last executing test programs: 6.427162799s ago: executing program 3 (id=3048): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x1ec, 0x6}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x2, 0x7, 0x47b4, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x1, 0x4}, &(0x7f00000001c0)=0x90) 6.311003161s ago: executing program 3 (id=3050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8000049b, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}}, 0x24}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.989217789s ago: executing program 2 (id=3056): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, 0x20}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000080)="46e1f896d410d0656a977ecbb6f57c8a4e92b72104b84f187b271d8156415b9183be88b6636600000000") r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x21, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 5.760929251s ago: executing program 2 (id=3058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffe, 0x8000, 0x7, 0x81}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x60, 0x0, 0x1, 0xfffff010}]}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000300)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x3f05, 0x5, 0x0, 0x1}, {0x0, 0x7c, 0x19, 0x10001}, {0xfffd, 0x0, 0x4, 0x9}, {0xc, 0x2, 0x43, 0x3}, {0x9, 0x9, 0x5, 0x1}, {0x7, 0x7, 0x3, 0x1}, {0x397, 0x8c, 0x6, 0x4}, {0x2, 0x7f, 0x6, 0x3}]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r10, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @broadcast}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000001300)=r9, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@initdev, @multicast1, 0x0}, &(0x7f0000000180)=0xc) sendto$packet(r6, &(0x7f0000000ac0)="bad330fbc9b55400040000ea0756a85d88a845e76f68cfb86f8cf85775331d1f8b87e771ddc0e6d1177a420140ffc75b0e3d332524afb9dd4e659a7b1ac244551e5e588bb72dcf7cd0781976419126aded10c8e5be721257aa161d9f32cae704e4acd8f8212c3d97eff70a4a58e24ffd4eb3c4af08186e346cb03fe899f82f15da66c4acf58762fd050a8bf733d4be599c10a4f01999778a0e9b5ea0906bacef9d76ece15519270ba6b1e057f385b536f9c45551d3dc09f10ab72297b5a99526184aca9e393d397e01ae6b74a681cd262b8d64ef384399c7c7b6bb6da31bd0baf9faec19740afb1e789c41f837e1fbaa2fab3d67de0488", 0xf7, 0x4c081, &(0x7f00000001c0)={0x11, 0xd, r11, 0x1, 0xd8, 0x6, @local}, 0x14) 5.759146345s ago: executing program 3 (id=3060): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c0012800b000100f167656e65766500000c00028008000b40000000011400030067656e657665300000000000000000"], 0x50}}, 0x80) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5", @ANYRES32=r0, @ANYRES8=r5, @ANYRESHEX=r2], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="050000000500000004000000000000000000000000f9040000000000"], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r6) pipe(0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.40542945s ago: executing program 3 (id=3063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)={@cgroup, 0xffffffffffffffff, 0x1a, 0x3}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) listen(r6, 0x80000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)={@cgroup, 0xffffffffffffffff, 0x1a, 0x3}, 0x20) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) (async) listen(r6, 0x80000000) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r5}, 0x20) (async) 5.353982252s ago: executing program 2 (id=3064): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) 5.220376355s ago: executing program 2 (id=3065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000040)={0x7, 'gretap0\x00', {0x6}, 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0x64010101}, 0x2, 0x3, 0x0, 0x2}}, 0x2e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000001640)=ANY=[], 0x30) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000140)=0x63, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockopt(r5, 0x111, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) write(r1, &(0x7f00000000c0)="1c0000001a009b8a14e5f40700426e2400000000ff20000000080000", 0x1c) r7 = socket(0x28, 0x4, 0x7ffffffc) setsockopt$inet_int(r7, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r7, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) 5.173239716s ago: executing program 3 (id=3066): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x2, 0x12, 0x6, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfb}, 0x10}}, 0x8010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdc01, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 5.008353558s ago: executing program 3 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r4}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (async) 4.539643586s ago: executing program 1 (id=3074): r0 = socket(0x11, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) r2 = socket(0x5, 0x5, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) r7 = socket$rds(0x15, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$RDS_RECVERR(r7, 0x114, 0x3f, &(0x7f0000000040), 0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0x7, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000001100)={0x0, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) listen(0xffffffffffffffff, 0xa1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x899, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r10) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c1ffffff10000305040020000000000000000000", @ANYRES32=r11, @ANYBLOB="00000000eaff0100"], 0x48}, 0x1, 0x2000, 0x0, 0x4004800}, 0x4048880) getsockname$packet(r10, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) 4.210540076s ago: executing program 4 (id=3077): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xbf44, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60010000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000069706e0000001400028006000200300000000500160001000000000000000000"], 0x48}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4.184769917s ago: executing program 1 (id=3078): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) (async) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@random="550043ffdfd8", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "bbddf0", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) (async) unshare(0x62040200) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000600400095000000000000008fa49ddf9f81f4d6c4defa3cdd4f998e2cd117bea3f81fcc99edfe4978ca5229cd46b492ed8633f320d306b291b2f47f969eefce1a529dc9c78a46849467b2d92cda4caffee54015119aa7d0e9b4b3d7bc6a989ee31883e9b2b1417165366cd6e8ea95c00a2e4719358af381c91f917810e08378de23348bc65d3543ece85e91223c0e985dd8c9abf18b0bc09f0fdf56b56ec030d60211858b739dcc71"], &(0x7f00000000c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async, rerun: 64) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 64) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x20, 0x100, 0x0, 0x9ff, 0x8, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0xfffff800, 0x0, 0xf, 0x5, 0x1, [0xfffffffd, 0x82]}}) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async, rerun: 32) r11 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) socket$packet(0x11, 0xa, 0x300) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r11}) (rerun: 64) sendto$unix(r12, &(0x7f0000000780)="be52a5186e95867ae83f875dd19c0a4f82115dc0eb0aead82e35c4de18e9dba3caca3223371f04f6b326023d3a8c8083bf1e78d74f6ef37c4eab41adae6f5425e59a3567fc15d24ee578759c734978a43fe58e1c0fedcc16d7d8dab79519b9e4a4d7b47911fae7dd0753f41dc2f4a6093c4c7bc9e772497d2c9a3fbf45849f7289f514987cde8cb8ed4ce1faaab3242e5de3d2202e100e4d1764571916083a3fab3fa60760c6d0de7d218628548159ebebaefd19ff4fc7c89ed3e1ca3483c8e8b7f2c1fee86986f54f3d61f1938477b49df9d89f012681", 0xd7, 0x800, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) r13 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64) write(r13, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 4.132180403s ago: executing program 2 (id=3079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0xfc, 0x2c, 0x100, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_MATCHALL_ACT={0xa4, 0x2, [@m_skbedit={0xa0, 0xe, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0xfffffffd, 0xffffffffffffffff, 0x3, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x50e}]}, {0x34, 0x6, "4451f677e1feba51f0ca936c35676af75510a35c3d1e76db91483b29378a9cfebc4ed602044c88674ebdcbd0ed1f7310"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x4048800}, 0x20008801) 3.515354039s ago: executing program 4 (id=3080): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:hald_sonypic_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x804) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x840) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x42}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x89}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xab}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004101}, 0x800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) r6 = socket$kcm(0x29, 0x5, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f00000005c0)={0x27, r5, 0x1, 0x7, 0x3, 0x9, "8d9e951127c00164e15c36c6281b074485f2ef61e7348a4be67d96d86e385304e880ae0911706511db63e3220c01a4dc7b8d81756aa69d250aa76dcba3931d", 0x2e}, 0x60) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f0000000680)=0xffffffff) (async) r8 = accept$nfc_llcp(r7, &(0x7f00000006c0), &(0x7f0000000740)=0x60) sendmsg$nfc_llcp(r8, &(0x7f0000002c40)={&(0x7f0000000780)={0x27, r5, 0xffffffffffffffff, 0x1, 0x6, 0x3, "06be853087255ee0411c1b237ebbd53d84e3491e94e906bad427f7fe2f0fbc4739f8fb7e36aab44828cb24cc1002e922beb6f5b04e0bbbed179948bba6fe71", 0x3d}, 0x60, &(0x7f0000002ac0)=[{&(0x7f0000000800)="367bd71341b984d4cd0eff5590c78da9d285cc3ddaedcd7eae0e86260e3bba9885421d59f4726ea30faed5ac312e7bf5b908a36464bf0077f757fe8339532f4bb9d8e703a08e01b20a93628953db3cf176645531967b7551dc9176af4eec0c9b7aa025a04d3d928e79d05a0c25d41a", 0x6f}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="21d85ecba085221db0680d6029db50887450fa35c94ddd96a6b6d1d89c112050d8af78ebb30ce522ca0ace4efee51d70ef91c4e8c2e5a6f6df73c1c432854698375b022ac60954a05dab1b51a4d4216d03", 0x51}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="88e9dc1da36a3d6f58f50846aac9691e85ae79011be00c60c1153f9bba30bf70a368ce939d52c9fa5286cf183abc734220c197c3898be743620b6e1a8f9d3f74ef17aa1a80df2db3bccbf49d71b9b9cfde2000b331", 0x55}, {&(0x7f0000002980)="1e4a44b974209d400337388a788ef30db2088201169d4125ca6c2e32cf4622e9fe603ce7a740e478f93e62c1a907f517c9e5069d2dfef605f3b733548a4f3d2aa5dcc35ddee2d5bd49dc8c86dfaa0316bcc5afb004ec96f7a91a989383605aca9f67a8c61513cde14d69fe0d11a11690ec40d312e6dbd12a0b45cebb829d55b6f80ee1b916bafa2623a64f82197224af535272dc514bbe11066cf557795a187464e5176206c3537ed7001f24b7472b77da61a47c50822fa3160e5a593ee308ce2aa4a9", 0xc3}, {&(0x7f0000002a80)='6<:ocY', 0x6}], 0x7, &(0x7f0000002b40)={0xc8, 0x110, 0x4, "6ef81328e1801ffbcb40f0189886f2acc078ab563d67491a49140dd032bad827728c9c8699a9e5dde214b3c16b6144655b1d4b7cb69c41919fb3997c35b78207d0ce3e769ccf08b22753f10448c4c4bc8a5e326a3adf2ecd3eba164b45f3c99ae4c04f9a4e689b5e34a1d4f880b8715b5bb548955c4c189a98947c55ed6c929a346c597a36cb973cb5eae0af6771d78f7a3964156f5ac4487f0dfa588b355f0860773b9aeeb798fc2a2f45a341429db70d0e"}, 0xc8, 0x20004054}, 0x40040) (async, rerun: 32) recvfrom$rose(r6, &(0x7f0000002c80)=""/94, 0x5e, 0xdafef2d83ec7395a, &(0x7f0000002d00)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) (rerun: 32) r9 = socket$inet(0x2, 0x5, 0x6f) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000002e00)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000002f00)={@empty, @private, 0x0}, &(0x7f0000002f40)=0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000003040)={0x2, 0x7, &(0x7f0000002e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x4, 0x1, 0x0, r7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000002e80)='syzkaller\x00', 0x10001, 0x33, &(0x7f0000002ec0)=""/51, 0x41000, 0xc, '\x00', r10, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000002f80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002fc0)={0x3, 0xe, 0x9, 0xb}, 0x10, 0x0, r7, 0x0, &(0x7f0000003000)=[r7, r7, r7, r7, r7], 0x0, 0x10, 0x6}, 0x94) ioctl$FS_IOC_GETFSSYSFSPATH(r11, 0x80811501, &(0x7f0000003100)={0x80}) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003300)={&(0x7f0000003200)={0xf8, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0xf8}}, 0x4000c814) (async) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000003380)=""/137, &(0x7f0000003440)=0x89) (async, rerun: 64) r12 = socket$kcm(0x29, 0x0, 0x0) (rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$F2FS_IOC_RESIZE_FS(r12, 0x4008f510, &(0x7f0000003480)=0x9) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000034c0)='./cgroup/syz1\x00', 0x200002, 0x0) close(r13) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) 3.285528749s ago: executing program 4 (id=3081): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x525248e2, @empty, 0x9}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000aa00000085000000060000009500"/81], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) write$cgroup_subtree(r6, 0x0, 0x9) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0ffff0b000000010000000000000002000000000000007f00000000000000050000000000000000000000000000000000000003000000000000000000000004800000baf400008600000000000000010000000000008000020000000000000200"/512]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000480)={0x7, 'pimreg1\x00', {0x7}, 0x8}) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x840) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r10, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000005b3770e7017500"/24], 0x18}, 0xc4) 3.246126174s ago: executing program 0 (id=3082): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5f03", 0x2}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x9, @remote, 0xe7e}, 0x1c, &(0x7f0000001a40)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000100)="3586ffd19c493791a14bce0bf1882eb478f7d44a4c8a83812dd4596dfdbd93208a95c3872b1fb58226d0e2ce33891500931a20", 0x33}, {&(0x7f0000000300)="d595ea29839e0f6e02c413594c897ce0e88f18822d021d25136fdfa93e2cab3860a0aef09c3e3a1887fa314847cfd877809af0c108657313fdeae1d2a46162923f", 0x41}, {&(0x7f0000000400)="2a88b19ea3e396873db4d2d1fafc9e42d74cfa3475bf29aa6a1520bd7c857e479ae30bd0b9838d5c5578cb0e214f13bf9964fb8e0336bc346762ccedf25661fed72646b6340ebda5c77b1dab5c16ac44b86a093f603e347e5769e5279609af0b59afc6a7eae072b72707487d2166b05561cc3748a3b5eacde3cd72e68901fa2b95d4b3de42adb3f50537f6d14655357022283b0702a48a9594804d48bcc01b787a94c85bbe2e432c011ae183221a83aa39a907c6278b8c53d2deb2a7e1e4809b6e12f47599823858ba0df0e5e07dd1b04137bab38bbd7f", 0xd7}, {&(0x7f0000000500)="3c960ba29151f274a9e16f514c9475b0b9df7604645eb528c3354f233bd6143749bdc0e8dd7909b88ad6392f23417d5655d026ad67c480ad272e37d9ad90dd848b2c0a7144cdf9d32833e08f8cd8d5f2ce3d1070c8be481f3e48497c72c71ed93f1617a196a3aea727cb55af5a7360a3288f52894429f862c1faf51beaed592a043ae61f7fd7e7ee9a375e89a2", 0xfffffffffffffff7}, {&(0x7f0000000380)="be7c5ea510031d3b194227c1a4fb62fb00b74762aa9a52180eb36217e62a5b61e14a0b5a9fe672b7d2d0b35da4268dc4457014dc42238233437c46c9eb", 0x3d}, {&(0x7f00000005c0)="debd6525030aaf47726b69831bcd2fea8658b561e0590346079b75e62757d0b2cc5985593cb3aa3e0b200fe7a9736bf8", 0x30}], 0x7, &(0x7f00000016c0)=[@dontfrag={{0x0, 0x29, 0x3e, 0x1dc4}}, @rthdr={{0x68, 0x29, 0x39, {0x3c, 0xa, 0x1, 0xd, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001740)="d7cd494408c5972b6610d7eb638f1b2af34a32f91a5a6474bb22f371d017f93c608cc7ec7883e26b7b4b884fb87a67861822f4f3620e9a477b8ab5948e8f79cb2db7429970bfa65ca690606fb1a90064dd8ba228a22bfcfe3685615624e22210f787330c4a03fb3a01ddedaae6290cd3c5b41ef9732e0922075a2144fe4da611ea1e4b4e8d274ed4a06d59770cb96e06df71036ca1ab70a287c120fb8e8b73", 0x9f}, {&(0x7f0000001800)="4843a3df5874c614305cb975ee5d4cdc3a43d57767a7be65b741253a8fab505fb40a244398565b7f84d1885e1c4dcec3dcafab61ca5d08f8ebbea551c8478d7156d8fe566a9334432467f4263fbb06d9144a3ac0455d56e44f1267d2790de1e22d8bdd10e638e3c08226d33cb2db210f260351f9aa78a938c118", 0x7a}], 0x2, &(0x7f00000018c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0xf}}], 0x48}}], 0x4, 0x200401c0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$nbd(r1, &(0x7f0000000200)={0x67446698, 0x0, 0x3, 0x1, 0x4, "ae3cd8c2c14f5f027db6f5e078c83b4120c279a725b91adc12827a9c75f9dcc30711d1adb7315259286f010b4854c9bb7eb9b5948ba7569269a4e7fedf92db56d21e31ac361e317bc3f8000dc44f5d17a8a5b648e073cdcc6c80414afb6978af10b14eb02e9aa01f06f3c8a65f49fcd1a121b7b7dd0d314620bc3c479401dd6361a4e98af92a5dd214ecc4962d9775f21655b07c4877b693f14d14a99c57840535acc65473f53e494214bcd3a0263a3b9f2b3ad1855313e54432"}, 0xca) listen(r0, 0xfff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3c}}, 0x4004) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) 3.1841758s ago: executing program 1 (id=3083): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010026bd7000ffffffff0a140000030000070000000014000100"], 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="8911c14db7b3d69b0000000000bc000000850000000e000000955dced419199616945d03b477785608eb79c316334303db3d037380d2c7288cf78fc87a37c6b3272717eea14157dc6f962f3a1901b2859e31b2e6ad92aa03e6d643f315ba6ea6469dc6d4615c62b60e3ae30760911d58053409ee4cbf90574ffcbd1b01793a0b05352bbd649fe143f1ac5b99034d09a7a9fd583db72bbd4494dad54cc74286fef1506683528dfd02942a44ccfd48c68fe108145ad9bf7f5986047e8c795b1032aa12557500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2c, r7, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000b80)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @remote, @private0, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "7859a2", 0x8, 0x8, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [@hopopts={0x67}]}}}}}}}, 0x0) 3.044304202s ago: executing program 0 (id=3084): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%pB \x00'}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f0000000040)}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r4, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0xa, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0\x00', r0}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 3.043873845s ago: executing program 1 (id=3085): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2020}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x4048080) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x20000000000002d8, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23}, 0xffffffffffffff28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009517371a7133f3f901ba94c178c3841f7822a5f7a71c9b3fc6136ded87179410f21fe43b48b719e5ab75c557486962067a2e20cfcb274eca177ea430f29c2b27c83c479949854632", @ANYRES16=r4, @ANYRES16=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x47, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) unshare(0x2020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, 0x0, 0x0) unshare(0x2c060000) r6 = socket$unix(0x1, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x18, r6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 2.865163477s ago: executing program 2 (id=3086): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x8, 0xd}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000180)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x45}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="5c71f91b05c413550230b4c817a6", 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRES8=r4], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x28, 0x5, 0x2e8113f0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x80000, 0x2008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ipvlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x44}, 0x10) 2.307767894s ago: executing program 4 (id=3087): sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xee) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='napi_poll\x00', r0, 0x0, 0x80000000000}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010004b04000000020000007a000000ca616db181f3fd9b0f74bead575df3f37db98792a78fad14a01685699a3b7e71b1ec560d20c9781e19f4ed0ae1657a11288e", @ANYRES32=0x0, @ANYBLOB="0000000000a000002c0012800b00010062726964676500001c0002800c00210003000000000000000c002000ff0f000000000000"], 0x4c}}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56d41, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@ldst={0x91f450d432871387, 0x2, 0x2, 0x0, 0xa, 0x100, 0xfffffffffffffffc}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @alu={0x7, 0x0, 0xa, 0x3, 0x9}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)=0x82) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r11}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0) r14 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r2, 0x4c0}, {r12, 0x8229}, {0xffffffffffffffff, 0x200}, {r14, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 1.984574899s ago: executing program 4 (id=3088): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x25dfdbfd, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x8030) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000fcdbdf2509000000040003"], 0x24}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1011, &(0x7f0000002e80)=""/4113, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x260}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x200, 0x70bd2b, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) 1.958828609s ago: executing program 0 (id=3089): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) unshare(0x2c040600) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x34000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000279dea3efeffffff00010000fc0000000000000000000075dd649b01640101010000000000000000000000000001003a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.814486695s ago: executing program 0 (id=3090): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x20, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @alu={0x4, 0x1, 0x6, 0xa, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000001c0)='GPL\x00', 0x3ff, 0xd4, &(0x7f0000000600)=""/212, 0x1e00, 0x23, '\x00', 0x0, @fallback=0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x1, 0x1}, {0x4, 0x4, 0x4, 0x9}, {0x2, 0x5, 0xc, 0xb}, {0x3, 0x3, 0x2}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000080)=r5, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getlink={0x20, 0x12, 0xee279624cde2f6fd, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xac01, 0xc6c5}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct]}}, &(0x7f0000000500)=""/16, 0x3a, 0x10, 0x1}, 0x28) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/60, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) socket$nl_route(0x10, 0x3, 0x0) 1.681889717s ago: executing program 0 (id=3091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xe20, 0x5, 0x80, 0x2}]}) 292.373011ms ago: executing program 4 (id=3092): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x81', 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x4800, 0x0, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001180)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @generic="35c7f329db8995d513b52c8c5240cd0f8f0efd22fafcbe973050e5ac7896b04934c59a8c2902893ed0fa88093754e169740d41eaad5da09076f4e7897dfad5feded7a2395d2ea35d45e8c2d8abb9087f606e54e3673baf203fc1528ef1a75eebedfdf17c5b7a14be6421210484d0df5683441a87a88dba753d6829e422a8ef20165e283ccb9180f84e4cfcb87f36f63e47a25ed7f7c01b9ace9b62a80d0fa4b46419bfea99c9a65171fbcd5458156807962f6e"}}, 0x56) 149.675799ms ago: executing program 1 (id=3093): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0xa5, "24be3711391e097c547792e23995e94467f5591387743de5d8a59e73bae91b4bf52b41165e75b7f55ec3f4dde52523667fb7ea93193ff72ffdc1ce5d89a84b864c50dbdfb50ba51a0aec29b4ddc143ba7e1907f05e192d431a3aad2f61a150de1ffb7d04b34c8a53aee76ebc9b0368e8429044248f029d4a9386dc00541db7dff4a20e078da23b874b007032cb7c9b6ee3060304aa1ccdc51708c7c349d1af3f61d675d2bf"}) socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x3000002, 0x12, r1, 0xc08b9000) 73.128957ms ago: executing program 1 (id=3094): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080005000000000008000600000000004dfd050000000000240007800800050000da539b"], 0xd0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000ffff27bd7000fedbdf2100000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500140012800b0001006272696467650000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 0s ago: executing program 0 (id=3095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18000001800000004000eeffffff000018110000", @ANYRES32=r1, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r0, 0x2b, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r9, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x1, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r10, r2, 0x21, 0x2021, r3, @void, @void, @value=r11, @void, r4}, 0x20) kernel console output (not intermixed with test programs): m1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.455836][ T9456] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.212058][T12642] lo speed is unknown, defaulting to 1000 [ 247.260893][T12644] tipc: Enabled bearer , priority 0 [ 247.268507][T12644] syzkaller0: entered promiscuous mode [ 247.274846][T12644] syzkaller0: entered allmulticast mode [ 247.334386][T12644] tipc: Resetting bearer [ 247.343759][T12643] tipc: Resetting bearer [ 247.388720][T12643] tipc: Disabling bearer [ 247.600608][T12660] batadv_slave_1: entered promiscuous mode [ 247.624402][T12659] batadv_slave_1: left promiscuous mode [ 247.789567][T12675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1723'. [ 247.947824][T12685] delete_channel: no stack [ 247.997841][T12685] delete_channel: no stack [ 248.073425][T12687] siw: device registration error -23 [ 248.089760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 248.097822][ C0] lec:lec_tx_timeout: lec0 [ 248.102621][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 248.102675][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 248.119860][T12694] nbd: must specify a device to reconfigure [ 248.239657][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1730'. [ 248.454585][T12714] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.553033][T12714] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.659365][T12714] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.789566][T12714] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.974900][ T9455] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.992442][ T9455] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.015958][T12741] tipc: Enabled bearer , priority 0 [ 249.043215][ T9455] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.059971][ T9455] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.060039][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 249.080023][T12737] tipc: Resetting bearer [ 249.093818][T12736] tipc: Disabling bearer [ 249.282492][T12746] tipc: Enabled bearer , priority 0 [ 249.302751][T12746] syzkaller0: entered promiscuous mode [ 249.319782][T12746] syzkaller0: entered allmulticast mode [ 249.358980][T12746] tipc: Resetting bearer [ 249.381419][T12745] tipc: Resetting bearer [ 249.429562][T12745] tipc: Disabling bearer [ 249.480388][T12753] openvswitch: netlink: Flow key attr not present in new flow. [ 249.582736][T12759] xt_hashlimit: size too large, truncated to 1048576 [ 249.599406][T12757] xt_hashlimit: size too large, truncated to 1048576 [ 249.620443][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 249.764022][T12759] netlink: 'syz.1.1748': attribute type 13 has an invalid length. [ 249.773270][ T9455] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 249.784081][T12759] netlink: 'syz.1.1748': attribute type 17 has an invalid length. [ 249.799579][T12759] gretap0: refused to change device tx_queue_len [ 249.833306][T12759] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 249.892489][T12775] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1752'. [ 249.904674][T12775] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 250.169421][T12784] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1756'. [ 250.189161][ T5894] hid-generic 0005:0002:5508.0001: item fetching failed at offset 19/20 [ 250.213026][ T5894] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 250.753706][T12823] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.875917][T12809] lo speed is unknown, defaulting to 1000 [ 251.523032][T12834] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 251.560690][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 251.609458][T12834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'. [ 251.837380][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1776'. [ 251.952904][T12857] lo speed is unknown, defaulting to 1000 [ 252.654446][T12863] netlink: 'syz.3.1778': attribute type 6 has an invalid length. [ 252.795831][T12863] lo speed is unknown, defaulting to 1000 [ 252.827124][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 252.877322][T12877] netlink: 'syz.1.1779': attribute type 6 has an invalid length. [ 253.129753][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 253.138238][ C0] lec:lec_tx_timeout: lec0 [ 253.146501][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 253.348540][T12881] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.536596][T12881] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.619125][T12887] lo speed is unknown, defaulting to 1000 [ 253.635766][T12881] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.721930][T12881] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.828195][T12895] lo speed is unknown, defaulting to 1000 [ 253.949659][ T9457] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.977407][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'. [ 254.297812][ T9457] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.364630][ T9464] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.425430][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1784'. [ 254.638811][ T9464] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.556652][T12956] lo speed is unknown, defaulting to 1000 [ 255.867687][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.011603][T12982] team0: Port device syz_tun removed [ 256.038258][T12982] bridge_slave_0: left allmulticast mode [ 256.073679][T12982] bridge_slave_0: left promiscuous mode [ 256.126483][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.165752][T12982] bridge_slave_1: left allmulticast mode [ 256.201852][T12990] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 256.220280][T12982] bridge_slave_1: left promiscuous mode [ 256.234346][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.313470][T12982] bond0: (slave bond_slave_0): Releasing backup interface [ 256.358049][T12982] bond0: (slave bond_slave_1): Releasing backup interface [ 256.410637][T12982] team0: Port device team_slave_0 removed [ 256.433186][T12982] team0: Port device team_slave_1 removed [ 256.460983][T12982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.472082][T12982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.514849][T12982] bond2: (slave macvlan1): Releasing backup interface [ 256.536713][T12982] veth1_vlan: left allmulticast mode [ 256.562774][T12982] batman_adv: batadv0: Removing interface: ip6gretap1 [ 256.626855][T12982] bond1: (slave ip6gretap2): Removing an active aggregator [ 256.681257][T12982] bond1: (slave ip6gretap2): Releasing backup interface [ 256.708908][T12982] bond1: (slave ip6gretap2): the permanent HWaddr of slave - 92:fb:db:db:39:ce - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 256.797312][T12982] bond1: (slave veth5): Releasing backup interface [ 256.863488][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1808'. [ 256.961718][T12990] bond0: (slave wlan1): Opening slave failed [ 257.351643][T13036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1821'. [ 257.856016][T13052] batman_adv: batadv0: Interface deactivated: vxlan0 [ 257.885648][ T9459] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.917096][ T9459] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.961790][ T9459] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.022913][ T9459] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.159792][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 258.167839][ C0] lec:lec_tx_timeout: lec0 [ 258.172944][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 258.360452][T13076] netlink: 70 bytes leftover after parsing attributes in process `syz.1.1828'. [ 258.468807][T13091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1832'. [ 258.553615][T13094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1833'. [ 258.578368][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 258.612235][T13097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1834'. [ 258.653209][T13100] netem: change failed [ 259.205666][T13135] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.347377][T13138] lo speed is unknown, defaulting to 1000 [ 259.408506][T13149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.417134][T13149] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.435345][T13149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.461456][T13135] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.512489][T13135] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.591531][T13135] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.740703][T13156] bond8: option arp_all_targets: invalid value (3) [ 259.749111][T13156] bond8 (unregistering): Released all slaves [ 259.847538][ T9457] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.871106][T13163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.906398][ T9457] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.932989][ T9457] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.959220][ T9457] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.236380][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 260.270115][T13177] lo speed is unknown, defaulting to 1000 [ 260.521434][T13196] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 261.277219][T13221] syzkaller0: entered promiscuous mode [ 261.292561][T13221] syzkaller0: entered allmulticast mode [ 261.394123][ T30] audit: type=1107 audit(1761993391.951:5): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='cTA,ny4pM'9sOԐddn@:lpC2Vu+I[^omLa0*- eB58kGjUH*$?ͲbL' [ 261.649590][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 261.886206][T13255] vlan2: entered promiscuous mode [ 261.907759][T13255] vlan2: entered allmulticast mode [ 261.929176][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1885'. [ 261.995324][T13266] lo speed is unknown, defaulting to 1000 [ 262.199073][T13274] vxcan1: entered allmulticast mode [ 262.205000][T13274] vxcan1: left allmulticast mode [ 262.423056][T13283] lo speed is unknown, defaulting to 1000 [ 262.490740][T13291] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1893'. [ 262.797572][T13296] tipc: Enabled bearer , priority 0 [ 262.829874][T13296] syzkaller0: entered promiscuous mode [ 262.853634][T13296] syzkaller0: entered allmulticast mode [ 262.897363][T13296] tipc: Enabling of bearer rejected, already enabled [ 262.909423][T13296] tipc: Resetting bearer [ 262.918945][T13295] tipc: Resetting bearer [ 262.942711][T13295] tipc: Disabling bearer [ 263.013994][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 263.019025][T13307] syzkaller0: entered promiscuous mode [ 263.059630][T13307] syzkaller0: entered allmulticast mode [ 263.179800][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 263.187890][ C0] lec:lec_tx_timeout: lec0 [ 263.192753][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 263.570635][T13334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1905'. [ 263.584212][T13334] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1905'. [ 263.723374][T13334] xt_CT: No such helper "snmp_trap" [ 263.775265][T13354] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1909'. [ 263.891689][T13349] lo speed is unknown, defaulting to 1000 [ 264.109692][T13368] lo speed is unknown, defaulting to 1000 [ 264.483596][T13382] lo speed is unknown, defaulting to 1000 [ 264.579158][T13392] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 264.595756][T13392] bond8 (unregistering): Released all slaves [ 264.598842][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 264.611883][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1918'. [ 264.731358][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1920'. [ 265.002452][T13418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.257539][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 265.325035][T13435] bond8: entered promiscuous mode [ 265.330848][T13435] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.770345][T13464] netlink: 'syz.4.1943': attribute type 15 has an invalid length. [ 266.462900][T13492] 8021q: VLANs not supported on ipvlan1 [ 266.494312][T13492] macsec2: entered promiscuous mode [ 266.525010][T13492] macsec2: entered allmulticast mode [ 267.028209][T13527] __nla_validate_parse: 8 callbacks suppressed [ 267.028226][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 267.066786][T13523] lo speed is unknown, defaulting to 1000 [ 267.176395][T13532] lo speed is unknown, defaulting to 1000 [ 267.423822][T13537] lo speed is unknown, defaulting to 1000 [ 267.756236][T13573] syzkaller0: entered promiscuous mode [ 267.761954][T13573] syzkaller0: entered allmulticast mode [ 267.783030][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 267.831795][T13571] lo speed is unknown, defaulting to 1000 [ 267.915504][T13576] netlink: 'syz.4.1975': attribute type 16 has an invalid length. [ 267.923631][T13576] netlink: 'syz.4.1975': attribute type 17 has an invalid length. [ 267.995497][T13576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.006318][T13576] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.031916][T13576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.094331][T13590] netlink: 'syz.0.1980': attribute type 15 has an invalid length. [ 268.107763][T13584] syzkaller0: entered promiscuous mode [ 268.114318][T13584] syzkaller0: entered allmulticast mode [ 268.199818][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 268.207891][ C0] lec:lec_tx_timeout: lec0 [ 268.212843][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 268.257752][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1983'. [ 268.257940][T13584] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 268.547554][T13596] lo speed is unknown, defaulting to 1000 [ 268.604798][T13593] bond1: option arp_interval: invalid value (18446744073709551615) [ 268.614126][T13593] bond1: option arp_interval: allowed values 0 - 2147483647 [ 268.616087][T13615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1987'. [ 268.635087][T13593] bond1 (unregistering): Released all slaves [ 268.792684][T13609] bond6: left promiscuous mode [ 268.799247][T13609] syzkaller0: left promiscuous mode [ 268.820644][T13586] lo speed is unknown, defaulting to 1000 [ 269.084812][T13632] netlink: 'syz.2.1993': attribute type 10 has an invalid length. [ 269.103480][T13632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1993'. [ 269.122923][T13634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1994'. [ 269.137393][T13632] dummy0: entered promiscuous mode [ 269.151440][T13632] batman_adv: batadv0: Interface activated: dummy0 [ 269.158971][T13632] batman_adv: batadv0: Interface deactivated: dummy0 [ 269.166710][T13632] batman_adv: batadv0: Removing interface: dummy0 [ 269.174567][T13632] bridge0: port 3(dummy0) entered blocking state [ 269.181435][T13632] bridge0: port 3(dummy0) entered disabled state [ 269.188030][T13632] dummy0: entered allmulticast mode [ 269.296824][T13644] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 269.308507][T13644] tipc: Enabled bearer , priority 10 [ 269.360851][T13642] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 269.392172][T13642] bond6 (unregistering): Released all slaves [ 269.428989][T13639] bridge5: entered promiscuous mode [ 269.435806][T13639] bridge5: entered allmulticast mode [ 269.452550][T13639] team0: Port device bridge5 added [ 269.572223][T13643] lo speed is unknown, defaulting to 1000 [ 270.195384][T13665] lo speed is unknown, defaulting to 1000 [ 270.413337][T13679] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 270.443026][T13679] bridge0: port 4(macsec0) entered blocking state [ 270.469958][T13679] bridge0: port 4(macsec0) entered disabled state [ 270.500403][T13679] macsec0: entered allmulticast mode [ 270.505730][T13679] veth1_macvtap: entered allmulticast mode [ 270.523499][T13679] macsec0: entered promiscuous mode [ 270.548368][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2007'. [ 270.711895][T13693] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2010'. [ 270.923810][T13696] syzkaller0: entered promiscuous mode [ 270.929642][T13696] syzkaller0: entered allmulticast mode [ 271.209269][T13719] lo speed is unknown, defaulting to 1000 [ 271.238151][T13724] macsec2: entered allmulticast mode [ 271.260243][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'. [ 271.279491][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 271.279513][T13724] bridge0: entered allmulticast mode [ 271.300946][T13724] bridge0: port 4(macsec2) entered blocking state [ 271.306029][T13729] x_tables: duplicate underflow at hook 1 [ 271.308547][T13724] bridge0: port 4(macsec2) entered disabled state [ 271.395893][T13724] bridge0: left allmulticast mode [ 271.453708][T13738] : renamed from bond_slave_0 [ 271.804501][T13758] lo speed is unknown, defaulting to 1000 [ 271.805268][T13761] syzkaller0: entered promiscuous mode [ 271.817606][T13761] syzkaller0: entered allmulticast mode [ 272.055449][T13775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2031'. [ 272.071132][T13775] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2031'. [ 272.128989][T13778] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2033'. [ 272.131876][T13776] lo speed is unknown, defaulting to 1000 [ 272.138853][T13778] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2033'. [ 272.164447][T13778] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2033'. [ 272.252638][T13785] Cannot find set identified by id 65534 to match [ 272.273516][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2035'. [ 272.304589][T13787] Cannot find set identified by id 65534 to match [ 272.534362][T13804] netlink: 'syz.1.2039': attribute type 12 has an invalid length. [ 272.563406][T13804] netlink: 'syz.1.2039': attribute type 4 has an invalid length. [ 272.576004][T13795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.594353][T13795] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2038'. [ 272.704010][T13808] lo speed is unknown, defaulting to 1000 [ 272.895141][T13816] IPVS: set_ctl: invalid protocol: 1 172.20.20.51:20004 [ 272.911212][T13816] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20001 [ 273.091411][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 273.111465][T13823] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2046'. [ 273.128743][T13823] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2046'. [ 273.219747][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.227843][ C0] lec:lec_tx_timeout: lec0 [ 273.232368][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 273.621304][T13844] macsec2: entered allmulticast mode [ 273.642597][T13844] syz_tun: entered allmulticast mode [ 273.656895][T13844] syz_tun: left allmulticast mode [ 273.714135][T13845] tipc: Enabled bearer , priority 0 [ 273.740931][T13845] syzkaller0: entered promiscuous mode [ 273.750632][T13845] syzkaller0: entered allmulticast mode [ 273.810493][T13845] tipc: Resetting bearer [ 273.840446][T13843] tipc: Resetting bearer [ 273.900266][T13843] tipc: Disabling bearer [ 274.038822][T13868] netlink: 'syz.0.2059': attribute type 11 has an invalid length. [ 275.395108][T13928] FAULT_INJECTION: forcing a failure. [ 275.395108][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.419936][T13928] CPU: 1 UID: 0 PID: 13928 Comm: syz.0.2077 Not tainted syzkaller #0 PREEMPT(full) [ 275.419964][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.419976][T13928] Call Trace: [ 275.419983][T13928] [ 275.419992][T13928] dump_stack_lvl+0x189/0x250 [ 275.420022][T13928] ? __pfx____ratelimit+0x10/0x10 [ 275.420046][T13928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.420067][T13928] ? __pfx__printk+0x10/0x10 [ 275.420099][T13928] should_fail_ex+0x414/0x560 [ 275.420130][T13928] _copy_to_user+0x31/0xb0 [ 275.420155][T13928] simple_read_from_buffer+0xe1/0x170 [ 275.420190][T13928] proc_fail_nth_read+0x1b3/0x220 [ 275.420216][T13928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.420242][T13928] ? rw_verify_area+0x2a6/0x4d0 [ 275.420264][T13928] ? __lock_acquire+0xab9/0xd20 [ 275.420281][T13928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.420305][T13928] vfs_read+0x200/0xa30 [ 275.420328][T13928] ? fdget_pos+0x247/0x320 [ 275.420349][T13928] ? __pfx___mutex_lock+0x10/0x10 [ 275.420373][T13928] ? __pfx_vfs_read+0x10/0x10 [ 275.420395][T13928] ? __fget_files+0x2a/0x420 [ 275.420419][T13928] ? __fget_files+0x3a0/0x420 [ 275.420433][T13928] ? __fget_files+0x2a/0x420 [ 275.420459][T13928] ksys_read+0x145/0x250 [ 275.420491][T13928] ? __pfx_ksys_read+0x10/0x10 [ 275.420513][T13928] ? do_syscall_64+0xbe/0xfa0 [ 275.420536][T13928] do_syscall_64+0xfa/0xfa0 [ 275.420553][T13928] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.420571][T13928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.420589][T13928] ? clear_bhb_loop+0x60/0xb0 [ 275.420610][T13928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.420629][T13928] RIP: 0033:0x7f452458d9dc [ 275.420646][T13928] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 275.420670][T13928] RSP: 002b:00007f4525387030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.420689][T13928] RAX: ffffffffffffffda RBX: 00007f45247e5fa0 RCX: 00007f452458d9dc [ 275.420700][T13928] RDX: 000000000000000f RSI: 00007f45253870a0 RDI: 0000000000000005 [ 275.420711][T13928] RBP: 00007f4525387090 R08: 0000000000000000 R09: 0000000000000000 [ 275.420722][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.420733][T13928] R13: 00007f45247e6038 R14: 00007f45247e5fa0 R15: 00007fff8958de48 [ 275.420769][T13928] [ 276.094165][T13946] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 276.104377][T13946] netlink: 'syz.3.2080': attribute type 13 has an invalid length. [ 276.741438][T13960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.215326][T13987] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 277.357614][T13997] netlink: 'syz.0.2095': attribute type 3 has an invalid length. [ 277.410575][T13997] __nla_validate_parse: 13 callbacks suppressed [ 277.410594][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'. [ 277.439159][T14005] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2093'. [ 277.472739][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'. [ 277.575511][T14009] netlink: 'syz.1.2097': attribute type 5 has an invalid length. [ 278.060535][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'. [ 278.069116][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 278.075750][T14015] lo speed is unknown, defaulting to 1000 [ 278.380594][T14023] lo speed is unknown, defaulting to 1000 [ 278.435008][T14034] tipc: Enabled bearer , priority 0 [ 278.462865][T14034] syzkaller0: entered promiscuous mode [ 278.468520][T14034] syzkaller0: entered allmulticast mode [ 278.516283][T14034] tipc: Resetting bearer [ 278.534105][T14033] tipc: Resetting bearer [ 278.566081][T14033] tipc: Disabling bearer [ 279.060100][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 279.068249][ C0] lec:lec_tx_timeout: lec0 [ 279.073566][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.266975][T14072] lo speed is unknown, defaulting to 1000 [ 280.218896][ T30] audit: type=1800 audit(1761993410.781:6): pid=14129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2127" name="cgroup.controllers" dev="tmpfs" ino=2162 res=0 errno=0 [ 280.913638][T14152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2131'. [ 282.089498][T14157] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2132'. [ 282.117091][T14127] lo speed is unknown, defaulting to 1000 [ 282.425620][T14179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2141'. [ 282.439487][T14179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2141'. [ 282.453615][T14179] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2141'. [ 282.515390][T14182] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 282.543614][T14182] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2139'. [ 282.595525][T14188] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 282.687954][T14199] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 282.740695][T14201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2146'. [ 282.924184][T14212] netlink: 4070 bytes leftover after parsing attributes in process `syz.4.2150'. [ 283.037499][T14204] lo speed is unknown, defaulting to 1000 [ 283.087971][T14227] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2152'. [ 283.148161][T14230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2156'. [ 283.157670][T14230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2156'. [ 283.178706][T14230] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2156'. [ 283.210683][T14227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.224092][T14229] lo speed is unknown, defaulting to 1000 [ 283.577627][T14246] netlink: 'syz.3.2160': attribute type 7 has an invalid length. [ 283.899117][T14255] lo speed is unknown, defaulting to 1000 [ 284.029001][T14275] bond8 (unregistering): Released all slaves [ 284.094132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.102340][ C0] lec:lec_tx_timeout: lec0 [ 284.107215][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.201347][T14283] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 284.237294][T14283] 8021q: adding VLAN 0 to HW filter on device bond8 [ 284.320996][T14283] bond8: (slave veth5): Enslaving as an active interface with a down link [ 284.357139][T14288] tipc: Enabled bearer , priority 0 [ 284.371826][T14283] netlink: 'syz.4.2169': attribute type 10 has an invalid length. [ 284.382193][T14283] dummy0: entered promiscuous mode [ 284.405949][T14286] tipc: Disabling bearer [ 284.722731][T14313] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 284.868266][T14319] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 284.939051][T14319] 8021q: adding VLAN 0 to HW filter on device bond6 [ 285.388759][T14348] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 285.388804][T14348] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 285.478167][T14352] Bluetooth: MGMT ver 1.23 [ 286.268066][T14373] pim6reg: left allmulticast mode [ 286.329274][T14376] tipc: Enabling of bearer rejected, failed to enable media [ 286.674576][T14394] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 286.923932][T14410] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 287.050923][T14419] netlink: 'syz.0.2204': attribute type 1 has an invalid length. [ 288.501398][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 288.692994][T14420] bond7: (slave veth11): Enslaving as an active interface with a down link [ 288.714793][T14422] bond7: (slave veth13): Enslaving as an active interface with a down link [ 288.773957][T14433] netlink: 'syz.2.2208': attribute type 6 has an invalid length. [ 288.790829][T14433] __nla_validate_parse: 15 callbacks suppressed [ 288.790851][T14433] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2208'. [ 288.877173][T14437] tipc: Enabled bearer , priority 0 [ 288.885034][T14437] syzkaller0: entered promiscuous mode [ 289.119784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.127882][ C0] lec:lec_tx_timeout: lec0 [ 289.132672][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 289.175486][T14459] batadv_slave_0: entered promiscuous mode [ 289.196226][T14465] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2218'. [ 289.204456][T14459] batadv_slave_0: left promiscuous mode [ 289.369174][T14476] netlink: 'syz.3.2223': attribute type 3 has an invalid length. [ 289.623286][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2224'. [ 289.990616][ T43] tipc: Node number set to 1185999746 [ 290.214727][T14528] netlink: 'syz.1.2233': attribute type 13 has an invalid length. [ 290.229683][T14528] netlink: 'syz.1.2233': attribute type 17 has an invalid length. [ 290.235052][T14536] tipc: Enabled bearer , priority 0 [ 290.287310][T14528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.306342][T14536] syzkaller0: entered promiscuous mode [ 290.315387][T14536] syzkaller0: entered allmulticast mode [ 290.318719][T14541] sctp: [Deprecated]: syz.4.2235 (pid 14541) Use of int in max_burst socket option. [ 290.318719][T14541] Use struct sctp_assoc_value instead [ 290.327444][T14528] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2233'. [ 290.359471][T14536] tipc: Resetting bearer [ 290.399945][T14533] tipc: Resetting bearer [ 290.442027][T14533] tipc: Disabling bearer [ 290.565607][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 290.634586][T14559] netlink: 'syz.4.2240': attribute type 1 has an invalid length. [ 290.650238][T14557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2241'. [ 290.995496][T14566] bond9: (slave veth7): Enslaving as an active interface with a down link [ 291.429575][T14580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2248'. [ 291.454413][T14580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2248'. [ 291.476662][T14580] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2248'. [ 291.619905][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 291.696059][T14591] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 292.040676][T14596] lo speed is unknown, defaulting to 1000 [ 292.136735][T14602] lo speed is unknown, defaulting to 1000 [ 292.282350][T14599] can: request_module (can-proto-0) failed. [ 292.517638][T14623] lo speed is unknown, defaulting to 1000 [ 292.549632][T14625] netlink: 'syz.2.2259': attribute type 11 has an invalid length. [ 292.605587][T14628] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2260'. [ 292.936143][T14642] lo speed is unknown, defaulting to 1000 [ 293.635237][T14654] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 294.024168][T14660] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 294.139793][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 294.147916][ C0] lec:lec_tx_timeout: lec0 [ 294.180033][T14668] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 294.240414][T14668] __nla_validate_parse: 4 callbacks suppressed [ 294.240432][T14668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2271'. [ 294.571437][T14683] @: renamed from veth0_vlan [ 294.604588][T14685] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2278'. [ 294.642783][T14690] netlink: 'syz.1.2279': attribute type 1 has an invalid length. [ 294.758396][T14694] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.770934][T14694] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 294.807185][T14678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.881757][T14694] bond9: (slave bridge6): Enslaving as an active interface with a down link [ 294.895714][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 294.898626][T14702] syzkaller1: entered promiscuous mode [ 294.919981][T14702] syzkaller1: entered allmulticast mode [ 295.064225][T14708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.100141][T14708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2286'. [ 295.535740][T14721] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2291'. [ 295.618391][ T5838] block nbd0: Wrong magic (0x12e9cc0c) [ 295.649960][T14721] nbd0: detected capacity change from 0 to 127 [ 295.660383][T14725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2291'. [ 295.691822][T14725] block nbd0: reconnected socket [ 295.746296][ T5838] block nbd0: Receive control failed (result -32) [ 295.996008][T14738] bond3: option lacp_rate: invalid value (255) [ 296.005541][T14738] bond3 (unregistering): Released all slaves [ 296.092181][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 296.186604][T14744] vlan0: entered allmulticast mode [ 296.193005][T14744] bridge0: entered allmulticast mode [ 296.199182][T14744] bridge0: port 1(vlan0) entered blocking state [ 296.212375][T14744] bridge0: port 1(vlan0) entered disabled state [ 296.264350][T14746] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 296.290188][T14746] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 296.431241][T14767] lo speed is unknown, defaulting to 1000 [ 296.651469][T14775] syzkaller0: entered promiscuous mode [ 296.673948][T14775] syzkaller0: entered allmulticast mode [ 296.950191][T14788] netlink: 'syz.0.2310': attribute type 13 has an invalid length. [ 296.969177][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2310'. [ 297.301095][T14801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2314'. [ 297.320213][T14801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2314'. [ 297.388832][T14803] debugfs: 'netdev:nicvf0' already exists in 'phy9' [ 317.315134][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 323.059816][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 323.067853][ C0] lec:lec_tx_timeout: lec0 [ 349.615745][T14819] lo speed is unknown, defaulting to 1000 [ 349.870983][T14821] __nla_validate_parse: 1 callbacks suppressed [ 349.871001][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 350.079373][T14834] lo speed is unknown, defaulting to 1000 [ 350.376764][T14847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2329'. [ 350.436189][T14847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2329'. [ 350.460006][T14847] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2329'. [ 350.509596][T14819] netlink: 'syz.2.2319': attribute type 4 has an invalid length. [ 350.517572][T14819] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2319'. [ 350.720019][T14860] xt_socket: unknown flags 0x50 [ 350.832743][T14867] xt_ipcomp: unknown flags 1D [ 350.842458][T14866] syzkaller0: entered promiscuous mode [ 350.854793][T14866] syzkaller0: entered allmulticast mode [ 351.164796][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'. [ 351.180589][T14882] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2343'. [ 351.189861][T14882] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2343'. [ 351.212237][T14882] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2343'. [ 351.221957][T14883] netlink: 'syz.3.2341': attribute type 1 has an invalid length. [ 351.254498][T14879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2342'. [ 351.319652][T14889] syzkaller0: entered promiscuous mode [ 351.327004][T14889] syzkaller0: entered allmulticast mode [ 351.351542][T14883] lo speed is unknown, defaulting to 1000 [ 351.614366][T14901] dvmrp12: entered allmulticast mode [ 351.722800][T14900] dvmrp12: left allmulticast mode [ 352.460075][T14929] syzkaller0: entered promiscuous mode [ 352.476688][T14929] syzkaller0: entered allmulticast mode [ 352.926331][T14951] bond10: entered promiscuous mode [ 352.955941][T14951] bond10: entered allmulticast mode [ 352.966603][T14951] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.415965][T14951] bond10 (unregistering): Released all slaves [ 353.584342][T14960] lo speed is unknown, defaulting to 1000 [ 353.608308][T14974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 354.019543][T14998] netlink: 'syz.1.2374': attribute type 13 has an invalid length. [ 354.330221][T15000] lo speed is unknown, defaulting to 1000 [ 354.722555][T15007] lo speed is unknown, defaulting to 1000 [ 354.853590][T15037] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 354.887013][T15042] syzkaller0: entered promiscuous mode [ 354.894302][T15042] syzkaller0: entered allmulticast mode [ 355.511412][T15069] __nla_validate_parse: 7 callbacks suppressed [ 355.511429][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'. [ 355.628817][T15079] FAULT_INJECTION: forcing a failure. [ 355.628817][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.666120][T15079] CPU: 1 UID: 0 PID: 15079 Comm: syz.4.2398 Not tainted syzkaller #0 PREEMPT(full) [ 355.666148][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.666164][T15079] Call Trace: [ 355.666172][T15079] [ 355.666180][T15079] dump_stack_lvl+0x189/0x250 [ 355.666210][T15079] ? __pfx____ratelimit+0x10/0x10 [ 355.666232][T15079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.666255][T15079] ? __pfx__printk+0x10/0x10 [ 355.666274][T15079] ? __might_fault+0xb0/0x130 [ 355.666310][T15079] should_fail_ex+0x414/0x560 [ 355.666341][T15079] _copy_from_user+0x2d/0xb0 [ 355.666364][T15079] kstrtouint_from_user+0xc4/0x170 [ 355.666386][T15079] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 355.666422][T15079] proc_fail_nth_write+0x88/0x200 [ 355.666445][T15079] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 355.666472][T15079] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 355.666495][T15079] vfs_write+0x27e/0xb30 [ 355.666527][T15079] ? __pfx_vfs_write+0x10/0x10 [ 355.666552][T15079] ? __fget_files+0x2a/0x420 [ 355.666574][T15079] ? __fget_files+0x3a0/0x420 [ 355.666589][T15079] ? __fget_files+0x2a/0x420 [ 355.666614][T15079] ksys_write+0x145/0x250 [ 355.666635][T15079] ? fd_install+0x30d/0x540 [ 355.666660][T15079] ? __pfx_ksys_write+0x10/0x10 [ 355.666687][T15079] ? do_syscall_64+0xbe/0xfa0 [ 355.666713][T15079] do_syscall_64+0xfa/0xfa0 [ 355.666733][T15079] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.666754][T15079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.666771][T15079] ? clear_bhb_loop+0x60/0xb0 [ 355.666792][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.666814][T15079] RIP: 0033:0x7fc60bb8da7f [ 355.666836][T15079] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 355.666852][T15079] RSP: 002b:00007fc60c9cb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 355.666871][T15079] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc60bb8da7f [ 355.666883][T15079] RDX: 0000000000000001 RSI: 00007fc60c9cb0a0 RDI: 0000000000000003 [ 355.666894][T15079] RBP: 00007fc60c9cb090 R08: 0000000000000000 R09: 0000000000000000 [ 355.666906][T15079] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 355.666917][T15079] R13: 00007fc60bde6038 R14: 00007fc60bde5fa0 R15: 00007fffbf66f498 [ 355.666949][T15079] [ 356.245108][T15088] syzkaller0: entered promiscuous mode [ 356.250746][T15088] syzkaller0: entered allmulticast mode [ 356.480727][T15091] lo speed is unknown, defaulting to 1000 [ 356.674313][T15114] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2408'. [ 356.699871][T15114] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2408'. [ 356.708985][T15114] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2408'. [ 356.890835][T15125] lo speed is unknown, defaulting to 1000 [ 357.259333][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 357.293250][T15144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.300552][T15144] IPv6: NLM_F_CREATE should be set when creating new route [ 357.478906][T15155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2423'. [ 357.510698][T15151] syzkaller0: entered promiscuous mode [ 357.516201][T15151] syzkaller0: entered allmulticast mode [ 357.524318][T15155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2423'. [ 357.755322][T15161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2424'. [ 357.934370][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 358.153997][T15172] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 358.376573][T15176] tipc: Enabling of bearer rejected, failed to enable media [ 358.491730][T15185] veth0: entered promiscuous mode [ 358.499139][T15185] batadv_slave_0: entered promiscuous mode [ 358.521918][T15183] batadv_slave_0: left promiscuous mode [ 358.530041][T15183] veth0: left promiscuous mode [ 358.666533][T15192] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 358.841867][T15201] syzkaller0: entered promiscuous mode [ 358.847547][T15201] syzkaller0: entered allmulticast mode [ 358.950166][T15205] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 359.001600][T15207] xt_TCPMSS: Only works on TCP SYN packets [ 359.011866][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 359.390189][T15209] lo speed is unknown, defaulting to 1000 [ 359.508418][T15212] lo speed is unknown, defaulting to 1000 [ 360.195886][T15240] lo speed is unknown, defaulting to 1000 [ 360.530645][T15254] syzkaller0: entered promiscuous mode [ 360.536422][T15254] syzkaller0: entered allmulticast mode [ 360.641298][T15256] lo speed is unknown, defaulting to 1000 [ 360.704584][T15257] lo speed is unknown, defaulting to 1000 [ 360.816463][T15265] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2459'. [ 360.998782][T15270] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2461'. [ 361.162112][T15283] FAULT_INJECTION: forcing a failure. [ 361.162112][T15283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.179386][T15283] CPU: 0 UID: 0 PID: 15283 Comm: syz.2.2467 Not tainted syzkaller #0 PREEMPT(full) [ 361.179412][T15283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.179422][T15283] Call Trace: [ 361.179430][T15283] [ 361.179438][T15283] dump_stack_lvl+0x189/0x250 [ 361.179465][T15283] ? __pfx____ratelimit+0x10/0x10 [ 361.179488][T15283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.179519][T15283] ? __pfx__printk+0x10/0x10 [ 361.179537][T15283] ? __might_fault+0xb0/0x130 [ 361.179571][T15283] should_fail_ex+0x414/0x560 [ 361.179601][T15283] _copy_from_user+0x2d/0xb0 [ 361.179623][T15283] __sys_bpf+0x1e3/0x860 [ 361.179643][T15283] ? __pfx___sys_bpf+0x10/0x10 [ 361.179676][T15283] ? ksys_write+0x22a/0x250 [ 361.179699][T15283] ? __pfx_ksys_write+0x10/0x10 [ 361.179726][T15283] __x64_sys_bpf+0x7c/0x90 [ 361.179749][T15283] do_syscall_64+0xfa/0xfa0 [ 361.179769][T15283] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.179789][T15283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.179807][T15283] ? clear_bhb_loop+0x60/0xb0 [ 361.179828][T15283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.179845][T15283] RIP: 0033:0x7f472db8efc9 [ 361.179860][T15283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.179875][T15283] RSP: 002b:00007f472e9dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.179895][T15283] RAX: ffffffffffffffda RBX: 00007f472dde5fa0 RCX: 00007f472db8efc9 [ 361.179909][T15283] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 361.179920][T15283] RBP: 00007f472e9dd090 R08: 0000000000000000 R09: 0000000000000000 [ 361.179931][T15283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.179942][T15283] R13: 00007f472dde6038 R14: 00007f472dde5fa0 R15: 00007ffcad246f38 [ 361.179971][T15283] [ 361.758362][T15303] FAULT_INJECTION: forcing a failure. [ 361.758362][T15303] name failslab, interval 1, probability 0, space 0, times 0 [ 361.783496][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2474'. [ 361.796205][T15303] CPU: 1 UID: 0 PID: 15303 Comm: syz.3.2472 Not tainted syzkaller #0 PREEMPT(full) [ 361.796233][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.796244][T15303] Call Trace: [ 361.796252][T15303] [ 361.796260][T15303] dump_stack_lvl+0x189/0x250 [ 361.796290][T15303] ? __pfx____ratelimit+0x10/0x10 [ 361.796312][T15303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.796335][T15303] ? __pfx__printk+0x10/0x10 [ 361.796361][T15303] ? __pfx___might_resched+0x10/0x10 [ 361.796380][T15303] ? fs_reclaim_acquire+0x7d/0x100 [ 361.796410][T15303] should_fail_ex+0x414/0x560 [ 361.796441][T15303] should_failslab+0xa8/0x100 [ 361.796468][T15303] kmem_cache_alloc_node_noprof+0x77/0x710 [ 361.796492][T15303] ? __alloc_skb+0x112/0x2d0 [ 361.796523][T15303] __alloc_skb+0x112/0x2d0 [ 361.796557][T15303] nl80211_new_interface+0x735/0x11a0 [ 361.796598][T15303] ? __pfx_nl80211_new_interface+0x10/0x10 [ 361.796624][T15303] ? nl80211_pre_doit+0x4fb/0x930 [ 361.796650][T15303] genl_family_rcv_msg_doit+0x215/0x300 [ 361.796681][T15303] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 361.796722][T15303] ? bpf_lsm_capable+0x9/0x20 [ 361.796743][T15303] ? security_capable+0x7e/0x2e0 [ 361.796773][T15303] genl_rcv_msg+0x60e/0x790 [ 361.796803][T15303] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.796822][T15303] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 361.796839][T15303] ? __pfx_nl80211_new_interface+0x10/0x10 [ 361.796857][T15303] ? __pfx_nl80211_post_doit+0x10/0x10 [ 361.796892][T15303] netlink_rcv_skb+0x208/0x470 [ 361.796916][T15303] ? __lock_acquire+0xab9/0xd20 [ 361.796938][T15303] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.796965][T15303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.797011][T15303] ? down_read+0x1ad/0x2e0 [ 361.797039][T15303] genl_rcv+0x28/0x40 [ 361.797058][T15303] netlink_unicast+0x82f/0x9e0 [ 361.797093][T15303] ? __pfx_netlink_unicast+0x10/0x10 [ 361.797119][T15303] ? netlink_sendmsg+0x642/0xb30 [ 361.797135][T15303] ? skb_put+0x11b/0x210 [ 361.797156][T15303] netlink_sendmsg+0x805/0xb30 [ 361.797191][T15303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.797212][T15303] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.797243][T15303] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.797260][T15303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.797280][T15303] __sock_sendmsg+0x21c/0x270 [ 361.797307][T15303] ____sys_sendmsg+0x505/0x830 [ 361.797333][T15303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.797363][T15303] ? import_iovec+0x74/0xa0 [ 361.797392][T15303] ___sys_sendmsg+0x21f/0x2a0 [ 361.797418][T15303] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.797486][T15303] ? __fget_files+0x2a/0x420 [ 361.797503][T15303] ? __fget_files+0x3a0/0x420 [ 361.797531][T15303] __x64_sys_sendmsg+0x19b/0x260 [ 361.797553][T15303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.797584][T15303] ? __pfx_ksys_write+0x10/0x10 [ 361.797613][T15303] ? do_syscall_64+0xbe/0xfa0 [ 361.797639][T15303] do_syscall_64+0xfa/0xfa0 [ 361.797659][T15303] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.797685][T15303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.797703][T15303] ? clear_bhb_loop+0x60/0xb0 [ 361.797729][T15303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.797746][T15303] RIP: 0033:0x7f57fef8efc9 [ 361.797763][T15303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.797778][T15303] RSP: 002b:00007f57ffe0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.797797][T15303] RAX: ffffffffffffffda RBX: 00007f57ff1e5fa0 RCX: 00007f57fef8efc9 [ 361.797811][T15303] RDX: 0000000004000014 RSI: 0000200000000080 RDI: 0000000000000003 [ 361.797823][T15303] RBP: 00007f57ffe0a090 R08: 0000000000000000 R09: 0000000000000000 [ 361.797835][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.797849][T15303] R13: 00007f57ff1e6038 R14: 00007f57ff1e5fa0 R15: 00007ffd84e08b68 [ 361.797886][T15303] [ 362.344595][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'. [ 362.369214][T15320] netlink: zone id is out of range [ 362.407634][T15320] netlink: zone id is out of range [ 362.436386][T15320] netlink: set zone limit has 8 unknown bytes [ 362.832092][T15337] FAULT_INJECTION: forcing a failure. [ 362.832092][T15337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.866370][T15337] CPU: 0 UID: 0 PID: 15337 Comm: syz.0.2483 Not tainted syzkaller #0 PREEMPT(full) [ 362.866453][T15337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.866464][T15337] Call Trace: [ 362.866472][T15337] [ 362.866480][T15337] dump_stack_lvl+0x189/0x250 [ 362.866507][T15337] ? __pfx____ratelimit+0x10/0x10 [ 362.866530][T15337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.866552][T15337] ? __pfx__printk+0x10/0x10 [ 362.866569][T15337] ? __might_fault+0xb0/0x130 [ 362.866603][T15337] should_fail_ex+0x414/0x560 [ 362.866639][T15337] _copy_from_user+0x2d/0xb0 [ 362.866662][T15337] get_timespec64+0x8e/0x1a0 [ 362.866679][T15337] ? __pfx_get_timespec64+0x10/0x10 [ 362.866704][T15337] __x64_sys_recvmmsg+0x143/0x240 [ 362.866728][T15337] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 362.866750][T15337] ? do_syscall_64+0xbe/0xfa0 [ 362.866775][T15337] do_syscall_64+0xfa/0xfa0 [ 362.866794][T15337] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.866816][T15337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.866831][T15337] ? clear_bhb_loop+0x60/0xb0 [ 362.866851][T15337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.866866][T15337] RIP: 0033:0x7f452458efc9 [ 362.866883][T15337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.866898][T15337] RSP: 002b:00007f4525387038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 362.866916][T15337] RAX: ffffffffffffffda RBX: 00007f45247e5fa0 RCX: 00007f452458efc9 [ 362.866929][T15337] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 362.866944][T15337] RBP: 00007f4525387090 R08: 00002000000001c0 R09: 0000000000000000 [ 362.866971][T15337] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 362.866981][T15337] R13: 00007f45247e6038 R14: 00007f45247e5fa0 R15: 00007fff8958de48 [ 362.867006][T15337] [ 363.202947][T15348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2486'. [ 363.293158][T15350] x_tables: duplicate underflow at hook 1 [ 363.321856][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'. [ 363.368092][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2488'. [ 363.855411][T15361] syzkaller0: entered promiscuous mode [ 363.871808][T15361] syzkaller0: entered allmulticast mode [ 363.994951][T15367] syzkaller0: entered promiscuous mode [ 364.000729][T15367] syzkaller0: entered allmulticast mode [ 364.105289][T15369] syzkaller0: entered promiscuous mode [ 364.138068][T15369] syzkaller0: entered allmulticast mode [ 364.164785][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 364.231948][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 364.434867][T15381] FAULT_INJECTION: forcing a failure. [ 364.434867][T15381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.472361][T15384] tipc: Enabled bearer , priority 0 [ 364.491338][T15381] CPU: 1 UID: 0 PID: 15381 Comm: syz.3.2499 Not tainted syzkaller #0 PREEMPT(full) [ 364.491360][T15381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.491371][T15381] Call Trace: [ 364.491377][T15381] [ 364.491385][T15381] dump_stack_lvl+0x189/0x250 [ 364.491412][T15381] ? __pfx____ratelimit+0x10/0x10 [ 364.491433][T15381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.491454][T15381] ? __pfx__printk+0x10/0x10 [ 364.491471][T15381] ? __might_fault+0xb0/0x130 [ 364.491502][T15381] should_fail_ex+0x414/0x560 [ 364.491531][T15381] _copy_from_user+0x2d/0xb0 [ 364.491553][T15381] ___sys_recvmsg+0x12e/0x510 [ 364.491578][T15381] ? __pfx____sys_recvmsg+0x10/0x10 [ 364.491619][T15381] ? __fget_files+0x3a0/0x420 [ 364.491646][T15381] do_recvmmsg+0x307/0x770 [ 364.491673][T15381] ? __pfx_do_recvmmsg+0x10/0x10 [ 364.491704][T15381] ? _copy_from_user+0x94/0xb0 [ 364.491741][T15381] __x64_sys_recvmmsg+0x1af/0x240 [ 364.491764][T15381] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 364.491788][T15381] ? do_syscall_64+0xbe/0xfa0 [ 364.491813][T15381] do_syscall_64+0xfa/0xfa0 [ 364.491833][T15381] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.491854][T15381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.491869][T15381] ? clear_bhb_loop+0x60/0xb0 [ 364.491888][T15381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.491903][T15381] RIP: 0033:0x7f57fef8efc9 [ 364.491918][T15381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.491934][T15381] RSP: 002b:00007f57ffe0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 364.491961][T15381] RAX: ffffffffffffffda RBX: 00007f57ff1e5fa0 RCX: 00007f57fef8efc9 [ 364.491974][T15381] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 364.491986][T15381] RBP: 00007f57ffe0a090 R08: 00002000000001c0 R09: 0000000000000000 [ 364.491996][T15381] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 364.492007][T15381] R13: 00007f57ff1e6038 R14: 00007f57ff1e5fa0 R15: 00007ffd84e08b68 [ 364.492035][T15381] [ 364.493678][T15384] syzkaller0: entered promiscuous mode [ 364.713101][T15384] syzkaller0: entered allmulticast mode [ 364.722735][T15393] tipc: Enabled bearer , priority 0 [ 364.727000][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2505'. [ 364.753753][T15390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.797509][T15401] bond10: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 364.811663][T15401] bond10 (unregistering): Released all slaves [ 364.852058][T15384] tipc: Resetting bearer [ 364.859236][T15393] tipc: Resetting bearer [ 364.888498][T15383] tipc: Resetting bearer [ 364.913539][T15383] tipc: Disabling bearer [ 364.930873][T15385] tipc: Disabling bearer [ 364.946710][T15406] syzkaller0: entered promiscuous mode [ 364.953008][T15406] syzkaller0: entered allmulticast mode [ 365.183810][T15416] veth0: entered promiscuous mode [ 365.238586][T15416] veth0 (unregistering): left promiscuous mode [ 365.353968][T15413] lo speed is unknown, defaulting to 1000 [ 365.428271][T15416] lo speed is unknown, defaulting to 1000 [ 365.645151][T15420] lo speed is unknown, defaulting to 1000 [ 365.898238][T15435] netlink: 'syz.3.2512': attribute type 13 has an invalid length. [ 365.966037][T15435] netlink: 'syz.3.2512': attribute type 17 has an invalid length. [ 366.133086][T15435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.141856][T15435] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.339328][T15435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.442618][T15440] __nla_validate_parse: 4 callbacks suppressed [ 366.442636][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2514'. [ 366.461781][T15450] tipc: Enabled bearer , priority 0 [ 366.487453][T15448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2515'. [ 366.551017][T15440] macvtap1: entered promiscuous mode [ 366.556411][T15440] syz_tun: entered promiscuous mode [ 366.565195][T15450] tipc: Resetting bearer [ 366.582968][T15443] lo speed is unknown, defaulting to 1000 [ 366.619587][T15445] tipc: Disabling bearer [ 367.079376][T15460] lo speed is unknown, defaulting to 1000 [ 367.496337][T15476] FAULT_INJECTION: forcing a failure. [ 367.496337][T15476] name failslab, interval 1, probability 0, space 0, times 0 [ 367.523846][T15476] CPU: 0 UID: 0 PID: 15476 Comm: syz.4.2523 Not tainted syzkaller #0 PREEMPT(full) [ 367.523871][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.523880][T15476] Call Trace: [ 367.523887][T15476] [ 367.523894][T15476] dump_stack_lvl+0x189/0x250 [ 367.523926][T15476] ? __pfx____ratelimit+0x10/0x10 [ 367.523950][T15476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.523972][T15476] ? __pfx__printk+0x10/0x10 [ 367.523997][T15476] ? __pfx___might_resched+0x10/0x10 [ 367.524016][T15476] ? fs_reclaim_acquire+0x7d/0x100 [ 367.524046][T15476] should_fail_ex+0x414/0x560 [ 367.524074][T15476] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 367.524097][T15476] should_failslab+0xa8/0x100 [ 367.524113][T15476] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 367.524134][T15476] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 367.524155][T15476] ? alloc_inode+0x6a/0x1b0 [ 367.524178][T15476] ? __pfx_simple_start_creating+0x10/0x10 [ 367.524198][T15476] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 367.524220][T15476] alloc_inode+0x6a/0x1b0 [ 367.524244][T15476] new_inode+0x22/0x170 [ 367.524266][T15476] __debugfs_create_file+0x14d/0x4f0 [ 367.524294][T15476] debugfs_create_file_full+0x3f/0x60 [ 367.524321][T15476] ref_tracker_dir_debugfs+0x14e/0x270 [ 367.524339][T15476] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 367.524383][T15476] ? trace_kmalloc+0x1f/0xd0 [ 367.524402][T15476] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 367.524432][T15476] ? __raw_spin_lock_init+0x45/0x100 [ 367.524462][T15476] alloc_netdev_mqs+0x272/0x11b0 [ 367.524482][T15476] ? __pfx_ieee80211_if_setup+0x10/0x10 [ 367.524511][T15476] ieee80211_if_add+0x46c/0x1390 [ 367.524538][T15476] ? rcu_is_watching+0x15/0xb0 [ 367.524561][T15476] ieee80211_add_iface+0xb5/0x5c0 [ 367.524588][T15476] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 367.524620][T15476] nl80211_new_interface+0x893/0x11a0 [ 367.524655][T15476] ? __pfx_nl80211_new_interface+0x10/0x10 [ 367.524687][T15476] ? nl80211_pre_doit+0x4fb/0x930 [ 367.524712][T15476] genl_family_rcv_msg_doit+0x215/0x300 [ 367.524743][T15476] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 367.524780][T15476] ? bpf_lsm_capable+0x9/0x20 [ 367.524798][T15476] ? security_capable+0x7e/0x2e0 [ 367.524826][T15476] genl_rcv_msg+0x60e/0x790 [ 367.524853][T15476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.524873][T15476] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 367.524889][T15476] ? __pfx_nl80211_new_interface+0x10/0x10 [ 367.524906][T15476] ? __pfx_nl80211_post_doit+0x10/0x10 [ 367.524940][T15476] netlink_rcv_skb+0x208/0x470 [ 367.524964][T15476] ? __lock_acquire+0xab9/0xd20 [ 367.524982][T15476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 367.525005][T15476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 367.525051][T15476] ? down_read+0x1ad/0x2e0 [ 367.525078][T15476] genl_rcv+0x28/0x40 [ 367.525097][T15476] netlink_unicast+0x82f/0x9e0 [ 367.525131][T15476] ? __pfx_netlink_unicast+0x10/0x10 [ 367.525156][T15476] ? netlink_sendmsg+0x642/0xb30 [ 367.525172][T15476] ? skb_put+0x11b/0x210 [ 367.525193][T15476] netlink_sendmsg+0x805/0xb30 [ 367.525221][T15476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.525243][T15476] ? aa_sock_msg_perm+0xf1/0x1d0 [ 367.525270][T15476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.525287][T15476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.525306][T15476] __sock_sendmsg+0x21c/0x270 [ 367.525332][T15476] ____sys_sendmsg+0x505/0x830 [ 367.525358][T15476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.525388][T15476] ? import_iovec+0x74/0xa0 [ 367.525415][T15476] ___sys_sendmsg+0x21f/0x2a0 [ 367.525436][T15476] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.525491][T15476] ? __fget_files+0x2a/0x420 [ 367.525506][T15476] ? __fget_files+0x3a0/0x420 [ 367.525531][T15476] __x64_sys_sendmsg+0x19b/0x260 [ 367.525552][T15476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.525579][T15476] ? __pfx_ksys_write+0x10/0x10 [ 367.525607][T15476] ? do_syscall_64+0xbe/0xfa0 [ 367.525634][T15476] do_syscall_64+0xfa/0xfa0 [ 367.525655][T15476] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.525683][T15476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.525702][T15476] ? clear_bhb_loop+0x60/0xb0 [ 367.525725][T15476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.525742][T15476] RIP: 0033:0x7fc60bb8efc9 [ 367.525759][T15476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.525775][T15476] RSP: 002b:00007fc60c9cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.525793][T15476] RAX: ffffffffffffffda RBX: 00007fc60bde5fa0 RCX: 00007fc60bb8efc9 [ 367.525805][T15476] RDX: 0000000004000014 RSI: 0000200000000080 RDI: 0000000000000003 [ 367.525815][T15476] RBP: 00007fc60c9cb090 R08: 0000000000000000 R09: 0000000000000000 [ 367.525825][T15476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.525835][T15476] R13: 00007fc60bde6038 R14: 00007fc60bde5fa0 R15: 00007fffbf66f498 [ 367.525865][T15476] [ 367.527195][T15476] debugfs: out of free dentries, can not create file 'netdev@ffff888032178618' [ 368.324259][T15504] tipc: Enabling of bearer rejected, failed to enable media [ 368.333819][T15504] syzkaller0: entered promiscuous mode [ 368.339338][T15504] syzkaller0: entered allmulticast mode [ 368.437894][T15506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2535'. [ 368.505197][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'. [ 368.678082][T15514] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 368.720886][T15514] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 368.805882][T15519] macvlan0: entered promiscuous mode [ 368.819974][T15519] macvlan0: entered allmulticast mode [ 368.830497][T15519] bond8: (slave macvlan0): Error -98 calling set_mac_address [ 369.073957][T15532] veth0: entered promiscuous mode [ 369.079436][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 369.088601][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 369.122493][T15534] veth0 (unregistering): left promiscuous mode [ 369.197473][T15542] FAULT_INJECTION: forcing a failure. [ 369.197473][T15542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.218154][T15542] CPU: 1 UID: 0 PID: 15542 Comm: syz.1.2547 Not tainted syzkaller #0 PREEMPT(full) [ 369.218179][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.218191][T15542] Call Trace: [ 369.218198][T15542] [ 369.218206][T15542] dump_stack_lvl+0x189/0x250 [ 369.218233][T15542] ? __pfx____ratelimit+0x10/0x10 [ 369.218256][T15542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.218278][T15542] ? __pfx__printk+0x10/0x10 [ 369.218299][T15542] ? __asan_memcpy+0x40/0x70 [ 369.218328][T15542] should_fail_ex+0x414/0x560 [ 369.218359][T15542] _copy_to_user+0x31/0xb0 [ 369.218383][T15542] bpf_verifier_vlog+0x48c/0x900 [ 369.218413][T15542] __btf_verifier_log+0xd4/0x120 [ 369.218441][T15542] ? __pfx___btf_verifier_log+0x10/0x10 [ 369.218460][T15542] ? __might_fault+0xb0/0x130 [ 369.218489][T15542] ? btf_parse_hdr+0x1e2/0x6d0 [ 369.218518][T15542] btf_parse_hdr+0x2ad/0x6d0 [ 369.218547][T15542] btf_new_fd+0x372/0xc90 [ 369.218563][T15542] ? apparmor_capable+0x137/0x1b0 [ 369.218598][T15542] ? __pfx_btf_new_fd+0x10/0x10 [ 369.218617][T15542] ? bpf_token_put+0x143/0x160 [ 369.218637][T15542] ? bpf_btf_load+0x126/0x190 [ 369.218658][T15542] __sys_bpf+0x3ed/0x860 [ 369.218677][T15542] ? __pfx___sys_bpf+0x10/0x10 [ 369.218710][T15542] ? ksys_write+0x22a/0x250 [ 369.218736][T15542] ? __pfx_ksys_write+0x10/0x10 [ 369.218765][T15542] __x64_sys_bpf+0x7c/0x90 [ 369.218790][T15542] do_syscall_64+0xfa/0xfa0 [ 369.218810][T15542] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.218833][T15542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.218850][T15542] ? clear_bhb_loop+0x60/0xb0 [ 369.218872][T15542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.218889][T15542] RIP: 0033:0x7fbd5c38efc9 [ 369.218906][T15542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.218921][T15542] RSP: 002b:00007fbd5d212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.218941][T15542] RAX: ffffffffffffffda RBX: 00007fbd5c5e5fa0 RCX: 00007fbd5c38efc9 [ 369.218955][T15542] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 369.218967][T15542] RBP: 00007fbd5d212090 R08: 0000000000000000 R09: 0000000000000000 [ 369.218978][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.218989][T15542] R13: 00007fbd5c5e6038 R14: 00007fbd5c5e5fa0 R15: 00007ffdea07fe68 [ 369.219020][T15542] [ 369.533323][T15544] tipc: Enabling of bearer rejected, failed to enable media [ 369.550719][T15544] syzkaller0: entered promiscuous mode [ 369.560026][T15544] syzkaller0: entered allmulticast mode [ 369.696188][T15545] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2546'. [ 369.710351][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 369.719470][T15550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2549'. [ 369.751312][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 370.007806][T15565] syzkaller1: left promiscuous mode [ 370.013522][T15565] syzkaller1: left allmulticast mode [ 370.361630][T15585] FAULT_INJECTION: forcing a failure. [ 370.361630][T15585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.389846][T15585] CPU: 0 UID: 0 PID: 15585 Comm: syz.0.2559 Not tainted syzkaller #0 PREEMPT(full) [ 370.389871][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.389880][T15585] Call Trace: [ 370.389887][T15585] [ 370.389894][T15585] dump_stack_lvl+0x189/0x250 [ 370.389921][T15585] ? __pfx____ratelimit+0x10/0x10 [ 370.389943][T15585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.389966][T15585] ? __pfx__printk+0x10/0x10 [ 370.389985][T15585] ? __asan_memcpy+0x40/0x70 [ 370.390014][T15585] should_fail_ex+0x414/0x560 [ 370.390042][T15585] _copy_to_user+0x31/0xb0 [ 370.390064][T15585] bpf_verifier_vlog+0x48c/0x900 [ 370.390093][T15585] __btf_verifier_log+0xd4/0x120 [ 370.390119][T15585] ? __pfx___btf_verifier_log+0x10/0x10 [ 370.390134][T15585] ? __might_fault+0xb0/0x130 [ 370.390156][T15585] ? btf_parse_hdr+0x1e2/0x6d0 [ 370.390179][T15585] btf_parse_hdr+0x2d8/0x6d0 [ 370.390203][T15585] btf_new_fd+0x372/0xc90 [ 370.390216][T15585] ? apparmor_capable+0x137/0x1b0 [ 370.390237][T15585] ? __pfx_btf_new_fd+0x10/0x10 [ 370.390251][T15585] ? bpf_token_put+0x143/0x160 [ 370.390267][T15585] ? bpf_btf_load+0x126/0x190 [ 370.390282][T15585] __sys_bpf+0x3ed/0x860 [ 370.390296][T15585] ? __pfx___sys_bpf+0x10/0x10 [ 370.390321][T15585] ? ksys_write+0x22a/0x250 [ 370.390342][T15585] ? __pfx_ksys_write+0x10/0x10 [ 370.390364][T15585] __x64_sys_bpf+0x7c/0x90 [ 370.390384][T15585] do_syscall_64+0xfa/0xfa0 [ 370.390412][T15585] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.390437][T15585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.390450][T15585] ? clear_bhb_loop+0x60/0xb0 [ 370.390466][T15585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.390479][T15585] RIP: 0033:0x7f452458efc9 [ 370.390492][T15585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.390504][T15585] RSP: 002b:00007f4525387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.390520][T15585] RAX: ffffffffffffffda RBX: 00007f45247e5fa0 RCX: 00007f452458efc9 [ 370.390530][T15585] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 370.390540][T15585] RBP: 00007f4525387090 R08: 0000000000000000 R09: 0000000000000000 [ 370.390548][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.390556][T15585] R13: 00007f45247e6038 R14: 00007f45247e5fa0 R15: 00007fff8958de48 [ 370.390580][T15585] [ 370.402359][T15581] lo speed is unknown, defaulting to 1000 [ 370.655480][T15592] netlink: 'syz.3.2561': attribute type 1 has an invalid length. [ 370.691770][T15592] bond3: entered promiscuous mode [ 370.696961][T15592] bond3: entered allmulticast mode [ 370.792542][T15595] lo speed is unknown, defaulting to 1000 [ 370.904551][T15569] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 371.139242][ T9461] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xc9 [ 371.142238][T15604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.345327][T15625] FAULT_INJECTION: forcing a failure. [ 371.345327][T15625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.363117][T15625] CPU: 1 UID: 0 PID: 15625 Comm: syz.4.2570 Not tainted syzkaller #0 PREEMPT(full) [ 371.363142][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.363153][T15625] Call Trace: [ 371.363172][T15625] [ 371.363180][T15625] dump_stack_lvl+0x189/0x250 [ 371.363208][T15625] ? __pfx____ratelimit+0x10/0x10 [ 371.363230][T15625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.363253][T15625] ? __pfx__printk+0x10/0x10 [ 371.363273][T15625] ? __asan_memcpy+0x40/0x70 [ 371.363303][T15625] should_fail_ex+0x414/0x560 [ 371.363332][T15625] _copy_to_user+0x31/0xb0 [ 371.363356][T15625] bpf_verifier_vlog+0x48c/0x900 [ 371.363386][T15625] __btf_verifier_log+0xd4/0x120 [ 371.363413][T15625] ? __pfx___btf_verifier_log+0x10/0x10 [ 371.363433][T15625] ? __might_fault+0xb0/0x130 [ 371.363462][T15625] ? btf_parse_hdr+0x1e2/0x6d0 [ 371.363490][T15625] btf_parse_hdr+0x302/0x6d0 [ 371.363521][T15625] btf_new_fd+0x372/0xc90 [ 371.363537][T15625] ? apparmor_capable+0x137/0x1b0 [ 371.363565][T15625] ? __pfx_btf_new_fd+0x10/0x10 [ 371.363584][T15625] ? bpf_token_put+0x143/0x160 [ 371.363604][T15625] ? bpf_btf_load+0x126/0x190 [ 371.363630][T15625] __sys_bpf+0x3ed/0x860 [ 371.363650][T15625] ? __pfx___sys_bpf+0x10/0x10 [ 371.363683][T15625] ? ksys_write+0x22a/0x250 [ 371.363709][T15625] ? __pfx_ksys_write+0x10/0x10 [ 371.363738][T15625] __x64_sys_bpf+0x7c/0x90 [ 371.363763][T15625] do_syscall_64+0xfa/0xfa0 [ 371.363785][T15625] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.363807][T15625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.363824][T15625] ? clear_bhb_loop+0x60/0xb0 [ 371.363845][T15625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.363863][T15625] RIP: 0033:0x7fc60bb8efc9 [ 371.363878][T15625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.363894][T15625] RSP: 002b:00007fc60c9cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.363918][T15625] RAX: ffffffffffffffda RBX: 00007fc60bde5fa0 RCX: 00007fc60bb8efc9 [ 371.363932][T15625] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 371.363944][T15625] RBP: 00007fc60c9cb090 R08: 0000000000000000 R09: 0000000000000000 [ 371.363955][T15625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.363966][T15625] R13: 00007fc60bde6038 R14: 00007fc60bde5fa0 R15: 00007fffbf66f498 [ 371.363997][T15625] [ 371.723770][T15639] __nla_validate_parse: 4 callbacks suppressed [ 371.723790][T15639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2573'. [ 371.801909][T15595] netlink: 'syz.0.2562': attribute type 4 has an invalid length. [ 371.844257][T15595] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2562'. [ 371.881157][T15644] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 372.584681][T15668] tipc: Enabling of bearer rejected, failed to enable media [ 372.587214][T15680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.713228][T15668] syzkaller0: entered promiscuous mode [ 372.733048][T15668] syzkaller0: entered allmulticast mode [ 373.355110][T15700] lo speed is unknown, defaulting to 1000 [ 373.393229][T15717] Cannot find del_set index 3 as target [ 373.605670][T15727] bridge0: port 4(erspan0) entered blocking state [ 373.612680][T15727] bridge0: port 4(erspan0) entered disabled state [ 373.625974][T15727] erspan0: entered allmulticast mode [ 373.644939][T15727] erspan0: entered promiscuous mode [ 373.721267][T15727] erspan0: left allmulticast mode [ 373.732927][T15727] erspan0: left promiscuous mode [ 373.738894][T15727] bridge0: port 4(erspan0) entered disabled state [ 373.986176][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2598'. [ 374.307252][T15758] block nbd1: Unsupported socket: should be TCP or UNIX. [ 374.322783][T15758] block nbd1: shutting down sockets [ 374.440291][T15775] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 374.482300][T15762] lo speed is unknown, defaulting to 1000 [ 374.512993][T15775] 9: entered promiscuous mode [ 374.789231][T15792] tipc: Enabled bearer , priority 0 [ 374.818276][T15792] syzkaller0: entered promiscuous mode [ 374.824938][T15792] syzkaller0: entered allmulticast mode [ 374.865412][T15792] tipc: Resetting bearer [ 374.873327][T15796] tipc: Enabled bearer , priority 0 [ 374.931682][T15796] syzkaller0: entered promiscuous mode [ 374.937511][T15796] syzkaller0: entered allmulticast mode [ 374.944749][T15796] tipc: Resetting bearer [ 374.951885][T15789] tipc: Resetting bearer [ 374.972701][T15789] tipc: Disabling bearer [ 374.986676][T15790] tipc: Resetting bearer [ 375.134122][T15805] FAULT_INJECTION: forcing a failure. [ 375.134122][T15805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.155435][T15805] CPU: 1 UID: 0 PID: 15805 Comm: syz.4.2615 Not tainted syzkaller #0 PREEMPT(full) [ 375.155460][T15805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.155470][T15805] Call Trace: [ 375.155476][T15805] [ 375.155484][T15805] dump_stack_lvl+0x189/0x250 [ 375.155511][T15805] ? __pfx____ratelimit+0x10/0x10 [ 375.155530][T15805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.155551][T15805] ? __pfx__printk+0x10/0x10 [ 375.155577][T15805] ? __asan_memcpy+0x40/0x70 [ 375.155605][T15805] should_fail_ex+0x414/0x560 [ 375.155632][T15805] _copy_to_user+0x31/0xb0 [ 375.155654][T15805] bpf_verifier_vlog+0x48c/0x900 [ 375.155681][T15805] __btf_verifier_log+0xd4/0x120 [ 375.155704][T15805] ? __pfx___btf_verifier_log+0x10/0x10 [ 375.155720][T15805] ? __might_fault+0xb0/0x130 [ 375.155746][T15805] ? btf_parse_hdr+0x1e2/0x6d0 [ 375.155772][T15805] btf_parse_hdr+0x380/0x6d0 [ 375.155816][T15805] btf_new_fd+0x372/0xc90 [ 375.155831][T15805] ? apparmor_capable+0x137/0x1b0 [ 375.155856][T15805] ? __pfx_btf_new_fd+0x10/0x10 [ 375.155872][T15805] ? bpf_token_put+0x143/0x160 [ 375.155889][T15805] ? bpf_btf_load+0x126/0x190 [ 375.155905][T15805] __sys_bpf+0x3ed/0x860 [ 375.155922][T15805] ? __pfx___sys_bpf+0x10/0x10 [ 375.155951][T15805] ? ksys_write+0x22a/0x250 [ 375.155986][T15805] ? __pfx_ksys_write+0x10/0x10 [ 375.156009][T15805] __x64_sys_bpf+0x7c/0x90 [ 375.156029][T15805] do_syscall_64+0xfa/0xfa0 [ 375.156048][T15805] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.156069][T15805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.156085][T15805] ? clear_bhb_loop+0x60/0xb0 [ 375.156104][T15805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.156120][T15805] RIP: 0033:0x7fc60bb8efc9 [ 375.156136][T15805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.156150][T15805] RSP: 002b:00007fc60c9cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.156179][T15805] RAX: ffffffffffffffda RBX: 00007fc60bde5fa0 RCX: 00007fc60bb8efc9 [ 375.156192][T15805] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 375.156201][T15805] RBP: 00007fc60c9cb090 R08: 0000000000000000 R09: 0000000000000000 [ 375.156211][T15805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.156261][T15805] R13: 00007fc60bde6038 R14: 00007fc60bde5fa0 R15: 00007fffbf66f498 [ 375.156298][T15805] [ 375.163853][T15807] xt_l2tp: v2 doesn't support IP mode [ 375.247595][T15810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.970115][ T43] tipc: Node number set to 308358206 [ 377.071071][T15790] tipc: Disabling bearer [ 377.127291][T15829] sctp: [Deprecated]: syz.1.2622 (pid 15829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.127291][T15829] Use struct sctp_sack_info instead [ 377.141762][T15827] lo speed is unknown, defaulting to 1000 [ 377.216783][T15834] netlink: 'syz.4.2624': attribute type 1 has an invalid length. [ 377.276492][T15834] 8021q: adding VLAN 0 to HW filter on device bond11 [ 377.313482][T15836] dvmrp8: entered allmulticast mode [ 377.352373][T15839] bond10 (unregistering): Released all slaves [ 377.619905][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 377.646158][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'. [ 377.659905][T15855] tipc: Enabling of bearer rejected, failed to enable media [ 377.692408][T15857] tipc: Enabling of bearer rejected, failed to enable media [ 378.118299][T15864] netlink: 'syz.4.2630': attribute type 10 has an invalid length. [ 378.159427][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2634'. [ 378.171839][T15864] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 378.405099][T15894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2636'. [ 378.746766][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 378.845691][T15906] lo speed is unknown, defaulting to 1000 [ 378.883887][T15929] tipc: Enabling of bearer rejected, already enabled [ 379.133127][T15942] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 379.485800][T15961] IPVS: stopping backup sync thread 11924 ... [ 379.588519][T15965] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2659'. [ 379.611720][T15958] syzkaller0: entered promiscuous mode [ 379.626529][T15958] syzkaller0: entered allmulticast mode [ 379.695045][T15965] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 379.712868][T15965] bond10 (unregistering): Released all slaves [ 379.813093][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 379.890168][T15977] tipc: Enabling of bearer rejected, already enabled [ 379.899604][T15970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2660'. [ 379.937164][T15976] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.428626][T15974] lo speed is unknown, defaulting to 1000 [ 381.571116][T15989] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2664'. [ 381.724156][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2668'. [ 381.760919][T15998] syzkaller0: entered promiscuous mode [ 381.766472][T15998] syzkaller0: entered allmulticast mode [ 381.857058][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 381.916308][T16013] netlink: 'syz.0.2671': attribute type 2 has an invalid length. [ 381.944607][T16013] netlink: 'syz.0.2671': attribute type 1 has an invalid length. [ 382.177767][T16029] tipc: Enabled bearer , priority 0 [ 382.185950][T16029] syzkaller0: entered promiscuous mode [ 382.192855][T16029] syzkaller0: entered allmulticast mode [ 382.205342][T16029] tipc: Resetting bearer [ 382.213123][T16024] tipc: Resetting bearer [ 382.230303][T16024] tipc: Disabling bearer [ 382.277928][T16035] macvtap2: entered promiscuous mode [ 382.284554][T16035] macvtap2: entered allmulticast mode [ 382.290087][T16035] dummy0: entered allmulticast mode [ 382.923858][T16069] __nla_validate_parse: 3 callbacks suppressed [ 382.923877][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2685'. [ 383.532387][ T9460] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 383.542271][T16095] lo speed is unknown, defaulting to 1000 [ 383.548355][ T9460] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 383.593339][T16088] lo speed is unknown, defaulting to 1000 [ 383.593360][ T9460] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 383.706541][ T9460] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 384.019699][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 384.027913][ C0] lec:lec_tx_timeout: lec0 [ 384.186307][T16121] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 384.345794][T16126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2701'. [ 384.806396][T16151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.862990][T16154] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 385.436814][T16195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2717'. [ 385.706762][ T9461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.715288][ T9461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.812877][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 385.822226][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 385.832402][T16220] netlink: 58 bytes leftover after parsing attributes in process `syz.3.2724'. [ 386.347730][T16241] netlink: 'syz.0.2729': attribute type 14 has an invalid length. [ 387.420107][T16227] syzkaller1: entered allmulticast mode [ 387.525817][T16243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2730'. [ 387.670144][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'. [ 387.717554][T16256] netlink: 'syz.1.2734': attribute type 7 has an invalid length. [ 388.043746][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2740'. [ 388.389539][T16291] tipc: Enabled bearer , priority 0 [ 388.417728][T16292] syzkaller0: entered promiscuous mode [ 388.428288][T16292] syzkaller0: entered allmulticast mode [ 388.458099][T16292] tipc: Resetting bearer [ 388.499153][T16292] tipc: Disabling bearer [ 388.587349][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 388.602425][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2746'. [ 389.032391][T16327] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 389.721463][T16339] x9: renamed from bridge_slave_0 [ 389.730139][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 389.753071][T16341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2757'. [ 389.927652][T16359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2761'. [ 389.970767][T16357] lo speed is unknown, defaulting to 1000 [ 390.318162][T16370] lo speed is unknown, defaulting to 1000 [ 390.485563][T16378] tipc: Enabled bearer , priority 0 [ 390.503837][T16378] syzkaller0: entered promiscuous mode [ 390.509340][T16378] syzkaller0: entered allmulticast mode [ 390.528544][T16378] tipc: Resetting bearer [ 390.536912][T16377] tipc: Resetting bearer [ 390.560606][T16377] tipc: Disabling bearer [ 390.947399][T16402] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2774'. [ 390.993984][T16396] bond10: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 391.004100][T16396] bond10: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 391.015389][T16398] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 391.075530][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 391.113253][T16412] team_slave_1 (unregistering): left promiscuous mode [ 391.147022][T16412] team_slave_1 (unregistering): left allmulticast mode [ 391.180883][T16412] team0: Port device team_slave_1 removed [ 391.261184][T16420] tipc: Enabled bearer , priority 0 [ 391.273869][T16420] syzkaller0: entered promiscuous mode [ 391.299881][T16420] syzkaller0: entered allmulticast mode [ 391.331469][T16420] tipc: Resetting bearer [ 391.388898][T16416] tipc: Resetting bearer [ 391.413303][T16418] delete_channel: no stack [ 391.434654][T16416] tipc: Disabling bearer [ 391.618004][T16437] bond10 (unregistering): Released all slaves [ 391.716041][T16443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2785'. [ 391.772233][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2785'. [ 391.824159][T16450] tipc: Enabling of bearer rejected, failed to enable media [ 392.297833][T16480] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 392.319945][T16480] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 392.370711][T16483] C: renamed from team_slave_0 [ 392.391456][T16483] netlink: 'syz.4.2798': attribute type 3 has an invalid length. [ 392.399228][T16483] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 392.501263][T16483] netlink: 'syz.4.2798': attribute type 23 has an invalid length. [ 392.833329][T16499] syzkaller1: entered promiscuous mode [ 392.848028][T16499] syzkaller1: entered allmulticast mode [ 392.875362][T16516] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 393.590892][T16547] __nla_validate_parse: 3 callbacks suppressed [ 393.590908][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2812'. [ 393.616955][T16548] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 393.688858][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 394.017719][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2819'. [ 394.162542][T16579] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2822'. [ 394.245361][T16583] netlink: 'syz.4.2824': attribute type 10 has an invalid length. [ 394.257958][T16583] veth0_vlan: left promiscuous mode [ 394.299051][T16583] veth0_vlan: entered promiscuous mode [ 394.307213][T16583] team0: Device veth0_vlan failed to register rx_handler [ 394.330069][T16585] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2824'. [ 394.421775][T16585] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2824'. [ 394.591444][T16597] x_tables: duplicate entry at hook 3 [ 394.637077][T16597] bond10: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 394.649357][T16597] bond10 (unregistering): Released all slaves [ 394.710482][T16598] vlan0: entered promiscuous mode [ 394.715559][T16598] bond0: entered promiscuous mode [ 394.832049][T16602] lo speed is unknown, defaulting to 1000 [ 394.839168][T16604] veth0: entered promiscuous mode [ 395.010659][T16604] veth0: left promiscuous mode [ 395.635860][T16647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2842'. [ 395.645296][T16649] netlink: 'syz.0.2841': attribute type 15 has an invalid length. [ 395.655481][T16647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2842'. [ 395.665973][T16647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2842'. [ 395.678538][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 396.308881][T16678] veth1: entered promiscuous mode [ 396.451429][T16694] vlan2: entered allmulticast mode [ 396.456849][T16694] bridge_slave_0: entered allmulticast mode [ 396.854595][T16708] dummy0: entered promiscuous mode [ 396.879974][T16708] macvtap0: entered promiscuous mode [ 396.908250][T16708] macvtap0: entered allmulticast mode [ 396.924546][T16708] dummy0: entered allmulticast mode [ 396.952866][T16716] tipc: Enabled bearer , priority 0 [ 396.960736][T16716] syzkaller0: entered promiscuous mode [ 396.966313][T16716] syzkaller0: entered allmulticast mode [ 396.976109][T16716] tipc: Resetting bearer [ 396.998922][T16699] lo speed is unknown, defaulting to 1000 [ 397.097352][T16714] tipc: Resetting bearer [ 397.133742][T16714] tipc: Disabling bearer [ 397.887002][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.899092][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.908044][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.917379][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.926273][T16739] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 397.936905][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.946253][T16739] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 398.282931][T16743] lo speed is unknown, defaulting to 1000 [ 398.602836][T16765] bond4 (unregistering): Released all slaves [ 398.750820][T16743] chnl_net:caif_netlink_parms(): no params data found [ 398.790132][T16770] __nla_validate_parse: 11 callbacks suppressed [ 398.790150][T16770] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2876'. [ 398.809057][T16770] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2876'. [ 398.811716][T16772] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2877'. [ 398.819104][T16770] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2876'. [ 398.829327][T16772] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2877'. [ 398.858891][T16772] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2877'. [ 399.113980][ T12] dvmrp8 (unregistering): left allmulticast mode [ 399.141998][ T12] bond5 (unregistering): (slave geneve2): Releasing active interface [ 399.182131][ T12] batman_adv: batadv0: Removing interface: vxlan0 [ 399.368972][ T12] bond1 (unregistering): Released all slaves [ 399.469162][ T12] bond2 (unregistering): (slave veth3): Releasing active interface [ 399.477896][ T12] bond2 (unregistering): Released all slaves [ 399.491112][ T12] bond3 (unregistering): Released all slaves [ 399.587690][ T12] bond4 (unregistering): Released all slaves [ 399.682236][ T12] bond5 (unregistering): Released all slaves [ 399.695216][ T12] bond0 (unregistering): Released all slaves [ 399.796914][ T12] bond6 (unregistering): Released all slaves [ 399.810195][ T12] bond7 (unregistering): (slave veth11): Releasing active interface [ 399.820557][ T12] bond7 (unregistering): (slave veth13): Releasing active interface [ 399.831444][ T12] bond7 (unregistering): Released all slaves [ 399.846039][ T12] bond8 (unregistering): Released all slaves [ 399.945280][ T12] bond9 (unregistering): Released all slaves [ 399.957594][ T12] bond10 (unregistering): Released all slaves [ 400.019831][ T5838] Bluetooth: hci5: command tx timeout [ 400.136490][T16776] lo speed is unknown, defaulting to 1000 [ 400.178576][ T12] tipc: Left network mode [ 400.193880][T16743] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.201938][T16743] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.209180][T16743] bridge_slave_0: entered allmulticast mode [ 400.238314][T16743] bridge_slave_0: entered promiscuous mode [ 400.359838][T16743] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.367203][T16743] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.388200][T16743] bridge_slave_1: entered allmulticast mode [ 400.412269][T16743] bridge_slave_1: entered promiscuous mode [ 400.536872][T16807] tipc: Enabled bearer , priority 0 [ 400.600435][T16800] lo speed is unknown, defaulting to 1000 [ 400.605459][T16743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.632754][T16807] tipc: Resetting bearer [ 400.641485][T16805] lo speed is unknown, defaulting to 1000 [ 400.661141][T16743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.720305][T16806] tipc: Disabling bearer [ 400.795576][T16743] team0: Port device team_slave_0 added [ 400.844096][T16743] team0: Port device team_slave_1 added [ 401.035930][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2893'. [ 401.054890][T16827] netlink: 'syz.2.2892': attribute type 39 has an invalid length. [ 401.064283][ T12] hsr_slave_0: left promiscuous mode [ 401.079780][ T12] hsr_slave_1: left promiscuous mode [ 401.086550][ T12] batman_adv: batadv0: Removing interface: macsec1 [ 402.058447][T16743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.070078][T16743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.100453][ T5838] Bluetooth: hci5: command tx timeout [ 402.100818][T16743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.160124][T16743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.171909][T16842] SET target dimension over the limit! [ 402.197839][T16743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.268689][T16743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.344257][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2899'. [ 402.491122][T16743] hsr_slave_0: entered promiscuous mode [ 402.501908][T16743] hsr_slave_1: entered promiscuous mode [ 402.510581][T16743] debugfs: 'hsr0' already exists in 'hsr' [ 402.516333][T16743] Cannot create hsr debugfs directory [ 402.649177][T16862] tipc: Enabling of bearer rejected, already enabled [ 402.827586][T16866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2901'. [ 402.845072][T16869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2901'. [ 402.857760][ T12] IPVS: stop unused estimator thread 0... [ 403.944459][T16909] macvlan1: left allmulticast mode [ 403.997836][T16909] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 404.008926][T16909] veth5: left promiscuous mode [ 404.016874][T16909] bond3: left promiscuous mode [ 404.023947][T16909] bond3: left allmulticast mode [ 404.053945][T16917] tipc: Enabling of bearer rejected, already enabled [ 404.181161][ T5838] Bluetooth: hci5: command tx timeout [ 404.224407][T16743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.243988][T16743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.262817][T16743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.285444][T16743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.310510][T16936] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2922'. [ 404.328444][T16941] netlink: 'syz.1.2921': attribute type 1 has an invalid length. [ 404.387679][T16936] C (unregistering): left promiscuous mode [ 404.402230][T16936] C (unregistering): left allmulticast mode [ 404.408763][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 404.422486][T16936] team0: Port device C removed [ 404.448807][T16941] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 404.626739][T16965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 404.664323][T16963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2926'. [ 404.750540][T16743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.757514][T16949] lo speed is unknown, defaulting to 1000 [ 404.786881][T16743] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.829559][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.836802][ T9452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.905237][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.912476][ T9452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.950446][T16972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2929'. [ 404.962296][T16974] tipc: Enabled bearer , priority 0 [ 405.009174][T16970] syzkaller0: entered promiscuous mode [ 405.049883][T16970] syzkaller0: entered allmulticast mode [ 405.061456][T16976] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2930'. [ 405.118498][T16970] tipc: Resetting bearer [ 405.193829][T16969] tipc: Resetting bearer [ 405.231867][T16969] tipc: Disabling bearer [ 405.534968][T17000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2936'. [ 405.582928][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2937'. [ 405.600884][T17003] macsec0: entered allmulticast mode [ 405.606449][T17003] batadv0: entered allmulticast mode [ 405.621559][T17003] batadv0: left allmulticast mode [ 405.694808][T17000] lo speed is unknown, defaulting to 1000 [ 405.704667][T16743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.767948][T17008] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2936'. [ 405.897305][T16743] veth0_vlan: entered promiscuous mode [ 405.910931][T16743] veth1_vlan: entered promiscuous mode [ 405.941285][T16743] veth0_macvtap: entered promiscuous mode [ 406.003244][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2940'. [ 406.044555][T16743] veth1_macvtap: entered promiscuous mode [ 406.097534][T16743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.127853][T16743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.162451][ T9461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.180834][ T9461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.205554][ T9461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.227941][ T9461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.261112][ T5838] Bluetooth: hci5: command tx timeout [ 406.434016][T17037] netlink: 'syz.3.2944': attribute type 11 has an invalid length. [ 406.440079][ T9460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.444639][T17037] netlink: 'syz.3.2944': attribute type 11 has an invalid length. [ 406.462642][ T9460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.482374][T17038] syz.2.2943: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 406.536108][T17038] CPU: 0 UID: 0 PID: 17038 Comm: syz.2.2943 Not tainted syzkaller #0 PREEMPT(full) [ 406.536134][T17038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.536146][T17038] Call Trace: [ 406.536153][T17038] [ 406.536161][T17038] dump_stack_lvl+0x189/0x250 [ 406.536198][T17038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.536220][T17038] ? __pfx__printk+0x10/0x10 [ 406.536240][T17038] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 406.536265][T17038] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 406.536291][T17038] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 406.536316][T17038] warn_alloc+0x214/0x310 [ 406.536342][T17038] ? stack_depot_save_flags+0x40/0x860 [ 406.536373][T17038] ? __pfx_warn_alloc+0x10/0x10 [ 406.536399][T17038] ? kasan_save_track+0x3e/0x80 [ 406.536423][T17038] ? __kasan_kmalloc+0x93/0xb0 [ 406.536449][T17038] ? xsk_setsockopt+0x4dc/0x8d0 [ 406.536466][T17038] ? do_sock_setsockopt+0x17c/0x1b0 [ 406.536483][T17038] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 406.536499][T17038] ? do_syscall_64+0xfa/0xfa0 [ 406.536521][T17038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.536552][T17038] __vmalloc_node_range_noprof+0x125/0x12d0 [ 406.536607][T17038] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 406.536636][T17038] ? __kasan_kmalloc+0x93/0xb0 [ 406.536668][T17038] vmalloc_user_noprof+0xad/0xf0 [ 406.536691][T17038] ? xskq_create+0xbf/0x170 [ 406.536713][T17038] xskq_create+0xbf/0x170 [ 406.536737][T17038] xsk_init_queue+0xb0/0x110 [ 406.536761][T17038] xsk_setsockopt+0x4dc/0x8d0 [ 406.536783][T17038] ? __pfx_xsk_setsockopt+0x10/0x10 [ 406.536806][T17038] ? __pfx_aa_sk_perm+0x10/0x10 [ 406.536832][T17038] ? aa_sock_opt_perm+0xff/0x1b0 [ 406.536860][T17038] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 406.536877][T17038] ? __pfx_xsk_setsockopt+0x10/0x10 [ 406.536898][T17038] do_sock_setsockopt+0x17c/0x1b0 [ 406.536921][T17038] __x64_sys_setsockopt+0x13f/0x1b0 [ 406.536944][T17038] do_syscall_64+0xfa/0xfa0 [ 406.536965][T17038] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.536987][T17038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.537005][T17038] ? clear_bhb_loop+0x60/0xb0 [ 406.537026][T17038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.537043][T17038] RIP: 0033:0x7f472db8efc9 [ 406.537061][T17038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.537076][T17038] RSP: 002b:00007f472e9dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 406.537095][T17038] RAX: ffffffffffffffda RBX: 00007f472dde5fa0 RCX: 00007f472db8efc9 [ 406.537109][T17038] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 406.537120][T17038] RBP: 00007f472dc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 406.537131][T17038] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.537143][T17038] R13: 00007f472dde6038 R14: 00007f472dde5fa0 R15: 00007ffcad246f38 [ 406.537175][T17038] [ 406.537299][T17038] Mem-Info: [ 406.590389][ T9460] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.610252][T17038] active_anon:3900 inactive_anon:0 isolated_anon:0 [ 406.610252][T17038] active_file:3479 inactive_file:40011 isolated_file:0 [ 406.610252][T17038] unevictable:768 dirty:321 writeback:0 [ 406.610252][T17038] slab_reclaimable:12320 slab_unreclaimable:162767 [ 406.610252][T17038] mapped:30514 shmem:1379 pagetables:1179 [ 406.610252][T17038] sec_pagetables:0 bounce:0 [ 406.610252][T17038] kernel_misc_reclaimable:0 [ 406.610252][T17038] free:1255806 free_pcp:19186 free_cma:0 [ 406.656957][ T9460] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.657007][ T9460] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.657043][ T9460] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.931933][T17038] Node 0 active_anon:15500kB inactive_anon:0kB active_file:13916kB inactive_file:159836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117956kB dirty:1280kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13572kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.984202][T17038] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 407.034861][T17038] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.094322][ T9458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.109762][ T9458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.112062][T17038] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 407.124917][T17038] Node 0 DMA32 free:1116432kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15816kB inactive_anon:0kB active_file:13916kB inactive_file:159836kB unevictable:1536kB writepending:1284kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:58640kB local_pcp:27892kB free_cma:0kB [ 407.180296][T17038] lowmem_reserve[]: 0 0 0 0 0 [ 407.191353][T17038] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.233179][T17038] lowmem_reserve[]: 0 0 0 0 0 [ 407.237947][T17038] Node 1 Normal free:3897616kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12132kB local_pcp:3460kB free_cma:0kB [ 407.271909][T17038] lowmem_reserve[]: 0 0 0 0 0 [ 407.276942][T17038] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 407.304504][T17038] Node 0 DMA32: 1169*4kB (UME) 410*8kB (UME) 219*16kB (UM) 1456*32kB (UM) 911*64kB (UM) 560*128kB (UM) 426*256kB (UME) 282*512kB (UME) 147*1024kB (UM) 10*2048kB (UME) 123*4096kB (UM) = 1116292kB [ 407.326004][T17038] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 407.341270][T17038] Node 1 Normal: 174*4kB (UME) 55*8kB (UME) 44*16kB (UME) 157*32kB (UME) 51*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3897616kB [ 407.372440][T17038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.395000][T17038] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.407882][T17038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.417914][T17038] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.427763][T17038] 44850 total pagecache pages [ 407.433026][T17038] 0 pages in swap cache [ 407.437328][T17038] Free swap = 124996kB [ 407.442763][T17038] Total swap = 124996kB [ 407.447076][T17038] 2097051 pages RAM [ 407.451323][T17038] 0 pages HighMem/MovableOnly [ 407.456203][T17038] 424117 pages reserved [ 407.461763][T17038] 0 pages cma reserved [ 407.494644][T17057] lo speed is unknown, defaulting to 1000 [ 407.531244][T17065] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 408.044842][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.070132][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.091849][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.099468][T17077] syzkaller1: entered promiscuous mode [ 408.105970][T17077] syzkaller1: entered allmulticast mode [ 408.115371][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.127909][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.136685][T17077] netlink: 'syz.1.2956': attribute type 9 has an invalid length. [ 408.282099][T17086] batadv_slave_1: entered allmulticast mode [ 408.359337][ T5826] syz_tun (unregistering): left promiscuous mode [ 408.435937][T17090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.478784][T17090] batadv_slave_1 (unregistering): left allmulticast mode [ 408.494888][T17090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.568180][T17081] lo speed is unknown, defaulting to 1000 [ 408.593215][T17089] lo speed is unknown, defaulting to 1000 [ 408.712327][T17104] netlink: 'syz.0.2964': attribute type 6 has an invalid length. [ 408.720794][T17104] netlink: 'syz.0.2964': attribute type 5 has an invalid length. [ 408.741318][T17104] netlink: 'syz.0.2964': attribute type 4 has an invalid length. [ 408.787819][T17104] netlink: 'syz.0.2964': attribute type 4 has an invalid length. [ 409.157844][T17109] lo speed is unknown, defaulting to 1000 [ 409.172586][T17081] chnl_net:caif_netlink_parms(): no params data found [ 409.353424][T17133] vxlan0: entered promiscuous mode [ 409.359209][T17133] vxlan0: entered allmulticast mode [ 409.419112][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.425876][T17138] __nla_validate_parse: 10 callbacks suppressed [ 409.425896][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'. [ 409.428562][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2970'. [ 409.449997][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.453372][T17140] netlink: 620 bytes leftover after parsing attributes in process `syz.0.2970'. [ 409.474995][T17140] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2970'. [ 409.497536][T17081] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.505050][T17081] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.512581][T17081] bridge_slave_0: entered allmulticast mode [ 409.520723][T17081] bridge_slave_0: entered promiscuous mode [ 409.534892][T17136] tipc: Enabled bearer , priority 0 [ 409.542313][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.552742][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.563128][T17139] syzkaller0: entered promiscuous mode [ 409.568625][T17139] syzkaller0: entered allmulticast mode [ 409.576242][T17081] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.583718][T17081] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.591431][T17081] bridge_slave_1: entered allmulticast mode [ 409.598721][T17081] bridge_slave_1: entered promiscuous mode [ 409.760435][T17139] tipc: Resetting bearer [ 409.783693][T17081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.797215][T17081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.809221][T17134] tipc: Resetting bearer [ 409.836675][T17134] tipc: Disabling bearer [ 409.867193][T17155] tipc: Enabled bearer , priority 0 [ 409.897494][T17081] team0: Port device team_slave_0 added [ 409.904620][T17148] syzkaller0: entered promiscuous mode [ 409.924732][T17148] syzkaller0: entered allmulticast mode [ 409.945744][T17081] team0: Port device team_slave_1 added [ 410.117997][T17155] tipc: Resetting bearer [ 410.142306][T17081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.149291][T17081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.177175][T17081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.231654][T17146] tipc: Resetting bearer [ 410.259949][ T5838] Bluetooth: hci4: command tx timeout [ 410.282752][T17146] tipc: Disabling bearer [ 410.323698][T17081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.360276][T17081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.409768][T17081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.571428][T17081] hsr_slave_0: entered promiscuous mode [ 410.578619][T17081] hsr_slave_1: entered promiscuous mode [ 410.599923][T17081] debugfs: 'hsr0' already exists in 'hsr' [ 410.619380][T17081] Cannot create hsr debugfs directory [ 410.656453][T17187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 410.858863][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2994'. [ 411.090773][T17218] tipc: Enabled bearer , priority 0 [ 411.155189][T17218] syzkaller0: entered promiscuous mode [ 411.160908][T17218] syzkaller0: entered allmulticast mode [ 411.241581][T17220] tipc: Resetting bearer [ 411.278114][T17217] tipc: Resetting bearer [ 411.308249][T17217] tipc: Disabling bearer [ 411.453345][T17229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2999'. [ 411.630889][T17234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3002'. [ 412.340288][ T5838] Bluetooth: hci4: command tx timeout [ 413.040038][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 413.315485][T17253] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3008'. [ 413.326535][T17253] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 413.379965][T17258] tipc: Enabled bearer , priority 0 [ 413.397219][T17258] syzkaller0: entered promiscuous mode [ 413.409905][T17258] syzkaller0: entered allmulticast mode [ 413.458846][T17258] tipc: Resetting bearer [ 413.482037][T17255] tipc: Resetting bearer [ 413.538381][T17255] tipc: Disabling bearer [ 413.582147][T17081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.602945][T17081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.654085][T17081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.710278][T17081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.803447][T17280] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 413.818366][T17268] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 413.833991][T17275] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 413.852251][T17270] lo speed is unknown, defaulting to 1000 [ 414.161314][T17299] netlink: 'syz.3.3021': attribute type 21 has an invalid length. [ 414.331353][T17081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.408147][T17081] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.420286][ T5838] Bluetooth: hci4: command tx timeout [ 414.472723][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.480127][ T9461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.595878][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.603157][ T9452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.633286][T17321] tipc: Enabled bearer , priority 0 [ 414.675533][T17321] syzkaller0: entered promiscuous mode [ 414.683188][T17321] syzkaller0: entered allmulticast mode [ 414.699532][T17321] tipc: Resetting bearer [ 414.710101][T17320] tipc: Resetting bearer [ 414.720857][T17326] __nla_validate_parse: 4 callbacks suppressed [ 414.720874][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3025'. [ 414.758043][T17320] tipc: Disabling bearer [ 414.788862][T17325] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3026'. [ 414.818349][T17325] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3026'. [ 415.109165][T17344] netlink: 'syz.2.3033': attribute type 13 has an invalid length. [ 415.150667][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3033'. [ 415.353625][T17081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.375740][T17364] netlink: 'syz.0.3036': attribute type 142 has an invalid length. [ 415.500921][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 415.519434][T17345] lo speed is unknown, defaulting to 1000 [ 415.547707][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 415.622281][T17378] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3041'. [ 415.686107][T17378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3041'. [ 415.832409][T17389] tipc: Enabled bearer , priority 0 [ 415.847740][T17383] syzkaller0: entered promiscuous mode [ 415.877093][T17383] syzkaller0: entered allmulticast mode [ 415.978738][T17393] bridge9: entered allmulticast mode [ 415.995261][T17383] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 416.060602][T17383] tipc: Resetting bearer [ 416.081998][T17380] tipc: Resetting bearer [ 416.137658][T17380] tipc: Disabling bearer [ 416.231526][T17408] tipc: Enabled bearer , priority 0 [ 416.286444][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3052'. [ 416.298784][T17413] syzkaller0: entered promiscuous mode [ 416.305215][T17413] syzkaller0: entered allmulticast mode [ 416.378946][T17410] bond1: entered allmulticast mode [ 416.393811][T17410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.445795][T17081] veth0_vlan: entered promiscuous mode [ 416.458404][T17408] tipc: Resetting bearer [ 416.477518][T17410] bridge2: entered allmulticast mode [ 416.483593][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'. [ 416.484476][T17410] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 416.504284][ T5838] Bluetooth: hci4: command tx timeout [ 416.539067][T17407] tipc: Resetting bearer [ 416.596097][T17407] tipc: Disabling bearer [ 416.628184][T17081] veth1_vlan: entered promiscuous mode [ 416.724303][T17434] syzkaller0: entered promiscuous mode [ 416.731053][T17434] syzkaller0: entered allmulticast mode [ 416.756324][T17081] veth0_macvtap: entered promiscuous mode [ 416.929142][T17081] veth1_macvtap: entered promiscuous mode [ 416.993700][T17081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.021333][T17081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.046385][ T9458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.063072][ T9458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.096862][ T9458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.123765][ T9458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.205677][ T9458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.221633][ T9458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.274496][ T9460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.292347][ T9460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.303578][T17460] lo speed is unknown, defaulting to 1000 [ 418.028437][T17491] Cannot find set identified by id 65534 to match [ 418.423004][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.444642][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.456857][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.468166][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.477368][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.558671][T17502] lo speed is unknown, defaulting to 1000 [ 418.750170][T17508] lo speed is unknown, defaulting to 1000 [ 419.384003][T17508] chnl_net:caif_netlink_parms(): no params data found [ 420.088314][ T9452] bond0 (unregistering): Released all slaves [ 420.229109][ T9452] bond1 (unregistering): Released all slaves [ 420.403413][ T9452] bond2 (unregistering): Released all slaves [ 420.420170][ T9452] bond3 (unregistering): Released all slaves [ 420.505560][ T5838] Bluetooth: hci1: command tx timeout [ 420.548702][T17556] __nla_validate_parse: 16 callbacks suppressed [ 420.548720][T17556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3089'. [ 420.554938][T17542] lo speed is unknown, defaulting to 1000 [ 422.090353][ T9452] tipc: Left network mode [ 422.129418][T17562] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 422.135781][T17562] pim6reg1: linktype set to 805 [ 422.143721][T17508] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.152455][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.160924][T17508] bridge_slave_0: entered allmulticast mode [ 422.171860][T17508] bridge_slave_0: entered promiscuous mode [ 422.204224][T17568] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3092'. [ 422.237232][T17508] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.255100][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.275491][T17508] bridge_slave_1: entered allmulticast mode [ 422.283936][T17508] bridge_slave_1: entered promiscuous mode [ 422.334032][T17570] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3092'. [ 422.379171][T17574] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3094'. [ 422.392660][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3094'. [ 422.402109][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3094'. [ 422.418930][T17508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.423655][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3094'. [ 422.465815][T17508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.496633][T17574] bridge10: entered allmulticast mode [ 422.510260][ T5894] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 422.522220][ T5894] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 422.530624][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 422.539980][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.550210][ T5894] Workqueue: events l2cap_info_timeout [ 422.555672][ T5894] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 422.561551][ T5894] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 422.581149][ T5894] RSP: 0018:ffffc9000514f788 EFLAGS: 00010202 [ 422.587201][ T5894] RAX: dffffc0000000000 RBX: ffffffff891ef278 RCX: e324a8a19e941f00 [ 422.595245][ T5894] RDX: 0000000000000000 RSI: ffffffff891ef278 RDI: 000000000000004c [ 422.603390][ T5894] RBP: ffffffff8a4fe8e5 R08: 0000000000000001 R09: 0000000000000000 [ 422.611379][ T5894] R10: dffffc0000000000 R11: ffffffff8a4fe8a0 R12: 0000000000000000 [ 422.619715][ T5894] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 422.627693][ T5894] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 422.636626][ T5894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.643210][ T5894] CR2: 000000110c3bf266 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 422.651177][ T5894] Call Trace: [ 422.654496][ T5894] [ 422.657442][ T5894] __kasan_check_byte+0x12/0x40 [ 422.662292][ T5894] lock_acquire+0x8d/0x360 [ 422.666705][ T5894] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.671905][ T5894] ? __cancel_work+0x254/0x2e0 [ 422.676752][ T5894] lock_sock_nested+0x48/0x100 [ 422.681528][ T5894] ? l2cap_sock_ready_cb+0x45/0x140 [ 422.686820][ T5894] l2cap_sock_ready_cb+0x45/0x140 [ 422.691834][ T5894] l2cap_conn_start+0x76d/0xe50 [ 422.696683][ T5894] ? __pfx_l2cap_conn_start+0x10/0x10 [ 422.702048][ T5894] ? __lock_acquire+0xab9/0xd20 [ 422.706888][ T5894] ? __pfx___mutex_lock+0x10/0x10 [ 422.711931][ T5894] ? process_scheduled_works+0x9ef/0x17b0 [ 422.717647][ T5894] l2cap_info_timeout+0x68/0xa0 [ 422.722580][ T5894] ? process_scheduled_works+0x9ef/0x17b0 [ 422.728350][ T5894] process_scheduled_works+0xae1/0x17b0 [ 422.733903][ T5894] ? __pfx_process_scheduled_works+0x10/0x10 [ 422.740068][ T5894] worker_thread+0x8a0/0xda0 [ 422.744654][ T5894] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 422.751071][ T5894] ? __kthread_parkme+0x7b/0x200 [ 422.756015][ T5894] kthread+0x711/0x8a0 [ 422.760099][ T5894] ? __pfx_worker_thread+0x10/0x10 [ 422.765200][ T5894] ? __pfx_kthread+0x10/0x10 [ 422.769779][ T5894] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.775146][ T5894] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.780335][ T5894] ? __pfx_kthread+0x10/0x10 [ 422.784917][ T5894] ret_from_fork+0x4bc/0x870 [ 422.789496][ T5894] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 422.794595][ T5894] ? __switch_to_asm+0x39/0x70 [ 422.799344][ T5894] ? __switch_to_asm+0x33/0x70 [ 422.804093][ T5894] ? __pfx_kthread+0x10/0x10 [ 422.808674][ T5894] ret_from_fork_asm+0x1a/0x30 [ 422.813433][ T5894] [ 422.816500][ T5894] Modules linked in: [ 422.822734][ T5894] ---[ end trace 0000000000000000 ]--- [ 422.852751][ T5838] Bluetooth: hci1: command tx timeout [ 423.022169][ T5894] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 423.028119][ T5894] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 423.058592][ T5894] RSP: 0018:ffffc9000514f788 EFLAGS: 00010202 [ 423.066845][ T5894] RAX: dffffc0000000000 RBX: ffffffff891ef278 RCX: e324a8a19e941f00 [ 423.075295][ T5894] RDX: 0000000000000000 RSI: ffffffff891ef278 RDI: 000000000000004c [ 423.083769][ T5894] RBP: ffffffff8a4fe8e5 R08: 0000000000000001 R09: 0000000000000000 [ 423.092372][ T5894] R10: dffffc0000000000 R11: ffffffff8a4fe8a0 R12: 0000000000000000 [ 423.198182][ T5894] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 423.209762][ T5894] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 423.239836][ T5894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.246458][ T5894] CR2: 00007f73173f84c0 CR3: 0000000030f2a000 CR4: 00000000003526f0 [ 423.300008][ T5894] Kernel panic - not syncing: Fatal exception [ 423.306348][ T5894] Kernel Offset: disabled [ 423.310671][ T5894] Rebooting in 86400 seconds..