last executing test programs: 3m16.832248915s ago: executing program 4 (id=1900): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 3m16.728130314s ago: executing program 4 (id=1902): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x10000400) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000080)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x26) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) recvfrom(r3, 0x0, 0x0, 0x10000, &(0x7f0000000080)=@in={0x2, 0x4e20, @broadcast}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000001580)=""/4096, 0x1000}], 0x3, &(0x7f00000001c0)}, 0xc0002001) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xf, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000580)=[{0x3, 0x2, 0xd, 0xb}, {0x4, 0x2, 0x1, 0xc}, {0x4, 0x1, 0xe, 0xa}, {0x5, 0x3, 0xb, 0x8}], 0x10, 0x623}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c000000000002907800000000e00005001100987800000000"], 0x0) 3m15.695738321s ago: executing program 4 (id=1913): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x4, 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e20, @empty}, 'bond0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x28, 0x4, 0x0, 0x0) (async) socket$inet(0x2, 0xa, 0x0) (async) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e20, @empty}, 'bond0\x00'}) (async) 3m15.576126663s ago: executing program 4 (id=1914): unshare(0x2c020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x13, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, 0x0, 0x0) 3m15.30942997s ago: executing program 4 (id=1916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@exit, @generic={0x9, 0x8, 0x1, 0x81, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x33, &(0x7f0000000200)=""/51, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x6, 0x8, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x2, 0x6, 0x7}, {0x0, 0x4, 0x6, 0x2}, {0x4, 0x1, 0x9, 0xc}, {0x2, 0x5, 0x7, 0xa}, {0x2, 0x5, 0x5, 0xa}, {0x3, 0x5, 0xd, 0xb}, {0x3, 0x3, 0x6, 0x6}, {0x0, 0x4, 0x6, 0xb}], 0x10, 0x5}, 0x94) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.allow\x00', 0x2, 0x0) splice(r0, &(0x7f0000000440)=0xffffffffffffffff, r1, &(0x7f00000004c0)=0xfff, 0xb, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000580)={0x0, @multicast2, @multicast2}, &(0x7f00000005c0)=0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000cc0)=[{{&(0x7f0000000600)=@xdp={0x2c, 0x0, r3, 0x3}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="1df9f849a26631197a6608de24852322cb4e2ecd7320b14bd4283c1324831fc0eac31f8e5b2b2ba68ebb93b524cbb18dacfb06caf65783a13d3717229b75708e52a38c75c3957a7ef6b90735339e7e17120f5df10f5ed20ca4ced69325859386eecc05029c01933274b5cd8c15c058dba9f27e4daaf1c20eeaee5ccaa30e97a7144da9c0e641ad4dd7bb043d6ce1c5dc6ca94f28ca62c455c2181aa0033b58639c25e5f49bb77a2d03d0b1952bad7e3fd2ff2299cf6c3b9240cf56d9bccd56caebf92ebdc1de9427b993e317d233d1290642468f23da460762627e", 0xdb}, {&(0x7f0000000780)="a810229dced10c8bedfc39953874198f6103d57898739f028403c7d5a7666c000c6d5765d7da1336f493d106c4e629bbf2a8ad2fc205f3968a24c11a1ef005db496b1161bf60044f601e3a5ac84f190e47", 0x51}, {&(0x7f0000000800)="6181c9d4b35f92779637119a55e8312da568157a99d246be9becb44ce2b6cfc18c12a75011f09b6c2c0db36573299c232a11424a2ac398587251ccf7fa8baba3027c910236b97d2ad0a39e70f4bdc9daf793283ee38815", 0x57}, {&(0x7f0000000880)="bf61cd4528ae9d176fed1d25656d7740b83bfd212ed16443a965f4d163b538e0e59ac6e487242f899711b02d4020c0ac5df770ae5c339ad09be41c3d5706407b2f13f0107ec94f3f768ca990d3533e84f57637dc8ebaf8ea229a43488d6aed73976d16941605e8b43a7dac608a6cbf4391f78f55d4169f6a4bcb83cb22505e7dae0e5cb49ff51f6ec0", 0x89}, {&(0x7f0000000a80)="2bf74d34cd1bce8f6428e8a08beba74581360ad6f886ae13ea329e9493f2a1bd067f9ef1e8acced76dce0a7de17541e408f29da5c230e74727ecf86981ff5b1125d935222d8c2800afc80a2f79d86a8c57a44b5193d6883f78cbf09d31f495ffebd46c97d5ebb8e44ecb325ea8bca8c57510e0f46e50fda0b9cfa4eeeaabe021c02c60b2fe30f020e9b52460adea6b14df6da2aade36530f318bc273a27b7299a039485e657920b4b18d27cb8a2a4424e20eacd66cb5d2", 0xb7}], 0x5, &(0x7f0000000b40)=[{0xf8, 0x118, 0x5, "89c6bb055e2889368124d9804bd791aa65ba53a485dee2c24de6f00560a80bf0afefd1b2bafbfa846bb4abaf313b01eaf110366154f7b06fd6865dc49b79291a4a05d848adcdb3e14c55e5ae4b0f0e20679e44d5d1aab70b7ad1f30aa8ff189b28a196d0b1b903aa1f81efdb533ff4b88149afa4500641a97f667808baaf580aa6ce9d3eacfec70ca076922c18eac05edd1f34d63072cdfec503fc2ba77594512cdd429aa0372cf5ed9212cf59b42485a61cb13f3bb04dfc335c1c3b3c0b48f18fc3392ece5e38b968847e26df5b1915ffe1e6bfe276c7cbb1bfdb07810b7a56105260f0"}, {0x28, 0x112, 0x6, "8a15566004cc58b309b8cec0e4c14fb2b14b"}, {0x58, 0x117, 0xffffff9e, "423c9146570ce3b4fb3ff9239f493fedc21749e662dc8176ea228b2741b853bb9988f18b75d458d6e98491961be1ebd0f1e85ee262be9395efc74c53f3c3b4cbdcf4582d"}], 0x178}}], 0x1, 0x20000044) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10000) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c000340"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000cb0000007b1af8ff00000000bfa700000000000007010000f8ffffffb702000008000000b703000000000040850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 3m14.925023119s ago: executing program 4 (id=1922): syz_emit_ethernet(0x170, &(0x7f0000000440)={@multicast, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x647e14e845ba5343}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x13a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de47"}, {0x0, 0x1, "06aa85616177c61b"}, {0x21}]}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000100000000004400050000000000000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000503"], 0xfc}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000000c0)=0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m59.840706803s ago: executing program 32 (id=1922): syz_emit_ethernet(0x170, &(0x7f0000000440)={@multicast, @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x647e14e845ba5343}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x13a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de47"}, {0x0, 0x1, "06aa85616177c61b"}, {0x21}]}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000100000000004400050000000000000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000503"], 0xfc}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000000c0)=0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m35.73208323s ago: executing program 5 (id=2259): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8000000000000a, 0x80000001, 0x2, 0x10000000000006, 0x4, 0x8000, 0x80000000, 0x4}, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) (async) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) socket$netlink(0x10, 0x3, 0x8000000004) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) (async) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x500, 0x4000000000000009, 0x10200}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ca95deaa14d67204e271c124cbd30f04f82308442a65329670667d017314ae8392cb1b5bdae58b931de5e72f84bfad616cc8a93ee80d42f919877a1136f763794c1d65b12f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) unshare(0x28000600) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) socket$unix(0x1, 0x2, 0x0) 2m35.514923502s ago: executing program 5 (id=2260): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', {}, 0x82d}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x1ff}, 0x8) r1 = accept4(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0x80, 0x0) recvmsg$unix(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/56, 0x38}], 0x3}, 0x0) shutdown(r2, 0x1) r3 = socket(0x1e, 0x2, 0x7) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000001280)={'gre0\x00', 0xb}) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f00000012c0)=0x7, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001300)={0x0, 0xb1, 0x745, 0xf, 0x1, 0x4}, &(0x7f0000001340)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001380)=r4, 0x4) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000013c0), &(0x7f0000001400)=0x8) socket$netlink(0x10, 0x3, 0xf) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001440)=@sack_info={r4, 0x163e, 0x7fffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x18}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "402fe5f33584d28b23d05ad96d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x5) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000001600)=0xc, 0x4) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x54452d8f25c6f26b}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c011}, 0x24005011) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001740)={'wg2\x00'}) clock_gettime(0x0, &(0x7f00000043c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000001780)=@l2, 0x80, &(0x7f0000002e00)=[{&(0x7f0000001800)=""/111, 0x6f}, {&(0x7f0000001880)=""/254, 0xfe}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/37, 0x25}, {&(0x7f00000029c0)=""/119, 0x77}, {&(0x7f0000002a40)=""/181, 0xb5}, {&(0x7f0000002b00)=""/175, 0xaf}, {&(0x7f0000002bc0)=""/140, 0x8c}, {&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000002d40)=""/180, 0xb4}], 0xa, &(0x7f0000002ec0)=""/35, 0x23}, 0x10001}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/5, 0x5}, {&(0x7f0000002f40)=""/219, 0xdb}, {&(0x7f0000003040)=""/184, 0xb8}, {&(0x7f0000003100)=""/213, 0xd5}, {&(0x7f0000003200)=""/158, 0x9e}], 0x5, &(0x7f0000003340)=""/4096, 0x1000}, 0xfab5}], 0x2, 0x40000000, &(0x7f0000004400)={r6, r7+60000000}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004440)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000004480), 0x400200, 0x0) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f00000044c0)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000004500), 0x40c0, 0x0) ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000004540)={'macvtap0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000045c0), r3) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000046c0)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004680)={&(0x7f0000004600)={0x50, r10, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1c, 0x111, 0x0, 0x1, {0x18, 0x5, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000004700)) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000004740)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x81, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 2m35.245203751s ago: executing program 5 (id=2263): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040)=0x2, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x43, 0x3, 0x4}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xfff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 2m35.004381242s ago: executing program 5 (id=2265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000014, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0004000000e00900", "ec094e071cc80f218d360356a90008e3971a8c35c47e5804000000dc4300", "cf00", "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="ec", 0x1}, {&(0x7f0000000140)="a2e3009b681389b3777a6424886d05059f580d94a9537b7e201ccfb66e6554b29ebccc1c0e05563c0e59ad1d3705a1a980a026b1a1231b77cae24ccaa95c8173400b6d647efe10e57245de69edf6ee1767f87da2365795beb8f6691f747aa27ee7da27ed9534dcc8b6c116dda59c3718caf52936a1b4580cdddb19aa4cab04a6cca2af03b5478d1651510d0e0d1b0926985d9090e1be1540d407aceeea7c181ac3777e61d87559e887143f7089a3aab0d0351233ebca5de933e15689f814", 0xbe}, {&(0x7f0000000480)="a0826b135837cb89bb5dc7073e9fa86d83b4e1100d5e52eb52a46b07131485c591c021f3fee64fe3f3236234e2cd121d12f21dff5a6c63567f471eb4bbb9cf3b78b1ef6b73df68485deb91bf499c01f52622f3e5bedbbbc88c8b3e0448fd520f0ca3839908c1b76e2853711c9bc205552be2028569c03a8d1f727c9f8c647597ca2de01a4482e3da35d3d899e6e468919861d14a304f7b722d1a778dbe5332d4db4dc76ec26c076f1f8279420cb30d60334fc93d1d7af50ba9db496784b63582339a2da3174e579bdc6a5898ad76cf265f1d3f4c3212ef00e446397359", 0xdd}], 0x3) 2m34.847605073s ago: executing program 5 (id=2267): socket$isdn_base(0x22, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x44a080, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001540), 0x8) socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x28, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d153ce4a"]}]}, 0x1c}}, 0x4000010) 2m34.629026255s ago: executing program 5 (id=2268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m19.498651906s ago: executing program 33 (id=2268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x40) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m3.807973564s ago: executing program 0 (id=2525): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000003000600000000000000000085000000500000001801001e09c61ea702382bba8fdd00202075251c000000002020207b1af8ff00000000bfa100000000005f0101000000000000b702000008000000b703000007000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000018001101b8fb938352f238c801000000000000000a002000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x602003, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x243b32732b48830, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000024c0)=ANY=[@ANYBLOB="00000800000003000000000000004959002c0065000075019078ac1414bbffffffff940ff00c8e76d0966f9a2b2407c08a00120090780000ffff"], 0xff04) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r7, 0xaab) listen(r7, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @loopback, @multicast1}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x9, 0x0, 0x100, 0x10001, 0x60403b2, r8}) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000"], 0x66) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendto$unix(r9, &(0x7f0000000240)="44accd24e3bd7786bd6d38c736f0163b19f10f2266ffb2753bc131a8029beb14fc9c272f7fc7c93241e09babd04ead5000d085a7a58b71fcf4fd3108a147b812cf90331e3cdad11f2275af9a28ab0cdbdbed4bcc4b7729bd0987a208d3f81458c5f80c41219862e6a9782287dfa6330facd0f1c28b8fd117a101b94283ceb437b5348a50960d182313b2f843b0feb43ed1d19edbe7adc1d8", 0x98, 0x4000000, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), r10) sendmsg$GTP_CMD_DELPDP(r10, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020426bd7000fedbdf250100000014000b00fe80000000000000000000000000002414000b00fe80000000000000000000000000000000000000000000000000000100000000000000000000000000000000418554025e789b5db6c4bc88dcbe12c1a73655a0cc38c734774fd265a3304571f6ee05cf12821aa4c3e776fd07f91a9663c151b148ca135c02190a588a34f68e07"], 0x58}, 0x1, 0x0, 0x0, 0x8041}, 0x800) 2m3.543724756s ago: executing program 0 (id=2526): socket$isdn_base(0x22, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2b, 0xfffffffb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000014c0)) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001500), 0x44a080, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001540), 0x8) socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x28, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d153ce4a"]}]}, 0x1c}}, 0x4000010) 2m3.322217296s ago: executing program 0 (id=2528): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in6=@private0, 0x0, 0x5, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x4000000, 0x1}, 0x4000) 2m3.152069151s ago: executing program 0 (id=2531): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001100)={r0, 0x6, 0xa1, 0xdb4}) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) ppoll(&(0x7f0000001140)=[{0xffffffffffffffff, 0xd5a3c645580a24fb}, {r5, 0x5000}, {r8, 0x100}, {r3, 0x10}, {r0, 0x42}, {0xffffffffffffffff, 0x449}, {r3, 0x2000}, {r1, 0x80}], 0x8, &(0x7f00000011c0)={r9, r10+10000000}, &(0x7f0000001200)={[0xfb]}, 0x8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000080010200000300000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r13, @ANYRES64=r14/1000+60000, @ANYBLOB="030000e0010000000400008000020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="01000000900000000000080000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b000bdf16dcbd8737574b6b085d8542d4f1fc0b8a7b8f72cf11dbe2a8eb7ac4df12cff0f27365b10371224bdd45b3d19447ebe335e1d64264c03a976b8e6d0ba3db643385622aa0ac2c421f13edef4637b47fcadf629b118ac4c7e0ff5275842d32232bc0d30a89c85d6d58ae5cb342f90b8e059e85dd9cae52634dd465ced9153ae9151bacb46055f9c8b77232f4e7e818d81d8689cff9d3b79ec2d2"], 0x48}}, 0x40884) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2m2.253041681s ago: executing program 0 (id=2533): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x145, 0x9}, 0xc) 2m1.330711156s ago: executing program 0 (id=2545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef9ee02cb9ce5c1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004886eaf960000097b77d59457a73dbd77724cf636baa1583ebb28c9babd9068026db02e411f6c2efd80b62a20c3213156e165652437d0f8d27456e7cdaf6a93b03b539a7a6a829e18ece7dec22ffe344b138ff61c18cb3b2f27c6f788aa214fc2bf84942764c14ae805bb628a002edadb82dc3f6827ee784d51b5ac8f93bc83b92fd1fe7e9728d3faa84a435823ab3c37dc1cc97f8eebf7788967b2ef018ece0fc0a4e75762bf637a98694e5ff1220099f9"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r4], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="577a931c00000000240012800b0001006272690800e8b8000000000000001900ff46e0f577f93d797e00ec485adc99ef2f622bdb411e080034065eb02a6afda05c591df389d9a5a6f3834d46a16d5eb8586fc41c9d0b1b7df7ddc2cb743a829ad5f2f98647cdc2592b8024012898dea97411f00f10a35eb9798819019e00105d71c5d925685fa992dc17b039632b2afe598e294d39b262f90317d83a52ed152694f0c02f983bd25684de5ed68b5353addceb9edafe869aa0b8e0d9073c9de6ee40b942b572e92a9bd57483c4ef3722432636ca9a6bb9ccff2c13ab3a5a4e98222e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 1m46.225136983s ago: executing program 34 (id=2545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2ef9ee02cb9ce5c1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004886eaf960000097b77d59457a73dbd77724cf636baa1583ebb28c9babd9068026db02e411f6c2efd80b62a20c3213156e165652437d0f8d27456e7cdaf6a93b03b539a7a6a829e18ece7dec22ffe344b138ff61c18cb3b2f27c6f788aa214fc2bf84942764c14ae805bb628a002edadb82dc3f6827ee784d51b5ac8f93bc83b92fd1fe7e9728d3faa84a435823ab3c37dc1cc97f8eebf7788967b2ef018ece0fc0a4e75762bf637a98694e5ff1220099f9"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000000)=0x80, 0x4) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r4], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="577a931c00000000240012800b0001006272690800e8b8000000000000001900ff46e0f577f93d797e00ec485adc99ef2f622bdb411e080034065eb02a6afda05c591df389d9a5a6f3834d46a16d5eb8586fc41c9d0b1b7df7ddc2cb743a829ad5f2f98647cdc2592b8024012898dea97411f00f10a35eb9798819019e00105d71c5d925685fa992dc17b039632b2afe598e294d39b262f90317d83a52ed152694f0c02f983bd25684de5ed68b5353addceb9edafe869aa0b8e0d9073c9de6ee40b942b572e92a9bd57483c4ef3722432636ca9a6bb9ccff2c13ab3a5a4e98222e000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 1m10.599473332s ago: executing program 1 (id=3004): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x20, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000003000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000001170fa2350a905a58927f56edd624a790000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018380000050000000000000000800000082406000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000725900000000b708003ad912dcfe00070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c97c0000008500000082000000185b0000090000000000000000000000184600000500000000000000000000009500000000000000bf91000000000000b7020000020000008500000084000000b7200000000000009500000000006b4334b4d3da24c70bfaa44f92ea6aba5273b38994ed94505224f67f050586764e0f1e17de8f882b60d6760d4b5f51cdbe86e69caa3d4056c35d2e1dd5d3acb711dd5a710e94dfe39c1f44734c"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0xffffff00}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xe, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r9 = accept(r8, 0x0, 0x0) sendmsg$SOCK_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)={0x14, 0x15, 0x2, 0x70bd2b, 0x25dfdc00, {0x1e, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0xc0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3403}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c44}, 0x4090) recvmmsg$unix(r9, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/207, 0xcf}], 0x1}}], 0x1, 0x20c0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r2, r3}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in=@multicast1, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x80, 0x0, 0x33, 0x0, 0xee01}, {0x10000, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x80000000000, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x2, 0x6c}, 0x0, @in=@loopback, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x1c, &(0x7f0000000c40)=ANY=[@ANYRES64=r4, @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b50908000a0000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r11, @ANYBLOB="3317b1b05b4c3e5900000000000000cda9a271e530791a7f5352f8a98a0400b705000028f202000000000000000000bf9100000000f7ff76080000020000008500000085000000b7000000000000009500000000000010"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYRES64=r5, @ANYRES32=0x1, @ANYBLOB="0000008000"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="02000000020000000300000000000000000007000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x14, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x7e, &(0x7f0000000800)=""/126, 0x41000, 0xb, '\x00', r7, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0x1, r12, r4, r13, r14, r3], &(0x7f0000000b00)=[{0x4b8, 0x5, 0x0, 0x3}, {0x2, 0x3, 0xd, 0x6}, {0x4, 0x3, 0x9}, {0x0, 0x5, 0xd, 0x2}], 0x10, 0x1}, 0x94) 1m9.870140857s ago: executing program 1 (id=3010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c0004801800018008000100647570000c00028008000140000000ff0900010073797a30000000000900020073797a32"], 0x70}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101800, 0x0) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f0000000380)=""/140) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x2}}, 0x10) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x22199, 0x6003}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}, 0x1, 0xfc, 0x0, 0x240400c1}, 0x4000000) 1m9.574433423s ago: executing program 1 (id=3012): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x35}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000004000000000000000000000091104d800000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f0000000380)}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYBLOB="ff07cb008f221c77aadab1ef4224e9a8276befc25b74f2aa02eb7cccafaede2724b392c237fec50da0c29cfd271222010ae07641fadb3f91c44a9ffc93d2d207bb1d53f55919103dabe9407bd8d1d7ddad4329ca69f5581607974f7c0bb7fdef01890c59326bf96f78ee29724a2c88e6df4065b430b00befc1660c1707f62cd21c9fc1fdc0dfdee95d3354c96de758d3b4ef96e34f83b99ccac4992f534ef311864b1fbe91b837c10b052815114ef8215802049dc655a7895ed8a489fe84872858402a98a6ea8a2a6afd"], 0xd3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x800, 0x2}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000000903000000000000000200070000000900010073797a3000000000240002001400018008"], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1m9.212159286s ago: executing program 1 (id=3014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 1m9.048344304s ago: executing program 1 (id=3017): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xfecae6179ac1be9d, 0x1000}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r2) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="43185c3b932b7be500000000000000000400008004001d00"], 0x18}], 0x1}, 0x300) 1m8.909707172s ago: executing program 1 (id=3019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 53.821467932s ago: executing program 35 (id=3019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x7f}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r2, 0x0, 0x7f}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 50.580514508s ago: executing program 8 (id=3148): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001100)={r0, 0x6, 0xa1, 0xdb4}) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) ppoll(&(0x7f0000001140)=[{0xffffffffffffffff, 0xd5a3c645580a24fb}, {r5, 0x5000}, {r8, 0x100}, {r3, 0x10}, {r0, 0x42}, {0xffffffffffffffff, 0x449}, {r3, 0x2000}, {r1, 0x80}], 0x8, &(0x7f00000011c0)={r9, r10+10000000}, &(0x7f0000001200)={[0xfb]}, 0x8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000080010200000300000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r13, @ANYRES64=r14/1000+60000, @ANYBLOB="030000e0010000000400008000020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="01000000900000000000080000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b000bdf16dcbd8737574b6b085d8542d4f1fc0b8a7b8f72cf11dbe2a8eb7ac4df12cff0f27365b10371224bdd45b3d19447ebe335e1d64264c03a976b8e6d0ba3db643385622aa0ac2c421f13edef4637b47fcadf629b118ac4c7e0ff5275842d32232bc0d30a89c85d6d58ae5cb342f90b8e059e85dd9cae52634dd465ced9153ae9151bacb46055f9c8b77232f4e7e818d81d8689cff9d3b79ec2d2"], 0x48}}, 0x40884) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 50.059499429s ago: executing program 36 (id=3148): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001100)={r0, 0x6, 0xa1, 0xdb4}) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) ppoll(&(0x7f0000001140)=[{0xffffffffffffffff, 0xd5a3c645580a24fb}, {r5, 0x5000}, {r8, 0x100}, {r3, 0x10}, {r0, 0x42}, {0xffffffffffffffff, 0x449}, {r3, 0x2000}, {r1, 0x80}], 0x8, &(0x7f00000011c0)={r9, r10+10000000}, &(0x7f0000001200)={[0xfb]}, 0x8) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000080010200000300000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r13, @ANYRES64=r14/1000+60000, @ANYBLOB="030000e0010000000400008000020000d467aef0f23fe738"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001240)=ANY=[@ANYBLOB="01000000900000000000080000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b000bdf16dcbd8737574b6b085d8542d4f1fc0b8a7b8f72cf11dbe2a8eb7ac4df12cff0f27365b10371224bdd45b3d19447ebe335e1d64264c03a976b8e6d0ba3db643385622aa0ac2c421f13edef4637b47fcadf629b118ac4c7e0ff5275842d32232bc0d30a89c85d6d58ae5cb342f90b8e059e85dd9cae52634dd465ced9153ae9151bacb46055f9c8b77232f4e7e818d81d8689cff9d3b79ec2d2"], 0x48}}, 0x40884) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 6.562863316s ago: executing program 2 (id=3592): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x647e4, 0x65da2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}, 0x1, 0xba01, 0x0, 0x40}, 0x0) 6.291869542s ago: executing program 2 (id=3595): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @link_local}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x309, 0x0, 0x9, 0x2, 0x7, @multicast}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000025c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x31c5b4228258fb73}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x84040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000600)=""/76, 0x4c}, {}], 0x3, &(0x7f0000000200)=""/58, 0x3a}, 0x7}, {{&(0x7f0000000680)=@tipc=@name, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/114, 0x72}, {&(0x7f0000000780)=""/74, 0x4a}], 0x2, &(0x7f00000009c0)=""/216, 0xd8}, 0xb6}, {{&(0x7f0000000840)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000008c0)=""/55, 0x37}, {&(0x7f00000010c0)=""/243, 0xf3}, {&(0x7f0000000d80)=""/105, 0x69}, {&(0x7f00000011c0)=""/230, 0xe6}], 0x4, &(0x7f00000012c0)=""/106, 0x6a}, 0x400}, {{&(0x7f0000001340)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002500)=[{&(0x7f00000013c0)=""/95, 0x5f}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/56, 0x38}, {&(0x7f0000002480)=""/67, 0x43}], 0x4}, 0x7}, {{&(0x7f0000002540)=@isdn, 0x80, &(0x7f0000002940)=[{0x0}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000002600)=""/32, 0x20}, {&(0x7f0000002640)=""/249, 0xf9}, {0x0}, {&(0x7f0000002840)=""/217, 0xd9}], 0x6, &(0x7f00000029c0)=""/22, 0x16}, 0x3}, {{&(0x7f0000002a00)=@can, 0x80, &(0x7f0000002ac0), 0x0, &(0x7f0000002b00)}, 0x100}], 0x6, 0x40010000, &(0x7f0000002b40)) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x293}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e40)="87f28bf58324ae1d2a339c9d74d1d995431e1d25f236c4d12f7fa5aed21cbd611995585c6d457f83914055ccb2c728af3904ba51e46ca9d23cc11369bb8f041a592e59b198f16311a5bce6d47b7456a08fb6057b2bb82b5f1578865cee997360f280b4e1fbccc0496ac9f3cf93fb498630d9a404f90dbd09fcd5bc1ce2089d75607cf99a44f52271acc8c5a0c0170253132fa74aba7e582d88cce6908754bc06429f38c63433d2de8e0694d2ab5b32234b341ab42e646afbdfb74bda4af1322cfeff73cc95aa513533ceba3807b88a348ab323552926de8d1907de16211127f9f3be5bdaa85525b2ac5d48bac2601c65f77f6032aed8f703b3cbfbd2213ed56308f095ff6b1698bff6d45ef2aef9235835672cc8a4c14557bb5d45b1e29ead9a46a7647bb4c097d50149136a585b87274874adb82cf6746279eba4bb67b99103fe373db280232d444326ac94620d1c4976550ee9cadd08a13f83dd849b6639ce0da9385335dcf61ad25900184493f4bf6c62e56a016371002d1ebbddec995bdc8e7b3acea0a9a362cff1cf4d0388f4cf59ee1e2a498e43bbb7ab3151c87de9bdd63b16282a22a72edd77fe95caec28a00d36f4e8be548f4cbbd1d08c68348dd698a4f2a3b29dd3227df2e75a31a81411071389747f4518ce1bfd83b7acbff1c3f41189f3c99e75f6911cc1cea3f9b2bf26a03ac8d506f29e2be1a83e888d5fac0dbda17d69e7626b26a0c4fd4be6c3c41ca09e2bc2d026f21303dc9bd1c7a7d46f425f97b9c601466319d379aec30bfac9cb786aa716ead4243ef6497a8e6ac6fb4715d6fcbb579df82c0934388a188d729870eea4e2d72295390f", 0x25b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) close(r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00@', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000c00038008000200ffffff7f180001801400020076657468305f746f5f626f6e64000000"], 0x38}}, 0x0) 5.635936319s ago: executing program 7 (id=3604): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={@loopback, @mcast1, @local, 0x7f, 0xd, 0xfff8, 0x100, 0xfff, 0x1000200, r5}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0xfffffffffffffffe, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="89e7ee2c21fe62a3b47380c988ca4b5ed95f5ee4142df6640b27", 0xfdef}], 0x1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="620ac4ff0000000071101e00000000009500000000000000d7196e97a00e43144bc24eb99c7e4f83af619148a6eef082c814de2a12032e16cd0508ab901adbf0dcd6b9ed4851371c92e438ca2f7741162be71d3ed03447dbd14fe2d04bffc04c824b1f"], &(0x7f0000000480)='GPL\x00'}, 0x80) 5.300789993s ago: executing program 2 (id=3607): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x3ffe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xb444c8041747db3d, 0x4, {0x2, 0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250700000008000100010008000500020a0004007770616e330000000c0017000201aa06000000aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffffffffffffaf, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000016e842a0a73a11cee48d0000000000003b5d060cf7e231cc46773afab0046df021f90858556ee14f219b1ea8863f1a20549509c521a654fda58c502d80ab39776415c0d4e91b7d5651370429ae5421dcd1e91bf39a857d36f7fcc8476242a6124c823b5a6c12032c9fd2611673e666fe12e59ab9ad760939cee112cf6728e7e9dacfbe0f219eb6764071cf49ce87effb0e0f9a04658bf3b1227c84c2605ec01b6b2bfd61ecae3676884de63d349fac2f20c378bcd160bcf93f491121bbe9277da0ea59f20d689b29d9c8eebcc197a24b8ad3609c2e1ef1b56e5602dd407caf2489ab6b59ac3701758311c06afba6164f403aa2e4", @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xffe0, 0x8}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x6, 0xb, 0x1, 0x0, 0x9, 0x10, 0x2}}, {0x8, 0x2, [0x80, 0x75]}}, {{0x1c, 0x1, {0x3, 0x7d, 0xcea2, 0xc082, 0x2, 0x3, 0x9, 0x6}}, {0x10, 0x2, [0x1, 0x1, 0x101, 0x8, 0x40, 0x5]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5, 0x6, 0x2, 0x1, 0xffffffff, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x5b, 0x38, 0x1ff, 0x9, 0x0, 0x4fb5, 0x8, 0xa}}, {0x18, 0x2, [0x200, 0x4, 0x10, 0x82, 0x0, 0x5, 0x8, 0x5, 0x1, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) socket$unix(0x1, 0x1, 0x0) sendto$packet(r4, &(0x7f0000000440)="1fa8548412bf6878f2abcfc718736937aade83fbdebeb69e59901e52dd3098d85af3e468f7f03fb6d3e42a98d9ec792a65dc4a52af519f6e7fda983bfe0c4881daf3ac5c16b592ec2d4860c6c4e2104538f21f9f753c9ce2", 0x58, 0x2000e0d0, &(0x7f00000002c0)={0x11, 0x1c, 0x0, 0x1, 0xfe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@remote, @loopback, 0x0}, &(0x7f0000000140)=0xc) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x12, r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000f000000040000000100000000080000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r11) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="4d7e9178c87063b45600000000002babd44e884b130d8ab7a1ebb42a72fe9fe614d2c3f30fec60a4a9a2a7f79340cc54cc88a672c1d78347195c31f41c30c2e734afdd52f8e52b583d3d8a46f08f46f09273caa4a72cd69b8bd7b052ae09ebc3e25ae2fd7f12604364251344a68bab7834d94479811642bd427e50f4733a5a42ed98b6ead841acb113ff62e95f0f882c72d9ab042a43cd8948696f92460d832ef421c94622aeb6938afb1caae863b9f008117d52087a9aad"], 0x14}, 0x4, 0x700000000000000, 0x0, 0x4008000}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r11) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast1, @broadcast, r8}, 0xc) 2.319837834s ago: executing program 3 (id=3618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000140)=0x3, 0x4) (async) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000140)=0x3, 0x4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.301347141s ago: executing program 2 (id=3619): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r1, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)="000414a33451090000e700000000eb02d7188a") 2.288224246s ago: executing program 7 (id=3620): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r10, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa0e}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r11}, 0x10) ppoll(&(0x7f0000000100)=[{r3, 0x8000}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r13 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r13, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 1.80863386s ago: executing program 3 (id=3622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4800000001040104000000000d050001000100000008000340000000000a000200000001010200000008000540000000800600064000040000000000e9ffffff0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) unshare(0x2a020480) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r4, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0xfffffef8}}, 0x0) 1.583792215s ago: executing program 9 (id=3623): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 1.444088105s ago: executing program 3 (id=3624): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) socket$inet(0x2, 0x4, 0x80000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000180)=0x5, 0x4) 1.363942554s ago: executing program 2 (id=3625): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') unshare(0x6a040000) unshare(0x24020400) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x8, 0x3, 0x100) accept$alg(r1, 0x0, 0x0) 1.313551935s ago: executing program 9 (id=3626): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 1.238919677s ago: executing program 6 (id=3627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @private0, 0xdb}, 0x1c) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x45, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) write(0xffffffffffffffff, &(0x7f00000002c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca", 0x25) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x4040010) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1.136363762s ago: executing program 9 (id=3628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000064fcffffff850000000900000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.134698254s ago: executing program 7 (id=3629): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000008000000811175000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c005c06005c2f7c510000000000000000000000aafe8000000000000000000000000000aafffe40019b15c3248489b9aaf70e570fc9", @ANYRES32=0x41424344], 0x0) 1.026326473s ago: executing program 9 (id=3630): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000002c0)={'nat\x00', 0x0, 0x4, 0x36, [0x9a2, 0x0, 0x1, 0x50000, 0xfffffffffffffff7, 0x9], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000280)=""/54}, &(0x7f0000000340)=0x78) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x60) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x0, 0x9d, 0x62}, 0x2c) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) listen(r2, 0xb) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r5, &(0x7f0000005c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}], 0x1, 0x0) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) recvmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/39, 0x27}], 0x1}, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="26fcfdffff0000", @ANYRES16], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='b \x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000012000000002d00000000000000000000000000000100000000200002000a0000000000000000000000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 987.376012ms ago: executing program 7 (id=3631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@fallback=r5, 0x2e, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@fallback=r5, 0x2e, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) (async) 840.104509ms ago: executing program 6 (id=3632): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x99d3551565a72478}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) 592.090803ms ago: executing program 9 (id=3633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x30}}, 0x0) 591.833928ms ago: executing program 6 (id=3634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) unshare(0x6020480) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 591.506032ms ago: executing program 7 (id=3635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYRES32=r1, @ANYBLOB="95d803e02aaa1ab8297a373785a21e0ca249351aba3e727959f3d5eb4c5e727c734f052c490b8a1b33998d17b80402563b038341b90818f18254d25138f8a710c4c6bb4f64f4dc336f95285fb1e880d637e8db3655fd254773d966c67fe4e1067d3f32a90c41499d165f623039fd102fd30474adbb063559be3de0b80c11d5e549cbdca4f25a51382ca1dfe5a34d8aa68d29a9a43be001dab7b932fd", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2, 0x0, 0xffffffffffffffff}, 0xffffffffffffff5f) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="410900001c0012800b0001006970766c616e00000c0002d3410a1f0000c1c7d1e300880dbc2d6eb022a98bf9a7c1d15a58f086cde08a16ee5bb137d7c6fec6b7b34d270645fd8b235cdaab163a5c7a4ff3ef1f33fb7336785fad0cc70363f51a1482e09b9d8e631ec39910263386fc0ff57c3c9b12"], 0x3c}, 0x1, 0x0, 0x0, 0x24048045}, 0x4020000) getsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f00000004c0)=""/108, &(0x7f0000000540)=0x6c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async) r5 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='6'], 0x20) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) splice(r8, &(0x7f00000002c0)=0x3, r7, 0x0, 0xfffffffffffffff7, 0x0) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x138, 0x30, 0xffff, 0x0, 0x0, {}, [{0x124, 0x1, [@m_police={0xcc, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x8bd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}}}]]}, {0x62, 0x6, "f1e83a0b4d8edd77834a69c1737e938cb6ca65b433c4dd2dc4b878efa3f22e30a308869946e39595742a2a8e27f097fd4b11ca2c940f10274d0b2dec31b58946d3e1c2ec0d321b00000000000000cdde6dbf6696ca3a7f12595dca8f5c00"}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x138}}, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) (async) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) 518.388853ms ago: executing program 3 (id=3636): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 476.042413ms ago: executing program 2 (id=3637): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/73, 0x49}, {0x0}, {0x0}], 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000004, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f00000002c0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000900)={0x34, 0x0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x95}]}]}]}, 0x34}}, 0x4) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7d, 0x1e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x1c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xfff2, 0x5}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x404c090) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280140003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="04030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00'}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}}}, 0x84) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001640)=""/84, 0x50}, {&(0x7f00000015c0)=""/125, 0x7d}, {&(0x7f0000001800)=""/134, 0xfffffffffffffe7d}, {&(0x7f0000001700)=""/111, 0x6f}], 0x5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000001580)=[@window={0x3, 0xfff, 0x1}, @sack_perm, @timestamp, @window={0x3, 0x4, 0x8001}], 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[], 0x10448) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$cgroup_ro(r7, &(0x7f00000016c0)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000000280)=0x1) syz_emit_ethernet(0xe2, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0) 404.381193ms ago: executing program 6 (id=3638): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) close(0xffffffffffffffff) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @remote}, {0xa, 0x4e1f, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x897, 0x0, 0x1, 0x80000000]}}, 0x5c) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x26107}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r2}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x184, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x56, 0x45, "3353913d9da71b1051cfb6606543656632929fd316d24d6f294341753c5ba90ea9aaf7cd908c32ada8f504b11816534bb310730e54592242755bd83a5e012e5e75c96eab746926a765338dc701adff0fb505"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "d8283e14c6121109c336a4c5ca1a0883aa6d968d295a2b18c7716737df77016ca76c167f9f6166ac3cf6ad65e80476d85ec1b4576f3620b653d9a7792f0d650cff3ca1c1942af478f28ec4dd0d177c8dfb0406a982937dfdff35589775"}, @NL80211_ATTR_TESTDATA={0xb2, 0x45, "0f5cc7c72358671de98f5c07401855cef9749c67e79f4c97bc89410076128681fa4408745a8d4865f90aaf675ca1d7f66c4d77faadff22cfd8167fc809ef275bba87a60790f158107d2f575f1517392f44ab8c44e00a44fd377569f51110034520ddcc8a5fdc827bfb1c188398288160ba99254986cbe8c56ab0f42d1646958e966cdcab9c590b7c27182150e2e938714a455f49961355cd46f8735497e44a7f6446f2211567c9c36479651dbfdf"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x40009) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtaction={0xa0, 0x30, 0x200, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x0, 0x5, 0xfffe}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x6, "93bf9613dda1684109c12492ab9a7d544900938bbb22b1cf1228ec959d01b65cef6be2f6e0824eda3a4791880c6daf79dd0a8b135ea0666da28a96ac349a6123e26d638447f4b27ce9a4926bed1384a6679babe4a7ac5954a7"}, {}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 403.79423ms ago: executing program 9 (id=3639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}}, 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x1d, r7}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x5, 0x6, 0xff, {}, {r8, r9/1000+60000}, {0x2}, 0x1, @canfd={{0x0, 0x1, 0x0, 0x1}, 0xf, 0x1, 0x0, 0x0, "0782363b7a12aa92b3744b1d839dcdf2cb910526991b266a778a3f5e1d18ae57b5d11677e916f434665b144dcfd8041e7fceab87c76d59bd806427e6afb0da0d"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000019) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 390.221022ms ago: executing program 3 (id=3640): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000fcffffff856400000900000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 264.171516ms ago: executing program 6 (id=3641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc2b00000, 0x7f, 0x9d, 0x500, 0x6, 0x8}) 262.573482ms ago: executing program 3 (id=3642): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, 0x0, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000004000000040800b3b5c7d300000012d1097edd50904642acc13d409df402675b82689d2f7b54d1e98fe579265d94d573aadb1e0f03878245d74d3a2a3ac144ea6057f5cc370dbfc708f85142d7f49354963bf09a715572395e3be6655924361ae78bd75d3afde52defde4d52", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES32, @ANYRES64=r3], 0x48) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r5}, 0x20) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000240)={0x20000000}) r7 = socket(0x1, 0x80802, 0x0) r8 = epoll_create1(0x0) r9 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r11}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) epoll_pwait(r8, 0x0, 0x0, 0x80000000, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000800000a050300000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010002000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574000014000280080002400000000108000140000000020c000b4000000000090000001400000011000100000000000000000a0000000a"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 149.297693ms ago: executing program 6 (id=3643): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x185}, 0x4) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x18, 0x0, &(0x7f0000000040)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x60702, 0x0) 0s ago: executing program 7 (id=3644): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r4, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010003704e4ffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="83040500000000001c0012800b00010067726574617000000c00028008000700ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) kernel console output (not intermixed with test programs): transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.729429][T16675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.772744][T16746] wg1 speed is unknown, defaulting to 1000 [ 382.792950][T16746] dummy0 speed is unknown, defaulting to 1000 [ 383.078026][T16675] hsr_slave_0: entered promiscuous mode [ 383.085274][T16675] hsr_slave_1: entered promiscuous mode [ 383.096609][T16675] debugfs: 'hsr0' already exists in 'hsr' [ 383.102503][T16675] Cannot create hsr debugfs directory [ 383.170809][T16766] netlink: 'syz.6.2870': attribute type 10 has an invalid length. [ 383.188006][T16767] netlink: 'syz.6.2870': attribute type 10 has an invalid length. [ 383.213597][T16766] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 383.499679][T16117] net_ratelimit: 10 callbacks suppressed [ 383.499699][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 383.623075][T16675] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.633976][T16675] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.644526][T16675] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 383.716271][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 383.780350][T16675] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.816508][T16675] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.836109][T16675] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 383.930197][T16675] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.943575][T16675] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.953787][T16675] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 383.986669][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 384.015373][T16675] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.027535][T16675] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.038958][T16675] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 384.101660][T16793] wg1 speed is unknown, defaulting to 1000 [ 384.106740][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 384.123750][T16793] dummy0 speed is unknown, defaulting to 1000 [ 384.278777][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 384.306427][ T51] Bluetooth: hci3: command tx timeout [ 384.322923][T16675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.343665][T16802] FAULT_INJECTION: forcing a failure. [ 384.343665][T16802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.382202][T16675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.394027][T16802] CPU: 1 UID: 0 PID: 16802 Comm: syz.7.2885 Not tainted syzkaller #0 PREEMPT(full) [ 384.394057][T16802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.394075][T16802] Call Trace: [ 384.394087][T16802] [ 384.394096][T16802] dump_stack_lvl+0x189/0x250 [ 384.394123][T16802] ? __pfx____ratelimit+0x10/0x10 [ 384.394155][T16802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.394178][T16802] ? __pfx__printk+0x10/0x10 [ 384.394202][T16802] ? __might_fault+0xb0/0x130 [ 384.394240][T16802] should_fail_ex+0x414/0x560 [ 384.394274][T16802] _copy_from_user+0x2d/0xb0 [ 384.394299][T16802] ___sys_sendmsg+0x158/0x2a0 [ 384.394329][T16802] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.394401][T16802] ? __fget_files+0x2a/0x420 [ 384.394430][T16802] ? __fget_files+0x3a0/0x420 [ 384.394471][T16802] __x64_sys_sendmsg+0x19b/0x260 [ 384.394500][T16802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.394536][T16802] ? __pfx_ksys_write+0x10/0x10 [ 384.394560][T16802] ? rcu_is_watching+0x15/0xb0 [ 384.394589][T16802] ? do_syscall_64+0xbe/0x3b0 [ 384.394613][T16802] do_syscall_64+0xfa/0x3b0 [ 384.394631][T16802] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.394662][T16802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.394682][T16802] ? clear_bhb_loop+0x60/0xb0 [ 384.394707][T16802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.394727][T16802] RIP: 0033:0x7f07f518eec9 [ 384.394745][T16802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.394762][T16802] RSP: 002b:00007f07f60dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.394784][T16802] RAX: ffffffffffffffda RBX: 00007f07f53e5fa0 RCX: 00007f07f518eec9 [ 384.394799][T16802] RDX: 0000000000040094 RSI: 0000200000000100 RDI: 0000000000000003 [ 384.394812][T16802] RBP: 00007f07f60dd090 R08: 0000000000000000 R09: 0000000000000000 [ 384.394825][T16802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.394837][T16802] R13: 00007f07f53e6038 R14: 00007f07f53e5fa0 R15: 00007ffef64eebe8 [ 384.394869][T16802] [ 384.751856][T16675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.764963][T16675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.131676][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 385.286151][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 385.531474][T16847] wg1 speed is unknown, defaulting to 1000 [ 385.543516][T16847] dummy0 speed is unknown, defaulting to 1000 [ 385.558522][T16675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.573453][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 385.634606][T16675] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.664862][T16131] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.672125][T16131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.822918][T16859] FAULT_INJECTION: forcing a failure. [ 385.822918][T16859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.857142][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 385.864699][T16859] CPU: 0 UID: 0 PID: 16859 Comm: syz.7.2900 Not tainted syzkaller #0 PREEMPT(full) [ 385.864726][T16859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.864739][T16859] Call Trace: [ 385.864749][T16859] [ 385.864758][T16859] dump_stack_lvl+0x189/0x250 [ 385.864786][T16859] ? __pfx____ratelimit+0x10/0x10 [ 385.864818][T16859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.864840][T16859] ? __pfx__printk+0x10/0x10 [ 385.864865][T16859] ? __might_fault+0xb0/0x130 [ 385.864904][T16859] should_fail_ex+0x414/0x560 [ 385.864940][T16859] _copy_from_user+0x2d/0xb0 [ 385.864966][T16859] kstrtouint_from_user+0xc4/0x170 [ 385.864990][T16859] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 385.865030][T16859] proc_fail_nth_write+0x88/0x200 [ 385.865051][T16859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 385.865078][T16859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 385.865101][T16859] vfs_write+0x27b/0xb30 [ 385.865137][T16859] ? __pfx_vfs_write+0x10/0x10 [ 385.865169][T16859] ? __fget_files+0x2a/0x420 [ 385.865202][T16859] ? __fget_files+0x3a0/0x420 [ 385.865228][T16859] ? __fget_files+0x2a/0x420 [ 385.865266][T16859] ksys_write+0x145/0x250 [ 385.865295][T16859] ? __pfx_ksys_write+0x10/0x10 [ 385.865316][T16859] ? rcu_is_watching+0x15/0xb0 [ 385.865340][T16859] ? do_syscall_64+0xbe/0x3b0 [ 385.865364][T16859] do_syscall_64+0xfa/0x3b0 [ 385.865395][T16859] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.865426][T16859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.865446][T16859] ? clear_bhb_loop+0x60/0xb0 [ 385.865471][T16859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.865491][T16859] RIP: 0033:0x7f07f518d97f [ 385.865509][T16859] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 385.865527][T16859] RSP: 002b:00007f07f60dd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 385.865548][T16859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07f518d97f [ 385.865563][T16859] RDX: 0000000000000001 RSI: 00007f07f60dd0a0 RDI: 0000000000000004 [ 385.865575][T16859] RBP: 00007f07f60dd090 R08: 0000000000000000 R09: 0000000000000000 [ 385.865587][T16859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 385.865599][T16859] R13: 00007f07f53e6038 R14: 00007f07f53e5fa0 R15: 00007ffef64eebe8 [ 385.865634][T16859] [ 386.124040][T16129] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.131309][T16129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.238809][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 386.310030][T16675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.320604][T16675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.396851][ T51] Bluetooth: hci3: command tx timeout [ 386.429885][T16870] veth0_vlan: left promiscuous mode [ 386.446843][T16870] veth0_vlan: entered promiscuous mode [ 386.753767][T16675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.842111][T16882] wg1 speed is unknown, defaulting to 1000 [ 386.844996][T16883] __nla_validate_parse: 8 callbacks suppressed [ 386.845019][T16883] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2906'. [ 386.888489][T16882] dummy0 speed is unknown, defaulting to 1000 [ 386.977000][T16675] veth0_vlan: entered promiscuous mode [ 386.994949][T16675] veth1_vlan: entered promiscuous mode [ 387.111223][T16675] veth0_macvtap: entered promiscuous mode [ 387.141566][T16675] veth1_macvtap: entered promiscuous mode [ 387.182186][T16675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.213108][T16675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.234031][T16130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.245341][T16130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.312252][T16130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.354646][T16130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.435530][T16117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.462830][T16117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.476602][T16901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 387.614258][T16129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.637820][T16129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.305230][T16935] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.2918'. [ 388.394673][ T1074] block nbd0: Possible stuck request ffff888024f37000: control (read@0,1024B). Runtime 240 seconds [ 388.405848][ T1074] block nbd0: Possible stuck request ffff888024f371c0: control (read@1024,1024B). Runtime 240 seconds [ 388.417278][ T1074] block nbd0: Possible stuck request ffff888024f37380: control (read@2048,1024B). Runtime 240 seconds [ 388.428680][ T1074] block nbd0: Possible stuck request ffff888024f37540: control (read@3072,1024B). Runtime 240 seconds [ 388.466359][ T51] Bluetooth: hci3: command tx timeout [ 388.566151][T16123] net_ratelimit: 14 callbacks suppressed [ 388.566171][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 388.746394][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 388.828857][T16946] netlink: 'syz.3.2923': attribute type 5 has an invalid length. [ 388.916778][T16129] bond4: (slave macvlan0): failed to get link speed/duplex [ 388.931551][ T5882] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 388.942115][ T5882] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 388.956405][ T5882] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 388.977321][ T5882] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 389.027800][ T5882] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 389.066546][ T3527] bond4: (slave macvlan0): failed to get link speed/duplex [ 389.191657][T16958] wg1 speed is unknown, defaulting to 1000 [ 389.207555][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 389.232705][T16968] FAULT_INJECTION: forcing a failure. [ 389.232705][T16968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.248098][T16958] dummy0 speed is unknown, defaulting to 1000 [ 389.306384][T16968] CPU: 1 UID: 0 PID: 16968 Comm: syz.3.2926 Not tainted syzkaller #0 PREEMPT(full) [ 389.306415][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.306428][T16968] Call Trace: [ 389.306436][T16968] [ 389.306446][T16968] dump_stack_lvl+0x189/0x250 [ 389.306475][T16968] ? __pfx____ratelimit+0x10/0x10 [ 389.306507][T16968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.306531][T16968] ? __pfx__printk+0x10/0x10 [ 389.306559][T16968] ? __might_fault+0xb0/0x130 [ 389.306599][T16968] should_fail_ex+0x414/0x560 [ 389.306635][T16968] _copy_from_iter+0x1de/0x1790 [ 389.306666][T16968] ? rcu_is_watching+0x15/0xb0 [ 389.306687][T16968] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 389.306716][T16968] ? __pfx__copy_from_iter+0x10/0x10 [ 389.306741][T16968] ? __build_skb_around+0x257/0x3e0 [ 389.306768][T16968] ? netlink_sendmsg+0x642/0xb30 [ 389.306789][T16968] ? skb_put+0x11b/0x210 [ 389.306816][T16968] netlink_sendmsg+0x6b2/0xb30 [ 389.306850][T16968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.306877][T16968] ? aa_sock_msg_perm+0xf1/0x1d0 [ 389.306911][T16968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.306932][T16968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.306956][T16968] __sock_sendmsg+0x219/0x270 [ 389.306991][T16968] ____sys_sendmsg+0x505/0x830 [ 389.307024][T16968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.307061][T16968] ? import_iovec+0x74/0xa0 [ 389.307090][T16968] ___sys_sendmsg+0x21f/0x2a0 [ 389.307132][T16968] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.307200][T16968] ? __fget_files+0x2a/0x420 [ 389.307229][T16968] ? __fget_files+0x3a0/0x420 [ 389.307270][T16968] __x64_sys_sendmsg+0x19b/0x260 [ 389.307300][T16968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.307338][T16968] ? __pfx_ksys_write+0x10/0x10 [ 389.307361][T16968] ? rcu_is_watching+0x15/0xb0 [ 389.307386][T16968] ? do_syscall_64+0xbe/0x3b0 [ 389.307410][T16968] do_syscall_64+0xfa/0x3b0 [ 389.307429][T16968] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.307458][T16968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.307479][T16968] ? clear_bhb_loop+0x60/0xb0 [ 389.307504][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.307524][T16968] RIP: 0033:0x7f999738eec9 [ 389.307543][T16968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.307559][T16968] RSP: 002b:00007f9998264038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.307581][T16968] RAX: ffffffffffffffda RBX: 00007f99975e5fa0 RCX: 00007f999738eec9 [ 389.307596][T16968] RDX: 0000000000040094 RSI: 0000200000000100 RDI: 0000000000000003 [ 389.307609][T16968] RBP: 00007f9998264090 R08: 0000000000000000 R09: 0000000000000000 [ 389.307622][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.307634][T16968] R13: 00007f99975e6038 R14: 00007f99975e5fa0 R15: 00007ffee1fe6cb8 [ 389.307668][T16968] [ 389.596461][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 389.700488][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2925'. [ 389.759075][T16972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2928'. [ 389.786436][T16974] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2928'. [ 389.808380][T16976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2929'. [ 389.877062][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 389.995705][T16982] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 390.039441][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2930'. [ 390.041933][T16982] batman_adv: batadv0: Adding interface: gretap1 [ 390.074384][T16982] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.125206][T16982] batman_adv: batadv0: Interface activated: gretap1 [ 390.374100][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2936'. [ 390.583071][T17009] FAULT_INJECTION: forcing a failure. [ 390.583071][T17009] name failslab, interval 1, probability 0, space 0, times 0 [ 390.629600][T17009] CPU: 0 UID: 0 PID: 17009 Comm: syz.6.2938 Not tainted syzkaller #0 PREEMPT(full) [ 390.629630][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.629644][T17009] Call Trace: [ 390.629652][T17009] [ 390.629661][T17009] dump_stack_lvl+0x189/0x250 [ 390.629690][T17009] ? __pfx____ratelimit+0x10/0x10 [ 390.629721][T17009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.629745][T17009] ? __pfx__printk+0x10/0x10 [ 390.629773][T17009] ? __lock_acquire+0xab9/0xd20 [ 390.629812][T17009] should_fail_ex+0x414/0x560 [ 390.629848][T17009] should_failslab+0xa8/0x100 [ 390.629880][T17009] kmem_cache_alloc_noprof+0x73/0x3c0 [ 390.629904][T17009] ? skb_clone+0x212/0x3a0 [ 390.629938][T17009] skb_clone+0x212/0x3a0 [ 390.629969][T17009] __netlink_deliver_tap+0x404/0x850 [ 390.630008][T17009] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.630041][T17009] netlink_deliver_tap+0x19c/0x1b0 [ 390.630065][T17009] netlink_unicast+0x7fa/0x9e0 [ 390.630095][T17009] ? __pfx_netlink_unicast+0x10/0x10 [ 390.630118][T17009] ? netlink_sendmsg+0x642/0xb30 [ 390.630139][T17009] ? skb_put+0x11b/0x210 [ 390.630167][T17009] netlink_sendmsg+0x805/0xb30 [ 390.630201][T17009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.630229][T17009] ? aa_sock_msg_perm+0xf1/0x1d0 [ 390.630263][T17009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.630284][T17009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.630309][T17009] __sock_sendmsg+0x219/0x270 [ 390.630344][T17009] ____sys_sendmsg+0x505/0x830 [ 390.630376][T17009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.630414][T17009] ? import_iovec+0x74/0xa0 [ 390.630444][T17009] ___sys_sendmsg+0x21f/0x2a0 [ 390.630473][T17009] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.630543][T17009] ? __fget_files+0x2a/0x420 [ 390.630572][T17009] ? __fget_files+0x3a0/0x420 [ 390.630619][T17009] __x64_sys_sendmsg+0x19b/0x260 [ 390.630649][T17009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.630687][T17009] ? __pfx_ksys_write+0x10/0x10 [ 390.630710][T17009] ? rcu_is_watching+0x15/0xb0 [ 390.630735][T17009] ? do_syscall_64+0xbe/0x3b0 [ 390.630760][T17009] do_syscall_64+0xfa/0x3b0 [ 390.630779][T17009] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.630809][T17009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.630830][T17009] ? clear_bhb_loop+0x60/0xb0 [ 390.630855][T17009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.630875][T17009] RIP: 0033:0x7fc74698eec9 [ 390.630894][T17009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.630911][T17009] RSP: 002b:00007fc747846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.630933][T17009] RAX: ffffffffffffffda RBX: 00007fc746be5fa0 RCX: 00007fc74698eec9 [ 390.630949][T17009] RDX: 0000000000040094 RSI: 0000200000000100 RDI: 0000000000000003 [ 390.630961][T17009] RBP: 00007fc747846090 R08: 0000000000000000 R09: 0000000000000000 [ 390.630974][T17009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.630986][T17009] R13: 00007fc746be6038 R14: 00007fc746be5fa0 R15: 00007ffe06ce0b48 [ 390.631028][T17009] [ 390.693337][T16117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 390.980562][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 391.027413][T16958] chnl_net:caif_netlink_parms(): no params data found [ 391.045035][T16130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 391.083832][T16117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 391.106591][ T51] Bluetooth: hci8: command tx timeout [ 391.164965][T16117] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 391.440698][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2946'. [ 391.483803][ T3527] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 391.694674][ T3527] erspan0 (unregistering): left allmulticast mode [ 392.194328][ T3527] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 392.208995][ T3527] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 392.221660][ T3527] bond0 (unregistering): Released all slaves [ 392.244810][ T3527] bond1 (unregistering): Released all slaves [ 392.272270][ T3527] bond2 (unregistering): Released all slaves [ 392.295523][ T3527] bond3 (unregistering): Released all slaves [ 392.429029][ T3527] bond4 (unregistering): Released all slaves [ 392.710418][T17042] hsr_slave_1 (unregistering): left promiscuous mode [ 392.968491][T17064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.986303][ T3527] tipc: Disabling bearer [ 392.996595][ T3527] tipc: Disabling bearer [ 393.006650][ T3527] tipc: Left network mode [ 393.100966][T17067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.170739][T16958] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.186367][ T51] Bluetooth: hci8: command tx timeout [ 393.196503][T16958] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.214613][T16958] bridge_slave_0: entered allmulticast mode [ 393.223117][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2957'. [ 393.223237][T16958] bridge_slave_0: entered promiscuous mode [ 393.249706][T17072] veth0: entered promiscuous mode [ 393.268422][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 393.275088][T16958] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.286715][T16958] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.294023][T16958] bridge_slave_1: entered allmulticast mode [ 393.303762][T16958] bridge_slave_1: entered promiscuous mode [ 393.454159][T16958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.473635][T16958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.549558][T17082] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 393.637312][T16958] team0: Port device team_slave_0 added [ 393.652544][T17087] FAULT_INJECTION: forcing a failure. [ 393.652544][T17087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.667288][T17087] CPU: 1 UID: 0 PID: 17087 Comm: syz.6.2961 Not tainted syzkaller #0 PREEMPT(full) [ 393.667316][T17087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.667328][T17087] Call Trace: [ 393.667336][T17087] [ 393.667344][T17087] dump_stack_lvl+0x189/0x250 [ 393.667371][T17087] ? __pfx____ratelimit+0x10/0x10 [ 393.667401][T17087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.667424][T17087] ? __pfx__printk+0x10/0x10 [ 393.667451][T17087] ? __might_fault+0xb0/0x130 [ 393.667488][T17087] should_fail_ex+0x414/0x560 [ 393.667521][T17087] _copy_from_user+0x2d/0xb0 [ 393.667546][T17087] ___sys_sendmsg+0x158/0x2a0 [ 393.667577][T17087] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.667640][T17087] ? __fget_files+0x2a/0x420 [ 393.667668][T17087] ? __fget_files+0x3a0/0x420 [ 393.667708][T17087] __x64_sys_sendmsg+0x19b/0x260 [ 393.667737][T17087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.667774][T17087] ? __pfx_ksys_write+0x10/0x10 [ 393.667809][T17087] ? rcu_is_watching+0x15/0xb0 [ 393.667832][T17087] ? do_syscall_64+0xbe/0x3b0 [ 393.667857][T17087] do_syscall_64+0xfa/0x3b0 [ 393.667875][T17087] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.667903][T17087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.667923][T17087] ? clear_bhb_loop+0x60/0xb0 [ 393.667947][T17087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.667966][T17087] RIP: 0033:0x7fc74698eec9 [ 393.667985][T17087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.668003][T17087] RSP: 002b:00007fc747846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.668025][T17087] RAX: ffffffffffffffda RBX: 00007fc746be5fa0 RCX: 00007fc74698eec9 [ 393.668039][T17087] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 393.668052][T17087] RBP: 00007fc747846090 R08: 0000000000000000 R09: 0000000000000000 [ 393.668064][T17087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.668076][T17087] R13: 00007fc746be6038 R14: 00007fc746be5fa0 R15: 00007ffe06ce0b48 [ 393.668109][T17087] [ 393.674352][T17087] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 393.936143][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 393.961099][T16958] team0: Port device team_slave_1 added [ 394.061372][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 394.534416][T16958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.562573][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.646502][T16958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.727222][T16958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.754646][T16958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.813874][T16958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.838499][T17108] syzkaller1: entered promiscuous mode [ 394.844487][T17108] syzkaller1: entered allmulticast mode [ 394.888645][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 395.085606][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2968'. [ 395.272559][ T51] Bluetooth: hci8: command tx timeout [ 395.426673][ T1074] block nbd4: Possible stuck request ffff888025067000: control (read@0,1024B). Runtime 270 seconds [ 395.446287][ T1074] block nbd4: Possible stuck request ffff8880250671c0: control (read@1024,1024B). Runtime 270 seconds [ 395.457919][ T1074] block nbd4: Possible stuck request ffff888025067380: control (read@2048,1024B). Runtime 270 seconds [ 395.469624][ T1074] block nbd4: Possible stuck request ffff888025067540: control (read@3072,1024B). Runtime 270 seconds [ 395.519059][T16958] hsr_slave_0: entered promiscuous mode [ 395.532129][T17142] FAULT_INJECTION: forcing a failure. [ 395.532129][T17142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.549021][T16958] hsr_slave_1: entered promiscuous mode [ 395.556427][T16958] debugfs: 'hsr0' already exists in 'hsr' [ 395.562205][T16958] Cannot create hsr debugfs directory [ 395.575670][T17142] CPU: 0 UID: 0 PID: 17142 Comm: syz.7.2969 Not tainted syzkaller #0 PREEMPT(full) [ 395.575707][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.575719][T17142] Call Trace: [ 395.575727][T17142] [ 395.575736][T17142] dump_stack_lvl+0x189/0x250 [ 395.575762][T17142] ? __pfx____ratelimit+0x10/0x10 [ 395.575793][T17142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.575816][T17142] ? __pfx__printk+0x10/0x10 [ 395.575859][T17142] should_fail_ex+0x414/0x560 [ 395.575894][T17142] _copy_to_user+0x31/0xb0 [ 395.575921][T17142] simple_read_from_buffer+0xe1/0x170 [ 395.575960][T17142] proc_fail_nth_read+0x1b3/0x220 [ 395.575986][T17142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.576011][T17142] ? rw_verify_area+0x2a6/0x4d0 [ 395.576034][T17142] ? __lock_acquire+0xab9/0xd20 [ 395.576060][T17142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.576083][T17142] vfs_read+0x200/0xa30 [ 395.576106][T17142] ? fdget_pos+0x247/0x320 [ 395.576140][T17142] ? __pfx___mutex_lock+0x10/0x10 [ 395.576160][T17142] ? __pfx_vfs_read+0x10/0x10 [ 395.576187][T17142] ? __fget_files+0x2a/0x420 [ 395.576221][T17142] ? __fget_files+0x3a0/0x420 [ 395.576248][T17142] ? __fget_files+0x2a/0x420 [ 395.576287][T17142] ksys_read+0x145/0x250 [ 395.576314][T17142] ? __pfx_ksys_read+0x10/0x10 [ 395.576336][T17142] ? rcu_is_watching+0x15/0xb0 [ 395.576362][T17142] ? do_syscall_64+0xbe/0x3b0 [ 395.576388][T17142] do_syscall_64+0xfa/0x3b0 [ 395.576406][T17142] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.576437][T17142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.576458][T17142] ? clear_bhb_loop+0x60/0xb0 [ 395.576483][T17142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.576503][T17142] RIP: 0033:0x7f07f518d8dc [ 395.576521][T17142] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 395.576539][T17142] RSP: 002b:00007f07f60dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.576560][T17142] RAX: ffffffffffffffda RBX: 00007f07f53e5fa0 RCX: 00007f07f518d8dc [ 395.576575][T17142] RDX: 000000000000000f RSI: 00007f07f60dd0a0 RDI: 0000000000000004 [ 395.576588][T17142] RBP: 00007f07f60dd090 R08: 0000000000000000 R09: 0000000000000000 [ 395.576601][T17142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.576613][T17142] R13: 00007f07f53e6038 R14: 00007f07f53e5fa0 R15: 00007ffef64eebe8 [ 395.576647][T17142] [ 395.868932][ T3527] veth0_vlan: left promiscuous mode [ 395.929244][T17146] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 395.950338][T17146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2971'. [ 397.030995][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 397.133891][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2978'. [ 397.184464][T17170] FAULT_INJECTION: forcing a failure. [ 397.184464][T17170] name failslab, interval 1, probability 0, space 0, times 0 [ 397.197487][T17170] CPU: 0 UID: 0 PID: 17170 Comm: syz.3.2979 Not tainted syzkaller #0 PREEMPT(full) [ 397.197515][T17170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.197528][T17170] Call Trace: [ 397.197536][T17170] [ 397.197544][T17170] dump_stack_lvl+0x189/0x250 [ 397.197571][T17170] ? __pfx____ratelimit+0x10/0x10 [ 397.197603][T17170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.197626][T17170] ? __pfx__printk+0x10/0x10 [ 397.197659][T17170] ? __lock_acquire+0xab9/0xd20 [ 397.197694][T17170] should_fail_ex+0x414/0x560 [ 397.197730][T17170] should_failslab+0xa8/0x100 [ 397.197760][T17170] kmem_cache_alloc_noprof+0x73/0x3c0 [ 397.197785][T17170] ? skb_clone+0x212/0x3a0 [ 397.197818][T17170] ? run_filter+0x23/0x270 [ 397.197841][T17170] skb_clone+0x212/0x3a0 [ 397.197866][T17170] ? packet_rcv+0x567/0x1730 [ 397.197898][T17170] packet_rcv+0x65b/0x1730 [ 397.197937][T17170] ? __pfx_packet_rcv_fanout+0x10/0x10 [ 397.197979][T17170] __netif_receive_skb_core+0x3107/0x4020 [ 397.198024][T17170] ? __kernel_text_address+0xd/0x40 [ 397.198051][T17170] ? unwind_get_return_address+0x4d/0x90 [ 397.198073][T17170] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.198109][T17170] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 397.198143][T17170] ? stack_trace_save+0x9c/0xe0 [ 397.198165][T17170] ? __pfx_stack_trace_save+0x10/0x10 [ 397.198205][T17170] ? netif_receive_skb+0x115/0x790 [ 397.198238][T17170] ? netif_receive_skb+0x115/0x790 [ 397.198272][T17170] __netif_receive_skb+0x72/0x380 [ 397.198311][T17170] ? netif_receive_skb+0x115/0x790 [ 397.198340][T17170] netif_receive_skb+0x1cb/0x790 [ 397.198371][T17170] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 397.198404][T17170] ? __pfx_netif_receive_skb+0x10/0x10 [ 397.198442][T17170] ? tun_rx_batched+0x160/0x730 [ 397.198468][T17170] tun_rx_batched+0x1b9/0x730 [ 397.198491][T17170] ? __lock_acquire+0xab9/0xd20 [ 397.198523][T17170] ? __pfx_tun_rx_batched+0x10/0x10 [ 397.198550][T17170] ? tun_get_user+0x266c/0x3e20 [ 397.198590][T17170] tun_get_user+0x2aa2/0x3e20 [ 397.198621][T17170] ? tun_get_user+0x6f6/0x3e20 [ 397.198644][T17170] ? tun_get_user+0x266c/0x3e20 [ 397.198671][T17170] ? aa_file_perm+0x44d/0x1550 [ 397.198692][T17170] ? __pfx_tun_get_user+0x10/0x10 [ 397.198727][T17170] ? __lock_acquire+0xab9/0xd20 [ 397.198761][T17170] ? ref_tracker_alloc+0x318/0x460 [ 397.198790][T17170] ? __lock_acquire+0xab9/0xd20 [ 397.198827][T17170] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 397.198863][T17170] ? tun_get+0x1c/0x2f0 [ 397.198892][T17170] ? tun_get+0x1c/0x2f0 [ 397.198913][T17170] ? tun_get+0x1c/0x2f0 [ 397.198941][T17170] tun_chr_write_iter+0x113/0x200 [ 397.198967][T17170] vfs_write+0x5c6/0xb30 [ 397.198998][T17170] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 397.199021][T17170] ? __pfx_vfs_write+0x10/0x10 [ 397.199057][T17170] ? __fget_files+0x2a/0x420 [ 397.199098][T17170] ksys_write+0x145/0x250 [ 397.199127][T17170] ? __pfx_ksys_write+0x10/0x10 [ 397.199149][T17170] ? rcu_is_watching+0x15/0xb0 [ 397.199174][T17170] ? do_syscall_64+0xbe/0x3b0 [ 397.199199][T17170] do_syscall_64+0xfa/0x3b0 [ 397.199218][T17170] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.199249][T17170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.199269][T17170] ? clear_bhb_loop+0x60/0xb0 [ 397.199295][T17170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.199315][T17170] RIP: 0033:0x7f999738d97f [ 397.199333][T17170] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 397.199351][T17170] RSP: 002b:00007f9998264000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 397.199373][T17170] RAX: ffffffffffffffda RBX: 00007f99975e5fa0 RCX: 00007f999738d97f [ 397.199388][T17170] RDX: 000000000000002a RSI: 0000200000000080 RDI: 00000000000000c8 [ 397.199401][T17170] RBP: 00007f9998264090 R08: 0000000000000000 R09: 0000000000000000 [ 397.199413][T17170] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 397.199425][T17170] R13: 00007f99975e6038 R14: 00007f99975e5fa0 R15: 00007ffee1fe6cb8 [ 397.199458][T17170] [ 397.208471][T17172] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 397.371995][ T51] Bluetooth: hci8: command tx timeout [ 397.448386][T17162] netlink: 'syz.1.2976': attribute type 1 has an invalid length. [ 397.645407][T17162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'. [ 397.799656][T17175] kthread_run failed with err -4 [ 397.987081][ T51] Bluetooth: hci0: command tx timeout [ 398.101130][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 398.285141][T16125] bond4: (slave macvlan0): failed to get link speed/duplex [ 398.388954][T16958] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 398.526555][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 398.628589][T16958] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 398.707058][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 398.740649][T16958] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 398.871545][T17220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2987'. [ 398.909095][T16958] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 398.927423][T17223] FAULT_INJECTION: forcing a failure. [ 398.927423][T17223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.957730][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2990'. [ 398.968638][T17223] CPU: 1 UID: 0 PID: 17223 Comm: syz.3.2991 Not tainted syzkaller #0 PREEMPT(full) [ 398.968668][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.968681][T17223] Call Trace: [ 398.968689][T17223] [ 398.968698][T17223] dump_stack_lvl+0x189/0x250 [ 398.968728][T17223] ? __pfx____ratelimit+0x10/0x10 [ 398.968760][T17223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.968782][T17223] ? __pfx__printk+0x10/0x10 [ 398.968824][T17223] should_fail_ex+0x414/0x560 [ 398.968859][T17223] _copy_to_user+0x31/0xb0 [ 398.968887][T17223] simple_read_from_buffer+0xe1/0x170 [ 398.968921][T17223] proc_fail_nth_read+0x1b3/0x220 [ 398.968947][T17223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.968972][T17223] ? rw_verify_area+0x2a6/0x4d0 [ 398.968995][T17223] ? __lock_acquire+0xab9/0xd20 [ 398.969021][T17223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.969045][T17223] vfs_read+0x200/0xa30 [ 398.969067][T17223] ? fdget_pos+0x247/0x320 [ 398.969102][T17223] ? __pfx___mutex_lock+0x10/0x10 [ 398.969123][T17223] ? __pfx_vfs_read+0x10/0x10 [ 398.969150][T17223] ? __fget_files+0x2a/0x420 [ 398.969184][T17223] ? __fget_files+0x3a0/0x420 [ 398.969212][T17223] ? __fget_files+0x2a/0x420 [ 398.969251][T17223] ksys_read+0x145/0x250 [ 398.969280][T17223] ? __pfx_ksys_read+0x10/0x10 [ 398.969301][T17223] ? rcu_is_watching+0x15/0xb0 [ 398.969333][T17223] ? do_syscall_64+0xbe/0x3b0 [ 398.969358][T17223] do_syscall_64+0xfa/0x3b0 [ 398.969376][T17223] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.969406][T17223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.969426][T17223] ? clear_bhb_loop+0x60/0xb0 [ 398.969463][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.969483][T17223] RIP: 0033:0x7f999738d8dc [ 398.969501][T17223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.969519][T17223] RSP: 002b:00007f9998264030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.969540][T17223] RAX: ffffffffffffffda RBX: 00007f99975e5fa0 RCX: 00007f999738d8dc [ 398.969556][T17223] RDX: 000000000000000f RSI: 00007f99982640a0 RDI: 0000000000000004 [ 398.969568][T17223] RBP: 00007f9998264090 R08: 0000000000000000 R09: 0000000000000000 [ 398.969581][T17223] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 398.969593][T17223] R13: 00007f99975e6038 R14: 00007f99975e5fa0 R15: 00007ffee1fe6cb8 [ 398.969628][T17223] [ 399.296570][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 399.379338][T17230] FAULT_INJECTION: forcing a failure. [ 399.379338][T17230] name failslab, interval 1, probability 0, space 0, times 0 [ 399.392101][T17230] CPU: 0 UID: 0 PID: 17230 Comm: syz.3.2992 Not tainted syzkaller #0 PREEMPT(full) [ 399.392130][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.392142][T17230] Call Trace: [ 399.392152][T17230] [ 399.392161][T17230] dump_stack_lvl+0x189/0x250 [ 399.392189][T17230] ? __pfx____ratelimit+0x10/0x10 [ 399.392221][T17230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.392243][T17230] ? __pfx__printk+0x10/0x10 [ 399.392271][T17230] ? __lock_acquire+0xab9/0xd20 [ 399.392303][T17230] should_fail_ex+0x414/0x560 [ 399.392332][T17230] should_failslab+0xa8/0x100 [ 399.392361][T17230] kmem_cache_alloc_noprof+0x73/0x3c0 [ 399.392385][T17230] ? skb_clone+0x212/0x3a0 [ 399.392415][T17230] skb_clone+0x212/0x3a0 [ 399.392445][T17230] __netlink_deliver_tap+0x404/0x850 [ 399.392481][T17230] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.392504][T17230] netlink_deliver_tap+0x19c/0x1b0 [ 399.392528][T17230] netlink_unicast+0x7fa/0x9e0 [ 399.392555][T17230] ? __pfx_netlink_unicast+0x10/0x10 [ 399.392576][T17230] ? netlink_sendmsg+0x642/0xb30 [ 399.392596][T17230] ? skb_put+0x11b/0x210 [ 399.392623][T17230] netlink_sendmsg+0x805/0xb30 [ 399.392664][T17230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.392690][T17230] ? aa_sock_msg_perm+0xf1/0x1d0 [ 399.392723][T17230] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.392744][T17230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.392768][T17230] __sock_sendmsg+0x219/0x270 [ 399.392803][T17230] ____sys_sendmsg+0x505/0x830 [ 399.392835][T17230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.392870][T17230] ? import_iovec+0x74/0xa0 [ 399.392898][T17230] ___sys_sendmsg+0x21f/0x2a0 [ 399.392926][T17230] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.392992][T17230] ? __fget_files+0x2a/0x420 [ 399.393020][T17230] ? __fget_files+0x3a0/0x420 [ 399.393062][T17230] __x64_sys_sendmsg+0x19b/0x260 [ 399.393091][T17230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.393128][T17230] ? __pfx_ksys_write+0x10/0x10 [ 399.393151][T17230] ? rcu_is_watching+0x15/0xb0 [ 399.393177][T17230] ? do_syscall_64+0xbe/0x3b0 [ 399.393203][T17230] do_syscall_64+0xfa/0x3b0 [ 399.393221][T17230] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.393251][T17230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.393272][T17230] ? clear_bhb_loop+0x60/0xb0 [ 399.393297][T17230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.393317][T17230] RIP: 0033:0x7f999738eec9 [ 399.393336][T17230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.393354][T17230] RSP: 002b:00007f9998264038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.393376][T17230] RAX: ffffffffffffffda RBX: 00007f99975e5fa0 RCX: 00007f999738eec9 [ 399.393391][T17230] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 399.393402][T17230] RBP: 00007f9998264090 R08: 0000000000000000 R09: 0000000000000000 [ 399.393416][T17230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.393428][T17230] R13: 00007f99975e6038 R14: 00007f99975e5fa0 R15: 00007ffee1fe6cb8 [ 399.393463][T17230] [ 399.468903][T16958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.131458][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 400.166135][T16958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.300494][T16958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 400.358302][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 400.416923][T17250] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input7 [ 400.489345][T17250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2998'. [ 400.508373][T17250] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2998'. [ 400.575440][T16958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.667000][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 400.744340][ T3527] IPVS: stop unused estimator thread 0... [ 400.856295][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 400.906560][T17268] netlink: 'syz.1.3001': attribute type 1 has an invalid length. [ 400.990826][T16958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.017884][ T3527] bond4: (slave macvlan0): failed to get link speed/duplex [ 401.060051][T16958] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.073198][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3002'. [ 401.094957][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3002'. [ 401.097323][T16131] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.111475][T16131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.184759][T16131] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.192025][T16131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.255595][T17282] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3005'. [ 401.356482][T16958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.377693][T16958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.559501][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 401.685367][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 401.737002][T17295] netlink: 'syz.6.3008': attribute type 4 has an invalid length. [ 401.755499][T17295] netlink: 'syz.6.3008': attribute type 4 has an invalid length. [ 401.792980][T17297] netlink: 'syz.7.3009': attribute type 1 has an invalid length. [ 401.826815][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 401.836810][T17297] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3009'. [ 401.986840][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 402.088803][T16958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.131062][T17307] can: request_module (can-proto-4) failed. [ 402.208578][T17311] netlink: 'syz.1.3012': attribute type 1 has an invalid length. [ 402.225753][T16958] veth0_vlan: entered promiscuous mode [ 402.237189][T17311] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3012'. [ 402.255837][T17311] netlink: 'syz.1.3012': attribute type 1 has an invalid length. [ 402.262572][T16958] veth1_vlan: entered promiscuous mode [ 402.274353][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 402.301484][T17314] netlink: 'syz.3.3013': attribute type 4 has an invalid length. [ 402.336840][T17314] netlink: 'syz.3.3013': attribute type 4 has an invalid length. [ 402.379219][T16958] veth0_macvtap: entered promiscuous mode [ 402.419910][T16958] veth1_macvtap: entered promiscuous mode [ 402.469861][T16958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.515309][T16958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.575619][T16117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.722855][T16117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.779237][T16117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.800992][T16117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.821153][T17323] netlink: 'syz.6.3016': attribute type 12 has an invalid length. [ 402.915309][T16117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.923507][T16117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.004519][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.021438][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.196892][T17344] netlink: 'syz.7.3023': attribute type 13 has an invalid length. [ 403.689451][T17366] netlink: 'syz.6.3028': attribute type 10 has an invalid length. [ 403.699996][T17369] syz.2.3029: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 403.725653][T17369] CPU: 0 UID: 0 PID: 17369 Comm: syz.2.3029 Not tainted syzkaller #0 PREEMPT(full) [ 403.725683][T17369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.725696][T17369] Call Trace: [ 403.725704][T17369] [ 403.725714][T17369] dump_stack_lvl+0x189/0x250 [ 403.725746][T17369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.725769][T17369] ? __pfx__printk+0x10/0x10 [ 403.725802][T17369] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 403.725826][T17369] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 403.725850][T17369] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 403.725876][T17369] warn_alloc+0x214/0x310 [ 403.725907][T17369] ? stack_depot_save_flags+0x40/0x860 [ 403.725939][T17369] ? __pfx_warn_alloc+0x10/0x10 [ 403.725971][T17369] ? kasan_save_track+0x4f/0x80 [ 403.725995][T17369] ? xskq_create+0x56/0x170 [ 403.726026][T17369] ? xsk_init_queue+0xb0/0x110 [ 403.726051][T17369] ? xsk_setsockopt+0x4dc/0x8d0 [ 403.726076][T17369] ? do_sock_setsockopt+0x17c/0x1b0 [ 403.726097][T17369] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 403.726120][T17369] ? do_syscall_64+0xfa/0x3b0 [ 403.726138][T17369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.726168][T17369] __vmalloc_node_range_noprof+0x125/0x12f0 [ 403.726231][T17369] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 403.726260][T17369] ? xskq_create+0x56/0x170 [ 403.726293][T17369] ? __kasan_kmalloc+0x93/0xb0 [ 403.726322][T17369] vmalloc_user_noprof+0xad/0xf0 [ 403.726358][T17369] ? xskq_create+0xbf/0x170 [ 403.726388][T17369] xskq_create+0xbf/0x170 [ 403.726421][T17369] xsk_init_queue+0xb0/0x110 [ 403.726454][T17369] xsk_setsockopt+0x4dc/0x8d0 [ 403.726485][T17369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.726513][T17369] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.726547][T17369] ? aa_sock_opt_perm+0xff/0x1b0 [ 403.726570][T17369] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 403.726590][T17369] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.726620][T17369] do_sock_setsockopt+0x17c/0x1b0 [ 403.726650][T17369] __x64_sys_setsockopt+0x13f/0x1b0 [ 403.726681][T17369] do_syscall_64+0xfa/0x3b0 [ 403.726700][T17369] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.726730][T17369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.726750][T17369] ? clear_bhb_loop+0x60/0xb0 [ 403.726776][T17369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.726795][T17369] RIP: 0033:0x7f1c66d8eec9 [ 403.726813][T17369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.726831][T17369] RSP: 002b:00007f1c67c8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.726853][T17369] RAX: ffffffffffffffda RBX: 00007f1c66fe6090 RCX: 00007f1c66d8eec9 [ 403.726868][T17369] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 403.726880][T17369] RBP: 00007f1c66e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 403.726893][T17369] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.726905][T17369] R13: 00007f1c66fe6128 R14: 00007f1c66fe6090 R15: 00007ffc4cc1e828 [ 403.726939][T17369] [ 404.034871][T17369] Mem-Info: [ 404.038267][T17369] active_anon:8706 inactive_anon:0 isolated_anon:0 [ 404.038267][T17369] active_file:3611 inactive_file:40045 isolated_file:0 [ 404.038267][T17369] unevictable:3837 dirty:194 writeback:0 [ 404.038267][T17369] slab_reclaimable:13556 slab_unreclaimable:128267 [ 404.038267][T17369] mapped:53315 shmem:4442 pagetables:1392 [ 404.038267][T17369] sec_pagetables:0 bounce:0 [ 404.038267][T17369] kernel_misc_reclaimable:0 [ 404.038267][T17369] free:1245838 free_pcp:15842 free_cma:0 [ 404.085996][T17369] Node 0 active_anon:35068kB inactive_anon:0kB active_file:14444kB inactive_file:159976kB unevictable:13812kB isolated(anon):0kB isolated(file):0kB mapped:213340kB dirty:784kB writeback:0kB shmem:16232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15368kB pagetables:5440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 404.197540][T17369] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 404.273893][T17369] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 404.333024][T17369] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 404.346289][T17369] Node 0 DMA32 free:1081824kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37224kB inactive_anon:0kB active_file:14444kB inactive_file:158140kB unevictable:13812kB writepending:780kB present:3129332kB managed:2559904kB mlocked:12276kB bounce:0kB free_pcp:43024kB local_pcp:20984kB free_cma:0kB [ 404.394360][T17369] lowmem_reserve[]: 0 0 1 1 1 [ 404.399403][T17369] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 404.429061][T17369] lowmem_reserve[]: 0 0 0 0 0 [ 404.433920][T17369] Node 1 Normal free:3884172kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20004kB local_pcp:9728kB free_cma:0kB [ 404.465940][T17369] lowmem_reserve[]: 0 0 0 0 0 [ 404.472231][T17369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 404.494459][T17369] Node 0 DMA32: 1583*4kB (UME) 365*8kB (UME) 304*16kB (UME) 58*32kB (UM) 58*64kB (UM) 103*128kB (UME) 53*256kB (UME) 22*512kB (UM) 6*1024kB (U) 5*2048kB (UME) 246*4096kB (UM) = 1081700kB [ 404.513632][T17369] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 404.532828][T17369] Node 1 Normal: 211*4kB (UE) 48*8kB (UME) 32*16kB (UME) 78*32kB (UME) 38*64kB (UME) 7*128kB (UME) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3884172kB [ 404.554754][T17369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.564480][T17369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.575655][T17369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 404.585550][T17369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 404.595231][T17369] 48094 total pagecache pages [ 404.600041][T17369] 0 pages in swap cache [ 404.604224][T17369] Free swap = 124996kB [ 404.608574][T17369] Total swap = 124996kB [ 404.612759][T17369] 2097051 pages RAM [ 404.616693][T17369] 0 pages HighMem/MovableOnly [ 404.621392][T17369] 424985 pages reserved [ 404.625561][T17369] 0 pages cma reserved [ 404.635229][T17384] __nla_validate_parse: 3 callbacks suppressed [ 404.635248][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3032'. [ 404.689292][T17370] wg1 speed is unknown, defaulting to 1000 [ 404.744007][T17389] ip6_vti0: entered allmulticast mode [ 404.752238][T17389] ip6_vti0: left allmulticast mode [ 404.856559][T17392] wg1 speed is unknown, defaulting to 1000 [ 404.870614][T17389] netlink: 'syz.6.3033': attribute type 23 has an invalid length. [ 405.029749][T16123] net_ratelimit: 8 callbacks suppressed [ 405.029770][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 405.085423][T17406] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 405.129993][T17406] batman_adv: batadv0: Adding interface: gretap1 [ 405.138397][T17406] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.164346][T17406] batman_adv: batadv0: Interface activated: gretap1 [ 405.203592][T17406] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3038'. [ 405.250775][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'. [ 405.279164][T17409] netlink: 'syz.6.3039': attribute type 7 has an invalid length. [ 405.307915][T17409] netlink: 'syz.6.3039': attribute type 8 has an invalid length. [ 405.330595][ T3527] bond4: (slave macvlan0): failed to get link speed/duplex [ 405.379740][T17406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3038'. [ 405.382195][ T30] audit: type=1800 audit(1758820997.815:4): pid=17406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3038" name="blkio.bfq.time_recursive" dev="tmpfs" ino=43 res=0 errno=0 [ 405.446707][T17401] netlink: 'syz.2.3038': attribute type 3 has an invalid length. [ 405.488026][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 405.629082][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 405.749043][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 405.757675][T17426] wg1 speed is unknown, defaulting to 1000 [ 405.768851][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'. [ 405.873358][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'. [ 406.067105][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 406.214040][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 406.336551][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 406.523150][T17445] tipc: Enabled bearer , priority 0 [ 406.531487][T17445] syzkaller0: entered promiscuous mode [ 406.537301][T17445] syzkaller0: entered allmulticast mode [ 406.548757][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 406.609913][T17445] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 406.696326][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 406.706667][T17452] wg1 speed is unknown, defaulting to 1000 [ 406.784074][T17445] tipc: Resetting bearer [ 406.860421][T17462] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3053'. [ 406.875569][T17443] tipc: Resetting bearer [ 406.898911][T17443] tipc: Disabling bearer [ 407.049170][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3053'. [ 407.132153][T17473] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3056'. [ 407.279110][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3058'. [ 409.424302][T17492] vlan2: entered promiscuous mode [ 409.430071][T17492] erspan0: entered promiscuous mode [ 409.562339][T17509] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 409.988738][T17534] __nla_validate_parse: 67 callbacks suppressed [ 409.988758][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3074'. [ 410.056304][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3074'. [ 410.136727][T16124] net_ratelimit: 9 callbacks suppressed [ 410.136747][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 410.266150][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 410.376173][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 410.496199][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 410.619641][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 410.741354][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 410.756631][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 410.814393][T17563] bond2: entered promiscuous mode [ 410.820149][T17563] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.832339][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3085'. [ 410.878082][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 410.893476][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3086'. [ 410.913073][T17569] geneve2: entered promiscuous mode [ 410.920129][T17569] geneve2: entered allmulticast mode [ 410.927476][T16128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.947074][T16128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.955831][T16128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.979262][T16128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.020359][T17571] wg1 speed is unknown, defaulting to 1000 [ 411.028043][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 411.046725][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 411.146347][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 411.266632][T16124] bond4: (slave macvlan0): failed to get link speed/duplex [ 411.280849][T17590] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 411.290405][T17591] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 411.702337][T17601] netlink: 248 bytes leftover after parsing attributes in process `syz.6.3095'. [ 411.974440][T17610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3096'. [ 412.148747][T17616] netlink: 'syz.6.3099': attribute type 1 has an invalid length. [ 412.174889][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3099'. [ 412.217791][T17618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3100'. [ 412.246456][T17619] netlink: 'syz.3.3100': attribute type 13 has an invalid length. [ 412.271869][T17619] netlink: 'syz.3.3100': attribute type 17 has an invalid length. [ 412.528454][T17627] netlink: 'syz.6.3103': attribute type 1 has an invalid length. [ 412.625322][T17629] erspan0: entered promiscuous mode [ 412.639006][T17629] gretap0: entered promiscuous mode [ 412.660315][T17629] debugfs: 'hsr1' already exists in 'hsr' [ 412.666343][T17629] Cannot create hsr debugfs directory [ 412.687430][T17631] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 412.699227][T17634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.700161][T17631] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 412.743786][T17627] gretap2: entered promiscuous mode [ 412.763610][T17627] bond3: (slave gretap2): making interface the new active one [ 412.774702][T17627] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 413.228735][T17666] wg1 speed is unknown, defaulting to 1000 [ 413.254450][T17669] veth1_macvtap: left promiscuous mode [ 413.705242][T17688] wg1 speed is unknown, defaulting to 1000 [ 413.863923][T17696] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 413.893365][T17698] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 414.114452][T17701] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.122332][T17701] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.162926][T17706] siw: device registration error -23 [ 414.171211][ T30] audit: type=1800 audit(1758821006.615:5): pid=17692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3120" name="cgroup.controllers" dev="tmpfs" ino=910 res=0 errno=0 [ 414.313481][T17701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.334055][T17701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.526694][T17701] batman_adv: batadv0: Interface deactivated: gretap1 [ 414.544919][T16120] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.563290][T16120] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.660648][T16120] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.671983][T16117] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.141605][T17729] __nla_validate_parse: 11 callbacks suppressed [ 415.141627][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3131'. [ 415.293099][T16117] net_ratelimit: 19 callbacks suppressed [ 415.293119][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 415.416503][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 415.536651][T16118] bond4: (slave macvlan0): failed to get link speed/duplex [ 415.683689][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3133'. [ 415.708205][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 415.733605][T17741] wg1 speed is unknown, defaulting to 1000 [ 415.841451][T17746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3134'. [ 415.886193][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 415.921141][T17744] wg1 speed is unknown, defaulting to 1000 [ 415.957594][T17742] wg1 speed is unknown, defaulting to 1000 [ 415.984990][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 416.043805][T17753] netlink: 'syz.3.3135': attribute type 1 has an invalid length. [ 416.384435][T17758] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.392275][T17758] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.483557][T17758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.500156][T17758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.703801][T16128] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.730595][T16128] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.763121][T17760] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 416.779468][T16128] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.805793][T16128] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.836455][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 416.976288][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 417.096168][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 417.206158][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 417.316203][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 417.511299][T17788] wg1 speed is unknown, defaulting to 1000 [ 417.552502][T17798] wg1 speed is unknown, defaulting to 1000 [ 418.052884][T17817] syzkaller1: entered promiscuous mode [ 418.079156][T17817] syzkaller1: entered allmulticast mode [ 418.253160][T17817] wg1 speed is unknown, defaulting to 1000 [ 418.461776][T17827] vlan2: entered promiscuous mode [ 418.469562][ T1074] block nbd0: Possible stuck request ffff888024f37000: control (read@0,1024B). Runtime 270 seconds [ 418.480591][ T1074] block nbd0: Possible stuck request ffff888024f371c0: control (read@1024,1024B). Runtime 270 seconds [ 418.488849][T17827] vlan2: entered allmulticast mode [ 418.491655][ T1074] block nbd0: Possible stuck request ffff888024f37380: control (read@2048,1024B). Runtime 270 seconds [ 418.507977][T17827] hsr_slave_1: entered allmulticast mode [ 418.514244][ T1074] block nbd0: Possible stuck request ffff888024f37540: control (read@3072,1024B). Runtime 270 seconds [ 418.523281][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3153'. [ 418.545642][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.567658][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.574878][T17827] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3153'. [ 418.587034][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.617343][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.625358][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 418.786307][ T5882] Bluetooth: hci0: command tx timeout [ 418.926678][T17843] netlink: 'syz.7.3155': attribute type 5 has an invalid length. [ 419.131427][T17850] sock: sock_timestamping_bind_phc: sock not bind to device [ 419.235401][T17828] wg1 speed is unknown, defaulting to 1000 [ 419.241447][T17844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3156'. [ 419.339885][T17858] wg1 speed is unknown, defaulting to 1000 [ 419.514427][T17871] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 419.532754][T17871] tipc: Started in network mode [ 419.541339][T17871] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 419.552780][T17871] tipc: Enabled bearer , priority 0 [ 419.572645][T17871] macsec0: entered allmulticast mode [ 419.578501][T17871] ip6gretap0: entered allmulticast mode [ 419.588107][T17871] ip6gretap0: left allmulticast mode [ 419.784495][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3164'. [ 419.784620][T17828] chnl_net:caif_netlink_parms(): no params data found [ 419.883845][T17884] netlink: 15 bytes leftover after parsing attributes in process `syz.7.3165'. [ 420.043769][T17828] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.056443][T17828] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.074046][T17828] bridge_slave_0: entered allmulticast mode [ 420.088855][T17828] bridge_slave_0: entered promiscuous mode [ 420.098096][T17828] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.105471][T17828] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.115009][T17828] bridge_slave_1: entered allmulticast mode [ 420.123557][T17828] bridge_slave_1: entered promiscuous mode [ 420.291060][T17828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.391462][T17828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.566573][ T1217] tipc: Node number set to 11578026 [ 420.604909][T17925] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3173'. [ 420.606687][T16117] net_ratelimit: 9 callbacks suppressed [ 420.606707][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 420.646884][T17828] team0: Port device team_slave_0 added [ 420.653421][T17928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3175'. [ 420.664372][T17828] team0: Port device team_slave_1 added [ 420.706704][ T5882] Bluetooth: hci4: command tx timeout [ 420.796209][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 420.906268][T16118] bond4: (slave macvlan0): failed to get link speed/duplex [ 421.042930][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 421.135112][T16122] bridge_slave_1: left allmulticast mode [ 421.143653][T16122] bridge_slave_1: left promiscuous mode [ 421.172403][T16122] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.252891][T16122] bridge_slave_0: left allmulticast mode [ 421.263209][T16122] bridge_slave_0: left promiscuous mode [ 421.272677][T16122] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.430643][T16122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.496876][T16122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.527934][T16122] bond0 (unregistering): Released all slaves [ 421.596145][T16118] bond4: (slave macvlan0): failed to get link speed/duplex [ 421.851975][T16122] team0 (unregistering): Port device team_slave_1 removed [ 421.941925][T16122] team0 (unregistering): Port device team_slave_0 removed [ 422.265081][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 422.285010][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 422.295364][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 422.295529][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3194'. [ 422.319733][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 422.337515][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.373404][T17980] wg1: entered promiscuous mode [ 422.378655][T17980] wg1: entered allmulticast mode [ 422.428548][T16118] bond4: (slave macvlan0): failed to get link speed/duplex [ 422.461293][T17991] wg1 speed is unknown, defaulting to 1000 [ 422.736496][T16118] bond4: (slave macvlan0): failed to get link speed/duplex [ 422.846140][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 422.953649][T17991] chnl_net:caif_netlink_parms(): no params data found [ 423.269904][T18036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 423.279108][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 423.352029][T18041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3203'. [ 423.375881][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 423.499352][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 423.690437][T18055] netlink: 'syz.6.3205': attribute type 53 has an invalid length. [ 423.786518][T18060] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3208'. [ 424.257373][T17991] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.266855][T17991] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.286614][T17991] bridge_slave_0: entered allmulticast mode [ 424.294711][T17991] bridge_slave_0: entered promiscuous mode [ 424.327496][T17991] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.334789][T17991] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.345465][T17991] bridge_slave_1: entered allmulticast mode [ 424.353818][T17991] bridge_slave_1: entered promiscuous mode [ 424.386150][ T51] Bluetooth: hci4: command tx timeout [ 424.431432][T17991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.460304][T17991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.574694][T18078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3213'. [ 424.579761][T17991] team0: Port device team_slave_0 added [ 424.608634][T18070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.636311][T18070] hsr0: entered promiscuous mode [ 424.641511][T18070] hsr0: entered allmulticast mode [ 424.646748][T18070] hsr_slave_0: entered allmulticast mode [ 424.665275][T17991] team0: Port device team_slave_1 added [ 424.775808][T17991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.784731][T17991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.814472][T17991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.830604][T17991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.838807][T17991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.874985][T17991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.014978][T17991] hsr_slave_0: entered promiscuous mode [ 425.022451][T17991] hsr_slave_1: entered promiscuous mode [ 425.029680][T17991] debugfs: 'hsr0' already exists in 'hsr' [ 425.037452][T17991] Cannot create hsr debugfs directory [ 425.184847][T16128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.210762][T16128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.314329][T18087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'. [ 425.455363][T18101] syz_tun: entered allmulticast mode [ 425.506360][ T1074] block nbd4: Possible stuck request ffff888025067000: control (read@0,1024B). Runtime 300 seconds [ 425.507601][T18100] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3220'. [ 425.517325][ T1074] block nbd4: Possible stuck request ffff8880250671c0: control (read@1024,1024B). Runtime 300 seconds [ 425.540428][ T1074] block nbd4: Possible stuck request ffff888025067380: control (read@2048,1024B). Runtime 300 seconds [ 425.551984][ T1074] block nbd4: Possible stuck request ffff888025067540: control (read@3072,1024B). Runtime 300 seconds [ 425.698954][T16131] net_ratelimit: 3 callbacks suppressed [ 425.698974][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 425.777683][T18106] wg1 speed is unknown, defaulting to 1000 [ 425.840024][T18104] syzkaller1: entered promiscuous mode [ 425.853635][T18104] syzkaller1: entered allmulticast mode [ 425.863171][T17991] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 425.892373][T17991] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 425.928492][T17991] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 425.948522][T17991] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 425.980810][T18120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3225'. [ 425.991171][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 426.039384][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 426.146227][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 426.396262][T16118] bond4: (slave macvlan0): failed to get link speed/duplex [ 426.466502][ T51] Bluetooth: hci4: command tx timeout [ 426.511074][T17991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.586519][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 426.603302][T17991] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.613082][T18154] netlink: 'syz.3.3230': attribute type 25 has an invalid length. [ 426.625791][T18154] netlink: 'syz.3.3230': attribute type 7 has an invalid length. [ 426.695637][T18153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.708015][T16122] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.715230][T16122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.752972][T18164] netlink: 'syz.7.3235': attribute type 10 has an invalid length. [ 426.765525][T18164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.782900][T18164] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 426.809961][T16122] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.817228][T16122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.846941][T18168] veth0_vlan: left promiscuous mode [ 426.853446][T18168] veth0_vlan: entered promiscuous mode [ 426.927064][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 426.942861][T18167] vlan2: entered allmulticast mode [ 426.957640][T18174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.039293][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 427.179996][T17991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.207080][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 427.316580][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 427.474925][T17991] veth0_vlan: entered promiscuous mode [ 427.495850][T18195] wg1 speed is unknown, defaulting to 1000 [ 427.518879][T17991] veth1_vlan: entered promiscuous mode [ 427.586171][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 427.678015][T18202] netlink: 'syz.2.3242': attribute type 13 has an invalid length. [ 427.704323][T18202] netlink: 'syz.2.3242': attribute type 17 has an invalid length. [ 427.882937][T18202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.894821][T18202] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.926570][T17991] veth0_macvtap: entered promiscuous mode [ 427.953599][T17991] veth1_macvtap: entered promiscuous mode [ 428.062664][T18200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.081083][T17991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.151745][T18207] wg1 speed is unknown, defaulting to 1000 [ 428.164649][T17991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.206723][T16118] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.251667][T16122] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.269023][T16122] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.376717][T18221] wg1 speed is unknown, defaulting to 1000 [ 428.383859][T16122] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.549676][ T51] Bluetooth: hci4: command tx timeout [ 428.856250][T16128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.864332][T16128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.924609][T16128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.936437][T16128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.471495][T18245] netlink: 'syz.7.3252': attribute type 9 has an invalid length. [ 429.538513][T18254] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3253'. [ 429.691262][T18263] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 429.944060][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3260'. [ 430.630266][ T51] Bluetooth: hci4: command tx timeout [ 433.166122][T16128] net_ratelimit: 12 callbacks suppressed [ 433.166142][T16128] bond4: (slave macvlan0): failed to get link speed/duplex [ 433.214250][T18299] wg1 speed is unknown, defaulting to 1000 [ 433.298187][T18307] syz_tun: entered allmulticast mode [ 433.446081][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 433.667222][T18306] syz_tun: left allmulticast mode [ 433.698914][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 433.810044][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3271'. [ 433.824479][T18330] bridge_slave_0: left promiscuous mode [ 433.833217][T18330] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.479646][T18337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.515824][T18337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.782981][T16131] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.819570][T16131] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.835576][T16131] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.845416][T16131] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.897638][T16131] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.920371][T16131] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.941441][T16131] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.968011][T16131] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.998489][T18376] veth0_vlan: left promiscuous mode [ 435.005026][T18376] veth0_vlan: entered promiscuous mode [ 435.097606][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 435.132606][T18381] wg1 speed is unknown, defaulting to 1000 [ 435.195441][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3286'. [ 435.249498][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 435.406126][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 435.516128][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 435.624780][T18413] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3292'. [ 435.816641][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 435.936641][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 436.068631][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 436.244317][T18431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.253385][T18431] team0: Port device bond2 added [ 436.620348][T18445] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3300'. [ 436.736359][T18453] FAULT_INJECTION: forcing a failure. [ 436.736359][T18453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.757250][T18453] CPU: 1 UID: 0 PID: 18453 Comm: syz.2.3304 Not tainted syzkaller #0 PREEMPT(full) [ 436.757279][T18453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.757292][T18453] Call Trace: [ 436.757300][T18453] [ 436.757310][T18453] dump_stack_lvl+0x189/0x250 [ 436.757339][T18453] ? __pfx____ratelimit+0x10/0x10 [ 436.757370][T18453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.757393][T18453] ? __pfx__printk+0x10/0x10 [ 436.757421][T18453] ? __might_fault+0xb0/0x130 [ 436.757460][T18453] should_fail_ex+0x414/0x560 [ 436.757495][T18453] _copy_from_user+0x2d/0xb0 [ 436.757522][T18453] ___sys_sendmsg+0x158/0x2a0 [ 436.757552][T18453] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.757619][T18453] ? __fget_files+0x2a/0x420 [ 436.757646][T18453] ? __fget_files+0x3a0/0x420 [ 436.757687][T18453] __x64_sys_sendmsg+0x19b/0x260 [ 436.757717][T18453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.757753][T18453] ? __pfx_ksys_write+0x10/0x10 [ 436.757776][T18453] ? rcu_is_watching+0x15/0xb0 [ 436.757801][T18453] ? do_syscall_64+0xbe/0x3b0 [ 436.757825][T18453] do_syscall_64+0xfa/0x3b0 [ 436.757843][T18453] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.757874][T18453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.757893][T18453] ? clear_bhb_loop+0x60/0xb0 [ 436.757919][T18453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.757938][T18453] RIP: 0033:0x7f1c66d8eec9 [ 436.757957][T18453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.757975][T18453] RSP: 002b:00007f1c67caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.758004][T18453] RAX: ffffffffffffffda RBX: 00007f1c66fe5fa0 RCX: 00007f1c66d8eec9 [ 436.758020][T18453] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 436.758033][T18453] RBP: 00007f1c67caf090 R08: 0000000000000000 R09: 0000000000000000 [ 436.758046][T18453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.758058][T18453] R13: 00007f1c66fe6038 R14: 00007f1c66fe5fa0 R15: 00007ffc4cc1e828 [ 436.758092][T18453] [ 437.050893][T18459] 8021q: VLANs not supported on wlan0 [ 438.039530][T18508] FAULT_INJECTION: forcing a failure. [ 438.039530][T18508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.070183][T18508] CPU: 1 UID: 0 PID: 18508 Comm: syz.2.3318 Not tainted syzkaller #0 PREEMPT(full) [ 438.070213][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.070225][T18508] Call Trace: [ 438.070234][T18508] [ 438.070243][T18508] dump_stack_lvl+0x189/0x250 [ 438.070271][T18508] ? __pfx____ratelimit+0x10/0x10 [ 438.070303][T18508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.070326][T18508] ? __pfx__printk+0x10/0x10 [ 438.070369][T18508] should_fail_ex+0x414/0x560 [ 438.070404][T18508] _copy_from_user+0x2d/0xb0 [ 438.070430][T18508] __copy_msghdr+0x3c5/0x5b0 [ 438.070460][T18508] ___sys_sendmsg+0x1a5/0x2a0 [ 438.070489][T18508] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.070558][T18508] ? __fget_files+0x2a/0x420 [ 438.070586][T18508] ? __fget_files+0x3a0/0x420 [ 438.070628][T18508] __x64_sys_sendmsg+0x19b/0x260 [ 438.070657][T18508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.070698][T18508] ? rcu_is_watching+0x15/0xb0 [ 438.070718][T18508] ? trace_sys_enter+0x25/0x100 [ 438.070753][T18508] do_syscall_64+0xfa/0x3b0 [ 438.070772][T18508] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.070802][T18508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.070822][T18508] ? clear_bhb_loop+0x60/0xb0 [ 438.070847][T18508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.070866][T18508] RIP: 0033:0x7f1c66d8eec9 [ 438.070884][T18508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.070908][T18508] RSP: 002b:00007f1c67caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.070930][T18508] RAX: ffffffffffffffda RBX: 00007f1c66fe5fa0 RCX: 00007f1c66d8eec9 [ 438.070944][T18508] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 438.070956][T18508] RBP: 00007f1c67caf090 R08: 0000000000000000 R09: 0000000000000000 [ 438.070968][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.070979][T18508] R13: 00007f1c66fe6038 R14: 00007f1c66fe5fa0 R15: 00007ffc4cc1e828 [ 438.071013][T18508] [ 438.381171][T16130] net_ratelimit: 12 callbacks suppressed [ 438.381192][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 438.522123][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 438.535414][T18518] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3322'. [ 438.562486][T18521] wg1 speed is unknown, defaulting to 1000 [ 438.656995][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 438.701875][T18528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.806843][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 438.930499][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 439.046569][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 439.176950][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 439.268887][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3330'. [ 439.281903][T18550] netlink: 'syz.6.3330': attribute type 1 has an invalid length. [ 439.306304][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 439.325236][T18550] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3330'. [ 439.335366][T18550] NCSI netlink: No device for ifindex 0 [ 439.419491][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 439.492033][T18555] batadv_slave_1: entered promiscuous mode [ 439.793318][T18558] batadv_slave_1: left promiscuous mode [ 439.827561][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 440.302061][T18580] !: renamed from dummy0 (while UP) [ 440.321697][T18583] netlink: 'syz.9.3341': attribute type 1 has an invalid length. [ 440.352001][T18583] netlink: 'syz.9.3341': attribute type 2 has an invalid length. [ 440.691515][T18586] wg1 speed is unknown, defaulting to 1000 [ 442.004069][T18631] wg1 speed is unknown, defaulting to 1000 [ 443.388455][T16117] net_ratelimit: 19 callbacks suppressed [ 443.388478][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 443.484189][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3357'. [ 443.567924][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 443.707873][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 443.817493][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 443.926099][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 443.961807][T18665] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 444.046200][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 444.067480][T18667] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3365'. [ 444.156060][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 444.271776][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 444.396228][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 444.533230][T18685] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 444.566264][T18685] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 444.596328][T16122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.614415][T16122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.655074][T18686] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3372'. [ 444.675202][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.691934][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.713415][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.754145][T18686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 444.783412][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.792425][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.801340][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.837163][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.845828][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.854729][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.863953][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.872739][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.881953][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 444.890772][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 445.097746][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3376'. [ 445.277037][T18711] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3379'. [ 445.303556][T18711] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 445.745857][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3388'. [ 446.122756][T18758] team0: Device ipip0 is of different type [ 446.233100][T18764] tipc: Started in network mode [ 446.238388][T18764] tipc: Node identity ee259f116f71, cluster identity 4711 [ 446.257640][T18764] tipc: Enabled bearer , priority 0 [ 446.280268][T18770] syzkaller0: entered promiscuous mode [ 446.299755][T18770] syzkaller0: entered allmulticast mode [ 446.373676][T18767] tipc: Started in network mode [ 446.379511][T18767] tipc: Node identity f21865a1f8e8, cluster identity 4711 [ 446.396452][T18767] tipc: Enabled bearer , priority 0 [ 446.437817][T18757] tipc: Resetting bearer [ 446.475276][T18757] tipc: Disabling bearer [ 446.505819][T18762] tipc: Resetting bearer [ 446.698659][T18789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.331732][T18812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3407'. [ 447.500604][ T5996] tipc: Node number set to 183526817 [ 448.489924][T18762] tipc: Disabling bearer [ 448.509501][T18812] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 448.536112][T16122] net_ratelimit: 13 callbacks suppressed [ 448.536131][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 448.560283][ T1074] block nbd0: Possible stuck request ffff888024f37000: control (read@0,1024B). Runtime 300 seconds [ 448.574480][ T1074] block nbd0: Possible stuck request ffff888024f371c0: control (read@1024,1024B). Runtime 300 seconds [ 448.585670][ T1074] block nbd0: Possible stuck request ffff888024f37380: control (read@2048,1024B). Runtime 300 seconds [ 448.596915][ T1074] block nbd0: Possible stuck request ffff888024f37540: control (read@3072,1024B). Runtime 300 seconds [ 448.676162][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 448.790340][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 448.916530][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 449.026389][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 449.156134][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 449.266840][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 449.426198][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 449.654427][T18850] team0: Device ipip0 is of different type [ 449.776387][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 449.789453][T18851] tipc: Enabled bearer , priority 0 [ 449.818494][T18854] syzkaller0: entered promiscuous mode [ 449.837632][T18854] syzkaller0: entered allmulticast mode [ 449.954094][T18849] tipc: Resetting bearer [ 450.001688][T18871] netlink: 'syz.2.3423': attribute type 1 has an invalid length. [ 450.009698][T18871] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3423'. [ 450.025702][T18849] tipc: Disabling bearer [ 450.076126][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 450.180205][T18879] netlink: 'syz.7.3426': attribute type 1 has an invalid length. [ 450.538149][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3433'. [ 450.549176][T18900] syzkaller0: entered promiscuous mode [ 450.554697][T18900] syzkaller0: entered allmulticast mode [ 450.563996][T18903] FAULT_INJECTION: forcing a failure. [ 450.563996][T18903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.627256][T18903] CPU: 1 UID: 0 PID: 18903 Comm: syz.6.3435 Not tainted syzkaller #0 PREEMPT(full) [ 450.627286][T18903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.627299][T18903] Call Trace: [ 450.627307][T18903] [ 450.627315][T18903] dump_stack_lvl+0x189/0x250 [ 450.627344][T18903] ? __pfx____ratelimit+0x10/0x10 [ 450.627375][T18903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.627397][T18903] ? __pfx__printk+0x10/0x10 [ 450.627424][T18903] ? __might_fault+0xb0/0x130 [ 450.627462][T18903] should_fail_ex+0x414/0x560 [ 450.627496][T18903] _copy_from_iter+0x1de/0x1790 [ 450.627527][T18903] ? rcu_is_watching+0x15/0xb0 [ 450.627546][T18903] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 450.627575][T18903] ? __pfx__copy_from_iter+0x10/0x10 [ 450.627599][T18903] ? __build_skb_around+0x257/0x3e0 [ 450.627626][T18903] ? netlink_sendmsg+0x642/0xb30 [ 450.627648][T18903] ? skb_put+0x11b/0x210 [ 450.627674][T18903] netlink_sendmsg+0x6b2/0xb30 [ 450.627708][T18903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.627736][T18903] ? aa_sock_msg_perm+0xf1/0x1d0 [ 450.627769][T18903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.627789][T18903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.627812][T18903] __sock_sendmsg+0x219/0x270 [ 450.627847][T18903] ____sys_sendmsg+0x505/0x830 [ 450.627879][T18903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.627915][T18903] ? import_iovec+0x74/0xa0 [ 450.627944][T18903] ___sys_sendmsg+0x21f/0x2a0 [ 450.627978][T18903] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.628045][T18903] ? __fget_files+0x2a/0x420 [ 450.628072][T18903] ? __fget_files+0x3a0/0x420 [ 450.628112][T18903] __x64_sys_sendmsg+0x19b/0x260 [ 450.628142][T18903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.628179][T18903] ? __pfx_ksys_write+0x10/0x10 [ 450.628202][T18903] ? rcu_is_watching+0x15/0xb0 [ 450.628226][T18903] ? do_syscall_64+0xbe/0x3b0 [ 450.628250][T18903] do_syscall_64+0xfa/0x3b0 [ 450.628268][T18903] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.628298][T18903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.628319][T18903] ? clear_bhb_loop+0x60/0xb0 [ 450.628344][T18903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.628363][T18903] RIP: 0033:0x7fc74698eec9 [ 450.628380][T18903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.628397][T18903] RSP: 002b:00007fc747846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.628419][T18903] RAX: ffffffffffffffda RBX: 00007fc746be5fa0 RCX: 00007fc74698eec9 [ 450.628445][T18903] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 450.628458][T18903] RBP: 00007fc747846090 R08: 0000000000000000 R09: 0000000000000000 [ 450.628470][T18903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.628482][T18903] R13: 00007fc746be6038 R14: 00007fc746be5fa0 R15: 00007ffe06ce0b48 [ 450.628514][T18903] [ 450.651878][T18904] netlink: 'syz.9.3436': attribute type 1 has an invalid length. [ 450.813593][T18906] Unsupported ieee802154 address type: 0 [ 450.896097][T18904] netlink: 'syz.9.3436': attribute type 11 has an invalid length. [ 450.908745][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3436'. [ 450.976649][T18904] netlink: 220 bytes leftover after parsing attributes in process `syz.9.3436'. [ 451.050312][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3436'. [ 451.145393][T18919] xt_socket: unknown flags 0xd0 [ 451.411182][ T5939] IPVS: starting estimator thread 0... [ 451.506308][T18937] IPVS: using max 28 ests per chain, 67200 per kthread [ 451.673043][T18947] FAULT_INJECTION: forcing a failure. [ 451.673043][T18947] name failslab, interval 1, probability 0, space 0, times 0 [ 451.726663][T18947] CPU: 0 UID: 0 PID: 18947 Comm: syz.6.3448 Not tainted syzkaller #0 PREEMPT(full) [ 451.726692][T18947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.726705][T18947] Call Trace: [ 451.726714][T18947] [ 451.726723][T18947] dump_stack_lvl+0x189/0x250 [ 451.726751][T18947] ? __pfx____ratelimit+0x10/0x10 [ 451.726783][T18947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.726806][T18947] ? __pfx__printk+0x10/0x10 [ 451.726835][T18947] ? __pfx___might_resched+0x10/0x10 [ 451.726865][T18947] ? fs_reclaim_acquire+0x7d/0x100 [ 451.726901][T18947] should_fail_ex+0x414/0x560 [ 451.726936][T18947] should_failslab+0xa8/0x100 [ 451.726966][T18947] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 451.726993][T18947] ? __alloc_skb+0x112/0x2d0 [ 451.727021][T18947] __alloc_skb+0x112/0x2d0 [ 451.727047][T18947] qdisc_notify+0x110/0x440 [ 451.727084][T18947] tc_modify_qdisc+0x1c04/0x20e0 [ 451.727132][T18947] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 451.727196][T18947] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 451.727226][T18947] rtnetlink_rcv_msg+0x77c/0xb70 [ 451.727247][T18947] ? __lock_acquire+0xab9/0xd20 [ 451.727278][T18947] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 451.727300][T18947] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.727341][T18947] netlink_rcv_skb+0x208/0x470 [ 451.727362][T18947] ? __lock_acquire+0xab9/0xd20 [ 451.727391][T18947] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 451.727415][T18947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.727451][T18947] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.727484][T18947] netlink_unicast+0x82f/0x9e0 [ 451.727514][T18947] ? __pfx_netlink_unicast+0x10/0x10 [ 451.727537][T18947] ? netlink_sendmsg+0x642/0xb30 [ 451.727557][T18947] ? skb_put+0x11b/0x210 [ 451.727585][T18947] netlink_sendmsg+0x805/0xb30 [ 451.727619][T18947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.727657][T18947] ? aa_sock_msg_perm+0xf1/0x1d0 [ 451.727691][T18947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.727712][T18947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.727737][T18947] __sock_sendmsg+0x219/0x270 [ 451.727773][T18947] ____sys_sendmsg+0x505/0x830 [ 451.727806][T18947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.727844][T18947] ? import_iovec+0x74/0xa0 [ 451.727874][T18947] ___sys_sendmsg+0x21f/0x2a0 [ 451.727903][T18947] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.727972][T18947] ? __fget_files+0x2a/0x420 [ 451.728000][T18947] ? __fget_files+0x3a0/0x420 [ 451.728041][T18947] __x64_sys_sendmsg+0x19b/0x260 [ 451.728072][T18947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.728109][T18947] ? __pfx_ksys_write+0x10/0x10 [ 451.728142][T18947] ? do_syscall_64+0xbe/0x3b0 [ 451.728167][T18947] do_syscall_64+0xfa/0x3b0 [ 451.728186][T18947] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.728216][T18947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.728236][T18947] ? clear_bhb_loop+0x60/0xb0 [ 451.728262][T18947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.728281][T18947] RIP: 0033:0x7fc74698eec9 [ 451.728299][T18947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.728317][T18947] RSP: 002b:00007fc747846038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.728340][T18947] RAX: ffffffffffffffda RBX: 00007fc746be5fa0 RCX: 00007fc74698eec9 [ 451.728356][T18947] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 451.728368][T18947] RBP: 00007fc747846090 R08: 0000000000000000 R09: 0000000000000000 [ 451.728381][T18947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.728392][T18947] R13: 00007fc746be6038 R14: 00007fc746be5fa0 R15: 00007ffe06ce0b48 [ 451.728426][T18947] [ 452.559641][T18958] wg1 speed is unknown, defaulting to 1000 [ 452.586057][T18958] virt_wifi0 speed is unknown, defaulting to 1000 [ 452.634473][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3454'. [ 452.729594][T18961] bond0: (slave dummy0): Releasing backup interface [ 453.486877][T18993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3464'. [ 453.627586][T16117] net_ratelimit: 23 callbacks suppressed [ 453.627609][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 453.651274][T18997] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3465'. [ 453.671337][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3465'. [ 453.776269][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 453.796764][T19009] FAULT_INJECTION: forcing a failure. [ 453.796764][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 453.849231][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.9.3467 Not tainted syzkaller #0 PREEMPT(full) [ 453.849262][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.849276][T19009] Call Trace: [ 453.849284][T19009] [ 453.849293][T19009] dump_stack_lvl+0x189/0x250 [ 453.849321][T19009] ? __pfx____ratelimit+0x10/0x10 [ 453.849352][T19009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.849376][T19009] ? __pfx__printk+0x10/0x10 [ 453.849410][T19009] ? __pfx___might_resched+0x10/0x10 [ 453.849440][T19009] ? fs_reclaim_acquire+0x7d/0x100 [ 453.849476][T19009] should_fail_ex+0x414/0x560 [ 453.849511][T19009] should_failslab+0xa8/0x100 [ 453.849542][T19009] __kmalloc_noprof+0xcb/0x4f0 [ 453.849566][T19009] ? kfree+0x4d/0x440 [ 453.849586][T19009] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 453.849613][T19009] tomoyo_realpath_from_path+0xe3/0x5d0 [ 453.849637][T19009] ? tomoyo_domain+0xd9/0x130 [ 453.849664][T19009] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 453.849694][T19009] tomoyo_path_number_perm+0x1e8/0x5a0 [ 453.849734][T19009] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.849783][T19009] ? __lock_acquire+0xab9/0xd20 [ 453.849835][T19009] ? __fget_files+0x2a/0x420 [ 453.849869][T19009] ? __fget_files+0x2a/0x420 [ 453.849897][T19009] ? __fget_files+0x3a0/0x420 [ 453.849925][T19009] ? __fget_files+0x2a/0x420 [ 453.849960][T19009] security_file_ioctl+0xcb/0x2d0 [ 453.849990][T19009] __se_sys_ioctl+0x47/0x170 [ 453.850017][T19009] do_syscall_64+0xfa/0x3b0 [ 453.850036][T19009] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.850067][T19009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.850087][T19009] ? clear_bhb_loop+0x60/0xb0 [ 453.850112][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.850132][T19009] RIP: 0033:0x7f0411d8eec9 [ 453.850150][T19009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.850168][T19009] RSP: 002b:00007f0412cc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.850190][T19009] RAX: ffffffffffffffda RBX: 00007f0411fe5fa0 RCX: 00007f0411d8eec9 [ 453.850205][T19009] RDX: 0000200000000100 RSI: 0000000000008905 RDI: 0000000000000005 [ 453.850218][T19009] RBP: 00007f0412cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 453.850231][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.850244][T19009] R13: 00007f0411fe6038 R14: 00007f0411fe5fa0 R15: 00007ffcbd1d8a78 [ 453.850279][T19009] [ 453.850288][T19009] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.937803][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 453.978781][T19014] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3470'. [ 454.130563][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 454.246234][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 454.356138][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 454.476116][T16117] bond4: (slave macvlan0): failed to get link speed/duplex [ 454.535156][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.596715][T16121] bond4: (slave macvlan0): failed to get link speed/duplex [ 454.827925][T19050] FAULT_INJECTION: forcing a failure. [ 454.827925][T19050] name failslab, interval 1, probability 0, space 0, times 0 [ 454.840978][T19050] CPU: 1 UID: 0 PID: 19050 Comm: syz.9.3484 Not tainted syzkaller #0 PREEMPT(full) [ 454.841006][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.841019][T19050] Call Trace: [ 454.841027][T19050] [ 454.841036][T19050] dump_stack_lvl+0x189/0x250 [ 454.841065][T19050] ? __pfx____ratelimit+0x10/0x10 [ 454.841096][T19050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.841119][T19050] ? __pfx__printk+0x10/0x10 [ 454.841149][T19050] ? __pfx___might_resched+0x10/0x10 [ 454.841180][T19050] ? fs_reclaim_acquire+0x7d/0x100 [ 454.841216][T19050] should_fail_ex+0x414/0x560 [ 454.841251][T19050] should_failslab+0xa8/0x100 [ 454.841281][T19050] __kmalloc_noprof+0xcb/0x4f0 [ 454.841306][T19050] ? tomoyo_encode+0x28b/0x550 [ 454.841330][T19050] tomoyo_encode+0x28b/0x550 [ 454.841357][T19050] tomoyo_realpath_from_path+0x58d/0x5d0 [ 454.841380][T19050] ? tomoyo_domain+0xd9/0x130 [ 454.841418][T19050] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 454.841447][T19050] tomoyo_path_number_perm+0x1e8/0x5a0 [ 454.841479][T19050] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.841527][T19050] ? __lock_acquire+0xab9/0xd20 [ 454.841579][T19050] ? __fget_files+0x2a/0x420 [ 454.841612][T19050] ? __fget_files+0x2a/0x420 [ 454.841640][T19050] ? __fget_files+0x3a0/0x420 [ 454.841668][T19050] ? __fget_files+0x2a/0x420 [ 454.841701][T19050] security_file_ioctl+0xcb/0x2d0 [ 454.841729][T19050] __se_sys_ioctl+0x47/0x170 [ 454.841756][T19050] do_syscall_64+0xfa/0x3b0 [ 454.841775][T19050] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.841805][T19050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.841826][T19050] ? clear_bhb_loop+0x60/0xb0 [ 454.841851][T19050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.841871][T19050] RIP: 0033:0x7f0411d8eec9 [ 454.841889][T19050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.841906][T19050] RSP: 002b:00007f0412cc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.841928][T19050] RAX: ffffffffffffffda RBX: 00007f0411fe5fa0 RCX: 00007f0411d8eec9 [ 454.841943][T19050] RDX: 0000200000000100 RSI: 0000000000008905 RDI: 0000000000000005 [ 454.841956][T19050] RBP: 00007f0412cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 454.841969][T19050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.841981][T19050] R13: 00007f0411fe6038 R14: 00007f0411fe5fa0 R15: 00007ffcbd1d8a78 [ 454.842016][T19050] [ 454.842041][T19050] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.588907][ T1074] block nbd4: Possible stuck request ffff888025067000: control (read@0,1024B). Runtime 330 seconds [ 455.601426][ T1074] block nbd4: Possible stuck request ffff8880250671c0: control (read@1024,1024B). Runtime 330 seconds [ 455.613876][ T1074] block nbd4: Possible stuck request ffff888025067380: control (read@2048,1024B). Runtime 330 seconds [ 455.625268][ T1074] block nbd4: Possible stuck request ffff888025067540: control (read@3072,1024B). Runtime 330 seconds [ 457.149874][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 457.291517][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 457.417610][T19096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.663301][T19116] netlink: 'syz.3.3496': attribute type 16 has an invalid length. [ 457.671417][T19116] netlink: 'syz.3.3496': attribute type 17 has an invalid length. [ 457.907518][T19116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.946906][T19116] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.999153][T19116] tipc: Resetting bearer [ 458.508216][T19149] __nla_validate_parse: 1 callbacks suppressed [ 458.508238][T19149] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3507'. [ 458.736259][T16123] net_ratelimit: 10 callbacks suppressed [ 458.736280][T16123] bond4: (slave macvlan0): failed to get link speed/duplex [ 458.855040][T19163] netlink: 'syz.6.3513': attribute type 3 has an invalid length. [ 458.863626][T16121] bond4: (slave macvlan0): failed to get link speed/duplex [ 459.004392][T16121] bond4: (slave macvlan0): failed to get link speed/duplex [ 459.128541][T19188] netlink: 'syz.6.3517': attribute type 1 has an invalid length. [ 459.144823][T19186] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3518'. [ 459.172640][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3518'. [ 459.257274][T19188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.270713][T19194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3520'. [ 459.289067][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 459.317999][T19183] bridge0: entered promiscuous mode [ 459.358135][T19178] bond4: (slave gretap3): making interface the new active one [ 459.370000][T19178] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 459.417068][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 459.535059][T19183] bridge0: left promiscuous mode [ 459.580501][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 459.683161][T19213] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3527'. [ 459.764692][T19213] 0ªX¹¦À: renamed from caif0 [ 459.836887][T19213] 0ªX¹¦À: entered allmulticast mode [ 459.844412][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3525'. [ 459.869361][T19213] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 459.921437][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 459.956610][T19222] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3527'. [ 460.069471][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 460.204377][T19238] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 460.209795][T19246] sctp: [Deprecated]: syz.9.3529 (pid 19246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.209795][T19246] Use struct sctp_sack_info instead [ 460.230703][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 460.234014][T19238] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 460.276521][T19238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3530'. [ 460.292789][T19249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3533'. [ 460.380565][T19251] netlink: 'syz.7.3534': attribute type 4 has an invalid length. [ 460.382354][T19253] FAULT_INJECTION: forcing a failure. [ 460.382354][T19253] name failslab, interval 1, probability 0, space 0, times 0 [ 460.421244][T19253] CPU: 1 UID: 0 PID: 19253 Comm: syz.2.3535 Not tainted syzkaller #0 PREEMPT(full) [ 460.421274][T19253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.421288][T19253] Call Trace: [ 460.421296][T19253] [ 460.421305][T19253] dump_stack_lvl+0x189/0x250 [ 460.421334][T19253] ? __pfx____ratelimit+0x10/0x10 [ 460.421365][T19253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.421388][T19253] ? __pfx__printk+0x10/0x10 [ 460.421421][T19253] ? __pfx___might_resched+0x10/0x10 [ 460.421451][T19253] ? fs_reclaim_acquire+0x7d/0x100 [ 460.421487][T19253] should_fail_ex+0x414/0x560 [ 460.421522][T19253] should_failslab+0xa8/0x100 [ 460.421551][T19253] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.421578][T19253] ? __alloc_skb+0x112/0x2d0 [ 460.421605][T19253] __alloc_skb+0x112/0x2d0 [ 460.421632][T19253] netlink_ack+0x146/0xa50 [ 460.421652][T19253] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.421671][T19253] ? ref_tracker_free+0x63a/0x7d0 [ 460.421703][T19253] ? __asan_memcpy+0x40/0x70 [ 460.421723][T19253] ? __pfx_ref_tracker_free+0x10/0x10 [ 460.421766][T19253] netlink_rcv_skb+0x28c/0x470 [ 460.421793][T19253] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.421816][T19253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.421851][T19253] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.421881][T19253] netlink_unicast+0x82f/0x9e0 [ 460.421910][T19253] ? __pfx_netlink_unicast+0x10/0x10 [ 460.421931][T19253] ? netlink_sendmsg+0x642/0xb30 [ 460.421950][T19253] ? skb_put+0x11b/0x210 [ 460.421976][T19253] netlink_sendmsg+0x805/0xb30 [ 460.422009][T19253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.422041][T19253] ? aa_sock_msg_perm+0xf1/0x1d0 [ 460.422075][T19253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.422094][T19253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.422118][T19253] __sock_sendmsg+0x219/0x270 [ 460.422152][T19253] ____sys_sendmsg+0x505/0x830 [ 460.422185][T19253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.422220][T19253] ? import_iovec+0x74/0xa0 [ 460.422249][T19253] ___sys_sendmsg+0x21f/0x2a0 [ 460.422276][T19253] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.422344][T19253] ? __fget_files+0x2a/0x420 [ 460.422371][T19253] ? __fget_files+0x3a0/0x420 [ 460.422412][T19253] __x64_sys_sendmsg+0x19b/0x260 [ 460.422442][T19253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.422478][T19253] ? __pfx_ksys_write+0x10/0x10 [ 460.422501][T19253] ? rcu_is_watching+0x15/0xb0 [ 460.422526][T19253] ? do_syscall_64+0xbe/0x3b0 [ 460.422551][T19253] do_syscall_64+0xfa/0x3b0 [ 460.422569][T19253] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.422600][T19253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.422620][T19253] ? clear_bhb_loop+0x60/0xb0 [ 460.422645][T19253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.422664][T19253] RIP: 0033:0x7f1c66d8eec9 [ 460.422683][T19253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.422701][T19253] RSP: 002b:00007f1c67caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.422723][T19253] RAX: ffffffffffffffda RBX: 00007f1c66fe5fa0 RCX: 00007f1c66d8eec9 [ 460.422738][T19253] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 460.422751][T19253] RBP: 00007f1c67caf090 R08: 0000000000000000 R09: 0000000000000000 [ 460.422763][T19253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.422775][T19253] R13: 00007f1c66fe6038 R14: 00007f1c66fe5fa0 R15: 00007ffc4cc1e828 [ 460.422808][T19253] [ 460.884011][T19261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.968131][T19268] netlink: 'syz.3.3542': attribute type 1 has an invalid length. [ 460.976115][T19268] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3542'. [ 461.257306][T19277] veth5: entered promiscuous mode [ 461.930385][T19299] syzkaller1: entered promiscuous mode [ 461.936806][T19299] syzkaller1: entered allmulticast mode [ 462.257870][T19315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.572799][T19332] ip6_vti0: entered allmulticast mode [ 462.590001][T19332] dvmrp8: entered allmulticast mode [ 462.620967][T19332] wg1 speed is unknown, defaulting to 1000 [ 462.632667][T19332] virt_wifi0 speed is unknown, defaulting to 1000 [ 462.658792][T19336] netlink: 'syz.6.3560': attribute type 23 has an invalid length. [ 462.764824][T19337] wg1 speed is unknown, defaulting to 1000 [ 462.798795][T19337] virt_wifi0 speed is unknown, defaulting to 1000 [ 462.819693][T19331] ip6_vti0: left allmulticast mode [ 462.825005][T19331] dvmrp8: left allmulticast mode [ 462.884085][ T5882] Bluetooth: hci6: command 0x0405 tx timeout [ 463.105525][T19345] nbd: socks must be embedded in a SOCK_ITEM attr [ 463.151646][T19334] netlink: 'syz.9.3561': attribute type 2 has an invalid length. [ 463.799276][T16122] net_ratelimit: 21 callbacks suppressed [ 463.799298][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 463.930906][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 463.975530][T19393] __nla_validate_parse: 13 callbacks suppressed [ 463.975550][T19393] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3575'. [ 464.052967][T19396] netlink: 'syz.9.3576': attribute type 1 has an invalid length. [ 464.060986][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 464.065008][T19396] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3576'. [ 464.157893][T19402] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3578'. [ 464.186127][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 464.308231][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 464.351672][T19402] nbd: socks must be embedded in a SOCK_ITEM attr [ 464.426400][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 464.486954][T19413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3580'. [ 464.511976][T19413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3580'. [ 464.548794][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 464.676115][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 464.775188][T19426] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3585'. [ 464.797989][T19422] wireguard0: entered promiscuous mode [ 464.803674][T19422] wireguard0: entered allmulticast mode [ 464.819245][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 464.936077][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 465.020554][T19435] tipc: Enabled bearer , priority 0 [ 465.057548][T19435] syzkaller0: entered promiscuous mode [ 465.063187][T19435] syzkaller0: entered allmulticast mode [ 465.132995][T19438] tipc: Resetting bearer [ 465.210009][T19447] veth3: entered promiscuous mode [ 465.219234][T19453] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3594'. [ 465.228850][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3594'. [ 465.238664][T19453] netlink: 'syz.3.3594': attribute type 1 has an invalid length. [ 465.258629][T19433] tipc: Resetting bearer [ 465.447119][T19433] tipc: Disabling bearer [ 465.696979][T19461] ip6tnl2: entered promiscuous mode [ 465.712483][T19461] ip6tnl2: entered allmulticast mode [ 465.721905][T19470] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 465.740402][T19470] netlink: 'syz.3.3600': attribute type 3 has an invalid length. [ 465.758872][T19470] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3600'. [ 466.119561][T19486] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3606'. [ 466.202283][T19490] tipc: Enabled bearer , priority 0 [ 466.272983][T19490] syzkaller0: entered promiscuous mode [ 466.285494][T19490] syzkaller0: entered allmulticast mode [ 466.292517][T19490] tipc: Resetting bearer [ 466.699016][T16121] tipc: Resetting bearer [ 466.724446][T19481] tipc: Resetting bearer [ 467.296132][ T5946] tipc: Node number set to 3245066147 [ 467.823960][ T5946] IPVS: starting estimator thread 0... [ 467.917362][T19521] IPVS: using max 27 ests per chain, 64800 per kthread [ 469.210644][T19481] tipc: Disabling bearer [ 469.238337][T16130] net_ratelimit: 9 callbacks suppressed [ 469.238358][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 469.265746][T19507] wg1 speed is unknown, defaulting to 1000 [ 469.298209][T19507] virt_wifi0 speed is unknown, defaulting to 1000 [ 469.338188][T19536] netlink: 'syz.6.3617': attribute type 23 has an invalid length. [ 469.457033][T16130] bond4: (slave macvlan0): failed to get link speed/duplex [ 469.479074][T19542] tipc: Enabled bearer , priority 0 [ 469.499970][T19542] syzkaller0: entered promiscuous mode [ 469.505525][T19542] syzkaller0: entered allmulticast mode [ 469.567940][T19543] tipc: Resetting bearer [ 469.583313][T19547] wg1 speed is unknown, defaulting to 1000 [ 469.586716][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 469.602139][T19537] tipc: Resetting bearer [ 469.641035][T19537] tipc: Disabling bearer [ 469.657072][T19547] virt_wifi0 speed is unknown, defaulting to 1000 [ 470.034807][T19555] __nla_validate_parse: 3 callbacks suppressed [ 470.034828][T19555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3622'. [ 470.066989][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 470.176233][T16131] bond4: (slave macvlan0): failed to get link speed/duplex [ 470.526122][T16122] bond4: (slave macvlan0): failed to get link speed/duplex [ 470.557524][T19565] wg1 speed is unknown, defaulting to 1000 [ 470.580617][T19565] virt_wifi0 speed is unknown, defaulting to 1000 [ 470.750538][T19583] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 470.756993][T19583] syzkaller0: linktype set to 1 [ 470.823670][ T978] IPVS: starting estimator thread 0... [ 470.826457][T19584] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.866132][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 470.909829][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3630'. [ 470.920479][T19590] IPVS: using max 28 ests per chain, 67200 per kthread [ 470.986499][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 471.106255][T16120] bond4: (slave macvlan0): failed to get link speed/duplex [ 471.794596][T19612] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.802202][T19612] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.226412][ T31] INFO: task udevd:5870 blocked for more than 143 seconds. [ 472.234375][ T31] Not tainted syzkaller #0 [ 472.240818][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.264824][ T31] task:udevd state:D stack:21928 pid:5870 tgid:5870 ppid:1 task_flags:0x400140 flags:0x00004006 [ 472.286197][ T31] Call Trace: [ 472.290723][ T31] [ 472.294860][ T31] __schedule+0x1798/0x4cc0 [ 472.302201][ T31] ? __pfx___schedule+0x10/0x10 [ 472.309477][ T31] ? schedule+0x91/0x360 [ 472.316204][ T31] schedule+0x165/0x360 [ 472.322365][ T31] io_schedule+0x80/0xd0 [ 472.330503][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 472.340353][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 472.350787][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 472.366213][ T31] ? __filemap_get_folio+0x740/0xaf0 [ 472.371759][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 472.377316][ T31] do_read_cache_folio+0x1aa/0x590 [ 472.385534][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 472.396232][ T31] read_part_sector+0xb6/0x2b0 [ 472.401072][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 472.416281][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 472.426116][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 472.436268][ T31] bdev_disk_changed+0x75f/0x14b0 [ 472.441391][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 472.453096][T19612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.455988][ T31] ? wait_on_inode+0xc0/0x230 [ 472.475520][ T31] blkdev_get_whole+0x380/0x510 [ 472.480635][ T31] bdev_open+0x31e/0xd30 [ 472.484947][ T31] blkdev_open+0x457/0x600 [ 472.499824][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 472.515082][ T31] do_dentry_open+0x953/0x13f0 [ 472.520441][ T31] vfs_open+0x3b/0x340 [ 472.524570][ T31] ? path_openat+0x2ecd/0x3830 [ 472.529727][T19612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.538181][ T31] path_openat+0x2ee5/0x3830 [ 472.553048][ T31] ? arch_stack_walk+0xfc/0x150 [ 472.563191][ T31] ? stack_depot_save_flags+0x40/0x860 [ 472.573322][ T31] ? __pfx_path_openat+0x10/0x10 [ 472.586238][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.602616][ T31] do_filp_open+0x1fa/0x410 [ 472.608370][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.618492][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 472.636118][ T31] ? _raw_spin_unlock+0x28/0x50 [ 472.646263][ T31] ? alloc_fd+0x64c/0x6c0 [ 472.650688][ T31] do_sys_openat2+0x121/0x1c0 [ 472.665859][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 472.678749][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.684027][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.690255][ T31] __x64_sys_openat+0x138/0x170 [ 472.695168][ T31] do_syscall_64+0xfa/0x3b0 [ 472.699846][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.706443][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 472.712726][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.717627][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.723638][ T31] RIP: 0033:0x7fdbb90a7407 [ 472.728525][ T31] RSP: 002b:00007ffc7dda4050 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 472.737083][ T31] RAX: ffffffffffffffda RBX: 00007fdbb97cf880 RCX: 00007fdbb90a7407 [ 472.745210][ T31] RDX: 00000000000a0800 RSI: 000055e61d9ac820 RDI: ffffffffffffff9c [ 472.753536][ T31] RBP: 000055e61d9a0910 R08: 0000000000000000 R09: 0000000000000000 [ 472.761725][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e61d9b3e20 [ 472.770743][ T31] R13: 000055e61d9ae190 R14: 0000000000000000 R15: 000055e61d9b3e20 [ 472.779273][ T31] [ 472.782509][ T31] INFO: task syz.5.2268:14289 blocked for more than 143 seconds. [ 472.791799][ T31] Not tainted syzkaller #0 [ 472.798930][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.812758][ T31] task:syz.5.2268 state:D stack:25536 pid:14289 tgid:14288 ppid:13498 task_flags:0x400140 flags:0x00004004 [ 472.825006][ T31] Call Trace: [ 472.828876][ T31] [ 472.831851][ T31] __schedule+0x1798/0x4cc0 [ 472.836678][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.841670][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.847200][ T31] ? __pfx___schedule+0x10/0x10 [ 472.852160][ T31] ? schedule+0x91/0x360 [ 472.856679][ T31] schedule+0x165/0x360 [ 472.861153][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.875231][ T31] __mutex_lock+0x7e6/0x1350 [ 472.880176][ T31] ? __mutex_lock+0x5bb/0x1350 [ 472.884986][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 472.891949][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.897121][ T31] ? __asan_memset+0x22/0x50 [ 472.902151][ T31] ? ____sys_sendmsg+0x505/0x830 [ 472.909814][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 472.914964][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 472.920251][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 472.926506][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 472.932291][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 472.938793][ T31] ? __nla_parse+0x40/0x60 [ 472.943265][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 472.950249][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 472.956114][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 472.962357][ T31] ? bpf_lsm_capable+0x9/0x20 [ 472.967253][ T31] ? security_capable+0x7e/0x2e0 [ 472.972275][ T31] genl_rcv_msg+0x60e/0x790 [ 472.977181][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.982354][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 472.988877][ T31] netlink_rcv_skb+0x208/0x470 [ 472.993842][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.999071][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.004170][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.009758][ T31] ? down_read+0x1ad/0x2e0 [ 473.014267][ T31] genl_rcv+0x28/0x40 [ 473.018942][ T31] netlink_unicast+0x82f/0x9e0 [ 473.023905][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 473.029499][ T31] ? netlink_sendmsg+0x642/0xb30 [ 473.034570][ T31] ? skb_put+0x11b/0x210 [ 473.039196][ T31] netlink_sendmsg+0x805/0xb30 [ 473.043984][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.049455][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 473.054512][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.060089][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.065414][ T31] __sock_sendmsg+0x219/0x270 [ 473.070249][ T31] ____sys_sendmsg+0x505/0x830 [ 473.075042][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.080737][ T31] ? import_iovec+0x74/0xa0 [ 473.085296][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 473.090119][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.095376][ T31] ? __fget_files+0x2a/0x420 [ 473.100019][ T31] ? __fget_files+0x3a0/0x420 [ 473.104719][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 473.110265][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.115760][ T31] ? rcu_is_watching+0x15/0xb0 [ 473.120664][ T31] ? do_syscall_64+0xbe/0x3b0 [ 473.125387][ T31] do_syscall_64+0xfa/0x3b0 [ 473.130338][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.135588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.141765][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.146519][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.152447][ T31] RIP: 0033:0x7f61d6b8eec9 [ 473.156969][ T31] RSP: 002b:00007f61d4df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.165440][ T31] RAX: ffffffffffffffda RBX: 00007f61d6de5fa0 RCX: 00007f61d6b8eec9 [ 473.173714][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 473.181854][ T31] RBP: 00007f61d6c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 473.189983][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.198034][ T31] R13: 00007f61d6de6038 R14: 00007f61d6de5fa0 R15: 00007ffe36dda8d8 [ 473.206189][ T31] [ 473.209301][ T31] [ 473.209301][ T31] Showing all locks held in the system: [ 473.217242][ T31] 3 locks held by kworker/0:0/9: [ 473.222207][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 473.233521][ T31] #1: ffffc900000e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 473.244629][ T31] #2: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 473.255277][ T31] 1 lock held by khungtaskd/31: [ 473.260320][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 473.270614][ T31] 2 locks held by getty/5625: [ 473.275315][ T31] #0: ffff88814debe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.285140][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 473.295572][ T31] 1 lock held by udevd/5870: [ 473.300208][ T31] #0: ffff888024f1b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 473.309508][ T31] 1 lock held by udevd/6968: [ 473.314105][ T31] #0: ffff88814378c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 473.323427][ T31] 2 locks held by syz.4.1922/12942: [ 473.328843][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.337129][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 473.347431][ T31] 2 locks held by syz.5.2268/14289: [ 473.352655][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.360977][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 473.371557][ T31] 2 locks held by syz.0.2545/15485: [ 473.377081][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.385381][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 473.395784][ T31] 3 locks held by kworker/u8:19/16120: [ 473.401395][ T31] #0: ffff88801a489948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 473.413687][ T31] #1: ffffc9001b3e7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 473.424949][ T31] #2: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 473.434366][ T31] 2 locks held by syz.1.3019/17332: [ 473.439892][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.448169][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 473.458909][ T31] 2 locks held by syz.2.3637/19619: [ 473.464220][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.472488][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x2b3/0x890 [ 473.482515][ T31] 1 lock held by syz.2.3637/19625: [ 473.487932][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 473.497414][ T31] 1 lock held by syz.2.3637/19628: [ 473.502541][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 473.512311][ T31] 2 locks held by syz.9.3639/19612: [ 473.517735][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 473.526892][ T31] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 473.537932][ T31] 1 lock held by syz.9.3639/19618: [ 473.543048][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 473.552186][ T31] 1 lock held by syz.3.3642/19623: [ 473.557433][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 473.566532][ T31] 1 lock held by syz.3.3642/19627: [ 473.571659][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x109/0x210 [ 473.581184][ T31] 2 locks held by syz.6.3643/19631: [ 473.586726][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.594982][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 473.604530][ T31] 2 locks held by syz.6.3643/19633: [ 473.609818][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.618258][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 473.627563][ T31] 3 locks held by syz.7.3644/19644: [ 473.632769][ T31] #0: ffffffff8f59fd50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 473.641183][ T31] #1: ffff88807b92a6e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 473.651726][ T31] #2: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_tsinfo_dumpit+0x75/0x6a0 [ 473.661417][ T31] 1 lock held by syz.7.3644/19645: [ 473.667315][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 473.676625][ T31] 2 locks held by syz.7.3644/19646: [ 473.681844][ T31] #0: ffffffff8fa49000 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 473.691444][ T31] #1: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 473.700750][ T31] [ 473.703279][ T31] ============================================= [ 473.703279][ T31] [ 473.712273][ T31] NMI backtrace for cpu 0 [ 473.712295][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 473.712318][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.712331][ T31] Call Trace: [ 473.712339][ T31] [ 473.712350][ T31] dump_stack_lvl+0x189/0x250 [ 473.712381][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.712405][ T31] ? __pfx__printk+0x10/0x10 [ 473.712441][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 473.712470][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 473.712499][ T31] ? __pfx__printk+0x10/0x10 [ 473.712530][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.712562][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 473.712591][ T31] watchdog+0xf93/0xfe0 [ 473.712622][ T31] ? watchdog+0x1de/0xfe0 [ 473.712654][ T31] kthread+0x70e/0x8a0 [ 473.712681][ T31] ? __pfx_watchdog+0x10/0x10 [ 473.712706][ T31] ? __pfx_kthread+0x10/0x10 [ 473.712730][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.712759][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.712787][ T31] ? __pfx_kthread+0x10/0x10 [ 473.712811][ T31] ret_from_fork+0x439/0x7d0 [ 473.712833][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 473.712859][ T31] ? __switch_to_asm+0x39/0x70 [ 473.712881][ T31] ? __switch_to_asm+0x33/0x70 [ 473.712903][ T31] ? __pfx_kthread+0x10/0x10 [ 473.712927][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.712969][ T31] [ 473.712977][ T31] Sending NMI from CPU 0 to CPUs 1: [ 473.860882][ C1] NMI backtrace for cpu 1 [ 473.860899][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 473.860918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.860929][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 473.860960][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 29 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 473.860976][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 473.860991][ C1] RAX: 038cfe1939f2d800 RBX: ffffffff819683f8 RCX: 038cfe1939f2d800 [ 473.861005][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b0794 RDI: ffffffff8be33f00 [ 473.861017][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 473.861029][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa2f030 [ 473.861042][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 473.861054][ C1] FS: 0000000000000000(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 473.861068][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.861079][ C1] CR2: 0000001b3180dff8 CR3: 0000000078d06000 CR4: 00000000003526f0 [ 473.861094][ C1] Call Trace: [ 473.861101][ C1] [ 473.861107][ C1] default_idle+0x13/0x20 [ 473.861126][ C1] default_idle_call+0x74/0xb0 [ 473.861146][ C1] do_idle+0x1e8/0x510 [ 473.861172][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 473.861191][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.861218][ C1] ? __pfx_do_idle+0x10/0x10 [ 473.861248][ C1] ? do_idle+0x10/0x510 [ 473.861275][ C1] cpu_startup_entry+0x44/0x60 [ 473.861308][ C1] start_secondary+0x101/0x110 [ 473.861333][ C1] common_startup_64+0x13e/0x147 [ 473.861363][ C1] [ 473.861968][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 474.043647][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 474.052763][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 474.062822][ T31] Call Trace: [ 474.066107][ T31] [ 474.069047][ T31] dump_stack_lvl+0x99/0x250 [ 474.073655][ T31] ? __asan_memcpy+0x40/0x70 [ 474.078257][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.083463][ T31] ? __pfx__printk+0x10/0x10 [ 474.088076][ T31] vpanic+0x281/0x750 [ 474.092075][ T31] ? __pfx_vpanic+0x10/0x10 [ 474.096583][ T31] ? preempt_schedule+0xae/0xc0 [ 474.101469][ T31] ? preempt_schedule_common+0x83/0xd0 [ 474.106949][ T31] panic+0xb9/0xc0 [ 474.110678][ T31] ? __pfx_panic+0x10/0x10 [ 474.115101][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 474.120495][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 474.126676][ T31] watchdog+0xfd2/0xfe0 [ 474.130853][ T31] ? watchdog+0x1de/0xfe0 [ 474.135198][ T31] kthread+0x70e/0x8a0 [ 474.139281][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.143972][ T31] ? __pfx_kthread+0x10/0x10 [ 474.148590][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.153890][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.159187][ T31] ? __pfx_kthread+0x10/0x10 [ 474.163785][ T31] ret_from_fork+0x439/0x7d0 [ 474.168389][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 474.173519][ T31] ? __switch_to_asm+0x39/0x70 [ 474.178290][ T31] ? __switch_to_asm+0x33/0x70 [ 474.183066][ T31] ? __pfx_kthread+0x10/0x10 [ 474.187670][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.192461][ T31] [ 474.195822][ T31] Kernel Offset: disabled [ 474.200149][ T31] Rebooting in 86400 seconds..