last executing test programs: 8m41.069809562s ago: executing program 0 (id=1882): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002a00000018010000202064250000000000202006695bc9c3f3775300bfa100000000000007010000f8ffffffb70200000800000008000000feffff01860000009b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e24, 0x20080000, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@padn]}}}], 0x5}, 0x4008084) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000780)={{r0}, "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"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r2, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8m40.327230987s ago: executing program 0 (id=1890): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) sendmmsg$inet(r2, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 8m40.276703638s ago: executing program 0 (id=1892): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000080)="0b2a8e92fbd1e015cfdb9a68b06cf3cfc2d1cd545e3b86d2cc1c601afc8169a257cc0de49591659c6467067448d53ae711fdcf7de96d8f5df04502be0febcf5a970d4060e56c1a764f112ded0b540290b9315d4c410f17654e67b6d41621038802dba806c59b6e8b813954f37179ded2b9822e4c7c2db72ec75e1448922d330ed75fb7987b38dcf9541761638a06315388acf7f205f19ab095953b38be8671fdd8e070d48cca073154d1ee7517ea012d3886f8d927328991b437c7367d7fdf0a0a6c54471ab15b008743cc10ae8475a9f3c2be9cbf59022f402693d9ca311984b5d308"}, 0x20) ppoll(&(0x7f00000001c0)=[{r0, 0x400}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x3]}, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shutdown(r1, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000004c0)={0x1, 0x3}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r1, 0x7, 0x80000000000000, 0x400}) connect$l2tp(r2, &(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x10) close(r0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000580)=0xb, 0x4) bind$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex=0x0, 0x2a, 0x0, 0xbe8, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0]}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000840)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl2\x00', r3, 0x29, 0x9, 0x9d, 0x0, 0x33, @loopback, @local, 0x700, 0x798, 0x5, 0x726}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1c0, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4008040}, 0x8001) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000ac0)=0xf90b, &(0x7f0000000b00)=0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80, '\x00', 0x0, r2, 0x3, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x5, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x0, 0x3, 0x6, 0x4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x2, 0x5, 0x1, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000b80)='GPL\x00', 0x245, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x81, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x7, 0x75, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000cc0)=[r5, r2, r2, r2, r0], &(0x7f0000000d00)=[{0x5, 0x4, 0x4, 0xa}], 0x10, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xb, 0x3, 0x5, &(0x7f0000000e00)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001000)={&(0x7f0000000e40), &(0x7f0000000e80)=""/61, &(0x7f0000000ec0)="2071e61c09a8b571bd2f20d4cfef3c4a7ecc208524b8e218336010b02d0a8240e813c004cc98db39745616433ece0108f427fe731b25acc85c5bf9e7245a7c1f56a65f32f617dc8a", &(0x7f0000000f40)="c4bda8fa5d03ac4a4f5cb85a99bb047658408cd26512fc3208fa15f6b7f219a1dcb52054a6f64a575bc1431d23c4bc7837700aec08fafe267af6579c331525aadbd8fa6dcea60eea3d94fb7458488e0ffb6efebfeefb6f25bd950dd192703491f951a2f490576bfb0168293abd340922bd5dd7908c8a8189c9c636988d5cd90623195e7352e9c6baf7f7e613aba8", 0x6, r0, 0x4}, 0x38) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r6, &(0x7f0000001040)={0x2, 0x0, @multicast1}, &(0x7f0000001080)=0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r7) openat$cgroup_int(r2, &(0x7f0000001100)='cpuset.cpus\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001140)={0x32, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0x3, 'fo\x00', 0x11, 0x5, 0x3a}, 0x2c) socket$netlink(0x10, 0x3, 0x12) openat$cgroup_devices(r2, &(0x7f0000001180)='devices.deny\x00', 0x2, 0x0) 8m40.168764307s ago: executing program 0 (id=1893): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) (fail_nth: 37) 8m39.717406013s ago: executing program 0 (id=1895): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60) close(r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414bb0000000000000000030006000000000002000001ac1e01010000000000000000c7a885d51f4a4cbcdf9f09e7f98a5d6e5cebddc73b48da460f20a83ef696792bc0c1e6de91aafe3d3875b7a0e214233154f00cbec93d20aef4eea47c4af4156294992af339152992d48c91ec243a03884d2b2259eda2314211bee3f7de2e4bf3e4bab79ebf48da572dc7d3fcbb79be531119"], 0x58}}, 0x24000040) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, 0x0, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="08000800edb6cca3645c0703030002001400000045100028bf0c3c9be9823ccbac1e0001ffffffff811088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5020000590780000"], 0xfdef) r9 = socket(0x23, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x113, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r9, 0x89eb, &(0x7f0000000200)={@default, @null}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}}, 0x0, 0x0, 0x3, 0x0, "0c9e089c1b4a04000bde79f0613be7fa187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd30798c4fa3838bb399ad5bd2ff21907c7988d1300000000000000000000000400"}, 0xd8) 8m39.544184768s ago: executing program 0 (id=1896): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 32) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100), 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x5, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0x6) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a00c000", @ANYRES32=0x0, @ANYBLOB="14000100fe800000f9ffb3ff1c9de41fdb3f000000000000000000aa99769da257193a0100000000000000ca0875e313d4480848898c61ccb83956bb7ec04b81fc43c62a24cdd63dcbc421491d4b111171690d3a7e1f1de2853a9f11f06e52cd40b20ce230e73c66c81bd64604333a32d68865c3df6ebdf13f5917daa60b2955"], 0x2c}, 0x1, 0x0, 0x0, 0x2044001}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getnexthop={0x38, 0x6a, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x200, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r11, 0x1, 0x10}, 0xc) (async, rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (rerun: 64) 8m39.34937505s ago: executing program 32 (id=1896): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) (async, rerun: 32) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000100), 0x4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x5, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000240)=0x6) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a00c000", @ANYRES32=0x0, @ANYBLOB="14000100fe800000f9ffb3ff1c9de41fdb3f000000000000000000aa99769da257193a0100000000000000ca0875e313d4480848898c61ccb83956bb7ec04b81fc43c62a24cdd63dcbc421491d4b111171690d3a7e1f1de2853a9f11f06e52cd40b20ce230e73c66c81bd64604333a32d68865c3df6ebdf13f5917daa60b2955"], 0x2c}, 0x1, 0x0, 0x0, 0x2044001}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getnexthop={0x38, 0x6a, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0x200, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r11, 0x1, 0x10}, 0xc) (async, rerun: 64) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (rerun: 64) 1.928338933s ago: executing program 2 (id=7543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x4, 0x4, 0x5, 0x4158}, 0x50) recvfrom$l2tp(r1, 0x0, 0x0, 0x40010001, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) 1.903804328s ago: executing program 5 (id=7544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) 1.828286718s ago: executing program 2 (id=7546): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@can_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "8a6d63a080b94cd0"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x5f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r4, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) r6 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\a\x00'/12, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000180)=0x20) write$cgroup_int(r7, &(0x7f0000000140)=0x1000000004, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005880)={&(0x7f0000005780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x30, 0x634eefca6c36d413]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8], 0x4c}}, 0x0) 1.771054702s ago: executing program 5 (id=7548): syz_emit_ethernet(0x9b, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "abb99279fd89da307583e654afb42af2dc91b30b60e83d50", "66eb64f2e8a3742962ae5b2fb03f495701288cf603c82fce6302900c99be5aab"}}}}}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x4}, 0x800}, {0xa, 0x4e20, 0xf45, @mcast1, 0xa}, 0x0, {[0x7, 0x554, 0x10, 0xfffffff9, 0x7, 0x7, 0x9, 0x2]}}, 0x5c) 1.673112533s ago: executing program 5 (id=7549): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000280)=@null) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xf, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x7fd, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="c3f2dddb56c350cef253b78ef97ab2e325d2f585f7b70b438be8179c6b9afb3d5592230b51bd8cdcebccc64e46c23f3f25e7c1cb10c33e81f8d9c55bf20a8d709ace114d2634846423cf6313a2650ab89675a767a4e3751de56e3e994271e179affba2c013ec34d75fdf9a2c8a66c7a8e3e1e91c9d123133210e69ed5c9d752185490821aead9adf3ffcec27b75e7b5125b81343e97eb63deb864be9a105d5621838325fbe33f708f7e83d82ec68e13b0e033519111f4e7e6cb8090dce4d6711fe71b2094b2093c19437d439e97ff99012ea9d04e1ae465954ba5f383c9bc6fffdd98baa03bdc9a1bd779072e7d7ad4bc41baf00ca7cab5e7960554c5dffdcb19374025360fced1f96aa4b1f7f8ce8096b6ed143b77daccd6354d1caa14dc38b5d4bd15c78916cff642055ff704d515fcc27e6e95ab22e3f7010971467e6a1a6a8a9bb9795db0d1d328a01a06058f0fd7040ece4402080009d70c082ca31f8433e68b99259e1bc7a1198295e1b639c30ad8a838f7fc52b0720744909f0a51bb400df73a234b03647cdc2156c96843230d491eb7714d44c627492411d3e93691ac8cc0abb679b585bf5aa58c7c6dd774f6ce5cabe588b6ae739b10b49499764f96174002b27352ee12ef5576c8f4b49d508f201b299038924996a66224d2079b9b75990ecb34d315c8b8d19089037789cd62bd876eb9b91253f87fce492eae93a9845495242608df2b6757cb4bb2a984f61a92e4069f368ffe821b403b5027059535834bc636a93c61104904868c9103fab464e2860f0f1d51f67c97ded4e255815aa20ca6f560174abf6fe20b6758070a46abc6e945a6361ee79f81bba743eb4f04d1c42a791ee735355feb9fd7c141d1534edb04965244762293594f816a1f1c3d095d54d0ca216d3e7c38fcb2fe5409cc1ab836673322f20931e087624f5ccffe5df12ab99387032d7a6e482484b00907034ae9fdcb83dca34439a38a856264b0ea6ddaa8d62cac6d4dd95af104047db4a909e3d586950ef98e3b309046dce1e1113af5f33e3c82085911d80c8729e71ca9d7a6b698b1ce3d776ba0e669991d4088a97aae2a4890d7c0ae84c7325f83ecd5e5a7290dffaabbf824a01223b97c114b37a61fcb4fd36bd5a9e82af928343f05d166aa9c4e880703ccde32fc90d1837f052e52992af4dafd9b0559a99ea73c4abeb461ab47ad401435c1f922713e5a7bd1c6b817af90c399878a8a37eaa23c191d4bf545e52c7241fa007c1087269e6916542b6658968b828a5e24a766d19aabaf0877b4c12276afb2a766cd68dea5759405f749164ba22337f606622650debca20322c99d6e0f25a70167b8c8a6849038e905b56cad6f3925ffed4d903b1cf9e26a3d594833e0fddce3bcac541274fedc44e749f361305047a373c35415f0a882883ac95575b62a3cfb0e9e33a6b7b860415c3c480c63b9e3d9785b605779fc6e32214c9de3a19c55380b06d876c3ef88590a0710def022c11964af74489c2c64c7eea214e679cdfa7bffb684adcd4dd11649b064f759a78cd045bcb9f38f1aedced774ed13649946b9b3ed5312fbc17ed4bd30d6bf050b5fe87b7e189bd13e7270fd380631bc03c4e7a18fcd203577df53e531a6f56586c88691700b4b9b70ff156348b84f0313615f308a28b183a74294689eff709258bb2a0f6dd7bf7a6c5ed9bc2d57fddb23deef49f1b12b32a2d71b1209fec2bdfab57ed2a99a1be56fa4cf3b4a3b9f30b888b759fc69cd447a4ec3345ec676a029fa9fe200b6103d2d2543881a3c0c9310d7a9e2c0834273f1c34c1bc1cc72f01462618fce974ab9f2a25e0cd018eb50ad6d7e6eeac01141d7c717185df90b218af7564c1f849d2fcdc36def9f061a5d3b53616041916559d71267f61b341d4f9b96070319ada157a4e487aefb8e926ec5486349eec9fa8c38858be91005c4d4132e0dfc13713ff8e16897d2acdb82b729bb621c24fa29d708d4824c4d1b720765fbefd0d9b40c3606ee79e033c9be0932650b8332519eba90af41be8e3d834cae28bb08df21550c325ba44fb03c4f84d82aa44c709c222b5c2316f16bce2b8762be59172493ed445feedc6107267114b7fb319f69d02884fbb3d02583e0b711cb06bd5eb0de0468e372b677f5813d2662d1516d4aef5b95d1331c9c9e55de2fdb16de1c192161ff15f4e605a93fdba89725ca1a48652beae2dba813798d8824769d4abbff25dd0b344204705081d9f90e6ea402a031f98c0c12baa7d2f0366aa4dec724b467921dec5f5d215b80fa377c86a4a536c06559b7e640c3f707f24c52aec0ceaa4633e6fa7aa6d886f3b751394b3914d48a352f813a629ef38bdba578431011907d86563bd0c3345123853001e1eba66577814a072d283a452b13559602bac83d35e0b9a86f86b69b91a22c8367dca86be21d167b1718e5166f315ad4b09622651c7d60adcd205f079d7a2f4c4a5fe8e444c96513a3c40e180c9c07dd4e9ca19aa56ba984112718edc2f3da832a4737777251abbb87eb4577761395d18cd0bf350a59b7f4baff49f48c21020eba50dfdd345404d63106f0047bfdc66e160873b4645a8b8fb216f25f08be30bd3de73725cc6a4749f7765336d73203e3ae40b4b8c06f26b14f9ac4e3ef8357425ec197b7f6db83d1287b1eedde710ea9ee16634c717a680c15f320ece2589fa9c10dbb8ebb981bbe118304c1822532589f87489971aa02f2ef2a01a51de906f8d9a351a2f5c76d7893d6de686e6320d618e4f55406cf263e9edc13b8e799e8adf94c999237b2293f344896cc6075b54a9163e029abeafe8f02e9c5c0a9166b0646cccb1c9ee3864520097d6a79a4e02b3c1b399ce08ad0439d8407c7d605ce6ce8c1cef339600c48c5cfa556711f92034e232658cc8e94076fc79b81c6faebc085d9515b6735b5eb0bbc5b08100383b067d18563ba78b3e3a2a21e268580a5b19fa56253dcf9564f6fe79ad3061a89476a8ca8053a355dca007f7bd473fda4d5450b9b9404564059ddec292ab20f6e7e107adab919f5f178c73e244eb977183474085ed8785c6d33b4396cae6516df2cf48cfcd16bc6cc6db281e396ab7b3390fc92378a82fdb615bd970cf1eb788dd5cffe57b93503a3ccc5c5225f62a5efa78ace1bb5b960871c7f62c32bab23ec877ec7f6efd62ebc93e61cdf9a73c1bf0083a6487a5ecb6c38f1a1ed419c4e8eae26585d38a2e52f5708546a90ffb9b6c206d280b12e3a820d7bc7d922eb3b9bd117a0fef4e3e3086bcf8c6b47089da309dff68f1875d2f9ab1044ee0ac321dfac56b84e6dd8d7d3731b5ab3f8824f5fde1040c5da3d1f9c57b7b0ba1ab28d6df44e314007cf767d676678c56dc6e09da39e91f42a66d5e0d5a545e6e1f819df21b5f440a5fdcc4b0b5917d0b55bc41e28cee0481f1d2ecc327fc732903c8fd52e4cf7bcc332f3ec1f5aa688656ca5c40d142ba2c94bb300b3e415c8bac8bf6ed1e1b14af7e9a9bef5b0828aec8542badca767b64e84b8e4dc37e4a2f0d0714fcdcdfe0a9d20116cad0f904fb5744addbd853a46b277e1ecde26eade51cfa61a4e97cc4fba2461ce4b62f346fb3a93476841780b52f0106dc32dd6ccc904108fcfb6fc368780447920d99f80b0ccd3e9952db13336b70d224cb46648cbcccde8347dc0102af374520c94e60587213e38167911d4dd515f1d038c88c52dad726a8bf959eda6551d6339ebbf88901070fa46b60d348967cbbf43271bdf467d68e3ebc6b4fab0a8faed40ad40d7bdecd3da64fb075fb7dba3a756b7a42fe0c8ef8475fa5453f287c1027ed48dedc820e23164c3af4b89bc89334bf6e5899e8fe5ed2e89cc30dcfea97d11235fea4cb86d84a3ed8d555f4e3a038cd1e9ad3cfbe3b0db477220c0348621ac0a6c336c77e8a5c3d61cd672e99d5510d66c4ea4cc5377c23a820ba279345faf600a7189dd034716e0cf46d2b7da777be26fe52273b879175699214066a3dd238850363f7ee3c81a9dc2a1efe80760f8839cbb3be4a95b585d1491095563a108598400cc8d8bde6beab64a6ef65fad43ae7227a1d5afdc5e7ec65a87c280a62567e719b4d75434616e7a0b0be0d71adf01c4e273cbbc5201f7b502286c70377ecf8262e7e42072c3d255cd6093a2a60d958b4baadfbc80212d4975288faf26b2b16bacb22018bd94b6b02e91122428ca2f9ea890459ed68fa613b70af029e0a9c4cc43507f2d898bc08de697b2ef8f12571a31e256979f4aa82e23531b89355ca4b29ef9010a0c8fcb8f813def00b8a1634d0c7fec4d06e2bb82d00976c5acafc76ec1ab4a90508bfded5b575589f833b528c53a394bd538c83bb7308c76d0380e6d4c7a653e85207f0ce7b5f95b8015183b4106a0ceb18608985fd20154b46088c3522f76c256e082a3c708fb4241c7e337e5c06297ca66383a706ed0b4ab1036f57d52351d182dd68a295a982053d40c34b01dd56723fb5d95018b5069f7e46e8285af47a5417fb32aebb9258eccebd5185e3fa5cc54e083e280b0d4f5af4ae3ab026cd917d2f942f216d687acb2b34b76894a249aa4a6fea46673be755e1479a82ec9113fd59c9cea9d2ed6bf7d17c59402c0c963095030cb4e9f9290302c533ec82eb620fc9a5207d60f06c2dfed00d4a367d8858006d42f82190ef17f8d3f51052d622db1da91f71c8c82ba11a39550fd418137ceea582eca5a00d29b1b83af758da7cdffb2b62d8af57a9ff3b221abaa486e2609dc929fdd2c4c2af78a815b97c8ef568287a2ef1b496f56758accc7781e72ee9491729e56404d4ae1a1d254c1c2c3b9beab258f0d284948309d702c17e11abe346ec6f7ca900e7553dc2442642f01ad71b1be0f84f992b1527b8119be6a58a30dae845424412cc697167fe5d4ebbb84384f96de51871082494dbd0b4cd81ca56651bf9d89e9673dc21a9a553b60ae68fc0320f9a0574ac9545fd95c2bea756341dd419f03099f0e3e3caa388be6f13c26dba60e2bd232489dd5a7aed9a7eb365229d3d72055ae2d758158ad86d370962a46c6f2b0a44d37bbaf2bd7e15acc48ad67ee49021cb67353d66fe8b17c6f0ac38f684ec67d398fe4f235c581cc15370897e0e970a68ebfeca864c0a4ab527aa5d55c23ddcc2cf4dc6ad78dcb8415f6393e1a72e8921f1c064cf99e72c2aed37a827ecdf5bbca357ea6caa79f0b0ea8e276e6eccf899f19803efacc968d1fafeeb37baebdc3eb8e9a7c07754904fdb3238a5a1de1864e4711eb4ee349352cbf9390525b5d2f836e8e7a5e65a6378385ea707a073d224bbb9280433a6d81f524c33cdbe8f82219bb01de4f5a7310c7c25459982284f0b142bdc2e25f0b639fc6e304f83d4828986bfa1344f86831b3461cbabe36bf00d7d1837170ba1ba2cfbe2fa51beaadb80260e0c107e1f7ab6e153d18eb3d666f19ab4c35474a91029aa1d53a428b77d8cc238b297a62b97aef685af44aa6de691d79bc48310df447fd11c15a9fb6e877696e9cfd7d08287d30d27179f4ee4cecbdac820bbbdcbb3da1d7d0db35270f6b4c20cf9b9de6eff40a6dbdc2b13917f68e65510246402536c8fe5ba8a461e24a2992dba1eaa504f4a3297c814348db09fee3192bc7af3e385b704ac669756750ecc3d1eeb2b6f1cc13b141062ea89baa6a650060df102879f13231100f873f867a7c4912ac5b2b884029939a34a688f6976d973610a38974be498412691d1c17b203ce4edca0b954069d7577592c7e64ff2", 0xff0, 0x4000090, &(0x7f0000001080)={0x11, 0x17, r11, 0x1, 0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) 1.584148432s ago: executing program 3 (id=7550): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = socket$inet6(0xa, 0x2, 0x3a) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031200defe64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) recvfrom$l2tp(r4, &(0x7f0000000400)=""/77, 0x4d, 0x102, &(0x7f0000000300), 0x10) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000001c0)=0x7fffffffffffffff, 0x8) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x18, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20044000}, 0x844) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x24000050) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040029bd7000fcdbce2578000000080001006a0000000a000300", @ANYRES32=r9, @ANYBLOB="0c0099000300000022000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8810) 1.256975605s ago: executing program 2 (id=7551): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) close(0x3) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0xb, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 923.952833ms ago: executing program 2 (id=7553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001100)={r2, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="110000001d00070f000000000000000007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x1000, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x2}]}}]}, 0xa4}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x1000, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x2}]}}]}, 0xa4}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0xc5, 0x8000000, 0x9}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x0, &(0x7f00000000c0)}, &(0x7f0000000240)=0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000a00)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r10, 0x3321d67897c830e9, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x21}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f3e137781ae8726b51205e72d5f70699"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9eb67be8ea609b52"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ab1e86099d2ad9b83735fcb6cd6827bc"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b8b52b6af1ac5d26"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dd95a61b4aa960e243afb74851c144b0b4826723129b25bb"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x84, r10, 0x3321d67897c830e9, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x40, 0x21}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f3e137781ae8726b51205e72d5f70699"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9eb67be8ea609b52"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ab1e86099d2ad9b83735fcb6cd6827bc"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b8b52b6af1ac5d26"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dd95a61b4aa960e243afb74851c144b0b4826723129b25bb"}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000f284000000ba000000850000002c0000001800000090000000000000000000000095000500000000000200000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="616706699f941b2260099816f44412864df314d7f21feae323d186c5fec5aa5fa75d760ebcbe321cc1f8bbe4a3acaef7da712f5f1a5a2ddaeb33b100efeab10758e14e29be9248804ac031702eed88d886d86a89cff2a8ca70d3bc69db655ff3035db2500ed0ff03e9144b8589bf7ac581e987cfb9f6217dc3a8fcbf84febf8b18f58c92397541f9ed8cdbc3a6a81967987118d520fc5a9f00b9f1f5c1f22b3f768250165a5d17ad9acd85b0deaed697485b081930c51aabb41aade3f99a574f56221c68b658be35", 0xc8}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @broadcast, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb2}}], 0x38}}], 0x1, 0x24040004) (async) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="616706699f941b2260099816f44412864df314d7f21feae323d186c5fec5aa5fa75d760ebcbe321cc1f8bbe4a3acaef7da712f5f1a5a2ddaeb33b100efeab10758e14e29be9248804ac031702eed88d886d86a89cff2a8ca70d3bc69db655ff3035db2500ed0ff03e9144b8589bf7ac581e987cfb9f6217dc3a8fcbf84febf8b18f58c92397541f9ed8cdbc3a6a81967987118d520fc5a9f00b9f1f5c1f22b3f768250165a5d17ad9acd85b0deaed697485b081930c51aabb41aade3f99a574f56221c68b658be35", 0xc8}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @broadcast, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb2}}], 0x38}}], 0x1, 0x24040004) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x20a, 0xc, 0x7, r8}, &(0x7f0000000080)=0x10) 915.614179ms ago: executing program 4 (id=7554): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) unshare(0x2a020400) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000dce58a3a66d2126dbc2ad4344358a25b22d9a74889deccd9a250b3033fd46abb91d2ce2a362f506e2bf364cf5bcec1a4718b9ddc26fe0d59764e300e7cfba85457c76e154a79a7d1f5c09b5fd9d348db61556a3a05", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x14) (async) socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in={{0x2, 0x4e22, @empty}}, 0x2, 0x2, 0x614, 0x1, 0x2d, 0x7, 0x4}, 0x9c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x5) 871.023447ms ago: executing program 3 (id=7555): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x26020480) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0) (async) ioctl$PPPIOCSMRRU(r3, 0x4010744d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 803.413708ms ago: executing program 4 (id=7556): unshare(0x8050500) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) unshare(0x20000800) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r8 = getpid() r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)='%pB \x00'}, 0x20) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0xf, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1b6}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @ringbuf_query, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @ringbuf_query]}, &(0x7f0000000fc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x10, 0xa9, 0x80000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001080)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000010c0)=[{0x3, 0x1, 0xb, 0xc}, {0x2, 0xeed, 0x2, 0x3}], 0x10, 0x5}, 0x94) r14 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000011c0)=0x0) r16 = getgid() sendmsg$netlink(r4, &(0x7f0000001280)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)=[{&(0x7f0000000140)={0x2c4, 0x22, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="4acf9205aabe85c69eb146cce89c2ef9f672e383406f7a221e3ebfdbc104a5f9e50354f7a0596757b201321a49688776228c192387efb76195a4af37565b6d95b39c293948dff171533b9f699e140f75bcfea474c8a9a00e9f693d0e3dbe3e08460a605633bf882aea54e23efef2dd1cf3b4480b7a9fd09e", @generic="90ee350ba82e2d65891cfa2c489e1e15558ffe7b08cc263b2f07b2184870db9e34ef05499e75bba4b23c925692ca44d173d6a7b0a040521136b2191b3233a18fe56401a6e12edb47ade7b51cf65cc321b9f9ab1c66fd57fa71ccef94e528de9c186c97cfbe1ec975277f3bf24ce9bf4c670eb4ecd722db4f904bc4ccf8cac4bd626cb67596914be2fce7da5b3ddeacc8ebaecc94e0e1bfb42b8271d829bb300fb99a31b65ea70e55c2358bf8e52ac89f70049bf078d7ad8fd3a03b48eee9090206fd1f03d40447f4164fbe13f0ac234bb3fc4cf2b66ae40c6a529bd5861fc894c8a7c4b5808828918d5edf6eb17cc11823690ceea77520", @generic="33baca36bb184d0cd9fd0e0891e7a6e8206815377f5dfc036d81b5aa4c34d7c6c61badbb8bda84056f14a48cc4d18ac6b980591a6bc18d305a0ef9bc1c8debde33a1235769598d8f35d82555e463cd42afb312e8ddeeed2af6c03505eae3a1c064ed8b03f7123752269103fd2a", @generic="936f483d3876a7a03a25db5a939d941ced6aeaac571ae9ae5063b497b3329f6a1194974c51e4912c88aaa3589080af7638a4a9cb5908edd4ec3a3a3a005f61ff40482b4c02a956d674f59e59e6a23b158b1461c3b76cd2085d69359145687df8c4c2db1fe85672e01a2b8abe901e51932201d8574447dacb99c53d86fceab629d861733765957d64d5beacf36cabd1fdd9028cf03b9cda270f05d3aaca17b691d48a6ccc68d661b5944f209b22b46f959f82fdb9", @typed={0xc, 0x4d, 0x0, 0x0, @u64=0x7fffffff}, @nested={0x10, 0x56, 0x0, 0x1, [@nested={0x4, 0x2b}, @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x8, 0xf0, 0x0, 0x1, [@nested={0x4, 0x97}]}]}, 0x2c4}, {&(0x7f0000000600)={0x338, 0x3b, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@generic="727f352f7ecaf1915ff0a307a9eae4b98544c739dc364993d36ad97ea03d6764922e016ded12", @typed={0x8, 0xeb, 0x0, 0x0, @u32=0x28000000}, @nested={0xcc, 0x12, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x12c}, @generic="1b3465ba482ee05df6bf2d558faca0751887dd803a9db8f1d9c37475cf6ed380b86854688f38042ea8902f200599b2004a266d195e3ed9188c3d57377e239c3e4d956df934bf9879a11844e0db7ae20b3a16d8741a55e0f4653193478f87b5317e7b5b5cc144d7fed62785226adc7049a5eb483c97423ac5b7996918859c53114a72bb22fac220731127f54ae6699dc1bae394b824ea230cc895d79f880c5927698445886a772c946c982da527ca60", @generic="6fc46242fdcc521e32", @typed={0x4, 0xf8}]}, @nested={0x3a, 0x4d, 0x0, 0x1, [@generic="0fe1f284553bf9cdcbebaacc3f448040c5d75c09de856e774ad3f8094d5650023ed1982c398c0c04e2e1", @typed={0x8, 0xb1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0x71}]}, @generic="e8b8967cb4b5e25ccb414fedac4226e486e1cc272f81e77368e0654cc587ac6a0415", @typed={0x8, 0x3, 0x0, 0x0, @uid=r6}, @generic="c1a38cd0e6b57fd1fefb1df13d", @typed={0xc, 0x104, 0x0, 0x0, @u64=0x7bc14ff3}, @nested={0x1aa, 0x8b, 0x0, 0x1, [@generic="1b15ed5b94f6873b31ea4dc4e5b60b240ee8b12be5958a6a530d1147e08cc679355ee37748e53fe310a50d1203ed96de436cda3861dee97adec84b46215b3256871d88bcffa5f39a9f003f15e73ca629af178bece0899c8f172102202d8a2cbb8fb1762a283ac60a9f95e514ce014ab4ac77a98abeb5956cd206194c8ea4f535182cea1787edbbd3e136373a648b99d6b8225c597efb4b43707892023deaaa326a60faf89cfa5b384155bfa78d6ba49e6918c7718b0dbb87100506a45e87c6c66b84e891713e69b397a4bbdafbaaa2a661b4d1088563b330a984972c1d2bba79ee8efb4044c2bf78f446cd6af072f5b1d506a6b6165f", @nested={0x4, 0x52}, @generic="5c9b2e862e555d01e7a93c83fd64154aacf40e989f8011c6c7a7f1f022fd8302070cdafabcfd9a9d99fd110a41d4921f284f47bb66693310ea834d9281277f031d72279683e3f74de79933a5a512aa174bdd73b61a90eae7a9b2a8f689be673c750fed523266b6a90f7954f4b101171bed56bda65e3744bcaf740e56532470daeb888b07b39fcb863eb1b6cee8867a71fe3d45ad97368ab7c7f6b49f", @typed={0x8, 0x148, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0xb1, 0x0, 0x0, @pid=r8}]}]}, 0x338}, {&(0x7f0000000940)={0x480, 0x33, 0x20, 0x70bd2a, 0x25dfdbfb, "", [@generic="564cf1d50ab28e45f9e11b0a09931077b3", @generic="745b50120fb9de1e38d8b98c87823d8e04ef235cc76bd8e407b424f8b2c44da887a31129fd6f1b397d863dba506a658ac7a7008f7b6a9902fee3a010d3edc159ccbbf9b88ed64692a95752a35003c7c88e47d50c2e1f649a6cbf444219176325bc06a8044c1d0229c1bbff06ac4164afe705ddaecd60", @nested={0x173, 0x118, 0x0, 0x1, [@typed={0x8, 0x136, 0x0, 0x0, @fd=r2}, @generic="96a0b7044457c09d0bec99bfffa83cca7105e67cea11a799e40d56060e3771a431e04d98769f9e039cde4e32ef4b084a201df45fcae6e117fcc4650576d4ccb5006c704c2734a92f698deb1551412ccd0936b05ace9621b79d77818d6629677274f191cd39f156e46976067f9007905198354683459183e48b4e75698d0913ae32f9b8ca1af89f7a5d7c87509f2a18953dc59e0af5c7bb4e319f4f8c9cb669f02d013f2c5eec25a712c29a32584540b31d96334b3f2caca72513f08ddfe05495ad3a4d138963a800ccf868affe08baaf86ce", @nested={0x4, 0x12f}, @nested={0x4, 0x110}, @generic="d605acfabad9042ff9cba555be51e0c98974779ffc05575441dd11fb9ca680a2bb2f0edfab8dfc09ea152fda0d2f8d1318c31c1b6360f5e9ddc9d2abdb3f8a1f001e5914e45a4b70377f205246fa269cb66f645bf59c5384ab08d95f350badc67d21632b895c5fa3b508d7a9b785bdb15bef3dc9b7d5bdd67be00c48d78686fdfcff6567ad1f0b281b8401e70b"]}, @typed={0x5, 0x24, 0x0, 0x0, @str='\x00'}, @generic="0d09427580e93bd7a4481778b9fb243dbfb89fe2739179e89d0870fcb8921b", @nested={0x14e, 0x2d, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0xfe}, @typed={0x8, 0xba, 0x0, 0x0, @fd=r1}, @generic="861e04d0213c858bf73e8bbd9ce0f5477131a72078580e652bef2635", @typed={0x4, 0x2d}, @typed={0xc8, 0xfa, 0x0, 0x0, @binary="6a9948646155d2134ef96ce8422e4fd8f45f7f11a6731c44def6444e3ea89c4c585add347e891cfc91e116efad0401451e07ca9b789341514ee64c801013ff980d49906ff64c4293fcaa92759f0335bdac0c8536c12a1363e80cc874b4a41f7db0042b073bbdbc39c08d88a62ce4dc8c0c337009988d6ca49ebb220483e9d2b6cab1b09bac3c2435c7f319e95d511fe5c3f4dabe43e1f035620c4d778005a410757feb85a81924ec487fbebf0e73391f828bd493e37930913ee7759b253cfded8750d501"}, @generic="141d99162797340a1842e90fc4ecaf96c5137a02a655704c541ac8bcdd96b3649b4479108133bd2fc2fe922d2f52937869ad118b5d50df11d10934f678ebeb5c34ee3402b1dda44aedde129ba3e59cb1a16c"]}, @generic="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"]}, 0x480}, {&(0x7f0000000dc0)={0x18, 0x15, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x3b, 0x0, 0x0, @fd=r1}]}, 0x18}], 0x4, &(0x7f0000001200)=[@rights={{0x20, 0x1, 0x1, [r9, r0, r10, r11]}}, @rights={{0x30, 0x1, 0x1, [r12, r1, r13, r3, r2, r3, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x70, 0x11}, 0x40001) r17 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r17, 0x0, 0x488, &(0x7f00000012c0)={{0xb3, @remote, 0x4e21, 0x3, 'sed\x00', 0x3, 0x8, 0x18}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x10000, 0x65f686d4, 0x401, 0x6}}, 0x44) r18 = accept$packet(0xffffffffffffffff, &(0x7f0000001480), &(0x7f00000014c0)=0x14) r19 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001500), 0x4) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001540)=0x0) sendmsg$netlink(r4, &(0x7f0000001640)={&(0x7f0000001340)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc, &(0x7f0000001440)=[{&(0x7f0000001380)={0xc0, 0x22, 0x10, 0x70bd28, 0x25dfdbfd, "", [@generic="f093ec683058cef4ad353d7a641cc0c95928e7d048c48b669da5b644f14933c5a1a9a50206265cb1847ae3c2085e9d0c946b214a266203a2d51e3decbe5b923871e71b36c3d5a7e23f2ebdc54e22c9a7a1e442e474cbfca55c4f293f321d423d844c3cae23dd251eaf9e45e1179e6be6cd3cf3ad3b73433a640b4c95c78d89286077b40b3104219af0816bcf0102e499fad7d98aec084505a622", @typed={0x14, 0xe0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}]}, 0xc0}], 0x1, &(0x7f0000001580)=[@rights={{0x1c, 0x1, 0x1, [r12, r18, r19]}}, @rights={{0x20, 0x1, 0x1, [r3, r10, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r20, r15, r7}}}, @rights={{0x18, 0x1, 0x1, [r11, r11]}}, @cred={{0x1c, 0x1, 0x2, {r14, r5, r16}}}], 0x98, 0x4000000}, 0x8004) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000006c40)=[{{&(0x7f0000001680)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001700)=""/222, 0xde}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x2, &(0x7f0000002840)=""/190, 0xbe}, 0x5}, {{&(0x7f0000002900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002980)=""/121, 0x79}, {&(0x7f0000002a00)=""/53, 0x35}, {&(0x7f0000002a40)=""/45, 0x2d}, {&(0x7f0000002a80)=""/238, 0xee}], 0x4, &(0x7f0000002bc0)=""/208, 0xd0}, 0x9}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002cc0)=""/250, 0xfa}, {&(0x7f0000002dc0)=""/37, 0x25}, {&(0x7f0000002e00)=""/128, 0x80}], 0x3, &(0x7f0000002ec0)=""/87, 0x57}, 0x2}, {{&(0x7f0000002f40)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/226, 0xe2}], 0x2, &(0x7f0000004100)=""/153, 0x99}}, {{&(0x7f00000041c0)=@alg, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004240)=""/59, 0x3b}, {&(0x7f0000004280)=""/55, 0x37}], 0x2, &(0x7f0000004300)=""/74, 0x4a}, 0x9}, {{&(0x7f0000004380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004400)=""/78, 0x4e}, {&(0x7f0000004480)=""/169, 0xa9}], 0x2, &(0x7f0000004580)=""/44, 0x2c}, 0x3}, {{&(0x7f00000045c0)=@nl=@proc, 0x80, &(0x7f0000005740)=[{&(0x7f0000004640)=""/162, 0xa2}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/45, 0x2d}], 0x3, &(0x7f0000005780)=""/64, 0x40}, 0x4}, {{&(0x7f00000057c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/21, 0x15}, {&(0x7f0000006880)=""/205, 0xcd}, {&(0x7f0000006980)=""/3, 0x3}, {&(0x7f00000069c0)=""/225, 0xe1}], 0x5, &(0x7f0000006b40)=""/208, 0xd0}, 0x3}], 0x8, 0x12140, &(0x7f0000006e40)={0x0, 0x989680}) 802.677798ms ago: executing program 2 (id=7557): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100027bd7000ffdbdf25000000000c000300060006000400000600069589e6fbfa2799572c327cd77a51060003000000080007f458", @ANYRES32=r0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x82) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r6], 0x3c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8080}, 0x10}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) close(r8) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) 799.893363ms ago: executing program 1 (id=7558): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004bc0)=@newtfilter={0xe98, 0x2c, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0x0, 0xa}, {0x383cb0b96f1e4956, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x31, 0x1}}, @filter_kind_options=@f_route={{0xa}, {0xe58, 0x2, [@TCA_ROUTE4_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x20, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8b16, 0x648, 0x6, 0xd51e, 0x8}, 0x5, 0xbd}, [{0x8, 0x5, 0x8, 0x101, 0x96f, 0x5}, {0x9, 0x40000000, 0x0, 0x101, 0xfffffe01, 0x9}, {0x6, 0x10000, 0x100, 0x4, 0x5, 0x20000}, {0x0, 0x75a8, 0x800, 0x3, 0x0, 0x7c8}, {0x7, 0x10000, 0x2d3a, 0x6, 0xfffffff9, 0x9}, {0x7ff, 0xffffff6a, 0xe, 0xe, 0x7, 0xd}, {0xe675, 0x9, 0x1, 0x9, 0x10001}, {0xd, 0x0, 0x100, 0x1, 0x10001, 0x2}, {0x2, 0x9dd4, 0x15499698, 0x2640000, 0xffffffff}, {0xfffffff9, 0x5, 0x40, 0x1, 0x8, 0x9}, {0x9, 0x6, 0x4893f7ca, 0xa, 0x845, 0x7fffffff}, {0x4, 0xfffffe00, 0xf7, 0x5, 0x7f, 0xffffffff}, {0xb058, 0x80, 0x7, 0x6, 0x400, 0x400}, {0x3, 0x5, 0x6, 0xa88, 0x45e6, 0xd6}, {0x7, 0x5, 0xd, 0xfed, 0x7, 0x9}, {0x8, 0x7, 0x7, 0x8, 0x80000000, 0x2}, {0x9, 0x3, 0x3, 0x7, 0x3, 0x9}, {0x882, 0xffffffff, 0x8, 0x7ff, 0x9, 0x5}, {0x4, 0x6, 0x6, 0x1af1, 0x7, 0x6}, {0x3, 0x7ff, 0x3, 0x4fd, 0x8, 0x37ff}, {0x6, 0x5, 0xfffffffe, 0xfff, 0x61, 0x40}, {0x40, 0x4, 0xffff, 0x80000001, 0x95, 0x6}, {0x820d, 0x3ff, 0x1, 0xffffffff, 0x80000001, 0x2}, {0x6, 0x52a, 0x0, 0xffffff3e, 0x7fffffff, 0x8}, {0x5, 0x7, 0x400, 0x434, 0x5, 0x5}, {0x7, 0x2, 0x3, 0x200, 0xfff, 0x6611}, {0x0, 0x5, 0x2, 0x3ff, 0x8001, 0x5}, {0x0, 0x4d1, 0x3, 0x7, 0x9aa7, 0x6}, {0x19bd, 0x3, 0xfffffffe, 0x0, 0xd04, 0xffffff01}, {0x6474, 0x80, 0x615f, 0xef, 0xde, 0xa5d0}, {0x7, 0x9, 0x8, 0x80, 0x1, 0x10001}, {0x9, 0x319a, 0x8d6, 0x200, 0x7, 0x9}, {0x10001, 0x0, 0x7, 0x1, 0x7, 0x2}, {0x200, 0x0, 0x3ff, 0x0, 0x100, 0x6}, {0x8, 0x7ff, 0x0, 0x8, 0x0, 0xffffffff}, {0x929, 0xc, 0x0, 0xd, 0x8000}, {0xf32, 0xfffffffb, 0x27, 0x20c, 0x3, 0x80000000}, {0x5, 0x94, 0x7fff, 0x7, 0xca, 0x6}, {0x8001, 0x0, 0x2, 0x6, 0x2, 0x1}, {0x405, 0x3, 0x5, 0x2, 0x0, 0x80000001}, {0x3, 0x1, 0x2, 0x913, 0x2, 0xd}, {0x3, 0x2, 0x8001, 0x23, 0x5, 0x9}, {0x8000, 0x400, 0x9, 0x800, 0x59de373f, 0x2}, {0x5, 0x1000, 0x5, 0x7f, 0x7}, {0xffffffff, 0x80, 0x1, 0x132, 0x4, 0xff800000}, {0x1, 0xff91, 0x0, 0x21, 0x1, 0x1000}, {0x100, 0x20000000, 0x4746, 0x1913, 0xffffffff, 0x81}, {0x1, 0x3, 0x80000000, 0x0, 0x2, 0x6}, {0x1, 0x0, 0xfffffffd, 0x9, 0xe, 0x2}, {0xa, 0x1, 0x1, 0x448, 0x0, 0x5}, {0x3, 0x5, 0x5, 0x80, 0x3, 0x1}, {0x0, 0x6, 0x0, 0x3, 0xa, 0x846}, {0x100, 0x4, 0x9, 0x3, 0x9, 0x2}, {0x2, 0x3ff, 0x5, 0x8, 0x8, 0x1}, {0x4, 0x3, 0x4, 0x1, 0xd, 0x10001}, {0x9, 0x7ff, 0xfffe0, 0x3, 0x91, 0xffff}, {0x8, 0x3, 0xa, 0xe8, 0x9e, 0xa2000}, {0x0, 0xae91, 0x800, 0xffffff4b, 0x6, 0xd0}, {0x80000001, 0x0, 0xfffff314, 0x4, 0x46d853e2, 0x7f}, {0x2, 0x5, 0x7, 0x10000, 0x3, 0x400}, {0x8, 0x5, 0x6, 0x8, 0x80000000, 0x10000}, {0x5, 0x1, 0x9, 0x6, 0x9, 0x7f}, {0x7fff, 0x5, 0x3, 0x3, 0x3ff, 0x6}, {0x6, 0x10, 0x1, 0x1, 0x200, 0x1}, {0x5, 0x31000000, 0x4, 0x9, 0x7fff, 0x9}, {0x101, 0x8, 0xe81, 0x4, 0xb2}, {0xf, 0x8, 0x80000001, 0x1016e5f3, 0xcf, 0x4}, {0xd, 0x101, 0x4e4b, 0x9, 0x87, 0x3}, {0xb, 0x8, 0xc, 0x400, 0x7, 0x8}, {0x7fffffff, 0x7, 0x2, 0xffffffff, 0x10000, 0x7}, {0x8, 0xa, 0x10000, 0xc, 0x1ff}, {0x4, 0x10001, 0x100, 0xd982, 0x4, 0x3}, {0x7a9d79f9, 0xfff, 0x806, 0x892, 0x1, 0x5}, {0xffff, 0x80, 0xffff, 0x0, 0x4}, {0xfffffff7, 0x1, 0x4, 0x120, 0x8, 0x80000000}, {0xe6e, 0xdd, 0x4, 0x3, 0x8, 0x9}, {0xe627, 0x4ce, 0x10, 0x12, 0x2, 0x8}, {0x3, 0x800, 0x8, 0x1, 0x4, 0x7}, {0x2, 0x4, 0x7fffffff, 0x2, 0x2, 0x6}, {0x0, 0xfffffff8, 0x2, 0x6, 0x5, 0x8}, {0x6, 0xf87, 0x4, 0xffffffff, 0x0, 0x54}, {0x7, 0x2, 0x6, 0x3, 0xf, 0xf}, {0x8, 0x9, 0x8, 0x2, 0x4, 0x5}, {0xa4, 0x100, 0x10, 0xdf95, 0x8a, 0x1}, {0x2, 0x8, 0x6, 0xc528, 0x6, 0xe}, {0x5a4d, 0x1, 0x2, 0x80000000, 0x8, 0x5}, {0x3, 0x80, 0xfffffffa, 0xfffffffc, 0xfc59, 0x9}, {0x4, 0x7a39, 0xfd9e, 0x4, 0xfffffff8, 0x1}, {0x6, 0x8, 0x4, 0x4, 0x2, 0x2}, {0x1, 0x200, 0x30, 0xffffffff, 0x8, 0x7fff}, {0x76, 0x4, 0x5, 0x101, 0x0, 0x401}, {0x200, 0xcc9, 0x9, 0x401, 0x7, 0x2}, {0x5, 0x80000000, 0x7fff, 0x5, 0xa, 0x5}, {0x6, 0x4, 0x8, 0x7, 0x0, 0x9}, {0x1, 0x4, 0xfffffff3, 0x1, 0x100, 0x3}, {0xffffffff, 0x40, 0x3, 0x8, 0x9bc}, {0x4, 0xfffffbff, 0x9, 0x6aab, 0x0, 0x80000a}, {0x2, 0xab0a, 0x6, 0x3, 0x4ee, 0x1}, {0x7, 0x0, 0x10001, 0x2, 0x6, 0xb}, {0x80000001, 0x2, 0x7, 0x101, 0x400, 0x6}, {0x3, 0xa43, 0x7f, 0xfffffffd, 0x7, 0x8}, {0x4, 0x2000383, 0x0, 0xfffffffe, 0x9, 0x3}, {0x3b1, 0x1, 0x732b, 0x6, 0x784e, 0x1}, {0x9, 0x6, 0x2, 0x1, 0x6, 0x5}, {0x5, 0xfaed, 0x9, 0x10001, 0x1, 0x5}, {0x7, 0xc, 0x2, 0xe, 0x1000, 0x7}, {0x9, 0x9, 0x8001, 0x8, 0x5, 0xff}, {0x80000000, 0x8, 0x6, 0x2032, 0x74, 0x8}, {0x3, 0x3, 0x30, 0x0, 0xf}, {0x7, 0xfffffff7, 0x3, 0x9, 0x7085, 0x2}, {0x27a04682, 0x7, 0x9, 0x1, 0x7ff, 0x7}, {0xf5, 0x0, 0x2, 0xff, 0x6, 0x5}, {0x100003, 0x1, 0x20000000, 0x5, 0x7, 0x9e6e}, {0x4, 0x0, 0x3, 0x8, 0x10, 0x4}, {0x0, 0x3ff, 0x8, 0x8001, 0x9, 0x2}, {0x3, 0x6, 0x80000001, 0x6, 0x0, 0x10}, {0x8, 0x2, 0xca, 0xe34d, 0xe, 0x6}, {0x0, 0x4, 0x9, 0xfffffffe, 0xe, 0x1}, {0x6, 0x8843, 0x9, 0x8, 0x0, 0x1}, {0x3, 0x0, 0x2, 0x5, 0x8, 0x8}, {0x2, 0x4, 0x7fffffff, 0x7e6d8, 0x8, 0x2}, {0x7, 0x5, 0x5, 0x9, 0xb2, 0x1}, {0x10000, 0x100, 0x5a9, 0x5, 0xb, 0x2}, {0x8, 0x9, 0x9126, 0x9, 0x2, 0xf9f}, {0x2, 0x2, 0x0, 0x8000, 0x101, 0x1}, {0x1ff, 0x5, 0x1, 0x81, 0xfffffff7, 0xf2}, {0x3, 0x0, 0x1000, 0x4, 0x3, 0x401}, {0x7, 0x3, 0x3, 0x7, 0x7fff, 0xbc0}], [{0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x4b6863479013c8af}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x2}, {0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x3}, {0xbdf66a4725d99acf}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x4}, {0x7}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x224280b6aa112068}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0xfef99148084f92fe}, {0x5}, {0x1}, {0x3}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x2}, {0xa734f454cfdc6748}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe98}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047ce4ff07004280040008000c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, 0x0, 0x2e) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x8927, 0x0) connect$bt_l2cap(r9, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000c80)={0x17, &(0x7f0000001040)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r10}, 0x10) 696.494583ms ago: executing program 4 (id=7559): r0 = socket$inet6(0x10, 0x3, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30ef00001000010495ee7dde7c5d002bb9df906c", @ANYRES32=0x0, @ANYBLOB="030500002114000008002800f4610000080005"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 615.865679ms ago: executing program 3 (id=7560): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000376b7938e6a60aee680085000000002020207b1a140000000000bfa100000000000007010000f8ffffffb702000008000000b70300007e00000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 614.412081ms ago: executing program 5 (id=7561): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="0500380000000000"], 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r14, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000940)) 572.59518ms ago: executing program 4 (id=7562): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0xffffffffffffff85) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0xa, 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0xffffffffffffff85) (async) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0xa, 0x4) (async) 492.486026ms ago: executing program 1 (id=7563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c69666163650000"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000800008500000018000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 491.647272ms ago: executing program 3 (id=7564): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x1, 0x0, 0xfffffffd}, 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) write$nci(0xffffffffffffffff, 0x0, 0x12) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) (async) write$nci(r2, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa08000900", @ANYRES8=r1], 0x48}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) r11 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x2e, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa7c4, '\x00', 0x0, r12, 0x0, 0x2}, 0x50) write(r11, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r11, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r9, @ANYRES32=r10], 0x108}, 0x1, 0x0, 0x0, 0x5593ee2f0bddd481}, 0x0) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 457.488348ms ago: executing program 5 (id=7565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188b000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x8, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10000100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xffffeffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188b000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r4) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x8, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10000100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xffffeffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 450.311708ms ago: executing program 1 (id=7566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000128049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba000000200106801c01758018"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) unshare(0x20000400) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 398.550387ms ago: executing program 4 (id=7567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f00"], 0x40}, 0x20000000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) (async) unshare(0x22020600) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x20, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYBLOB="1188df53bfc96934883c488c629477f994b5065c63487821a08a517a8fe24461d0504f661ac099a2757f3930ee06c66e2102f4a6b3a11f"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4004000) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 386.939986ms ago: executing program 2 (id=7568): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r1) sendmsg$can_bcm(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0x6, 0x1) pselect6(0x40, &(0x7f0000000000)={0x1, 0x10001, 0x101, 0x400, 0x3, 0x6, 0x8, 0x5}, &(0x7f00000000c0)={0x1, 0x7ff, 0x8, 0x3, 0x0, 0x7, 0x101, 0x9f}, &(0x7f0000000200)={0x2, 0x8, 0x7, 0x8000, 0x2, 0x4, 0x0, 0x7fff}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000340)={&(0x7f00000002c0), 0x8}) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf251a00000008002280040000800700210062620000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @loopback}, 0x1c) 260.268181ms ago: executing program 3 (id=7569): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a00010000000000fddbdf25fc0100000000000000000000000000017f0000010000000000000000000000004e240020fffd0000000020a032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000002b000000ac14141200000000000000000000000000000000000000000000000000000000feffffffffffff1201000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0004fd2c0000000000000014000e00ffffffff00"/188], 0x104}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x84440) 259.582772ms ago: executing program 5 (id=7570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000400000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r1, @ANYBLOB="08000a00868b48a21d3a4ae38d991c649aa6546a656f4fe8dafa", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket(0x1d, 0x2, 0x7) getsockname$packet(r5, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getpeername$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) recvmsg$can_raw(r6, &(0x7f0000000500)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/26, 0x1a}], 0x7}, 0x40000000) 258.431247ms ago: executing program 1 (id=7571): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delqdisc={0x78, 0x25, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x5}, {0xfffb, 0x9}, {0xd, 0x3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1fd9}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x3c, 0x9, 0xdd, 0x0, 0x4, 0xac0, 0x1}}, {0x6, 0x2, [0xffff]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0xffffff94, @empty, 0x8}}, 0x0, 0x0, 0x3b, 0x0, "3e0cd37fc2f249b0d4061ad9d8f44e69b94291c8ec5c0bd3c44c29ca6621904f6a3bb2ac8155bd73a69058d347279875ff6c0eca2af0a4be7b81511db5f2446ddbdc254ef1e7ea94495fbad39f581ce5"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x1b, 0x0, "7f7fadb1ccd28803451d030b72ac216f0e189072f863cba09dac94371228f525d2d5caeedaef641b57ed02f445befc3aab6ec21b86f66db09ac8125a76cb55eb859ee8c78e1252208b52067caf4bb0b3"}, 0xd8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000002180)={0x0, 0x87b}, &(0x7f00000021c0)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002240)=[{&(0x7f0000000400)=@in6={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="7d9b4c099a189a81ae4ec3bfdd23460758ab584b3d016fff8e4e29ef979f9375c0c831dbdc31a30a79676115958347cf4f0a779bbd0fbf759a11ad298b44539f74cb1f2a0ee9309dcdf08a3af525d6bb27efa63ae17c0106fa5c9fa48a9defe76d90a259376443adc7980a4945c3fe1106915e1a933aafa942ae9fb13f03b4411104355360a58d1eedf3adbc7fb258bf9729852cc980ce502482580fcbb30a2bdc7d9b6765d8f783f3c6006faa471c1814c603214e8c905dde39ac7b0c8aac0fabdbc6f7b239c99d657a52f0510d8388833274fdc7f097db2906fae02e54f9c0f3ce", 0xe2}], 0x1, 0x0, 0x0, 0x20000010}, {&(0x7f0000000580)=@in={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000005c0)="69d5c3095ca8e9b90f85df54caafcb76e686fc52e7232ff4bc5b9520efac05ef85d6f7506cf50791b37b373fd1a39b1ab406fc9cc99b6021775c960343422aeef4d88c959a5149ca71", 0x49}, {&(0x7f0000000640)="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", 0xfd}, {&(0x7f0000000740)="0562bd512e64a753b47cd0af679c3ff22cf248a129993594f9ac98473f505411176cf625730cf0fec09d3d5a46460f79a076bd4254b70fabe0cfc0a09e578c0294aceeebfdd80a08b06bd1c11d6140fe302ea9dea1f18c7d5936aaf4d2669b8f63eb0e2170fe470b6e3c9ba51b9486897750d0d68c12a28fdcd160917678d05522288fed07931509a00a5131fe9fc3c096943eede7d90f609b4ca770c30779c57628b7242dbb60c8c7541b5a37", 0xad}, {&(0x7f0000000800)="5a0cc93e8febcd2c62f1b57aa0a99a91bb20ed15221b34f9311e9935ceaf062b3684709cabd37b0ef33faba82d1e5a4db82e3eb89cd4abdc003ce3d887f61a3a35ca6311", 0x44}, {&(0x7f0000000880)="349363090a95efa7b223f89e9110a3249f029906e13bdc6e5bf367ab2626f26d04fb9e35df3447f10aa2f8692e2726ec1cb828a055a2d57043bd1c5c7bfc6a5d5df3c82ff0d57d86e01d3c9172495153d94641f037fc345bd044be9ae3c48a6da559f93542053c5f0064", 0x6a}, {&(0x7f0000000900)="0b9bd29d95f22737880559c17e2fb4c2c630bd76493a34b8c5fd966ad1f9dc560a5bc1ce4603075708e3893574be1bf05c5233c264c7160548728b9fc9016a104e574a156dc22e83d15d448e1870a9103156ad9b5d7214103c3611a62dc4083888e8635be02ccf2301b008c40fa2962210988190a1206e99484f41e62911671457acc93b96760f056472e22a45453173ec9b1b31a636f1c20d009d1cd898ddb377330064661a3db2357d63aa872355b6a4bb48b2db592e096b5a8845bce337b7ab81ace3123e50014930f29cc0d662c8dc3c35912467aa9c8eadb641e6dbbaacb89e1494510a89d38ad973f831897b7f6cc85445df92", 0xf6}], 0x6, 0x0, 0x0, 0x40011}, {&(0x7f0000000a80)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="402fcb492e396787dc17712e745528cfb62f7e1487957affd47736e18f3c310d1a06a29e06a4a6af95e51ee163a918c8675ae42d368833678870bbcd72e00b02dad5a44b17b701ea6ceda87a2791190f79621cd8f91730a4c3bf89f6fd9a954b2a77402c41be469bd2062bed9f909db525a2219bf2526d390c10d87b67ff4fee670d64883ee6d30cdd375953fd6a5e", 0x8f}, {&(0x7f0000000b80)="e286c19029f95245f829a1d76c9f446063551b94dd5bd00e1ecb753978d2d9b47ad0748efdb87286bfc92c80e38b27909f23bde67d1fa37eaacafe8fff9c871835ce073f3292a9e7ec0c4aec272323d3a7f85b141fc3318c96f1d01b8c23906856dfe6", 0x63}, {&(0x7f0000000c00)="3b8dd5c8dd2835bbb470d9bf5708dde4d14fd0845cdb1c0b7c5ce7f4ea83db3cf820d48e8af051922c13234643776af886b594727201868261f34de48e3ea0db0b652adc7b466da3350db3dd63788e6fc788d50f8969eba6d4786a96724f4007432e6bd72eea574accefac570cb2dc2e3a2d9183d353a5f00df9bd433499c62a25077be9088fecf0e9e707e8b1f79bdfc5abd9dae5784da6397c7a27b6c1b731516b50c9fc0d9cb5dce9c0549ad2cc5f0bf872bc32da5f55029f418f", 0xbc}, {&(0x7f0000000cc0)="8e64951ec161974911536a569b3f0ed74dfa58afd13141d88f5462271533c24bef02cec3f0fb727b9ab7b8bf6bc0ca4c3330c5c085e9fd635a248739c1350d4a9c26dc13ba4787c0486c4343af0eefdf3845814ab9ff95d4b7679882171059510ed66d0fa7e725b758410e814e9e861289f33a07af4937a9f0a7c1652ed01702446b7fe71eeef26e4fd7a7d3df866e0bd3bd6c982c", 0x95}, {&(0x7f0000000d80)="da80572fdd860058d39e537c82046ef92bd6a0c298cfd9d71c1eb55de02d56b90e794a0333ec87b2b1a6710f20c00461bff6af97c4e7da495c0f43e8df932158544bcd153d71e55f235080784cbaf07b287bddc792deb8ab241ef9e5775b161c1517f8c1ba6ccb778f1f94ef6f57c7258acc42cc824d6cda67948f82bd51ff4c6fb3750648edad47e35dd3d317d0", 0x8e}, {&(0x7f0000000e40)="9cb8ea65fc06ce29275b21c05b59a1c9fe9a3e81fbeac39f7829ef615c569ca8bb87dc545613681bab44a788f3bf5999fde614b83e0ba751be054b7639e320", 0x3f}], 0x6, &(0x7f0000000f00)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x7c4}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30, 0x240008d0}, {&(0x7f0000000f40)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002140)=[{&(0x7f0000000f80)="5e207a7588bd94ac1cab16d03df343e7d07ee9e6229d9147ab578038663ae482224687c3b34393260388b554c23a20632600c48e61ffaa78b6005426ac269002b5a6974fa0e6743ae21ec0ef538ad11462b360e804c450ce6c49f9b1bdb018c2c3fcb732848a86011c1496ff6e0f788b4d3eef3657ba5eb73f888d0c8e37adb9901e2869bb17dfa127b3371f9577251ecef70e7db3bfefd953c84acf97ebe6213bbcab9f48fc170193eba1ccb0c906091f3cd1ad04538254c61559a1aa6ed67cb81272745e6e1def02497d7bc350723280b2817af830e29d52", 0xd9}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="f304f51c2d5f915934534f5b89b889a4100e86c971de3c3061c52abbdfea823a5ada112fba3a87b3aa3a63384afa4dc010bffaaa4847eacc3b17d58498f628c1d1c37f823aa1fb3aae39abbcab1cae04569ad006e2ff79b0f089ac438482407fcca91036a4dc53dc90ee51fa", 0x6c}, {&(0x7f0000002100)="972c7026330e3e08011a0840416791487dcacf18035badab412709bf", 0x1c}], 0x4, &(0x7f0000002200)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0xf800, 0x205, 0x7, 0x3, 0x9, 0x3, 0x3, r6}}], 0x30, 0x10}], 0x4, 0x10) connect$x25(r0, &(0x7f0000002340), 0x12) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000002600)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000025c0)={&(0x7f00000023c0)={0x1d8, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc0000000}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private1, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7e, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}}}}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91cf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51249d11}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002680), r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002980)={r0, 0xe0, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000026c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000002780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000027c0), &(0x7f0000002800), 0x8, 0x91, 0x8, 0x8, &(0x7f0000002840)}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000002a80)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x74, r7, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008880}, 0x1) r9 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r9, &(0x7f0000002ac0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000002b00)={0x4f, "25fbba4cbcd98ebf2bc42824da1f0825c47731f6bd2d20922ea34c20a45ee4a3fff114605ab6ddcbe8dfd58150f92b778ad09be334771640307c6733e1182dfa599dd288245ddf885c8735b847b1cfd0d3a9f55581d93b07e14ea4314165609202295fd621498e4bb4abbebb26dbd1a669fd5d581547566e2a0365c700df5a64"}) getsockname$packet(r1, &(0x7f0000002bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002c00)=0x14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000002c40)={0x10000018}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000002c80)={r6, 0x8, 0x10, 0xfffffff7}, &(0x7f0000002cc0)=0x10) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000002d00)="9223c1d37e781e8412c4fb974a70fef23e98a3bc4b9cacfab82c1834b3ae9535bc38ecd04fe0eb3e026a70cfa49b915acbe282385648ac44e0e485ff8aceeca3ed", 0x41) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000002d80), &(0x7f0000002dc0)=0x8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000002e00)=0x91ef, 0x4) bind$alg(r1, &(0x7f0000002e40)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-sse2\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000002ec0)={r0}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000002f80)=0x805, 0x4) 198.857731ms ago: executing program 1 (id=7572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202e020000000000240012800b00010065727370616e0000140002800600020014000000ff0010004e230000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6(0xa, 0x2, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x2e, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36147b586c9a7affa71b5e223700"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x2018}, 0x1, 0x0, 0x0, 0x4044014}, 0x4088004) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000400), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c091}, 0x8080) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x300040a0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202e020000000000240012800b00010065727370616e0000140002800600020014000000ff0010004e230000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$inet6(0xa, 0x2, 0x4) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x2e, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36147b586c9a7affa71b5e223700"}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x2018}, 0x1, 0x0, 0x0, 0x4044014}, 0x4088004) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000400), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c091}, 0x8080) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x300040a0) (async) 198.363151ms ago: executing program 4 (id=7573): socket(0x2b, 0x80801, 0x1) socket$inet6(0xa, 0x80003, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x80000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x68}, 0x1, 0xba01}, 0x810) 188.776235ms ago: executing program 3 (id=7574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='.', 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 1 (id=7575): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4000040, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet6(r0, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x50, 0x2, 0x6, {0xe, @hdata="69b7c529d931febb013aed7d0198dd7134426d8a3959f5417c12a0afb7da98f6ecc148270ec0653f3f44350e05c51fff532035e4", {0x0, @remote, 0xe, 0x4, [0x7, 0x2]}, @sctp_ip6_spec={@loopback, @loopback, 0x4e21, 0x4e23, 0x40}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) kernel console output (not intermixed with test programs): ller0: entered promiscuous mode [ 610.501385][T27888] syzkaller0: entered allmulticast mode [ 610.523562][T27884] tipc: Resetting bearer [ 610.535108][T27884] tipc: Disabling bearer [ 610.582263][T27901] lo speed is unknown, defaulting to 1000 [ 610.641868][ T51] Bluetooth: hci5: command tx timeout [ 610.991813][T27925] syzkaller1: entered promiscuous mode [ 611.010924][T27925] syzkaller1: entered allmulticast mode [ 611.257194][ T5180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 611.265337][ T5180] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 611.272594][ T5180] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 611.280528][ T5180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 611.288344][ T5180] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.300377][T27938] bridge0: entered promiscuous mode [ 611.313862][T27938] vlan0: entered promiscuous mode [ 611.320389][T27938] bridge0: port 3(vlan0) entered blocking state [ 611.327757][T27938] bridge0: port 3(vlan0) entered disabled state [ 611.335558][T27938] vlan0: entered allmulticast mode [ 611.340780][T27938] bridge0: entered allmulticast mode [ 611.350037][T27938] vlan0: left allmulticast mode [ 611.355329][T27938] bridge0: left allmulticast mode [ 611.441922][T27939] lo speed is unknown, defaulting to 1000 [ 611.690738][T27961] netlink: 'syz.4.6139': attribute type 5 has an invalid length. [ 611.699026][T27961] netlink: 'syz.4.6139': attribute type 7 has an invalid length. [ 611.713984][T27961] : entered promiscuous mode [ 611.767790][T27939] chnl_net:caif_netlink_parms(): no params data found [ 611.805269][T27966] netlink: 'syz.4.6140': attribute type 1 has an invalid length. [ 611.817513][T27966] __nla_validate_parse: 6 callbacks suppressed [ 611.817529][T27966] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6140'. [ 611.949201][T27939] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.967177][T27978] openvswitch: netlink: IP tunnel TTL not specified. [ 611.974528][T27939] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.983191][T27939] bridge_slave_0: entered allmulticast mode [ 612.004442][T27939] bridge_slave_0: entered promiscuous mode [ 612.012542][T27939] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.019806][T27939] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.027377][T27939] bridge_slave_1: entered allmulticast mode [ 612.034302][T27939] bridge_slave_1: entered promiscuous mode [ 612.064872][T27939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.080367][T27939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.089765][T27980] C: renamed from team_slave_0 (while UP) [ 612.099697][T27980] netlink: 'syz.4.6142': attribute type 4 has an invalid length. [ 612.108149][T27980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 612.160874][T27939] team0: Port device team_slave_0 added [ 612.169629][T27939] team0: Port device team_slave_1 added [ 612.217394][T27939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.229382][T27939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.270656][T27939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.289274][T27939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.296353][T27939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.333172][T27939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.381666][T27939] hsr_slave_0: entered promiscuous mode [ 612.389229][T27939] hsr_slave_1: entered promiscuous mode [ 612.396164][T27939] debugfs: 'hsr0' already exists in 'hsr' [ 612.402024][T27939] Cannot create hsr debugfs directory [ 612.423877][T27990] nbd4: detected capacity change from 0 to 63 [ 612.431237][T27994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6146'. [ 612.441886][T27995] block nbd4: NBD_DISCONNECT [ 612.457627][T27995] block nbd4: Disconnected due to user request. [ 612.470143][T27995] block nbd4: shutting down sockets [ 612.485964][ C1] blk_print_req_error: 27 callbacks suppressed [ 612.485985][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.493861][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.501303][ C1] buffer_io_error: 27 callbacks suppressed [ 612.501321][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 612.510296][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 612.531643][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.540817][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 612.548619][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.557691][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 612.565576][T18779] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.578611][T18779] Buffer I/O error on dev nbd4, logical block 0, async page read [ 612.596399][T18779] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.607355][T18779] Buffer I/O error on dev nbd4, logical block 1, async page read [ 612.615546][T18779] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.624884][T18779] Buffer I/O error on dev nbd4, logical block 2, async page read [ 612.632763][T18779] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.642732][T18779] Buffer I/O error on dev nbd4, logical block 3, async page read [ 612.643181][T27995] block nbd5: server does not support multiple connections per device. [ 612.653836][T18779] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.664283][T27995] block nbd5: shutting down sockets [ 612.683735][T18779] Buffer I/O error on dev nbd4, logical block 0, async page read [ 612.692575][T18779] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 612.702245][T18779] Buffer I/O error on dev nbd4, logical block 1, async page read [ 612.712766][T18779] ldm_validate_partition_table(): Disk read failed. [ 612.727343][T18779] Dev nbd4: unable to read RDB block 0 [ 612.732302][ T5180] Bluetooth: hci5: command tx timeout [ 612.742240][T18779] nbd4: unable to read partition table [ 612.754997][T18779] ldm_validate_partition_table(): Disk read failed. [ 612.762918][T18779] Dev nbd4: unable to read RDB block 0 [ 612.770158][T18779] nbd4: unable to read partition table [ 612.810025][T28007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.819729][T28007] batadv0: mtu less than device minimum [ 612.839871][T28007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.851088][T28007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.862345][T28007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.873534][T28007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.884699][T28007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.895990][T28007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 612.939457][T28007] batadv_slave_0: entered promiscuous mode [ 612.950574][T27939] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.979811][T28009] vlan0: entered promiscuous mode [ 612.994454][T28009] vlan0: entered allmulticast mode [ 613.016253][T28009] hsr_slave_1: entered allmulticast mode [ 613.048415][T27939] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.062445][T28015] lo speed is unknown, defaulting to 1000 [ 613.131065][T27939] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.191100][T28017] lo speed is unknown, defaulting to 1000 [ 613.214770][T27939] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.355312][ T5180] Bluetooth: hci1: command tx timeout [ 613.428108][T27939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.451473][T27939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 613.477275][T27939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 613.499093][T28015] netlink: 292 bytes leftover after parsing attributes in process `syz.5.6151'. [ 613.517089][T27939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 613.651945][T27939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.676094][T27939] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.701242][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.708674][ T6752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.760506][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.767730][ T6733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.883871][T28050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6159'. [ 613.936255][T28050] syzkaller1: entered promiscuous mode [ 613.944236][T28050] syzkaller1: entered allmulticast mode [ 613.988953][T28053] lo speed is unknown, defaulting to 1000 [ 614.294814][T28065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6165'. [ 614.338759][T27939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.351497][T28068] tipc: Enabled bearer , priority 0 [ 614.360235][T28065] syzkaller0: entered promiscuous mode [ 614.386695][T28065] syzkaller0: entered allmulticast mode [ 614.455504][T28064] tipc: Resetting bearer [ 614.464241][T28057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6161'. [ 614.481007][T28064] tipc: Disabling bearer [ 614.537115][T28077] netlink: 'syz.3.6167': attribute type 1 has an invalid length. [ 614.576618][T27939] veth0_vlan: entered promiscuous mode [ 614.608973][T27939] veth1_vlan: entered promiscuous mode [ 614.651773][T27939] veth0_macvtap: entered promiscuous mode [ 614.677464][T28081] netlink: 'syz.3.6169': attribute type 29 has an invalid length. [ 614.694627][T28081] netlink: 'syz.3.6169': attribute type 16 has an invalid length. [ 614.702466][T28081] netlink: 'syz.3.6169': attribute type 3 has an invalid length. [ 614.704446][T27939] veth1_macvtap: entered promiscuous mode [ 614.710713][T28081] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.6169'. [ 614.795873][ T5180] Bluetooth: hci5: command tx timeout [ 614.869171][T27939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.917608][T27939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.937071][T28093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6171'. [ 614.967428][ T6732] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.981599][ T6732] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.003682][ T6732] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.012416][ T6732] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.148481][ T6732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.177573][ T6732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.221035][ T6751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.244477][ T6751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.372868][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6178'. [ 615.410422][T28113] mac80211_hwsim hwsim92 wlan0: entered promiscuous mode [ 615.432918][T28115] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 615.442419][ T5180] Bluetooth: hci1: command tx timeout [ 615.479796][T28118] smc: net device bond0 applied user defined pnetid SYZ2 [ 615.529740][T28121] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6181'. [ 615.539125][T28121] net_ratelimit: 13 callbacks suppressed [ 615.539141][T28121] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 615.662890][T28125] lo speed is unknown, defaulting to 1000 [ 615.815924][T28136] netlink: 'syz.5.6185': attribute type 1 has an invalid length. [ 615.900780][T28148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 615.908125][T28148] IPv6: NLM_F_CREATE should be set when creating new route [ 615.915377][T28148] IPv6: NLM_F_CREATE should be set when creating new route [ 615.924626][T28148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 615.939762][T28149] sctp: [Deprecated]: syz.1.6184 (pid 28149) Use of int in maxseg socket option. [ 615.939762][T28149] Use struct sctp_assoc_value instead [ 616.232856][T28164] netlink: 'syz.5.6188': attribute type 10 has an invalid length. [ 616.252076][T28164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.268510][T28164] team0: Port device bond0 added [ 616.517626][T28173] lo speed is unknown, defaulting to 1000 [ 616.702911][T28185] hsr_slave_1 (unregistering): left promiscuous mode [ 616.820974][T28201] netlink: 'syz.3.6200': attribute type 39 has an invalid length. [ 616.896904][T28209] netlink: 'syz.3.6200': attribute type 29 has an invalid length. [ 616.906099][T28209] netlink: 'syz.3.6200': attribute type 29 has an invalid length. [ 617.004896][T28213] __nla_validate_parse: 1 callbacks suppressed [ 617.004917][T28213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6203'. [ 617.078507][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6205'. [ 617.091599][T28218] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6205'. [ 617.123388][T28215] lo speed is unknown, defaulting to 1000 [ 617.133238][T28219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6204'. [ 617.144041][T28219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6204'. [ 617.362464][T28230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.382950][T28229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6207'. [ 617.401767][T28229] tipc: Enabled bearer , priority 0 [ 617.410112][T28229] syzkaller0: entered promiscuous mode [ 617.415896][T28229] syzkaller0: entered allmulticast mode [ 617.436831][T28229] tipc: Resetting bearer [ 617.454867][T28230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.471077][T28228] tipc: Resetting bearer [ 617.486007][T28228] tipc: Disabling bearer [ 617.520113][T28230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.523763][ T5180] Bluetooth: hci1: command tx timeout [ 617.612085][T28230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.661709][T28235] syzkaller1: entered promiscuous mode [ 617.684699][T28235] syzkaller1: entered allmulticast mode [ 617.691452][T28238] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6209'. [ 617.724120][T28237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6209'. [ 617.772347][ T6751] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.820364][ T6733] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.855339][ T6733] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.898373][ T6733] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.933970][T28255] validate_nla: 25 callbacks suppressed [ 617.933990][T28255] netlink: 'syz.4.6214': attribute type 10 has an invalid length. [ 617.998614][T28255] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 618.168918][T28271] netlink: 'syz.2.6217': attribute type 32 has an invalid length. [ 618.535959][T28288] syzkaller0: entered promiscuous mode [ 618.660374][T28288] syzkaller0: entered allmulticast mode [ 618.744971][T28287] tipc: Started in network mode [ 618.764073][T28287] tipc: Node identity 52df87dde88a, cluster identity 4711 [ 618.779144][T28287] tipc: Enabled bearer , priority 0 [ 618.853392][T28297] netlink: 'syz.4.6221': attribute type 1 has an invalid length. [ 619.079616][T28297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.106727][T28287] tipc: Resetting bearer [ 619.142601][T28287] tipc: Disabling bearer [ 619.605311][ T5180] Bluetooth: hci1: command tx timeout [ 620.222483][T28346] netlink: 'syz.5.6231': attribute type 12 has an invalid length. [ 620.232683][T28346] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6231'. [ 620.377052][T28351] lo speed is unknown, defaulting to 1000 [ 620.753437][T28358] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6232'. [ 620.820935][T28355] lo speed is unknown, defaulting to 1000 [ 620.861247][T28354] lo speed is unknown, defaulting to 1000 [ 621.414465][T28380] netlink: 'syz.3.6239': attribute type 5 has an invalid length. [ 621.422246][T28380] netlink: 'syz.3.6239': attribute type 7 has an invalid length. [ 621.455317][T28380] : entered promiscuous mode [ 622.116435][T28411] pim6reg: entered allmulticast mode [ 622.129609][T28415] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 622.140933][T28411] pim6reg: left allmulticast mode [ 622.172677][T28417] __nla_validate_parse: 3 callbacks suppressed [ 622.172695][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6253'. [ 622.216502][T28417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6253'. [ 622.237201][T28417] netlink: 'syz.4.6253': attribute type 18 has an invalid length. [ 622.248076][T28411] tipc: Enabling of bearer rejected, failed to enable media [ 622.409980][T28430] netlink: 'syz.3.6256': attribute type 1 has an invalid length. [ 622.671750][T28443] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6259'. [ 622.720368][T28437] IPVS: sh: FWM 3 0x00000003 - no destination available [ 622.729778][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 622.751102][T28447] tipc: Enabled bearer , priority 0 [ 622.770251][T28447] syzkaller0: entered promiscuous mode [ 622.778761][T28447] syzkaller0: entered allmulticast mode [ 622.809848][T28447] tipc: Resetting bearer [ 622.847502][T28451] tipc: Resetting bearer [ 622.866997][T28451] tipc: Disabling bearer [ 623.132329][T28477] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6266'. [ 623.181552][T28480] netlink: 'syz.2.6270': attribute type 7 has an invalid length. [ 623.189176][T28478] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6267'. [ 623.205446][T28477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6266'. [ 623.213932][T28478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6267'. [ 623.223417][T28478] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6267'. [ 623.262169][T28478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6267'. [ 623.264833][T28477] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6266'. [ 623.420457][T28492] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 623.429372][T28492] CPU: 0 UID: 0 PID: 28492 Comm: syz.4.6273 Not tainted syzkaller #0 PREEMPT(full) [ 623.429402][T28492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.429418][T28492] Call Trace: [ 623.429428][T28492] [ 623.429438][T28492] dump_stack_lvl+0x189/0x250 [ 623.429473][T28492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.429502][T28492] ? __pfx__printk+0x10/0x10 [ 623.429531][T28492] ? kernfs_root+0x1c/0x230 [ 623.429559][T28492] ? kernfs_path_from_node+0x2f/0x290 [ 623.429583][T28492] ? kernfs_path_from_node+0x250/0x290 [ 623.429608][T28492] ? kernfs_path_from_node+0x2f/0x290 [ 623.429635][T28492] sysfs_warn_dup+0x8e/0xa0 [ 623.429657][T28492] sysfs_do_create_link_sd+0xc0/0x110 [ 623.429682][T28492] device_add_class_symlinks+0x1cf/0x240 [ 623.429709][T28492] device_add+0x475/0xb50 [ 623.429733][T28492] wiphy_register+0x1ba6/0x28d0 [ 623.429777][T28492] ? __pfx_wiphy_register+0x10/0x10 [ 623.429814][T28492] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 623.429846][T28492] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 623.429874][T28492] ieee80211_register_hw+0x3425/0x4080 [ 623.429910][T28492] ? ieee80211_register_hw+0x1481/0x4080 [ 623.429949][T28492] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 623.429979][T28492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 623.430016][T28492] ? __hrtimer_setup+0x187/0x210 [ 623.430037][T28492] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 623.430072][T28492] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 623.430119][T28492] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 623.430147][T28492] ? trace_kmalloc+0x1f/0xd0 [ 623.430173][T28492] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 623.430205][T28492] ? kstrndup+0xbf/0x160 [ 623.430234][T28492] hwsim_new_radio_nl+0xea4/0x1b10 [ 623.430264][T28492] ? __pfx___nla_validate_parse+0x10/0x10 [ 623.430307][T28492] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 623.430343][T28492] ? __nla_parse+0x40/0x60 [ 623.430377][T28492] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 623.430410][T28492] genl_family_rcv_msg_doit+0x212/0x300 [ 623.430440][T28492] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 623.430474][T28492] ? bpf_lsm_capable+0x9/0x20 [ 623.430502][T28492] ? security_capable+0x7e/0x2e0 [ 623.430536][T28492] genl_rcv_msg+0x60e/0x790 [ 623.430586][T28492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.430610][T28492] ? __kasan_slab_alloc+0x6c/0x80 [ 623.430638][T28492] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 623.430667][T28492] ? __netlink_lookup+0xbd/0x810 [ 623.430685][T28492] ? rcu_is_watching+0x15/0xb0 [ 623.430724][T28492] netlink_rcv_skb+0x208/0x470 [ 623.430756][T28492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.430781][T28492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 623.430818][T28492] ? lock_release+0x4b/0x3e0 [ 623.430849][T28492] ? down_read+0x1ad/0x2e0 [ 623.430870][T28492] genl_rcv+0x28/0x40 [ 623.430891][T28492] netlink_unicast+0x82f/0x9e0 [ 623.430924][T28492] ? __pfx_netlink_unicast+0x10/0x10 [ 623.430961][T28492] ? netlink_sendmsg+0x642/0xb30 [ 623.430978][T28492] ? skb_put+0x11b/0x210 [ 623.430999][T28492] netlink_sendmsg+0x805/0xb30 [ 623.431024][T28492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.431046][T28492] ? aa_sock_msg_perm+0xf1/0x1d0 [ 623.431068][T28492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 623.431090][T28492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.431110][T28492] __sock_sendmsg+0x21c/0x270 [ 623.431138][T28492] ____sys_sendmsg+0x505/0x830 [ 623.431163][T28492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.431190][T28492] ? import_iovec+0x74/0xa0 [ 623.431215][T28492] ___sys_sendmsg+0x21f/0x2a0 [ 623.431237][T28492] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.431262][T28492] ? futex_wake+0x4b2/0x560 [ 623.431305][T28492] ? __set_current_blocked+0x92/0x2c0 [ 623.431335][T28492] __x64_sys_sendmsg+0x19b/0x260 [ 623.431359][T28492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 623.431389][T28492] ? rcu_is_watching+0x15/0xb0 [ 623.431413][T28492] ? rcu_is_watching+0x15/0xb0 [ 623.431436][T28492] do_syscall_64+0xfa/0x3b0 [ 623.431457][T28492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.431478][T28492] ? clear_bhb_loop+0x60/0xb0 [ 623.431502][T28492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.431524][T28492] RIP: 0033:0x7f8de4d8ebe9 [ 623.431544][T28492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.431564][T28492] RSP: 002b:00007f8de5c58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.431589][T28492] RAX: ffffffffffffffda RBX: 00007f8de4fb5fa0 RCX: 00007f8de4d8ebe9 [ 623.431606][T28492] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 623.431621][T28492] RBP: 00007f8de4e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 623.431635][T28492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.431650][T28492] R13: 00007f8de4fb6038 R14: 00007f8de4fb5fa0 R15: 00007ffff4cb1d38 [ 623.431676][T28492] [ 624.546421][T28525] nbd: nbd1 already in use [ 624.851537][T28536] ksmbd: Unknown IPC event: 3, ignore. [ 625.215657][T28559] netlink: 'syz.3.6290': attribute type 13 has an invalid length. [ 625.224469][T28559] netlink: 'syz.3.6290': attribute type 17 has an invalid length. [ 625.241736][T28559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 625.965010][T28593] netlink: 'syz.5.6300': attribute type 1 has an invalid length. [ 625.972879][T28593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.038887][T28602] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 626.105073][T28607] erspan0: entered promiscuous mode [ 626.111180][T28607] macvtap1: entered promiscuous mode [ 626.116856][T28607] macvtap1: entered allmulticast mode [ 626.122336][T28607] erspan0: entered allmulticast mode [ 626.132515][T28608] tipc: New replicast peer: 255.255.255.255 [ 626.140958][T28608] tipc: Enabled bearer , priority 6 [ 626.172156][T28608] vlan2: entered promiscuous mode [ 626.187505][T28608] bridge0: port 3(vlan2) entered blocking state [ 626.198577][T28608] bridge0: port 3(vlan2) entered disabled state [ 626.205270][T28608] vlan2: entered allmulticast mode [ 626.211639][T28608] bridge0: entered allmulticast mode [ 626.221112][T28608] vlan2: left allmulticast mode [ 626.242903][T28608] bridge0: left allmulticast mode [ 626.607078][T28632] lo speed is unknown, defaulting to 1000 [ 626.909885][T28644] syzkaller0: entered promiscuous mode [ 626.916104][T28644] syzkaller0: entered allmulticast mode [ 626.957335][ T11] block nbd3: Possible stuck request ffff8880254e7000: control (read@0,1024B). Runtime 30 seconds [ 626.968552][ T11] block nbd3: Possible stuck request ffff8880254e71c0: control (read@1024,1024B). Runtime 30 seconds [ 626.981218][ T11] block nbd3: Possible stuck request ffff8880254e7380: control (read@2048,1024B). Runtime 30 seconds [ 626.992349][ T11] block nbd3: Possible stuck request ffff8880254e7540: control (read@3072,1024B). Runtime 30 seconds [ 627.104080][T28650] syz_tun: entered allmulticast mode [ 627.128234][T28651] dvmrp8: entered allmulticast mode [ 627.187200][T28649] netlink: 'syz.3.6319': attribute type 23 has an invalid length. [ 627.254757][ T5975] tipc: Node number set to 740252794 [ 627.297218][T28648] syz_tun: left allmulticast mode [ 627.302374][T28648] dvmrp8: left allmulticast mode [ 627.546321][T28658] __nla_validate_parse: 14 callbacks suppressed [ 627.546343][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6322'. [ 627.609072][T28665] netlink: 'syz.1.6324': attribute type 1 has an invalid length. [ 627.617158][T28665] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6324'. [ 627.655941][T28668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6325'. [ 627.797802][T28682] netlink: 'syz.1.6328': attribute type 16 has an invalid length. [ 627.806938][T28682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6328'. [ 627.820729][T28683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6330'. [ 627.830316][T28677] netlink: 'syz.1.6328': attribute type 2 has an invalid length. [ 627.836479][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6331'. [ 627.850437][T28677] netlink: 'syz.1.6328': attribute type 1 has an invalid length. [ 627.871392][T28677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'. [ 628.083395][T28706] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6333'. [ 628.099572][T28708] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6335'. [ 628.120220][T28706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6333'. [ 628.337321][T28716] bridge0: port 1(macvlan2) entered blocking state [ 628.352030][T28716] bridge0: port 1(macvlan2) entered disabled state [ 628.363152][T28716] macvlan2: entered allmulticast mode [ 628.376306][T28716] bridge0: entered allmulticast mode [ 628.386825][T28716] macvlan2: left allmulticast mode [ 628.392007][T28716] bridge0: left allmulticast mode [ 628.542136][T28735] netlink: 'syz.1.6343': attribute type 13 has an invalid length. [ 628.551929][T28735] netlink: 'syz.1.6343': attribute type 17 has an invalid length. [ 628.598359][T28735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.628779][T28737] lo speed is unknown, defaulting to 1000 [ 628.749359][T28735] lo speed is unknown, defaulting to 1000 [ 628.912785][T28748] batadv_slave_0: entered promiscuous mode [ 629.175234][T28762] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 629.249789][T28748] infiniband syz1: set down [ 629.259222][T28748] infiniband syz1: added ipvlan0 [ 629.299863][T28748] RDS/IB: syz1: added [ 629.308494][T28767] netlink: 'syz.3.6352': attribute type 5 has an invalid length. [ 629.308552][T28748] smc: adding ib device syz1 with port count 1 [ 629.323917][T28748] smc: ib device syz1 port 1 has pnetid [ 629.340495][T28767] netlink: 'syz.3.6352': attribute type 7 has an invalid length. [ 629.447798][T28774] mac80211_hwsim hwsim89 wlan1: entered allmulticast mode [ 629.516282][T28774] bond0: (slave dummy0): Releasing backup interface [ 629.568489][T28774] bridge_slave_0: left allmulticast mode [ 629.584607][T28774] bridge_slave_0: left promiscuous mode [ 629.591923][T28774] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.602732][T28789] netlink: 'syz.4.6354': attribute type 10 has an invalid length. [ 629.652760][T28774] bridge_slave_1: left allmulticast mode [ 629.696233][T28774] bridge_slave_1: left promiscuous mode [ 629.701988][T28774] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.745613][T28774] bond0: (slave bond_slave_0): Releasing backup interface [ 629.770453][T28774] bond0: (slave bond_slave_1): Releasing backup interface [ 629.790226][T28774] team0: Port device C removed [ 629.815526][T28774] team0: Port device team_slave_1 removed [ 629.822034][T28774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.836817][T28774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.845797][T28774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.853279][T28774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.869633][T24924] lo speed is unknown, defaulting to 1000 [ 629.876101][T28789] mac80211_hwsim hwsim89 wlan1: left allmulticast mode [ 629.906298][T28789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.936490][T28789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 630.669816][T28838] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 630.896928][T28850] lo speed is unknown, defaulting to 1000 [ 631.136845][T28870] team0: Device macvlan2 is already an upper device of the team interface [ 631.626537][T28903] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 631.718163][T28911] netlink: 'syz.4.6388': attribute type 5 has an invalid length. [ 631.731186][T28911] netlink: 'syz.4.6388': attribute type 7 has an invalid length. [ 631.815499][T28918] netlink: 'syz.4.6390': attribute type 14 has an invalid length. [ 631.834503][T28918] netlink: 'syz.4.6390': attribute type 13 has an invalid length. [ 632.330484][T28940] netlink: 'syz.1.6396': attribute type 6 has an invalid length. [ 632.688342][T28965] : entered promiscuous mode [ 632.768774][T28970] FAULT_INJECTION: forcing a failure. [ 632.768774][T28970] name failslab, interval 1, probability 0, space 0, times 0 [ 632.782091][T28970] CPU: 0 UID: 0 PID: 28970 Comm: syz.3.6405 Not tainted syzkaller #0 PREEMPT(full) [ 632.782116][T28970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.782129][T28970] Call Trace: [ 632.782136][T28970] [ 632.782144][T28970] dump_stack_lvl+0x189/0x250 [ 632.782171][T28970] ? __pfx____ratelimit+0x10/0x10 [ 632.782200][T28970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.782245][T28970] ? __pfx__printk+0x10/0x10 [ 632.782276][T28970] ? __pfx___might_resched+0x10/0x10 [ 632.782296][T28970] ? lock_acquire+0x5f/0x360 [ 632.782326][T28970] should_fail_ex+0x414/0x560 [ 632.782355][T28970] should_failslab+0xa8/0x100 [ 632.782386][T28970] __kmalloc_cache_noprof+0x70/0x3d0 [ 632.782414][T28970] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 632.782435][T28970] ? rcu_is_watching+0x15/0xb0 [ 632.782457][T28970] __xdp_reg_mem_model+0x1d8/0x5a0 [ 632.782481][T28970] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 632.782504][T28970] ? page_pool_create_percpu+0x800/0xbe0 [ 632.782532][T28970] xdp_reg_mem_model+0x22/0x40 [ 632.782553][T28970] bpf_test_run_xdp_live+0x215/0x1b10 [ 632.782587][T28970] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 632.782610][T28970] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 632.782635][T28970] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 632.782666][T28970] ? 0xffffffffa0205540 [ 632.782684][T28970] ? 0xffffffffa0205540 [ 632.782724][T28970] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 632.782749][T28970] ? _copy_from_user+0x94/0xb0 [ 632.782772][T28970] ? bpf_test_init+0x133/0x170 [ 632.782805][T28970] ? xdp_convert_md_to_buff+0x5b/0x330 [ 632.782844][T28970] bpf_prog_test_run_xdp+0x713/0x1000 [ 632.782880][T28970] ? rcu_is_watching+0x15/0xb0 [ 632.782902][T28970] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 632.782936][T28970] ? __fget_files+0x2a/0x420 [ 632.782957][T28970] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 632.782989][T28970] bpf_prog_test_run+0x2c7/0x340 [ 632.783019][T28970] __sys_bpf+0x581/0x870 [ 632.783046][T28970] ? __pfx___sys_bpf+0x10/0x10 [ 632.783070][T28970] ? bpf_trace_run2+0x322/0x4b0 [ 632.783104][T28970] ? lock_release+0x4b/0x3e0 [ 632.783132][T28970] ? __might_fault+0xcc/0x130 [ 632.783162][T28970] ? rcu_is_watching+0x15/0xb0 [ 632.783183][T28970] __x64_sys_bpf+0x7c/0x90 [ 632.783206][T28970] do_syscall_64+0xfa/0x3b0 [ 632.783225][T28970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.783246][T28970] ? clear_bhb_loop+0x60/0xb0 [ 632.783269][T28970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.783289][T28970] RIP: 0033:0x7f813638ebe9 [ 632.783305][T28970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.783323][T28970] RSP: 002b:00007f81371e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.783345][T28970] RAX: ffffffffffffffda RBX: 00007f81365b5fa0 RCX: 00007f813638ebe9 [ 632.783361][T28970] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 632.783374][T28970] RBP: 00007f81371e9090 R08: 0000000000000000 R09: 0000000000000000 [ 632.783387][T28970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.783399][T28970] R13: 00007f81365b6038 R14: 00007f81365b5fa0 R15: 00007ffde24db588 [ 632.783423][T28970] [ 633.307860][T28982] __nla_validate_parse: 26 callbacks suppressed [ 633.316587][T28982] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6408'. [ 633.384636][T28982] unsupported nla_type 58 [ 633.447384][T28987] lo speed is unknown, defaulting to 1000 [ 633.465871][T28982] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 633.849127][T29013] validate_nla: 5 callbacks suppressed [ 633.849149][T29013] netlink: 'syz.3.6418': attribute type 8 has an invalid length. [ 633.891386][T29011] erspan0: entered promiscuous mode [ 633.929381][T29011] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 634.577719][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6426'. [ 634.749193][T29064] netlink: 'syz.5.6431': attribute type 5 has an invalid length. [ 634.761293][T29064] netlink: 'syz.5.6431': attribute type 2 has an invalid length. [ 634.903351][T29071] netlink: 'syz.4.6430': attribute type 303 has an invalid length. [ 635.141807][T29089] syzkaller0: entered promiscuous mode [ 635.149260][T29089] syzkaller0: entered allmulticast mode [ 635.163038][T29092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6442'. [ 635.176531][T29092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6442'. [ 635.227180][T29093] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6441'. [ 635.383364][T29102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.404864][T29102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.422332][T29106] syzkaller0: entered promiscuous mode [ 635.429005][T29106] syzkaller0: entered allmulticast mode [ 635.592423][T29125] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6451'. [ 635.605723][T29125] netlink: zone id is out of range [ 635.610998][T29125] netlink: zone id is out of range [ 635.620170][T29125] netlink: zone id is out of range [ 635.627547][T29125] netlink: zone id is out of range [ 635.635705][T29125] netlink: zone id is out of range [ 635.641029][T29125] netlink: zone id is out of range [ 635.648893][T29125] netlink: zone id is out of range [ 635.770570][T29139] pim6reg: entered allmulticast mode [ 635.934432][T29160] nft_compat: unsupported protocol 0 [ 635.968901][T29154] lo speed is unknown, defaulting to 1000 [ 636.025010][T29168] netlink: 'syz.1.6462': attribute type 4 has an invalid length. [ 636.027829][T29170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6459'. [ 636.067097][T29166] lo speed is unknown, defaulting to 1000 [ 636.087673][T29170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.114197][T29168] netlink: 'syz.1.6462': attribute type 4 has an invalid length. [ 636.168051][T29174] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6463'. [ 636.283029][T29178] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6463'. [ 636.502705][T29197] netlink: 'syz.1.6469': attribute type 5 has an invalid length. [ 636.506490][T29192] netlink: 308 bytes leftover after parsing attributes in process `syz.4.6468'. [ 636.510871][T29197] netlink: 'syz.1.6469': attribute type 7 has an invalid length. [ 636.548859][T29197] : entered promiscuous mode [ 636.589793][T29200] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 636.860809][T28579] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.869830][T28579] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.886043][T28579] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.894925][T28579] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.903363][T28579] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.911999][T28579] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.931750][T28579] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.945415][T28579] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.044343][T29221] netlink: 'syz.5.6477': attribute type 1 has an invalid length. [ 637.110397][T29225] netem: change failed [ 637.570278][T29245] netlink: 'syz.5.6488': attribute type 4 has an invalid length. [ 637.602427][T29246] lo speed is unknown, defaulting to 1000 [ 637.614511][T24941] IPVS: starting estimator thread 0... [ 637.680882][T29251] lo speed is unknown, defaulting to 1000 [ 637.714376][T29253] IPVS: using max 37 ests per chain, 88800 per kthread [ 637.909953][T29263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.945079][T29263] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.021417][T29263] veth0_to_team: entered promiscuous mode [ 638.043063][T29263] veth0_to_team: entered allmulticast mode [ 638.704546][T29296] nbd4: detected capacity change from 0 to 127 [ 638.713073][ T5180] block nbd4: Receive control failed (result -32) [ 638.720068][ T51] block nbd4: Receive control failed (result -32) [ 638.722625][T18779] block nbd4: Send control failed (result -32) [ 638.745861][T18779] block nbd4: Request send failed, requeueing [ 638.760522][ T11] block nbd4: Dead connection, failed to find a fallback [ 638.780335][ T11] block nbd4: shutting down sockets [ 638.786098][ T11] blk_print_req_error: 138 callbacks suppressed [ 638.786116][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.802033][ T11] buffer_io_error: 138 callbacks suppressed [ 638.802052][ T11] Buffer I/O error on dev nbd4, logical block 0, async page read [ 638.819756][T18779] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.837242][T18779] Buffer I/O error on dev nbd4, logical block 1, async page read [ 638.846885][T18779] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.856534][T18779] Buffer I/O error on dev nbd4, logical block 2, async page read [ 638.864509][T18779] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.873288][T29309] syzkaller0: entered promiscuous mode [ 638.878231][T18779] Buffer I/O error on dev nbd4, logical block 3, async page read [ 638.888370][T18779] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.897504][T18779] Buffer I/O error on dev nbd4, logical block 0, async page read [ 638.905570][T18779] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.915704][T18779] Buffer I/O error on dev nbd4, logical block 1, async page read [ 638.923370][T29309] syzkaller0: entered allmulticast mode [ 638.923886][T18779] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 638.987051][T18779] Buffer I/O error on dev nbd4, logical block 2, async page read [ 638.998248][T18779] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.014059][T18779] Buffer I/O error on dev nbd4, logical block 3, async page read [ 639.022795][T18779] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.033450][T29319] __nla_validate_parse: 14 callbacks suppressed [ 639.033473][T29319] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6509'. [ 639.034230][T18779] Buffer I/O error on dev nbd4, logical block 0, async page read [ 639.056943][T18779] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.066564][T18779] Buffer I/O error on dev nbd4, logical block 1, async page read [ 639.076331][T18779] ldm_validate_partition_table(): Disk read failed. [ 639.115651][T29322] ªªªªªª: renamed from wg2 [ 639.148991][T18779] Dev nbd4: unable to read RDB block 0 [ 639.168022][T18779] nbd4: unable to read partition table [ 639.191309][T18779] ldm_validate_partition_table(): Disk read failed. [ 639.234944][T18779] Dev nbd4: unable to read RDB block 0 [ 639.255351][T18779] nbd4: unable to read partition table [ 639.339738][T29336] lo speed is unknown, defaulting to 1000 [ 639.641799][ T30] audit: type=1800 audit(1756495044.309:19): pid=29353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6518" name="memory.events" dev="tmpfs" ino=372 res=0 errno=0 [ 639.716746][T29364] validate_nla: 5 callbacks suppressed [ 639.716766][T29364] netlink: 'syz.3.6521': attribute type 1 has an invalid length. [ 639.782879][T29364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 639.917233][T29374] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6521'. [ 640.026656][T29370] bond2: (slave veth3): Enslaving as an active interface with a down link [ 640.076988][T29364] gretap1: entered promiscuous mode [ 640.095695][T29364] bond2: (slave gretap1): making interface the new active one [ 640.119006][T29364] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 640.193221][T29367] lo speed is unknown, defaulting to 1000 [ 640.247412][T29366] lo speed is unknown, defaulting to 1000 [ 640.345739][T29375] lo speed is unknown, defaulting to 1000 [ 640.358669][T29386] tipc: Cannot configure node identity twice [ 640.473200][T29390] netlink: 'syz.3.6527': attribute type 1 has an invalid length. [ 640.482146][T29390] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6527'. [ 640.873443][T29413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6532'. [ 641.022945][T29418] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6534'. [ 641.035977][T29418] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6534'. [ 641.063985][T29418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6534'. [ 641.306217][T29426] netlink: 'syz.5.6536': attribute type 1 has an invalid length. [ 641.561241][T29449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6542'. [ 641.640458][T29449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.770457][T29449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.771902][T29455] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6544'. [ 641.818903][T29452] syzkaller1: entered allmulticast mode [ 641.832913][T29455] Bluetooth: MGMT ver 1.23 [ 641.900609][T29449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.953380][T29449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.026800][T22196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.045145][T22196] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.061310][T28580] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.077799][T28580] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.259871][T29467] tipc: Can't bind to reserved service type 0 [ 642.329354][T29471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6550'. [ 643.450715][T29521] netlink: 'syz.3.6565': attribute type 5 has an invalid length. [ 643.479289][T29521] netlink: 'syz.3.6565': attribute type 7 has an invalid length. [ 643.480698][T29522] netlink: 'syz.5.6564': attribute type 10 has an invalid length. [ 643.774445][T29543] lo speed is unknown, defaulting to 1000 [ 643.820268][ T5954] IPVS: starting estimator thread 0... [ 643.914135][T29550] IPVS: using max 35 ests per chain, 84000 per kthread [ 644.106697][T29565] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6576'. [ 644.210980][T29567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6577'. [ 644.307497][T29574] netlink: 'syz.3.6579': attribute type 5 has an invalid length. [ 644.318123][T29574] netlink: 'syz.3.6579': attribute type 7 has an invalid length. [ 644.479737][T29586] netlink: 'syz.2.6583': attribute type 5 has an invalid length. [ 644.596006][T29591] netlink: 'syz.2.6586': attribute type 1 has an invalid length. [ 644.607483][T29596] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.6589'. [ 644.961270][T29623] netlink: 'syz.2.6596': attribute type 5 has an invalid length. [ 645.346607][T29637] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6598'. [ 645.510250][ T6731] bond4 (unregistering): (slave geneve2): Releasing active interface [ 645.621405][T29649] sctp: [Deprecated]: syz.4.6602 (pid 29649) Use of int in maxseg socket option. [ 645.621405][T29649] Use struct sctp_assoc_value instead [ 645.770976][ T6731] tipc: Disabling bearer [ 645.917031][ T6731] bond1 (unregistering): Released all slaves [ 645.929190][ T6731] bond2 (unregistering): Released all slaves [ 645.940948][ T6731] bond3 (unregistering): Released all slaves [ 645.952003][ T6731] bond4 (unregistering): Released all slaves [ 645.967252][ T6731] bond0 (unregistering): Released all slaves [ 645.998052][T29637] batadv1: entered promiscuous mode [ 646.003369][T29637] batadv1: entered allmulticast mode [ 646.079100][T29631] lo speed is unknown, defaulting to 1000 [ 646.096988][ T6731] tipc: Disabling bearer [ 646.102158][ T6731] tipc: Disabling bearer [ 646.108376][ T6731] tipc: Left network mode [ 646.119266][T29654] lo speed is unknown, defaulting to 1000 [ 646.222450][T29665] ip6gre1: entered promiscuous mode [ 646.365304][T29670] netlink: 'syz.1.6608': attribute type 5 has an invalid length. [ 646.373101][T29670] netlink: 'syz.1.6608': attribute type 7 has an invalid length. [ 646.447955][T29674] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 646.516696][T29678] netlink: 'syz.2.6611': attribute type 7 has an invalid length. [ 646.964091][T29695] lo speed is unknown, defaulting to 1000 [ 647.039057][T29698] lo speed is unknown, defaulting to 1000 [ 647.407575][T29720] netlink: 'syz.5.6621': attribute type 13 has an invalid length. [ 647.446615][T29720] netlink: 'syz.5.6621': attribute type 17 has an invalid length. [ 647.526912][T29720] net_ratelimit: 34 callbacks suppressed [ 647.526922][T29720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.967257][T29734] lo speed is unknown, defaulting to 1000 [ 648.068771][T29736] lo speed is unknown, defaulting to 1000 [ 648.385741][T29744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6630'. [ 648.447111][T29749] netlink: 'syz.4.6633': attribute type 7 has an invalid length. [ 648.536871][ T6731] hsr_slave_0: left promiscuous mode [ 648.554355][ T6731] team0: left promiscuous mode [ 648.559404][T29752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6630'. [ 648.641429][T29760] IPVS: length: 209 != 24 [ 648.869068][ T6731] vxcan1 (unregistering): left allmulticast mode [ 649.128468][T29775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6639'. [ 649.221331][T29779] lo speed is unknown, defaulting to 1000 [ 649.318173][T29789] FAULT_INJECTION: forcing a failure. [ 649.318173][T29789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.337399][T29789] CPU: 0 UID: 0 PID: 29789 Comm: syz.5.6643 Not tainted syzkaller #0 PREEMPT(full) [ 649.337429][T29789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.337443][T29789] Call Trace: [ 649.337451][T29789] [ 649.337460][T29789] dump_stack_lvl+0x189/0x250 [ 649.337491][T29789] ? __pfx____ratelimit+0x10/0x10 [ 649.337522][T29789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 649.337548][T29789] ? __pfx__printk+0x10/0x10 [ 649.337581][T29789] ? rcu_is_watching+0x15/0xb0 [ 649.337604][T29789] should_fail_ex+0x414/0x560 [ 649.337634][T29789] _copy_to_user+0x31/0xb0 [ 649.337659][T29789] simple_read_from_buffer+0xe1/0x170 [ 649.337692][T29789] proc_fail_nth_read+0x1b3/0x220 [ 649.337718][T29789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.337743][T29789] ? rw_verify_area+0x2a6/0x4d0 [ 649.337769][T29789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 649.337793][T29789] vfs_read+0x1fd/0xa30 [ 649.337818][T29789] ? fdget_pos+0x247/0x320 [ 649.337839][T29789] ? __pfx___mutex_lock+0x10/0x10 [ 649.337859][T29789] ? __pfx_vfs_read+0x10/0x10 [ 649.337890][T29789] ? __fget_files+0x3a0/0x420 [ 649.337907][T29789] ? __fget_files+0x2a/0x420 [ 649.337930][T29789] ksys_read+0x145/0x250 [ 649.337958][T29789] ? __pfx_ksys_read+0x10/0x10 [ 649.337983][T29789] ? rcu_is_watching+0x15/0xb0 [ 649.338006][T29789] ? rcu_is_watching+0x15/0xb0 [ 649.338028][T29789] do_syscall_64+0xfa/0x3b0 [ 649.338048][T29789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.338070][T29789] ? clear_bhb_loop+0x60/0xb0 [ 649.338093][T29789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.338114][T29789] RIP: 0033:0x7f5079f8d5fc [ 649.338132][T29789] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 649.338151][T29789] RSP: 002b:00007f507ad2b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 649.338173][T29789] RAX: ffffffffffffffda RBX: 00007f507a1b5fa0 RCX: 00007f5079f8d5fc [ 649.338189][T29789] RDX: 000000000000000f RSI: 00007f507ad2b0a0 RDI: 0000000000000005 [ 649.338203][T29789] RBP: 00007f507ad2b090 R08: 0000000000000000 R09: 0000000000000000 [ 649.338216][T29789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.338229][T29789] R13: 00007f507a1b6038 R14: 00007f507a1b5fa0 R15: 00007ffcff19b318 [ 649.338255][T29789] [ 649.347090][T29794] bridge_slave_0: left allmulticast mode [ 649.555350][T29791] netlink: 'syz.1.6645': attribute type 10 has an invalid length. [ 649.600084][T29794] bridge_slave_0: left promiscuous mode [ 649.606592][T29794] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.620598][T29794] bridge_slave_1: left allmulticast mode [ 649.626868][T29794] bridge_slave_1: left promiscuous mode [ 649.632735][T29794] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.656810][T29794] bond0: (slave bond_slave_0): Releasing backup interface [ 649.667019][T29794] bond0: (slave bond_slave_1): Releasing backup interface [ 649.681748][T29794] team0: Port device team_slave_0 removed [ 649.695064][T29794] team0: Port device team_slave_1 removed [ 649.701521][T29794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.709246][T29794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.720343][T29794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.728609][T29794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.768271][T29804] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6648'. [ 649.846268][T29791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 650.144341][T29819] netlink: 788 bytes leftover after parsing attributes in process `syz.3.6651'. [ 650.236054][ T6731] IPVS: stop unused estimator thread 0... [ 650.581221][T29833] lo speed is unknown, defaulting to 1000 [ 650.639116][T29841] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6657'. [ 650.645813][T29840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6657'. [ 650.930217][T29853] netlink: 'syz.3.6658': attribute type 9 has an invalid length. [ 650.944266][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6660'. [ 650.960504][T29852] netlink: 'syz.4.6660': attribute type 1 has an invalid length. [ 650.973396][T29853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6658'. [ 651.050826][T29852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6660'. [ 651.186248][T29834] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6654'. [ 651.671603][T29877] syzkaller1: entered promiscuous mode [ 651.695639][T29877] syzkaller1: entered allmulticast mode [ 651.743384][ T6732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.754691][ T6732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.860133][T29890] !: renamed from dummy0 (while UP) [ 652.147795][T29906] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 652.158963][T29900] lo speed is unknown, defaulting to 1000 [ 652.186558][T29906] netlink: 'syz.1.6674': attribute type 1 has an invalid length. [ 652.194422][T29906] netlink: 'syz.1.6674': attribute type 1 has an invalid length. [ 652.202155][T29906] netlink: 'syz.1.6674': attribute type 2 has an invalid length. [ 652.210612][T29906] netlink: 'syz.1.6674': attribute type 2 has an invalid length. [ 652.283708][T29908] netlink: 'syz.5.6673': attribute type 303 has an invalid length. [ 652.305856][T29908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6673'. [ 652.799345][T29924] netlink: 'syz.4.6676': attribute type 1 has an invalid length. [ 652.862876][T29924] bond4: entered promiscuous mode [ 652.884444][T29924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 652.890869][T29929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.898336][T29929] IPv6: NLM_F_CREATE should be set when creating new route [ 652.905558][T29929] IPv6: NLM_F_CREATE should be set when creating new route [ 652.936293][T29929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 653.282684][T29957] netlink: 'syz.1.6688': attribute type 5 has an invalid length. [ 653.312124][T29957] netlink: 'syz.1.6688': attribute type 7 has an invalid length. [ 653.446165][T29956] tc_dump_action: action bad kind [ 653.471324][T29964] lo speed is unknown, defaulting to 1000 [ 653.516921][T29973] dvmrp0: left allmulticast mode [ 653.517372][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 653.943033][T29967] veth0_to_bridge: left promiscuous mode [ 653.948948][T29967] veth0_to_bridge: left allmulticast mode [ 654.255911][T29967] vlan0: left promiscuous mode [ 654.260885][T29967] vlan0: left allmulticast mode [ 654.266815][T29967] hsr_slave_1: left allmulticast mode [ 654.275983][T29967] bond4: left promiscuous mode [ 654.284041][ T7897] lo speed is unknown, defaulting to 1000 [ 654.289804][ T7897] syz2: Port: 1 Link DOWN [ 654.303034][T30008] tipc: Enabled bearer , priority 0 [ 654.318488][T29978] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 654.332663][T30011] syzkaller0: entered promiscuous mode [ 654.366594][T30011] syzkaller0: entered allmulticast mode [ 654.388957][T22196] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.400353][T30020] tipc: Resetting bearer [ 654.421596][T29983] tipc: Resetting bearer [ 654.451697][T29983] tipc: Disabling bearer [ 654.477262][T22196] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.493328][T22196] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.599362][T22196] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.831800][T30033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 654.857600][T30042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.919329][T30047] lo speed is unknown, defaulting to 1000 [ 655.057189][T30033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.138165][T30058] __nla_validate_parse: 3 callbacks suppressed [ 655.138187][T30058] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6703'. [ 655.165930][T30058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6703'. [ 655.186144][T30058] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6703'. [ 655.198628][T30058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6703'. [ 655.209664][T30058] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6703'. [ 655.235887][T30060] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 655.484821][T30068] syzkaller1: entered promiscuous mode [ 655.490332][T30068] syzkaller1: entered allmulticast mode [ 655.745666][T30079] lo speed is unknown, defaulting to 1000 [ 655.989042][T30097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6713'. [ 656.138659][T30099] lo speed is unknown, defaulting to 1000 [ 656.239028][T30106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6716'. [ 656.260677][T30106] veth1_macvtap: left promiscuous mode [ 656.527248][T30081] delete_channel: no stack [ 656.765419][T30120] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6719'. [ 656.816910][T30124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6719'. [ 656.923278][T30124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6719'. [ 657.034705][ T11] block nbd3: Possible stuck request ffff8880254e7000: control (read@0,1024B). Runtime 60 seconds [ 657.045863][ T11] block nbd3: Possible stuck request ffff8880254e71c0: control (read@1024,1024B). Runtime 60 seconds [ 657.056840][ T11] block nbd3: Possible stuck request ffff8880254e7380: control (read@2048,1024B). Runtime 60 seconds [ 657.067818][ T11] block nbd3: Possible stuck request ffff8880254e7540: control (read@3072,1024B). Runtime 60 seconds [ 657.214770][T30133] syz_tun: entered promiscuous mode [ 657.472713][T30159] team0: Device gtp0 is of different type [ 657.515600][T30162] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.639880][T30170] validate_nla: 5 callbacks suppressed [ 657.639898][T30170] netlink: 'syz.5.6733': attribute type 7 has an invalid length. [ 657.650356][T30162] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.664130][T30170] FAULT_INJECTION: forcing a failure. [ 657.664130][T30170] name failslab, interval 1, probability 0, space 0, times 0 [ 657.681665][T30170] CPU: 0 UID: 0 PID: 30170 Comm: syz.5.6733 Not tainted syzkaller #0 PREEMPT(full) [ 657.681693][T30170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.681707][T30170] Call Trace: [ 657.681715][T30170] [ 657.681724][T30170] dump_stack_lvl+0x189/0x250 [ 657.681753][T30170] ? __pfx____ratelimit+0x10/0x10 [ 657.681782][T30170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.681805][T30170] ? __pfx__printk+0x10/0x10 [ 657.681832][T30170] ? fs_reclaim_acquire+0x7d/0x100 [ 657.681862][T30170] ? rcu_is_watching+0x15/0xb0 [ 657.681881][T30170] ? __pfx___might_resched+0x10/0x10 [ 657.681898][T30170] ? lock_acquire+0x5f/0x360 [ 657.681926][T30170] should_fail_ex+0x414/0x560 [ 657.681954][T30170] should_failslab+0xa8/0x100 [ 657.681983][T30170] __kmalloc_cache_noprof+0x70/0x3d0 [ 657.682008][T30170] ? ovs_flow_tbl_init+0x57/0x800 [ 657.682034][T30170] ovs_flow_tbl_init+0x57/0x800 [ 657.682058][T30170] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 657.682083][T30170] ? ovs_dp_cmd_new+0x1ac/0xaf0 [ 657.682111][T30170] ovs_dp_cmd_new+0x24b/0xaf0 [ 657.682145][T30170] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 657.682175][T30170] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 657.682204][T30170] genl_family_rcv_msg_doit+0x212/0x300 [ 657.682231][T30170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 657.682261][T30170] ? bpf_lsm_capable+0x9/0x20 [ 657.682287][T30170] ? security_capable+0x7e/0x2e0 [ 657.682318][T30170] genl_rcv_msg+0x60e/0x790 [ 657.682343][T30170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.682419][T30170] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 657.682457][T30170] ? __asan_memcpy+0x40/0x70 [ 657.682481][T30170] ? __pfx_ref_tracker_free+0x10/0x10 [ 657.682513][T30170] netlink_rcv_skb+0x208/0x470 [ 657.682544][T30170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.682568][T30170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.682602][T30170] ? lock_release+0x4b/0x3e0 [ 657.682632][T30170] ? down_read+0x1ad/0x2e0 [ 657.682657][T30170] genl_rcv+0x28/0x40 [ 657.682678][T30170] netlink_unicast+0x82f/0x9e0 [ 657.682708][T30170] ? __pfx_netlink_unicast+0x10/0x10 [ 657.682735][T30170] ? netlink_sendmsg+0x642/0xb30 [ 657.682750][T30170] ? skb_put+0x11b/0x210 [ 657.682770][T30170] netlink_sendmsg+0x805/0xb30 [ 657.682792][T30170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.682820][T30170] ? aa_sock_msg_perm+0xf1/0x1d0 [ 657.682838][T30170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.682859][T30170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.682876][T30170] __sock_sendmsg+0x21c/0x270 [ 657.682902][T30170] ____sys_sendmsg+0x505/0x830 [ 657.682925][T30170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.682949][T30170] ? import_iovec+0x74/0xa0 [ 657.682972][T30170] ___sys_sendmsg+0x21f/0x2a0 [ 657.682992][T30170] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.683030][T30170] ? __fget_files+0x2a/0x420 [ 657.683046][T30170] ? __fget_files+0x3a0/0x420 [ 657.683067][T30170] __x64_sys_sendmsg+0x19b/0x260 [ 657.683088][T30170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.683114][T30170] ? __pfx_ksys_write+0x10/0x10 [ 657.683137][T30170] ? rcu_is_watching+0x15/0xb0 [ 657.683157][T30170] ? rcu_is_watching+0x15/0xb0 [ 657.683177][T30170] do_syscall_64+0xfa/0x3b0 [ 657.683195][T30170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.683213][T30170] ? clear_bhb_loop+0x60/0xb0 [ 657.683234][T30170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.683252][T30170] RIP: 0033:0x7f5079f8ebe9 [ 657.683270][T30170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.683287][T30170] RSP: 002b:00007f507ad2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.683308][T30170] RAX: ffffffffffffffda RBX: 00007f507a1b5fa0 RCX: 00007f5079f8ebe9 [ 657.683322][T30170] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 657.683335][T30170] RBP: 00007f507ad2b090 R08: 0000000000000000 R09: 0000000000000000 [ 657.683348][T30170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.683359][T30170] R13: 00007f507a1b6038 R14: 00007f507a1b5fa0 R15: 00007ffcff19b318 [ 657.683382][T30170] [ 658.140883][T30168] syzkaller0: entered promiscuous mode [ 658.155824][T30168] syzkaller0: entered allmulticast mode [ 658.174012][T30162] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.288879][T30162] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.378429][T30184] lo speed is unknown, defaulting to 1000 [ 658.413896][ T6732] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.442380][ T6732] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.459782][ T6732] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.496802][ T6732] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.072627][T30230] mac80211_hwsim hwsim89 wlan1: Master is either lo or non-ether device [ 659.112573][T30230] netlink: 'syz.4.6749': attribute type 10 has an invalid length. [ 659.130445][T30229] lo speed is unknown, defaulting to 1000 [ 659.208664][ T5180] Bluetooth: hci1: link tx timeout [ 659.214315][ T5180] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 659.566765][T30262] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 659.652693][T30272] sctp: [Deprecated]: syz.5.6761 (pid 30272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 659.652693][T30272] Use struct sctp_sack_info instead [ 659.704223][T30261] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 659.711866][T30261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.175044][T30309] __nla_validate_parse: 18 callbacks suppressed [ 660.175065][T30309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6772'. [ 660.191391][T30309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6772'. [ 660.277847][T30321] ªªªªªª: renamed from wg2 (while UP) [ 660.372302][T30325] lo speed is unknown, defaulting to 1000 [ 660.379602][T30330] veth0_macvtap: entered allmulticast mode [ 660.411828][T30329] tipc: Enabled bearer , priority 0 [ 660.428150][T30332] vlan2: entered promiscuous mode [ 660.433309][T30332] macvtap0: entered promiscuous mode [ 660.451623][T30335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6777'. [ 660.479820][T30337] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6778'. [ 660.538817][T30340] sctp: [Deprecated]: syz.2.6781 (pid 30340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.538817][T30340] Use struct sctp_sack_info instead [ 660.562707][T30329] tipc: Disabling bearer [ 660.659754][T30349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6783'. [ 660.714973][T30357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6782'. [ 660.758911][T30352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6784'. [ 660.814910][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6784'. [ 660.837287][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6784'. [ 660.848450][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6784'. [ 660.964544][T30372] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 660.994322][T30382] netlink: 'syz.3.6792': attribute type 7 has an invalid length. [ 661.012147][T30372] bond0 (unregistering): Released all slaves [ 661.035092][T30384] netlink: 'syz.4.6791': attribute type 5 has an invalid length. [ 661.203336][T30397] ipvlan1: mtu less than device minimum [ 661.273800][ T5180] Bluetooth: hci1: command 0x0405 tx timeout [ 661.297854][T30402] netlink: 'syz.3.6800': attribute type 7 has an invalid length. [ 661.362159][T30395] lo speed is unknown, defaulting to 1000 [ 661.788047][T30377] delete_channel: no stack [ 662.804179][T30459] syz_tun: entered allmulticast mode [ 662.807128][T30461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.992443][T30459] dvmrp8: entered allmulticast mode [ 663.015159][T30458] syz_tun: left allmulticast mode [ 663.020970][T30458] dvmrp8: left allmulticast mode [ 663.163315][T30476] netlink: 'syz.3.6824': attribute type 5 has an invalid length. [ 663.184329][T30476] netlink: 'syz.3.6824': attribute type 6 has an invalid length. [ 663.216125][T30481] netlink: 'syz.5.6822': attribute type 12 has an invalid length. [ 663.307376][T30480] tipc: Enabling of bearer rejected, failed to enable media [ 663.466411][T30496] netlink: 'syz.4.6831': attribute type 1 has an invalid length. [ 663.494958][T30502] netlink: del zone limit has 4 unknown bytes [ 663.682222][T30516] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595) [ 663.692248][T30525] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 663.718005][T30516] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 663.741190][T30531] netlink: 'syz.2.6841': attribute type 4 has an invalid length. [ 663.767793][T30531] netlink: 'syz.2.6841': attribute type 4 has an invalid length. [ 663.892556][T30543] siw: device registration error -23 [ 663.976739][T30552] 0ªX¹¦À: renamed from caif0 [ 663.988942][T30552] 0ªX¹¦À: entered allmulticast mode [ 663.996168][T30552] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 664.290590][T30579] sctp: [Deprecated]: syz.1.6858 (pid 30579) Use of int in max_burst socket option. [ 664.290590][T30579] Use struct sctp_assoc_value instead [ 664.321644][T30582] lo speed is unknown, defaulting to 1000 [ 664.349248][T30586] tipc: Enabled bearer , priority 0 [ 664.417521][T30586] syzkaller0: entered promiscuous mode [ 664.423161][T30586] syzkaller0: entered allmulticast mode [ 664.537170][T30583] tipc: Resetting bearer [ 664.579336][T30583] tipc: Disabling bearer [ 664.609892][T30581] lo speed is unknown, defaulting to 1000 [ 665.070869][ T30] audit: type=1800 audit(1756495069.739:20): pid=30612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6866" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1051 res=0 errno=0 [ 665.148083][T30617] netlink: 'syz.2.6868': attribute type 18 has an invalid length. [ 665.292440][T30627] __nla_validate_parse: 21 callbacks suppressed [ 665.292460][T30627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6871'. [ 665.341639][T30628] netlink: 'syz.2.6872': attribute type 5 has an invalid length. [ 665.385365][T30627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6871'. [ 665.591421][T30647] lo speed is unknown, defaulting to 1000 [ 665.661344][T30650] netlink: 'syz.4.6876': attribute type 2 has an invalid length. [ 665.671347][T30650] netlink: 'syz.4.6876': attribute type 2 has an invalid length. [ 665.795832][T30656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6878'. [ 665.815427][T30654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6878'. [ 666.175944][T30666] dvmrp8: entered allmulticast mode [ 666.186255][T30666] dvmrp8: left allmulticast mode [ 666.388083][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6884'. [ 666.487885][T30683] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6887'. [ 666.526041][T30686] k›*·]‘: entered promiscuous mode [ 666.645866][T30686] 0ªX¹¦À: left allmulticast mode [ 666.652973][T30677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6884'. [ 666.675273][T30686] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 666.750711][T30686] veth0_to_team: entered promiscuous mode [ 666.764301][T30686] veth0_to_team: entered allmulticast mode [ 666.808917][T30695] lo speed is unknown, defaulting to 1000 [ 666.879742][T30702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6892'. [ 667.062117][T30712] lo speed is unknown, defaulting to 1000 [ 667.478580][T30725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6900'. [ 667.630214][T30729] macvlan3: entered allmulticast mode [ 667.633519][T30730] netlink: 1532 bytes leftover after parsing attributes in process `syz.1.6901'. [ 667.638240][T30729] veth1_vlan: entered allmulticast mode [ 667.645344][T30730] nbd: must specify a device to reconfigure [ 667.670727][T30729] veth1_vlan: left allmulticast mode [ 667.700257][T30718] lo speed is unknown, defaulting to 1000 [ 667.886098][T30740] IPVS: length: 176 != 8 [ 668.647472][T30770] validate_nla: 4 callbacks suppressed [ 668.647492][T30770] netlink: 'syz.3.6913': attribute type 4 has an invalid length. [ 668.884613][T30787] lo speed is unknown, defaulting to 1000 [ 669.141604][T30803] ÿÿÿÿÿÿ: renamed from vlan1 [ 669.230598][T30805] bond0: Device is already in use. [ 669.557065][T29997] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 669.584952][T29997] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 669.936833][T30854] macsec0: entered promiscuous mode [ 669.942782][T30854] bridge0: port 1(macsec0) entered blocking state [ 669.961268][T30854] bridge0: port 1(macsec0) entered disabled state [ 669.968617][T30854] macsec0: entered allmulticast mode [ 669.978807][T30854] bridge0: entered allmulticast mode [ 669.988072][T30854] macsec0: left allmulticast mode [ 670.011762][T30854] bridge0: left allmulticast mode [ 670.666098][T30914] __nla_validate_parse: 9 callbacks suppressed [ 670.666121][T30914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6955'. [ 670.723888][T30908] bridge0: port 3(erspan0) entered blocking state [ 670.730871][T30908] bridge0: port 3(erspan0) entered disabled state [ 670.767798][T30908] erspan0: entered allmulticast mode [ 670.797292][T30908] erspan0: entered promiscuous mode [ 670.821080][T30918] netlink: 'syz.5.6957': attribute type 1 has an invalid length. [ 670.837138][T30908] bridge0: port 3(erspan0) entered blocking state [ 670.843714][T30908] bridge0: port 3(erspan0) entered forwarding state [ 670.948681][T30922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6958'. [ 670.989692][T30913] erspan0: left allmulticast mode [ 671.007825][T30913] erspan0: left promiscuous mode [ 671.012999][T30913] bridge0: port 3(erspan0) entered disabled state [ 671.224257][T30934] syzkaller1: entered promiscuous mode [ 671.231471][T30934] syzkaller1: entered allmulticast mode [ 671.297389][T30939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6963'. [ 671.497253][T30948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6965'. [ 671.518373][T30948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6965'. [ 671.565532][T30948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6965'. [ 671.589330][T30948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6965'. [ 671.608787][T30948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6965'. [ 671.622046][T30948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6965'. [ 671.631416][T30948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6965'. [ 671.668648][T30960] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 671.678936][T30958] IPVS: stopping backup sync thread 30960 ... [ 671.801298][T30964] syzkaller0: left promiscuous mode [ 671.830682][T30964] syzkaller0: left allmulticast mode [ 671.912391][T30972] netlink: 'syz.3.6973': attribute type 1 has an invalid length. [ 672.006041][T30968] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 672.052450][T30978] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 672.080757][T30968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 672.092799][T28580] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 672.182410][T30968] veth5: entered promiscuous mode [ 672.232445][T30968] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 672.244456][T22196] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 672.328071][T30994] tipc: Invalid UDP bearer configuration [ 672.328110][T30994] tipc: Enabling of bearer rejected, failed to enable media [ 672.359120][T30994] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 672.423066][T30996] netlink: 'syz.4.6978': attribute type 7 has an invalid length. [ 672.933872][T31007] macsec0: entered promiscuous mode [ 672.939479][T31007] macsec0: entered allmulticast mode [ 672.950097][T31007] mac80211_hwsim hwsim92 wlan0: entered allmulticast mode [ 673.199925][T31023] tipc: Enabled bearer , priority 0 [ 673.224287][T31023] syzkaller0: entered promiscuous mode [ 673.234121][T31023] syzkaller0: entered allmulticast mode [ 673.282028][T31023] tipc: Resetting bearer [ 673.320245][T31021] lo speed is unknown, defaulting to 1000 [ 673.439018][T31036] netlink: 'syz.3.6989': attribute type 4 has an invalid length. [ 673.511103][T31036] netlink: 'syz.3.6989': attribute type 4 has an invalid length. [ 673.745494][T31059] netlink: 'syz.3.6993': attribute type 4 has an invalid length. [ 673.755780][T31067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.232079][T31088] netlink: 'syz.4.7000': attribute type 7 has an invalid length. [ 674.248050][T31089] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 674.265934][T29997] tipc: Node number set to 2432197296 [ 674.348535][T31093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 674.551056][T31106] tipc: Enabling of bearer rejected, failed to enable media [ 675.479930][T31156] netlink: 'syz.4.7013': attribute type 13 has an invalid length. [ 675.488705][T31156] netlink: 'syz.4.7013': attribute type 17 has an invalid length. [ 675.610147][T31156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.632962][T31156] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.669834][T31156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.710805][ T5917] lo speed is unknown, defaulting to 1000 [ 675.719818][ T5917] syz2: Port: 1 Link ACTIVE [ 675.720217][T31167] __nla_validate_parse: 44 callbacks suppressed [ 675.720237][T31167] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7016'. [ 675.759653][T31161] lo speed is unknown, defaulting to 1000 [ 675.856262][T31169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7017'. [ 675.884699][T31169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7017'. [ 675.952192][T31173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7018'. [ 676.095757][T31179] mac80211_hwsim hwsim89 wlan1: entered allmulticast mode [ 676.107039][ C1] Unknown status report in ack skb [ 676.151216][T31179] bond0: (slave wlan1): Releasing backup interface [ 676.176471][T31183] netlink: 'syz.4.7020': attribute type 10 has an invalid length. [ 676.249171][T31183] mac80211_hwsim hwsim89 wlan1: left allmulticast mode [ 676.261215][T31187] Unsupported ieee802154 address type: 0 [ 676.280622][T31183] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 676.396422][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7025'. [ 676.509368][T31207] syz_tun: entered allmulticast mode [ 676.519160][T31209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7028'. [ 676.671762][T31207] siw: device registration error -23 [ 676.692596][T31207] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 676.741645][T31205] syz_tun: left allmulticast mode [ 676.760641][T31213] lo speed is unknown, defaulting to 1000 [ 676.793007][T31214] lo speed is unknown, defaulting to 1000 [ 676.982781][T31236] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7035'. [ 677.168458][T31244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.661871][T31257] vlan0: entered promiscuous mode [ 677.683185][T31257] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7040'. [ 677.876586][T31273] syzkaller0: Caught tx_queue_len zero misconfig [ 677.894792][T31279] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7044'. [ 677.904404][T31279] netlink: zone id is out of range [ 677.909571][T31279] netlink: zone id is out of range [ 677.923999][T31279] netlink: zone id is out of range [ 677.931906][T31279] netlink: zone id is out of range [ 677.938648][T31279] netlink: zone id is out of range [ 677.945478][T31279] netlink: zone id is out of range [ 677.958110][T31281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 677.967287][T31279] netlink: zone id is out of range [ 677.975744][T31279] netlink: zone id is out of range [ 677.994134][T31279] netlink: zone id is out of range [ 678.001254][T31279] netlink: get zone limit has 8 unknown bytes [ 678.009206][T31281] erspan0: entered promiscuous mode [ 678.015104][T31281] macvtap0: entered promiscuous mode [ 678.020555][T31281] macvtap0: entered allmulticast mode [ 678.027667][T31281] erspan0: entered allmulticast mode [ 678.145752][T31294] netlink: 'syz.3.7050': attribute type 10 has an invalid length. [ 678.172205][T31294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.190009][T31294] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 678.795546][T31324] syzkaller1: entered promiscuous mode [ 678.809988][T31324] syzkaller1: entered allmulticast mode [ 679.004905][T31333] bond0: entered promiscuous mode [ 679.010409][T31333] bond_slave_0: entered promiscuous mode [ 679.031381][T31333] bond_slave_1: entered promiscuous mode [ 679.039238][T31333] batadv0: entered promiscuous mode [ 679.053766][T31333] bond0: left promiscuous mode [ 679.058711][T31333] bond_slave_0: left promiscuous mode [ 679.064710][T31333] bond_slave_1: left promiscuous mode [ 679.070404][T31333] batadv0: left promiscuous mode [ 679.330062][T31354] veth1_to_bridge: entered allmulticast mode [ 679.358570][T22196] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.479397][T31358] lo speed is unknown, defaulting to 1000 [ 679.666768][T31369] lo speed is unknown, defaulting to 1000 [ 680.237094][T31391] netlink: 'syz.1.7076': attribute type 13 has an invalid length. [ 680.537364][T31417] macvtap1: entered promiscuous mode [ 680.553733][T31417] macvtap1: entered allmulticast mode [ 680.738750][T31424] netlink: 'syz.3.7085': attribute type 3 has an invalid length. [ 680.770130][T31426] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 680.815162][T31428] __nla_validate_parse: 11 callbacks suppressed [ 680.815182][T31428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7086'. [ 680.831655][T31428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7086'. [ 681.008901][T31440] netlink: 'syz.1.7089': attribute type 12 has an invalid length. [ 681.080240][T31441] lo speed is unknown, defaulting to 1000 [ 681.182912][T31452] netlink: 300 bytes leftover after parsing attributes in process `syz.1.7094'. [ 681.247582][T31455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7095'. [ 681.264151][T31453] nbd: socks must be embedded in a SOCK_ITEM attr [ 681.268706][T31455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7095'. [ 681.303492][T31453] block nbd6: shutting down sockets [ 681.442324][T31458] tipc: Enabling of bearer rejected, already enabled [ 681.479629][T31465] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7098'. [ 681.490378][T31465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7098'. [ 681.560453][T31469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7098'. [ 681.686113][T31480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7103'. [ 681.703368][T31480] tipc: Enabling of bearer rejected, already enabled [ 681.846494][T31489] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7105'. [ 682.196404][T31517] netlink: 'syz.4.7116': attribute type 5 has an invalid length. [ 682.354864][T31532] bond_slave_0: entered promiscuous mode [ 682.360580][T31532] bond_slave_1: entered promiscuous mode [ 682.366286][T31532] batadv0: entered promiscuous mode [ 682.386570][T31532] macvlan2: entered promiscuous mode [ 682.391895][T31532] bond0: entered promiscuous mode [ 682.406261][T31532] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 682.424286][T31541] netlink: 'syz.4.7121': attribute type 1 has an invalid length. [ 682.440709][T31536] macvtap1: entered promiscuous mode [ 682.453262][T31536] erspan0: entered promiscuous mode [ 682.461476][T31536] macvtap1: entered allmulticast mode [ 682.467955][T31536] erspan0: entered allmulticast mode [ 682.491116][T31541] 8021q: adding VLAN 0 to HW filter on device bond6 [ 682.941476][T31572] lo speed is unknown, defaulting to 1000 [ 683.000217][T31579] lo speed is unknown, defaulting to 1000 [ 683.512491][T31597] netlink: 'syz.5.7136': attribute type 9 has an invalid length. [ 683.636854][T31604] macvtap2: entered promiscuous mode [ 683.651504][T31604] macvtap2: entered allmulticast mode [ 683.837702][T31613] net_ratelimit: 15 callbacks suppressed [ 683.837723][T31613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.088997][T31626] tipc: Enabled bearer , priority 0 [ 684.102852][T31626] syzkaller0: entered promiscuous mode [ 684.120433][T31626] syzkaller0: entered allmulticast mode [ 684.273629][T31649] FAULT_INJECTION: forcing a failure. [ 684.273629][T31649] name failslab, interval 1, probability 0, space 0, times 0 [ 684.286326][T31649] CPU: 0 UID: 0 PID: 31649 Comm: syz.5.7152 Not tainted syzkaller #0 PREEMPT(full) [ 684.286364][T31649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 684.286378][T31649] Call Trace: [ 684.286387][T31649] [ 684.286396][T31649] dump_stack_lvl+0x189/0x250 [ 684.286427][T31649] ? __pfx____ratelimit+0x10/0x10 [ 684.286459][T31649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.286485][T31649] ? __pfx__printk+0x10/0x10 [ 684.286512][T31649] ? pfn_valid+0x125/0x4d0 [ 684.286536][T31649] ? __asan_memcpy+0x40/0x70 [ 684.286563][T31649] should_fail_ex+0x414/0x560 [ 684.286595][T31649] should_failslab+0xa8/0x100 [ 684.286627][T31649] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 684.286658][T31649] ? lock_release+0x4b/0x3e0 [ 684.286690][T31649] ? pfn_valid+0x125/0x4d0 [ 684.286710][T31649] ? pfn_valid+0x125/0x4d0 [ 684.286732][T31649] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 684.286774][T31649] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 684.286813][T31649] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 684.286865][T31649] ? 0xffffffffa0205540 [ 684.286884][T31649] ? 0xffffffffa0205540 [ 684.286911][T31649] ? 0xffffffffa02018cc [ 684.286945][T31649] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 684.286973][T31649] ? _copy_from_user+0x94/0xb0 [ 684.286998][T31649] ? bpf_test_init+0x133/0x170 [ 684.287039][T31649] ? xdp_convert_md_to_buff+0x5b/0x330 [ 684.287073][T31649] bpf_prog_test_run_xdp+0x713/0x1000 [ 684.287112][T31649] ? rcu_is_watching+0x15/0xb0 [ 684.287136][T31649] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 684.287171][T31649] ? __fget_files+0x2a/0x420 [ 684.287194][T31649] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 684.287227][T31649] bpf_prog_test_run+0x2c7/0x340 [ 684.287259][T31649] __sys_bpf+0x581/0x870 [ 684.287288][T31649] ? __pfx___sys_bpf+0x10/0x10 [ 684.287323][T31649] ? ksys_write+0x22a/0x250 [ 684.287360][T31649] ? __pfx_ksys_write+0x10/0x10 [ 684.287386][T31649] ? rcu_is_watching+0x15/0xb0 [ 684.287411][T31649] __x64_sys_bpf+0x7c/0x90 [ 684.287437][T31649] do_syscall_64+0xfa/0x3b0 [ 684.287457][T31649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.287478][T31649] ? clear_bhb_loop+0x60/0xb0 [ 684.287503][T31649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.287523][T31649] RIP: 0033:0x7f5079f8ebe9 [ 684.287541][T31649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.287560][T31649] RSP: 002b:00007f507ad2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.287582][T31649] RAX: ffffffffffffffda RBX: 00007f507a1b5fa0 RCX: 00007f5079f8ebe9 [ 684.287599][T31649] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 684.287613][T31649] RBP: 00007f507ad2b090 R08: 0000000000000000 R09: 0000000000000000 [ 684.287626][T31649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.287639][T31649] R13: 00007f507a1b6038 R14: 00007f507a1b5fa0 R15: 00007ffcff19b318 [ 684.287664][T31649] [ 684.617351][T31653] tipc: Resetting bearer [ 684.812715][T31671] bridge0: port 1(ipvlan2) entered blocking state [ 684.819751][T31671] bridge0: port 1(ipvlan2) entered disabled state [ 684.827195][T31671] ipvlan2: entered allmulticast mode [ 684.833106][T31671] bridge0: entered allmulticast mode [ 684.839691][T31671] ipvlan2: left allmulticast mode [ 684.845474][T31671] bridge0: left allmulticast mode [ 684.863756][T31672] bridge0: port 1(ipvlan2) entered blocking state [ 684.870296][T31672] bridge0: port 1(ipvlan2) entered disabled state [ 684.877293][T31672] ipvlan2: entered allmulticast mode [ 684.882609][T31672] bridge0: entered allmulticast mode [ 684.889666][T31672] ipvlan2: left allmulticast mode [ 684.894782][T31672] bridge0: left allmulticast mode [ 685.326642][T31707] tipc: Started in network mode [ 685.340544][T31707] tipc: Node identity 66746cb5fd69, cluster identity 4711 [ 685.348591][T31707] tipc: Enabled bearer , priority 0 [ 685.357834][T31707] syzkaller0: entered promiscuous mode [ 685.363457][T31707] syzkaller0: entered allmulticast mode [ 685.387443][T31707] tipc: Resetting bearer [ 685.495129][T31716] lo speed is unknown, defaulting to 1000 [ 685.702104][T31717] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 685.715941][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.725075][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.732993][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.741304][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.774329][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.782337][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.790765][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.798884][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.807012][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.815424][T31730] netlink: 'syz.3.7176': attribute type 1 has an invalid length. [ 685.927690][T31736] __nla_validate_parse: 23 callbacks suppressed [ 685.927710][T31736] netlink: 244 bytes leftover after parsing attributes in process `syz.3.7178'. [ 685.976588][T31741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7179'. [ 686.016851][T31741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7179'. [ 686.091224][T31745] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7180'. [ 686.104945][T31736] tipc: Enabling of bearer rejected, failed to enable media [ 686.120179][T31745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7180'. [ 686.338188][T31754] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7183'. [ 686.363883][T29997] tipc: Node number set to 2602396853 [ 686.562168][T31763] lo speed is unknown, defaulting to 1000 [ 686.993301][T31624] tipc: Resetting bearer [ 687.012719][T31624] tipc: Disabling bearer [ 687.114629][ T11] block nbd3: Possible stuck request ffff8880254e7000: control (read@0,1024B). Runtime 90 seconds [ 687.131558][ T11] block nbd3: Possible stuck request ffff8880254e71c0: control (read@1024,1024B). Runtime 90 seconds [ 687.142567][ T11] block nbd3: Possible stuck request ffff8880254e7380: control (read@2048,1024B). Runtime 90 seconds [ 687.154054][ T11] block nbd3: Possible stuck request ffff8880254e7540: control (read@3072,1024B). Runtime 90 seconds [ 687.218700][T31781] gtp0: entered promiscuous mode [ 687.242652][T31783] lo speed is unknown, defaulting to 1000 [ 687.304298][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7189'. [ 687.323207][T31790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7189'. [ 687.419319][T22196] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 688.253237][T31828] gre2: entered allmulticast mode [ 688.271537][T31828] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 688.395058][T31844] lo speed is unknown, defaulting to 1000 [ 688.535244][T31849] Bluetooth: MGMT ver 1.23 [ 688.762050][T31860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7200'. [ 689.225534][ T30] audit: type=1107 audit(1756495093.899:21): pid=31869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 689.566836][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7209'. [ 689.715933][T29990] lo speed is unknown, defaulting to 1000 [ 689.716178][T31852] tipc: Enabling of bearer rejected, failed to enable media [ 689.721852][T29990] syz2: Port: 1 Link DOWN [ 690.455123][T31921] tipc: Enabling of bearer rejected, failed to enable media [ 690.548548][T31926] rdma_rxe: rxe_newlink: failed to add lo [ 690.626065][T31926] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.638585][T31926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.657838][T31931] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 690.679678][T31928] tipc: Enabling of bearer rejected, already enabled [ 690.987049][T31951] validate_nla: 42 callbacks suppressed [ 690.992870][T31951] netlink: 'syz.2.7231': attribute type 1 has an invalid length. [ 691.187127][T31961] netlink: 'syz.5.7232': attribute type 1 has an invalid length. [ 691.216384][T31961] netlink: 'syz.5.7232': attribute type 4 has an invalid length. [ 691.224903][T31961] __nla_validate_parse: 7 callbacks suppressed [ 691.224921][T31961] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.7232'. [ 691.266348][T31951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.288094][T31955] vcan1: entered promiscuous mode [ 691.420282][ T6789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.432184][ T6789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.555011][T31992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7238'. [ 691.572607][T31992] macvtap3: entered promiscuous mode [ 691.578790][T31992] macvtap3: entered allmulticast mode [ 691.586298][T31992] FAULT_INJECTION: forcing a failure. [ 691.586298][T31992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.602570][T31993] syzkaller0: entered promiscuous mode [ 691.608854][T31993] syzkaller0: entered allmulticast mode [ 691.617840][T31992] CPU: 0 UID: 0 PID: 31992 Comm: syz.1.7238 Not tainted syzkaller #0 PREEMPT(full) [ 691.617870][T31992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 691.617884][T31992] Call Trace: [ 691.617893][T31992] [ 691.617902][T31992] dump_stack_lvl+0x189/0x250 [ 691.617932][T31992] ? __pfx____ratelimit+0x10/0x10 [ 691.617963][T31992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.617988][T31992] ? __pfx__printk+0x10/0x10 [ 691.618019][T31992] ? rcu_is_watching+0x15/0xb0 [ 691.618041][T31992] should_fail_ex+0x414/0x560 [ 691.618072][T31992] _copy_to_user+0x31/0xb0 [ 691.618097][T31992] simple_read_from_buffer+0xe1/0x170 [ 691.618130][T31992] proc_fail_nth_read+0x1b3/0x220 [ 691.618155][T31992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.618180][T31992] ? rw_verify_area+0x2a6/0x4d0 [ 691.618206][T31992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 691.618230][T31992] vfs_read+0x1fd/0xa30 [ 691.618256][T31992] ? fdget_pos+0x247/0x320 [ 691.618276][T31992] ? __pfx___mutex_lock+0x10/0x10 [ 691.618297][T31992] ? __pfx_vfs_read+0x10/0x10 [ 691.618327][T31992] ? __fget_files+0x3a0/0x420 [ 691.618344][T31992] ? __fget_files+0x2a/0x420 [ 691.618368][T31992] ksys_read+0x145/0x250 [ 691.618395][T31992] ? __pfx_ksys_read+0x10/0x10 [ 691.618420][T31992] ? rcu_is_watching+0x15/0xb0 [ 691.618444][T31992] ? rcu_is_watching+0x15/0xb0 [ 691.618465][T31992] do_syscall_64+0xfa/0x3b0 [ 691.618484][T31992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.618504][T31992] ? clear_bhb_loop+0x60/0xb0 [ 691.618528][T31992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.618548][T31992] RIP: 0033:0x7fe5f518d5fc [ 691.618567][T31992] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 691.618586][T31992] RSP: 002b:00007fe5f5fb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.618609][T31992] RAX: ffffffffffffffda RBX: 00007fe5f53b5fa0 RCX: 00007fe5f518d5fc [ 691.618625][T31992] RDX: 000000000000000f RSI: 00007fe5f5fb40a0 RDI: 0000000000000006 [ 691.618639][T31992] RBP: 00007fe5f5fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 691.618652][T31992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.618665][T31992] R13: 00007fe5f53b6038 R14: 00007fe5f53b5fa0 R15: 00007ffcd15a5c48 [ 691.618698][T31992] [ 691.851157][T31995] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7239'. [ 691.894958][T31998] netlink: 'syz.2.7240': attribute type 7 has an invalid length. [ 691.902734][T31998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7240'. [ 691.929015][T32002] netlink: 'syz.5.7242': attribute type 1 has an invalid length. [ 691.937599][T32002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 692.001281][T32007] bridge2: port 1(bond2) entered blocking state [ 692.009214][T32007] bridge2: port 1(bond2) entered disabled state [ 692.016234][T32007] bond2: entered allmulticast mode [ 692.322348][T32024] netlink: 'syz.3.7247': attribute type 6 has an invalid length. [ 692.338752][T32024] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7247'. [ 692.697726][T32046] team0: Device gtp0 is of different type [ 692.760368][T32053] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 692.780053][T32048] lo speed is unknown, defaulting to 1000 [ 692.977492][T32068] tipc: Enabling of bearer rejected, already enabled [ 693.511825][T32091] lo speed is unknown, defaulting to 1000 [ 693.602121][T32101] lo speed is unknown, defaulting to 1000 [ 693.630378][T32097] netlink: 87 bytes leftover after parsing attributes in process `syz.2.7267'. [ 693.669305][T32097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7267'. [ 694.089870][T32117] IPv6: Can't replace route, no match found [ 694.268512][T32122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.334314][T32126] netlink: 'syz.5.7277': attribute type 20 has an invalid length. [ 694.362875][T32124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 694.489300][T32136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7279'. [ 694.779768][T32151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7283'. [ 695.042360][T32169] netlink: 'syz.5.7289': attribute type 1 has an invalid length. [ 695.161821][T32169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 695.240817][T32169] bond4: (slave bond5): making interface the new active one [ 695.271798][T32186] FAULT_INJECTION: forcing a failure. [ 695.271798][T32186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.275772][T32169] bond4: (slave bond5): Enslaving as an active interface with an up link [ 695.323827][T32186] CPU: 1 UID: 0 PID: 32186 Comm: syz.1.7291 Not tainted syzkaller #0 PREEMPT(full) [ 695.323860][T32186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 695.323875][T32186] Call Trace: [ 695.323884][T32186] [ 695.323894][T32186] dump_stack_lvl+0x189/0x250 [ 695.323946][T32186] ? __pfx____ratelimit+0x10/0x10 [ 695.323978][T32186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.324003][T32186] ? __pfx__printk+0x10/0x10 [ 695.324030][T32186] ? __might_fault+0xb0/0x130 [ 695.324075][T32186] ? rcu_is_watching+0x15/0xb0 [ 695.324099][T32186] should_fail_ex+0x414/0x560 [ 695.324129][T32186] _copy_from_user+0x2d/0xb0 [ 695.324154][T32186] kstrtouint_from_user+0xc4/0x170 [ 695.324187][T32186] ? __might_fault+0xb0/0x130 [ 695.324215][T32186] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 695.324253][T32186] ? vfs_write+0x211/0xb30 [ 695.324279][T32186] ? rcu_is_watching+0x15/0xb0 [ 695.324303][T32186] proc_fail_nth_write+0x88/0x200 [ 695.324328][T32186] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 695.324352][T32186] ? security_file_permission+0x75/0x290 [ 695.324382][T32186] ? preempt_count_add+0x91/0x1a0 [ 695.324414][T32186] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 695.324440][T32186] vfs_write+0x27e/0xb30 [ 695.324474][T32186] ? __pfx_vfs_write+0x10/0x10 [ 695.324507][T32186] ? __fget_files+0x3a0/0x420 [ 695.324525][T32186] ? __fget_files+0x2a/0x420 [ 695.324549][T32186] ksys_write+0x145/0x250 [ 695.324578][T32186] ? __pfx_ksys_write+0x10/0x10 [ 695.324609][T32186] ? rcu_is_watching+0x15/0xb0 [ 695.324632][T32186] do_syscall_64+0xfa/0x3b0 [ 695.324653][T32186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.324674][T32186] ? clear_bhb_loop+0x60/0xb0 [ 695.324699][T32186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.324720][T32186] RIP: 0033:0x7fe5f518d69f [ 695.324739][T32186] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 695.324757][T32186] RSP: 002b:00007fe5f5f93030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 695.324781][T32186] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe5f518d69f [ 695.324797][T32186] RDX: 0000000000000001 RSI: 00007fe5f5f930a0 RDI: 0000000000000008 [ 695.324810][T32186] RBP: 00007fe5f5f93090 R08: 0000000000000000 R09: 0000000000000000 [ 695.324825][T32186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 695.324838][T32186] R13: 00007fe5f53b6128 R14: 00007fe5f53b6090 R15: 00007ffcd15a5c48 [ 695.324864][T32186] [ 695.831304][T32201] netlink: 'syz.4.7295': attribute type 1 has an invalid length. [ 695.953505][T32201] 8021q: adding VLAN 0 to HW filter on device bond7 [ 696.232912][T32219] vlan3: entered promiscuous mode [ 696.254310][T32220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 696.268152][T32219] gretap0: entered promiscuous mode [ 696.341882][T32224] __nla_validate_parse: 7 callbacks suppressed [ 696.341904][T32224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7301'. [ 696.505409][ T6752] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.523840][ T6752] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.524738][T32229] netlink: 'syz.4.7305': attribute type 16 has an invalid length. [ 696.542137][ T6752] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.569494][T32229] netlink: 'syz.4.7305': attribute type 17 has an invalid length. [ 696.579290][ T6752] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.795281][T32261] netlink: 'syz.4.7312': attribute type 83 has an invalid length. [ 696.838803][T32261] syz.4.7312 (32261) used obsolete PPPIOCDETACH ioctl [ 697.036572][T32277] netlink: 'syz.4.7315': attribute type 1 has an invalid length. [ 697.240072][T32297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7318'. [ 697.400486][T32303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7320'. [ 697.860110][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7329'. [ 697.929847][T32341] vlan3: entered allmulticast mode [ 697.936442][T32341] bridge_slave_0: entered allmulticast mode [ 697.970881][T32340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7330'. [ 698.222679][T32356] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7333'. [ 698.285489][T32356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7333'. [ 698.297309][T32356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7333'. [ 698.306559][T32356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7333'. [ 698.316444][T32356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7333'. [ 698.352938][T32366] netlink: 'syz.2.7333': attribute type 16 has an invalid length. [ 698.374975][T32366] netlink: 'syz.2.7333': attribute type 17 has an invalid length. [ 698.456316][T32366] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.463914][T32366] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.592109][T32366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.608119][T32366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.805344][T32366] mac80211_hwsim hwsim92 wlan0: left allmulticast mode [ 698.845442][T32366] tipc: Resetting bearer [ 698.897046][ T6733] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.917053][ T6733] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.938499][ T6733] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.019265][ T6733] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.181270][T32404] tipc: Enabling of bearer rejected, already enabled [ 699.231842][T32399] lo speed is unknown, defaulting to 1000 [ 699.407556][T32420] lo: entered promiscuous mode [ 699.445006][T32420] tunl0: entered promiscuous mode [ 699.479914][T32420] gre0: entered promiscuous mode [ 699.492595][T32426] netlink: 'syz.5.7350': attribute type 49 has an invalid length. [ 699.544543][T32420] gretap0: entered promiscuous mode [ 699.726258][T32420] ip_vti0: entered promiscuous mode [ 699.754433][T32420] ip6_vti0: entered promiscuous mode [ 699.787079][T32420] sit0: entered promiscuous mode [ 700.505468][T32420] ip6tnl0: entered promiscuous mode [ 700.519778][T32420] ip6gre0: entered promiscuous mode [ 700.547149][T32420] syz_tun: entered promiscuous mode [ 700.564288][T32420] ip6gretap0: entered promiscuous mode [ 700.578233][T32420] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.585904][T32420] bridge0: entered promiscuous mode [ 700.611896][T32420] team0: entered promiscuous mode [ 700.618716][T32420] team_slave_0: entered promiscuous mode [ 700.625195][T32420] team_slave_1: entered promiscuous mode [ 700.645494][T32420] batman_adv: batadv0: Interface deactivated: dummy0 [ 700.659092][T32420] dummy0: entered promiscuous mode [ 700.669204][T32420] nlmon0: entered promiscuous mode [ 700.676313][T32420] 0ªX¹¦À: entered promiscuous mode [ 700.693888][T32420] vxcan0: entered promiscuous mode [ 700.702125][T32420] vxcan1: entered promiscuous mode [ 700.708127][T32420] veth0: entered promiscuous mode [ 700.725044][T32420] veth1: entered promiscuous mode [ 700.734437][T32420] wg1: entered promiscuous mode [ 700.742855][T32420] wg2: entered promiscuous mode [ 700.750981][T32420] veth0_to_bridge: entered promiscuous mode [ 700.760515][T32420] veth1_to_bridge: entered promiscuous mode [ 700.774327][T32420] veth0_to_bond: entered promiscuous mode [ 700.796178][T32420] veth1_to_bond: entered promiscuous mode [ 700.807417][T32420] veth1_to_team: entered promiscuous mode [ 700.817985][T32420] veth0_to_batadv: entered promiscuous mode [ 700.825851][T32420] veth1_to_batadv: entered promiscuous mode [ 700.835273][T32420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.842931][T32420] batadv_slave_1: entered promiscuous mode [ 700.850780][T32420] xfrm0: entered promiscuous mode [ 700.858748][T32420] veth0_to_hsr: entered promiscuous mode [ 700.884345][T32420] hsr0: entered promiscuous mode [ 700.894167][T32420] veth1_virt_wifi: entered promiscuous mode [ 700.902505][T32420] veth0_virt_wifi: entered promiscuous mode [ 700.917583][T32420] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 700.944254][T32420] vlan0: entered promiscuous mode [ 700.949580][T32420] vlan1: entered promiscuous mode [ 700.961680][T32420] macvlan0: entered promiscuous mode [ 700.972921][T32420] macvlan1: entered promiscuous mode [ 700.980877][T32420] ipvlan0: entered promiscuous mode [ 700.989349][T32420] ipvlan1: entered promiscuous mode [ 700.998224][T32420] geneve0: entered promiscuous mode [ 701.012911][T32420] geneve1: entered promiscuous mode [ 701.018788][T32420] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 701.036202][T32420] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 701.069259][T32420] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 701.094018][T32420] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 701.114179][T32420] mac80211_hwsim hwsim90 wlan0: entered promiscuous mode [ 701.121473][T32420] mac80211_hwsim hwsim91 wlan1: entered promiscuous mode [ 701.128879][T32420] bridge1: entered promiscuous mode [ 701.137605][T32420] bridge2: entered promiscuous mode [ 701.143015][T32420] geneve1.3: entered promiscuous mode [ 701.149309][T32420] bond1: entered promiscuous mode [ 701.158973][T32420] vti0: entered promiscuous mode [ 701.164167][T32420] vxlan0: entered promiscuous mode [ 701.169544][T32420] batadv0.5: entered promiscuous mode [ 701.175530][T32420] bridge3: entered promiscuous mode [ 701.181033][T32420] ip6tnl1: entered promiscuous mode [ 701.189442][T32420] bridge4: entered promiscuous mode [ 701.195686][T32420] sit1: entered promiscuous mode [ 701.201065][T32420] bond2: entered promiscuous mode [ 701.208454][T32420] veth2: entered promiscuous mode [ 701.217184][T32420] veth3: entered promiscuous mode [ 701.245262][T32420] bridge5: entered promiscuous mode [ 701.264208][T32420] mac80211_hwsim hwsim100 wlan2: entered promiscuous mode [ 701.272009][T32420] bond3: entered promiscuous mode [ 701.280214][T32420] ip6gretap1: entered promiscuous mode [ 701.306435][T32420] veth4: entered promiscuous mode [ 701.396168][T32420] erspan0: left allmulticast mode [ 701.442666][T32420] team_slave_0.1: entered promiscuous mode [ 701.498426][ T6752] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.553302][ T6752] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.575579][ T6752] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.605419][ T6752] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.690883][T32457] __nla_validate_parse: 2 callbacks suppressed [ 701.690904][T32457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7356'. [ 701.752952][T32458] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7358'. [ 701.762580][T32458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7358'. [ 701.815717][T32462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7359'. [ 702.429074][T32477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7365'. [ 702.576307][T32486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7367'. [ 702.771856][T32494] netlink: 'syz.5.7369': attribute type 1 has an invalid length. [ 702.780622][T32494] netlink: 'syz.5.7369': attribute type 4 has an invalid length. [ 702.790171][T32494] netlink: 15538 bytes leftover after parsing attributes in process `syz.5.7369'. [ 702.905561][T32509] lo speed is unknown, defaulting to 1000 [ 703.453368][T32549] veth0_to_bond: entered allmulticast mode [ 703.715404][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7383'. [ 704.030778][T32568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7387'. [ 704.178963][T32580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7391'. [ 704.190701][T32576] netlink: zone id is out of range [ 704.202433][T32576] netlink: zone id is out of range [ 704.212625][T32576] netlink: zone id is out of range [ 704.222793][T32576] netlink: zone id is out of range [ 704.228851][T32576] netlink: zone id is out of range [ 704.237060][T32576] netlink: zone id is out of range [ 704.242236][T32576] netlink: zone id is out of range [ 704.248125][T32576] netlink: get zone limit has 8 unknown bytes [ 704.332000][T32594] netlink: 'syz.2.7395': attribute type 5 has an invalid length. [ 704.332104][T32597] tipc: Enabling of bearer rejected, already enabled [ 704.360217][T32599] netlink: 'syz.3.7394': attribute type 12 has an invalid length. [ 705.150656][T32636] geneve2: entered promiscuous mode [ 705.309455][T32648] tun0: tun_chr_ioctl cmd 1074025672 [ 705.315528][T32648] tun0: ignored: set checksum disabled [ 705.567145][T32660] netlink: 'syz.2.7415': attribute type 21 has an invalid length. [ 705.577106][T32660] netlink: 'syz.2.7415': attribute type 4 has an invalid length. [ 705.586950][T32660] netlink: 'syz.2.7415': attribute type 3 has an invalid length. [ 706.149487][T32683] tipc: Enabling of bearer rejected, failed to enable media [ 706.165015][T32682] tipc: Enabling of bearer rejected, failed to enable media [ 706.256446][T32686] tipc: Enabled bearer , priority 0 [ 706.268438][T32686] sit0: entered promiscuous mode [ 706.273653][T32686] sit0: entered allmulticast mode [ 706.287768][T32686] tipc: Resetting bearer [ 706.349739][T32695] tipc: Disabling bearer [ 706.414207][T32686] lo speed is unknown, defaulting to 1000 [ 706.953255][T32729] __nla_validate_parse: 9 callbacks suppressed [ 706.953274][T32729] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7436'. [ 706.975659][T32729] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7436'. [ 707.395822][T32765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7444'. [ 707.431489][T32765] geneve2: entered promiscuous mode [ 707.467017][T32765] geneve2: entered allmulticast mode [ 707.488971][ T6732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.503457][ T6732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.538392][ T6732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.542953][T32765] rdma_rxe: rxe_newlink: failed to add lo [ 707.556898][ T6732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.616247][ T308] veth0_to_team: entered allmulticast mode [ 707.679959][ T308] lo speed is unknown, defaulting to 1000 [ 707.765461][ T321] netlink: 'syz.3.7449': attribute type 13 has an invalid length. [ 707.779372][ T321] netlink: 'syz.3.7449': attribute type 17 has an invalid length. [ 707.816263][ T321] lo: left promiscuous mode [ 707.829729][ T323] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.7450'. [ 707.850135][ T321] tunl0: left promiscuous mode [ 707.856596][ T321] gre0: left promiscuous mode [ 707.867178][ T321] gretap0: left promiscuous mode [ 707.883133][ T321] erspan0: left promiscuous mode [ 707.899635][ T321] ip_vti0: left promiscuous mode [ 707.920728][ T321] ip6_vti0: left promiscuous mode [ 707.940570][ T325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.977229][ T321] sit0: left promiscuous mode [ 707.989747][ T321] ip6tnl0: left promiscuous mode [ 707.999441][ T328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7451'. [ 708.000472][ T321] ip6gre0: left promiscuous mode [ 708.018750][ T321] syz_tun: left promiscuous mode [ 708.037555][ T325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 708.058649][ T321] ip6gretap0: left promiscuous mode [ 708.070376][ T321] bridge0: left promiscuous mode [ 708.088960][ T321] bond0: left promiscuous mode [ 708.106440][ T321] team0: left promiscuous mode [ 708.112262][ T321] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.123838][ T321] dummy0: left promiscuous mode [ 708.140888][ T321] batman_adv: batadv0: Interface activated: dummy0 [ 708.171316][ T321] batadv0: mtu less than device minimum [ 708.178111][ T321] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.204517][ T321] nlmon0: left promiscuous mode [ 708.211707][ T321] 0ªX¹¦À: left promiscuous mode [ 708.288316][ T324] lo speed is unknown, defaulting to 1000 [ 708.364755][ T337] netlink: 'syz.2.7453': attribute type 6 has an invalid length. [ 708.738121][ T361] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7458'. [ 708.955288][ T370] dvmrp8: entered allmulticast mode [ 709.048371][ T368] dvmrp8: left allmulticast mode [ 709.087197][ T374] v: renamed from ip6_vti0 [ 709.171530][ T377] netlink: 'syz.3.7464': attribute type 1 has an invalid length. [ 709.246682][ T377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 709.321517][ T383] bond4: (slave veth7): Enslaving as an active interface with a down link [ 709.375566][ T387] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 709.397595][ T377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7464'. [ 709.434274][ T377] macvlan3: entered promiscuous mode [ 709.441243][ T391] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7468'. [ 709.460736][ T377] macvlan3: entered allmulticast mode [ 709.642924][ T403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7473'. [ 710.086124][ T426] lo speed is unknown, defaulting to 1000 [ 710.117067][ T427] netlink: 'syz.3.7480': attribute type 4 has an invalid length. [ 710.145246][ T427] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7480'. [ 710.825209][ T451] tipc: Enabling of bearer rejected, media not registered [ 711.158528][ T468] siw: device registration error -23 [ 711.229094][ T470] lo speed is unknown, defaulting to 1000 [ 711.652358][ T471] syzkaller0: entered promiscuous mode [ 711.659768][ T471] syzkaller0: entered allmulticast mode [ 711.674250][ T471] macsec1: entered promiscuous mode [ 711.733363][ T487] lo speed is unknown, defaulting to 1000 [ 711.940121][ T5917] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 711.957466][ T507] tipc: Enabled bearer , priority 0 [ 711.964552][ T5917] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 711.974622][ T507] syzkaller0: entered promiscuous mode [ 712.012976][ T507] syzkaller0: entered allmulticast mode [ 712.055297][ T507] tipc: Resetting bearer [ 712.065396][ T506] tipc: Resetting bearer [ 712.093226][ T506] tipc: Disabling bearer [ 712.295928][ T515] __nla_validate_parse: 5 callbacks suppressed [ 712.295948][ T515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7504'. [ 712.821967][ T552] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7511'. [ 712.925142][ T556] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7514'. [ 712.935782][ T556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7514'. [ 712.948189][ T556] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7514'. [ 712.971967][ T556] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7514'. [ 713.057481][ T562] bridge0: port 3(ipvlan2) entered blocking state [ 713.104946][ T562] bridge0: port 3(ipvlan2) entered disabled state [ 713.111613][ T562] ipvlan2: entered allmulticast mode [ 713.136605][ T562] bridge0: entered allmulticast mode [ 713.155283][ T562] ipvlan2: left allmulticast mode [ 713.166153][ T562] bridge0: left allmulticast mode [ 713.203089][ T564] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7517'. [ 713.368405][ T569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7520'. [ 713.377875][ T569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7520'. [ 713.516129][ T477] Bluetooth: hci2: command 0x0406 tx timeout [ 713.554689][ T576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7522'. [ 713.935791][ T600] IPv6: Can't replace route, no match found [ 714.024305][ T609] net_ratelimit: 19 callbacks suppressed [ 714.024328][ T609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.081963][ T615] lo speed is unknown, defaulting to 1000 [ 714.235447][ T628] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 714.272010][T29998] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 714.302971][ T628] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 714.336765][T29998] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 714.382657][ T632] tipc: Enabling of bearer rejected, already enabled [ 714.614524][ T651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.638209][ T651] bond0: (slave rose0): Enslaving as an active interface with an up link [ 714.738990][ T30] audit: type=1800 audit(1756495119.409:22): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7544" name="memory.events" dev="tmpfs" ino=2710 res=0 errno=0 [ 714.771891][ T30] audit: type=1804 audit(1756495119.429:23): pid=656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7544" name="/newroot/526/memory.events" dev="tmpfs" ino=2710 res=1 errno=0 [ 715.048007][ T674] nbd: socks must be embedded in a SOCK_ITEM attr [ 715.073149][ T680] lo speed is unknown, defaulting to 1000 [ 715.088004][T31771] block nbd64: NBD_DISCONNECT [ 715.114380][T29998] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 715.406674][T19894] udevd[19894]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 715.526341][ T689] tipc: Enabled bearer , priority 0 [ 715.539312][ T689] syzkaller0: entered promiscuous mode [ 715.546200][ T689] syzkaller0: entered allmulticast mode [ 715.563481][ T689] tipc: Resetting bearer [ 715.615091][ T688] tipc: Resetting bearer [ 715.636381][ T688] tipc: Disabling bearer [ 715.658543][ T697] sctp: [Deprecated]: syz.2.7553 (pid 697) Use of int in max_burst socket option. [ 715.658543][ T697] Use struct sctp_assoc_value instead [ 715.792122][ T708] IPVS: set_ctl: invalid protocol: 179 172.20.20.187:20001 [ 715.950910][ T715] netlink: 'syz.2.7557': attribute type 1 has an invalid length. [ 715.985887][ T714] batadv1: entered promiscuous mode [ 715.991136][ T714] batadv1: entered allmulticast mode [ 716.170562][ T738] tipc: Enabling of bearer rejected, already enabled [ 716.245346][ T738] tipc: Enabling of bearer rejected, already enabled [ 716.359000][ T755] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 716.511863][ T776] 8021q: VLANs not supported on bond0 [ 716.553559][ C1] ================================================================== [ 716.561690][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 716.569635][ C1] Read of size 2 at addr ffff88807441d82a by task kworker/u8:28/6752 [ 716.577734][ C1] [ 716.580155][ C1] CPU: 1 UID: 0 PID: 6752 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 716.580190][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 716.580207][ C1] Workqueue: events_unbound call_usermodehelper_exec_work [ 716.580254][ C1] Call Trace: [ 716.580264][ C1] [ 716.580275][ C1] dump_stack_lvl+0x189/0x250 [ 716.580306][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.580332][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.580358][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.580382][ C1] ? lock_release+0x4b/0x3e0 [ 716.580418][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 716.580447][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 716.580479][ C1] print_report+0xca/0x240 [ 716.580502][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 716.580534][ C1] kasan_report+0x118/0x150 [ 716.580570][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 716.580608][ C1] rose_timer_expiry+0x471/0x4b0 [ 716.580643][ C1] call_timer_fn+0x17e/0x5f0 [ 716.580677][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 716.580709][ C1] ? call_timer_fn+0xbe/0x5f0 [ 716.580742][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 716.580782][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.580804][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 716.580839][ C1] __run_timer_base+0x61a/0x860 [ 716.580870][ C1] ? ktime_get+0x3e/0x1f0 [ 716.580902][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 716.580932][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 716.580972][ C1] run_timer_softirq+0xb7/0x180 [ 716.581004][ C1] handle_softirqs+0x283/0x870 [ 716.581030][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 716.581057][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 716.581086][ C1] __irq_exit_rcu+0xca/0x1f0 [ 716.581117][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 716.581145][ C1] irq_exit_rcu+0x9/0x30 [ 716.581166][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 716.581202][ C1] [ 716.581210][ C1] [ 716.581220][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 716.581247][ C1] RIP: 0010:unwind_next_frame+0x374/0x2390 [ 716.581276][ C1] Code: ea 48 01 d2 48 01 f2 48 bd 00 00 00 00 00 fc ff df 0f 84 37 01 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 716.581298][ C1] RSP: 0018:ffffc9000f027098 EFLAGS: 00000a02 [ 716.581320][ C1] RAX: 0000000000000000 RBX: ffffffff8fc22cc4 RCX: ffffffff8fc22cc8 [ 716.581338][ C1] RDX: ffffffff90438b96 RSI: ffffffff90438b66 RDI: ffffffff8be33620 [ 716.581357][ C1] RBP: dffffc0000000000 R08: 0000000000000009 R09: 0000000000000000 [ 716.581373][ C1] R10: ffffc9000f0271b8 R11: ffffffff81ac3810 R12: ffffffff90438b9a [ 716.581391][ C1] R13: ffffffff90438b9b R14: ffffc9000f027168 R15: ffffffff8fc22cc4 [ 716.581413][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 716.581449][ C1] ? unwind_next_frame+0xcb/0x2390 [ 716.581479][ C1] ? unwind_next_frame+0xa5/0x2390 [ 716.581505][ C1] ? copy_fs_struct+0x4f/0x270 [ 716.581537][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 716.581566][ C1] arch_stack_walk+0x11c/0x150 [ 716.581598][ C1] ? copy_fs_struct+0x4f/0x270 [ 716.581628][ C1] stack_trace_save+0x9c/0xe0 [ 716.581655][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 716.581683][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 716.581712][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 716.581741][ C1] ? dup_fd+0x55/0xb60 [ 716.581772][ C1] ? copy_files+0xc9/0x120 [ 716.581794][ C1] ? copy_process+0x15b2/0x3c00 [ 716.581817][ C1] ? kernel_clone+0x21e/0x840 [ 716.581841][ C1] ? user_mode_thread+0xdd/0x140 [ 716.581866][ C1] ? call_usermodehelper_exec_work+0x9c/0x230 [ 716.581903][ C1] kasan_save_track+0x3e/0x80 [ 716.581932][ C1] ? kasan_save_track+0x3e/0x80 [ 716.581974][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 716.582009][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 716.582040][ C1] ? copy_fs_struct+0x4f/0x270 [ 716.582098][ C1] __kasan_slab_alloc+0x6c/0x80 [ 716.582140][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 716.582171][ C1] ? copy_fs_struct+0x4f/0x270 [ 716.582202][ C1] copy_fs_struct+0x4f/0x270 [ 716.582232][ C1] copy_fs+0x6d/0x150 [ 716.582257][ C1] copy_process+0x15df/0x3c00 [ 716.582291][ C1] ? copy_process+0x97f/0x3c00 [ 716.582320][ C1] ? __pfx_copy_process+0x10/0x10 [ 716.582353][ C1] kernel_clone+0x21e/0x840 [ 716.582379][ C1] ? xfd_validate_state+0x6d/0x150 [ 716.582400][ C1] ? save_fpregs_to_fpstate+0xa3/0x210 [ 716.582431][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 716.582469][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 716.582507][ C1] user_mode_thread+0xdd/0x140 [ 716.582534][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 716.582562][ C1] ? __pfx_user_mode_thread+0x10/0x10 [ 716.582593][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 716.582632][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.582662][ C1] call_usermodehelper_exec_work+0x9c/0x230 [ 716.582696][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 716.582720][ C1] process_scheduled_works+0xae1/0x17b0 [ 716.582759][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 716.582792][ C1] worker_thread+0x8a0/0xda0 [ 716.582831][ C1] kthread+0x70e/0x8a0 [ 716.582863][ C1] ? __pfx_worker_thread+0x10/0x10 [ 716.582885][ C1] ? __pfx_kthread+0x10/0x10 [ 716.582914][ C1] ? rcu_is_watching+0x15/0xb0 [ 716.582937][ C1] ? __pfx_kthread+0x10/0x10 [ 716.582965][ C1] ret_from_fork+0x3f9/0x770 [ 716.582989][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 716.583015][ C1] ? __switch_to_asm+0x39/0x70 [ 716.583045][ C1] ? __switch_to_asm+0x33/0x70 [ 716.583075][ C1] ? __pfx_kthread+0x10/0x10 [ 716.583111][ C1] ret_from_fork_asm+0x1a/0x30 [ 716.583152][ C1] [ 716.583162][ C1] [ 717.134428][ C1] Allocated by task 32645: [ 717.138843][ C1] kasan_save_track+0x3e/0x80 [ 717.143530][ C1] __kasan_kmalloc+0x93/0xb0 [ 717.148133][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 717.153513][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 717.158725][ C1] __genradix_prealloc+0x44/0x90 [ 717.163667][ C1] sctp_stream_init+0x14b/0x440 [ 717.168536][ C1] sctp_association_new+0x10dd/0x25f0 [ 717.173914][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 717.179204][ C1] sctp_sendmsg+0x155c/0x2810 [ 717.183881][ C1] __sock_sendmsg+0x19c/0x270 [ 717.188567][ C1] __sys_sendto+0x3bd/0x520 [ 717.193069][ C1] __x64_sys_sendto+0xde/0x100 [ 717.197834][ C1] do_syscall_64+0xfa/0x3b0 [ 717.202339][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.208237][ C1] [ 717.210565][ C1] Freed by task 32645: [ 717.214633][ C1] kasan_save_track+0x3e/0x80 [ 717.219318][ C1] kasan_save_free_info+0x46/0x50 [ 717.224344][ C1] __kasan_slab_free+0x5b/0x80 [ 717.229113][ C1] kfree+0x18e/0x440 [ 717.233012][ C1] genradix_free_recurse+0x5d/0xa0 [ 717.238133][ C1] genradix_free_recurse+0x5d/0xa0 [ 717.243250][ C1] sctp_stream_free+0xd5/0x110 [ 717.248048][ C1] sctp_association_free+0x26d/0x7f0 [ 717.253355][ C1] sctp_do_sm+0x3eba/0x5a20 [ 717.257867][ C1] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 717.263170][ C1] sctp_close+0x409/0x900 [ 717.267501][ C1] inet_release+0x144/0x190 [ 717.272010][ C1] sock_close+0xc3/0x240 [ 717.276264][ C1] __fput+0x44c/0xa70 [ 717.280254][ C1] task_work_run+0x1d4/0x260 [ 717.284857][ C1] get_signal+0x11ed/0x1340 [ 717.289361][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 717.294920][ C1] exit_to_user_mode_loop+0x75/0x110 [ 717.300215][ C1] do_syscall_64+0x2bd/0x3b0 [ 717.304808][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.310702][ C1] [ 717.313032][ C1] The buggy address belongs to the object at ffff88807441d800 [ 717.313032][ C1] which belongs to the cache kmalloc-512 of size 512 [ 717.327088][ C1] The buggy address is located 42 bytes inside of [ 717.327088][ C1] freed 512-byte region [ffff88807441d800, ffff88807441da00) [ 717.340814][ C1] [ 717.343139][ C1] The buggy address belongs to the physical page: [ 717.349562][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7441c [ 717.358328][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 717.366829][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 717.374379][ C1] page_type: f5(slab) [ 717.378365][ C1] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 717.386953][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 717.395539][ C1] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 717.404217][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 717.412891][ C1] head: 00fff00000000002 ffffea0001d10701 00000000ffffffff 00000000ffffffff [ 717.421565][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 717.430262][ C1] page dumped because: kasan: bad access detected [ 717.436683][ C1] page_owner tracks the page as allocated [ 717.442396][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7069, tgid 7068 (syz.2.274), ts 98401130126, free_ts 98373342382 [ 717.463502][ C1] post_alloc_hook+0x240/0x2a0 [ 717.468299][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 717.473851][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 717.479659][ C1] alloc_pages_mpol+0x232/0x4a0 [ 717.484522][ C1] allocate_slab+0x8a/0x370 [ 717.489028][ C1] ___slab_alloc+0xbeb/0x1410 [ 717.493716][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 717.499094][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 717.504301][ C1] __genradix_prealloc+0x44/0x90 [ 717.509244][ C1] sctp_stream_init+0x14b/0x440 [ 717.514104][ C1] sctp_association_new+0x10dd/0x25f0 [ 717.519504][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 717.524799][ C1] sctp_sendmsg+0x155c/0x2810 [ 717.529471][ C1] __sock_sendmsg+0x19c/0x270 [ 717.534174][ C1] __sys_sendto+0x3bd/0x520 [ 717.538669][ C1] __x64_sys_sendto+0xde/0x100 [ 717.543429][ C1] page last free pid 7072 tgid 7072 stack trace: [ 717.549750][ C1] __free_frozen_pages+0xbc4/0xd30 [ 717.554874][ C1] __put_partials+0x156/0x1a0 [ 717.559549][ C1] put_cpu_partial+0x17c/0x250 [ 717.564314][ C1] __slab_free+0x2d5/0x3c0 [ 717.568734][ C1] qlist_free_all+0x97/0x140 [ 717.573332][ C1] kasan_quarantine_reduce+0x148/0x160 [ 717.578797][ C1] __kasan_slab_alloc+0x22/0x80 [ 717.583670][ C1] __kmalloc_node_noprof+0x21b/0x4e0 [ 717.588964][ C1] allocate_slab+0x16a/0x370 [ 717.593557][ C1] ___slab_alloc+0xbeb/0x1410 [ 717.598245][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 717.603710][ C1] vm_area_alloc+0x24/0x140 [ 717.608223][ C1] do_brk_flags+0x33c/0xbb0 [ 717.612732][ C1] __se_sys_brk+0x9bb/0xb90 [ 717.617266][ C1] do_syscall_64+0xfa/0x3b0 [ 717.621895][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.627797][ C1] [ 717.630131][ C1] Memory state around the buggy address: [ 717.635794][ C1] ffff88807441d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 717.643859][ C1] ffff88807441d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 717.651924][ C1] >ffff88807441d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 717.659989][ C1] ^ [ 717.665363][ C1] ffff88807441d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 717.673427][ C1] ffff88807441d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 717.681490][ C1] ================================================================== [ 717.689677][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 717.696897][ C1] CPU: 1 UID: 0 PID: 6752 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 717.706575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 717.716647][ C1] Workqueue: events_unbound call_usermodehelper_exec_work [ 717.723788][ C1] Call Trace: [ 717.727080][ C1] [ 717.729936][ C1] dump_stack_lvl+0x99/0x250 [ 717.734549][ C1] ? __asan_memcpy+0x40/0x70 [ 717.739151][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.744365][ C1] ? __pfx__printk+0x10/0x10 [ 717.748969][ C1] vpanic+0x281/0x750 [ 717.752955][ C1] ? __pfx_vpanic+0x10/0x10 [ 717.757461][ C1] ? rcu_is_watching+0x15/0xb0 [ 717.762230][ C1] panic+0xb9/0xc0 [ 717.765974][ C1] ? __pfx_panic+0x10/0x10 [ 717.770404][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 717.776313][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 717.782227][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 717.787360][ C1] check_panic_on_warn+0x89/0xb0 [ 717.792314][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 717.797440][ C1] end_report+0x78/0x160 [ 717.801698][ C1] kasan_report+0x129/0x150 [ 717.806215][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 717.811368][ C1] rose_timer_expiry+0x471/0x4b0 [ 717.816338][ C1] call_timer_fn+0x17e/0x5f0 [ 717.820951][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 717.826431][ C1] ? call_timer_fn+0xbe/0x5f0 [ 717.831121][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 717.836255][ C1] ? rcu_is_watching+0x15/0xb0 [ 717.841028][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 717.846503][ C1] __run_timer_base+0x61a/0x860 [ 717.851368][ C1] ? ktime_get+0x3e/0x1f0 [ 717.855711][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 717.861095][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 717.867352][ C1] run_timer_softirq+0xb7/0x180 [ 717.872274][ C1] handle_softirqs+0x283/0x870 [ 717.877057][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 717.881857][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 717.887183][ C1] __irq_exit_rcu+0xca/0x1f0 [ 717.891789][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 717.897006][ C1] irq_exit_rcu+0x9/0x30 [ 717.901262][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 717.906937][ C1] [ 717.909881][ C1] [ 717.912819][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 717.918810][ C1] RIP: 0010:unwind_next_frame+0x374/0x2390 [ 717.924628][ C1] Code: ea 48 01 d2 48 01 f2 48 bd 00 00 00 00 00 fc ff df 0f 84 37 01 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 717.944247][ C1] RSP: 0018:ffffc9000f027098 EFLAGS: 00000a02 [ 717.950340][ C1] RAX: 0000000000000000 RBX: ffffffff8fc22cc4 RCX: ffffffff8fc22cc8 [ 717.958333][ C1] RDX: ffffffff90438b96 RSI: ffffffff90438b66 RDI: ffffffff8be33620 [ 717.966308][ C1] RBP: dffffc0000000000 R08: 0000000000000009 R09: 0000000000000000 [ 717.974284][ C1] R10: ffffc9000f0271b8 R11: ffffffff81ac3810 R12: ffffffff90438b9a [ 717.982257][ C1] R13: ffffffff90438b9b R14: ffffc9000f027168 R15: ffffffff8fc22cc4 [ 717.990256][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 717.996431][ C1] ? unwind_next_frame+0xcb/0x2390 [ 718.001552][ C1] ? unwind_next_frame+0xa5/0x2390 [ 718.006666][ C1] ? copy_fs_struct+0x4f/0x270 [ 718.011447][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 718.017604][ C1] arch_stack_walk+0x11c/0x150 [ 718.022467][ C1] ? copy_fs_struct+0x4f/0x270 [ 718.027248][ C1] stack_trace_save+0x9c/0xe0 [ 718.031935][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 718.037314][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 718.042351][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 718.048016][ C1] ? dup_fd+0x55/0xb60 [ 718.052094][ C1] ? copy_files+0xc9/0x120 [ 718.056512][ C1] ? copy_process+0x15b2/0x3c00 [ 718.061368][ C1] ? kernel_clone+0x21e/0x840 [ 718.066052][ C1] ? user_mode_thread+0xdd/0x140 [ 718.070995][ C1] ? call_usermodehelper_exec_work+0x9c/0x230 [ 718.077078][ C1] kasan_save_track+0x3e/0x80 [ 718.081766][ C1] ? kasan_save_track+0x3e/0x80 [ 718.086631][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 718.091660][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 718.097300][ C1] ? copy_fs_struct+0x4f/0x270 [ 718.102093][ C1] __kasan_slab_alloc+0x6c/0x80 [ 718.106977][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 718.112444][ C1] ? copy_fs_struct+0x4f/0x270 [ 718.117218][ C1] copy_fs_struct+0x4f/0x270 [ 718.121823][ C1] copy_fs+0x6d/0x150 [ 718.125811][ C1] copy_process+0x15df/0x3c00 [ 718.130502][ C1] ? copy_process+0x97f/0x3c00 [ 718.135281][ C1] ? __pfx_copy_process+0x10/0x10 [ 718.140315][ C1] kernel_clone+0x21e/0x840 [ 718.144832][ C1] ? xfd_validate_state+0x6d/0x150 [ 718.149946][ C1] ? save_fpregs_to_fpstate+0xa3/0x210 [ 718.155414][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 718.160458][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 718.167076][ C1] user_mode_thread+0xdd/0x140 [ 718.171851][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 718.177251][ C1] ? __pfx_user_mode_thread+0x10/0x10 [ 718.182652][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 718.189260][ C1] ? rcu_is_watching+0x15/0xb0 [ 718.194038][ C1] call_usermodehelper_exec_work+0x9c/0x230 [ 718.199963][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 718.205692][ C1] process_scheduled_works+0xae1/0x17b0 [ 718.211257][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.217330][ C1] worker_thread+0x8a0/0xda0 [ 718.221941][ C1] kthread+0x70e/0x8a0 [ 718.226022][ C1] ? __pfx_worker_thread+0x10/0x10 [ 718.231140][ C1] ? __pfx_kthread+0x10/0x10 [ 718.235736][ C1] ? rcu_is_watching+0x15/0xb0 [ 718.240504][ C1] ? __pfx_kthread+0x10/0x10 [ 718.245102][ C1] ret_from_fork+0x3f9/0x770 [ 718.249694][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 718.254809][ C1] ? __switch_to_asm+0x39/0x70 [ 718.259583][ C1] ? __switch_to_asm+0x33/0x70 [ 718.264353][ C1] ? __pfx_kthread+0x10/0x10 [ 718.268943][ C1] ret_from_fork_asm+0x1a/0x30 [ 718.273716][ C1] [ 718.277089][ C1] Kernel Offset: disabled [ 718.281415][ C1] Rebooting in 86400 seconds..