4}, {0x4, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x1, "dbb0b34f1ba30d261d462f78261a"}}, @RTA_DST={0x8, 0x1, {0xf, 0x0, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4040090}, 0x80) 4m49.047117363s ago: executing program 2 (id=2478): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0xfffffff8}, 0x78) 4m48.942006916s ago: executing program 1 (id=2481): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'veth1\x00', {0x2, 0x0, @local}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) 4m48.814978478s ago: executing program 2 (id=2482): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000200000000fc020000000000000000000000000000200100000000000000000000000000000006000000000000000000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ff0200000000000000000000000000010000000000000000000800000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00040100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m48.802096065s ago: executing program 1 (id=2483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000200000000fc020000000000000000000000000000200100000000000000000000000000000006000000000000000000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ff0200000000000000000000000000010000000000000000001c00000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00040100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m47.951464259s ago: executing program 2 (id=2490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x100000000000000, 0x0, 0x20000001}, 0x0) 4m47.520038866s ago: executing program 32 (id=2490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x100000000000000, 0x0, 0x20000001}, 0x0) 4m47.491851807s ago: executing program 1 (id=2493): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'veth1\x00', {0x2, 0x0, @local}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) 4m47.232392227s ago: executing program 33 (id=2493): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'veth1\x00', {0x2, 0x0, @local}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) 11.113545392s ago: executing program 6 (id=5256): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x2081) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r1}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) 10.137449243s ago: executing program 6 (id=5265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@ifindex, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r4 = epoll_create1(0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f00000001c0)=0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r0, r2, 0x2f, 0x2030, 0x4, @void, @void, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@ifindex, r0, 0x2f}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) (async) epoll_create1(0x0) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f00000001c0)=0x1) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback=r0, r2, 0x2f, 0x2030, 0x4, @void, @void, @value=r3}, 0x20) (async) 9.956996674s ago: executing program 6 (id=5269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r2, 0xfffffffffffffff7, 0x5, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r10}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, 0x0, 0x0, 0x4c890) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x0, 0xbf, &(0x7f0000000340)="2efd34a665e5d3956685eb43a569095043f807854a436318ca773c06a1294cde492f2838f306b5c11ac5c45d8b5d8c479551be9d2ae75fe4105b9c81665ebf2de467d139d97a8faf659f5fb0e903e6dc593e1c157fae6f0155d432a216bd9616fc2ae12007a398bb3c3cd9fc89f8502e56afb9568c5f9e767f4d8e2fc81984d929742818b2d7a968b7e5d7d6ceaf5e75133c523c7bc367d8ea729cf973179231fa7ee199fff21ed1039a787ff7365d65dc79568b6a5ca44eec59719b4ce229", 0x1, 0x5, 0xff, 0x5, 0x405, 0x5, 0x40, 'syz0\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x20000040) 9.060360652s ago: executing program 6 (id=5277): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xd0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d030000", @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d030000", @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0x0, @ANYBLOB="090001"], 0x38}, 0x1, 0x0, 0x0, 0x24000044}, 0x40000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r8 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r10, 0x5452, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) (async) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) (async) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) (async) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r13 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r13}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x400008c) 8.329459513s ago: executing program 6 (id=5280): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond_slave_1\x00', 0x10) 7.985570393s ago: executing program 6 (id=5283): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000010000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000007b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 5.285898122s ago: executing program 0 (id=5301): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x2000}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x6, 0x8ad1, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x706, 0x6}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x24000000) sendmsg$nl_route(r2, 0x0, 0x20044002) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000780), 0x0, 0x20048040) 4.734071133s ago: executing program 0 (id=5306): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)="11", 0x1}], 0x1}}], 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="2e37d29c6a36ff583a1f97daa41b5e95f8fdad01b6c8bbc51347883a0859f704126f0adf008196f2992746cd7205d3da24ef2a6eff0be1cf00a6035e018b073d3a979e0d6f19343f7a0ea92ab0ba3d789a377d870fd7e40df8fdaa20a978d284c1b6e7bfbf297a6ea81534a675b5f607cd135d17f8ab67206078666b25d161f6e9c0504040ac3cb3f6edc4"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x25, &(0x7f0000000140)=""/37, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000200)=[{0x0, 0x3, 0x6, 0xa}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0xb}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r4, 0x40049409, r3) accept4$unix(r3, &(0x7f0000000440), &(0x7f0000000080)=0x6e, 0x80000) socket(0x28, 0x5, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='xprtrdma_post_send_err\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) sendmmsg$sock(r0, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)="11", 0x1}], 0x1}}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="2e37d29c6a36ff583a1f97daa41b5e95f8fdad01b6c8bbc51347883a0859f704126f0adf008196f2992746cd7205d3da24ef2a6eff0be1cf00a6035e018b073d3a979e0d6f19343f7a0ea92ab0ba3d789a377d870fd7e40df8fdaa20a978d284c1b6e7bfbf297a6ea81534a675b5f607cd135d17f8ab67206078666b25d161f6e9c0504040ac3cb3f6edc4"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x25, &(0x7f0000000140)=""/37, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000200)=[{0x0, 0x3, 0x6, 0xa}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0xb}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FICLONE(r4, 0x40049409, r3) (async) accept4$unix(r3, &(0x7f0000000440), &(0x7f0000000080)=0x6e, 0x80000) (async) socket(0x28, 0x5, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)={0x28, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4ac2411e47060aefadfa617ab9"}]}, 0x28}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='xprtrdma_post_send_err\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) (async) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) 4.537437492s ago: executing program 0 (id=5309): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r4 = socket$netlink(0x10, 0x3, 0xc) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x81, 0x1}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) (async, rerun: 64) r8 = socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) ioctl$sock_qrtr_TIOCINQ(r8, 0x8919, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)=r5}, 0x20) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r9, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r6, 0x2}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) (async) splice(r0, 0x0, r4, 0x0, 0x10d00, 0xf) 4.302073021s ago: executing program 0 (id=5310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r2) (async) close(r2) pipe(&(0x7f0000000600)) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc", 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) splice(r3, 0x0, r4, 0x0, 0x1100000000f336, 0x0) (async) splice(r3, 0x0, r4, 0x0, 0x1100000000f336, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0xfffffffffffffcd9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0xfffffffffffffcd9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) socket$isdn(0x22, 0x2, 0x21) close(0x3) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) (async) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x0, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.175740069s ago: executing program 4 (id=5314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008d00000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.085386419s ago: executing program 0 (id=5315): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x2000}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x6, 0x8ad1, 0x41, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x706, 0x6}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40041}, 0x24000000) sendmsg$nl_route(r2, 0x0, 0x20044002) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000780), 0x0, 0x20048040) 3.010956157s ago: executing program 5 (id=5316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x400, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xa, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x40440c0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) nanosleep(&(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000003c0)) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005cf7ae00090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000023200011800e000100636f6e6e6c696d69740000000c00028008000140000000001400000010000100000000000000000000ff1e185c24b8c348ee99c3adeed199bec12f8e5c6f4c19f25a"], 0xa4}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r7}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe0a, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0) 2.999478623s ago: executing program 4 (id=5317): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 2.904026109s ago: executing program 4 (id=5318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="554b00000000000000000800000014000180080005eeffffffff050001"], 0x28}}, 0x0) 2.797813654s ago: executing program 0 (id=5320): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016bc05176c73291a5a0000009567599a054af6804dc6d467214c71402af4c75e22ed876754cc4a5d0a4a0d5ae1a3ef65ddf81b1efcb3de040fcc88729f71432de9aedea3d711cb2a81afe777a1c3fd7752df8002c6f77642855ecf0dfa322e10c17405ab1ad6ac2665afcafa340cc3c631e4b96a9f0b50483c2226befff03c587d80399a34e0f1cd5af8a3fbcafa9433c307b3075b115e951639be7c500796b425bc2bed8362c8fc476857bc5e6f28b06f8f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.647789941s ago: executing program 5 (id=5321): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) connect$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x1000097, @local, 0x4, 0x3}, 0x20) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000001c0)=""/77, &(0x7f0000000100)=0x4d) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, r5, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0x50, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb1, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = socket$inet(0x10, 0x3, 0x0) unshare(0x400) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000007000000000000000000000085e6e24f250000004200000095000000"], &(0x7f0000000080)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8c809000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)={0x388, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff71, 0x3, 0x6, 0xa4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xef}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000004}, 0x40008001) 2.638324034s ago: executing program 4 (id=5322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40000) 2.357544469s ago: executing program 5 (id=5325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f00000003c0)={0x80}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) unshare(0x400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x14}, 0x20) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888882201cbec9e1124efe32b122670766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000010001fffb9a1ffff000000001b000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9, @ANYRESHEX=r7, @ANYRESDEC=r4, @ANYRESOCT=r2, @ANYRES16=r6, @ANYRES8=r3, @ANYRESHEX, @ANYRES16=r8], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 2.356923625s ago: executing program 4 (id=5326): socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket(0x1000000000000010, 0x80802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x33, 0x40012021, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="e6e120fc29314f9ee9b936e07171b11fe8ec2a819c3e5dc63a76c9085243a495702d3423ba99412f27907db35c55701c1fda7946078e2cb8151bc89978a48c58b567612d9b6330b84d8638fecd6708078fdc1730764145b4e2ef8515bff7e05101000000bd57dbe5f511811347534aa4bda4a0b97456998442ccea968f0dc03f"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.072979447s ago: executing program 3 (id=5327): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 1.678859922s ago: executing program 3 (id=5328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008e40000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.329548972s ago: executing program 3 (id=5329): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x23, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36147b"}}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x6, 0x4d, "a68b4a0cb1a0662ef2c56c3943995e54bdacce359b592a99a98ffd4704e5ebab50c7d3eda7d87988aa91b4b76916e2223539d9f6f66a90f3fb2ddf136160e293ee7a618a01856cc903a796b7a0"}, 0x55) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000ffdbdf25020000000900010073797a320000000014000200626f6e643000"/46], 0x34}}, 0xc080) 1.23103772s ago: executing program 4 (id=5330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x24}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r5, 0x3f38e000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="24000000010006", 0x7) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x1c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r7, 0x1) 907.841992ms ago: executing program 5 (id=5331): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@empty, @private, 0x0}, &(0x7f0000000380)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @struct={0xc, 0x6, 0x0, 0x4, 0x1, 0xf6a100, [{0x5, 0x2, 0x2}, {0x2, 0x5, 0x8}, {0x2, 0x2, 0x9}, {0xe, 0x5, 0x68d4}, {0x7, 0x1}, {0xe, 0x3}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x61, 0x0, 0x61, 0x61]}}, &(0x7f0000000480)=""/247, 0x95, 0xf7, 0x0, 0x7, 0x10000}, 0x28) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x10001, 0x8}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000780)={0xffffffffffffffff, 0x7, 0x8, 0x7fffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x81, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x30bf82255dd35295, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0x9, 0x2, 0x3, 0xfffffffffffffffc, 0x13}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xc8, &(0x7f0000000240)=""/200, 0x41000, 0x10, '\x00', r2, @fallback=0xd, r3, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x3, 0x4b0, 0x7fffffff}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f0000000840)=[r5, r6, 0x1, r7, r8], 0x0, 0x10, 0x9}, 0x94) r10 = getpid() r11 = getgid() setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000940)={r10, 0xee01, r11}, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r9, 0x4004662b, &(0x7f0000000980)) r12 = getuid() r13 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000d80)=0xe8) r15 = getuid() sendmmsg$unix(r7, &(0x7f0000000e80)=[{{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)="997ab36d6d95650863d65f40870284d8859fcdf65c6942a14c3dd4d0791a7a2614bbdb249337f1dd04845e7cf5a165", 0x2f}, {&(0x7f0000000a80)="562bb736b1482f22609fa81b2e4700560f24fe79c330fcd8ee410a2f28efe4b42bf6026a77ea75158ba5b4fddc94af38d8a49c6d8e601a295df3c7f3f56751690cb43e3c835aba4fbb37f3cb", 0x4c}, {&(0x7f0000000b00)="d49a3bc0c2f99dbc6086d0ecb2bc1fdc5c512d4fec0e000b64353b6ab3feda8acb7a77f7c3221124da348add71c614ce2765f44d8ae4377575cf75ab1c30e68588a160abaa1ca20144d0ad7cee0ecfeb0ec11cdf804b9ef4f7486620b9c0f80976d0e5c2cf7cc4951f6c67e12abd21ced75b021f29b61f33ac97a6cf2464fed5d34158cdaf3e65c2f993e5f9027025af115bf0700cb9e64af7cf32367da54d86c743bc0d38c37856", 0xa8}, {&(0x7f0000000bc0)="509e819bbc2969a22ba1f31056d489b2f2839fecc44b319b5735dd3c090dd3a7dbfc61765a9725fe8778f4cb0380e97aebfc7df03b42120fb0e07b5218310ad8941194e386bbb033a3d9", 0x4a}], 0x4, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r10, r12, r11}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, r11}}}, @rights={{0x34, 0x1, 0x1, [r3, r7, 0xffffffffffffffff, r1, r7, r9, r3, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {r10, r14, r11}}}, @cred={{0x1c, 0x1, 0x2, {r10, r15, r11}}}], 0xb8, 0x800}}], 0x1, 0x4000000) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000ec0)=0xe04, 0x4) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f00)) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000f40), 0x4) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f0000000fc0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f0000001000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r16, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0xc04d800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)=@ipv6_newnexthop={0xa0, 0x68, 0x200, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x3, 0x0, 0x2}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@remote}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x81}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7f}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xa}]}, @NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x9}]}, @NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) r19 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000012c0), r16) sendmsg$NLBL_UNLABEL_C_ACCEPT(r16, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x88, r19, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x44000) 593.427471ms ago: executing program 3 (id=5332): r0 = socket(0x1, 0x2, 0x0) shutdown(r0, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) (async) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000015c0)=[{{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0}}], 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001a40)=ANY=[@ANYBLOB="10000000eb030000000000000000000010000000f303"], 0x420}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x829c}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x0) (async) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x98, r4, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x7a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @initial, {0x3, 0x7}, @value=@ver_80211n={0x0, 0x10, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0xfffffffffffffff8, @default, 0x0, @void, @val, @val={0x3, 0x1, 0x38}, @val={0x4, 0x6, {0x39, 0x2, 0x6, 0x4}}, @val={0x6, 0x2}, @val={0x5, 0x3, {0xe6, 0xee, 0x9}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x4, 0x0, {0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0x80000000, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x2, 0x2, 0x20}}, @val={0x76, 0x6, {0xe, 0xf3, 0x2d, 0xff}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 411.48066ms ago: executing program 5 (id=5333): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4060010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 381.290637ms ago: executing program 3 (id=5334): syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)=""/4084, 0xff4}, {&(0x7f0000002500)=""/4124, 0x101c}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000001a00)=""/170, 0xaa}], 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x20004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)=""/4084, 0xff4}, {&(0x7f0000002500)=""/4124, 0x101c}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000001a00)=""/170, 0xaa}], 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x20004000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 117.332591ms ago: executing program 3 (id=5335): pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x6, 0xbff7fffe) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x87, 0x2, 0x2, 0x2, 0x0, [@empty]}}}], 0x28}, 0x0) unshare(0x400) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r2}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x3) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=5336): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001811000014d08a901c8cbb2cca0010000000000000ca4d4a631167ba0421c4f9a367c1bbaa7db9e2111fdbabe5beeed7a7096cbf594c03d3a262a5988399f4257702e64e8573145b510730249f9a114276ceba51884bcd14c647ff7a7dcf868e2f9cae62ab32cd20e892770ac1e1", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r6) socket(0x23, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x254}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): process `syz.6.3719'. [ 527.687912][T18235] lo speed is unknown, defaulting to 1000 [ 527.735146][T18237] geneve2: entered promiscuous mode [ 527.744992][T18237] geneve2: entered allmulticast mode [ 528.048388][T18250] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 528.073726][T18250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3723'. [ 528.084281][T18250] netlink: 'syz.0.3723': attribute type 2 has an invalid length. [ 528.092339][T18250] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 528.101787][T18250] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3723'. [ 528.674537][T18270] netlink: 'syz.3.3732': attribute type 1 has an invalid length. [ 528.734288][T18270] netlink: 'syz.3.3732': attribute type 3 has an invalid length. [ 529.193987][T18292] bridge_slave_1: left allmulticast mode [ 529.202185][T18292] bridge_slave_1: left promiscuous mode [ 529.213374][T18292] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.228167][T18292] bridge_slave_0: left allmulticast mode [ 529.239903][T18292] bridge_slave_0: left promiscuous mode [ 529.249253][T18292] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.842849][T18300] veth3: entered promiscuous mode [ 529.988092][T18328] __nla_validate_parse: 3 callbacks suppressed [ 529.988114][T18328] netlink: 844 bytes leftover after parsing attributes in process `syz.6.3747'. [ 530.119488][T18335] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3749'. [ 530.132380][T18326] netlink: 'syz.5.3746': attribute type 1 has an invalid length. [ 530.143285][T18328] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3747'. [ 530.556556][T18347] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3754'. [ 530.686550][T18351] tipc: Enabling of bearer rejected, failed to enable media [ 531.042365][T18364] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 531.118689][T18368] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3761'. [ 531.403868][T18377] syz_tun: entered allmulticast mode [ 531.498014][T18382] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3765'. [ 531.845419][T18392] netlink: 'syz.6.3771': attribute type 30 has an invalid length. [ 531.852553][T18396] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 531.859191][T18396] dvmrp1: linktype set to 773 [ 531.867596][T18397] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3769'. [ 532.211242][T18376] syz_tun: left allmulticast mode [ 532.326587][T18419] netlink: 'syz.0.3778': attribute type 1 has an invalid length. [ 532.775850][T18435] lo speed is unknown, defaulting to 1000 [ 532.847465][T18438] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 532.861463][T18438] netlink: 47 bytes leftover after parsing attributes in process `syz.5.3785'. [ 532.909540][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 533.073632][T18430] lo speed is unknown, defaulting to 1000 [ 533.456960][T18456] netlink: 'syz.3.3791': attribute type 30 has an invalid length. [ 533.969923][T18464] gretap1: entered promiscuous mode [ 534.394663][T18481] netlink: 'syz.5.3799': attribute type 1 has an invalid length. [ 534.418064][T18481] netlink: 'syz.5.3799': attribute type 1 has an invalid length. [ 534.433142][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3799'. [ 534.449009][T18481] block nbd1: shutting down sockets [ 534.767376][T18498] netlink: 'syz.6.3804': attribute type 58 has an invalid length. [ 534.866931][T18503] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 534.880739][ T5880] Bluetooth: hci0: command tx timeout [ 535.876570][T18529] __nla_validate_parse: 4 callbacks suppressed [ 535.876592][T18529] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3815'. [ 535.912044][T18529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3815'. [ 536.069311][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3817'. [ 536.099516][T18533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.234840][T18576] netlink: 'syz.3.3829': attribute type 13 has an invalid length. [ 537.265945][T18576] netlink: 'syz.3.3829': attribute type 17 has an invalid length. [ 537.859288][T18594] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3834'. [ 538.164543][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 538.265668][T18614] tipc: Invalid UDP bearer configuration [ 538.265729][T18614] tipc: Enabling of bearer rejected, failed to enable media [ 538.518040][T18624] xt_policy: too many policy elements [ 538.588188][ T30] audit: type=1800 audit(1755635164.205:12): pid=18626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3847" name="memory.events" dev="tmpfs" ino=595 res=0 errno=0 [ 538.623720][ T30] audit: type=1804 audit(1755635164.235:13): pid=18626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3847" name="/newroot/112/memory.events" dev="tmpfs" ino=595 res=1 errno=0 [ 539.029267][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 539.081379][T18649] tipc: Enabled bearer , priority 0 [ 539.096493][T18648] tipc: Enabling of bearer rejected, already enabled [ 539.110934][T18649] syzkaller0: entered promiscuous mode [ 539.112277][T18653] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3855'. [ 539.116966][T18649] syzkaller0: entered allmulticast mode [ 539.138899][T18647] tipc: Resetting bearer [ 539.178236][T18647] tipc: Disabling bearer [ 539.223586][T18655] syzkaller1: entered promiscuous mode [ 539.229329][T18655] syzkaller1: entered allmulticast mode [ 539.343945][T18659] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3858'. [ 539.605041][T18664] lo speed is unknown, defaulting to 1000 [ 539.613766][T18670] "syz.3.3861" (18670) uses obsolete ecb(arc4) skcipher [ 540.312831][ T3501] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.338748][ T3501] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.350018][ T3501] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.359031][ T3501] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.770150][T18693] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3867'. [ 540.840801][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3869'. [ 541.165578][T18702] lo speed is unknown, defaulting to 1000 [ 541.295378][T18715] __nla_validate_parse: 2 callbacks suppressed [ 541.295400][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3876'. [ 541.511334][T18726] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3881'. [ 541.860471][T18737] lo speed is unknown, defaulting to 1000 [ 541.903022][T18749] netlink: 'syz.0.3885': attribute type 1 has an invalid length. [ 541.912865][T18749] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3885'. [ 541.926418][T18749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3885'. [ 542.060015][T18757] netlink: 'syz.3.3891': attribute type 21 has an invalid length. [ 542.068180][T18757] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3891'. [ 542.100662][T18757] netlink: 'syz.3.3891': attribute type 5 has an invalid length. [ 542.113264][T18757] netlink: 'syz.3.3891': attribute type 6 has an invalid length. [ 542.146146][T18757] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3891'. [ 542.185616][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3893'. [ 542.187734][T18757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3891'. [ 542.198716][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3893'. [ 542.224770][T18763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.274842][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3891'. [ 542.294253][T18757] ip6tnl1: entered promiscuous mode [ 542.299516][T18757] ip6tnl1: entered allmulticast mode [ 542.929897][T18803] netlink: 'syz.4.3904': attribute type 12 has an invalid length. [ 542.979437][T18803] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 543.144035][T18812] bond2: entered promiscuous mode [ 543.191078][T18812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.330708][T18825] tipc: Started in network mode [ 543.335658][T18825] tipc: Node identity ac14140f, cluster identity 4711 [ 543.350598][T18825] tipc: New replicast peer: 255.255.255.255 [ 543.357543][T18825] tipc: Enabled bearer , priority 10 [ 543.396528][T18825] tipc: Disabling bearer [ 543.613956][T18841] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 543.762668][ T55] block nbd2: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 240 seconds [ 543.780640][ T55] block nbd2: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 240 seconds [ 543.791853][ T55] block nbd2: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 240 seconds [ 543.803051][ T55] block nbd2: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 240 seconds [ 544.507306][T18873] Bluetooth: MGMT ver 1.23 [ 544.571085][T18874] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 544.628969][T18874] syzkaller0: entered promiscuous mode [ 544.634654][T18874] syzkaller0: entered allmulticast mode [ 544.967212][T18892] netlink: 'syz.0.3927': attribute type 4 has an invalid length. [ 544.978823][T18890] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 544.990596][T18890] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 545.596219][T18920] syzkaller0: Caught tx_queue_len zero misconfig [ 546.348173][T18949] __nla_validate_parse: 20 callbacks suppressed [ 546.348195][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3963'. [ 546.388323][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.396693][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.398953][T18952] netlink: 'syz.0.3961': attribute type 9 has an invalid length. [ 546.563036][T18956] vlan2: entered allmulticast mode [ 546.568442][T18956] bridge_slave_0: entered allmulticast mode [ 546.622656][T18960] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3965'. [ 546.668558][T18959] netlink: 3696 bytes leftover after parsing attributes in process `syz.6.3965'. [ 546.693582][T18959] netlink: 3696 bytes leftover after parsing attributes in process `syz.6.3965'. [ 546.758081][T18964] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 547.072193][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3973'. [ 547.195223][T18988] netlink: 'syz.6.3977': attribute type 23 has an invalid length. [ 547.209310][T18987] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3976'. [ 547.682586][T19009] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3983'. [ 547.744778][T19009] pim6reg1: entered promiscuous mode [ 547.774011][T19009] pim6reg1: entered allmulticast mode [ 547.822529][T19014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3985'. [ 547.865478][T19021] netlink: 'syz.6.3983': attribute type 13 has an invalid length. [ 547.873950][T19021] netlink: 'syz.6.3983': attribute type 17 has an invalid length. [ 547.916284][T19021] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.954185][T19021] dummy0: left promiscuous mode [ 547.959388][T19021] dummy0: left allmulticast mode [ 548.006076][T19021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.251450][T19028] syzkaller0: entered promiscuous mode [ 548.257980][T19028] syzkaller0: entered allmulticast mode [ 548.375843][T19034] tipc: Enabling of bearer rejected, failed to enable media [ 548.491586][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3994'. [ 548.506614][T19046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 548.663772][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3999'. [ 549.576859][T19075] netlink: 'syz.3.4005': attribute type 4 has an invalid length. [ 550.108834][T19103] netlink: 'syz.0.4013': attribute type 1 has an invalid length. [ 550.116783][T19103] netlink: 'syz.0.4013': attribute type 3 has an invalid length. [ 550.631730][T19129] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 550.741935][T19135] netlink: 'syz.6.4024': attribute type 1 has an invalid length. [ 550.984857][T19134] lo speed is unknown, defaulting to 1000 [ 551.384990][T19170] __nla_validate_parse: 7 callbacks suppressed [ 551.385012][T19170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4035'. [ 551.580501][T19177] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4039'. [ 551.827096][T19166] syzkaller1: entered promiscuous mode [ 551.833306][T19166] syzkaller1: entered allmulticast mode [ 551.923031][T19179] lo speed is unknown, defaulting to 1000 [ 552.148485][T19191] tipc: Started in network mode [ 552.158082][T19191] tipc: Node identity cad499229d25, cluster identity 4711 [ 552.177569][T19191] tipc: Enabled bearer , priority 0 [ 552.308194][T19191] syzkaller0: entered promiscuous mode [ 552.329320][T19191] syzkaller0: entered allmulticast mode [ 552.427270][T19191] tipc: Resetting bearer [ 552.433082][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4047'. [ 552.497792][T19191] tipc: Disabling bearer [ 552.514246][T19210] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4050'. [ 552.536605][T19207] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 552.545773][T19207] CPU: 1 UID: 0 PID: 19207 Comm: syz.3.4047 Not tainted syzkaller #0 PREEMPT(full) [ 552.545804][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.545818][T19207] Call Trace: [ 552.545828][T19207] [ 552.545839][T19207] dump_stack_lvl+0x189/0x250 [ 552.545880][T19207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.545908][T19207] ? __pfx__printk+0x10/0x10 [ 552.545963][T19207] ? kernfs_path_from_node+0x2f/0x290 [ 552.546004][T19207] ? kernfs_path_from_node+0x250/0x290 [ 552.546029][T19207] ? kernfs_path_from_node+0x2f/0x290 [ 552.546059][T19207] sysfs_warn_dup+0x8e/0xa0 [ 552.546088][T19207] sysfs_do_create_link_sd+0xc0/0x110 [ 552.546116][T19207] device_add_class_symlinks+0x1cf/0x240 [ 552.546161][T19207] device_add+0x475/0xb50 [ 552.546189][T19207] wiphy_register+0x1ba6/0x28d0 [ 552.546268][T19207] ? __pfx_wiphy_register+0x10/0x10 [ 552.546297][T19207] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 552.546338][T19207] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 552.546392][T19207] ieee80211_register_hw+0x3425/0x4080 [ 552.546440][T19207] ? ieee80211_register_hw+0x14a1/0x4080 [ 552.546530][T19207] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 552.546558][T19207] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 552.546600][T19207] ? __hrtimer_setup+0x187/0x210 [ 552.546629][T19207] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 552.546683][T19207] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 552.546745][T19207] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 552.546772][T19207] ? trace_kmalloc+0x1f/0xd0 [ 552.546799][T19207] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 552.546829][T19207] ? kstrndup+0xbf/0x160 [ 552.546868][T19207] hwsim_new_radio_nl+0xea4/0x1b10 [ 552.546899][T19207] ? __pfx___nla_validate_parse+0x10/0x10 [ 552.546958][T19207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 552.547002][T19207] ? __nla_parse+0x40/0x60 [ 552.547042][T19207] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 552.547080][T19207] genl_family_rcv_msg_doit+0x212/0x300 [ 552.547114][T19207] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 552.547156][T19207] ? bpf_lsm_capable+0x9/0x20 [ 552.547187][T19207] ? security_capable+0x7e/0x2e0 [ 552.547228][T19207] genl_rcv_msg+0x60e/0x790 [ 552.547261][T19207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.547285][T19207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 552.547331][T19207] netlink_rcv_skb+0x205/0x470 [ 552.547359][T19207] ? __lock_acquire+0xab9/0xd20 [ 552.547392][T19207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.547418][T19207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.547473][T19207] ? down_read+0x1ad/0x2e0 [ 552.547496][T19207] genl_rcv+0x28/0x40 [ 552.547517][T19207] netlink_unicast+0x82f/0x9e0 [ 552.547556][T19207] ? __pfx_netlink_unicast+0x10/0x10 [ 552.547588][T19207] ? netlink_sendmsg+0x642/0xb30 [ 552.547617][T19207] ? skb_put+0x11b/0x210 [ 552.547643][T19207] netlink_sendmsg+0x805/0xb30 [ 552.547687][T19207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.547724][T19207] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.547760][T19207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.547783][T19207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.547817][T19207] __sock_sendmsg+0x219/0x270 [ 552.547847][T19207] ____sys_sendmsg+0x505/0x830 [ 552.547876][T19207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.547910][T19207] ? import_iovec+0x74/0xa0 [ 552.547947][T19207] ___sys_sendmsg+0x21f/0x2a0 [ 552.547973][T19207] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.548040][T19207] ? __fget_files+0x2a/0x420 [ 552.548072][T19207] ? __fget_files+0x3a0/0x420 [ 552.548117][T19207] __x64_sys_sendmsg+0x19b/0x260 [ 552.548144][T19207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.548204][T19207] ? rcu_is_watching+0x15/0xb0 [ 552.548234][T19207] ? do_syscall_64+0xbe/0x3b0 [ 552.548271][T19207] do_syscall_64+0xfa/0x3b0 [ 552.548301][T19207] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.548330][T19207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.548353][T19207] ? clear_bhb_loop+0x60/0xb0 [ 552.548379][T19207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.548400][T19207] RIP: 0033:0x7f0dd498ebe9 [ 552.548421][T19207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.548440][T19207] RSP: 002b:00007f0dd57d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.548464][T19207] RAX: ffffffffffffffda RBX: 00007f0dd4bb6090 RCX: 00007f0dd498ebe9 [ 552.548480][T19207] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 552.548493][T19207] RBP: 00007f0dd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 552.548506][T19207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.548519][T19207] R13: 00007f0dd4bb6128 R14: 00007f0dd4bb6090 R15: 00007fff264609a8 [ 552.548555][T19207] [ 553.250417][T19223] netlink: 'syz.5.4053': attribute type 16 has an invalid length. [ 553.276312][T19223] netlink: 'syz.5.4053': attribute type 3 has an invalid length. [ 553.316531][T19223] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.4053'. [ 553.523227][T19235] smc: net device bond0 applied user defined pnetid SYZ2 [ 553.574433][T19244] netlink: 'syz.3.4063': attribute type 10 has an invalid length. [ 553.588638][T19244] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4063'. [ 553.650750][T19248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4063'. [ 553.658490][T19244] team0: Port device geneve0 added [ 553.665770][ T3501] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.674791][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 553.698961][ T3501] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.743648][ T3501] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.767807][ T3501] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.828021][T19248] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 553.845604][T19250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4064'. [ 553.872337][T19223] lo speed is unknown, defaulting to 1000 [ 554.177565][T19264] netlink: 'syz.6.4069': attribute type 4 has an invalid length. [ 554.366072][T19278] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4074'. [ 554.413258][T19276] pim6reg1: entered allmulticast mode [ 554.684326][T19297] netlink: 'syz.4.4080': attribute type 1 has an invalid length. [ 554.724588][T19297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.775200][T19294] lo speed is unknown, defaulting to 1000 [ 555.379333][T19324] nbd: couldn't find device at index 536870912 [ 556.696697][T19371] netlink: 'syz.3.4102': attribute type 1 has an invalid length. [ 556.706130][T19371] __nla_validate_parse: 5 callbacks suppressed [ 556.706149][T19371] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4102'. [ 557.188530][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4108'. [ 557.469101][T19409] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 557.481317][T19408] IPVS: stopping backup sync thread 19409 ... [ 557.502570][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'. [ 557.503782][T19408] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4114'. [ 557.555060][T19408] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4114'. [ 557.628362][T19408] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4114'. [ 557.839217][T19418] FAULT_INJECTION: forcing a failure. [ 557.839217][T19418] name failslab, interval 1, probability 0, space 0, times 0 [ 557.869297][T19418] CPU: 1 UID: 0 PID: 19418 Comm: syz.0.4119 Not tainted syzkaller #0 PREEMPT(full) [ 557.869326][T19418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.869339][T19418] Call Trace: [ 557.869347][T19418] [ 557.869356][T19418] dump_stack_lvl+0x189/0x250 [ 557.869388][T19418] ? __pfx____ratelimit+0x10/0x10 [ 557.869418][T19418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.869443][T19418] ? __pfx__printk+0x10/0x10 [ 557.869479][T19418] ? __pfx___might_resched+0x10/0x10 [ 557.869505][T19418] should_fail_ex+0x414/0x560 [ 557.869538][T19418] should_failslab+0xa8/0x100 [ 557.869577][T19418] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 557.869642][T19418] ? __alloc_skb+0x112/0x2d0 [ 557.869676][T19418] __alloc_skb+0x112/0x2d0 [ 557.869709][T19418] netlink_sendmsg+0x5c6/0xb30 [ 557.869749][T19418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.869782][T19418] ? aa_sock_msg_perm+0xf1/0x1d0 [ 557.869814][T19418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.869836][T19418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.869865][T19418] __sock_sendmsg+0x219/0x270 [ 557.869894][T19418] ____sys_sendmsg+0x505/0x830 [ 557.869920][T19418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.869950][T19418] ? import_iovec+0x74/0xa0 [ 557.869976][T19418] ___sys_sendmsg+0x21f/0x2a0 [ 557.869998][T19418] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.870056][T19418] ? __fget_files+0x2a/0x420 [ 557.870084][T19418] ? __fget_files+0x3a0/0x420 [ 557.870124][T19418] __x64_sys_sendmsg+0x19b/0x260 [ 557.870147][T19418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.870178][T19418] ? __pfx_ksys_write+0x10/0x10 [ 557.870203][T19418] ? rcu_is_watching+0x15/0xb0 [ 557.870228][T19418] ? do_syscall_64+0xbe/0x3b0 [ 557.870260][T19418] do_syscall_64+0xfa/0x3b0 [ 557.870287][T19418] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.870313][T19418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.870333][T19418] ? clear_bhb_loop+0x60/0xb0 [ 557.870357][T19418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.870376][T19418] RIP: 0033:0x7f8f71b8ebe9 [ 557.870394][T19418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.870413][T19418] RSP: 002b:00007f8f72a4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.870435][T19418] RAX: ffffffffffffffda RBX: 00007f8f71db5fa0 RCX: 00007f8f71b8ebe9 [ 557.870450][T19418] RDX: 0000000020000804 RSI: 00002000000035c0 RDI: 0000000000000003 [ 557.870463][T19418] RBP: 00007f8f72a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 557.870476][T19418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.870489][T19418] R13: 00007f8f71db6038 R14: 00007f8f71db5fa0 R15: 00007ffeca34c2f8 [ 557.870521][T19418] [ 558.448965][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4120'. [ 558.488663][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4120'. [ 558.527149][T19420] batadv0: entered promiscuous mode [ 558.540368][T19420] batadv0: left promiscuous mode [ 558.705249][T19429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4124'. [ 559.021952][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4128'. [ 559.514484][T19460] netlink: 'syz.6.4137': attribute type 25 has an invalid length. [ 560.063456][T19482] FAULT_INJECTION: forcing a failure. [ 560.063456][T19482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.107927][T19482] CPU: 1 UID: 0 PID: 19482 Comm: syz.4.4148 Not tainted syzkaller #0 PREEMPT(full) [ 560.107957][T19482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.107971][T19482] Call Trace: [ 560.107980][T19482] [ 560.107990][T19482] dump_stack_lvl+0x189/0x250 [ 560.108023][T19482] ? __pfx____ratelimit+0x10/0x10 [ 560.108054][T19482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.108081][T19482] ? __pfx__printk+0x10/0x10 [ 560.108112][T19482] ? __might_fault+0xb0/0x130 [ 560.108157][T19482] should_fail_ex+0x414/0x560 [ 560.108191][T19482] _copy_from_iter+0x1db/0x16f0 [ 560.108218][T19482] ? rcu_is_watching+0x15/0xb0 [ 560.108243][T19482] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 560.108275][T19482] ? __pfx__copy_from_iter+0x10/0x10 [ 560.108299][T19482] ? __build_skb_around+0x257/0x3e0 [ 560.108337][T19482] ? netlink_sendmsg+0x642/0xb30 [ 560.108368][T19482] ? skb_put+0x11b/0x210 [ 560.108392][T19482] netlink_sendmsg+0x6b2/0xb30 [ 560.108435][T19482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.108472][T19482] ? aa_sock_msg_perm+0xf1/0x1d0 [ 560.108508][T19482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 560.108533][T19482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.108566][T19482] __sock_sendmsg+0x219/0x270 [ 560.108610][T19482] ____sys_sendmsg+0x505/0x830 [ 560.108640][T19482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.108673][T19482] ? import_iovec+0x74/0xa0 [ 560.108709][T19482] ___sys_sendmsg+0x21f/0x2a0 [ 560.108735][T19482] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.108818][T19482] ? __fget_files+0x2a/0x420 [ 560.108850][T19482] ? __fget_files+0x3a0/0x420 [ 560.108908][T19482] __x64_sys_sendmsg+0x19b/0x260 [ 560.108934][T19482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 560.108968][T19482] ? __pfx_ksys_write+0x10/0x10 [ 560.108995][T19482] ? rcu_is_watching+0x15/0xb0 [ 560.109022][T19482] ? do_syscall_64+0xbe/0x3b0 [ 560.109057][T19482] do_syscall_64+0xfa/0x3b0 [ 560.109087][T19482] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.109123][T19482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.109145][T19482] ? clear_bhb_loop+0x60/0xb0 [ 560.109170][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.109191][T19482] RIP: 0033:0x7fa91738ebe9 [ 560.109212][T19482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.109231][T19482] RSP: 002b:00007fa918119038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.109254][T19482] RAX: ffffffffffffffda RBX: 00007fa9175b5fa0 RCX: 00007fa91738ebe9 [ 560.109270][T19482] RDX: 0000000020000804 RSI: 00002000000035c0 RDI: 0000000000000003 [ 560.109284][T19482] RBP: 00007fa918119090 R08: 0000000000000000 R09: 0000000000000000 [ 560.109304][T19482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.109316][T19482] R13: 00007fa9175b6038 R14: 00007fa9175b5fa0 R15: 00007fff1ac9ef78 [ 560.109350][T19482] [ 560.455989][T19484] netlink: 'syz.6.4150': attribute type 1 has an invalid length. [ 560.511540][T19484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.941591][T19496] netlink: 'syz.0.4153': attribute type 25 has an invalid length. [ 561.295078][T19518] FAULT_INJECTION: forcing a failure. [ 561.295078][T19518] name failslab, interval 1, probability 0, space 0, times 0 [ 561.350327][T19518] CPU: 1 UID: 0 PID: 19518 Comm: syz.4.4162 Not tainted syzkaller #0 PREEMPT(full) [ 561.350358][T19518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.350372][T19518] Call Trace: [ 561.350383][T19518] [ 561.350393][T19518] dump_stack_lvl+0x189/0x250 [ 561.350436][T19518] ? __pfx____ratelimit+0x10/0x10 [ 561.350468][T19518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.350494][T19518] ? __pfx__printk+0x10/0x10 [ 561.350533][T19518] ? __pfx___might_resched+0x10/0x10 [ 561.350554][T19518] ? fs_reclaim_acquire+0x7d/0x100 [ 561.350595][T19518] should_fail_ex+0x414/0x560 [ 561.350631][T19518] should_failslab+0xa8/0x100 [ 561.350666][T19518] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 561.350698][T19518] ? __alloc_skb+0x112/0x2d0 [ 561.350737][T19518] __alloc_skb+0x112/0x2d0 [ 561.350775][T19518] netlink_ack+0x146/0xa50 [ 561.350808][T19518] ? rcu_is_watching+0x15/0xb0 [ 561.350832][T19518] ? trace_contention_end+0x39/0x120 [ 561.350868][T19518] netlink_rcv_skb+0x28c/0x470 [ 561.350901][T19518] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 561.350950][T19518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.351000][T19518] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.351033][T19518] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.351068][T19518] xfrm_netlink_rcv+0x79/0x90 [ 561.351096][T19518] netlink_unicast+0x82f/0x9e0 [ 561.351136][T19518] ? __pfx_netlink_unicast+0x10/0x10 [ 561.351169][T19518] ? netlink_sendmsg+0x642/0xb30 [ 561.351200][T19518] ? skb_put+0x11b/0x210 [ 561.351225][T19518] netlink_sendmsg+0x805/0xb30 [ 561.351270][T19518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.351308][T19518] ? aa_sock_msg_perm+0xf1/0x1d0 [ 561.351345][T19518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.351370][T19518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.351411][T19518] __sock_sendmsg+0x219/0x270 [ 561.351445][T19518] ____sys_sendmsg+0x505/0x830 [ 561.351476][T19518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.351511][T19518] ? import_iovec+0x74/0xa0 [ 561.351541][T19518] ___sys_sendmsg+0x21f/0x2a0 [ 561.351567][T19518] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.351645][T19518] ? __fget_files+0x2a/0x420 [ 561.351678][T19518] ? __fget_files+0x3a0/0x420 [ 561.351720][T19518] __x64_sys_sendmsg+0x19b/0x260 [ 561.351745][T19518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.351797][T19518] ? __pfx_ksys_write+0x10/0x10 [ 561.351825][T19518] ? rcu_is_watching+0x15/0xb0 [ 561.351854][T19518] ? do_syscall_64+0xbe/0x3b0 [ 561.351891][T19518] do_syscall_64+0xfa/0x3b0 [ 561.351922][T19518] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.351952][T19518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.351975][T19518] ? clear_bhb_loop+0x60/0xb0 [ 561.352003][T19518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.352025][T19518] RIP: 0033:0x7fa91738ebe9 [ 561.352045][T19518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.352065][T19518] RSP: 002b:00007fa918119038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.352089][T19518] RAX: ffffffffffffffda RBX: 00007fa9175b5fa0 RCX: 00007fa91738ebe9 [ 561.352106][T19518] RDX: 0000000020000804 RSI: 00002000000035c0 RDI: 0000000000000003 [ 561.352121][T19518] RBP: 00007fa918119090 R08: 0000000000000000 R09: 0000000000000000 [ 561.352136][T19518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.352150][T19518] R13: 00007fa9175b6038 R14: 00007fa9175b5fa0 R15: 00007fff1ac9ef78 [ 561.352187][T19518] [ 561.845831][T19527] tipc: Enabled bearer , priority 10 [ 562.149032][T19538] netlink: 'syz.0.4169': attribute type 25 has an invalid length. [ 563.119284][T19554] syzkaller1: entered allmulticast mode [ 563.378527][T19310] Set syz1 is full, maxelem 65536 reached [ 563.627020][T19583] lo speed is unknown, defaulting to 1000 [ 563.937821][T19601] __nla_validate_parse: 7 callbacks suppressed [ 563.937840][T19604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4193'. [ 563.937843][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4193'. [ 564.405672][T19625] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4198'. [ 564.584072][T19630] FAULT_INJECTION: forcing a failure. [ 564.584072][T19630] name failslab, interval 1, probability 0, space 0, times 0 [ 564.618610][T19630] CPU: 0 UID: 0 PID: 19630 Comm: syz.5.4204 Not tainted syzkaller #0 PREEMPT(full) [ 564.618640][T19630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.618654][T19630] Call Trace: [ 564.618664][T19630] [ 564.618674][T19630] dump_stack_lvl+0x189/0x250 [ 564.618709][T19630] ? __pfx____ratelimit+0x10/0x10 [ 564.618740][T19630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.618767][T19630] ? __pfx__printk+0x10/0x10 [ 564.618794][T19630] ? xfrm_netlink_rcv+0x79/0x90 [ 564.618821][T19630] ? ____sys_sendmsg+0x505/0x830 [ 564.618843][T19630] ? __x64_sys_sendmsg+0x19b/0x260 [ 564.618878][T19630] should_fail_ex+0x414/0x560 [ 564.618913][T19630] should_failslab+0xa8/0x100 [ 564.618949][T19630] kmem_cache_alloc_noprof+0x73/0x3c0 [ 564.618977][T19630] ? skb_clone+0x212/0x3a0 [ 564.619007][T19630] skb_clone+0x212/0x3a0 [ 564.619035][T19630] __netlink_deliver_tap+0x404/0x850 [ 564.619082][T19630] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.619116][T19630] netlink_deliver_tap+0x19c/0x1b0 [ 564.619149][T19630] netlink_sendskb+0x68/0x140 [ 564.619180][T19630] netlink_unicast+0x397/0x9e0 [ 564.619206][T19630] ? __asan_memcpy+0x40/0x70 [ 564.619241][T19630] ? __pfx_netlink_unicast+0x10/0x10 [ 564.619281][T19630] netlink_rcv_skb+0x28c/0x470 [ 564.619314][T19630] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 564.619341][T19630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.619391][T19630] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.619438][T19630] ? netlink_deliver_tap+0x2e/0x1b0 [ 564.619472][T19630] xfrm_netlink_rcv+0x79/0x90 [ 564.619498][T19630] netlink_unicast+0x82f/0x9e0 [ 564.619538][T19630] ? __pfx_netlink_unicast+0x10/0x10 [ 564.619574][T19630] ? netlink_sendmsg+0x642/0xb30 [ 564.619603][T19630] ? skb_put+0x11b/0x210 [ 564.619626][T19630] netlink_sendmsg+0x805/0xb30 [ 564.619668][T19630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.619705][T19630] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.619741][T19630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.619766][T19630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.619799][T19630] __sock_sendmsg+0x219/0x270 [ 564.619832][T19630] ____sys_sendmsg+0x505/0x830 [ 564.619862][T19630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.619897][T19630] ? import_iovec+0x74/0xa0 [ 564.619926][T19630] ___sys_sendmsg+0x21f/0x2a0 [ 564.619954][T19630] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.620020][T19630] ? __fget_files+0x2a/0x420 [ 564.620053][T19630] ? __fget_files+0x3a0/0x420 [ 564.620098][T19630] __x64_sys_sendmsg+0x19b/0x260 [ 564.620124][T19630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.620159][T19630] ? __pfx_ksys_write+0x10/0x10 [ 564.620186][T19630] ? rcu_is_watching+0x15/0xb0 [ 564.620215][T19630] ? do_syscall_64+0xbe/0x3b0 [ 564.620252][T19630] do_syscall_64+0xfa/0x3b0 [ 564.620282][T19630] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.620312][T19630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.620334][T19630] ? clear_bhb_loop+0x60/0xb0 [ 564.620361][T19630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.620382][T19630] RIP: 0033:0x7f205a38ebe9 [ 564.620410][T19630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.620430][T19630] RSP: 002b:00007f205b14a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.620452][T19630] RAX: ffffffffffffffda RBX: 00007f205a5b5fa0 RCX: 00007f205a38ebe9 [ 564.620467][T19630] RDX: 0000000020000804 RSI: 00002000000035c0 RDI: 0000000000000003 [ 564.620482][T19630] RBP: 00007f205b14a090 R08: 0000000000000000 R09: 0000000000000000 [ 564.620495][T19630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.620508][T19630] R13: 00007f205a5b6038 R14: 00007f205a5b5fa0 R15: 00007ffc8e735b78 [ 564.620543][T19630] [ 564.984585][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4205'. [ 565.242947][T19639] sit0: entered promiscuous mode [ 565.268710][T19639] netlink: 'syz.3.4206': attribute type 1 has an invalid length. [ 565.295201][T19639] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4206'. [ 565.432528][T19647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4209'. [ 565.843677][T19666] FAULT_INJECTION: forcing a failure. [ 565.843677][T19666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.930510][T19666] CPU: 1 UID: 0 PID: 19666 Comm: syz.5.4217 Not tainted syzkaller #0 PREEMPT(full) [ 565.930542][T19666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.930555][T19666] Call Trace: [ 565.930565][T19666] [ 565.930576][T19666] dump_stack_lvl+0x189/0x250 [ 565.930609][T19666] ? __pfx____ratelimit+0x10/0x10 [ 565.930640][T19666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.930666][T19666] ? __pfx__printk+0x10/0x10 [ 565.930711][T19666] should_fail_ex+0x414/0x560 [ 565.930746][T19666] _copy_to_user+0x31/0xb0 [ 565.930774][T19666] simple_read_from_buffer+0xe1/0x170 [ 565.930823][T19666] proc_fail_nth_read+0x1b3/0x220 [ 565.930852][T19666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.930881][T19666] ? rw_verify_area+0x2a6/0x4d0 [ 565.930908][T19666] ? __lock_acquire+0xab9/0xd20 [ 565.930939][T19666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.930965][T19666] vfs_read+0x200/0xa30 [ 565.930992][T19666] ? fdget_pos+0x247/0x320 [ 565.931017][T19666] ? __pfx___mutex_lock+0x10/0x10 [ 565.931051][T19666] ? __pfx_vfs_read+0x10/0x10 [ 565.931082][T19666] ? __fget_files+0x2a/0x420 [ 565.931120][T19666] ? __fget_files+0x3a0/0x420 [ 565.931152][T19666] ? __fget_files+0x2a/0x420 [ 565.931194][T19666] ksys_read+0x145/0x250 [ 565.931226][T19666] ? __pfx_ksys_read+0x10/0x10 [ 565.931252][T19666] ? rcu_is_watching+0x15/0xb0 [ 565.931281][T19666] ? do_syscall_64+0xbe/0x3b0 [ 565.931318][T19666] do_syscall_64+0xfa/0x3b0 [ 565.931350][T19666] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.931379][T19666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.931401][T19666] ? clear_bhb_loop+0x60/0xb0 [ 565.931428][T19666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.931457][T19666] RIP: 0033:0x7f205a38d5fc [ 565.931476][T19666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 565.931496][T19666] RSP: 002b:00007f205b14a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.931519][T19666] RAX: ffffffffffffffda RBX: 00007f205a5b5fa0 RCX: 00007f205a38d5fc [ 565.931535][T19666] RDX: 000000000000000f RSI: 00007f205b14a0a0 RDI: 0000000000000004 [ 565.931549][T19666] RBP: 00007f205b14a090 R08: 0000000000000000 R09: 0000000000000000 [ 565.931562][T19666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.931575][T19666] R13: 00007f205a5b6038 R14: 00007f205a5b5fa0 R15: 00007ffc8e735b78 [ 565.931611][T19666] [ 566.575168][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 566.625129][T19692] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4230'. [ 567.582427][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4244'. [ 567.846284][T19737] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4247'. [ 568.283627][T19748] bond0: (slave wlan1): Releasing backup interface [ 568.311053][T19748] bond0: Destroying bond [ 568.606019][T19748] bond0 (unregistering): Released all slaves [ 568.925802][T19775] netlink: 'syz.4.4261': attribute type 25 has an invalid length. [ 569.062120][T19779] netlink: 'syz.6.4262': attribute type 25 has an invalid length. [ 569.120341][ T5871] Bluetooth: hci3: command 0x0405 tx timeout [ 569.585785][T19802] lo speed is unknown, defaulting to 1000 [ 569.727268][T19812] netlink: 'syz.6.4275': attribute type 25 has an invalid length. [ 569.829162][T19820] __nla_validate_parse: 4 callbacks suppressed [ 569.829190][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4278'. [ 569.868878][T19816] gretap0: entered promiscuous mode [ 569.874827][T19816] vlan2: entered promiscuous mode [ 570.178670][T19833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4282'. [ 572.697449][T19861] pim6reg0: tun_chr_ioctl cmd 35108 [ 572.912500][T19871] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4293'. [ 572.931741][T19871] netlink: 676 bytes leftover after parsing attributes in process `syz.0.4293'. [ 573.078739][T19880] netlink: 'syz.4.4297': attribute type 29 has an invalid length. [ 573.131903][T19880] netlink: 'syz.4.4297': attribute type 3 has an invalid length. [ 573.425528][T19894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4304'. [ 573.474065][T19895] netlink: 'syz.5.4302': attribute type 25 has an invalid length. [ 573.503878][T19898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4304'. [ 573.843667][ T55] block nbd2: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 270 seconds [ 573.855676][ T55] block nbd2: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 270 seconds [ 573.868558][ T55] block nbd2: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 270 seconds [ 573.880616][ T55] block nbd2: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 270 seconds [ 573.911568][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4312'. [ 575.056361][T19966] FAULT_INJECTION: forcing a failure. [ 575.056361][T19966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.098457][T19966] CPU: 1 UID: 0 PID: 19966 Comm: syz.6.4329 Not tainted syzkaller #0 PREEMPT(full) [ 575.098485][T19966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.098498][T19966] Call Trace: [ 575.098506][T19966] [ 575.098516][T19966] dump_stack_lvl+0x189/0x250 [ 575.098577][T19966] ? __pfx____ratelimit+0x10/0x10 [ 575.098607][T19966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.098633][T19966] ? __pfx__printk+0x10/0x10 [ 575.098664][T19966] ? __might_fault+0xb0/0x130 [ 575.098707][T19966] should_fail_ex+0x414/0x560 [ 575.098740][T19966] _copy_from_user+0x2d/0xb0 [ 575.098770][T19966] ___sys_recvmsg+0x12e/0x510 [ 575.098802][T19966] ? __pfx____sys_recvmsg+0x10/0x10 [ 575.098852][T19966] ? __fget_files+0x3a0/0x420 [ 575.098896][T19966] do_recvmmsg+0x307/0x770 [ 575.098927][T19966] ? __pfx_do_recvmmsg+0x10/0x10 [ 575.098964][T19966] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.099016][T19966] __x64_sys_recvmmsg+0x190/0x240 [ 575.099043][T19966] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 575.099063][T19966] ? rcu_is_watching+0x15/0xb0 [ 575.099090][T19966] ? do_syscall_64+0xbe/0x3b0 [ 575.099124][T19966] do_syscall_64+0xfa/0x3b0 [ 575.099153][T19966] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.099180][T19966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.099200][T19966] ? clear_bhb_loop+0x60/0xb0 [ 575.099224][T19966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.099244][T19966] RIP: 0033:0x7fd67598ebe9 [ 575.099263][T19966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.099281][T19966] RSP: 002b:00007fd676872038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 575.099303][T19966] RAX: ffffffffffffffda RBX: 00007fd675bb6090 RCX: 00007fd67598ebe9 [ 575.099319][T19966] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000006 [ 575.099332][T19966] RBP: 00007fd676872090 R08: 0000000000000000 R09: 0000000000000000 [ 575.099345][T19966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.099358][T19966] R13: 00007fd675bb6128 R14: 00007fd675bb6090 R15: 00007ffe48c1d148 [ 575.099391][T19966] [ 575.729521][T19982] netlink: 'syz.6.4335': attribute type 1 has an invalid length. [ 575.767427][T19982] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4335'. [ 575.925927][T19989] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4338'. [ 575.956759][T19989] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 576.018956][T19993] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4338'. [ 576.101627][T19997] netlink: 'syz.6.4340': attribute type 1 has an invalid length. [ 576.165491][T20001] FAULT_INJECTION: forcing a failure. [ 576.165491][T20001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.188817][T20001] CPU: 1 UID: 0 PID: 20001 Comm: syz.3.4342 Not tainted syzkaller #0 PREEMPT(full) [ 576.188844][T20001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.188856][T20001] Call Trace: [ 576.188863][T20001] [ 576.188873][T20001] dump_stack_lvl+0x189/0x250 [ 576.188901][T20001] ? __pfx____ratelimit+0x10/0x10 [ 576.188928][T20001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.188951][T20001] ? __pfx__printk+0x10/0x10 [ 576.188978][T20001] ? __might_fault+0xb0/0x130 [ 576.189016][T20001] should_fail_ex+0x414/0x560 [ 576.189047][T20001] _copy_to_iter+0x3f5/0x16f0 [ 576.189076][T20001] ? __pfx__copy_to_iter+0x10/0x10 [ 576.189091][T20001] ? trace_contention_end+0x39/0x120 [ 576.189114][T20001] ? __mutex_lock+0x335/0x1360 [ 576.189142][T20001] ? register_lock_class+0x51/0x320 [ 576.189180][T20001] __skb_datagram_iter+0xf8/0x990 [ 576.189205][T20001] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 576.189237][T20001] skb_copy_datagram_iter+0xc5/0x230 [ 576.189263][T20001] unix_stream_read_actor+0x6c/0xb0 [ 576.189289][T20001] unix_stream_read_generic+0xac3/0x2480 [ 576.189359][T20001] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 576.189395][T20001] ? __lock_acquire+0xab9/0xd20 [ 576.189444][T20001] unix_stream_recvmsg+0x15d/0x1b0 [ 576.189471][T20001] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 576.189509][T20001] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 576.189534][T20001] ? __lock_acquire+0xab9/0xd20 [ 576.189573][T20001] ? aa_sock_msg_perm+0xda/0x1d0 [ 576.189605][T20001] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 576.189645][T20001] ? security_socket_recvmsg+0x7e/0x2e0 [ 576.189668][T20001] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 576.189693][T20001] sock_recvmsg+0x229/0x270 [ 576.189724][T20001] ____sys_recvmsg+0x1c9/0x460 [ 576.189761][T20001] ? __pfx_____sys_recvmsg+0x10/0x10 [ 576.189800][T20001] ? import_iovec+0x74/0xa0 [ 576.189825][T20001] ___sys_recvmsg+0x1b5/0x510 [ 576.189853][T20001] ? __pfx____sys_recvmsg+0x10/0x10 [ 576.189901][T20001] ? __fget_files+0x3a0/0x420 [ 576.189944][T20001] do_recvmmsg+0x307/0x770 [ 576.189976][T20001] ? __pfx_do_recvmmsg+0x10/0x10 [ 576.190011][T20001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 576.190060][T20001] __x64_sys_recvmmsg+0x190/0x240 [ 576.190086][T20001] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 576.190106][T20001] ? rcu_is_watching+0x15/0xb0 [ 576.190133][T20001] ? do_syscall_64+0xbe/0x3b0 [ 576.190166][T20001] do_syscall_64+0xfa/0x3b0 [ 576.190194][T20001] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.190221][T20001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.190240][T20001] ? clear_bhb_loop+0x60/0xb0 [ 576.190264][T20001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.190283][T20001] RIP: 0033:0x7f0dd498ebe9 [ 576.190303][T20001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.190320][T20001] RSP: 002b:00007f0dd57d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 576.190341][T20001] RAX: ffffffffffffffda RBX: 00007f0dd4bb6090 RCX: 00007f0dd498ebe9 [ 576.190356][T20001] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000006 [ 576.190369][T20001] RBP: 00007f0dd57d3090 R08: 0000000000000000 R09: 0000000000000000 [ 576.190382][T20001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.190394][T20001] R13: 00007f0dd4bb6128 R14: 00007f0dd4bb6090 R15: 00007fff264609a8 [ 576.190426][T20001] [ 576.558549][T20000] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4340'. [ 576.639416][T19997] gretap1: entered promiscuous mode [ 577.307931][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4356'. [ 577.343744][T20040] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 577.402943][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4356'. [ 577.414284][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 577.436929][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4357'. [ 577.492066][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.501081][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.509295][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.518611][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.822000][T20062] FAULT_INJECTION: forcing a failure. [ 577.822000][T20062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.887493][T20062] CPU: 1 UID: 0 PID: 20062 Comm: syz.5.4360 Not tainted syzkaller #0 PREEMPT(full) [ 577.887523][T20062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.887536][T20062] Call Trace: [ 577.887545][T20062] [ 577.887555][T20062] dump_stack_lvl+0x189/0x250 [ 577.887588][T20062] ? __pfx____ratelimit+0x10/0x10 [ 577.887619][T20062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.887653][T20062] ? __pfx__printk+0x10/0x10 [ 577.887684][T20062] ? __might_fault+0xb0/0x130 [ 577.887727][T20062] should_fail_ex+0x414/0x560 [ 577.887761][T20062] _copy_from_user+0x2d/0xb0 [ 577.887786][T20062] ___sys_recvmsg+0x12e/0x510 [ 577.887828][T20062] ? __pfx____sys_recvmsg+0x10/0x10 [ 577.887884][T20062] ? __might_fault+0xb0/0x130 [ 577.887916][T20062] do_recvmmsg+0x307/0x770 [ 577.887948][T20062] ? __pfx_do_recvmmsg+0x10/0x10 [ 577.887983][T20062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 577.888033][T20062] __x64_sys_recvmmsg+0x190/0x240 [ 577.888059][T20062] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 577.888079][T20062] ? rcu_is_watching+0x15/0xb0 [ 577.888105][T20062] ? do_syscall_64+0xbe/0x3b0 [ 577.888139][T20062] do_syscall_64+0xfa/0x3b0 [ 577.888166][T20062] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.888193][T20062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.888226][T20062] ? clear_bhb_loop+0x60/0xb0 [ 577.888251][T20062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.888271][T20062] RIP: 0033:0x7f205a38ebe9 [ 577.888290][T20062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.888308][T20062] RSP: 002b:00007f205b129038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 577.888330][T20062] RAX: ffffffffffffffda RBX: 00007f205a5b6090 RCX: 00007f205a38ebe9 [ 577.888345][T20062] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000006 [ 577.888358][T20062] RBP: 00007f205b129090 R08: 0000000000000000 R09: 0000000000000000 [ 577.888371][T20062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.888383][T20062] R13: 00007f205a5b6128 R14: 00007f205a5b6090 R15: 00007ffc8e735b78 [ 577.888415][T20062] [ 577.998564][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4364'. [ 578.100356][T20072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4364'. [ 579.222956][T20116] lo speed is unknown, defaulting to 1000 [ 579.355875][T20128] netlink: 'syz.6.4383': attribute type 10 has an invalid length. [ 579.431045][T20128] team0: Port device geneve0 added [ 580.055871][T20116] netlink: 'syz.3.4379': attribute type 13 has an invalid length. [ 580.074177][T20116] netlink: 'syz.3.4379': attribute type 17 has an invalid length. [ 580.085559][T20157] bridge0: port 1(ipvlan2) entered blocking state [ 580.105072][T20157] bridge0: port 1(ipvlan2) entered disabled state [ 580.135862][T20157] ipvlan2: entered allmulticast mode [ 580.143939][T20157] bridge0: entered allmulticast mode [ 580.152014][T20157] ipvlan2: left allmulticast mode [ 580.157134][T20157] bridge0: left allmulticast mode [ 580.184718][T20116] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 580.526128][T20161] syzkaller1: entered promiscuous mode [ 580.531997][T20161] syzkaller1: entered allmulticast mode [ 580.775088][T20176] openvswitch: netlink: Multiple metadata blocks provided [ 580.924330][T20181] FAULT_INJECTION: forcing a failure. [ 580.924330][T20181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.960432][T20181] CPU: 1 UID: 0 PID: 20181 Comm: syz.3.4399 Not tainted syzkaller #0 PREEMPT(full) [ 580.960463][T20181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.960478][T20181] Call Trace: [ 580.960488][T20181] [ 580.960498][T20181] dump_stack_lvl+0x189/0x250 [ 580.960531][T20181] ? __pfx____ratelimit+0x10/0x10 [ 580.960564][T20181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.960589][T20181] ? __pfx__printk+0x10/0x10 [ 580.960630][T20181] ? __might_fault+0xb0/0x130 [ 580.960674][T20181] should_fail_ex+0x414/0x560 [ 580.960709][T20181] _copy_from_user+0x2d/0xb0 [ 580.960736][T20181] __sys_bpf+0x1ed/0x870 [ 580.960786][T20181] ? __pfx___sys_bpf+0x10/0x10 [ 580.960842][T20181] ? ksys_write+0x22a/0x250 [ 580.960873][T20181] ? __pfx_ksys_write+0x10/0x10 [ 580.960898][T20181] ? rcu_is_watching+0x15/0xb0 [ 580.960927][T20181] __x64_sys_bpf+0x7c/0x90 [ 580.960953][T20181] do_syscall_64+0xfa/0x3b0 [ 580.960982][T20181] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.961011][T20181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.961031][T20181] ? clear_bhb_loop+0x60/0xb0 [ 580.961056][T20181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.961076][T20181] RIP: 0033:0x7f0dd498ebe9 [ 580.961096][T20181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.961115][T20181] RSP: 002b:00007f0dd57f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.961138][T20181] RAX: ffffffffffffffda RBX: 00007f0dd4bb5fa0 RCX: 00007f0dd498ebe9 [ 580.961154][T20181] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000 [ 580.961167][T20181] RBP: 00007f0dd57f4090 R08: 0000000000000000 R09: 0000000000000000 [ 580.961181][T20181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.961214][T20181] R13: 00007f0dd4bb6038 R14: 00007f0dd4bb5fa0 R15: 00007fff264609a8 [ 580.961245][T20181] [ 581.455189][T20189] xt_policy: too many policy elements [ 581.553145][T20201] pim6reg: entered allmulticast mode [ 581.594570][T20201] pim6reg: left allmulticast mode [ 581.737871][T20210] __nla_validate_parse: 8 callbacks suppressed [ 581.737894][T20210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4408'. [ 582.642322][T20219] lo speed is unknown, defaulting to 1000 [ 583.591882][T20264] netlink: 'syz.4.4426': attribute type 25 has an invalid length. [ 583.984403][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4434'. [ 584.547353][T20305] netlink: 'syz.5.4442': attribute type 25 has an invalid length. [ 584.724427][T20307] lo speed is unknown, defaulting to 1000 [ 585.303967][T20326] FAULT_INJECTION: forcing a failure. [ 585.303967][T20326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.317540][T20326] CPU: 0 UID: 0 PID: 20326 Comm: syz.0.4450 Not tainted syzkaller #0 PREEMPT(full) [ 585.317568][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.317581][T20326] Call Trace: [ 585.317591][T20326] [ 585.317600][T20326] dump_stack_lvl+0x189/0x250 [ 585.317633][T20326] ? __pfx____ratelimit+0x10/0x10 [ 585.317664][T20326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.317690][T20326] ? __pfx__printk+0x10/0x10 [ 585.317720][T20326] ? __might_fault+0xb0/0x130 [ 585.317763][T20326] should_fail_ex+0x414/0x560 [ 585.317796][T20326] _copy_from_user+0x2d/0xb0 [ 585.317822][T20326] ___sys_sendmsg+0x158/0x2a0 [ 585.317849][T20326] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.317912][T20326] ? __fget_files+0x2a/0x420 [ 585.317943][T20326] ? __fget_files+0x3a0/0x420 [ 585.317986][T20326] __x64_sys_sendmsg+0x19b/0x260 [ 585.318012][T20326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.318046][T20326] ? __pfx_ksys_write+0x10/0x10 [ 585.318072][T20326] ? rcu_is_watching+0x15/0xb0 [ 585.318100][T20326] ? do_syscall_64+0xbe/0x3b0 [ 585.318135][T20326] do_syscall_64+0xfa/0x3b0 [ 585.318165][T20326] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.318193][T20326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.318215][T20326] ? clear_bhb_loop+0x60/0xb0 [ 585.318248][T20326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.318269][T20326] RIP: 0033:0x7f8f71b8ebe9 [ 585.318292][T20326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.318323][T20326] RSP: 002b:00007f8f72a4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.318346][T20326] RAX: ffffffffffffffda RBX: 00007f8f71db5fa0 RCX: 00007f8f71b8ebe9 [ 585.318362][T20326] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001e [ 585.318375][T20326] RBP: 00007f8f72a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 585.318389][T20326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.318402][T20326] R13: 00007f8f71db6038 R14: 00007f8f71db5fa0 R15: 00007ffeca34c2f8 [ 585.318435][T20326] [ 585.631048][T20329] netlink: 'syz.6.4451': attribute type 9 has an invalid length. [ 585.677865][T20329] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.4451'. [ 585.754018][T20328] netlink: 'syz.6.4451': attribute type 9 has an invalid length. [ 585.797936][T20328] netlink: 211988 bytes leftover after parsing attributes in process `syz.6.4451'. [ 586.173198][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4457'. [ 586.182241][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4457'. [ 586.212082][T20344] netlink: 'syz.0.4456': attribute type 11 has an invalid length. [ 586.684918][T20355] netlink: 'syz.3.4459': attribute type 25 has an invalid length. [ 586.997955][T20365] Bluetooth: MGMT ver 1.23 [ 587.358436][T20372] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 587.680667][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 587.707572][T20381] vlan0: entered allmulticast mode [ 587.719070][T20381] hsr0: entered allmulticast mode [ 587.732227][T20381] hsr_slave_0: entered allmulticast mode [ 587.738031][T20381] hsr_slave_1: entered allmulticast mode [ 587.853374][T20384] FAULT_INJECTION: forcing a failure. [ 587.853374][T20384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.900316][T20384] CPU: 1 UID: 0 PID: 20384 Comm: syz.3.4469 Not tainted syzkaller #0 PREEMPT(full) [ 587.900347][T20384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.900362][T20384] Call Trace: [ 587.900370][T20384] [ 587.900380][T20384] dump_stack_lvl+0x189/0x250 [ 587.900412][T20384] ? __pfx____ratelimit+0x10/0x10 [ 587.900441][T20384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.900466][T20384] ? __pfx__printk+0x10/0x10 [ 587.900508][T20384] should_fail_ex+0x414/0x560 [ 587.900541][T20384] _copy_to_user+0x31/0xb0 [ 587.900568][T20384] simple_read_from_buffer+0xe1/0x170 [ 587.900605][T20384] proc_fail_nth_read+0x1b3/0x220 [ 587.900634][T20384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.900662][T20384] ? rw_verify_area+0x2a6/0x4d0 [ 587.900689][T20384] ? __lock_acquire+0xab9/0xd20 [ 587.900719][T20384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.900746][T20384] vfs_read+0x200/0xa30 [ 587.900772][T20384] ? fdget_pos+0x247/0x320 [ 587.900796][T20384] ? __pfx___mutex_lock+0x10/0x10 [ 587.900837][T20384] ? __pfx_vfs_read+0x10/0x10 [ 587.900868][T20384] ? __fget_files+0x2a/0x420 [ 587.900905][T20384] ? __fget_files+0x3a0/0x420 [ 587.900936][T20384] ? __fget_files+0x2a/0x420 [ 587.900978][T20384] ksys_read+0x145/0x250 [ 587.901010][T20384] ? __pfx_ksys_read+0x10/0x10 [ 587.901034][T20384] ? rcu_is_watching+0x15/0xb0 [ 587.901063][T20384] ? do_syscall_64+0xbe/0x3b0 [ 587.901099][T20384] do_syscall_64+0xfa/0x3b0 [ 587.901129][T20384] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.901158][T20384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.901179][T20384] ? clear_bhb_loop+0x60/0xb0 [ 587.901205][T20384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.901226][T20384] RIP: 0033:0x7f0dd498d5fc [ 587.901246][T20384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 587.901265][T20384] RSP: 002b:00007f0dd57f4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.901289][T20384] RAX: ffffffffffffffda RBX: 00007f0dd4bb5fa0 RCX: 00007f0dd498d5fc [ 587.901303][T20384] RDX: 000000000000000f RSI: 00007f0dd57f40a0 RDI: 0000000000000006 [ 587.901316][T20384] RBP: 00007f0dd57f4090 R08: 0000000000000000 R09: 0000000000000000 [ 587.901328][T20384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.901340][T20384] R13: 00007f0dd4bb6038 R14: 00007f0dd4bb5fa0 R15: 00007fff264609a8 [ 587.901376][T20384] [ 588.566663][T20392] FAULT_INJECTION: forcing a failure. [ 588.566663][T20392] name failslab, interval 1, probability 0, space 0, times 0 [ 588.608332][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.5.4473 Not tainted syzkaller #0 PREEMPT(full) [ 588.608377][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.608390][T20392] Call Trace: [ 588.608398][T20392] [ 588.608409][T20392] dump_stack_lvl+0x189/0x250 [ 588.608441][T20392] ? __pfx____ratelimit+0x10/0x10 [ 588.608468][T20392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.608494][T20392] ? __pfx__printk+0x10/0x10 [ 588.608529][T20392] ? __pfx___might_resched+0x10/0x10 [ 588.608555][T20392] should_fail_ex+0x414/0x560 [ 588.608588][T20392] should_failslab+0xa8/0x100 [ 588.608640][T20392] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 588.608671][T20392] ? __alloc_skb+0x112/0x2d0 [ 588.608720][T20392] __alloc_skb+0x112/0x2d0 [ 588.608758][T20392] netlink_sendmsg+0x5c6/0xb30 [ 588.608802][T20392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.608838][T20392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 588.608875][T20392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.608898][T20392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.608931][T20392] __sock_sendmsg+0x219/0x270 [ 588.608962][T20392] ____sys_sendmsg+0x505/0x830 [ 588.608992][T20392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.609025][T20392] ? import_iovec+0x74/0xa0 [ 588.609055][T20392] ___sys_sendmsg+0x21f/0x2a0 [ 588.609081][T20392] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.609145][T20392] ? __fget_files+0x2a/0x420 [ 588.609179][T20392] ? __fget_files+0x3a0/0x420 [ 588.609222][T20392] __x64_sys_sendmsg+0x19b/0x260 [ 588.609247][T20392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.609281][T20392] ? __pfx_ksys_write+0x10/0x10 [ 588.609307][T20392] ? rcu_is_watching+0x15/0xb0 [ 588.609334][T20392] ? do_syscall_64+0xbe/0x3b0 [ 588.609369][T20392] do_syscall_64+0xfa/0x3b0 [ 588.609399][T20392] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.609428][T20392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.609450][T20392] ? clear_bhb_loop+0x60/0xb0 [ 588.609477][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.609499][T20392] RIP: 0033:0x7f205a38ebe9 [ 588.609519][T20392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.609540][T20392] RSP: 002b:00007f205b14a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.609564][T20392] RAX: ffffffffffffffda RBX: 00007f205a5b5fa0 RCX: 00007f205a38ebe9 [ 588.609580][T20392] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001e [ 588.609594][T20392] RBP: 00007f205b14a090 R08: 0000000000000000 R09: 0000000000000000 [ 588.609607][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.609619][T20392] R13: 00007f205a5b6038 R14: 00007f205a5b5fa0 R15: 00007ffc8e735b78 [ 588.609653][T20392] [ 589.360965][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4482'. [ 589.403611][T20414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.491455][T20447] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4491'. [ 590.772407][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4496'. [ 590.784959][T20455] pim6reg1: entered allmulticast mode [ 590.806516][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4494'. [ 590.815431][T20457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.855215][T20461] nbd: couldn't find device at index 536870912 [ 590.862439][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4495'. [ 591.041442][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4498'. [ 591.089294][T20463] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 591.106626][T20463] CPU: 0 UID: 0 PID: 20463 Comm: syz.5.4498 Not tainted syzkaller #0 PREEMPT(full) [ 591.106657][T20463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.106671][T20463] Call Trace: [ 591.106681][T20463] [ 591.106691][T20463] dump_stack_lvl+0x189/0x250 [ 591.106729][T20463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.106756][T20463] ? __pfx__printk+0x10/0x10 [ 591.106803][T20463] ? kernfs_path_from_node+0x2f/0x290 [ 591.106829][T20463] ? kernfs_path_from_node+0x250/0x290 [ 591.106853][T20463] ? kernfs_path_from_node+0x2f/0x290 [ 591.106882][T20463] sysfs_warn_dup+0x8e/0xa0 [ 591.106917][T20463] sysfs_do_create_link_sd+0xc0/0x110 [ 591.106943][T20463] device_add_class_symlinks+0x1cf/0x240 [ 591.106970][T20463] device_add+0x475/0xb50 [ 591.107005][T20463] wiphy_register+0x1ba6/0x28d0 [ 591.107048][T20463] ? __pfx_wiphy_register+0x10/0x10 [ 591.107073][T20463] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 591.107100][T20463] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 591.107136][T20463] ieee80211_register_hw+0x3425/0x4080 [ 591.107173][T20463] ? ieee80211_register_hw+0x14a1/0x4080 [ 591.107203][T20463] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 591.107233][T20463] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 591.107269][T20463] ? __hrtimer_setup+0x187/0x210 [ 591.107288][T20463] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 591.107321][T20463] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 591.107378][T20463] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 591.107402][T20463] ? trace_kmalloc+0x1f/0xd0 [ 591.107425][T20463] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 591.107452][T20463] ? kstrndup+0xbf/0x160 [ 591.107484][T20463] hwsim_new_radio_nl+0xea4/0x1b10 [ 591.107511][T20463] ? __pfx___nla_validate_parse+0x10/0x10 [ 591.107557][T20463] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 591.107595][T20463] ? __nla_parse+0x40/0x60 [ 591.107628][T20463] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 591.107661][T20463] genl_family_rcv_msg_doit+0x212/0x300 [ 591.107691][T20463] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 591.107727][T20463] ? bpf_lsm_capable+0x9/0x20 [ 591.107753][T20463] ? security_capable+0x7e/0x2e0 [ 591.107811][T20463] genl_rcv_msg+0x60e/0x790 [ 591.107843][T20463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.107867][T20463] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 591.107910][T20463] netlink_rcv_skb+0x205/0x470 [ 591.107939][T20463] ? __lock_acquire+0xab9/0xd20 [ 591.107972][T20463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.107999][T20463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.108052][T20463] ? down_read+0x1ad/0x2e0 [ 591.108074][T20463] genl_rcv+0x28/0x40 [ 591.108095][T20463] netlink_unicast+0x82f/0x9e0 [ 591.108134][T20463] ? __pfx_netlink_unicast+0x10/0x10 [ 591.108166][T20463] ? netlink_sendmsg+0x642/0xb30 [ 591.108194][T20463] ? skb_put+0x11b/0x210 [ 591.108217][T20463] netlink_sendmsg+0x805/0xb30 [ 591.108260][T20463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.108295][T20463] ? aa_sock_msg_perm+0xf1/0x1d0 [ 591.108330][T20463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.108353][T20463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.108386][T20463] __sock_sendmsg+0x219/0x270 [ 591.108415][T20463] ____sys_sendmsg+0x505/0x830 [ 591.108441][T20463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.108474][T20463] ? import_iovec+0x74/0xa0 [ 591.108503][T20463] ___sys_sendmsg+0x21f/0x2a0 [ 591.108529][T20463] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.108596][T20463] ? __fget_files+0x2a/0x420 [ 591.108627][T20463] ? __fget_files+0x3a0/0x420 [ 591.108670][T20463] __x64_sys_sendmsg+0x19b/0x260 [ 591.108696][T20463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.108730][T20463] ? rcu_is_watching+0x15/0xb0 [ 591.108757][T20463] ? do_syscall_64+0xbe/0x3b0 [ 591.108799][T20463] do_syscall_64+0xfa/0x3b0 [ 591.108829][T20463] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.108858][T20463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.108880][T20463] ? clear_bhb_loop+0x60/0xb0 [ 591.108906][T20463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.108926][T20463] RIP: 0033:0x7f205a38ebe9 [ 591.108945][T20463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.108963][T20463] RSP: 002b:00007f205b14a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.108986][T20463] RAX: ffffffffffffffda RBX: 00007f205a5b5fa0 RCX: 00007f205a38ebe9 [ 591.109002][T20463] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 591.109016][T20463] RBP: 00007f205a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 591.109030][T20463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.109043][T20463] R13: 00007f205a5b6038 R14: 00007f205a5b5fa0 R15: 00007ffc8e735b78 [ 591.109079][T20463] [ 591.716730][T20469] netlink: 264 bytes leftover after parsing attributes in process `syz.4.4500'. [ 591.867591][T20477] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4504'. [ 591.877986][T20477] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4504'. [ 592.007981][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4505'. [ 592.289234][T20494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.611511][T20507] FAULT_INJECTION: forcing a failure. [ 592.611511][T20507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.678419][T20507] CPU: 1 UID: 0 PID: 20507 Comm: syz.5.4515 Not tainted syzkaller #0 PREEMPT(full) [ 592.678452][T20507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.678466][T20507] Call Trace: [ 592.678477][T20507] [ 592.678487][T20507] dump_stack_lvl+0x189/0x250 [ 592.678521][T20507] ? __pfx____ratelimit+0x10/0x10 [ 592.678552][T20507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.678579][T20507] ? __pfx__printk+0x10/0x10 [ 592.678611][T20507] ? __might_fault+0xb0/0x130 [ 592.678655][T20507] should_fail_ex+0x414/0x560 [ 592.678691][T20507] _copy_from_iter+0x1db/0x16f0 [ 592.678725][T20507] ? rcu_is_watching+0x15/0xb0 [ 592.678750][T20507] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 592.678783][T20507] ? __pfx__copy_from_iter+0x10/0x10 [ 592.678808][T20507] ? __build_skb_around+0x257/0x3e0 [ 592.678859][T20507] ? netlink_sendmsg+0x642/0xb30 [ 592.678889][T20507] ? skb_put+0x11b/0x210 [ 592.678913][T20507] netlink_sendmsg+0x6b2/0xb30 [ 592.678956][T20507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.678991][T20507] ? aa_sock_msg_perm+0xf1/0x1d0 [ 592.679027][T20507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.679050][T20507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.679082][T20507] __sock_sendmsg+0x219/0x270 [ 592.679123][T20507] ____sys_sendmsg+0x505/0x830 [ 592.679150][T20507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.679181][T20507] ? import_iovec+0x74/0xa0 [ 592.679207][T20507] ___sys_sendmsg+0x21f/0x2a0 [ 592.679230][T20507] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.679295][T20507] ? __fget_files+0x2a/0x420 [ 592.679324][T20507] ? __fget_files+0x3a0/0x420 [ 592.679365][T20507] __x64_sys_sendmsg+0x19b/0x260 [ 592.679389][T20507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.679420][T20507] ? __pfx_ksys_write+0x10/0x10 [ 592.679445][T20507] ? rcu_is_watching+0x15/0xb0 [ 592.679469][T20507] ? do_syscall_64+0xbe/0x3b0 [ 592.679502][T20507] do_syscall_64+0xfa/0x3b0 [ 592.679547][T20507] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.679586][T20507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.679606][T20507] ? clear_bhb_loop+0x60/0xb0 [ 592.679632][T20507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.679671][T20507] RIP: 0033:0x7f205a38ebe9 [ 592.679691][T20507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.679710][T20507] RSP: 002b:00007f205b14a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.679740][T20507] RAX: ffffffffffffffda RBX: 00007f205a5b5fa0 RCX: 00007f205a38ebe9 [ 592.679756][T20507] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001e [ 592.679770][T20507] RBP: 00007f205b14a090 R08: 0000000000000000 R09: 0000000000000000 [ 592.679783][T20507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.679796][T20507] R13: 00007f205a5b6038 R14: 00007f205a5b5fa0 R15: 00007ffc8e735b78 [ 592.679832][T20507] [ 592.792302][T20514] netlink: 'syz.0.4517': attribute type 2 has an invalid length. [ 593.064033][T20514] : entered promiscuous mode [ 593.553695][T20535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.653654][T20547] netlink: 'syz.0.4529': attribute type 21 has an invalid length. [ 593.690358][T20547] netlink: 'syz.0.4529': attribute type 22 has an invalid length. [ 593.698326][T20547] netlink: 'syz.0.4529': attribute type 23 has an invalid length. [ 593.725646][T20547] netlink: 'syz.0.4529': attribute type 25 has an invalid length. [ 593.810657][T20550] FAULT_INJECTION: forcing a failure. [ 593.810657][T20550] name failslab, interval 1, probability 0, space 0, times 0 [ 593.858264][T20550] CPU: 0 UID: 0 PID: 20550 Comm: syz.6.4530 Not tainted syzkaller #0 PREEMPT(full) [ 593.858296][T20550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.858310][T20550] Call Trace: [ 593.858319][T20550] [ 593.858330][T20550] dump_stack_lvl+0x189/0x250 [ 593.858364][T20550] ? __pfx____ratelimit+0x10/0x10 [ 593.858395][T20550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.858422][T20550] ? __pfx__printk+0x10/0x10 [ 593.858456][T20550] ? __lock_acquire+0xab9/0xd20 [ 593.858508][T20550] should_fail_ex+0x414/0x560 [ 593.858543][T20550] should_failslab+0xa8/0x100 [ 593.858578][T20550] kmem_cache_alloc_noprof+0x73/0x3c0 [ 593.858608][T20550] ? skb_clone+0x212/0x3a0 [ 593.858638][T20550] skb_clone+0x212/0x3a0 [ 593.858666][T20550] __netlink_deliver_tap+0x404/0x850 [ 593.858714][T20550] ? netlink_deliver_tap+0x2e/0x1b0 [ 593.858750][T20550] netlink_deliver_tap+0x19c/0x1b0 [ 593.858796][T20550] netlink_unicast+0x7fa/0x9e0 [ 593.858834][T20550] ? __pfx_netlink_unicast+0x10/0x10 [ 593.858866][T20550] ? netlink_sendmsg+0x642/0xb30 [ 593.858905][T20550] ? skb_put+0x11b/0x210 [ 593.858927][T20550] netlink_sendmsg+0x805/0xb30 [ 593.858967][T20550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.859001][T20550] ? aa_sock_msg_perm+0xf1/0x1d0 [ 593.859034][T20550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.859056][T20550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.859087][T20550] __sock_sendmsg+0x219/0x270 [ 593.859117][T20550] ____sys_sendmsg+0x505/0x830 [ 593.859145][T20550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 593.859177][T20550] ? import_iovec+0x74/0xa0 [ 593.859203][T20550] ___sys_sendmsg+0x21f/0x2a0 [ 593.859227][T20550] ? __pfx____sys_sendmsg+0x10/0x10 [ 593.859287][T20550] ? __fget_files+0x2a/0x420 [ 593.859317][T20550] ? __fget_files+0x3a0/0x420 [ 593.859357][T20550] __x64_sys_sendmsg+0x19b/0x260 [ 593.859382][T20550] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 593.859413][T20550] ? __pfx_ksys_write+0x10/0x10 [ 593.859455][T20550] ? rcu_is_watching+0x15/0xb0 [ 593.859493][T20550] ? do_syscall_64+0xbe/0x3b0 [ 593.859528][T20550] do_syscall_64+0xfa/0x3b0 [ 593.859561][T20550] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.859589][T20550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.859609][T20550] ? clear_bhb_loop+0x60/0xb0 [ 593.859634][T20550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.859655][T20550] RIP: 0033:0x7fd67598ebe9 [ 593.859675][T20550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.859693][T20550] RSP: 002b:00007fd676893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.859716][T20550] RAX: ffffffffffffffda RBX: 00007fd675bb5fa0 RCX: 00007fd67598ebe9 [ 593.859732][T20550] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001e [ 593.859745][T20550] RBP: 00007fd676893090 R08: 0000000000000000 R09: 0000000000000000 [ 593.859758][T20550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.859771][T20550] R13: 00007fd675bb6038 R14: 00007fd675bb5fa0 R15: 00007ffe48c1d148 [ 593.859805][T20550] [ 594.411238][T20570] __nla_validate_parse: 5 callbacks suppressed [ 594.411258][T20570] netlink: 248 bytes leftover after parsing attributes in process `syz.5.4536'. [ 594.503370][T20573] netlink: 'syz.6.4537': attribute type 7 has an invalid length. [ 594.512454][T20573] netlink: 'syz.6.4537': attribute type 8 has an invalid length. [ 595.257184][T20595] unknown channel width for channel at 909000KHz? [ 595.396778][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4549'. [ 595.410923][T20599] FAULT_INJECTION: forcing a failure. [ 595.410923][T20599] name failslab, interval 1, probability 0, space 0, times 0 [ 595.441862][T20599] CPU: 1 UID: 0 PID: 20599 Comm: syz.5.4547 Not tainted syzkaller #0 PREEMPT(full) [ 595.441893][T20599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.441907][T20599] Call Trace: [ 595.441916][T20599] [ 595.441927][T20599] dump_stack_lvl+0x189/0x250 [ 595.441959][T20599] ? __pfx____ratelimit+0x10/0x10 [ 595.441990][T20599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.442017][T20599] ? __pfx__printk+0x10/0x10 [ 595.442052][T20599] ? __pfx___might_resched+0x10/0x10 [ 595.442074][T20599] ? fs_reclaim_acquire+0x7d/0x100 [ 595.442115][T20599] should_fail_ex+0x414/0x560 [ 595.442152][T20599] should_failslab+0xa8/0x100 [ 595.442187][T20599] __kmalloc_noprof+0xcb/0x4f0 [ 595.442216][T20599] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 595.442252][T20599] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 595.442289][T20599] genl_family_rcv_msg_doit+0xb8/0x300 [ 595.442324][T20599] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 595.442361][T20599] ? apparmor_capable+0x137/0x1b0 [ 595.442399][T20599] ? bpf_lsm_capable+0x9/0x20 [ 595.442429][T20599] ? security_capable+0x7e/0x2e0 [ 595.442470][T20599] genl_rcv_msg+0x60e/0x790 [ 595.442503][T20599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.442527][T20599] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 595.442558][T20599] ? __asan_memcpy+0x40/0x70 [ 595.442591][T20599] ? __pfx_ref_tracker_free+0x10/0x10 [ 595.442631][T20599] netlink_rcv_skb+0x205/0x470 [ 595.442660][T20599] ? __lock_acquire+0xab9/0xd20 [ 595.442693][T20599] ? __pfx_genl_rcv_msg+0x10/0x10 [ 595.442720][T20599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 595.442780][T20599] ? down_read+0x1ad/0x2e0 [ 595.442804][T20599] genl_rcv+0x28/0x40 [ 595.442826][T20599] netlink_unicast+0x82f/0x9e0 [ 595.442866][T20599] ? __pfx_netlink_unicast+0x10/0x10 [ 595.442898][T20599] ? netlink_sendmsg+0x642/0xb30 [ 595.442928][T20599] ? skb_put+0x11b/0x210 [ 595.442954][T20599] netlink_sendmsg+0x805/0xb30 [ 595.442998][T20599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.443036][T20599] ? aa_sock_msg_perm+0xf1/0x1d0 [ 595.443072][T20599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.443097][T20599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.443131][T20599] __sock_sendmsg+0x219/0x270 [ 595.443164][T20599] ____sys_sendmsg+0x505/0x830 [ 595.443195][T20599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.443230][T20599] ? import_iovec+0x74/0xa0 [ 595.443261][T20599] ___sys_sendmsg+0x21f/0x2a0 [ 595.443287][T20599] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.443349][T20599] ? __fget_files+0x2a/0x420 [ 595.443382][T20599] ? __fget_files+0x3a0/0x420 [ 595.443429][T20599] __x64_sys_sendmsg+0x19b/0x260 [ 595.443457][T20599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.443493][T20599] ? __pfx_ksys_write+0x10/0x10 [ 595.443520][T20599] ? rcu_is_watching+0x15/0xb0 [ 595.443549][T20599] ? do_syscall_64+0xbe/0x3b0 [ 595.443595][T20599] do_syscall_64+0xfa/0x3b0 [ 595.443626][T20599] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.443656][T20599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.443679][T20599] ? clear_bhb_loop+0x60/0xb0 [ 595.443706][T20599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.443728][T20599] RIP: 0033:0x7f205a38ebe9 [ 595.443749][T20599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.443769][T20599] RSP: 002b:00007f205b14a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.443792][T20599] RAX: ffffffffffffffda RBX: 00007f205a5b5fa0 RCX: 00007f205a38ebe9 [ 595.443809][T20599] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001e [ 595.443823][T20599] RBP: 00007f205b14a090 R08: 0000000000000000 R09: 0000000000000000 [ 595.443837][T20599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.443850][T20599] R13: 00007f205a5b6038 R14: 00007f205a5b5fa0 R15: 00007ffc8e735b78 [ 595.443887][T20599] [ 595.867066][T20612] syzkaller0: entered promiscuous mode [ 595.873291][T20612] syzkaller0: entered allmulticast mode [ 596.681322][T20642] netlink: 'syz.4.4563': attribute type 30 has an invalid length. [ 596.690151][T20642] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 596.700137][T20642] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 596.989529][T20648] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4565'. [ 597.063975][T20659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4568'. [ 597.208767][T20665] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4570'. [ 597.470708][T20679] netlink: 'syz.0.4573': attribute type 1 has an invalid length. [ 597.670916][T20685] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4576'. [ 597.928627][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4577'. [ 597.989971][T20688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 597.997281][T20688] IPv6: NLM_F_CREATE should be set when creating new route [ 598.004564][T20688] IPv6: NLM_F_CREATE should be set when creating new route [ 598.210946][T20705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4578'. [ 598.355419][T20711] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 598.728664][T20733] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000 [ 599.130644][T20744] unknown channel width for channel at 909000KHz? [ 600.452106][T20801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4612'. [ 600.503521][T20802] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4612'. [ 600.594083][T20809] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 600.604819][T20803] lo speed is unknown, defaulting to 1000 [ 600.643372][T20811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4614'. [ 602.037808][T20860] sch_tbf: burst 0 is lower than device tunl0 mtu (65485) ! [ 602.191230][T20873] netlink: 'syz.0.4630': attribute type 1 has an invalid length. [ 602.252390][T20876] sctp: [Deprecated]: syz.6.4633 (pid 20876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.252390][T20876] Use struct sctp_sack_info instead [ 602.359013][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4632'. [ 602.449803][T20880] bond3: (slave gretap1): making interface the new active one [ 602.478874][T20880] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 602.642701][T20867] syzkaller0: entered promiscuous mode [ 602.671559][T20867] syzkaller0: entered allmulticast mode [ 603.921359][ T55] block nbd2: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 300 seconds [ 603.932777][ T55] block nbd2: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 300 seconds [ 603.944117][ T55] block nbd2: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 300 seconds [ 603.955887][ T55] block nbd2: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 300 seconds [ 605.065667][T20914] GUP no longer grows the stack in syz.6.4641 (20914): 200000006000-20000000a000 (200000005000) [ 605.092261][T20915] sctp: [Deprecated]: syz.3.4642 (pid 20915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.092261][T20915] Use struct sctp_sack_info instead [ 605.118714][T20914] CPU: 0 UID: 0 PID: 20914 Comm: syz.6.4641 Not tainted syzkaller #0 PREEMPT(full) [ 605.118752][T20914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.118794][T20914] Call Trace: [ 605.118804][T20914] [ 605.118814][T20914] dump_stack_lvl+0x189/0x250 [ 605.118853][T20914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.118882][T20914] ? __pfx__printk+0x10/0x10 [ 605.118910][T20914] ? find_vma+0xe7/0x160 [ 605.118956][T20914] ? mas_next_slot+0xc27/0xcf0 [ 605.119009][T20914] __get_user_pages+0x24d0/0x2ce0 [ 605.119035][T20914] ? __lock_acquire+0xab9/0xd20 [ 605.119100][T20914] ? __gup_longterm_locked+0xc68/0x1660 [ 605.119137][T20914] __gup_longterm_locked+0xde9/0x1660 [ 605.119173][T20914] ? try_grab_folio_fast+0x1be/0x4f0 [ 605.119215][T20914] ? gup_fast_fallback+0x195f/0x2010 [ 605.119246][T20914] gup_fast_fallback+0x1e6a/0x2010 [ 605.119313][T20914] ? __pfx_gup_fast_fallback+0x10/0x10 [ 605.119338][T20914] ? __mutex_lock+0x335/0x1360 [ 605.119369][T20914] ? rcu_is_watching+0x15/0xb0 [ 605.119398][T20914] ? is_valid_gup_args+0x11f/0x200 [ 605.119429][T20914] ? get_user_pages_fast+0x4d/0xb0 [ 605.119462][T20914] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 605.119496][T20914] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 605.119539][T20914] ? wait_for_space+0x24d/0x2d0 [ 605.119573][T20914] iov_iter_get_pages2+0x5e/0xa0 [ 605.119603][T20914] __se_sys_vmsplice+0x548/0x10d0 [ 605.119647][T20914] ? futex_private_hash_put+0x4b/0x280 [ 605.119686][T20914] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 605.119723][T20914] ? __pfx_futex_wake+0x10/0x10 [ 605.119764][T20914] ? __lock_acquire+0xab9/0xd20 [ 605.119853][T20914] ? rcu_is_watching+0x15/0xb0 [ 605.119881][T20914] ? do_syscall_64+0xbe/0x3b0 [ 605.119918][T20914] do_syscall_64+0xfa/0x3b0 [ 605.119948][T20914] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.119977][T20914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.119999][T20914] ? clear_bhb_loop+0x60/0xb0 [ 605.120026][T20914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.120048][T20914] RIP: 0033:0x7fd67598ebe9 [ 605.120069][T20914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.120088][T20914] RSP: 002b:00007fd676893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 605.120112][T20914] RAX: ffffffffffffffda RBX: 00007fd675bb5fa0 RCX: 00007fd67598ebe9 [ 605.120128][T20914] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000011 [ 605.120141][T20914] RBP: 00007fd675a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.120156][T20914] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 605.120169][T20914] R13: 00007fd675bb6038 R14: 00007fd675bb5fa0 R15: 00007ffe48c1d148 [ 605.120206][T20914] [ 605.140775][T20919] netlink: 'syz.4.4644': attribute type 13 has an invalid length. [ 605.356028][T20925] pimreg: entered allmulticast mode [ 605.507267][T20919] team0: left promiscuous mode [ 605.517847][T20919] team_slave_0: left promiscuous mode [ 605.525147][T20919] team_slave_1: left promiscuous mode [ 605.570261][T20925] pimreg: left allmulticast mode [ 605.663557][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.674869][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.699216][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.770612][T14988] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.116594][T20989] IPVS: set_ctl: invalid protocol: 0 10.1.1.4:20004 [ 607.511016][T21006] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4679'. [ 607.541406][T21006] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4679'. [ 607.563979][T21006] netlink: 34 bytes leftover after parsing attributes in process `syz.6.4679'. [ 607.616406][T21010] lo speed is unknown, defaulting to 1000 [ 607.856805][T21023] netlink: 'syz.0.4682': attribute type 6 has an invalid length. [ 608.424267][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4686'. [ 609.585603][T21070] pimreg: entered allmulticast mode [ 609.606113][T21070] pimreg: left allmulticast mode [ 609.788481][T21078] netlink: 'syz.5.4699': attribute type 3 has an invalid length. [ 609.816670][T21078] netlink: 'syz.5.4699': attribute type 1 has an invalid length. [ 609.845070][T21078] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4699'. [ 610.290587][T21090] lo speed is unknown, defaulting to 1000 [ 610.415296][T21098] "syz.4.4705" (21098) uses obsolete ecb(arc4) skcipher [ 610.470276][T21097] netlink: 'syz.4.4705': attribute type 7 has an invalid length. [ 610.478211][T21097] netlink: 'syz.4.4705': attribute type 8 has an invalid length. [ 610.863561][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4711'. [ 610.931747][T21115] netlink: 'syz.5.4711': attribute type 7 has an invalid length. [ 610.973697][T21115] netlink: 'syz.5.4711': attribute type 8 has an invalid length. [ 610.999436][T21115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4711'. [ 611.366811][T21135] netlink: 'syz.5.4717': attribute type 2 has an invalid length. [ 611.375984][T21135] netlink: 'syz.5.4717': attribute type 1 has an invalid length. [ 611.384566][T21134] netlink: 'syz.5.4717': attribute type 2 has an invalid length. [ 611.397331][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4717'. [ 611.497237][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4718'. [ 611.531998][T21140] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4718'. [ 611.553563][T21140] tipc: Enabled bearer , priority 0 [ 611.818144][T21140] syzkaller0: entered promiscuous mode [ 611.846511][T21140] syzkaller0: entered allmulticast mode [ 611.867655][T21140] tipc: Resetting bearer [ 611.958185][T21137] tipc: Resetting bearer [ 612.670728][T15139] tipc: Node number set to 2886997007 [ 613.296450][T21179] sctp: [Deprecated]: syz.3.4726 (pid 21179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.296450][T21179] Use struct sctp_sack_info instead [ 614.573928][T21137] tipc: Disabling bearer [ 614.864568][T21197] validate_nla: 3 callbacks suppressed [ 614.864643][T21197] netlink: 'syz.4.4730': attribute type 12 has an invalid length. [ 614.921286][T21209] __nla_validate_parse: 4 callbacks suppressed [ 614.921306][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4734'. [ 615.080345][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4735'. [ 615.112854][T21208] veth3: entered promiscuous mode [ 615.587804][T21241] netlink: 'syz.6.4744': attribute type 1 has an invalid length. [ 615.772505][T21249] syzkaller1: entered promiscuous mode [ 615.778546][T21249] syzkaller1: entered allmulticast mode [ 615.807536][T21251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4746'. [ 615.847216][T21251] netlink: 23932 bytes leftover after parsing attributes in process `syz.4.4746'. [ 615.871126][T21251] IPv6: sit2: Disabled Multicast RS [ 615.906405][T21253] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4745'. [ 615.918495][T21252] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4745'. [ 615.947325][T21242] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4743'. [ 616.246896][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4749'. [ 616.277928][T21261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.397119][T21270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4752'. [ 616.578759][T21282] netlink: 'syz.0.4755': attribute type 1 has an invalid length. [ 616.596198][T21282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4755'. [ 616.616751][T21282] netlink: 'syz.0.4755': attribute type 21 has an invalid length. [ 616.662216][T21273] team0: Port device geneve0 removed [ 616.907033][T21298] netlink: 'syz.3.4759': attribute type 1 has an invalid length. [ 617.247946][T21310] dvmrp8: entered allmulticast mode [ 617.259413][T21309] dvmrp8: left allmulticast mode [ 617.518539][T21322] tipc: Enabled bearer , priority 0 [ 617.546106][T21321] tipc: Enabling of bearer rejected, already enabled [ 617.565632][T21322] syzkaller0: entered promiscuous mode [ 617.580042][T21322] syzkaller0: entered allmulticast mode [ 617.728483][T21333] tipc: Resetting bearer [ 617.871401][T21340] Bluetooth: MGMT ver 1.23 [ 617.902414][T21333] tipc: Resetting bearer [ 618.034705][T21346] netlink: 'syz.4.4773': attribute type 3 has an invalid length. [ 618.071297][T21333] tipc: Disabling bearer [ 618.157292][T21340] geneve2: entered promiscuous mode [ 618.485954][T21354] tipc: Enabled bearer , priority 0 [ 618.918477][T21353] tipc: Disabling bearer [ 618.942188][T21367] IPv6: Can't replace route, no match found [ 620.224911][T21417] tipc: Enabling of bearer rejected, already enabled [ 620.428185][T21429] __nla_validate_parse: 11 callbacks suppressed [ 620.428211][T21429] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4801'. [ 620.474294][T21429] batadv1: entered promiscuous mode [ 620.490145][T21429] batadv1: entered allmulticast mode [ 620.702334][T21429] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4801'. [ 620.727531][ T9] hid-generic 0005:0C45:06F5.0002: hidraw0: BLUETOOTH HID v0.c7 Device [syz1] on aa:aa:aa:aa:aa:aa [ 620.810783][T21440] netlink: 'syz.5.4805': attribute type 1 has an invalid length. [ 621.304939][T21460] vlan4: entered promiscuous mode [ 621.324477][T21460] vlan4: entered allmulticast mode [ 621.339689][T21460] hsr_slave_1: entered allmulticast mode [ 621.353270][T21461] delete_channel: no stack [ 621.415107][T21468] netlink: 'syz.5.4813': attribute type 13 has an invalid length. [ 621.447476][T21468] netlink: 'syz.5.4813': attribute type 17 has an invalid length. [ 621.465540][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4812'. [ 621.590001][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4813'. [ 621.838493][T21468] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.861995][T21468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.006471][T15164] lo speed is unknown, defaulting to 1000 [ 622.037529][T15164] syz2: Port: 1 Link ACTIVE [ 622.091985][T21464] lo speed is unknown, defaulting to 1000 [ 622.404028][T21497] netlink: 'syz.6.4823': attribute type 13 has an invalid length. [ 622.534036][T21497] erspan0: refused to change device tx_queue_len [ 622.560435][T21497] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 622.610610][T21506] IPv6: addrconf: prefix option has invalid lifetime [ 622.908459][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4830'. [ 623.462358][T21536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4836'. [ 623.462369][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4836'. [ 623.636511][T21542] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4835'. [ 623.689157][T21538] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.873321][T21547] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4839'. [ 623.892285][T21547] netlink: zone id is out of range [ 623.917053][T21547] netlink: zone id is out of range [ 623.930438][T21547] netlink: zone id is out of range [ 623.935779][T21547] netlink: zone id is out of range [ 623.945935][T21547] netlink: zone id is out of range [ 623.961150][T21547] netlink: zone id is out of range [ 624.258640][T21557] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4841'. [ 624.374620][T21562] bridge1: entered allmulticast mode [ 624.792908][T21579] smc: net device bond0 applied user defined pnetid SYZ2 [ 624.819053][T21551] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 626.135168][T21590] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 626.175039][T21618] __nla_validate_parse: 4 callbacks suppressed [ 626.175060][T21618] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4862'. [ 626.188429][T21590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 626.218858][T21617] netlink: 'syz.5.4862': attribute type 1 has an invalid length. [ 626.245147][T21590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 626.262545][T21617] netlink: 5624 bytes leftover after parsing attributes in process `syz.5.4862'. [ 626.362155][T21624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4863'. [ 626.895534][T21658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4874'. [ 626.992089][T21660] syzkaller1: entered promiscuous mode [ 627.003318][T21660] syzkaller1: entered allmulticast mode [ 627.015181][T21662] netlink: 348 bytes leftover after parsing attributes in process `syz.6.4877'. [ 627.050779][ T30] audit: type=1800 audit(1755635252.665:14): pid=21662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4877" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2583 res=0 errno=0 [ 627.493223][T21677] Bluetooth: MGMT ver 1.23 [ 627.536249][T21680] lo speed is unknown, defaulting to 1000 [ 627.753025][T21692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4886'. [ 627.902466][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4888'. [ 628.193427][T21699] bridge2: entered promiscuous mode [ 628.198943][T21699] bridge2: entered allmulticast mode [ 628.379487][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 628.402600][T21708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4890'. [ 628.452051][T21705] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4889'. [ 630.734191][T21815] netlink: 'syz.4.4925': attribute type 29 has an invalid length. [ 631.270548][T21841] __nla_validate_parse: 3 callbacks suppressed [ 631.270571][T21841] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4934'. [ 631.385758][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 631.554001][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4938'. [ 631.594560][T21861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4937'. [ 631.675619][T21847] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.752093][T21869] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 632.114213][T21847] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.128932][T21875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4940'. [ 632.236742][T21880] !: renamed from dummy0 [ 632.297021][T21881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4940'. [ 632.440618][T21847] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.706636][T21847] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.921914][T21892] lo speed is unknown, defaulting to 1000 [ 633.501989][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4946'. [ 633.639258][T21934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4950'. [ 633.709761][T21937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4950'. [ 633.776845][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.801358][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.934624][T14987] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.978858][T14988] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.008394][ T55] block nbd2: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 330 seconds [ 634.020424][ T55] block nbd2: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 330 seconds [ 634.032433][ T55] block nbd2: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 330 seconds [ 634.046178][ T55] block nbd2: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 330 seconds [ 634.068871][T21944] xt_socket: unknown flags 0xd0 [ 634.377881][T21941] lo speed is unknown, defaulting to 1000 [ 634.595161][T21958] tc_dump_action: action bad kind [ 634.630597][T21964] tipc: Enabling of bearer rejected, already enabled [ 634.817539][T21960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4956'. [ 634.889349][T21964] tipc: Resetting bearer [ 635.213295][T21971] macsec1: left promiscuous mode [ 635.258068][T21971] bridge1: left allmulticast mode [ 635.287036][T21971] bridge2: left promiscuous mode [ 635.314755][T21971] bridge2: left allmulticast mode [ 635.417465][T21980] netlink: 'syz.5.4962': attribute type 1 has an invalid length. [ 635.620516][T21989] net_ratelimit: 33 callbacks suppressed [ 635.620538][T21989] team_slave_0: mtu less than device minimum [ 635.737033][T22002] netlink: 'syz.3.4969': attribute type 83 has an invalid length. [ 636.799395][T22016] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882) [ 636.829797][T22016] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 637.078096][T22030] block nbd1: server does not support multiple connections per device. [ 637.093853][T22033] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 637.104556][T22030] block nbd1: shutting down sockets [ 637.120584][T22033] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 637.137598][T22032] __nla_validate_parse: 6 callbacks suppressed [ 637.137617][T22032] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4976'. [ 637.230470][T22030] netlink: 'syz.4.4976': attribute type 1 has an invalid length. [ 637.364595][T22049] sctp: [Deprecated]: syz.0.4979 (pid 22049) Use of int in maxseg socket option. [ 637.364595][T22049] Use struct sctp_assoc_value instead [ 637.522382][T22055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4981'. [ 637.554605][T22032] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 637.576641][T22032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.594764][T22032] bond0 (unregistering): Released all slaves [ 637.622294][T22041] team0: entered promiscuous mode [ 637.627514][T22041] geneve0: entered promiscuous mode [ 637.744560][T22046] lo speed is unknown, defaulting to 1000 [ 637.770589][T22058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4982'. [ 638.173853][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4980'. [ 638.219239][T22046] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4980'. [ 638.245605][T22046] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4980'. [ 639.005315][T22100] netlink: 'syz.5.4996': attribute type 1 has an invalid length. [ 639.020751][T22096] lo speed is unknown, defaulting to 1000 [ 639.042137][T22100] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4996'. [ 639.052416][T22097] lo speed is unknown, defaulting to 1000 [ 639.093612][T22100] netlink: 'syz.5.4996': attribute type 1 has an invalid length. [ 639.477773][T22113] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 639.636674][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5006'. [ 639.672950][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5006'. [ 639.962590][T22113] lo speed is unknown, defaulting to 1000 [ 639.999893][ T5880] Bluetooth: hci3: command 0x0405 tx timeout [ 640.729312][T22154] netlink: 'syz.5.5014': attribute type 10 has an invalid length. [ 640.801770][T22154] team0: Port device dummy0 added [ 640.974801][T22163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5017'. [ 641.194034][T22177] netlink: 'syz.0.5019': attribute type 4 has an invalid length. [ 641.250758][T22177] netlink: 'syz.0.5019': attribute type 4 has an invalid length. [ 641.515513][T22189] netlink: 'syz.5.5028': attribute type 1 has an invalid length. [ 641.537540][T22189] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 641.552873][T22189] gretap1: entered promiscuous mode [ 641.872895][T22206] ipvlan0: entered promiscuous mode [ 642.324883][ T30] audit: type=1800 audit(1755635267.925:15): pid=22210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5033" name="memory.events" dev="tmpfs" ino=2392 res=0 errno=0 [ 642.610441][T22233] __nla_validate_parse: 3 callbacks suppressed [ 642.610464][T22233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5042'. [ 642.615925][T22237] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5040'. [ 642.775567][T22246] netlink: 'syz.6.5045': attribute type 21 has an invalid length. [ 642.836001][T22246] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5045'. [ 642.863992][T22250] bond0: option arp_validate: invalid value (18446744073491447809) [ 642.919135][T22252] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5048'. [ 642.944056][T22252] 0·: renamed from hsr0 [ 642.971190][T22252] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 643.019789][T22252] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.032440][T22252] 0·: entered allmulticast mode [ 643.040273][T22252] hsr_slave_0: entered allmulticast mode [ 643.048297][T22252] hsr_slave_1: entered allmulticast mode [ 643.057735][T22252] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 645.988723][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5075'. [ 646.010612][T22355] netlink: 'syz.6.5077': attribute type 1 has an invalid length. [ 646.175852][T22355] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 646.328971][T22366] netlink: 'syz.0.5078': attribute type 1 has an invalid length. [ 646.505649][T22367] gretap2: entered promiscuous mode [ 646.542044][T22366] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 646.542395][T22369] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5079'. [ 648.116498][T22408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5090'. [ 648.348062][T22413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5093'. [ 648.578181][T22418] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 648.632020][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5095'. [ 648.749372][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5097'. [ 649.248717][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5100'. [ 649.319831][T22435] netlink: 'syz.3.5100': attribute type 30 has an invalid length. [ 649.405086][T22435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5100'. [ 649.414951][T22435] netlink: 'syz.3.5100': attribute type 30 has an invalid length. [ 649.424511][T14983] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.459140][T14983] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.528181][T14983] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.576630][T14983] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.819434][T22447] openvswitch: netlink: Missing valid actions attribute. [ 649.827020][T22447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.181946][T22455] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5104'. [ 650.291966][T22456] netlink: 'syz.4.5104': attribute type 4 has an invalid length. [ 650.312501][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5104'. [ 650.427095][T22467] netlink: 13 bytes leftover after parsing attributes in process `syz.6.5107'. [ 650.705455][T22481] netlink: 'syz.6.5111': attribute type 13 has an invalid length. [ 650.740833][T22481] netlink: 'syz.6.5111': attribute type 17 has an invalid length. [ 650.983179][T22481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 651.171200][T22494] netlink: 'syz.4.5116': attribute type 1 has an invalid length. [ 651.304557][T22496] bond0: (slave geneve2): making interface the new active one [ 651.313490][T22496] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 651.329141][T14983] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 651.338311][T14983] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 651.347411][T14983] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 651.357151][T14983] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 651.393705][T22504] netlink: 'syz.6.5118': attribute type 1 has an invalid length. [ 651.627062][T22517] pim6reg: entered allmulticast mode [ 651.702735][T22517] pim6reg: left allmulticast mode [ 651.847117][T22527] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5123'. [ 651.986499][T22520] lo speed is unknown, defaulting to 1000 [ 652.078760][T22541] netlink: 'syz.6.5126': attribute type 11 has an invalid length. [ 652.124835][T22530] syzkaller0: entered promiscuous mode [ 652.138563][T22530] syzkaller0: entered allmulticast mode [ 652.437897][T22555] lo speed is unknown, defaulting to 1000 [ 652.668352][T22567] tipc: Enabling of bearer rejected, already enabled [ 653.188962][T22589] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 653.754389][T22608] __nla_validate_parse: 1 callbacks suppressed [ 653.754414][T22608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5143'. [ 653.778888][T22609] netlink: 'syz.4.5142': attribute type 27 has an invalid length. [ 653.794513][T22609] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5142'. [ 653.795983][T22608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5143'. [ 653.803646][T22609] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5142'. [ 654.434020][T22634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5152'. [ 654.597712][T22646] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.434352][T22693] ipvlan0: left promiscuous mode [ 655.486400][T14983] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.536367][T14983] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.562426][T14983] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.590586][T14983] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 655.630323][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5169'. [ 656.048174][T14987] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.087451][T14987] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.160597][T14983] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.171294][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5174'. [ 656.182887][T22725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.192868][T14983] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.203281][T22723] netlink: 'syz.6.5175': attribute type 1 has an invalid length. [ 656.273877][T22727] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5176'. [ 656.367611][T22734] netlink: 'syz.6.5178': attribute type 11 has an invalid length. [ 656.375893][T22734] netlink: 'syz.6.5178': attribute type 4 has an invalid length. [ 656.391335][T22734] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5178'. [ 656.823689][T22759] netlink: 'syz.5.5187': attribute type 1 has an invalid length. [ 656.842367][T22758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5187'. [ 657.228904][T22785] netlink: 'syz.6.5196': attribute type 9 has an invalid length. [ 659.052835][T22889] netlink: 'syz.3.5226': attribute type 25 has an invalid length. [ 659.205855][T22879] __nla_validate_parse: 8 callbacks suppressed [ 659.205879][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5225'. [ 659.266637][T22893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5229'. [ 659.286586][T22879] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5225'. [ 659.324641][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5225'. [ 659.387816][T22879] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5225'. [ 659.693801][T22897] netlink: 'syz.4.5230': attribute type 9 has an invalid length. [ 659.739739][T22897] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5230'. [ 659.861629][T22902] veth0_virt_wifi: entered promiscuous mode [ 659.870871][T22902] bond0: entered promiscuous mode [ 659.876010][T22902] geneve2: entered promiscuous mode [ 659.884506][T22902] hsr1: Slave A (veth0_virt_wifi) is not up; please bring it up to get a fully working HSR network [ 659.896345][T22902] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 659.939815][T22902] hsr1: entered allmulticast mode [ 659.947317][T22902] veth0_virt_wifi: entered allmulticast mode [ 659.954380][T22902] bond0: entered allmulticast mode [ 659.967056][T22902] geneve2: entered allmulticast mode [ 660.293291][T22916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5236'. [ 660.336130][T22916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5236'. [ 661.186013][T22947] syzkaller0: entered promiscuous mode [ 661.202053][T22947] syzkaller0: entered allmulticast mode [ 661.229200][T22947] syzkaller0: mtu less than device minimum [ 661.312138][T22952] netlink: 'syz.6.5252': attribute type 14 has an invalid length. [ 661.320516][T22951] netlink: 'syz.6.5252': attribute type 14 has an invalid length. [ 661.328374][T22951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5252'. [ 661.338223][T22952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5252'. [ 661.392284][T22952] bridge: RTM_NEWNEIGH with invalid ether address [ 662.020935][T22978] tipc: Enabled bearer , priority 0 [ 662.028909][T22978] syzkaller0: entered promiscuous mode [ 662.041724][T22978] syzkaller0: entered allmulticast mode [ 662.121418][T22978] tipc: Resetting bearer [ 662.362776][T22977] tipc: Resetting bearer [ 662.442354][T22977] tipc: Disabling bearer [ 663.106073][ T5232] udevd[5232]: worker [6641] /devices/virtual/block/nbd2 timeout; kill it [ 663.133236][ T5232] udevd[5232]: seq 15196 '/devices/virtual/block/nbd2' killed [ 664.284168][ T55] block nbd2: Possible stuck request ffff888025365080: control (read@0,1024B). Runtime 360 seconds [ 664.296653][ T55] block nbd2: Possible stuck request ffff888025365240: control (read@1024,1024B). Runtime 360 seconds [ 664.311529][ T55] block nbd2: Possible stuck request ffff888025365400: control (read@2048,1024B). Runtime 360 seconds [ 664.323661][ T55] block nbd2: Possible stuck request ffff8880253655c0: control (read@3072,1024B). Runtime 360 seconds [ 664.485315][T23049] netlink: 'syz.0.5278': attribute type 2 has an invalid length. [ 664.703710][T23051] __nla_validate_parse: 5 callbacks suppressed [ 664.703733][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5281'. [ 664.732308][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5281'. [ 665.530263][T23070] lo speed is unknown, defaulting to 1000 [ 665.867643][T23079] netlink: 'syz.4.5290': attribute type 1 has an invalid length. [ 666.082045][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 666.098979][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 666.105666][T23085] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5291'. [ 666.116040][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 666.126132][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 666.134856][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.148009][T14987] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.319030][T14987] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.582133][T14987] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.641735][T23081] lo speed is unknown, defaulting to 1000 [ 666.641798][T23089] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.755682][T23098] tipc: Enabling of bearer rejected, failed to enable media [ 667.016433][T14987] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.461295][T23118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5300'. [ 667.595482][T23081] chnl_net:caif_netlink_parms(): no params data found [ 667.921504][T23138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5305'. [ 667.973837][T23137] IPVS: Error connecting to the multicast addr [ 667.988492][T23138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5305'. [ 668.062581][T14987] tipc: Resetting bearer [ 668.240554][ T5880] Bluetooth: hci4: command tx timeout [ 668.502865][T14987] tipc: Disabling bearer [ 668.736937][T14987] bond0 (unregistering): Released all slaves [ 668.849151][T14987] bond1 (unregistering): Released all slaves [ 668.958212][T14987] bond2 (unregistering): Released all slaves [ 668.977313][T14987] bond3 (unregistering): Released all slaves [ 669.089738][T14987] bond4 (unregistering): Released all slaves [ 669.107545][T14987] bond5 (unregistering): Released all slaves [ 669.123471][T14987] bond6 (unregistering): Released all slaves [ 669.270771][T23081] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.278057][T23081] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.319460][T23081] bridge_slave_0: entered allmulticast mode [ 669.332336][T23081] bridge_slave_0: entered promiscuous mode [ 669.375906][T14987] tipc: Disabling bearer [ 669.402788][T14987] tipc: Left network mode [ 669.446850][T23081] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.456184][T23081] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.463804][T23081] bridge_slave_1: entered allmulticast mode [ 669.481242][T23081] bridge_slave_1: entered promiscuous mode [ 669.488190][T23167] netlink: 'syz.5.5312': attribute type 4 has an invalid length. [ 669.741501][T23081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.757577][T23081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.843255][T23186] netlink: 'syz.4.5318': attribute type 1 has an invalid length. [ 669.900851][T23081] team0: Port device team_slave_0 added [ 669.911274][T23191] !: renamed from dummy0 (while UP) [ 669.976048][T23081] team0: Port device team_slave_1 added [ 670.000210][T23197] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5321'. [ 670.129064][T23204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5322'. [ 670.290707][T23081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.297733][T23081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.337640][ T5880] Bluetooth: hci4: command tx timeout [ 670.408318][T23212] netlink: 'syz.5.5325': attribute type 1 has an invalid length. [ 670.438563][T23081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.498596][T23081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.527031][T23222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5325'. [ 670.590043][T23081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.779743][T23081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.349511][T23212] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 671.890961][T23207] lo speed is unknown, defaulting to 1000 [ 672.214260][T23239] lo speed is unknown, defaulting to 1000 [ 672.283277][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5333'. [ 672.300182][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5333'. [ 672.309364][T23263] netlink: 'syz.5.5333': attribute type 18 has an invalid length. [ 672.345890][T23081] hsr_slave_0: entered promiscuous mode [ 672.352514][T23081] hsr_slave_1: entered promiscuous mode [ 672.358845][T23081] debugfs: 'hsr0' already exists in 'hsr' [ 672.365452][T23081] Cannot create hsr debugfs directory [ 672.402752][ T5880] Bluetooth: hci4: command tx timeout [ 672.441989][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5333'. [ 672.452084][T23263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5333'. [ 672.461818][T23263] netlink: 'syz.5.5333': attribute type 18 has an invalid length. [ 672.516817][T14985] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.562424][T14985] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.614204][T14987] hsr_slave_0: left promiscuous mode [ 672.639465][T14987] veth1_macvtap: left promiscuous mode [ 672.645708][T14987] veth0_macvtap: left promiscuous mode [ 672.653268][T14987] veth1_vlan: left promiscuous mode [ 672.658801][T14987] veth0_vlan: left promiscuous mode [ 672.757617][T14987] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 672.769630][T14987] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 672.779189][T14987] CPU: 1 UID: 0 PID: 14987 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 672.788834][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.798899][T14987] Workqueue: netns cleanup_net [ 672.803718][T14987] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 672.809470][T14987] Code: 69 74 bb f7 c6 05 e8 1f 89 05 01 48 c7 c7 80 a0 9e 8c be 97 05 00 00 48 c7 c2 00 a1 9e 8c e8 ba 4e 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 84 dd 1e f8 4d 8b 2c 24 4d 39 f5 [ 672.829096][T14987] RSP: 0000:ffffc9000469f3d8 EFLAGS: 00010206 [ 672.835172][T14987] RAX: ffffffff8a04378e RBX: 000000001fffe1ac RCX: ffff88803343da00 [ 672.843150][T14987] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 672.851126][T14987] RBP: ffff888042d4e020 R08: ffffffff8f537be7 R09: 1ffffffff1ea6f7c [ 672.859101][T14987] R10: dffffc0000000000 R11: fffffbfff1ea6f7d R12: 00000000ffff0d60 [ 672.867078][T14987] R13: dffffc0000000000 R14: ffff888078f3bc00 R15: 1ffff110085a9c04 [ 672.875057][T14987] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 672.883994][T14987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 672.890698][T14987] CR2: 000000110c254faf CR3: 0000000067cf0000 CR4: 00000000003526f0 [ 672.898683][T14987] Call Trace: [ 672.902409][T14987] [ 672.905352][T14987] inetdev_event+0x2a7/0x15b0 [ 672.910046][T14987] ? __pfx_inetdev_event+0x10/0x10 [ 672.915179][T14987] notifier_call_chain+0x1b3/0x3e0 [ 672.920406][T14987] netif_close_many+0x29c/0x410 [ 672.925272][T14987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 672.931274][T14987] ? __pfx_netif_close_many+0x10/0x10 [ 672.936770][T14987] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 672.942165][T14987] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 672.948512][T14987] ? __local_bh_enable_ip+0x12d/0x1c0 [ 672.953907][T14987] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 672.959640][T14987] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 672.966415][T14987] ? unregister_netdevice_queue+0x1b3/0x380 [ 672.972400][T14987] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 672.978736][T14987] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 672.984927][T14987] default_device_exit_batch+0x819/0x890 [ 672.990580][T14987] ? __pfx___might_resched+0x10/0x10 [ 672.995870][T14987] ? __pfx_default_device_exit_batch+0x10/0x10 [ 673.002040][T14987] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 673.007518][T14987] ? net_generic+0x1e/0x240 [ 673.012055][T14987] ? __pfx_default_device_exit_batch+0x10/0x10 [ 673.018245][T14987] ops_undo_list+0x522/0x990 [ 673.022850][T14987] ? __pfx_ops_undo_list+0x10/0x10 [ 673.028087][T14987] ? do_raw_spin_unlock+0x122/0x240 [ 673.033401][T14987] cleanup_net+0x4c5/0x800 [ 673.037846][T14987] ? __pfx_cleanup_net+0x10/0x10 [ 673.042830][T14987] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.048056][T14987] ? process_scheduled_works+0x9ef/0x17b0 [ 673.053791][T14987] ? process_scheduled_works+0x9ef/0x17b0 [ 673.059519][T14987] process_scheduled_works+0xae1/0x17b0 [ 673.065089][T14987] ? __pfx_process_scheduled_works+0x10/0x10 [ 673.071174][T14987] worker_thread+0x8a0/0xda0 [ 673.075791][T14987] kthread+0x711/0x8a0 [ 673.079886][T14987] ? __pfx_worker_thread+0x10/0x10 [ 673.085004][T14987] ? __pfx_kthread+0x10/0x10 [ 673.089611][T14987] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.094824][T14987] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.100036][T14987] ? __pfx_kthread+0x10/0x10 [ 673.104633][T14987] ret_from_fork+0x3f9/0x770 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 673.109254][T14987] ? __pfx_ret_from_fork+0x10/0x10 [ 673.114373][T14987] ? __switch_to_asm+0x39/0x70 [ 673.119159][T14987] ? __switch_to_asm+0x33/0x70 [ 673.123929][T14987] ? __pfx_kthread+0x10/0x10 [ 673.128539][T14987] ret_from_fork_asm+0x1a/0x30 [ 673.133319][T14987] [ 673.136361][T14987] Modules linked in: [ 673.141160][T14987] ---[ end trace 0000000000000000 ]--- [ 673.175619][T14987] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 673.189794][T14987] Code: 69 74 bb f7 c6 05 e8 1f 89 05 01 48 c7 c7 80 a0 9e 8c be 97 05 00 00 48 c7 c2 00 a1 9e 8c e8 ba 4e 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 84 dd 1e f8 4d 8b 2c 24 4d 39 f5 [ 673.252896][T14987] RSP: 0000:ffffc9000469f3d8 EFLAGS: 00010206 [ 673.299305][T14987] RAX: ffffffff8a04378e RBX: 000000001fffe1ac RCX: ffff88803343da00 [ 673.308117][T14987] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 673.318960][T14987] RBP: ffff888042d4e020 R08: ffffffff8f537be7 R09: 1ffffffff1ea6f7c [ 673.330676][T14987] R10: dffffc0000000000 R11: fffffbfff1ea6f7d R12: 00000000ffff0d60 [ 673.338689][T14987] R13: dffffc0000000000 R14: ffff888078f3bc00 R15: 1ffff110085a9c04 [ 673.347097][T14987] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 673.356484][T14987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.366349][T14987] CR2: 0000000000000000 CR3: 000000004397e000 CR4: 00000000003526f0 [ 673.376044][T14987] Kernel panic - not syncing: Fatal exception [ 673.382632][T14987] Kernel Offset: disabled [ 673.387060][T14987] Rebooting in 86400 seconds..