last executing test programs: 6.222833353s ago: executing program 1 (id=1905): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) unshare(0x2a020400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200), 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$FITHAW(r8, 0xc0045878) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 6.055780712s ago: executing program 3 (id=1907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xf, 0x80000, 0xb4dd) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0xd}, 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x7f}, 0x4) sendto$inet6(r1, &(0x7f0000000080)="5187e11a9efdf4dc89e4d8000f89a1aff1c93fc860b35b37d2d81b71153d543a76b92f8922c2a3c5352ee0c6500d6d9339f3636658bccbd0bb56922da5c1efdc8c7a62c882d7a5d4be41beef20e0bb54c0711f3143fc6a7f2609d5227562ce977443fb0c1d9539a5c3f90f52902b8bfb8cb4e762725970b67935ab7ba8ea458eab4eb8fbfd822cf9e69f8a3b45ab60bec915078883be53afbaf04fdf2871384cc14046c262a67a838ad6c7925dbcc2269e3ce4fbbfba84178cb2d69478978a6ff674122a15f084e9583b2afdc39201143a5a2b69bc", 0xd5, 0x40000, 0x0, 0x0) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/195, 0xc3}, {&(0x7f0000001280)=""/139, 0x8b}, {&(0x7f0000001340)=""/227, 0xe3}], 0x4}, 0x40000002) r2 = accept$nfc_llcp(r1, 0x0, &(0x7f00000014c0)) getsockopt$nfc_llcp(r2, 0x118, 0x7, &(0x7f0000001500)=""/176, 0xb0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000015c0)=0x7, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000001600)=0x1000, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0xa0, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000017c0)={0x28, 0x0, 0x2710, @local}, 0x10) recvmsg(r3, &(0x7f0000001c00)={&(0x7f0000001800)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001880)=""/254, 0xfe}, {&(0x7f0000001980)=""/82, 0x52}, {&(0x7f0000001a00)=""/149, 0x95}], 0x3, &(0x7f0000001b00)=""/198, 0xc6}, 0x10020) connect$pppl2tp(r1, &(0x7f0000001c40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}, 0x32) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000001c80)="2bd12aa72ef12450dcb39edd979a6446339ecdc5751b11a5cabb221d40108e3b667b474da6d888c29f0512dd77de3383f21e76bf6315ce96a05f78e5") socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001f80)={'team0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002100)={&(0x7f0000001fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x8, [@func={0x3, 0x0, 0x0, 0xc, 0x4}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @enum64={0x8, 0x8, 0x0, 0x13, 0x1, 0x1, [{0xf, 0x4, 0x6}, {0xe, 0x0, 0x3cc}, {0x3, 0xffffffff, 0x7}, {0x1, 0x5, 0x5}, {0xf, 0x10000, 0x1}, {0x3, 0x80000001, 0x10001}, {0x9, 0x0, 0x9}, {0xa, 0x9, 0x7}]}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000002080)=""/84, 0xb0, 0x54, 0x1, 0xfffffffa, 0x10000}, 0x28) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000022c0)={0x11, 0x30, &(0x7f0000001d80)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000001f00)='syzkaller\x00', 0x80000000, 0x0, &(0x7f0000001f40), 0x41000, 0x24, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000002140)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002180)={0x1, 0x9, 0xe, 0x7fffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002240)=[r7, 0xffffffffffffffff, 0x1], &(0x7f0000002280)=[{0x3, 0x3, 0xb, 0xa}, {0x0, 0x2, 0xb, 0x6}], 0x10, 0x10000}, 0x94) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000002380)={{0x84e7, 0x5d}, 0x100, './file0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002800)={&(0x7f00000024c0)="54eb307a4700238da16aa838c0c173059ffc3c4a7a422856e0d26187a9194f1a561c5e3114c33b9afcaa5b4588b6867a76ab97907d1dda022f753833e13be011ad686ed0708c8c88853131003b6a73f4dbf420d8a26a23a03ee942edd147ba061fb12d7755ef97f645f2f4316ca810acbad43e7cbd8bfcf4", &(0x7f0000002540)=""/211, &(0x7f0000002640)="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", &(0x7f0000002740)="f50ccfce2acf5c875dd78547d62d03ea40aeb4101d9c48cfb20f6f0787f549d4c745b6d0efda6dabab672b1d486fb569b7a7ce80f55e1e61dc9617ddf41cab1cb571a62d85665a8b432d3d2aa8b4f965ece8bdbf881621c42869f6e197a78696cdfd608c9aecd9be483b1c5d31c6a796398423f79138be253918b31c6463d7e7b6bac38a642e33ff49d3f55ad685ec6f293ca31f2509167b268ac0", 0x8, r7, 0x4}, 0x38) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002880), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x2c, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b80)={&(0x7f0000002980)="80a929d055e3406f43f2693eb0bc668e735afd0eea95aa18ee9029bb8969d445d6e5f615a7cf8a484a9d2d58d689b023eb11624ee8cd0170aaa7cff5ce728c44e40c59b60401411cb2f5522fedf0f4a5acc1ee79e5e4fa8f33fa55960266bc92dcbf21a7bd7bd0765bc699faadf773aa1114110df49d03ea4bae0ff15c7cd55214a71853a9", &(0x7f0000002a40), &(0x7f0000002a80)="96fe4be12e741609ff259d3bbf4fa49c85bc0bd7a1b265aa52bea445fe818d25f0da0f22b0e7f42fd873160d3d0312ca9b7f4630053d8cdca764092173a2f4282c8b299826e0466485abd74eb3c0f7e49a3be2674c57b3c05ccb28b23354287b89b0b1fae2f11e4802eb167b1206b98f7b7325974efe5195c2746c50588cf6c9d77bc6a9d475cc66e814536fbf626ce921a91386e75f1e14844e1c6a555d429ceacb0ff7dcbc507ec09846", &(0x7f0000002b40)="25382364a557daf24798c0256e15d89ead9110a48383aae12cdb0bc67309c911fcc91a75", 0x667, r7}, 0x38) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000002bc0)=0x8, 0x4) 4.40127075s ago: executing program 3 (id=1909): r0 = epoll_create(0xfffffff8) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0x20002011}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x50}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.348954126s ago: executing program 1 (id=1910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c0002800500010000000000300003802c00018014000300fe9000000000000000000000000000bb14000400fe8000000000000000000000000000aa04000180"], 0x6c}}, 0x0) getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="85a1e7169662533a840471278673319a58e3d46b7332c590a6e4417b3a8c2aa0fa14f1a9fc02d1b7d70d8596722a003fa2ac5f7549675b1ae6aa0ee0f9fdcd900bbc2fc6326718a73e64ae843c1e9c0c1115167bcfd1d47cdaf013d3e729a03a7977473bc9aed2e11927f7e1d509e3becba039e6a7f57ff801a39a13539f767e8da28aeccfa9d211770d5240d320da8981c6387d575bd95d9f03232bd63b9839240af5e80b6529f62f97db8a0eb3e6c8addb17e34df114964a0bd18c22d3a903fbb98a1bea3150a0876e67461e65cd26411fbbbbc5aed18251e62e6d61cfe03f14434620e739a040", 0xe8}], 0x2}, 0xc004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500008400000000fd019078ac1e0001ac1414aa03059078000500014a2406860067fff9072f1000e0000001640101024422f22144147f83ac1414aa000000006401010200000006833bf7ac1414bbe000000264010100e0000002e0000001ac1414354418b3d0000000020000000d0000000880000001ffffffff830371440446100000a9b12bc510182010972cf26ab1e5400f588997daeb35545ae20a50bca7f65e6776681cc3fd3a7a6ea8beaf"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080d0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.957673562s ago: executing program 3 (id=1913): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x2, 0x0, 0x0) 3.598102584s ago: executing program 3 (id=1916): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYRES32=r2, @ANYBLOB="10a50600020400001c0016801800018014000b00"], 0x44}, 0x1, 0x0, 0x0, 0x4cc05}, 0x40014) 3.597763607s ago: executing program 1 (id=1917): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000f4ffffffffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x1000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0x9, 0x8001, 0xffff, 0x20000, r0, 0xf99, '\x00', 0x0, r2, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.503623539s ago: executing program 3 (id=1919): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001703fe4c5d", @ANYRES16=r5, @ANYBLOB="010000000000000000001b00000020000180140002000000000000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB], 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r8, 0x0, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) 3.348005343s ago: executing program 1 (id=1920): r0 = socket$rxrpc(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0x50) (async) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000180)='#%%\x00', 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_skb=0x1, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) (async) unshare(0x22020400) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) (async) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) connect$unix(r5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x212010, 0x4) 3.259396603s ago: executing program 1 (id=1922): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f00000001c0)="3969ac0b", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x100, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 2.236091753s ago: executing program 1 (id=1927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x61d1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty, 0x8}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100000000000000", @ANYRES32, @ANYRES64=r0, @ANYBLOB="7815a6"], 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000000000300000000050000000300000000000000030000000000000c000000000800000000000008020000000000006102"], 0x0, 0x52}, 0x28) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000080)=0x101, 0x4) 1.995125648s ago: executing program 0 (id=1929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xe5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000800) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) syz_emit_ethernet(0x12f, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5}}, {@ipv6={0x86dd, @udp={0x4, 0x6, "2192d1", 0xf5, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@routing={0x0, 0x2, 0x2, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x10, 0x48, 0x9, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x89, 0x0, 0x2, 0x0, 0x0, 0x8, 0x68}, @fragment={0x3a, 0x0, 0x2, 0x1, 0x0, 0x1e, 0x68}, @dstopts={0x32, 0x7, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x7ff, [0x3ff, 0xf31, 0xa30, 0x1, 0x3]}}, @jumbo={0xc2, 0x4, 0x7}]}, @hopopts={0x0, 0x0, '\x00', [@pad1]}], {0x4e20, 0x4e22, 0x65, 0x0, @opaque="c4984927f57b99845333f4c5de69236af9831ba60a6470fb69abde41d06355ddd911c6afa5037ec43fbd08ad8b35533c24337237dac16fc5c98f456d40586ba76c115dcea2e26c296010883ca12294a6b30854be654066d1968f37c6f4"}}}}}}, &(0x7f0000000140)={0x1, 0x4, [0x796, 0x2dc, 0xfb5, 0x539]}) 1.834337781s ago: executing program 0 (id=1931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000200000000004f6a80cb000000730300000000f69c"], 0x48) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff020000000000000000000000003101180000000000000029000000"], 0x40}, 0x20040040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x891c, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@deltaction={0x18, 0x31, 0xf964cc2c8a2e644d, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.58355389s ago: executing program 0 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xfff0}, {}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4040014) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x400}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1274, r4, 0x3, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x90, 0x1b}}}}, [@NL80211_ATTR_VENDOR_DATA={0x41, 0xc5, "57ca3f04d08584dc4ff8c1bb1d984dbf2a9259236d98d2c44c430eecf2a036ed390d36c7f91fb8d1dd1e66b27df2d7aa2b5b743d55f4be68f382ea08fd"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffff02c}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb5f}, @NL80211_ATTR_VENDOR_DATA={0x3d, 0xc5, "0d673e34c9f946a8c532e046aec0d8491e42d169294fe5603b336174fbe2599473a34b7f0c1285a8b814f3204e22f544da4a5c963ebfc270b5"}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "b1f20e5ef4ee7ee91616a959338a64d45afe54a750ddacefdcd6647d00a0c082995b1db468a248fe195e7e9644c42ee619ceb697e6f7450bc024353f2cb37afa69f33475d869ed8ba4c67ddb1155fe9f75eccf1f1a0190b9872cb0f16ed0222da2857f212c60baad4ab704bd1ad0e8f6333954e09c64da3a74586c6924842049d265247271b7d5487dceab47b8ded6e1ef70b3b7d780eef114183a66f118afeaa40816"}, @NL80211_ATTR_VENDOR_DATA={0xfa, 0xc5, "63173f819f91b081761a24a54bf239db6e3d1105dbdc0cd4f8648020018bb8e7dc5827c483a915310cc3861e274b6136b5000ca14d23675d48b4023618d7c7b32673b77a891f6e5174ba373a24e1b8c99edeeccf731fed8ea42607f4498b1ef053e7fd321791c3bed894aa342167b7288b33f11ac37809ba1004f42bcbc959b4114c4680ab3c6eacb65aa19b92304ea598910bb6c78e67b60e76be7d850f508e4aeab1a72080a5fd2fe74385b9f6cd3e6f0c5fe52641fbdd1a68f509c37fd189b16d01ee47e4345511abc74622864b00c311f2d209514ac365fbe7b4f8bf13408481fe549d90f138ce6d4e74d435f525351610ff99d7"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffffc}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "6bab5dae43935710d647a91fa0526825387ef60f57e2a2bc78df3ec295e22ad5cd9016fccedf2b1d110a49f1f988cfec241eff63bc0c615998fdaf1fc5732a42cd10c5a7dae143333bf07b6775e37da2595972dbace0b91c27c039dcdc2821ab862fc3dd1f2d6abe2fad94b2742e46cbd02617c9742e680f7c5a6b7a9fda9bc227fde16e1d7bb02995e772c0416205d1e14f01daadad18d907ba8bb159d9bcd341006a0dfd3d4880068703b9ef10c332970c8ddb3204a20ce3e7c83fea49fa9cf931c1b8d2b5b25ca7ed2e6da1afc97e8f72c5146a8e20a0aa7e5956b701ef6b187afde2dffa03803875c4adb2cf98f9e56c4346b76160d9bca3112766fd384d59ba399d4d78b9f6878473d9d8367889c5ebcd8a0ffd40a1c7db04c4ef89499c5f8d5e9373311d1715e5486247b52bfd3bf20387b4a428a9ebbd5202d0d06abf5cd7d5d6e4aafd7571d364a038745dcf4ae413fa03a14639965230fd060793fe19737e17269e19948a65d23eb7b934f6a4ebb0e3deabe6519b88d558351d4478d794ac36f0bf909ec57d660dc7c242f90adcff1786f442644f089fed4a61d157469b863cff8f66e178e5a65b2478c64b7768085f56885b38d3ed8535d180d3810b2cb7c2fd99bbca9817d8e2026353b5acfd25ed849c0f666df433af19de1d7634ea1360a69adcc6383c89101d4668a6798f387b68ef4a92ca22276bcd33749529ccafc9ffae2e9e48c803f64ea8f81567c1b04260cd4a42a8f4856120bd6bcd9a71b313ac96494164d9ced6cd41d40c015b74138b33445d9c96e49d00d7a763cba840785be9994ddf02ce519ca73d55d9df23bdd55305d1f7dcdb79eb20b5c97ba893568e5ab11d814072d1506f2dcb7c0f82d6fac95b9274c9276820e28e0287bae77ec30ac8f75be579cfe105096896d6f868435118289c749d2b81f2050f09d084d9f8c9287e55cb6f14d0c7032ab1b877331cb8ac8ea2b1c2838346244d7b3a45288dc1478be6679ff964174ca4a723f52bf065a93825049277bd9e257bb28e6c436834c5a44ee0b575111eaffec536c4c10ebf74e381c4eee2e9da19a9a7e49c35b9b06f5019cddc167b91660ca1b6a7e1cea2bb12861108ed404944f247297a83f81329f230d7612611ea3bfa405f851da2cd36f4bfbe2f85d8bdacec87ff3e540d8eb37dd26044966c98d18cd00eeef8dabcc356f0f02a344fd4f59610137d70368f4a8c556ab5b4b063a97ab54932a254cffc78f88504625a990b8c58dba3f60717e17178bd2c6e1e4cdfc9f48a429c23ebb3b4b4aee7499f4bc566406baddc1340c78afc0015d5a0dfc150f31dca877a3f03bfd185c9751c63c61c9e2fd09ed2364d36f375f0793cb83cc8382b1e23d37312e213bbc0d517a8902338545ae6ea81046fb58c115a3aff983058b1a6f238ab9815acedcdffd6e275f59a4c72c35175a1ecc9271f135bb0269112b043f3bd14e8433e9e03ad964e1271385879a57b896c542a5ff30a5094fef1f06d16fe1f077997e664867b042e6170e453c02bb87e946f3049cf4dcb4064257cbf7ba64358217e9ff9cc11cae12efa597fd7eda7085a0c1ef3e778dd47ea5c57c156dd3d80d2f281daccd6721b3143eb685dde399d106152c65cd2a32ea60de8cdee2e2a4c747d085c5a2c45c5b0aa7235039e86bd3892b782ff83f1dca19f46632983301811be66d87900f555a93df8877359e22c5d84ff435619e4492f422c2105ca682ec8c2001add115ccabbc38320aae12d9c6b6ec78d8aa1db201126fa30bd9d3802aaa0e352b7934c400fa100dc8b9fbc6029eee11b029ec6d90d26ae12808f7cfd03439e8baba3597ffda1cb57d8d0b405a0ceabdd9867c5e2f2ba942d846a0a25c29158bdd7b1a9760fb0805cb07f33e5abc8789cd99799b42d27a7a915cfeb2c6215331e2bb827e5ea0b0919f43456b3a93a4c7b0f47a230edcfb10061a58f621be11d27e127c2223a3286d2454ef0677303cae301ddc1ad1571a37185ffac6f91d01f814c348f4f1b2d0c2622fcbdddc947de4cf2c7c4165280b9602edd5a49132983e2b74e58e673b2b2c3d45f127aa567291b8c2a649fd05e862a2ac828dea5560a03a6b1b3f0d6881ecf170de2499f407f2c89fb5d3b94b04ec5bccecce1511f1cafd72aeca1875191a80dd0ddff8da6a1f92858730e9003becb6405dfc01ffa74aa911e028cf6ab567fb052c5ca34f7b88f05e75c954836cdea7bac44c7e8b48a6bb3af1055062b0fef136eeb0f94781d6a1712b041a66862264ee82acbfb58b6459baf7a0faac8731a6d66448c192c3d523187684e76fcbc4d0db2493ef7e7d94f29a696b5a125282aa6dd2ffcb64640113131bbc0132a9f9dd065556aff5a67505e060c221efac5649d3d7d40dec119efce1875f37598ed87cc6554de5c6940aa5ebca8f211ab00914ed5e5b556321c6a5b94964243ca7309a012e0e56d2641f5f1fe4595e3bbc6e3096365383ff71d67d54adf5afdbe560dfe415a56c6a79cda59cec00de606e55164438b057408a21c32c9068e40cdb5bb2b3ee9efbef37e1bf91eae1c4b898a322446323c441e3ecbc4766831cf22cc5c4918808e8c341195a061b21759cb5677cba948af35af41150d8fd0217b015ccc8c4b7195af78cbd5fd6452bfe3a644edc50b4953badc73b9e46289873659daf3a9e96348d0b8b8e8f68a0766ef4254951ec1b7e90da2c571b7ee8988703652ac95b002f28e0f0318c2dba8cb719486501c034a013377f640e8f7bb3a49c6a3da34886ae05511df45a7f6fd5fff7fb1e1bc2319fe19a8e550f101ec95c2c2ab6137de3701967359fd921db7d175ca9db857917954e8370943d3b2ac5a06872d4ce2b6d2f7085f78699c659afb870ae57809bb1f249da4f48fa11de5128da067132ebe8c9f2ef7ea5a6b8ab07940f390891b3eb98e56e70f0b455ebe7e7ad2b4b4fa4c25d7934f22e57c77663ebaeef2e36a2b611fce0c619a90fd9d46c7a8911345988a99cf525f193ffa3057730da9699c6a4bfe3c5171f32e7073e3c3a171a9f3a5cb684e2e8705d8e6ef7f328cd88b466fb4983f8847becf52204f9cbc2ccf416289a09d980e7921c8448fb47f25661b80c0976aac791b2a731d4e33d3bad53947cf4659eabd92f062076502bce011417814830c926411cc1044745cbbccbe94056110e5f2f80ef688b78ebaebec523f67dbee48d7858b2f4eddcbfb15676d1eadfc79ae4f88674ae0d4cb55cbebca8960f6b1b8214e478211580f937591b1de5e9a7b8ede4e524c4910f6bd8d31b5e81474e2d14b6245ef02cdf344b4fc319bfc2326b598dd01098af3a13a40b5be17608565ceb0b7f82f5cd264fd11fbf025c48228c76be6ba69510b844dadf9f556d19dfea2726e91e24688702528c9d5a8855a09f2ba6d6b12dc8dbf6d4dd495ef25e210868df94c7c4018bfa2ffe921a4c6fd41cc501ee71f81697a1bf234f8788a12bf4fdfad1b08f1eac091104bb2b28c16700f3582777f7d3300f578c180e0829b8923cda3a1f57aea3dbeddb08afba5c0e43cc57b5a9bd37633b6b050ea804cee6fb3ab64b0fd801127c40d988102415969fd4cef4767d71a4f5f8165847168ae30f0a590705f051a1e91f9a62052f4404cc39867f63d8071588e44574dd4f85cb324732f405438dfd3b869ef699420160a562b49f562a6d343bee16d54c315500b5ebedcb0b4b6e5fa28678c9774ea578dc4461a535dc9585a6ee28905ac45e920cdbcfb88d74f649924b4c028b4e270ccf68dccda1c92bfc863b5b2e4136114b0f001c6b2c9d05b07912101cee215fc755fa97276c3e27fd2ad95e2534d06e6cc4e2debafe5bdc83122ad057a900324e111aff8ed1538495dcd3b7ae81cfd8b52c18029b1e7f360f6a16621b526abeaeab8aad37b88e4f91dca9669f7f9af3d006d83834aadbc2312f0e380924d09ec8c08c22485784210c5a6ea74b302c3d9c416766719bb84264d231a579ecb41af081aae3881d3666a1ddb720ae79966774ddf27a9330681f4ce145b03eb53360842a61d8225c80bc799bea5bb2ed06f0f5ee1dbb778444071ce58254f8b01bf8fff5ae726269189813bc6143116f86a9c10af138e9d65b6d8ebcf0094686347c077fe1b0f47d1e8452127566aa93c28c5421759d3bbdcea86047c60e74ee03688ca49cd03cf3dbd71954846df192f677acb2617a1a1d296467ce4a9860818d02eae3834e75501f14216de1ba35b4b2d01c6538041da339ea86e869610226e76067e0d2eec3c8e75b2ce4476fc11da08bb7177b1f74fbca0a49c1cb3b80dbdf6f10a518c6ba3cc17363f0424dbf91c5fc93c6bb6de2c776202a1d5f29c26401833e8f999ede796ef841bc6e49a372067cad2d6bd502dfbbea429fa8bfc058d594bb4125a8245077db5ab7e6445833841a6bced0bcd80a6d9328ca75627be7029d90caad1231e505e90d150bdaac1f4b0ef80a4eb58852baba712346c34830a38b75fa9160acb1dd70e6730264e6960bffbe5eb2d5c6380b0bbfe8b16bffeca52331c6d604f3562af2d44e6e9b4aa633041e688257eb78623b79afdd5de540486f53f12406bfe6a2af0b55f6dae334d01f0fb6a33bcbfa5658a66ca9f43573ebbf9f8531f5b5d6df3660c23387b23838227f780d3e1b50ce97c43ef4544de26d77d1b1ae928ba313b735131ff060614a4c33f373d3c5060954858ec0a9f6bfc4041dbeb63a3f364c0c0d0dc4fdab924cc6af569234ad5daf7e62682e799c0e30b51837da939d811f4db6ec06383f6b5ca59b83795a52f012b8fa68efff7938d25cdae7e119045c2b69fd9761b0a2a8149edef8312ebdea277acb3eba75b7602a3b90a2edc6c2cec96c882853e54cdea82869687524a114d11a522c23312a1a06902a2026d53256e484a7aa447458f6dd9b115f725d99376d47e856a3674b66af22f9bceaf4c0f40075e7dae2eecd6bea097a452a0ddd0b54316bfb5f4d6117a0e79ef177a7b8ea8eb87b1bc3549808004fd115126db3748f3f8e26d0a865b590b4c71c583a31f737e7fc58acf5f7446a1a2a332bb8afa5078b857fab8071fd64353fb741f923d41a2ab26739066ea99fd07945b2d3ed7920d2e4667ec72482f2a4a7723555fd84b8cc62a9c7ef974c99f7cc83574f8f579b591f722797140eda6d4ab44a2387246376b94cb69f813f2566139645c3e08a8c55774cc13424a42b532e78871f982ce2792729786df7cddcc758fc77f0967ea91bfc30e8243e127353698f10a98528e03bc248708b74ae34625efadd0eef9fea1d4f2d1cc06b5b946e65ce61a4329f106a5ce4314f768675973d486263577bbe71a92eae3b2f70f750040bb5d6cfba8c3aa46e5035d36d175f4641c74ddfc3f64e912c77c3313d3b4206b71a05c3ee77638decc22b5ea8c9af2d597433a29422a197c9a692363fa3be0b4e49dbaf525412d18c5a9eb5520c73fbd2e30df37a2cc0976c6b7e8a5a693f65ab4b68aaccaf819527fe20ff5cb5722ca4b050b6cc1c7d0b66fe15d204b46bb96b25d2f2a31ed07c3f6297f85e5b0e50ce880f399078f90589e6ad5f45433324d9d0850a2c8689533c4a6cc6616adaa9b0ad347d479b44e155a3147c3872f50f33801571b5cc5007f269178f8ac81ee6e2e96399a7d1da94b247f9b456fb1f5a3013e15b0b09d7b4a0edcf687ffa636696ed1f9e6a19db990769f8af90c2164a1b1f353220d83699fd13fb09d79950c8793066eb90c4ee66d7af7a4fd9fd317f7d170994c448adf8e5a0d"}]}, 0x1274}, 0x1, 0x0, 0x0, 0x41}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a", 0x2f}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r8, @ANYBLOB="0000000000000000050021000000000008000d"], 0x30}}, 0x0) 1.582912665s ago: executing program 4 (id=1934): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd6c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1}}, 0x1c}}, 0x24048800) 1.582456175s ago: executing program 2 (id=1935): r0 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000040), 0xc) (async) write(r2, &(0x7f0000002100)="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", 0x1000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001240)=ANY=[@ANYBLOB="1400000041563c6f8813e9a48b7d1e8483ac83a6e6b6dd4b066f644cf4c57a10aa0e0bfaeb08e70994378cc44c9abec58fefc0eed77a8afccf4b0bbb782d6b9b7e6684b74b14ea5481f13f061372", @ANYRES16=r4, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044001}, 0x2000000) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}]}, 0x34}}, 0x2404c810) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r11, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) r12 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000f80)=0x10, 0x80000) getsockopt$sock_buf(r12, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0) r13 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0xeb, 0x8, 0x700000, 0x17, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @private1, 0x40, 0x7800, 0x5, 0x9}}) 1.464749607s ago: executing program 4 (id=1936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c0002800500010000000000300003802c00018014000300fe9000000000000000000000000000bb14000400fe8000000000000000000000000000aa04000180"], 0x6c}}, 0x0) getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)}, {&(0x7f0000000340)="85a1e7169662533a840471278673319a58e3d46b7332c590a6e4417b3a8c2aa0fa14f1a9fc02d1b7d70d8596722a003fa2ac5f7549675b1ae6aa0ee0f9fdcd900bbc2fc6326718a73e64ae843c1e9c0c1115167bcfd1d47cdaf013d3e729a03a7977473bc9aed2e11927f7e1d509e3becba039e6a7f57ff801a39a13539f767e8da28aeccfa9d211770d5240d320da8981c6387d575bd95d9f03232bd63b9839240af5e80b6529f62f97db8a0eb3e6c8addb17e34df114964a0bd18c22d3a903fbb98a1bea3150a0876e67461e65cd26411fbbbbc5aed18251e62e6d61cfe03f14434620e739a0", 0xe7}], 0x2}, 0xc004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500008400000000fd019078ac1e0001ac1414aa03059078000500014a2406860067fff9072f1000e0000001640101024422f22144147f83ac1414aa000000006401010200000006833bf7ac1414bbe000000264010100e0000002e0000001ac1414354418b3d0000000020000000d0000000880000001ffffffff830371440446100000a9b12bc510182010972cf26ab1e5400f588997daeb35545ae20a50bca7f65e6776681cc3fd3a7a6ea8beaf"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080d0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.410221671s ago: executing program 2 (id=1937): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept4$packet(r0, 0x0, 0x0, 0x80000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000200), 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x27, 0x3, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x5, 0xd, 0x1}]}, 0xfffffed5}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x110, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="161b88a0abe1", @rand_addr=0x64010100, @rand_addr=0x64010100, 0xb}}}, {{@arp={@broadcast, @local, 0xff000000, 0xffffff00, 0x9, 0x1, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0xc9b, 0x8000, 0x73b9, 0x83, 0xffff, 0x1, 'netdevsim0\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xffff, 0x8}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "98f9252159f91356764c2d19396f335ff4bbca1dd61c29883424a806a651"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000100039042300"/20, @ANYRES32=0x0, @ANYBLOB="0000000008000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000380), 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r10, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcff5, 0x8001, 0xffffffffffffffff, 0x5, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x20000060) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r12, 0x3}, 0xc) 1.308107783s ago: executing program 0 (id=1938): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x110) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x51}, 0x2a) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f0000fee000)=0x3fa, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001086970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.055188363s ago: executing program 4 (id=1939): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x98, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xf}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1fd0fa85e357e77d54e647089b07ec2819df01846ed2079f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1f36a8d07cc10419709e9d50291f445d1576a857ef0d2f96"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x10}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x98}}, 0x4004) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x200, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xbc, 0x3, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb1, 0x2, "b268e2baa9760ab91b71a6a0d2f3b9af663ce4b75ecf30d9d5c97cc091bae9ce7ed6cb7589a482352faa6b5862a2ad04c944f743eca2ea64b602c23b366b58507c7057583fb6b319e37bfaafaa44b1c858eccbcec07eaa15926ceae2ad1b127fea24bd19ffe2de74e6145e03773f6a7df1bd23acf64229680098d0ffcdcb892777dec3d66fc2ee2d1aad418b248e35ae048e4805651acb674cd4007de6af0bc38b0f07d997d4a0028c20b8edc6"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x24, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe, 0x1, "f85df3d0703eb83ac5a6"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xa}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf4, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x66, 0x2, "fdb9715b85fb336d6e6a487ef2fa775f4e44053cd8ab07d70b91de903b9916254d0e460a6053ab9db9314b60221bb45dd5ee3595ebd4dbec6722d323d267593ce40d7543c5ab8269850fcde9aaf2a313daee21812c0cc88170280aeccfc3801e0d90"}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x80, 0x1, "97d5ce87ddf0fc4b2077b0e632546d90fdcc3d2e01d1496a03d41052894ece936177bd284bf739073e6d21bdf4fd099f545fa105ff7daf94259e43b407c02c16fe828d7ee05d0a0d8bb87d5ada80100b7bfa016366b4c2c1029a01d9c28db44f2c96a97067371721b7ff3b9ca8aab3000dbf45726d8045682b3669e8"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x200}}, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0xfffffffffffffede) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) 914.752438ms ago: executing program 0 (id=1940): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip_vti0\x00', 0x4}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip_vti0\x00', 0x4}, 0x18) 852.06112ms ago: executing program 4 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r6, 0x30}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x21000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000002c0)={'syz_tun\x00', {0x2, 0x0, @remote}}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}}, 0x48000) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r8, 0x0, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc815}, 0x20000000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r11, 0x1, 0x0, 0x0, {0x34}}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r9, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) 761.78533ms ago: executing program 2 (id=1942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) (async, rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) sendmmsg$inet(r2, &(0x7f0000001f80)=[{{&(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001900)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000580)="3dd705714f67e79066f44d30d99ce3b6835f31de2795c4931500ee91dd8bd3f532d8fe4ef5e217d359d3c768761194a5feedfb3d8c556c7bc0af2ae574da85678d63b5b8e3dad33dc1e37926854bfe5fb65f009dac932985e7f5ae0ed33524124244f18af02674518bf8dc973f8b319779d4761129684109c055de62c929285b3fc1f4b2bf82c82ea5fec021d082b1c93d3ac5927526873de117852a74dc07c893973e414f102851c6da2d9c4657dfb38f0814ad95cad00d91d3ea6667d26ab66b6291564b8d68f8e3e9706575cc9277cf756fe7", 0xd4}, {&(0x7f00000017c0)="5cee6d4292c5b4c96e6e0a9d2b18063f1b7c291c601449265aa667cfc3c1761e3e14ade86c73f3a66a295c3928b2cd5b33e9ad1b289453847ee7915f2afb1c483c78e2ed0ca966f9624135446b7061715eb21378a7cd6b938f433093f866ec02f1671b8ef9bfce4088fb8cc26e236fa45738dca2315ab51f81f6d7422cb30bc58e774c4cec60d15ab3848997a0f8e40ae05efb53bd16cd", 0x97}, {&(0x7f0000001880)="1c2e92c1105190e27584f10503006fe7441d62bd551314adcc6c2a5e689957c6e5be190bdc1b4aceb090280aac7e007a7d7dda5ec24cbcf359dfe6e981629ef4f9a371747d10c85cbef57bc8961578a629e455156d78", 0x56}], 0x4, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}, {{&(0x7f0000001980)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000019c0)="b8ba6e197c9fd42664fbfa68f7e6cbf54ad0ee2d47c5722f098923955a4771bf8c8f5070fad3ea50830a5cdd09b6746dfb99e79af771fddb35ca50e688be2f35f173a7833860692796676441b84e83b0c1f8c8dc667b7e11a8be83ed8250fe4135eb9ee159f9f9bc5e2175f584b6a07a57aa76bc90895c58fc4991949b9b2b83c47d25884488dd12b667be36bc7820e14c8c3148e9c2e99f556a2474d9e4aa64aaddfa029aa8fe5de381aab829d0d4c3d8b1e005e3cf26bb7b9da1f4df19dd2d48d71674090c35607a1b2a6e874833b1a167b31c0e93a5e3e5849498e8ce9cc038553507fa2d8f4d1c3b0ebd5677380300420f0ced", 0xf5}], 0x1}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001b40)="cf3a28527ace2c13247be22e4a2144326c64a64a0a9148ada622e616460dfb557a44b61eed6667d844a9f3f722dbb03e4ce2d956ea46029a5ddd600fb32c6f41724b1d8cb27ee4ad9d7884385b4da7ce73c4c1806a80d3cbaccc220d1102c022e5e06c80f90bc065ac29a15e9187c42355f586d44350b7a04e95803ec9410e71eeb82644addcd8140d70d0268c81a6c9135721d820a71a2a3459f3599cdc790619334dd01077ca4bc5f2a49dc94322a38b1f51a5195c8108b165090c952565c6fefda851acb96d902a7a3538e8cfbc90bff71b130e7968a62f055e7e81d3d5e9c1117745a4e979b111442a5b", 0xec}, {&(0x7f0000001c40)="15d46b7ff863d16a24056f2aa077a6445bc94e76acb14e3f8eea34952bac0736d6694c158715c78a1f6c0461ccb0adbf382c10d61ac71b5aa46b9b9eafac5c86a17e5f99cb8c661389b78a8cb731c7aa192c619207e77eebaf9a8de4e5a162c0e3d74f9f637be38bda65", 0x6a}, {&(0x7f0000001cc0)="b5fa21cd336fbf2a77514cc9157cbb5054d674f02b6f0401da417d7ff13c791258647214a7605264defac5249be77d1a353b3eeaa6b8080ccc6c0b0d058118545fecebcd607abb62906f2acbec2c21d0c0185a8baed8b63b5261760c80b19085f7c33cdf02ac944729d0fcfc605bdcc69c1e82bdc3478f3dec48e4f155a79fbd7c71accf4727b651cf869a49f2bb36a76743bc743f2b35eb1f8894dd5b", 0x9d}, {&(0x7f0000001d80)="f6e006c7f85615382234a62dfcb64f308447cc00d766ef6a8bca2c6dd7c14a0a34b83d96508576830f5dfa3bc1", 0x2d}, {&(0x7f0000001dc0)="da4352a31db1a46e0396b71addc1d0a6aadaebd3beba6e5721039f1689fa9998a5c6ab3976cd36c5fca6b88f1cba8e6d1bfd4e8f1e00a11932a8f7b056488630bef92d8d32d9b9cabcc0fff2ecfc93015d502bef34e18ef2684119c129e5339cee09a3bef681b73daae0942302fbf73147a47db135c344ba8ab119a88589", 0x7e}, {&(0x7f0000001e40)="07ba5e9221fa26e3643ad7970e3a33d2813a406b1b58b04613c62335220f220dbbe792d48880d898e1704a92e19aa507aa8f7075e98c3c19c45cf26226ce2c3f233bc02768ffd7f8eab1cea3e615d283e149d6a78dfc4663ead45acfff8d0970188391e74afb2e94a33c579306c2e455e90dcbfd80b89c23f95b56e70cfa33d9f149fc8e6c9885fd7703294020523851b02d13b495f749577c47c95f071c08ae14ef", 0xa2}], 0x6}}], 0x3, 0x44084) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000240)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004f099efde0000000100000080000000b6b9d9fc76137e26e2b959cedd1f8fe2e29e5a5198b1b29e5a8fa77e80c34a620bbf197fba30e8752b6f4369d71e19b35eb2eb16bb142a1b8020d40f05aceda12984ef2945f20fea61fd7ca3a7c1cad334cf", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="05000000010000000300"/28], 0x50) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x18c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER={0x150, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb584}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @mcast2, 0x3457}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffff2037, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa857}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x98ec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xe0000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20048481}, 0x8025) 693.709985ms ago: executing program 0 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x894) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70ad2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x710ef, 0x60583}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}}, 0x24008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x894) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70ad2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x710ef, 0x60583}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x3c}}, 0x24008000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) unshare(0x22020400) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (async) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) (async) 584.211741ms ago: executing program 4 (id=1944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) 508.098746ms ago: executing program 3 (id=1945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x803}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000400000000200000060000480240001800b000100736f636b65740000140002800800024000000003080001400000000228000180080001006e0308000240000000020800014000000001100001800b00010064796e73657400000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/180], 0xb4}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x484280, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x319) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$inet(0x2, 0x2, 0x0) r6 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x1a, 0x7, 0x1}, 0x2c) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1}, 0x840) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) 448.189831ms ago: executing program 2 (id=1946): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)="da02e0929db59d75553d26c696d90e4054549f85a1451da47072bcdb2e27d2917aec1fa8b39ef26bea1c75480c27fbe376dcc6965f92c8ccb83789f40a80bcb123a70adb75b978d08a793cd0e80be25e9cd3756f30799b308d15e0f193d191c9d3e900110e2416fb88dfd5aa261dfd3f1b4dcdc255461e538c38c841ce9909aba55dcbc152afdd4e9de5fa274f23492bb8e2cab755e02983b8772dfeed2cfee9fab687c674aaf05c60524965d42425e091452140bda00b29a7376f89328921050dc30faad301d9c86d88ad8aa00d687011d63a7144af28936c1aea5b9846d0b5a64564bd5e0681df3133b399bf2f3085351e5047a6906099fc8b98ff67baf10926f60e60676d8bac45696f563d9f3dd773f20babf9fd763c64cbf95d97707c3ae8615d025b22d1ce3a401c9e85b6dfd7befead05c348df9ddfb883459867c6426089524ff312c819d15e2d5cc800b26f90c7a034163521af054536debb192fe03715c5a7d0c73cccf70057bc677ac31014ff2a2462883cd40d80a3b8a830aed6d95448931082e9e2e6ef9e010c9b607223edb7e09492a0ac95d8f6b0b1134db18eea2b47a33a288dc27d8dcc417b77ab724a6b15b3369555660600f639c0495e25d65d22213e88917fde8ed947264c33f5fda448a450c68e2cca80a31421cc218f3aeb7234407d8137e87296bde3c010b1bcb9ba72696ceb5c63b48f03b907e2e8238132864e8a5c848627fddeef082ab85ac1e0c02d7f4111b195ce5d5f4439bcecda48f46738e427157817d5920d8484b91931f53b8d27f46511fa103235566bc09d38d1ccb2171710264f2e62d4eb5a90eb35d4eace763ef30141a89d8d8d71705a3eeab3aa76ed2c0bcdb8ca598334d79a66edee6cac3eb4db85e3390b3dfc33a8dec255f326f182c8afdfa31424b39feba825d94ea2196fe4a982c84d841a2ec92c990c622b25d1a9dfbb9371ea8404595cc03e6bb5a3a26f209dd2454a94735b7a3aca311e343bb02613370065acf299b3683f9214c948205d7350d2f291c0bef6f7829f637326f1cfc75e4c85035af140535dc436f864e75fc2bbcdbbc639822d6463c5cc3da6c888b4289998280a633ed291783193f3105a8600f415edc80595e199f6edc9be3c36dbc5cf550ff65d1ff81cfba4fe1170105da548b3cae9767737761bbe5ba8ffd02a41b76a75bc0743c83265aea2b0108d0a1f6bfae268f053a3609714e0ad4a3ee1e67501807d1c533b61f00e42e78aa33e340541e492d9f589bfbda7ec5b53603cc211ca3ca9396b27a2f2d2df75c86017a6e674ae05efdebbeef21f0147cbaca93437de4cba62df61babc68715cb065f8eb74a9ff4aac2a23fd0a62b5fb5ed69a60e25a49be97bd02769e3f9ed8f35956c10dd9b9f585a93552227804684a2cf9d3c3f5e048a05388982e343c6ad7a3e21410db6f2fa1947b7beb86b4853128db3a664006324e3564fab82cd33d9c0149fd87be6f852c857d5a23f71022cc5880d333e9129110a9e6a82822b749625157a7e75e90fb699260769e328d71a82ef41eb5fa7083a3e9e0a46177210f3802893224a08df6ef8e92538fe935caadef7c12492455a349b08022a1a8c6757ca79d262031ed5ac610bb74451823bbfe5f364bb98afafec4ce3116e7b20cfd56639272197d8bd9e20a37d9b90ae305c5f6c3eb9140049a3ac3c9896530130288744a36c2a94ea6f84c930b31aa957c29682f526ea9809ab0991990a9491791814210a69edf8df29d5a12f69d90c26788d3fc6ae6c079a49dab8283f43ce7e812ccf54658de24a9753960eac35405e549933754ff94e0c88b62d3e7318f2923a5cefb2184fbb361ad88ff9618ed678464af38496333b1083995c50f6fed40307f40a952c5c4a9d187082b850b9c48a91929afa32ceab9813cbcf024ad969775d16beac1d97c33f2b1084ca6719f1de998ec2b23cb4cabf135c1200b8523dc462434ef712737ec5a392b4a770f6b6702ab576d6d7c30284b7abe2db619442a94cb5b057eff83747175fc454cd4425b0bce81a44adc8e3a931dab3d9d885cbbf492cf152fe673a9f5eddd23609e45de5d406a5bc03842276bf933ad831a74911f1f679d3493533b59903a59d63795a56af2be052271da89c75ec4fd05c97c058ac89f79e3df94c56983589a74a3f583b395bb012d24a4988788d7f41d5334b0b64b427eabfdffde8cf3af5fdd4ae78b88fa402fde7bceba4b1fafff9ed5b7c55bddba7046231d2837b26ee7e88774558a5d78136c48a60d4a2410a05ab94807204cfc3ebf7f9c1a5a16b738dbab611cc89eaca55101e0af8128150205d244ddbaeae1eab2e23bd2d877b21c43039645a99ea507235b3ac9fc041fd37399c7b5ca5302ff54cc0c2b91ddda35cbe9a7b5d2c2bf7abb796f06185b56a0a7c4f652930e57b3c9eb69852921afffcc86be2768e40fe25f533b17f3a56e00c50964ba5a05de907bf1259ded7bb5a8f39c3e2f8f7f56b356be8e510028c15040894492fbcd84301e9ffcb36bd1959eb610ac82ca808b8a0b24e42e002d4de2ffa5b7f70c28e0f2c3d6734a90d31be326c7e8b1da1e7a94ec557e998f260c40082761780cca0ae7cdbd09c057a532a69d2e971f4d2fda2557069cc2c6e334f2dc246f5d675652bf6b4b6c4f838484fb64aebf2e51b384513d545f65a6bce99e696bd484c19799ce294cb4425c0a28ab1bf23ac84169232a4de593430b6d3cc18c3043c6c4e947f8cde7040b510530a4df0fe270cff302a62c3f858e674ecdfee262801c863dac815437ac62b720a8fd1146e2dfea80397b7f15965bbaeb41ba84ef63044c9dd48109973f96501ef0e51031706665b1724c0cab197117aca86bc137c6d2fbeb85d4b3d93200c7fc6d0e2583e44f607c72cf0cacd990d0160f332713cba1159a96ba717fcdd91bde51ad81448315387783a02a05fdde44c4819ffe9a5808d142bcaf283f90d82aca7fe2779ecccc6acbcf2d58a846d01e1ca2386f1a3321e7eca8bd05eccc06451f7da996d1a823f2235780e310e3f3d75a78a14e995f75799331304f3c33eb58561cc7e951f65d7e02c67849f70600610c0ac780d3b796a5fcda694d6a0ecaf6795524490086cd233dfdb44073f54e2f61a58a5e271602bdcb31c226c859e0a41e86a9aa437e49bb33e2fd8234e62e8acc22adcf55249ccacb6aeb5dbae76fd26c0785bd1a340da3f1a4f7dc44603c9a70f2637fd7e63aba68b1c61819d6aa4ef2e1745568ed9894bb66404e22e04a5c1d9d15d21bd5785db82f3bba763103b18015dbb9e63b3485257cf60ead97c07f89de16b7e5fedd1a1707fe9150a2eb5af96d753b3ccae88827f6126eb7919100ec1ac06cbb30c89aeffbedcd555cb2a2b4bb59481b9dfea27377b4e1ea1acc3392027c4f4dc9b44bd3161b57575a74c7f33e9f69374a3a94f4271e85cdd6c312649625ef4ac9032789e9943553b85ea594b2a8f517f205c57f22316fea2cd5ad2a6b3149b85dee2476fd69ffadc278d2b45c0a391d5567b6411d6f16852dff9d8ebdf0147ec840e054010c4a37764239b3783ea00a1e6605eef6b8d1f0fdf3dc0e2e94b501e1f9f7eae972dfe14fb241cb14d1726147b52ebc0ede069ea73df91cf0c4d6d58573d6413cba78fa85986b041baf5cb4fbbff89634ae5151d1eceef33a9acb1dea87d159a6868d4d43e7df706fef48284c648f8d6314aaabc1ba9702652eac010ec6d40dfca9eca1b7588e6efa4043510b91440cbf089aa6e52cc9b1e7e26c14bdb299392ee933afc436ab844083c0d263022bce73412054369f3949923c39c13f1c7d50a3505e16a5018d91470dc3bb1634cef7b6413d7c23d77b48cc21c22939daf26d3c271d3cf172f42ad40203f1db50127cf7e079e2a19ad34b56aba39992cffbe7726cab4a718656b955a6410bdb4642a7cd4b035037d84f447af81157a0c363df574423e0bbf46c323378953cce0537f59e2ae5d4307f13e75572f889640581607f34a65f7e4c5c7fc59a07541e40a7b83fbeee5e2910658eb2ea058050c58b6382916939c0a358f678f8b5002b8e79765083caee8ade57d1d3eec62e6306cc41547c2e805610ac7976ba97999aa2813a4d4acccdec14762c83cc5c18c9694a74487a7fcca996adde8da1c8a74842d7162f3c96ca7043c08a9bf769bfb07e1a33cd0591c3409098a6becd7804aac74373631207efa7a6eda851b3c9f483b024cae58396992fc58c36a1143d5f28dc4d6a221e1238082405f7a7234fcda6272329974e38d457698d12eabfe3edd327c32305f739820d83eaecde44f10a0e03d02b3c029ebcafdc6c01ec7010045d65438511c72f4fb5681ed8647d30f22bf37b345e9dd8a84d033370f18e904ef11a479fcf96bad45f1bda1a6fda19cf94ff95a8c489f665a162c3ddcc52f523e755b3821b5481662c9db2878a2ef996fa227863e82f641aa0cba96ca2464f0ee491c3db1f5a1ad5be4f2c9d3d4c8f1c0d70e3bef4c5455165571991dbe08057d8c2007e239acc50b8988ae77958bfb32f1a9b7e9cbd8adab24fb42f79e31fb624400b7e4877b0537dd892fdd56bcf86ca7ed5401c50b3bf473615e8e89504d586c8bde3d3802a7bc6f87674180e28fa12c1167b5355cdd66fb4a9457a68f6b2d0d2f5976ab8a36e7390b3204e2481220950776773630ddf839a", 0xd01}, {0x0}, {&(0x7f0000000440)}], 0x5, 0x6) (async) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)="7f", 0x1}, {&(0x7f0000001300)="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", 0xd01}, {0x0}, {&(0x7f0000000440)}], 0x5, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) (async) write(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="060000e300000000c0fcdebcaf9ec23000000000e49e1a792d8768fa08f1460a0a3a443fa3fa7698af55472b2fe978a7b17b388dfd78f9c6aad9ac33b7ccf5a48bd436449f9d22b2dce342a634ea746fcbc936d2144b32d7d4bc2404181570fdbe39a14e994bf710bcbcd9152f6f0af9951948d9dea487edbf7144485f6b025d193d7e7ce632e291b83352376d61aaf1891b76d40e2367c703636b90b73ff17c3cd696369d6990cdef57122ecefb30", @ANYRES32, @ANYRES32, @ANYBLOB="02000000010000000500"/28], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000080)={0x57}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24004000) ppoll(&(0x7f0000000880)=[{r3, 0x2208}, {r6, 0x91}], 0x2, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000900), 0x8) (async) ppoll(&(0x7f0000000880)=[{r3, 0x2208}, {r6, 0x91}], 0x2, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000900), 0x8) close(r8) (async) close(r8) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r10, 0x10e, 0x6, &(0x7f0000000940)={0x8, 0x1, 0xbb, 0xffff1216}, 0x10) sendto$unix(r6, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) (async) sendto$unix(r6, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$inet(r6, &(0x7f00000006c0)={&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000240)="75b18f665ceafbd113ba8c0ee382212cdb970a22d16ce64e375debe3560e041fa0cd124a858c925a66fda85f885ad25d6adb90f7deb12b29ab70b3d5654ff654d4797bd65a44fbefd2eba4e636e0ed5fc424e17ce62d464da9d6c59717b5c1fe69667bd7ac421f80898da0aa5a907b9008f45f1ff26db04237f1c6fbda88aacaac03f47e5016a0a2cee1c787d1eeefacb1ddf9c4f0ae44597815e26f249fefb2c361716be37c62ae14cb6e879c216536617f158c7f0092", 0xb7}, {&(0x7f0000000300)="0629c3c699aef3243fec273bad", 0xd}, {&(0x7f0000000340)="06e377d3ac847713a355eb55e23d40d9a88180868ffa242eb2b1ac25a17648a0a515bb7d07875fe03cdac9dc5f3fa80655add9f86ebfc194dce2846905f4b738ca3bf02c51a9297c0a4dff0757a1c0cc130def276dd77059d16b0bfc748b64cce962c70af4f5a29353e18b3c81b8314bbb31662c795abb5ab36842ef6c72f9cae2879f62ada67ede6dfc464db4cfd645b7cb29c1bc7e03f97f484f106e32b4db97446780db3b970fa1d9dafde457355073d0f7f2b087017b1622f12605dce0f443cf0f5530", 0xc5}, {&(0x7f0000000440)="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", 0xfe}, {&(0x7f0000000540)="f4d31d50b04d94caa91e05aa0471c6d4235068f3d8a861c5e8f7f1fa7dd2d2a4013b20426b64f4e8b17aaec5066e18aff4a173c6c9c3a87073ed4c5790af931bd02680de210227f8d42f003d9434b00d751035d8f94cb3c7064146bcd7a69288d074a198be0f12567fd6f2d190c562378a34", 0x72}, {&(0x7f00000005c0)="b715c70f7f30373bb0bfb9b7461bbd3ef180d3834c6c977d75cb44800a233e90162e7b38fc9a950c33390e048eb0b3b39acbb87f5d5aa0990857cb3454b5216e342b8495dae5041d18099df79bcfd5606a83c552ee55481c1b6c4a968369b0642bbb3abe9fdf77439f625b44d23ee4df949c7042c2ba235ef1e779274c29c0c372780285f84761420e5c8be563e72689960f0f1629a4250b7515fab5e3408f497b2f1b690bccac28e2dfc31b710438c91e5f2cefa9b36ffe76511bf411aa52f746fb", 0xc2}], 0x6}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) 162.37514ms ago: executing program 4 (id=1947): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r6, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f600000000"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000f80)=0x10, 0x80000) getsockopt$sock_buf(r10, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0) r11 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0xeb, 0x8, 0x700000, 0x17, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @private1, 0x40, 0x7800, 0x5, 0x9}}) 161.565685ms ago: executing program 2 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x79, 0x6) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x1, 0x0, r1, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}}}}}}, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) (async) socket$inet6(0xa, 0x3, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000140003800c000080080003400000000204000080140000001000010000000000000000000084000a76ce"], 0xc4}}, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000200)={&(0x7f0000000080), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x6, 0x400, 0x9, {0x0, 0xea60}, {r5, r6/1000+10000}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "ac5b0d2227c40450"}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000012) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x44004) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x20004) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 0s ago: executing program 2 (id=1949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c0002800500010000000000300003802c00018014000300fe9000000000000000000000000000bb14000400fe8000000000000000000000000000aa04000180"], 0x6c}}, 0x0) getsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="85a1e7169662533a840471278673319a58e3d46b7332c590a6e4417b3a8c2aa0fa14f1a9fc02d1b7d70d8596722a003fa2ac5f7549675b1ae6aa0ee0f9fdcd900bbc2fc6326718a73e64ae843c1e9c0c1115167bcfd1d47cdaf013d3e729a03a7977473bc9aed2e11927f7e1d509e3becba039e6a7f57ff801a39a13539f767e8da28aeccfa9d211770d5240d320da8981c6387d575bd95d9f03232bd63b9839240af5e80b6529f62f97db8a0eb3e6c8addb17e34df114964a0bd18c22d3a903fbb98a1bea3150a0876e67461e65cd26411fbbbbc5aed18251e62e6d61cfe03f14434620e739a040", 0xe8}], 0x1}, 0xc004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', 0xffffffffffffffff, 0x0, 0xf}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500008400000000fd019078ac1e0001ac1414aa03059078000500014a2406860067fff9072f1000e0000001640101024422f22144147f83ac1414aa000000006401010200000006833bf7ac1414bbe000000264010100e0000002e0000001ac1414354418b3d0000000020000000d0000000880000001ffffffff830371440446100000a9b12bc510182010972cf26ab1e5400f588997daeb35545ae20a50bca7f65e6776681cc3fd3a7a6ea8beaf"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x40080d0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): 140.393002][ T7881] veth0_to_bridge: entered promiscuous mode [ 140.399296][ T7881] bridge_slave_0: entered promiscuous mode [ 140.411701][ T7881] veth1_to_bridge: entered promiscuous mode [ 140.421414][ T7881] bridge_slave_1: entered promiscuous mode [ 140.431080][ T7881] veth0_to_bond: entered promiscuous mode [ 140.440816][ T7881] bond_slave_0: entered promiscuous mode [ 140.455657][ T7881] veth1_to_bond: entered promiscuous mode [ 140.474463][ T7881] bond_slave_1: entered promiscuous mode [ 140.489410][ T7881] veth0_to_team: entered promiscuous mode [ 140.509276][ T7881] team_slave_0: entered promiscuous mode [ 140.519010][ T7881] veth1_to_team: entered promiscuous mode [ 140.525562][ T7881] team_slave_1: entered promiscuous mode [ 140.536055][ T7881] veth0_to_batadv: entered promiscuous mode [ 140.546428][ T7881] batadv_slave_0: entered promiscuous mode [ 140.564172][ T7881] veth1_to_batadv: entered promiscuous mode [ 140.580688][ T7881] batadv_slave_1: entered promiscuous mode [ 140.591535][ T7881] xfrm0: entered promiscuous mode [ 140.621739][ T7881] veth0_to_hsr: entered promiscuous mode [ 140.650779][ T7881] veth1_to_hsr: entered promiscuous mode [ 140.677316][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 140.680845][ T7881] hsr0: entered promiscuous mode [ 140.709814][ T7881] veth1_virt_wifi: entered promiscuous mode [ 140.718850][ T7881] veth0_virt_wifi: entered promiscuous mode [ 140.725482][ T5961] IPVS: starting estimator thread 0... [ 140.727469][ T7881] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 140.786428][ T7881] vlan0: entered promiscuous mode [ 140.791911][ T7881] vlan1: entered promiscuous mode [ 140.807564][ T7881] macvlan0: entered promiscuous mode [ 140.829237][ T7881] macvlan1: entered promiscuous mode [ 140.843119][ T7894] IPVS: using max 28 ests per chain, 67200 per kthread [ 140.844869][ T7881] ipvlan0: entered promiscuous mode [ 140.855934][ T7881] ipvlan1: entered promiscuous mode [ 140.861866][ T7881] macvtap0: entered promiscuous mode [ 140.868413][ T7881] macsec0: entered promiscuous mode [ 140.874222][ T7881] geneve0: entered promiscuous mode [ 140.879783][ T7881] geneve1: entered promiscuous mode [ 140.889010][ T7881] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 140.898051][ T7881] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 140.909188][ T7899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 140.925253][ T7881] geneve2: entered promiscuous mode [ 140.936127][ T7881] netdevsim netdevsim0 eth0: entered promiscuous mode [ 140.949881][ T7881] netdevsim netdevsim0 eth1: entered promiscuous mode [ 140.965780][ T7881] netdevsim netdevsim0 eth2: entered promiscuous mode [ 140.976374][ T7881] netdevsim netdevsim0 eth3: entered promiscuous mode [ 140.986808][ T7881] bond1: entered promiscuous mode [ 140.991970][ T7881] veth3: entered promiscuous mode [ 140.999715][ T7881] veth2: entered promiscuous mode [ 141.006785][ T7881] gretap1: entered promiscuous mode [ 141.016360][ T7881] bond2: entered promiscuous mode [ 141.021674][ T7881] macvlan2: entered promiscuous mode [ 141.028701][ T7881] bond3: entered promiscuous mode [ 141.036280][ T7881] bridge1: entered promiscuous mode [ 141.041724][ T7881] bridge2: entered promiscuous mode [ 141.201324][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 141.281971][ T7909] lo: entered allmulticast mode [ 141.299578][ T7909] tunl0: entered allmulticast mode [ 141.347748][ T7909] gre0: entered allmulticast mode [ 141.363252][ T7909] gretap0: entered allmulticast mode [ 141.369113][ T7909] erspan0: entered allmulticast mode [ 141.382530][ T7909] ip_vti0: entered allmulticast mode [ 141.402611][ T7909] ip6_vti0: entered allmulticast mode [ 141.426196][ T7909] sit0: entered allmulticast mode [ 141.455599][ T7909] ip6tnl0: entered allmulticast mode [ 141.479848][ T7909] ip6gre0: entered allmulticast mode [ 141.510642][ T7909] syz_tun: entered allmulticast mode [ 141.523040][ T7909] ip6gretap0: entered allmulticast mode [ 141.528775][ T7909] bond0: entered allmulticast mode [ 141.587164][ T7909] bond_slave_0: entered allmulticast mode [ 141.626332][ T7909] bond_slave_1: entered allmulticast mode [ 141.635987][ T7909] bridge_slave_1: entered allmulticast mode [ 141.646877][ T7909] dummy0: entered allmulticast mode [ 141.655637][ T7909] nlmon0: entered allmulticast mode [ 141.661434][ T7909] caif0: entered allmulticast mode [ 141.671014][ T7909] batadv0: entered allmulticast mode [ 141.677710][ T7909] vxcan0: entered allmulticast mode [ 141.684184][ T7909] vxcan1: entered allmulticast mode [ 141.689954][ T7909] veth0: entered allmulticast mode [ 141.696005][ T7909] veth1: entered allmulticast mode [ 141.701656][ T7909] wg0: entered allmulticast mode [ 141.707341][ T7909] wg1: entered allmulticast mode [ 141.712989][ T7909] wg2: entered allmulticast mode [ 141.718570][ T7909] veth0_to_bridge: entered allmulticast mode [ 141.725264][ T7909] bridge_slave_0: entered allmulticast mode [ 141.732468][ T7909] veth1_to_bridge: entered allmulticast mode [ 141.749268][ T7909] veth0_to_bond: entered allmulticast mode [ 141.803069][ T7909] veth1_to_bond: entered allmulticast mode [ 141.809290][ T7909] veth0_to_team: entered allmulticast mode [ 141.818355][ T7931] netlink: 'syz.3.506': attribute type 2 has an invalid length. [ 141.839010][ T7909] team_slave_0: entered allmulticast mode [ 141.845411][ T7909] veth1_to_team: entered allmulticast mode [ 141.869784][ T7909] team_slave_1: entered allmulticast mode [ 141.891047][ T7909] veth0_to_batadv: entered allmulticast mode [ 141.899279][ T7909] batadv_slave_0: entered allmulticast mode [ 141.905793][ T7909] veth1_to_batadv: entered allmulticast mode [ 141.916713][ T7909] batadv_slave_1: entered allmulticast mode [ 141.923368][ T7909] xfrm0: entered allmulticast mode [ 141.972949][ T7909] veth0_to_hsr: entered allmulticast mode [ 141.991118][ T7909] hsr_slave_0: entered allmulticast mode [ 141.998271][ T7909] veth1_to_hsr: entered allmulticast mode [ 142.006629][ T7909] hsr_slave_1: entered allmulticast mode [ 142.022617][ T7909] hsr0: entered allmulticast mode [ 142.031947][ T7909] veth1_virt_wifi: entered allmulticast mode [ 142.050172][ T7909] veth0_virt_wifi: entered allmulticast mode [ 142.068557][ T7909] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 142.101142][ T7909] veth1_vlan: entered allmulticast mode [ 142.121634][ T7909] veth0_vlan: entered allmulticast mode [ 142.140623][ T7909] vlan0: entered allmulticast mode [ 142.165857][ T7909] vlan1: entered allmulticast mode [ 142.181496][ T7909] macvlan0: entered allmulticast mode [ 142.208014][ T7909] macvlan1: entered allmulticast mode [ 142.214135][ T7909] ipvlan0: entered allmulticast mode [ 142.219839][ T7909] ipvlan1: entered allmulticast mode [ 142.231548][ T7909] veth1_macvtap: entered allmulticast mode [ 142.238005][ T7909] veth0_macvtap: entered allmulticast mode [ 142.249551][ T7909] macvtap0: entered allmulticast mode [ 142.269873][ T7909] macsec0: entered allmulticast mode [ 142.276246][ T7909] geneve0: entered allmulticast mode [ 142.286474][ T7909] geneve1: entered allmulticast mode [ 142.292558][ T7909] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 142.300450][ T7909] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 142.321114][ T7909] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 142.348660][ T7909] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 142.360249][ T7909] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 142.372456][ T7909] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 142.379985][ T7909] K: entered allmulticast mode [ 142.388875][ T7909] ip6tnl1: entered allmulticast mode [ 142.394794][ T7909] bond1: entered allmulticast mode [ 142.413728][ T7909] bridge0: entered allmulticast mode [ 142.439512][ T7909] veth2: entered allmulticast mode [ 142.449356][ T7909] veth3: entered allmulticast mode [ 142.782415][ T7960] netlink: 'syz.4.518': attribute type 29 has an invalid length. [ 142.813676][ T7960] netlink: 'syz.4.518': attribute type 29 has an invalid length. [ 142.823370][ T7960] netlink: 'syz.4.518': attribute type 29 has an invalid length. [ 142.842228][ T7960] netlink: 'syz.4.518': attribute type 29 has an invalid length. [ 142.987969][ T7970] netlink: 'syz.4.523': attribute type 29 has an invalid length. [ 143.002219][ T7970] netlink: 'syz.4.523': attribute type 29 has an invalid length. [ 143.011949][ T7970] netlink: 'syz.4.523': attribute type 29 has an invalid length. [ 143.160555][ T7977] ipvlan1: entered allmulticast mode [ 143.179490][ T7977] veth0_vlan: entered allmulticast mode [ 144.537549][ T8026] netlink: 'syz.1.542': attribute type 29 has an invalid length. [ 144.561216][ T8026] netlink: 'syz.1.542': attribute type 29 has an invalid length. [ 144.709370][ T8028] dummy0: left allmulticast mode [ 144.725763][ T8028] dummy0: entered allmulticast mode [ 144.742933][ T8028] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.371777][ T8059] netlink: 14 bytes leftover after parsing attributes in process `syz.4.556'. [ 146.396270][ T8095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.574'. [ 146.430603][ T8095] ipvlan1: entered promiscuous mode [ 146.440464][ T8095] ipvlan1: entered allmulticast mode [ 146.460063][ T8095] veth0_vlan: entered allmulticast mode [ 146.496249][ T8095] bridge0: port 3(ipvlan1) entered blocking state [ 146.516390][ T8095] bridge0: port 3(ipvlan1) entered disabled state [ 146.556165][ T8095] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 146.771769][ T8116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.580'. [ 146.949806][ T8126] FAULT_INJECTION: forcing a failure. [ 146.949806][ T8126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.990872][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.0.586 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 146.990899][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.990910][ T8126] Call Trace: [ 146.990918][ T8126] [ 146.990926][ T8126] dump_stack_lvl+0x189/0x250 [ 146.990959][ T8126] ? __pfx____ratelimit+0x10/0x10 [ 146.990981][ T8126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.991009][ T8126] ? __pfx__printk+0x10/0x10 [ 146.991027][ T8126] ? __might_fault+0xb0/0x130 [ 146.991054][ T8126] should_fail_ex+0x414/0x560 [ 146.991083][ T8126] _copy_to_iter+0x575/0x16f0 [ 146.991122][ T8126] ? __pfx__copy_to_iter+0x10/0x10 [ 146.991146][ T8126] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 146.991171][ T8126] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 146.991208][ T8126] __skb_datagram_iter+0xf8/0x990 [ 146.991228][ T8126] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 146.991255][ T8126] skb_copy_datagram_iter+0xc5/0x230 [ 146.991278][ T8126] netlink_recvmsg+0x2ab/0xa30 [ 146.991312][ T8126] ? __pfx_netlink_recvmsg+0x10/0x10 [ 146.991340][ T8126] ? aa_sock_msg_perm+0x94/0x160 [ 146.991365][ T8126] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 146.991388][ T8126] ? security_socket_recvmsg+0x7e/0x2e0 [ 146.991425][ T8126] ? __pfx_netlink_recvmsg+0x10/0x10 [ 146.991447][ T8126] sock_recvmsg+0x229/0x270 [ 146.991471][ T8126] ____sys_recvmsg+0x1c9/0x460 [ 146.991507][ T8126] ? __pfx_____sys_recvmsg+0x10/0x10 [ 146.991548][ T8126] ? import_iovec+0x74/0xa0 [ 146.991569][ T8126] ___sys_recvmsg+0x1b5/0x510 [ 146.991620][ T8126] ? __pfx____sys_recvmsg+0x10/0x10 [ 146.991689][ T8126] ? __fget_files+0x3a0/0x420 [ 146.991719][ T8126] do_recvmmsg+0x307/0x770 [ 146.991754][ T8126] ? __pfx_do_recvmmsg+0x10/0x10 [ 146.991793][ T8126] ? _copy_from_user+0x94/0xb0 [ 146.991825][ T8126] __x64_sys_recvmmsg+0x1af/0x240 [ 146.991844][ T8126] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 146.991869][ T8126] ? rcu_is_watching+0x15/0xb0 [ 146.991900][ T8126] ? do_syscall_64+0xbe/0x3b0 [ 146.991930][ T8126] do_syscall_64+0xfa/0x3b0 [ 146.991950][ T8126] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.991970][ T8126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.991986][ T8126] ? clear_bhb_loop+0x60/0xb0 [ 146.992007][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.992024][ T8126] RIP: 0033:0x7fa7c5b8e929 [ 146.992039][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.992054][ T8126] RSP: 002b:00007fa7c6920038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 146.992071][ T8126] RAX: ffffffffffffffda RBX: 00007fa7c5db5fa0 RCX: 00007fa7c5b8e929 [ 146.992083][ T8126] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 146.992095][ T8126] RBP: 00007fa7c6920090 R08: 0000200000003700 R09: 0000000000000000 [ 146.992105][ T8126] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 146.992115][ T8126] R13: 0000000000000000 R14: 00007fa7c5db5fa0 R15: 00007fff06263728 [ 146.992141][ T8126] [ 147.409709][ T8134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.587'. [ 147.465560][ T8139] sctp: [Deprecated]: syz.2.588 (pid 8139) Use of int in max_burst socket option. [ 147.465560][ T8139] Use struct sctp_assoc_value instead [ 147.636902][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'. [ 147.646176][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 147.655462][ T8148] validate_nla: 22 callbacks suppressed [ 147.655478][ T8148] netlink: 'syz.2.592': attribute type 18 has an invalid length. [ 147.984371][ T6174] IPVS: starting estimator thread 0... [ 148.049710][ T8172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.072445][ T8170] IPVS: using max 28 ests per chain, 67200 per kthread [ 148.074527][ T7241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.130736][ T7241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.370880][ T8183] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.990256][ T8191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.605'. [ 149.156844][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 149.288964][ T8206] bridge_slave_0: left allmulticast mode [ 149.311015][ T8206] bridge_slave_0: left promiscuous mode [ 149.332901][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.365016][ T8206] bond0: (slave bridge_slave_1): Releasing backup interface [ 149.375708][ T8206] bond0: (slave bond_slave_0): Releasing backup interface [ 149.397877][ T8206] bond0: (slave bond_slave_1): Releasing backup interface [ 149.418510][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.438714][ T8206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.543433][ T8219] netlink: 'syz.1.618': attribute type 39 has an invalid length. [ 149.803534][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 149.882264][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 150.016088][ T8243] Bluetooth: MGMT ver 1.23 [ 150.472622][ T8270] netlink: 'syz.2.637': attribute type 39 has an invalid length. [ 150.730033][ T8282] netlink: 'syz.2.641': attribute type 29 has an invalid length. [ 150.766895][ T8282] netlink: 'syz.2.641': attribute type 29 has an invalid length. [ 150.787990][ T8282] netlink: 'syz.2.641': attribute type 29 has an invalid length. [ 150.814566][ T8282] netlink: 'syz.2.641': attribute type 29 has an invalid length. [ 150.830219][ T8285] netlink: 'syz.0.642': attribute type 5 has an invalid length. [ 150.963009][ T5836] Bluetooth: hci4: link tx timeout [ 150.968466][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.070526][ T8297] netlink: 'syz.0.648': attribute type 58 has an invalid length. [ 151.079438][ T8297] __nla_validate_parse: 2 callbacks suppressed [ 151.079453][ T8297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.648'. [ 151.407981][ T8318] netlink: 'syz.2.652': attribute type 39 has an invalid length. [ 151.447156][ T8287] netlink: 76 bytes leftover after parsing attributes in process `syz.4.643'. [ 151.500359][ T7318] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.509693][ T7318] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.518907][ T7318] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.531077][ T7318] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.963555][ T51] Bluetooth: hci4: link tx timeout [ 151.969490][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.535115][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.568473][ T8354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.609274][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.711565][ T8340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.745885][ T8332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.656'. [ 152.755602][ T8332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'. [ 152.917472][ T8385] netlink: 68 bytes leftover after parsing attributes in process `syz.4.667'. [ 153.054283][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 153.193863][ T8390] validate_nla: 2 callbacks suppressed [ 153.193883][ T8390] netlink: 'syz.4.668': attribute type 2 has an invalid length. [ 153.232818][ T8390] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 153.240844][ T8390] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 153.993422][ T8428] sctp: [Deprecated]: syz.2.680 (pid 8428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.993422][ T8428] Use struct sctp_sack_info instead [ 154.043023][ T8437] netlink: 'syz.1.679': attribute type 10 has an invalid length. [ 154.055924][ T8437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.277727][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 154.293374][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 154.314053][ T8449] netlink: 'syz.2.685': attribute type 18 has an invalid length. [ 154.409286][ T8456] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 154.685534][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 154.858420][ T8488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.635536][ T8539] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.657928][ T8519] netlink: 'syz.0.707': attribute type 303 has an invalid length. [ 155.670356][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 155.731551][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.739326][ T8536] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 155.903438][ T8519] syz.0.707 (8519) used greatest stack depth: 17992 bytes left [ 156.060468][ T8560] raw_sendmsg: syz.0.720 forgot to set AF_INET. Fix it! [ 156.629073][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 156.671363][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 157.102680][ T8600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'. [ 157.152354][ T8599] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 157.174722][ T8599] netlink: 'syz.0.731': attribute type 11 has an invalid length. [ 157.197353][ T8599] netlink: 220 bytes leftover after parsing attributes in process `syz.0.731'. [ 157.218406][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 157.253234][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.730'. [ 157.548529][ T8614] xt_cgroup: path and classid specified [ 157.575379][ T8614] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 157.617612][ T8618] netlink: zone id is out of range [ 157.644479][ T8618] netlink: zone id is out of range [ 157.662717][ T8618] netlink: zone id is out of range [ 157.684617][ T8618] netlink: zone id is out of range [ 157.711805][ T8614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 157.762379][ T8618] netlink: zone id is out of range [ 157.769961][ T8618] netlink: zone id is out of range [ 157.810194][ T8618] netlink: zone id is out of range [ 157.815809][ T8618] netlink: zone id is out of range [ 157.830892][ T8618] netlink: zone id is out of range [ 157.859024][ T8618] netlink: zone id is out of range [ 158.936974][ T8674] netlink: 'syz.2.751': attribute type 39 has an invalid length. [ 159.353602][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 159.402712][ T8702] veth0: entered promiscuous mode [ 159.408308][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.758'. [ 159.623485][ T8702] veth0 (unregistering): left promiscuous mode [ 159.705593][ T8711] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 160.101146][ T8729] netlink: 'syz.0.765': attribute type 39 has an invalid length. [ 160.767664][ T8743] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 161.367136][ T8742] infiniband syz0: set down [ 161.371918][ T8742] infiniband syz0: added ipvlan1 [ 161.405181][ T8742] syz0: rxe_create_cq: returned err = -12 [ 161.428793][ T8742] infiniband syz0: Couldn't create ib_mad CQ [ 161.456132][ T8742] infiniband syz0: Couldn't open port 1 [ 161.565377][ T8742] RDS/IB: syz0: added [ 161.581544][ T8742] smc: adding ib device syz0 with port count 1 [ 161.596342][ T8742] smc: ib device syz0 port 1 has pnetid [ 161.619422][ T8777] netlink: 'syz.2.776': attribute type 39 has an invalid length. [ 161.925158][ T8785] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 162.005941][ T8785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.076836][ T8790] bond2: (slave ip6erspan0): making interface the new active one [ 162.107445][ T8790] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 162.791770][ T30] audit: type=1800 audit(1750910194.192:2): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.781" name="memory.events" dev="tmpfs" ino=832 res=0 errno=0 [ 163.523483][ T8820] netlink: 'syz.2.789': attribute type 39 has an invalid length. [ 164.078947][ T8839] netlink: 'syz.3.794': attribute type 21 has an invalid length. [ 164.109060][ T8839] IPv6: NLM_F_CREATE should be specified when creating new route [ 164.146624][ T8839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.153991][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 164.160185][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.795'. [ 164.161236][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 164.177347][ T8839] IPv6: NLM_F_CREATE should be set when creating new route [ 164.359574][ T8849] netlink: 'syz.3.797': attribute type 7 has an invalid length. [ 164.694126][ T8859] netlink: 'syz.4.800': attribute type 39 has an invalid length. [ 165.555646][ T8886] netlink: 'syz.1.806': attribute type 303 has an invalid length. [ 165.595534][ T8884] trusted_key: syz.1.806 sent an empty control message without MSG_MORE. [ 165.921097][ T8907] netlink: 'syz.0.813': attribute type 39 has an invalid length. [ 166.824570][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 167.071324][ T8952] ip6gretap1: entered promiscuous mode [ 167.086042][ T8950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.821'. [ 167.106584][ T8952] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 167.320030][ T8957] wireguard0: entered promiscuous mode [ 167.327598][ T8957] wireguard0: entered allmulticast mode [ 167.566994][ T8969] netlink: 'syz.0.826': attribute type 39 has an invalid length. [ 167.658365][ T8970] batadv_slave_0: entered promiscuous mode [ 168.087403][ T8991] netlink: 248 bytes leftover after parsing attributes in process `syz.4.833'. [ 168.266490][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 168.298619][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 168.318431][ T9005] netlink: 'syz.3.838': attribute type 18 has an invalid length. [ 168.339572][ T8966] batadv_slave_0: left promiscuous mode [ 168.368972][ T9010] xt_TCPMSS: Only works on TCP SYN packets [ 168.518055][ T9016] netlink: 'syz.3.843': attribute type 10 has an invalid length. [ 168.541913][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.843'. [ 168.568466][ T9016] net_ratelimit: 13 callbacks suppressed [ 168.568485][ T9016] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 168.589470][ T9022] netlink: 72 bytes leftover after parsing attributes in process `syz.4.845'. [ 168.615764][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 168.672917][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.845'. [ 168.933285][ T9044] syz.1.850: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.987906][ T9044] CPU: 0 UID: 0 PID: 9044 Comm: syz.1.850 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 168.987934][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.987946][ T9044] Call Trace: [ 168.987954][ T9044] [ 168.987962][ T9044] dump_stack_lvl+0x189/0x250 [ 168.987998][ T9044] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 168.988025][ T9044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.988054][ T9044] ? __pfx__printk+0x10/0x10 [ 168.988076][ T9044] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.988097][ T9044] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.988125][ T9044] warn_alloc+0x214/0x310 [ 168.988147][ T9044] ? stack_depot_save_flags+0x40/0x900 [ 168.988176][ T9044] ? __pfx_warn_alloc+0x10/0x10 [ 168.988200][ T9044] ? kasan_save_track+0x4f/0x80 [ 168.988229][ T9044] ? xskq_create+0x56/0x170 [ 168.988248][ T9044] ? xsk_init_queue+0xb0/0x110 [ 168.988266][ T9044] ? xsk_setsockopt+0x43f/0x710 [ 168.988282][ T9044] ? do_sock_setsockopt+0x25a/0x3e0 [ 168.988307][ T9044] ? __x64_sys_setsockopt+0x18b/0x220 [ 168.988332][ T9044] ? do_syscall_64+0xfa/0x3b0 [ 168.988354][ T9044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.988381][ T9044] __vmalloc_node_range_noprof+0x125/0x12f0 [ 168.988432][ T9044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.988459][ T9044] ? __kasan_kmalloc+0x93/0xb0 [ 168.988481][ T9044] vmalloc_user_noprof+0xad/0xf0 [ 168.988501][ T9044] ? xskq_create+0xbf/0x170 [ 168.988523][ T9044] xskq_create+0xbf/0x170 [ 168.988547][ T9044] xsk_init_queue+0xb0/0x110 [ 168.988588][ T9044] xsk_setsockopt+0x43f/0x710 [ 168.988612][ T9044] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.988631][ T9044] ? __lock_acquire+0xab9/0xd20 [ 168.988670][ T9044] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 168.988695][ T9044] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.988718][ T9044] do_sock_setsockopt+0x25a/0x3e0 [ 168.988750][ T9044] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 168.988785][ T9044] ? __fget_files+0x2a/0x420 [ 168.988824][ T9044] __x64_sys_setsockopt+0x18b/0x220 [ 168.988861][ T9044] do_syscall_64+0xfa/0x3b0 [ 168.988887][ T9044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.988906][ T9044] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 168.988926][ T9044] ? clear_bhb_loop+0x60/0xb0 [ 168.988951][ T9044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.988970][ T9044] RIP: 0033:0x7f3deb98e929 [ 168.988988][ T9044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.989005][ T9044] RSP: 002b:00007f3dec7d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.989026][ T9044] RAX: ffffffffffffffda RBX: 00007f3debbb6080 RCX: 00007f3deb98e929 [ 168.989040][ T9044] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 168.989052][ T9044] RBP: 00007f3deba10b39 R08: 0000000000000004 R09: 0000000000000000 [ 168.989065][ T9044] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.989077][ T9044] R13: 0000000000000000 R14: 00007f3debbb6080 R15: 00007fff20cae408 [ 168.989109][ T9044] [ 168.989128][ T9044] Mem-Info: [ 169.302242][ T9044] active_anon:4418 inactive_anon:0 isolated_anon:0 [ 169.302242][ T9044] active_file:1552 inactive_file:39871 isolated_file:0 [ 169.302242][ T9044] unevictable:778 dirty:143 writeback:0 [ 169.302242][ T9044] slab_reclaimable:11147 slab_unreclaimable:144350 [ 169.302242][ T9044] mapped:30076 shmem:1360 pagetables:1078 [ 169.302242][ T9044] sec_pagetables:0 bounce:0 [ 169.302242][ T9044] kernel_misc_reclaimable:0 [ 169.302242][ T9044] free:1260096 free_pcp:32269 free_cma:0 [ 169.393757][ T9047] Bluetooth: MGMT ver 1.23 [ 169.405642][ T9053] __nla_validate_parse: 2 callbacks suppressed [ 169.405658][ T9053] netlink: 452 bytes leftover after parsing attributes in process `syz.3.852'. [ 169.439551][ T9044] Node 0 active_anon:17572kB inactive_anon:0kB active_file:6208kB inactive_file:159280kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:121004kB dirty:568kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13048kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.494679][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 169.513884][ T9044] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.559437][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'. [ 169.580215][ T9044] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.613116][ T9044] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 169.628785][ T9044] Node 0 DMA32 free:1136080kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17724kB inactive_anon:0kB active_file:6208kB inactive_file:157452kB unevictable:1576kB writepending:568kB present:3129332kB managed:2560948kB mlocked:40kB bounce:0kB free_pcp:122948kB local_pcp:68128kB free_cma:0kB [ 169.678709][ T9044] lowmem_reserve[]: 0 0 1 1 1 [ 169.683864][ T9044] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 169.731159][ T9044] lowmem_reserve[]: 0 0 0 0 0 [ 169.740085][ T9044] Node 1 Normal free:3900808kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19776kB local_pcp:6784kB free_cma:0kB [ 169.810032][ T9044] lowmem_reserve[]: 0 0 0 0 0 [ 169.823599][ T9044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.846615][ T9044] Node 0 DMA32: 1319*4kB (UME) 344*8kB (UME) 165*16kB (UME) 1075*32kB (UME) 511*64kB (UM) 325*128kB (UME) 187*256kB (UME) 102*512kB (UM) 33*1024kB (UM) 11*2048kB (UME) 213*4096kB (UM) = 1148236kB [ 169.896808][ T9044] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 169.919258][ T9044] Node 1 Normal: 224*4kB (UME) 59*8kB (UME) 43*16kB (UME) 124*32kB (UME) 34*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3900808kB [ 169.948007][ T9044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.988433][ T9044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.013620][ T9044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.027107][ T9044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 170.038143][ T9044] 42781 total pagecache pages [ 170.047471][ T9044] 2 pages in swap cache [ 170.051666][ T9044] Free swap = 124988kB [ 170.067740][ T9044] Total swap = 124996kB [ 170.071943][ T9044] 2097051 pages RAM [ 170.082262][ T9044] 0 pages HighMem/MovableOnly [ 170.087667][ T9044] 424708 pages reserved [ 170.097223][ T9044] 0 pages cma reserved [ 170.119971][ T9084] macvlan0: left promiscuous mode [ 170.125327][ T9084] netlink: 'syz.0.861': attribute type 1 has an invalid length. [ 170.133679][ T9084] netlink: 'syz.0.861': attribute type 2 has an invalid length. [ 170.968763][ T9129] netlink: 'syz.4.874': attribute type 39 has an invalid length. [ 171.235489][ T9148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.881'. [ 171.299511][ T9151] openvswitch: netlink: IP tunnel dst address not specified [ 171.397823][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 171.457521][ T9158] delete_channel: no stack [ 171.866243][ T9165] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 172.762713][ T9213] netlink: 'syz.4.901': attribute type 39 has an invalid length. [ 173.285369][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 173.381362][ T9223] ip6erspan0: left allmulticast mode [ 173.413659][ T7244] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.437939][ T7244] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.461795][ T7244] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.501656][ T7244] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.549919][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 173.584244][ T9245] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.913'. [ 173.597752][ T9245] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 173.610307][ T9245] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 173.635270][ T9248] netlink: 'syz.0.912': attribute type 39 has an invalid length. [ 173.710131][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.915'. [ 173.728755][ T9249] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 174.062280][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 174.103650][ T9270] netlink: 'syz.0.920': attribute type 18 has an invalid length. [ 174.564675][ T9280] __nla_validate_parse: 2 callbacks suppressed [ 174.564696][ T9280] netlink: 52 bytes leftover after parsing attributes in process `syz.0.923'. [ 174.822992][ T9288] netlink: 'syz.0.926': attribute type 39 has an invalid length. [ 174.976508][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.925'. [ 175.039925][ T9254] ip_vti0: left allmulticast mode [ 175.073568][ T9298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.137094][ T9295] netlink: 'syz.0.928': attribute type 13 has an invalid length. [ 175.152347][ T9295] netlink: 'syz.0.928': attribute type 17 has an invalid length. [ 175.416245][ T9295] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 175.509629][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 175.578284][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.930'. [ 175.731405][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 176.079209][ T9329] netlink: 52 bytes leftover after parsing attributes in process `syz.1.936'. [ 176.424374][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 176.492600][ T9337] sctp: [Deprecated]: syz.1.939 (pid 9337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.492600][ T9337] Use struct sctp_sack_info instead [ 176.726147][ T9341] Set syz1 is full, maxelem 0 reached [ 177.072526][ T9345] tipc: Enabling of bearer rejected, failed to enable media [ 177.336386][ T9353] netlink: 'syz.0.944': attribute type 39 has an invalid length. [ 177.358029][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 177.559719][ T9361] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.947'. [ 177.616405][ T9367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.949'. [ 178.125799][ T9388] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 178.244019][ T9388] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 178.256618][ T9388] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 178.276709][ T9388] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 178.499132][ T9391] tipc: Enabling of bearer rejected, failed to enable media [ 179.365220][ T9423] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 179.521521][ T9434] tipc: Enabling of bearer rejected, failed to enable media [ 179.629628][ T9443] __nla_validate_parse: 5 callbacks suppressed [ 179.629646][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.970'. [ 179.726122][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 180.469680][ T9482] tipc: Enabling of bearer rejected, failed to enable media [ 180.549420][ T9487] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001 [ 180.757381][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 180.858286][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.878263][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.999938][ T30] audit: type=1107 audit(1750910212.422:3): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 182.423308][ T9541] tipc: Enabling of bearer rejected, failed to enable media [ 182.881804][ T9557] netlink: 'syz.0.998': attribute type 30 has an invalid length. [ 183.153766][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 183.203025][ T9575] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 183.415062][ T9576] bond2: (slave gretap1): making interface the new active one [ 183.435226][ T9576] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 183.842801][ T9605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1010'. [ 184.181661][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 184.196910][ T9604] syzkaller0: entered allmulticast mode [ 184.219554][ T9620] syzkaller0 (unregistering): left allmulticast mode [ 184.946636][ T9656] netlink: 'syz.3.1022': attribute type 10 has an invalid length. [ 184.981340][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1022'. [ 185.234388][ T9656] bridge0: port 3(dummy0) entered blocking state [ 185.246850][ T9656] bridge0: port 3(dummy0) entered disabled state [ 185.272315][ T9656] dummy0: entered allmulticast mode [ 185.279427][ T9656] dummy0: entered promiscuous mode [ 185.339978][ T9671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1025'. [ 185.364799][ T9671] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1025'. [ 185.445456][ T9671] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 185.477454][ T9674] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 185.685152][ T9679] netlink: 'syz.3.1028': attribute type 4 has an invalid length. [ 186.753470][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'. [ 186.819792][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1037'. [ 187.126703][ T9729] bridge0: entered allmulticast mode [ 187.182656][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 187.857637][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1051'. [ 188.206849][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 188.258241][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 188.261182][ T9773] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 188.283523][ T9777] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1055'. [ 188.533712][ T9790] netlink: 'syz.0.1060': attribute type 5 has an invalid length. [ 188.804994][ T9803] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 188.822133][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 188.829422][ T9803] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 188.853370][ T9803] batman_adv: batadv0: Adding interface: virt_wifi0 [ 188.893228][ T9803] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 188.988538][ T9803] batman_adv: batadv0: Interface activated: virt_wifi0 [ 189.929288][ T9837] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.989045][ T9841] __nla_validate_parse: 3 callbacks suppressed [ 189.989067][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'. [ 190.195534][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1079'. [ 190.845295][ T9895] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1091'. [ 190.880770][ T9885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1091'. [ 191.073650][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 191.327496][ T9920] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 191.466419][ T9932] netlink: 'syz.0.1105': attribute type 1 has an invalid length. [ 191.715080][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 191.742238][ T9939] bridge_slave_0: left allmulticast mode [ 191.752413][ T9939] bridge_slave_0: left promiscuous mode [ 191.759068][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.780985][ T9939] bridge_slave_1: left allmulticast mode [ 191.793514][ T9939] bridge_slave_1: left promiscuous mode [ 191.806121][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.836989][ T9939] bond0: (slave bond_slave_0): Releasing backup interface [ 191.872155][ T9939] bond0: (slave bond_slave_1): Releasing backup interface [ 191.881785][ T9939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.906330][ T9939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.930299][ T9939] bond0: (slave wlan1): Releasing backup interface [ 191.949376][ T9939] ip6gretap1: left allmulticast mode [ 191.955116][ T9939] ip6gretap1: left promiscuous mode [ 191.960719][ T9939] bridge1: port 1(ip6gretap1) entered disabled state [ 191.971650][ T9939] veth3: left allmulticast mode [ 191.976887][ T9939] bridge1: port 2(veth3) entered disabled state [ 192.952642][ T9979] netlink: 'syz.0.1117': attribute type 6 has an invalid length. [ 192.961075][ T9979] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1117'. [ 192.973439][ T9980] FAULT_INJECTION: forcing a failure. [ 192.973439][ T9980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.992640][ T9980] CPU: 0 UID: 0 PID: 9980 Comm: syz.2.1116 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 192.992667][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.992678][ T9980] Call Trace: [ 192.992703][ T9980] [ 192.992712][ T9980] dump_stack_lvl+0x189/0x250 [ 192.992760][ T9980] ? __pfx____ratelimit+0x10/0x10 [ 192.992785][ T9980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.992815][ T9980] ? __pfx__printk+0x10/0x10 [ 192.992836][ T9980] ? __might_fault+0xb0/0x130 [ 192.992867][ T9980] should_fail_ex+0x414/0x560 [ 192.992897][ T9980] _copy_from_user+0x2d/0xb0 [ 192.992918][ T9980] wext_handle_ioctl+0xba/0x1c0 [ 192.992948][ T9980] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 192.992979][ T9980] ? __lock_acquire+0xab9/0xd20 [ 192.993024][ T9980] sock_ioctl+0x15f/0x790 [ 192.993049][ T9980] ? __pfx_sock_ioctl+0x10/0x10 [ 192.993069][ T9980] ? __fget_files+0x2a/0x420 [ 192.993090][ T9980] ? __fget_files+0x3a0/0x420 [ 192.993109][ T9980] ? __fget_files+0x2a/0x420 [ 192.993134][ T9980] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.993162][ T9980] ? __pfx_sock_ioctl+0x10/0x10 [ 192.993182][ T9980] __se_sys_ioctl+0xfc/0x170 [ 192.993214][ T9980] do_syscall_64+0xfa/0x3b0 [ 192.993237][ T9980] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.993259][ T9980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.993277][ T9980] ? clear_bhb_loop+0x60/0xb0 [ 192.993301][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.993320][ T9980] RIP: 0033:0x7fd069f8e929 [ 192.993341][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.993357][ T9980] RSP: 002b:00007fd06ad37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.993381][ T9980] RAX: ffffffffffffffda RBX: 00007fd06a1b6080 RCX: 00007fd069f8e929 [ 192.993395][ T9980] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000006 [ 192.993407][ T9980] RBP: 00007fd06ad37090 R08: 0000000000000000 R09: 0000000000000000 [ 192.993418][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.993429][ T9980] R13: 0000000000000000 R14: 00007fd06a1b6080 R15: 00007ffd44e05448 [ 192.993460][ T9980] [ 193.361502][ T9979] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 193.371168][ T9979] ip6gretap1: left promiscuous mode [ 193.391959][ T9979] bond0 (unregistering): Released all slaves [ 193.839352][ T9998] gretap1: entered promiscuous mode [ 194.099164][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.105620][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.408928][T10024] FAULT_INJECTION: forcing a failure. [ 194.408928][T10024] name failslab, interval 1, probability 0, space 0, times 1 [ 194.422742][T10024] CPU: 0 UID: 0 PID: 10024 Comm: syz.3.1128 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 194.422768][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.422778][T10024] Call Trace: [ 194.422786][T10024] [ 194.422794][T10024] dump_stack_lvl+0x189/0x250 [ 194.422827][T10024] ? __pfx____ratelimit+0x10/0x10 [ 194.422849][T10024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.422877][T10024] ? __pfx__printk+0x10/0x10 [ 194.422894][T10024] ? rcu_is_watching+0x15/0xb0 [ 194.422936][T10024] should_fail_ex+0x414/0x560 [ 194.422965][T10024] should_failslab+0xa8/0x100 [ 194.422986][T10024] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.423005][T10024] ? __alloc_skb+0x112/0x2d0 [ 194.423035][T10024] __alloc_skb+0x112/0x2d0 [ 194.423063][T10024] wireless_send_event+0x2bf/0xc30 [ 194.423101][T10024] ? __pfx_wireless_send_event+0x10/0x10 [ 194.423129][T10024] ? full_name_hash+0x92/0xe0 [ 194.423153][T10024] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 194.423175][T10024] ioctl_standard_call+0x145/0x1b0 [ 194.423203][T10024] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 194.423221][T10024] wext_ioctl_dispatch+0xeb/0x410 [ 194.423244][T10024] ? __pfx_ioctl_standard_call+0x10/0x10 [ 194.423272][T10024] wext_handle_ioctl+0x100/0x1c0 [ 194.423299][T10024] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 194.423321][T10024] ? __lock_acquire+0xab9/0xd20 [ 194.423363][T10024] sock_ioctl+0x15f/0x790 [ 194.423384][T10024] ? __pfx_sock_ioctl+0x10/0x10 [ 194.423404][T10024] ? __fget_files+0x2a/0x420 [ 194.423423][T10024] ? __fget_files+0x3a0/0x420 [ 194.423441][T10024] ? __fget_files+0x2a/0x420 [ 194.423464][T10024] ? bpf_lsm_file_ioctl+0x9/0x20 [ 194.423490][T10024] ? __pfx_sock_ioctl+0x10/0x10 [ 194.423509][T10024] __se_sys_ioctl+0xfc/0x170 [ 194.423538][T10024] do_syscall_64+0xfa/0x3b0 [ 194.423559][T10024] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.423580][T10024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.423598][T10024] ? clear_bhb_loop+0x60/0xb0 [ 194.423627][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.423644][T10024] RIP: 0033:0x7f617778e929 [ 194.423661][T10024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.423675][T10024] RSP: 002b:00007f617867e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.423693][T10024] RAX: ffffffffffffffda RBX: 00007f61779b5fa0 RCX: 00007f617778e929 [ 194.423706][T10024] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000006 [ 194.423717][T10024] RBP: 00007f617867e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.423727][T10024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.423737][T10024] R13: 0000000000000000 R14: 00007f61779b5fa0 R15: 00007ffe2d555df8 [ 194.423766][T10024] [ 194.820777][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1130'. [ 194.834987][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1130'. [ 194.848938][T10028] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1130'. [ 194.858509][T10028] netlink: zone id is out of range [ 194.863699][T10028] netlink: zone id is out of range [ 194.868836][T10028] netlink: get zone limit has 8 unknown bytes [ 195.205571][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 195.386451][ T5961] IPVS: starting estimator thread 0... [ 195.449186][T10061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1136'. [ 195.472227][T10051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1136'. [ 195.492437][T10064] IPVS: using max 27 ests per chain, 64800 per kthread [ 195.653282][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'. [ 195.756263][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 195.826734][T10077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1143'. [ 196.587882][T10118] FAULT_INJECTION: forcing a failure. [ 196.587882][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 196.615301][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.2.1153 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 196.615351][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.615380][T10118] Call Trace: [ 196.615388][T10118] [ 196.615396][T10118] dump_stack_lvl+0x189/0x250 [ 196.615433][T10118] ? __pfx____ratelimit+0x10/0x10 [ 196.615457][T10118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.615486][T10118] ? __pfx__printk+0x10/0x10 [ 196.615522][T10118] should_fail_ex+0x414/0x560 [ 196.615553][T10118] should_failslab+0xa8/0x100 [ 196.615577][T10118] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 196.615597][T10118] ? __alloc_skb+0x112/0x2d0 [ 196.615629][T10118] __alloc_skb+0x112/0x2d0 [ 196.615660][T10118] wireless_send_event+0x510/0xc30 [ 196.615708][T10118] ? __pfx_wireless_send_event+0x10/0x10 [ 196.615738][T10118] ? full_name_hash+0x92/0xe0 [ 196.615765][T10118] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 196.615789][T10118] ioctl_standard_call+0x145/0x1b0 [ 196.615819][T10118] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 196.615840][T10118] wext_ioctl_dispatch+0xeb/0x410 [ 196.615865][T10118] ? __pfx_ioctl_standard_call+0x10/0x10 [ 196.615894][T10118] wext_handle_ioctl+0x100/0x1c0 [ 196.615924][T10118] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 196.615947][T10118] ? __lock_acquire+0xab9/0xd20 [ 196.615993][T10118] sock_ioctl+0x15f/0x790 [ 196.616016][T10118] ? __pfx_sock_ioctl+0x10/0x10 [ 196.616037][T10118] ? __fget_files+0x2a/0x420 [ 196.616058][T10118] ? __fget_files+0x3a0/0x420 [ 196.616078][T10118] ? __fget_files+0x2a/0x420 [ 196.616103][T10118] ? bpf_lsm_file_ioctl+0x9/0x20 [ 196.616138][T10118] ? __pfx_sock_ioctl+0x10/0x10 [ 196.616159][T10118] __se_sys_ioctl+0xfc/0x170 [ 196.616190][T10118] do_syscall_64+0xfa/0x3b0 [ 196.616214][T10118] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.616236][T10118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.616256][T10118] ? clear_bhb_loop+0x60/0xb0 [ 196.616280][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.616299][T10118] RIP: 0033:0x7fd069f8e929 [ 196.616317][T10118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.616333][T10118] RSP: 002b:00007fd06ad58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.616353][T10118] RAX: ffffffffffffffda RBX: 00007fd06a1b5fa0 RCX: 00007fd069f8e929 [ 196.616367][T10118] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000006 [ 196.616380][T10118] RBP: 00007fd06ad58090 R08: 0000000000000000 R09: 0000000000000000 [ 196.616392][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.616403][T10118] R13: 0000000000000000 R14: 00007fd06a1b5fa0 R15: 00007ffd44e05448 [ 196.616435][T10118] [ 196.978330][T10127] tipc: Started in network mode [ 196.979983][T10095] lec:lec_atm_close: lec0: Shut down! [ 196.998211][T10127] tipc: Node identity ac14140f, cluster identity 4711 [ 197.023394][T10127] tipc: New replicast peer: 255.255.255.255 [ 197.039227][T10127] tipc: Enabled bearer , priority 10 [ 197.776056][T10161] netlink: 'syz.3.1165': attribute type 3 has an invalid length. [ 197.789008][T10161] netlink: 'syz.3.1165': attribute type 3 has an invalid length. [ 197.926093][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 198.033581][ T6174] tipc: Node number set to 2886997007 [ 198.123993][T10168] FAULT_INJECTION: forcing a failure. [ 198.123993][T10168] name failslab, interval 1, probability 0, space 0, times 0 [ 198.145794][T10168] CPU: 0 UID: 0 PID: 10168 Comm: syz.3.1167 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 198.145820][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.145830][T10168] Call Trace: [ 198.145838][T10168] [ 198.145845][T10168] dump_stack_lvl+0x189/0x250 [ 198.145878][T10168] ? __pfx____ratelimit+0x10/0x10 [ 198.145898][T10168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.145925][T10168] ? __pfx__printk+0x10/0x10 [ 198.145954][T10168] should_fail_ex+0x414/0x560 [ 198.145980][T10168] should_failslab+0xa8/0x100 [ 198.146000][T10168] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 198.146018][T10168] ? __alloc_skb+0x112/0x2d0 [ 198.146045][T10168] __alloc_skb+0x112/0x2d0 [ 198.146073][T10168] wireless_send_event+0x510/0xc30 [ 198.146109][T10168] ? __pfx_wireless_send_event+0x10/0x10 [ 198.146134][T10168] ? full_name_hash+0x92/0xe0 [ 198.146157][T10168] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 198.146177][T10168] ioctl_standard_call+0x145/0x1b0 [ 198.146203][T10168] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 198.146221][T10168] wext_ioctl_dispatch+0xeb/0x410 [ 198.146241][T10168] ? __pfx_ioctl_standard_call+0x10/0x10 [ 198.146268][T10168] wext_handle_ioctl+0x100/0x1c0 [ 198.146293][T10168] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 198.146315][T10168] ? __lock_acquire+0xab9/0xd20 [ 198.146365][T10168] sock_ioctl+0x15f/0x790 [ 198.146383][T10168] ? __pfx_sock_ioctl+0x10/0x10 [ 198.146399][T10168] ? __fget_files+0x2a/0x420 [ 198.146417][T10168] ? __fget_files+0x3a0/0x420 [ 198.146434][T10168] ? __fget_files+0x2a/0x420 [ 198.146456][T10168] ? bpf_lsm_file_ioctl+0x9/0x20 [ 198.146481][T10168] ? __pfx_sock_ioctl+0x10/0x10 [ 198.146498][T10168] __se_sys_ioctl+0xfc/0x170 [ 198.146527][T10168] do_syscall_64+0xfa/0x3b0 [ 198.146548][T10168] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.146567][T10168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.146584][T10168] ? clear_bhb_loop+0x60/0xb0 [ 198.146604][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.146621][T10168] RIP: 0033:0x7f617778e929 [ 198.146635][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.146648][T10168] RSP: 002b:00007f617865d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.146667][T10168] RAX: ffffffffffffffda RBX: 00007f61779b6080 RCX: 00007f617778e929 [ 198.146679][T10168] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000006 [ 198.146689][T10168] RBP: 00007f617865d090 R08: 0000000000000000 R09: 0000000000000000 [ 198.146699][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.146708][T10168] R13: 0000000000000000 R14: 00007f61779b6080 R15: 00007ffe2d555df8 [ 198.146736][T10168] [ 198.568399][T10183] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1170'. [ 199.365434][T10208] bond0: entered promiscuous mode [ 199.370524][T10208] bond_slave_0: entered promiscuous mode [ 199.399128][T10208] bond_slave_1: entered promiscuous mode [ 199.446646][T10208] batadv0: entered promiscuous mode [ 199.488166][T10208] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 199.528934][T10208] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 199.566667][T10208] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 199.580507][T10208] bond0: left promiscuous mode [ 199.593483][T10208] bond_slave_0: left promiscuous mode [ 199.605850][T10208] bond_slave_1: left promiscuous mode [ 199.617003][T10208] batadv0: left promiscuous mode [ 199.726138][T10216] syzkaller1: entered promiscuous mode [ 199.742236][T10216] syzkaller1: entered allmulticast mode [ 199.883274][T10222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1180'. [ 200.089760][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 200.290222][T10243] macsec2: entered promiscuous mode [ 200.295973][T10243] ip6gretap0: entered promiscuous mode [ 200.307712][T10243] macsec2: entered allmulticast mode [ 200.339128][T10243] ip6gretap0: entered allmulticast mode [ 200.355019][T10243] ip6gretap0: left allmulticast mode [ 200.363007][T10243] ip6gretap0: left promiscuous mode [ 200.371716][T10246] netlink: 'syz.1.1188': attribute type 3 has an invalid length. [ 200.806477][T10272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.855547][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 200.972848][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1200'. [ 201.077785][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1201'. [ 201.086927][T10295] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1201'. [ 201.187727][T10297] xt_recent: Unsupported userspace flags (00000048) [ 201.351322][T10307] netlink: 'syz.3.1207': attribute type 58 has an invalid length. [ 201.450746][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1208'. [ 201.572698][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 201.774180][T10326] sctp: [Deprecated]: syz.3.1213 (pid 10326) Use of int in max_burst socket option. [ 201.774180][T10326] Use struct sctp_assoc_value instead [ 201.821960][T10326] IPVS: set_ctl: invalid protocol: 54 172.30.1.4:20002 [ 202.521648][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 202.741773][T10355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1221'. [ 202.805637][T10381] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 202.834342][T10381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1233'. [ 202.843620][T10381] netlink: 'syz.4.1233': attribute type 7 has an invalid length. [ 202.851499][T10381] netlink: 'syz.4.1233': attribute type 8 has an invalid length. [ 202.937425][T10381] sctp: [Deprecated]: syz.4.1233 (pid 10381) Use of int in max_burst socket option. [ 202.937425][T10381] Use struct sctp_assoc_value instead [ 203.981176][T10453] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 204.611882][T10494] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.845697][ T6158] IPVS: starting estimator thread 0... [ 204.939744][ T30] audit: type=1800 audit(1750910236.362:4): pid=10486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1266" name="memory.events" dev="tmpfs" ino=1390 res=0 errno=0 [ 204.963038][T10510] IPVS: using max 28 ests per chain, 67200 per kthread [ 205.670508][T10540] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 205.686484][T10540] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 206.108006][T10552] __nla_validate_parse: 11 callbacks suppressed [ 206.108033][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 206.376666][T10574] xt_TCPMSS: Only works on TCP SYN packets [ 206.560434][T10580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1296'. [ 206.677939][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1298'. [ 206.856169][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1302'. [ 207.096972][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 207.408055][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 207.430134][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 207.507322][T10619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.646866][T10627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1308'. [ 207.946858][T10624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1305'. [ 208.009391][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1310'. [ 208.323797][T10654] FAULT_INJECTION: forcing a failure. [ 208.323797][T10654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.385587][T10654] CPU: 0 UID: 0 PID: 10654 Comm: syz.0.1314 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 208.385617][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.385629][T10654] Call Trace: [ 208.385636][T10654] [ 208.385651][T10654] dump_stack_lvl+0x189/0x250 [ 208.385697][T10654] ? __pfx____ratelimit+0x10/0x10 [ 208.385720][T10654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.385748][T10654] ? __pfx__printk+0x10/0x10 [ 208.385781][T10654] should_fail_ex+0x414/0x560 [ 208.385809][T10654] _copy_to_user+0x31/0xb0 [ 208.385830][T10654] simple_read_from_buffer+0xe1/0x170 [ 208.385854][T10654] proc_fail_nth_read+0x1df/0x250 [ 208.385880][T10654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.385905][T10654] ? rw_verify_area+0x258/0x650 [ 208.385931][T10654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.385955][T10654] vfs_read+0x1fd/0x980 [ 208.385989][T10654] ? __pfx___mutex_lock+0x10/0x10 [ 208.386013][T10654] ? __pfx_vfs_read+0x10/0x10 [ 208.386042][T10654] ? __fget_files+0x2a/0x420 [ 208.386067][T10654] ? __fget_files+0x3a0/0x420 [ 208.386086][T10654] ? __fget_files+0x2a/0x420 [ 208.386115][T10654] ksys_read+0x145/0x250 [ 208.386135][T10654] ? __pfx_ksys_read+0x10/0x10 [ 208.386161][T10654] ? rcu_is_watching+0x15/0xb0 [ 208.386195][T10654] ? do_syscall_64+0xbe/0x3b0 [ 208.386222][T10654] do_syscall_64+0xfa/0x3b0 [ 208.386243][T10654] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.386264][T10654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.386283][T10654] ? clear_bhb_loop+0x60/0xb0 [ 208.386306][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.386324][T10654] RIP: 0033:0x7fa7c5b8d33c [ 208.386341][T10654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.386357][T10654] RSP: 002b:00007fa7c6920030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.386377][T10654] RAX: ffffffffffffffda RBX: 00007fa7c5db5fa0 RCX: 00007fa7c5b8d33c [ 208.386391][T10654] RDX: 000000000000000f RSI: 00007fa7c69200a0 RDI: 0000000000000006 [ 208.386402][T10654] RBP: 00007fa7c6920090 R08: 0000000000000000 R09: 0000000000000000 [ 208.386414][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.386425][T10654] R13: 0000000000000000 R14: 00007fa7c5db5fa0 R15: 00007fff06263728 [ 208.386454][T10654] [ 208.971633][T10684] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 210.058655][T10735] delete_channel: no stack [ 210.407689][T10755] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 210.456931][T10766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.619491][T10772] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.875896][T10785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.139428][T10804] netlink: 'syz.3.1349': attribute type 5 has an invalid length. [ 211.149200][T10801] __nla_validate_parse: 7 callbacks suppressed [ 211.149217][T10801] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1350'. [ 211.172703][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1351'. [ 211.189063][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 211.301332][T10810] netlink: 'syz.1.1352': attribute type 21 has an invalid length. [ 211.318665][T10810] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1352'. [ 211.371736][T10810] netlink: 'syz.1.1352': attribute type 4 has an invalid length. [ 211.399424][T10810] netlink: 'syz.1.1352': attribute type 5 has an invalid length. [ 211.415156][T10810] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1352'. [ 211.533004][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 211.539532][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.546482][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.662190][T10827] netlink: 'syz.3.1355': attribute type 39 has an invalid length. [ 211.877030][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 211.903752][T10830] netlink: 'syz.2.1356': attribute type 21 has an invalid length. [ 211.959324][T10830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1356'. [ 211.984807][T10838] netlink: 'syz.2.1356': attribute type 13 has an invalid length. [ 212.009047][T10838] netlink: 'syz.2.1356': attribute type 17 has an invalid length. [ 212.124056][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1359'. [ 212.407724][T10861] sctp: [Deprecated]: syz.1.1361 (pid 10861) Use of int in max_burst socket option. [ 212.407724][T10861] Use struct sctp_assoc_value instead [ 213.397630][T10897] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 213.461242][T10900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1370'. [ 213.616114][T10900] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 213.754491][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 214.913184][T10983] sctp: [Deprecated]: syz.2.1395 (pid 10983) Use of int in max_burst socket option deprecated. [ 214.913184][T10983] Use struct sctp_assoc_value instead [ 215.753096][T11030] syz.2.1408: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 215.771069][T11030] CPU: 0 UID: 0 PID: 11030 Comm: syz.2.1408 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 215.771099][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.771111][T11030] Call Trace: [ 215.771119][T11030] [ 215.771127][T11030] dump_stack_lvl+0x189/0x250 [ 215.771166][T11030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.771197][T11030] ? __pfx__printk+0x10/0x10 [ 215.771220][T11030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.771241][T11030] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 215.771263][T11030] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 215.771295][T11030] warn_alloc+0x214/0x310 [ 215.771316][T11030] ? stack_depot_save_flags+0x40/0x900 [ 215.771346][T11030] ? __pfx_warn_alloc+0x10/0x10 [ 215.771370][T11030] ? kasan_save_track+0x4f/0x80 [ 215.771399][T11030] ? xskq_create+0x56/0x170 [ 215.771418][T11030] ? xsk_init_queue+0xb0/0x110 [ 215.771435][T11030] ? xsk_setsockopt+0x43f/0x710 [ 215.771452][T11030] ? do_sock_setsockopt+0x25a/0x3e0 [ 215.771477][T11030] ? __x64_sys_setsockopt+0x18b/0x220 [ 215.771501][T11030] ? do_syscall_64+0xfa/0x3b0 [ 215.771523][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.771549][T11030] __vmalloc_node_range_noprof+0x125/0x12f0 [ 215.771602][T11030] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.771625][T11030] ? preempt_schedule_thunk+0x16/0x30 [ 215.771662][T11030] ? __kasan_kmalloc+0x93/0xb0 [ 215.771682][T11030] vmalloc_user_noprof+0xad/0xf0 [ 215.771700][T11030] ? xskq_create+0xbf/0x170 [ 215.771721][T11030] xskq_create+0xbf/0x170 [ 215.771744][T11030] xsk_init_queue+0xb0/0x110 [ 215.771766][T11030] xsk_setsockopt+0x43f/0x710 [ 215.771787][T11030] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.771803][T11030] ? __lock_acquire+0xab9/0xd20 [ 215.771838][T11030] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 215.771861][T11030] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.771881][T11030] do_sock_setsockopt+0x25a/0x3e0 [ 215.771910][T11030] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 215.771940][T11030] ? __fget_files+0x2a/0x420 [ 215.771968][T11030] __x64_sys_setsockopt+0x18b/0x220 [ 215.771999][T11030] do_syscall_64+0xfa/0x3b0 [ 215.772024][T11030] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.772046][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.772064][T11030] ? clear_bhb_loop+0x60/0xb0 [ 215.772085][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.772102][T11030] RIP: 0033:0x7fd069f8e929 [ 215.772118][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.772133][T11030] RSP: 002b:00007fd06ad58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.772153][T11030] RAX: ffffffffffffffda RBX: 00007fd06a1b5fa0 RCX: 00007fd069f8e929 [ 215.772166][T11030] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 215.772176][T11030] RBP: 00007fd06a010b39 R08: 0000000000000004 R09: 0000000000000000 [ 215.772188][T11030] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.772199][T11030] R13: 0000000000000000 R14: 00007fd06a1b5fa0 R15: 00007ffd44e05448 [ 215.772228][T11030] [ 216.082529][T11030] Mem-Info: [ 216.085792][T11030] active_anon:7324 inactive_anon:0 isolated_anon:0 [ 216.085792][T11030] active_file:1620 inactive_file:39889 isolated_file:0 [ 216.085792][T11030] unevictable:768 dirty:247 writeback:0 [ 216.085792][T11030] slab_reclaimable:11979 slab_unreclaimable:183822 [ 216.085792][T11030] mapped:33193 shmem:4230 pagetables:1102 [ 216.085792][T11030] sec_pagetables:0 bounce:0 [ 216.085792][T11030] kernel_misc_reclaimable:0 [ 216.085792][T11030] free:1242996 free_pcp:15128 free_cma:0 [ 216.164615][T11030] Node 0 active_anon:29296kB inactive_anon:0kB active_file:6480kB inactive_file:159352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132772kB dirty:988kB writeback:0kB shmem:15384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12888kB pagetables:4376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.257958][T11030] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.290100][T11030] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.375714][T11030] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 216.403108][T11030] Node 0 DMA32 free:1055544kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29248kB inactive_anon:0kB active_file:6480kB inactive_file:157524kB unevictable:1536kB writepending:988kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:41208kB local_pcp:22696kB free_cma:0kB [ 216.452158][T11030] lowmem_reserve[]: 0 0 1 1 1 [ 216.457061][T11030] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 216.496272][T11030] lowmem_reserve[]: 0 0 0 0 0 [ 216.512098][T11030] Node 1 Normal free:3901064kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19520kB local_pcp:6784kB free_cma:0kB [ 216.622394][T11030] lowmem_reserve[]: 0 0 0 0 0 [ 216.627205][T11030] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.647042][T11030] Node 0 DMA32: 2152*4kB (UE) 801*8kB (UE) 37*16kB (UE) 1560*32kB (U) 614*64kB (UME) 364*128kB (UM) 224*256kB (UM) 124*512kB (UME) 43*1024kB (UME) 13*2048kB (UME) 174*4096kB (M) = 1055608kB [ 216.680303][T11030] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 216.696513][T11030] Node 1 Normal: 224*4kB (UME) 59*8kB (UME) 43*16kB (UME) 132*32kB (UME) 34*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3901064kB [ 216.719483][T11030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.740503][T11030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.764659][T11030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.826275][T11030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.858063][T11060] __nla_validate_parse: 3 callbacks suppressed [ 216.858084][T11060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1413'. [ 216.860035][T11030] 45786 total pagecache pages [ 216.879498][T11030] 0 pages in swap cache [ 216.885844][T11030] Free swap = 124996kB [ 216.890205][T11030] Total swap = 124996kB [ 216.897419][T11030] 2097051 pages RAM [ 216.901606][T11030] 0 pages HighMem/MovableOnly [ 216.914149][T11050] validate_nla: 1 callbacks suppressed [ 216.914170][T11050] netlink: 'syz.3.1413': attribute type 16 has an invalid length. [ 216.917303][T11030] 424708 pages reserved [ 216.919749][T11050] netlink: 'syz.3.1413': attribute type 17 has an invalid length. [ 216.949301][T11030] 0 pages cma reserved [ 217.005674][T11050] bridge0: port 3(dummy0) entered blocking state [ 217.012291][T11050] bridge0: port 3(dummy0) entered forwarding state [ 217.022730][T11050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.043848][T11050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.350715][T11065] tipc: Enabled bearer , priority 0 [ 217.479224][T11065] syzkaller0: entered promiscuous mode [ 217.512385][T11065] syzkaller0: entered allmulticast mode [ 217.527545][T11065] tipc: Resetting bearer [ 217.547447][T11073] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 217.612850][T11073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.637183][T11073] bond1: entered promiscuous mode [ 217.781450][ T7244] tipc: Resetting bearer [ 217.809489][T11064] tipc: Resetting bearer [ 219.915643][T11064] tipc: Disabling bearer [ 219.925519][T11092] tipc: Started in network mode [ 219.930538][T11092] tipc: Node identity ac14140f, cluster identity 4711 [ 219.938510][T11092] tipc: New replicast peer: 255.255.255.255 [ 219.945188][T11092] tipc: Enabled bearer , priority 10 [ 220.004688][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 220.016518][T11096] tipc: Disabling bearer [ 220.213945][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'. [ 220.294154][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1431'. [ 220.539342][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'. [ 220.653700][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 220.777974][T11161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1439'. [ 220.934666][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1441'. [ 221.107845][T11176] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1445'. [ 221.190173][T11182] can: request_module (can-proto-0) failed. [ 221.405485][T11201] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.478209][T11205] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.789843][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1456'. [ 222.064834][T11259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1462'. [ 222.111399][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 222.420456][T11276] netlink: 'syz.3.1470': attribute type 1 has an invalid length. [ 222.878273][T11291] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 222.898392][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 223.364239][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1478'. [ 223.450116][T11311] sctp: [Deprecated]: syz.3.1479 (pid 11311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.450116][T11311] Use struct sctp_sack_info instead [ 223.721043][T11322] netlink: 'syz.1.1482': attribute type 1 has an invalid length. [ 223.729245][T11322] netlink: 'syz.1.1482': attribute type 2 has an invalid length. [ 225.998571][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.007855][ T49] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.027164][ T1211] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.402673][ T1211] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.550897][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1490'. [ 226.815985][ T1211] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.880057][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1492'. [ 227.449489][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1496'. [ 227.797808][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 227.832865][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 228.033929][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 228.060450][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1502'. [ 228.079483][T11433] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 228.095854][T11435] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1504'. [ 228.131419][T11431] netlink: 'syz.3.1503': attribute type 3 has an invalid length. [ 228.199390][T11431] x_tables: duplicate underflow at hook 1 [ 228.218433][T11437] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 228.371586][T11445] sit0: left allmulticast mode [ 228.442430][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1508'. [ 228.916017][T11479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1519'. [ 228.927155][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 229.164344][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1523'. [ 230.092234][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.657102][T11560] lo speed is unknown, defaulting to 1000 [ 230.677176][T11560] lo speed is unknown, defaulting to 1000 [ 230.697058][T11560] lo speed is unknown, defaulting to 1000 [ 230.725973][T11560] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 230.791769][T11560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 230.868794][T11560] lo speed is unknown, defaulting to 1000 [ 230.882626][T11560] lo speed is unknown, defaulting to 1000 [ 230.890288][T11560] lo speed is unknown, defaulting to 1000 [ 230.905546][T11560] lo speed is unknown, defaulting to 1000 [ 230.931776][T11560] lo speed is unknown, defaulting to 1000 [ 231.076210][T11584] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 231.126077][T11584] bond0: (slave geneve3): making interface the new active one [ 231.139970][T11584] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 231.150339][ T7313] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.161450][ T7313] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.171014][ T7313] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.190711][ T7313] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.777147][T11622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.977576][T11617] lo speed is unknown, defaulting to 1000 [ 232.246788][T11638] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 232.507065][T11655] sctp: [Deprecated]: syz.4.1571 (pid 11655) Use of int in maxseg socket option. [ 232.507065][T11655] Use struct sctp_assoc_value instead [ 232.616575][T11662] __nla_validate_parse: 4 callbacks suppressed [ 232.616592][T11662] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1573'. [ 232.828199][T11672] batman_adv: batadv0: Adding interface: ipvlan2 [ 232.835075][T11672] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.870646][T11672] batman_adv: batadv0: Interface activated: ipvlan2 [ 233.308080][T11696] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 233.388204][T11699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.452158][T11699] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 233.464186][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 233.482439][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 233.572193][T11699] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 234.168854][T11725] FAULT_INJECTION: forcing a failure. [ 234.168854][T11725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.186530][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.3.1593 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 234.186559][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.186572][T11725] Call Trace: [ 234.186579][T11725] [ 234.186587][T11725] dump_stack_lvl+0x189/0x250 [ 234.186620][T11725] ? __pfx____ratelimit+0x10/0x10 [ 234.186642][T11725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.186669][T11725] ? __pfx__printk+0x10/0x10 [ 234.186688][T11725] ? __might_fault+0xb0/0x130 [ 234.186717][T11725] should_fail_ex+0x414/0x560 [ 234.186748][T11725] _copy_from_user+0x2d/0xb0 [ 234.186767][T11725] ___sys_sendmsg+0x158/0x2a0 [ 234.186800][T11725] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.186868][T11725] ? __fget_files+0x2a/0x420 [ 234.186888][T11725] ? __fget_files+0x3a0/0x420 [ 234.186931][T11725] __x64_sys_sendmsg+0x19b/0x260 [ 234.186961][T11725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.187001][T11725] ? rcu_is_watching+0x15/0xb0 [ 234.187036][T11725] ? do_syscall_64+0xbe/0x3b0 [ 234.187063][T11725] do_syscall_64+0xfa/0x3b0 [ 234.187085][T11725] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.187107][T11725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.187126][T11725] ? clear_bhb_loop+0x60/0xb0 [ 234.187150][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.187168][T11725] RIP: 0033:0x7f617778e929 [ 234.187186][T11725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.187205][T11725] RSP: 002b:00007f617867e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.187225][T11725] RAX: ffffffffffffffda RBX: 00007f61779b5fa0 RCX: 00007f617778e929 [ 234.187238][T11725] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003 [ 234.187249][T11725] RBP: 00007f617867e090 R08: 0000000000000000 R09: 0000000000000000 [ 234.187259][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.187269][T11725] R13: 0000000000000000 R14: 00007f61779b5fa0 R15: 00007ffe2d555df8 [ 234.187296][T11725] [ 234.210064][T11727] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1594'. [ 235.448812][T11721] gretap1: entered promiscuous mode [ 235.480679][T11747] 8021q: VLANs not supported on nlmon0 [ 235.559646][T11753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1600'. [ 235.585776][T11753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1600'. [ 235.622252][T11753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1600'. [ 235.775056][T11765] FAULT_INJECTION: forcing a failure. [ 235.775056][T11765] name failslab, interval 1, probability 0, space 0, times 0 [ 235.830734][T11765] CPU: 0 UID: 0 PID: 11765 Comm: syz.0.1605 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 235.830771][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.830793][T11765] Call Trace: [ 235.830801][T11765] [ 235.830808][T11765] dump_stack_lvl+0x189/0x250 [ 235.830840][T11765] ? __pfx____ratelimit+0x10/0x10 [ 235.830862][T11765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.830906][T11765] ? __pfx__printk+0x10/0x10 [ 235.830949][T11765] ? __pfx___might_resched+0x10/0x10 [ 235.830984][T11765] should_fail_ex+0x414/0x560 [ 235.831015][T11765] should_failslab+0xa8/0x100 [ 235.831038][T11765] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 235.831058][T11765] ? __alloc_skb+0x112/0x2d0 [ 235.831089][T11765] __alloc_skb+0x112/0x2d0 [ 235.831120][T11765] netlink_sendmsg+0x5c6/0xb30 [ 235.831155][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.831184][T11765] ? aa_sock_msg_perm+0x94/0x160 [ 235.831211][T11765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.831236][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.831262][T11765] __sock_sendmsg+0x219/0x270 [ 235.831287][T11765] ____sys_sendmsg+0x505/0x830 [ 235.831323][T11765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.831362][T11765] ? import_iovec+0x74/0xa0 [ 235.831385][T11765] ___sys_sendmsg+0x21f/0x2a0 [ 235.831417][T11765] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.831483][T11765] ? __fget_files+0x2a/0x420 [ 235.831503][T11765] ? __fget_files+0x3a0/0x420 [ 235.831536][T11765] __x64_sys_sendmsg+0x19b/0x260 [ 235.831568][T11765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.831607][T11765] ? __pfx_ksys_write+0x10/0x10 [ 235.831631][T11765] ? do_syscall_64+0xbe/0x3b0 [ 235.831660][T11765] do_syscall_64+0xfa/0x3b0 [ 235.831681][T11765] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.831704][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.831723][T11765] ? clear_bhb_loop+0x60/0xb0 [ 235.831746][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.831771][T11765] RIP: 0033:0x7fa7c5b8e929 [ 235.831789][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.831806][T11765] RSP: 002b:00007fa7c6920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.831827][T11765] RAX: ffffffffffffffda RBX: 00007fa7c5db5fa0 RCX: 00007fa7c5b8e929 [ 235.831842][T11765] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003 [ 235.831854][T11765] RBP: 00007fa7c6920090 R08: 0000000000000000 R09: 0000000000000000 [ 235.831865][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.831877][T11765] R13: 0000000000000000 R14: 00007fa7c5db5fa0 R15: 00007fff06263728 [ 235.831907][T11765] [ 235.867570][T11775] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1606'. [ 236.003005][T11779] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1606'. [ 236.168501][T11777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.308404][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1613'. [ 236.554366][T11806] sctp: [Deprecated]: syz.0.1616 (pid 11806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.554366][T11806] Use struct sctp_sack_info instead [ 236.764062][T11799] lo speed is unknown, defaulting to 1000 [ 236.999275][T11819] ip6tnl1: entered promiscuous mode [ 237.039308][T11819] ip6tnl1: entered allmulticast mode [ 237.293856][T11839] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 237.334490][T11833] netlink: 'syz.3.1625': attribute type 10 has an invalid length. [ 237.378524][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.401829][T11833] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 237.701935][T11863] __nla_validate_parse: 2 callbacks suppressed [ 237.701954][T11863] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1631'. [ 238.252191][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.305673][T11875] sctp: [Deprecated]: syz.4.1635 (pid 11875) Use of int in max_burst socket option. [ 238.305673][T11875] Use struct sctp_assoc_value instead [ 238.615784][T11885] nbd: must specify a size in bytes for the device [ 238.649263][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1639'. [ 238.674042][T11895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1639'. [ 239.127879][T11915] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1644'. [ 239.184758][T11913] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 239.332189][ T30] audit: type=1800 audit(1750910270.752:5): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1637" name="memory.events" dev="tmpfs" ino=1736 res=0 errno=0 [ 239.406498][T11920] netlink: 'syz.3.1645': attribute type 21 has an invalid length. [ 239.424924][T11920] netlink: 'syz.3.1645': attribute type 6 has an invalid length. [ 239.452978][T11920] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1645'. [ 239.468406][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 239.495874][T11928] netlink: 'syz.3.1645': attribute type 4 has an invalid length. [ 239.508080][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 239.520964][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 239.545029][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 240.187690][T11945] pim6reg1: entered allmulticast mode [ 240.200910][T11959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1655'. [ 240.229899][T11947] dummy0: left allmulticast mode [ 240.262159][T11947] dummy0: left promiscuous mode [ 240.276137][T11947] bridge0: port 3(dummy0) entered disabled state [ 240.316089][T11947] bridge_slave_1: left allmulticast mode [ 240.346118][T11947] bridge_slave_1: left promiscuous mode [ 240.370973][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.423366][T11947] bridge_slave_0: left allmulticast mode [ 240.452487][T11947] bridge_slave_0: left promiscuous mode [ 240.474976][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.021885][T12009] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 242.124923][T12011] netlink: 'syz.1.1665': attribute type 1 has an invalid length. [ 242.134224][T12011] netlink: 'syz.1.1665': attribute type 2 has an invalid length. [ 242.727881][T12026] __nla_validate_parse: 6 callbacks suppressed [ 242.727899][T12026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1670'. [ 243.085127][T12047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1678'. [ 243.157984][T12050] netlink: 'syz.0.1677': attribute type 21 has an invalid length. [ 243.195338][T12052] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 243.198808][T12050] netlink: 'syz.0.1677': attribute type 1 has an invalid length. [ 243.285983][T12050] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1677'. [ 244.130621][T12067] macvtap1: entered promiscuous mode [ 244.157148][T12067] hsr0: entered promiscuous mode [ 244.170757][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 244.181503][T12067] macvtap1: entered allmulticast mode [ 244.188443][T12073] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 244.201226][T12067] hsr0: left promiscuous mode [ 244.241680][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 244.268471][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 244.279168][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 244.290325][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 244.300309][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 244.309362][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 244.341726][T12075] þ`Ì: entered promiscuous mode [ 245.259029][T12118] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 245.852923][T12146] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 245.874317][T12146] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 246.245138][T12161] validate_nla: 1 callbacks suppressed [ 246.245157][T12161] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 246.595041][T12177] syzkaller1: entered promiscuous mode [ 246.629459][T12177] syzkaller1: entered allmulticast mode [ 246.967861][T12188] tipc: Started in network mode [ 246.982466][T12188] tipc: Node identity ac14140f, cluster identity 4711 [ 246.995936][T12188] tipc: New replicast peer: 255.255.255.255 [ 247.007668][T12188] tipc: Enabled bearer , priority 10 [ 247.026442][T12191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.111860][T12189] syzkaller0: entered promiscuous mode [ 247.133966][T12189] syzkaller0: entered allmulticast mode [ 247.152362][T12195] netlink: 'syz.1.1720': attribute type 10 has an invalid length. [ 247.167984][T12195] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 248.122116][ T6174] tipc: Node number set to 2886997007 [ 248.562597][T12194] vxcan3: entered allmulticast mode [ 248.579321][T12203] bridge0: entered allmulticast mode [ 248.602666][T12206] kthread_run failed with err -4 [ 248.762399][T12216] __nla_validate_parse: 88 callbacks suppressed [ 248.762419][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 248.862104][T12223] netlink: 'syz.1.1730': attribute type 5 has an invalid length. [ 248.929435][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1730'. [ 249.019228][T12223] bridge4: entered promiscuous mode [ 249.047053][T12223] bridge4: entered allmulticast mode [ 250.344319][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 250.364256][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 250.386268][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'. [ 250.395622][T12278] IPVS: Unknown mcast interface: vcan0 [ 250.602469][T12290] netlink: 'syz.2.1752': attribute type 39 has an invalid length. [ 250.798004][T12290] bond3: entered promiscuous mode [ 250.845940][T12290] bond3: entered allmulticast mode [ 250.866668][T12290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.057325][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 251.147995][T12316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1760'. [ 251.164660][T12320] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 251.164660][T12319] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 251.193203][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 251.202774][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 251.319411][T12323] x_tables: duplicate underflow at hook 1 [ 251.342300][T12325] netlink: 'syz.1.1763': attribute type 1 has an invalid length. [ 251.476711][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1765'. [ 251.489303][T12334] netlink: 'syz.1.1765': attribute type 1 has an invalid length. [ 251.976626][T12357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.996334][T12357] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 252.050686][T12357] bond4: entered promiscuous mode [ 252.057704][T12357] bond4: entered allmulticast mode [ 252.063452][T12357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.119574][T12368] FAULT_INJECTION: forcing a failure. [ 252.119574][T12368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.143478][T12368] CPU: 1 UID: 0 PID: 12368 Comm: syz.0.1776 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 252.143507][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.143520][T12368] Call Trace: [ 252.143527][T12368] [ 252.143536][T12368] dump_stack_lvl+0x189/0x250 [ 252.143576][T12368] ? __pfx____ratelimit+0x10/0x10 [ 252.143599][T12368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.143627][T12368] ? __pfx__printk+0x10/0x10 [ 252.143648][T12368] ? __might_fault+0xb0/0x130 [ 252.143676][T12368] should_fail_ex+0x414/0x560 [ 252.143706][T12368] _copy_from_user+0x2d/0xb0 [ 252.143725][T12368] ___sys_recvmsg+0x12e/0x510 [ 252.143760][T12368] ? __pfx____sys_recvmsg+0x10/0x10 [ 252.143814][T12368] ? __fget_files+0x3a0/0x420 [ 252.143845][T12368] __x64_sys_recvmsg+0x198/0x260 [ 252.143877][T12368] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 252.143916][T12368] ? __pfx_ksys_write+0x10/0x10 [ 252.143942][T12368] ? do_syscall_64+0xbe/0x3b0 [ 252.143969][T12368] do_syscall_64+0xfa/0x3b0 [ 252.143991][T12368] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.144031][T12368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.144051][T12368] ? clear_bhb_loop+0x60/0xb0 [ 252.144077][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.144097][T12368] RIP: 0033:0x7fa7c5b8e929 [ 252.144116][T12368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.144134][T12368] RSP: 002b:00007fa7c39f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 252.144155][T12368] RAX: ffffffffffffffda RBX: 00007fa7c5db6080 RCX: 00007fa7c5b8e929 [ 252.144171][T12368] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000003 [ 252.144184][T12368] RBP: 00007fa7c39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 252.144196][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.144208][T12368] R13: 0000000000000001 R14: 00007fa7c5db6080 R15: 00007fff06263728 [ 252.144242][T12368] [ 253.289170][T12402] C: renamed from team_slave_0 [ 253.622340][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 253.679262][T12385] lo speed is unknown, defaulting to 1000 [ 254.035167][T12429] __nla_validate_parse: 7 callbacks suppressed [ 254.035186][T12429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1795'. [ 254.116341][T12429] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1795'. [ 254.213203][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1797'. [ 254.323000][T12437] FAULT_INJECTION: forcing a failure. [ 254.323000][T12437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.366655][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.0.1799 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 254.366685][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.366697][T12437] Call Trace: [ 254.366706][T12437] [ 254.366714][T12437] dump_stack_lvl+0x189/0x250 [ 254.366750][T12437] ? __pfx____ratelimit+0x10/0x10 [ 254.366775][T12437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.366805][T12437] ? __pfx__printk+0x10/0x10 [ 254.366827][T12437] ? __might_fault+0xb0/0x130 [ 254.366859][T12437] should_fail_ex+0x414/0x560 [ 254.366890][T12437] _copy_from_user+0x2d/0xb0 [ 254.366911][T12437] ___sys_sendmsg+0x158/0x2a0 [ 254.366945][T12437] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.367014][T12437] ? __fget_files+0x2a/0x420 [ 254.367036][T12437] ? __fget_files+0x3a0/0x420 [ 254.367070][T12437] __x64_sys_sendmsg+0x19b/0x260 [ 254.367103][T12437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.367152][T12437] ? __pfx_ksys_write+0x10/0x10 [ 254.367168][T12437] ? rcu_is_watching+0x15/0xb0 [ 254.367204][T12437] ? do_syscall_64+0xbe/0x3b0 [ 254.367232][T12437] do_syscall_64+0xfa/0x3b0 [ 254.367254][T12437] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.367277][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.367297][T12437] ? clear_bhb_loop+0x60/0xb0 [ 254.367320][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.367340][T12437] RIP: 0033:0x7fa7c5b8e929 [ 254.367358][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.367375][T12437] RSP: 002b:00007fa7c6920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.367396][T12437] RAX: ffffffffffffffda RBX: 00007fa7c5db5fa0 RCX: 00007fa7c5b8e929 [ 254.367411][T12437] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 254.367423][T12437] RBP: 00007fa7c6920090 R08: 0000000000000000 R09: 0000000000000000 [ 254.367435][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.367446][T12437] R13: 0000000000000000 R14: 00007fa7c5db5fa0 R15: 00007fff06263728 [ 254.367478][T12437] [ 254.580098][T12423] FAULT_INJECTION: forcing a failure. [ 254.580098][T12423] name fail_futex, interval 1, probability 0, space 0, times 1 [ 254.593214][T12423] CPU: 0 UID: 0 PID: 12423 Comm: syz.1.1794 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 254.593241][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.593253][T12423] Call Trace: [ 254.593261][T12423] [ 254.593268][T12423] dump_stack_lvl+0x189/0x250 [ 254.593303][T12423] ? __pfx____ratelimit+0x10/0x10 [ 254.593325][T12423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.593360][T12423] ? __pfx__printk+0x10/0x10 [ 254.593396][T12423] should_fail_ex+0x414/0x560 [ 254.593424][T12423] get_futex_key+0x1a6/0x16c0 [ 254.593442][T12423] ? do_raw_spin_unlock+0x122/0x240 [ 254.593466][T12423] ? look_up_lock_class+0x74/0x170 [ 254.593494][T12423] ? __pfx_get_futex_key+0x10/0x10 [ 254.593514][T12423] ? __lock_acquire+0xab9/0xd20 [ 254.593548][T12423] futex_wake+0xf8/0x560 [ 254.593577][T12423] ? __pfx_futex_wake+0x10/0x10 [ 254.593604][T12423] ? __lock_acquire+0xab9/0xd20 [ 254.593640][T12423] do_futex+0x395/0x420 [ 254.593666][T12423] ? __pfx_do_futex+0x10/0x10 [ 254.593690][T12423] ? __might_fault+0xb0/0x130 [ 254.593711][T12423] mm_release+0x188/0x390 [ 254.593728][T12423] ? __pfx_mm_release+0x10/0x10 [ 254.593756][T12423] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.593789][T12423] exit_mm+0xa8/0x2c0 [ 254.593811][T12423] ? __pfx_exit_mm+0x10/0x10 [ 254.593834][T12423] ? rcu_is_watching+0x15/0xb0 [ 254.593867][T12423] do_exit+0x640/0x22e0 [ 254.593893][T12423] ? do_raw_spin_lock+0x121/0x290 [ 254.593917][T12423] ? __pfx_do_exit+0x10/0x10 [ 254.593959][T12423] do_group_exit+0x21c/0x2d0 [ 254.593997][T12423] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.594023][T12423] get_signal+0x1286/0x1340 [ 254.594075][T12423] arch_do_signal_or_restart+0x9a/0x750 [ 254.594103][T12423] ? __x64_sys_recvmsg+0x22d/0x260 [ 254.594144][T12423] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 254.594188][T12423] ? exit_to_user_mode_loop+0x40/0x110 [ 254.594220][T12423] exit_to_user_mode_loop+0x75/0x110 [ 254.594249][T12423] do_syscall_64+0x2bd/0x3b0 [ 254.594273][T12423] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.594295][T12423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.594315][T12423] ? clear_bhb_loop+0x60/0xb0 [ 254.594340][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.594359][T12423] RIP: 0033:0x7f3deb98e929 [ 254.594378][T12423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.594396][T12423] RSP: 002b:00007f3dec7d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 254.594418][T12423] RAX: fffffffffffffe00 RBX: 00007f3debbb6080 RCX: 00007f3deb98e929 [ 254.594433][T12423] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000003 [ 254.594446][T12423] RBP: 00007f3dec7d8090 R08: 0000000000000000 R09: 0000000000000000 [ 254.594458][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.594470][T12423] R13: 0000000000000001 R14: 00007f3debbb6080 R15: 00007fff20cae408 [ 254.594502][T12423] [ 254.988546][T12444] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 255.004260][T12415] lo speed is unknown, defaulting to 1000 [ 255.338497][T12457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.345828][T12457] IPv6: NLM_F_CREATE should be set when creating new route [ 255.353143][T12457] IPv6: NLM_F_CREATE should be set when creating new route [ 256.243001][T12465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.298232][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 256.316953][T12470] netlink: 'syz.0.1811': attribute type 39 has an invalid length. [ 256.460738][T12475] netlink: 'syz.1.1814': attribute type 1 has an invalid length. [ 256.482648][T12476] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1813'. [ 256.516114][T12475] bond3: entered promiscuous mode [ 256.522191][T12475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.556801][T12475] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.571767][T12475] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 256.582772][T12475] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 256.624986][T12475] bond3: (slave ip6gre3): making interface the new active one [ 256.642176][T12475] ip6gre3: entered promiscuous mode [ 256.649724][T12475] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 256.917062][T12462] lo speed is unknown, defaulting to 1000 [ 257.667240][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 257.697925][T12521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1826'. [ 258.124366][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 258.126111][T12546] FAULT_INJECTION: forcing a failure. [ 258.126111][T12546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.146790][T12546] CPU: 0 UID: 0 PID: 12546 Comm: syz.0.1836 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 258.146818][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.146831][T12546] Call Trace: [ 258.146838][T12546] [ 258.146847][T12546] dump_stack_lvl+0x189/0x250 [ 258.146883][T12546] ? __pfx____ratelimit+0x10/0x10 [ 258.146908][T12546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.146939][T12546] ? __pfx__printk+0x10/0x10 [ 258.146962][T12546] ? __might_fault+0xb0/0x130 [ 258.146995][T12546] should_fail_ex+0x414/0x560 [ 258.147026][T12546] _copy_from_iter+0x1db/0x16f0 [ 258.147061][T12546] ? rcu_is_watching+0x15/0xb0 [ 258.147103][T12546] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 258.147125][T12546] ? __pfx__copy_from_iter+0x10/0x10 [ 258.147156][T12546] ? __build_skb_around+0x257/0x3e0 [ 258.147187][T12546] ? netlink_sendmsg+0x642/0xb30 [ 258.147211][T12546] ? skb_put+0x11b/0x210 [ 258.147242][T12546] netlink_sendmsg+0x6b2/0xb30 [ 258.147278][T12546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.147308][T12546] ? aa_sock_msg_perm+0x94/0x160 [ 258.147338][T12546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.147363][T12546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.147391][T12546] __sock_sendmsg+0x219/0x270 [ 258.147416][T12546] ____sys_sendmsg+0x505/0x830 [ 258.147453][T12546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.147495][T12546] ? import_iovec+0x74/0xa0 [ 258.147519][T12546] ___sys_sendmsg+0x21f/0x2a0 [ 258.147552][T12546] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.147623][T12546] ? __fget_files+0x2a/0x420 [ 258.147644][T12546] ? __fget_files+0x3a0/0x420 [ 258.147678][T12546] __x64_sys_sendmsg+0x19b/0x260 [ 258.147712][T12546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.147753][T12546] ? __pfx_ksys_write+0x10/0x10 [ 258.147769][T12546] ? rcu_is_watching+0x15/0xb0 [ 258.147803][T12546] ? do_syscall_64+0xbe/0x3b0 [ 258.147831][T12546] do_syscall_64+0xfa/0x3b0 [ 258.147855][T12546] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.147879][T12546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.147898][T12546] ? clear_bhb_loop+0x60/0xb0 [ 258.147922][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.147941][T12546] RIP: 0033:0x7fa7c5b8e929 [ 258.147959][T12546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.147977][T12546] RSP: 002b:00007fa7c6920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.147998][T12546] RAX: ffffffffffffffda RBX: 00007fa7c5db5fa0 RCX: 00007fa7c5b8e929 [ 258.148013][T12546] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 258.148027][T12546] RBP: 00007fa7c6920090 R08: 0000000000000000 R09: 0000000000000000 [ 258.148039][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.148050][T12546] R13: 0000000000000000 R14: 00007fa7c5db5fa0 R15: 00007fff06263728 [ 258.148082][T12546] [ 258.485047][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 258.508425][T12545] netlink: 'syz.1.1835': attribute type 39 has an invalid length. [ 258.821197][T12572] tipc: Enabling of bearer rejected, failed to enable media [ 258.835541][T12572] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 259.117238][T12589] netlink: 'syz.0.1848': attribute type 39 has an invalid length. [ 259.143707][T12589] FAULT_INJECTION: forcing a failure. [ 259.143707][T12589] name failslab, interval 1, probability 0, space 0, times 0 [ 259.167306][T12590] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 259.177827][T12589] CPU: 0 UID: 0 PID: 12589 Comm: syz.0.1848 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 259.177860][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.177875][T12589] Call Trace: [ 259.177883][T12589] [ 259.177893][T12589] dump_stack_lvl+0x189/0x250 [ 259.177932][T12589] ? __pfx____ratelimit+0x10/0x10 [ 259.177958][T12589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.177988][T12589] ? __pfx__printk+0x10/0x10 [ 259.178019][T12589] ? __pfx___might_resched+0x10/0x10 [ 259.178057][T12589] ? fs_reclaim_acquire+0x7d/0x100 [ 259.178088][T12589] should_fail_ex+0x414/0x560 [ 259.178122][T12589] should_failslab+0xa8/0x100 [ 259.178147][T12589] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 259.178167][T12589] ? __alloc_skb+0x112/0x2d0 [ 259.178201][T12589] __alloc_skb+0x112/0x2d0 [ 259.178245][T12589] netlink_ack+0x146/0xa50 [ 259.178267][T12589] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.178330][T12589] netlink_rcv_skb+0x28c/0x470 [ 259.178359][T12589] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.178386][T12589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.178437][T12589] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.178459][T12589] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.178508][T12589] netlink_unicast+0x758/0x8d0 [ 259.178543][T12589] netlink_sendmsg+0x805/0xb30 [ 259.178581][T12589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.178613][T12589] ? aa_sock_msg_perm+0x94/0x160 [ 259.178643][T12589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.178671][T12589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.178698][T12589] __sock_sendmsg+0x219/0x270 [ 259.178725][T12589] ____sys_sendmsg+0x505/0x830 [ 259.178762][T12589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.178807][T12589] ? import_iovec+0x74/0xa0 [ 259.178833][T12589] ___sys_sendmsg+0x21f/0x2a0 [ 259.178866][T12589] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.178939][T12589] ? __fget_files+0x2a/0x420 [ 259.178960][T12589] ? __fget_files+0x3a0/0x420 [ 259.178995][T12589] __x64_sys_sendmsg+0x19b/0x260 [ 259.179029][T12589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.179079][T12589] ? __pfx_ksys_write+0x10/0x10 [ 259.179096][T12589] ? rcu_is_watching+0x15/0xb0 [ 259.179135][T12589] ? do_syscall_64+0xbe/0x3b0 [ 259.179165][T12589] do_syscall_64+0xfa/0x3b0 [ 259.179190][T12589] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.179212][T12589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.179233][T12589] ? clear_bhb_loop+0x60/0xb0 [ 259.179258][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.179278][T12589] RIP: 0033:0x7fa7c5b8e929 [ 259.179298][T12589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.179316][T12589] RSP: 002b:00007fa7c6920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.179339][T12589] RAX: ffffffffffffffda RBX: 00007fa7c5db5fa0 RCX: 00007fa7c5b8e929 [ 259.179354][T12589] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 259.179367][T12589] RBP: 00007fa7c6920090 R08: 0000000000000000 R09: 0000000000000000 [ 259.179381][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.179392][T12589] R13: 0000000000000000 R14: 00007fa7c5db5fa0 R15: 00007fff06263728 [ 259.179425][T12589] [ 259.313630][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 259.527088][T12597] netlink: 'syz.0.1851': attribute type 8 has an invalid length. [ 259.546641][ T6551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.555767][ T6551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.020027][T12617] x_tables: duplicate underflow at hook 1 [ 260.143495][T12626] macvlan0: entered allmulticast mode [ 260.149129][T12626] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 260.176360][T12626] netlink: 'syz.3.1860': attribute type 2 has an invalid length. [ 260.216580][T12631] netlink: 'syz.2.1862': attribute type 39 has an invalid length. [ 260.293177][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 260.486990][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1865'. [ 260.499692][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1865'. [ 260.747806][T12635] lo speed is unknown, defaulting to 1000 [ 260.963597][T12649] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1867'. [ 260.980790][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'. [ 261.076666][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1870'. [ 261.507626][T12628] lo speed is unknown, defaulting to 1000 [ 261.601622][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1875'. [ 261.617046][T12679] netlink: 'syz.3.1876': attribute type 39 has an invalid length. [ 261.935136][T12684] tipc: Enabled bearer , priority 0 [ 262.013425][T12684] syzkaller0: entered promiscuous mode [ 262.019272][T12684] syzkaller0: entered allmulticast mode [ 262.025996][T12684] tipc: Resetting bearer [ 262.063523][T12683] tipc: Resetting bearer [ 262.657411][ T78] wlan1: Trigger new scan to find an IBSS to join [ 263.044888][ T1211] tipc: Node number set to 2886997007 [ 263.651337][T12705] xt_CT: No such helper "snmp" [ 263.871343][T12683] tipc: Disabling bearer [ 264.048311][T12660] lo speed is unknown, defaulting to 1000 [ 264.072593][T12657] lo speed is unknown, defaulting to 1000 [ 264.431232][T12703] lo speed is unknown, defaulting to 1000 [ 265.526493][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 265.695846][ T78] wlan1: Trigger new scan to find an IBSS to join [ 266.538767][T12750] tun0: tun_chr_ioctl cmd 1074025675 [ 266.548013][T12750] tun0: persist enabled [ 266.553688][T12750] tun0: tun_chr_ioctl cmd 1074025675 [ 266.572181][T12750] tun0: persist disabled [ 266.645961][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.714335][T12754] bridge6: entered promiscuous mode [ 266.798103][T12754] bridge6: entered allmulticast mode [ 267.127188][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1897'. [ 267.177161][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1897'. [ 267.686953][T12795] IPv6: Can't replace route, no match found [ 269.339555][T12808] lo: left allmulticast mode [ 269.367303][T12808] tunl0: left allmulticast mode [ 269.386675][T12808] gre0: left allmulticast mode [ 269.416431][T12808] gretap0: left allmulticast mode [ 269.421651][T12808] erspan0: left allmulticast mode [ 269.468216][T12808] ip6_vti0: left allmulticast mode [ 269.489324][T12808] ip6tnl0: left allmulticast mode [ 269.506982][T12808] ip6gre0: left allmulticast mode [ 269.524341][T12808] syz_tun: left allmulticast mode [ 269.541954][T12808] ip6gretap0: left allmulticast mode [ 269.575230][T12808] bond0: left allmulticast mode [ 269.580399][T12808] dummy0: left allmulticast mode [ 269.591591][T12808] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 269.609468][T12808] nlmon0: left allmulticast mode [ 269.616695][T12808] caif0: left allmulticast mode [ 269.621962][T12808] batadv0: left allmulticast mode [ 269.630496][T12808] vxcan0: left allmulticast mode [ 269.637195][T12808] vxcan1: left allmulticast mode [ 269.653009][T12808] wg1: left allmulticast mode [ 269.661481][T12808] wg2: left allmulticast mode [ 269.678831][T12808] veth0_to_bridge: left allmulticast mode [ 269.691914][T12808] bridge_slave_0: left allmulticast mode [ 269.705154][T12808] veth1_to_bridge: left allmulticast mode [ 269.712884][T12808] bridge_slave_1: left allmulticast mode [ 269.718944][T12808] veth0_to_bond: left allmulticast mode [ 269.725408][T12808] bond_slave_0: left allmulticast mode [ 269.731284][T12808] veth1_to_bond: left allmulticast mode [ 269.737455][T12808] bond_slave_1: left allmulticast mode [ 269.746873][T12808] veth0_to_team: left allmulticast mode [ 269.752936][T12808] team_slave_0: left allmulticast mode [ 269.758776][T12808] veth1_to_team: left allmulticast mode [ 269.765035][T12808] team_slave_1: left allmulticast mode [ 269.770904][T12808] veth0_to_batadv: left allmulticast mode [ 269.777342][T12808] batadv_slave_0: left allmulticast mode [ 269.783542][T12808] veth1_to_batadv: left allmulticast mode [ 269.789615][T12808] batadv_slave_1: left allmulticast mode [ 269.797380][T12808] xfrm0: left allmulticast mode [ 269.802734][T12808] veth0_to_hsr: left allmulticast mode [ 269.808644][T12808] veth1_to_hsr: left allmulticast mode [ 269.818665][T12808] hsr0: left allmulticast mode [ 269.824563][T12808] hsr_slave_0: left allmulticast mode [ 269.830137][T12808] hsr_slave_1: left allmulticast mode [ 269.842188][T12808] veth1_virt_wifi: left allmulticast mode [ 269.848462][T12808] veth0_virt_wifi: left allmulticast mode [ 269.857462][T12808] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 269.875834][T12808] veth1_vlan: left allmulticast mode [ 269.881658][T12808] vlan0: left allmulticast mode [ 269.886915][T12808] vlan1: left allmulticast mode [ 269.891951][T12808] macvlan0: left allmulticast mode [ 269.901705][T12808] macvlan1: left allmulticast mode [ 269.908198][T12808] ipvlan0: left allmulticast mode [ 269.916314][T12808] ipvlan1: left allmulticast mode [ 269.921351][T12808] veth0_vlan: left allmulticast mode [ 269.926983][T12808] veth1_macvtap: left allmulticast mode [ 269.935477][T12808] veth0_macvtap: left allmulticast mode [ 269.941202][T12808] macvtap0: left allmulticast mode [ 269.946902][T12808] macsec0: left allmulticast mode [ 269.955083][T12808] geneve0: left allmulticast mode [ 269.960235][T12808] geneve1: left allmulticast mode [ 269.965612][T12808] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 269.982381][T12808] K: left allmulticast mode [ 269.987007][T12808] ip6tnl1: left allmulticast mode [ 269.993211][T12808] bond1: left allmulticast mode [ 269.998161][T12808] veth2: left allmulticast mode [ 270.003310][T12808] veth3: left allmulticast mode [ 270.024211][T12808] gretap1: left promiscuous mode [ 270.042330][T12808] bond3: left promiscuous mode [ 270.047149][T12808] bond3: left allmulticast mode [ 270.306433][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1918'. [ 270.702705][T12854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1922'. [ 270.897309][T12840] lo speed is unknown, defaulting to 1000 [ 271.631268][T12860] lo speed is unknown, defaulting to 1000 [ 271.735707][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 271.787534][T12875] vlan0: entered promiscuous mode [ 271.814956][T12875] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 272.232971][T12897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.246167][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1933'. [ 272.252965][T12898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1935'. [ 272.285632][T12893] syz_tun: refused to change device tx_queue_len [ 272.332715][T12893] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 272.455745][T12869] lo speed is unknown, defaulting to 1000 [ 272.950299][T12921] IPVS: Error connecting to the multicast addr [ 272.969199][T12923] xt_TCPMSS: Only works on TCP SYN packets [ 272.985886][T12922] IPVS: Error connecting to the multicast addr [ 273.025588][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1941'. [ 273.208328][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 273.370367][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1945'. [ 273.402503][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1945'. [ 273.500327][T12948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.523154][T12948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1947'. [ 273.554241][ T7244] smc: removing ib device syz0 [ 273.768608][T12937] netlink: 'syz.3.1945': attribute type 4 has an invalid length. [ 273.776954][T12949] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 273.829202][T12949] netlink: 'syz.3.1945': attribute type 4 has an invalid length. [ 273.872862][ T6174] ================================================================== [ 273.880971][ T6174] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 273.889741][ T6174] Read of size 8 at addr ffff8880538722e8 by task kworker/1:11/6174 [ 273.897726][ T6174] [ 273.900046][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: kworker/1:11 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 273.900064][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.900073][ T6174] Workqueue: infiniband ib_cache_event_task [ 273.900092][ T6174] Call Trace: [ 273.900098][ T6174] [ 273.900104][ T6174] dump_stack_lvl+0x189/0x250 [ 273.900125][ T6174] ? __virt_addr_valid+0x1c8/0x5c0 [ 273.900137][ T6174] ? rcu_is_watching+0x15/0xb0 [ 273.900156][ T6174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.900174][ T6174] ? rcu_is_watching+0x15/0xb0 [ 273.900192][ T6174] ? lock_release+0x4b/0x3e0 [ 273.900211][ T6174] ? __virt_addr_valid+0x1c8/0x5c0 [ 273.900223][ T6174] ? __virt_addr_valid+0x4a5/0x5c0 [ 273.900236][ T6174] print_report+0xd2/0x2b0 [ 273.900252][ T6174] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 273.900271][ T6174] kasan_report+0x118/0x150 [ 273.900284][ T6174] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 273.900305][ T6174] __ethtool_get_link_ksettings+0x6e/0x190 [ 273.900325][ T6174] ib_get_eth_speed+0x15e/0x7b0 [ 273.900345][ T6174] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 273.900366][ T6174] ? do_raw_spin_unlock+0x122/0x240 [ 273.900381][ T6174] ? rxe_query_port+0x6b/0x3b0 [ 273.900397][ T6174] rxe_query_port+0x93/0x3b0 [ 273.900412][ T6174] ib_query_port+0x170/0x830 [ 273.900424][ T6174] ib_cache_update+0x1a9/0xbf0 [ 273.900441][ T6174] ? register_lock_class+0x51/0x320 [ 273.900460][ T6174] ? __pfx_ib_cache_update+0x10/0x10 [ 273.900478][ T6174] ? process_scheduled_works+0x9ef/0x17b0 [ 273.900499][ T6174] ib_cache_event_task+0xd8/0x1c0 [ 273.900514][ T6174] ? process_scheduled_works+0x9ef/0x17b0 [ 273.900533][ T6174] process_scheduled_works+0xae1/0x17b0 [ 273.900561][ T6174] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.900586][ T6174] worker_thread+0x8a0/0xda0 [ 273.900606][ T6174] kthread+0x70e/0x8a0 [ 273.900620][ T6174] ? __pfx_worker_thread+0x10/0x10 [ 273.900638][ T6174] ? __pfx_kthread+0x10/0x10 [ 273.900652][ T6174] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.900665][ T6174] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.900678][ T6174] ? __pfx_kthread+0x10/0x10 [ 273.900693][ T6174] ret_from_fork+0x3f9/0x770 [ 273.900711][ T6174] ? __pfx_ret_from_fork+0x10/0x10 [ 273.900730][ T6174] ? __switch_to_asm+0x39/0x70 [ 273.900742][ T6174] ? __switch_to_asm+0x33/0x70 [ 273.900754][ T6174] ? __pfx_kthread+0x10/0x10 [ 273.900767][ T6174] ret_from_fork_asm+0x1a/0x30 [ 273.900786][ T6174] [ 273.900790][ T6174] [ 274.140697][ T6174] Allocated by task 5833: [ 274.145027][ T6174] kasan_save_track+0x3e/0x80 [ 274.149712][ T6174] __kasan_kmalloc+0x93/0xb0 [ 274.154299][ T6174] __kvmalloc_node_noprof+0x30d/0x5f0 [ 274.159690][ T6174] alloc_netdev_mqs+0xa3/0x1170 [ 274.164547][ T6174] rtnl_create_link+0x31f/0xd10 [ 274.169405][ T6174] rtnl_newlink_create+0x25c/0xb00 [ 274.174523][ T6174] rtnl_newlink+0x16d6/0x1c70 [ 274.179319][ T6174] rtnetlink_rcv_msg+0x7cc/0xb70 [ 274.184260][ T6174] netlink_rcv_skb+0x205/0x470 [ 274.189063][ T6174] netlink_unicast+0x758/0x8d0 [ 274.193834][ T6174] netlink_sendmsg+0x805/0xb30 [ 274.198617][ T6174] __sock_sendmsg+0x219/0x270 [ 274.203300][ T6174] __sys_sendto+0x3bd/0x520 [ 274.207820][ T6174] __x64_sys_sendto+0xde/0x100 [ 274.212580][ T6174] do_syscall_64+0xfa/0x3b0 [ 274.217084][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.223000][ T6174] [ 274.225332][ T6174] Freed by task 12933: [ 274.229491][ T6174] kasan_save_track+0x3e/0x80 [ 274.234199][ T6174] kasan_save_free_info+0x46/0x50 [ 274.239250][ T6174] __kasan_slab_free+0x62/0x70 [ 274.244058][ T6174] kfree+0x18e/0x440 [ 274.247954][ T6174] device_release+0x99/0x1c0 [ 274.252586][ T6174] kobject_put+0x22b/0x480 [ 274.256997][ T6174] netdev_run_todo+0xd2e/0xea0 [ 274.261749][ T6174] rtnl_dellink+0x537/0x710 [ 274.266248][ T6174] rtnetlink_rcv_msg+0x7cc/0xb70 [ 274.271178][ T6174] netlink_rcv_skb+0x205/0x470 [ 274.275939][ T6174] netlink_unicast+0x758/0x8d0 [ 274.280714][ T6174] netlink_sendmsg+0x805/0xb30 [ 274.285481][ T6174] __sock_sendmsg+0x219/0x270 [ 274.290167][ T6174] ____sys_sendmsg+0x505/0x830 [ 274.294934][ T6174] ___sys_sendmsg+0x21f/0x2a0 [ 274.299610][ T6174] __x64_sys_sendmsg+0x19b/0x260 [ 274.304563][ T6174] do_syscall_64+0xfa/0x3b0 [ 274.309064][ T6174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.314951][ T6174] [ 274.317266][ T6174] The buggy address belongs to the object at ffff888053872000 [ 274.317266][ T6174] which belongs to the cache kmalloc-cg-4k of size 4096 [ 274.331570][ T6174] The buggy address is located 744 bytes inside of [ 274.331570][ T6174] freed 4096-byte region [ffff888053872000, ffff888053873000) [ 274.345452][ T6174] [ 274.347780][ T6174] The buggy address belongs to the physical page: [ 274.354183][ T6174] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53870 [ 274.362949][ T6174] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 274.371457][ T6174] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 274.378994][ T6174] page_type: f5(slab) [ 274.382987][ T6174] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 274.391579][ T6174] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 274.400162][ T6174] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 274.408833][ T6174] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 274.417610][ T6174] head: 00fff00000000003 ffffea00014e1c01 00000000ffffffff 00000000ffffffff [ 274.426270][ T6174] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 274.434930][ T6174] page dumped because: kasan: bad access detected [ 274.441359][ T6174] page_owner tracks the page as allocated [ 274.447065][ T6174] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5833, tgid 5833 (syz-executor), ts 86373947248, free_ts 86371386123 [ 274.468412][ T6174] post_alloc_hook+0x240/0x2a0 [ 274.473176][ T6174] get_page_from_freelist+0x21e4/0x22c0 [ 274.478719][ T6174] __alloc_frozen_pages_noprof+0x181/0x370 [ 274.484527][ T6174] alloc_pages_mpol+0x232/0x4a0 [ 274.489394][ T6174] allocate_slab+0x8a/0x3b0 [ 274.493895][ T6174] ___slab_alloc+0xbfc/0x1480 [ 274.498572][ T6174] __kmalloc_noprof+0x305/0x4f0 [ 274.503427][ T6174] __register_sysctl_table+0x72/0x1340 [ 274.508887][ T6174] __addrconf_sysctl_register+0x398/0x530 [ 274.514608][ T6174] addrconf_sysctl_register+0x168/0x1c0 [ 274.520169][ T6174] ipv6_add_dev+0xd46/0x1370 [ 274.524756][ T6174] addrconf_notify+0x794/0x1010 [ 274.529619][ T6174] notifier_call_chain+0x1b3/0x3e0 [ 274.534746][ T6174] register_netdevice+0x1608/0x1ae0 [ 274.539953][ T6174] virt_wifi_newlink+0x428/0x860 [ 274.544885][ T6174] rtnl_newlink_create+0x30d/0xb00 [ 274.549999][ T6174] page last free pid 5833 tgid 5833 stack trace: [ 274.556311][ T6174] __free_frozen_pages+0xc71/0xe70 [ 274.561416][ T6174] __put_partials+0x161/0x1c0 [ 274.566083][ T6174] put_cpu_partial+0x17c/0x250 [ 274.570855][ T6174] __slab_free+0x2f7/0x400 [ 274.575270][ T6174] qlist_free_all+0x97/0x140 [ 274.579850][ T6174] kasan_quarantine_reduce+0x148/0x160 [ 274.585309][ T6174] __kasan_slab_alloc+0x22/0x80 [ 274.590162][ T6174] __kmalloc_cache_noprof+0x1be/0x3d0 [ 274.595522][ T6174] kset_create_and_add+0x5a/0x170 [ 274.600537][ T6174] netdev_register_kobject+0x1a2/0x310 [ 274.605998][ T6174] register_netdevice+0x126c/0x1ae0 [ 274.611192][ T6174] virt_wifi_newlink+0x428/0x860 [ 274.616116][ T6174] rtnl_newlink_create+0x30d/0xb00 [ 274.621222][ T6174] rtnl_newlink+0x16d6/0x1c70 [ 274.625885][ T6174] rtnetlink_rcv_msg+0x7cc/0xb70 [ 274.630811][ T6174] netlink_rcv_skb+0x205/0x470 [ 274.635572][ T6174] [ 274.637898][ T6174] Memory state around the buggy address: [ 274.643513][ T6174] ffff888053872180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.651562][ T6174] ffff888053872200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.659609][ T6174] >ffff888053872280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.667658][ T6174] ^ [ 274.675114][ T6174] ffff888053872300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.683186][ T6174] ffff888053872380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.691259][ T6174] ================================================================== [ 274.705502][ T6174] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 274.712717][ T6174] CPU: 1 UID: 0 PID: 6174 Comm: kworker/1:11 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 274.724885][ T6174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.734955][ T6174] Workqueue: infiniband ib_cache_event_task [ 274.740861][ T6174] Call Trace: [ 274.744133][ T6174] [ 274.747061][ T6174] dump_stack_lvl+0x99/0x250 [ 274.751657][ T6174] ? __asan_memcpy+0x40/0x70 [ 274.756250][ T6174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.761470][ T6174] ? __pfx__printk+0x10/0x10 [ 274.766070][ T6174] panic+0x2db/0x790 [ 274.770169][ T6174] ? __pfx_panic+0x10/0x10 [ 274.774597][ T6174] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 274.780488][ T6174] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 274.786818][ T6174] ? print_memory_metadata+0x314/0x400 [ 274.792273][ T6174] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 274.798249][ T6174] check_panic_on_warn+0x89/0xb0 [ 274.803202][ T6174] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 274.809185][ T6174] end_report+0x78/0x160 [ 274.813426][ T6174] kasan_report+0x129/0x150 [ 274.817950][ T6174] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 274.823941][ T6174] __ethtool_get_link_ksettings+0x6e/0x190 [ 274.829772][ T6174] ib_get_eth_speed+0x15e/0x7b0 [ 274.834635][ T6174] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 274.840021][ T6174] ? do_raw_spin_unlock+0x122/0x240 [ 274.845226][ T6174] ? rxe_query_port+0x6b/0x3b0 [ 274.849999][ T6174] rxe_query_port+0x93/0x3b0 [ 274.854602][ T6174] ib_query_port+0x170/0x830 [ 274.859202][ T6174] ib_cache_update+0x1a9/0xbf0 [ 274.863975][ T6174] ? register_lock_class+0x51/0x320 [ 274.869208][ T6174] ? __pfx_ib_cache_update+0x10/0x10 [ 274.874506][ T6174] ? process_scheduled_works+0x9ef/0x17b0 [ 274.880247][ T6174] ib_cache_event_task+0xd8/0x1c0 [ 274.885278][ T6174] ? process_scheduled_works+0x9ef/0x17b0 [ 274.891018][ T6174] process_scheduled_works+0xae1/0x17b0 [ 274.896603][ T6174] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.902612][ T6174] worker_thread+0x8a0/0xda0 [ 274.907222][ T6174] kthread+0x70e/0x8a0 [ 274.911307][ T6174] ? __pfx_worker_thread+0x10/0x10 [ 274.916453][ T6174] ? __pfx_kthread+0x10/0x10 [ 274.921054][ T6174] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.926262][ T6174] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.931477][ T6174] ? __pfx_kthread+0x10/0x10 [ 274.936165][ T6174] ret_from_fork+0x3f9/0x770 [ 274.940772][ T6174] ? __pfx_ret_from_fork+0x10/0x10 [ 274.945929][ T6174] ? __switch_to_asm+0x39/0x70 [ 274.950732][ T6174] ? __switch_to_asm+0x33/0x70 [ 274.955499][ T6174] ? __pfx_kthread+0x10/0x10 [ 274.960098][ T6174] ret_from_fork_asm+0x1a/0x30 [ 274.964877][ T6174] [ 274.968265][ T6174] Kernel Offset: disabled [ 274.972606][ T6174] Rebooting in 86400 seconds..