last executing test programs: 5.261610233s ago: executing program 4 (id=1396): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r1, 0x4, 0x0, 0x83, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x8000, 0x0, 0x380000, 0x300}}) 4.549581351s ago: executing program 4 (id=1403): r0 = socket$rxrpc(0x21, 0x2, 0x2) close(r0) 4.484728401s ago: executing program 4 (id=1407): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$tipc(r0, 0x0, 0x0, 0x80000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8ccf63780", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.26136425s ago: executing program 4 (id=1409): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r4}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r5 = accept4(r0, 0x0, 0x0, 0x80800) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000002c0)={0x10000018}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000001b7080000000000007b8af8ff00000000bfa2000000000000000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x40, 0x700, 0x400, 0x10001, {{0x26, 0x4, 0x1, 0x17, 0x98, 0x68, 0x0, 0xdc, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x33}, {[@noop, @timestamp_prespec={0x44, 0x24, 0x5, 0x3, 0x4, [{@local, 0x81}, {@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@multicast1, 0xb}]}, @timestamp_addr={0x44, 0x1c, 0xb1, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x7}, {@multicast2, 0x3538}]}, @timestamp_prespec={0x44, 0x1c, 0x8d, 0x3, 0x9, [{@remote}, {@local, 0x10001}, {@rand_addr=0x64010100, 0x9}]}, @timestamp={0x44, 0xc, 0xc1, 0x0, 0x7, [0x3, 0x8]}, @timestamp_addr={0x44, 0xc, 0x9e, 0x1, 0x3, [{@private=0xa010101, 0x58}]}, @generic={0x86, 0xf, "1a1190c0da3034a2b632a88d74"}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_setlink={0x4c, 0x13, 0x2, 0x70bd29, 0x25dfdbfb, {0x7, 0x0, 0x0, r9, 0x1000, 0x8220}, [@IFLA_LINKMODE={0x5, 0x11, 0x80}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xebb5}, @IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r8}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r5) 4.065540365s ago: executing program 4 (id=1412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x3, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x3, 0x40}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'ip6tnl0\x00', @random}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'ip6tnl0\x00', @random}) 3.713525094s ago: executing program 4 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x2000, 0xfffffffd, 0x1}, 0x10) write(r1, &(0x7f0000000100)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40002c1, 0x2000a002, 0x0) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @rose}, [@default, @bcast, @bcast, @remote, @remote, @default, @default]}, &(0x7f0000000000)=0x48) 3.601737781s ago: executing program 3 (id=1419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r2, &(0x7f0000000940), 0x10) close(0x3) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x15, 0x80000, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3.47579516s ago: executing program 0 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="29002dfc3ac6a5415bc1ea28e8ee696a7a55", @ANYRES16, @ANYBLOB="01002abd70000000000009000000"], 0x14}}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xf6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r4, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r7}, 0x8) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) recvmmsg$unix(r8, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@rose, @remote, @default, @rose, @default, @bcast, @remote, @default]}, &(0x7f0000000200)=0x48, 0x80800) connect$ax25(r10, &(0x7f00000003c0)={{0x3, @bcast, 0x2}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000000)) 2.985430568s ago: executing program 3 (id=1422): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket(0xa, 0x3, 0xff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x4, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1ff, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0xc857}, 0x4000014) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x28, r4, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffff9a5, 0x50}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd32, 0x41}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040800) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r6, 0x2339) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001740)={&(0x7f0000000140)={0xa, 0x9, 0x0, @loopback, 0x9}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000002c0)="5665702f5e5648f3dab42167388ebf5ed679d647b515d24e4890314545f81e011fdeed7d3695847f", 0x28}], 0x1}, 0x80090) 2.978041736s ago: executing program 0 (id=1423): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xd}}], 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x1, 0x5, 0xb, 0x4, 0xfffffffffffffffc, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xaa, &(0x7f0000000080)=""/170, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x1, 0x5, 0x10, 0xb}, {0x1, 0x5, 0x10, 0xb}], 0x10, 0x67}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x1, 0x5, 0xb, 0x4, 0xfffffffffffffffc, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xaa, &(0x7f0000000080)=""/170, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x8, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x1, 0x5, 0x10, 0xb}, {0x1, 0x5, 0x10, 0xb}], 0x10, 0x67}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000063000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x4, 0x440, [0x2000000003c0, 0x0, 0x0, 0x200000000546, 0x20000000064c], 0x0, &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x4b8) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) 2.843448834s ago: executing program 0 (id=1424): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'ip6tnl0\x00', {0x200}, 0x1}) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) close(0x3) r1 = socket$rxrpc(0x21, 0x2, 0x2) close(r1) 2.693435879s ago: executing program 0 (id=1425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2.38362023s ago: executing program 0 (id=1427): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x19, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 2.311855715s ago: executing program 3 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r3, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x63, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000012140104020000000000000008004b001300000008"], 0x38}}, 0x80) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r7, 0x38001, 0x1922b}, [@IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x9}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4010) 2.133485147s ago: executing program 0 (id=1429): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c000380080001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r6, 0x0, 0x80, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004514008c0000000000069078ac1414bbac1414aa00004e22e89b98884cc2c015cce6cac6c5fef9f42c37b2b47c184b2b42620444b0d541930047fbeb432b5a656beda4d6d2ffcd6e01a2dcf06225a93eabd0de94bad3b0225c86", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e40000009078fffe131247a2ac9eefac70f2052d55a960d78cbd01020405001312ab519c9940eb739563a3c52b43aee4a2052600000009ffffff4c0000004300000001000000080000fa390000800000000008000000091312625fbe96fc97dc524d8a397b7b38957f000000"], 0x0) 1.769495875s ago: executing program 2 (id=1432): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e25bd7000fcdb4c0f000000040000000008000a"], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x2000c080) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000380)={@mcast2, r1}, 0x14) 1.564694602s ago: executing program 2 (id=1433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x10, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x0, 0x5, 0x8, 0x80, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @generic={0x0, 0x3, 0xa, 0x7, 0x8fc}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x3, 0x18, &(0x7f0000000200)=""/24, 0x40f00, 0xf3a0003c6dad0459, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x5, 0xcd3c}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x2, 0x4, 0x4, 0x2}, {0x5, 0x3, 0x10, 0x4}, {0x2, 0x3, 0x2, 0x9}, {0x3, 0x3, 0xf, 0x2}, {0x0, 0x5, 0x3, 0xa}, {0x3, 0x1, 0x10, 0x4}, {0x2, 0x1, 0xf}], 0x10, 0x0, @value=r8}, 0x94) 1.417059063s ago: executing program 2 (id=1435): pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev, @dev, 0x0}, &(0x7f0000000100)=0xc) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'dvmrp0\x00', 0x0}) sendto$unix(r4, &(0x7f0000000340)="be2713ab3754b14eda7347549e083c800ed01c079b2d3a0eb47fc14ecb086d36ab7648c3fe6cf61a5b3b076a9cda6be8f092d86aa0a76b2b5b012d4cad9b3716c9dd544f49839b872d60e807e1197bef350bd4fc2a9537253206cedaf84b537f2d29e646aa423e67bce063beaf74161060a384d3c33eb4999af18363cd0e4065d76de0b7f9904e15687b52ab", 0x8c, 0x800c0c0, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000032c0)=@delchain={0x2cbc, 0x65, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x10}, {0x8, 0xffe0}, {0x6, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c8c, 0x2, [@TCA_BASIC_EMATCHES={0x2f8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdd31}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0xd8}, {{0x2}, {0x2, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x333, 0x0, 0x7fff}, "057bad"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x100}, {0x0, 0x4, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x2ac, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xb, 0x2, 0x1}, {0x0, 0x9, 0x2, "5f3d7556cdc858429d"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x81, 0x7, 0xbe84}, {{}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0xb8, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x51a, 0xfe}, {0x7, 0x5, 0x1}}}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ba536eb99396b4"]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="906c", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="f07b", @TCF_META_TYPE_VAR="be", @TCF_META_TYPE_VAR="cb90ad07a3f7", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="4749f35a40262e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0xdf, 0x2}, {0x7fff, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="54dcd0478628", @TCF_META_TYPE_VAR="5072c93cf1ee93597a", @TCF_META_TYPE_VAR="3613b7d1e4"]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="a6957c59c7605fa655", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="48a0e2cc830f28fb", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0xff}, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7ff, 0x3, 0x10}, {0xb83, 0x1, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0xb8, 0x3, 0x0, 0x0, {{0x8}, "92e305b80b4ac5f961d16251f4dffe0b27f9b4af0cec02ab62219487470ccfd5a9cc38e49663c9329d10de6ae410c3cfb5ffbe6ee0f482d5fd11dee09f8bdba0e1a3b530d5ae49bd69c38d45ea8f6dc82043d2eee512edf5a89118233dacbe94bc2235a2446878c3507a42fa944dae38dcaee24764f05d0db3aaae1b129bfe89fe4db8ab96b932d2b520a0ee6f1aa4aa299cafe8864e2d2344844c44789437f698542c7c5a9df11b8cf722ac"}}, @TCF_EM_IPT={0xc4, 0x3, 0x0, 0x0, {{0x737, 0x9, 0x912}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x98, 0x5, "6968ec435abf5b47dff024c08592f8ec517c73a50491c4af21a920351ad5f2d7ed22bec39b6b700af55e9ee0d8b9756022b1094dce5371a5e5d700ca040d972c734e367e01c6fb98d6bb4c71a121b3f5769dfa8fdbcadc0da6c70a55e4ff2e171e9c27780ac430147c0a77d6771810f49c4d1e256814770df175d5f34c1738d5dfffb16ac3538e001a26f6d1908ff509bdc694ee"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}, @TCA_BASIC_POLICE={0x8bc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x1, 0x6, 0x80000000, 0x2ac23766, 0x718, 0x9, 0x6, 0xd, 0x6, 0x2, 0x8, 0xc, 0xfffffffa, 0x6, 0xf309, 0xcaff, 0xd, 0x1, 0x3, 0x10001, 0x0, 0x9, 0x8, 0x0, 0x8, 0xfffffffd, 0x80000000, 0x8, 0x388, 0x47, 0x8, 0x4, 0x5, 0xdf, 0xdf, 0x4c3, 0x5, 0xf04c, 0xc, 0x80, 0x0, 0x3, 0x1, 0x80, 0x862e, 0x1, 0x1, 0x9, 0xda5, 0xfff, 0x8, 0x800, 0x3ff, 0xfffffff7, 0x8, 0x8eaf, 0x1, 0x200, 0x80, 0xffffff24, 0x1, 0x60, 0x8, 0x78, 0x9, 0x7, 0xe8d7, 0x1, 0x7, 0x462, 0x0, 0x0, 0x4615, 0x5, 0x918, 0x9, 0x401, 0x2, 0x3, 0x4, 0x3, 0x7fff, 0x5de, 0x3, 0x38, 0x3946, 0x100, 0x8, 0x3, 0x9, 0x779f, 0x7fff, 0x9, 0x30f8, 0x5, 0x9, 0xfff, 0x800, 0x39a3, 0x2, 0x5, 0x7, 0xcf1, 0x7, 0x82a, 0x73, 0x1e02, 0x0, 0xf, 0xd, 0x8, 0x68d0, 0x2, 0x100, 0x8, 0x7, 0x5, 0x2, 0x8, 0x0, 0xffffff6a, 0xf, 0xfcd, 0x2, 0xb4, 0x4, 0x5, 0x4, 0xf, 0x1, 0x9, 0x401, 0x8, 0xfffffffc, 0xfffffffb, 0x3, 0x3, 0x9, 0xfff, 0x6a2, 0x9, 0x7fff, 0xffff, 0x88, 0x7758c793, 0xe, 0x0, 0x9, 0x6543, 0x6, 0xfffffffc, 0x5, 0xf, 0x4, 0x8, 0x4, 0x5, 0x1, 0x5, 0x1, 0x199251f5, 0x800, 0x0, 0x936, 0x9, 0x37, 0x4, 0x5, 0x3, 0x3, 0x6, 0x9, 0x4, 0x0, 0x431, 0x1, 0x400, 0x1000, 0x10, 0xff, 0x9, 0x10, 0x0, 0x1, 0x0, 0x4, 0x0, 0x1, 0x3, 0xbc44, 0x3866, 0x6, 0x7f, 0x4e7, 0x101, 0x1, 0x4, 0x4, 0x4, 0x7f, 0xd, 0xfffffff9, 0xe2, 0x2, 0xb, 0x7, 0xfffffbff, 0x2, 0x2, 0x2, 0x4, 0x0, 0x4, 0x2, 0x8001, 0x6, 0x9, 0x0, 0x3, 0x2, 0x8, 0x9, 0x94e7, 0x5, 0x66, 0x8, 0x3, 0xc, 0x3ff, 0x4, 0xc, 0x6, 0xffff0000, 0x101, 0x7, 0x480, 0x7, 0x10, 0xffff4810, 0x5, 0x1000, 0x5ce, 0x9, 0x6, 0x1643, 0x9, 0xffffffbd, 0xe, 0x2, 0x4, 0x6, 0x2, 0x9, 0x8001, 0xb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff0000, 0x7, 0xcbf, 0xde7, 0x1, {0x93, 0x1, 0x4, 0x5, 0x5}, {0x0, 0x2, 0x9, 0x80, 0x0, 0x401}, 0x40, 0x4, 0xc3dd}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1dd89dd6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8e02}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xd0, 0x1c, 0x0, 0x4, 0x7, 0x654, 0x7ff, 0xc9e, 0x2e33800, 0x81, 0x2, 0x3, 0x5, 0x7fff, 0x1, 0x0, 0x5, 0x3, 0x5, 0x3, 0x4, 0x1, 0x240, 0xd3, 0x400, 0x4, 0x1, 0xfffffff8, 0x6, 0x7, 0x7fffffff, 0x8c4, 0x1, 0x5, 0x401, 0x7fff, 0x80000001, 0x3, 0xffffffff, 0x371, 0x4, 0xfffffff3, 0x5, 0xc, 0x2, 0x9, 0x358, 0x2, 0x5, 0x80000001, 0x1494dc17, 0x6, 0xf, 0xe7f, 0x81a5, 0x400, 0x4, 0x8, 0x6, 0x7ff, 0x7fff, 0x44bb, 0x80, 0x5, 0x5, 0x800, 0x7fffffff, 0xd0a75d5, 0x5, 0xb, 0x4, 0x3, 0x7, 0x1, 0x1000, 0x6, 0x9, 0x5, 0x1c9, 0xb, 0x4, 0x0, 0x5, 0x0, 0x7ef, 0x100, 0x8, 0x2, 0x8, 0x1, 0x25, 0x4, 0xcd, 0x718, 0xe9, 0x43e8b91f, 0x3, 0x1000, 0xffffff81, 0x0, 0xff, 0xce, 0x7fffffff, 0x8, 0x7, 0x6, 0x3c5, 0x0, 0x3ff, 0x3, 0x4, 0x6, 0x0, 0x101, 0x1, 0x7, 0x390, 0x0, 0xdd, 0x10001, 0xd, 0x1, 0xd3, 0x80, 0x24, 0x4, 0x8, 0x8, 0x2, 0x10000, 0x6, 0x9, 0x1000, 0xdcc, 0x1, 0x2, 0x6, 0x8001, 0x10001, 0x2, 0x10001, 0x5d, 0x81, 0x2, 0xffff, 0x4, 0x10001, 0x6, 0xffffffff, 0x6, 0x70b0, 0x1, 0x1, 0x7, 0x1, 0x7, 0xc, 0x2, 0x911, 0x6, 0x3, 0x3, 0xffffff9f, 0x10001, 0x2, 0x2, 0x961, 0x5, 0x3ff, 0x9, 0x494, 0x4, 0x9, 0x3, 0xfffffffd, 0x7, 0x5, 0x3, 0x800, 0xfff, 0x8001, 0x3, 0x6, 0xfffffffa, 0x1, 0xb, 0x8e4, 0x2815, 0xd, 0x7, 0xe, 0xfffffffb, 0x6, 0x1, 0x9, 0x564, 0xe, 0x6, 0xc0, 0x7, 0xa, 0x0, 0x0, 0xbe5, 0x2, 0xdf, 0x401, 0x5, 0x2, 0x7, 0x1, 0x6, 0xffffcc37, 0x3, 0x7, 0x3, 0x7, 0xffff, 0x9, 0x3, 0xfffffff9, 0x4, 0x10001, 0x5, 0x4, 0xce, 0xff, 0x6, 0x80000000, 0x400, 0x4, 0x0, 0x6, 0x10001, 0x5, 0x1, 0xa83, 0xfffff364, 0x100, 0x8, 0x9, 0xfffffffc, 0xf, 0x9, 0x0, 0x81, 0x1, 0x8000, 0x7, 0x8, 0x1, 0x430000, 0x6, 0x200, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc4a, 0x2, 0xff, 0x0, 0x10000, {0x5, 0x2, 0x200, 0xff, 0x401, 0xffff}, {0x5, 0x2, 0x1000, 0x8, 0xc0}, 0x0, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x3}}, @TCA_BASIC_ACT={0x11e0, 0x3, [@m_csum={0x14c, 0x13, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x1, 0x1, 0x3}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0x6, 0x3}, 0x3b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0xe40, 0x20000000, 0x101, 0x4}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x5, 0x1, 0x7fff}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x0, 0x0, 0xffff}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xf6, 0x8, 0x800, 0x9}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xffff14d2, 0x4, 0x9, 0x7ff}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x92, 0x81, 0x1, 0x0, 0xb46b}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x4, 0x4}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa01e, 0x6, 0x2, 0x7, 0x5}, 0x51}}]}, {0x7, 0x6, "b15146"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1090, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x7, 0x8, 0x9, 0x6}, 0x1, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x0, 0x3, 0xff, 0x2}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x5, 0x5, 0x3}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_BASIC_EMATCHES={0x1cc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{}, {0xfffff334, 0x7, 0x621, 0x1, 0x5, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8001, 0x7, 0x5}, {{}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xb4, 0x1, 0x0, 0x0, {{0xff, 0x0, 0x3}, "17cf818a5d8d9583c1f46fcf096439a78ec0882467c7344c0f2d2b66d4a995756b4ab078020074adb3cea6a5fc2c7edd3bfa3b7dd4780352aae1c49840422c98a0cb4bcc7ede990b82e0367b143c45eed181d0473a3aedca20438d92083b6e65aecd33cc6ae9af8bd729aa3ca957a320c927924f54f608e50665c05f2add69cd441f2ff3b0cc7528f202dbc798c0759602701aed9e981145efbd3dacc4bd8e7225683260dc09"}}]}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0xffffffffffffffff, 0x3, 0x4}}}, @TCF_EM_CONTAINER={0xd0, 0x1, 0x0, 0x0, {{0x100, 0x0, 0x9}, "1aa69437edf9944c68b6efb1e476fb63db267de6678d28b8dc3847993f90c98c6848d2f7c536dddbf9e0f69a32d6b3ec27f3ba6ac5efb342a3474cc450b3a7a61db2d17ce9eda697707eb1735cb8978540f981152f97fe5ba49d613daeab323e2f19f46112769d6d7531277e4f19ee9f0f4600b598e4663441868fc9439e3df5cee29b70a4b67b77e50d0f2d2290f5bac9d804d74ceb826b347e1b4818ee48fa9dc559d55220a31fdbf559dd53b6c755eedd317220e617a9f88e3f262d42aae9ee4a"}}]}]}, @TCA_BASIC_POLICE={0xc2c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xdb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x5, 0x4, 0x10, 0x0, 0x4, 0x1, 0x5, 0x2, 0x40, 0x10, 0x8, 0xffffffff, 0x9, 0x4, 0x354c8019, 0x8, 0x6, 0x902a, 0x4, 0x3, 0x3, 0x3, 0x3, 0xe, 0x7f, 0x80, 0x0, 0x8, 0xffff, 0x3, 0x0, 0x3, 0xfffffffd, 0x3, 0x8, 0x8, 0x1, 0x7, 0x7ee, 0x1, 0xd, 0xfffffffa, 0x2, 0x9, 0x2, 0x10000, 0x7, 0x1400000, 0x3, 0x40, 0x3, 0x7f, 0x5, 0x800, 0x22702682, 0x3ff, 0xf8d, 0x0, 0x6, 0x644, 0x10001, 0x8000, 0x81, 0x8, 0x5, 0x53ec, 0x3b, 0x7fff, 0x2, 0x9, 0x9, 0x10000, 0x4, 0x7, 0x984, 0x4, 0x8, 0x3, 0x4, 0x6, 0x44817e3c, 0x7, 0xfffffff9, 0xfffffff9, 0x9, 0x80000000, 0xb, 0x81, 0xb5, 0x9, 0x0, 0x9, 0xffffff6d, 0xa, 0x0, 0xffffffff, 0x2, 0x5, 0x0, 0xf075, 0x2, 0x10000, 0x7ff, 0x200, 0x6, 0x9, 0x4, 0x6d35, 0x7, 0xbe7f, 0x0, 0x4, 0x400, 0x6, 0x800, 0x4, 0x9, 0x2, 0x2, 0x4, 0x6, 0x3, 0xfffffffe, 0x401, 0xc52, 0xfff, 0x6, 0x9, 0x0, 0x1ff, 0x2, 0x3fa2, 0x6b67, 0x0, 0x200, 0x5, 0x8, 0x6, 0x8f7, 0x538, 0x1000, 0x6a90a4fa, 0x1000, 0x5, 0x7f, 0x0, 0xf5b5, 0x10, 0x1, 0xfffffff9, 0x1, 0xfffffc00, 0xa, 0x77aa1e1a, 0x76, 0x4, 0x9, 0xfffffff7, 0x3, 0x93eb, 0x9b, 0xe, 0x4a6c101f, 0x9, 0x3, 0x5, 0x1, 0xff, 0xfca3, 0x3, 0x4e0, 0x7, 0x499, 0x390, 0x5, 0x8, 0x9, 0x5, 0x7bc0, 0xe, 0x6, 0x7, 0x5a, 0x2, 0xfffffff9, 0xfffffff7, 0x401, 0x1, 0x3, 0x6, 0xc, 0xc, 0xfffffffc, 0x0, 0x5, 0x0, 0x5, 0x9, 0x2, 0x3, 0x6, 0x3, 0xa, 0x3, 0x8, 0x9, 0xf642, 0x2efe, 0xfffffa54, 0x80000000, 0x1, 0x7fffffff, 0x9, 0x21d7, 0xc, 0x6d79, 0x7, 0x7, 0x6, 0x2, 0x3, 0x1000, 0x8, 0x9, 0x2, 0x11, 0x5, 0x80000001, 0x4, 0x10, 0x3, 0x421, 0x0, 0x6, 0x9, 0x2, 0x0, 0x7fffffff, 0x5, 0x4b, 0xffffffff, 0x2, 0x5, 0x0, 0x6, 0x8000, 0x3, 0x9, 0x5a, 0x4, 0x3, 0x5, 0x5, 0x8, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x7, 0x7ff, 0x3, 0x2, 0x3ff, 0x1ff, 0x100, 0x1, 0x0, 0xff, 0x74, 0xff, 0x81, 0x3423fe52, 0x7, 0xb1b0, 0x8, 0x6d2, 0x1, 0x91, 0x4, 0x8, 0x80000001, 0x4, 0x6, 0x3, 0x7, 0x2, 0xd, 0xfffffffd, 0x8, 0x1, 0x10000, 0x72f, 0x1, 0x8, 0x2, 0x6, 0x27, 0x2, 0x3, 0x9, 0x7, 0x1, 0x7, 0x10000, 0x1ff, 0x5, 0x7, 0x0, 0x5, 0x235, 0xfffffffa, 0x5, 0x2, 0x9, 0x8c99, 0x80000001, 0xfffffffc, 0xa, 0x3, 0x6, 0x8, 0x66, 0x7, 0x4, 0x1, 0x5, 0x0, 0xc, 0x1, 0x5, 0x6, 0xbc5, 0x8001, 0x6, 0x2, 0x4, 0x1, 0x7, 0x2, 0x5, 0x56f, 0x7fffffff, 0xce, 0x1, 0x847a, 0xffff, 0x9, 0x7fff, 0x80000001, 0x4, 0x81, 0x2b9a02ab, 0x7, 0x4, 0x480000, 0x90, 0x7, 0xab5, 0x1, 0x3, 0x4, 0x1, 0x48d, 0x40, 0x4d8, 0x7fffffff, 0x8, 0x3, 0x100, 0x7ff, 0x90, 0xfffffffe, 0x74, 0x100, 0x8, 0x8e3, 0x63, 0x0, 0x3, 0x6, 0x5, 0x1000, 0x4, 0x2, 0x3, 0x8, 0xdfe, 0x6, 0xe, 0x8, 0x3, 0x6, 0x4, 0x7fff, 0xfffffffa, 0xdf, 0x7, 0x6, 0x400, 0x7, 0x3, 0xa39a, 0x29c, 0x2, 0x4, 0x10001, 0xb, 0xfffffff7, 0x7, 0x4, 0x4d, 0x1, 0xe, 0x1, 0x3ff, 0x9, 0x8, 0x10001, 0x10001, 0x5, 0x57c6, 0x6, 0xffff29c0, 0x5e, 0xee7, 0x5, 0xffffffff, 0x8, 0x6a, 0x8, 0x5, 0x4, 0x800, 0x4, 0xd006, 0x9, 0x8, 0x6e, 0x1, 0x5, 0x745, 0x6, 0xf, 0x5, 0xff, 0x9f, 0x1, 0xff, 0x0, 0xfe, 0x6, 0x3, 0x40, 0x6, 0xffff0, 0xa, 0x0, 0x3, 0x2, 0xa4c2, 0x1c2, 0x0, 0x5b, 0x7fff, 0x5, 0x10, 0xe2, 0xbb, 0x401, 0x3, 0xb499, 0x0, 0x80000001, 0x5, 0xdda, 0x2, 0x30eb, 0x5, 0x4, 0x2, 0x6, 0x9, 0x100, 0x1, 0xcae, 0x63b, 0x0, 0xa80, 0xbc, 0x11, 0x8, 0x9, 0x0, 0x45, 0x2f1, 0x8, 0x0, 0x6, 0x6, 0x8000, 0x0, 0x14bc00, 0x5, 0x6, 0xd80, 0x3ff, 0x4, 0x6, 0x7, 0x1c3, 0x64c2e7c2, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x557a}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ff80, 0x6, 0x8, 0x0, 0x2, 0x7, 0x6, 0x0, 0x4, 0x3, 0xf85, 0xeab, 0x7, 0x3, 0x0, 0x7, 0x0, 0x10001, 0xd, 0x5, 0x2, 0x9, 0x9, 0x3, 0x101, 0xa1, 0xffff, 0x3, 0xadf, 0x4, 0x6, 0xa, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x0, 0x3, 0x6, 0x3, 0x0, 0x3ff, 0xfffffff7, 0x8, 0x2, 0x9, 0x5, 0xccf7, 0x2, 0x80, 0xffffffff, 0x8, 0xffffffff, 0x40, 0x3, 0x21907c5d, 0x4, 0x8b, 0x2, 0xe, 0x8, 0x140, 0x2f7c, 0x1, 0xff, 0xec, 0x400000, 0x3, 0xfffffff9, 0x9e3d, 0x2, 0x6, 0xf9, 0x1, 0xffff3433, 0x9, 0x5, 0x0, 0x1000, 0x5, 0x4, 0x7f, 0x9, 0x8a81, 0xff, 0x1, 0x1, 0x3, 0x9, 0x1, 0x6, 0x3, 0x0, 0xfffffffa, 0xfffffef1, 0xff, 0x5, 0xbbb, 0x4, 0x1, 0xfffffffe, 0x300000, 0x1, 0x8000, 0x62, 0x0, 0x78, 0xce, 0x800, 0xfff, 0x4, 0x9, 0xfffffffb, 0x5, 0x2, 0x6, 0xffff, 0x8, 0x1000, 0x4, 0x7fffffff, 0x0, 0x1cd1, 0x9, 0x6, 0xfffffff9, 0xca50, 0x5, 0x7, 0x71, 0x7, 0x3ff, 0x0, 0x9bd9, 0x4, 0x1, 0x6, 0x2, 0x2, 0x7, 0x8, 0x9, 0xfffffc00, 0x2, 0x4, 0x9, 0x5, 0x0, 0x4, 0x7, 0x0, 0x73, 0x9, 0xc97, 0x6, 0x2, 0x9659, 0xffff0000, 0xffffffff, 0x7, 0x0, 0x3, 0x7, 0x3ff, 0x2ae8f6b3, 0x1ff, 0x5, 0x100, 0x0, 0x4, 0x5, 0x5, 0x1, 0x8001, 0x8, 0x101, 0x46, 0x10000, 0x4, 0xe6, 0x3, 0x3, 0x8, 0x83f, 0x1b7, 0x0, 0x52e3, 0x9, 0x5, 0x6, 0x6, 0x8, 0x8, 0x3, 0x0, 0x4, 0xfffffffd, 0x2, 0xfffffff7, 0x9d4, 0xd5a9, 0x6, 0xfffffff8, 0x5, 0x7, 0x0, 0x2, 0x800, 0x1, 0x1, 0x2, 0x81, 0x6, 0x100, 0x1, 0x94f5, 0x10000, 0x6, 0x3, 0x6, 0x1, 0x800, 0xa3d6, 0xf490, 0x2c, 0xe, 0x4, 0xa5, 0x7, 0xcaf3, 0x124, 0x80000001, 0x8, 0x8, 0xf3, 0x11c5a00, 0x2, 0x41e, 0x3a00000, 0xa, 0x4, 0x2, 0x8000, 0xfffffffa, 0x8001, 0x144d, 0x1, 0x5, 0x7, 0x6, 0x9, 0x4, 0x6fa4, 0x5, 0x2]}]}, @TCA_BASIC_EMATCHES={0xe4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc4, 0x2, 0x0, 0x0, {{0x81, 0x0, 0x3e}, "5f514ca21c130eb417291bf0a8b4d812cbbf189d31de8a811cfcd660a7db6ff8ecaa9b1eb8bc7a52e1fef9bd8c9228c57cb4196b11e1935ee598c2a9fc34301b1495c8421f1a5cf89e900eb32e24cb7158b63e0cdf5a2ee8644d497e1d300622a6bdd4a83458a1c009ca1b822e46785b727ea7d4371cc26886f3235b74e8d3838508a59e8217e36037d082529f06817acff85a205da18b9a637db1a74867948dd19b8b0532416bf7ed3f4e987da2d79a7a0a2af73bb3"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x200, 0x1, 0x7}, {0x1, 0x2, 0x8, 0x5, 0x0, 0x2, 0x1}}}]}]}]}}]}, 0x2cbc}, 0x1, 0x0, 0x0, 0x40}, 0x8055) recvmmsg(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)}, 0xfffffffc}], 0x2, 0x42, 0x0) 1.368896553s ago: executing program 3 (id=1436): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="fb2c54d949e9002f37dd75c13bdb4e060b738722f773d9623a70c5d8fe95afa2d1493da77baa9d9e5ea8a617d7eca7710842f6ef65d0506da7a6c0514b7633d161088a", 0x43) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98) splice(r2, 0x0, r7, 0x0, 0x80, 0x8) r8 = socket$inet_udp(0x2, 0x2, 0x0) splice(r6, 0x0, r8, 0x0, 0x100000004, 0x0) write(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e23, 0x5, @mcast1, 0x4}}}, &(0x7f0000000300)=0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000040)={0x3, 'hsr0\x00', {0x7}, 0x1000}) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rpcgss_seqno\x00', r10, 0x0, 0x9}, 0x18) 1.220525945s ago: executing program 1 (id=1437): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket(0x2b, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (fail_nth: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r6}, 0x10) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000002c0)={r7, 0xb8a2, 0x8, 0x7}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='./file0\x00', r11}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r9}, 0x10) sendmsg$inet(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004080) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) setsockopt$ax25_int(r12, 0x101, 0x5, &(0x7f00000008c0)=0x7, 0x4) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) accept4(r0, 0x0, 0x0, 0x800) 587.92066ms ago: executing program 1 (id=1438): r0 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800009246a074e6260008000000000000000800000011b40000000000950000000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 480.903ms ago: executing program 2 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xb8, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_LABELS_MASK={0x10, 0x17, [0x3, 0x5, 0x2]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x44}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x14, 0x4, @remote}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x400, 0x6, 0x0, 0x2, 0x4]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 421.315343ms ago: executing program 1 (id=1440): unshare(0x2040400) (async) unshare(0x40080) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) unshare(0x60040500) (async) write$cgroup_type(r2, &(0x7f0000000080), 0x9) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r6 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000440)="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", 0x170}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e0852", 0xba}], 0x5, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r6, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000010000009500000000000000eced05649c9d"], &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 398.956525ms ago: executing program 1 (id=1441): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="61000000000000001400127909000100626f6e64000000000400028008000a000a537221911246e54125440f0e176ab4ca1a3f3f14709d87b93726854261429268ff0cbf8142a105d84437", @ANYRESHEX=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x20000000}}) pipe(&(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[], 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6008008000383a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000a608cb0356c3618932a6cc9ca2a943e21739a2b00002f0000000000000000000000fffffffffffffe8000000000000000"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000690000/0x3000)=nil, 0x3000, 0x2000003, 0x10010, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r8 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r6, 0x51f20000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000068d000/0x2000)=nil, 0x2000, 0x8, 0x50, r9, 0xdfbab000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 365.2057ms ago: executing program 2 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtaction={0x9b4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x9a0, 0x1, [@m_police={0x99c, 0x8, 0x0, 0x0, {{0xb}, {0x92c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x8, 0x3ff, 0x1a3, 0x0, 0x2, 0x3, 0x9, 0xffffffee, 0x4, 0x1000, 0x396, 0x4, 0x4bb, 0x3, 0x22, 0x9, 0xc2d, 0x6, 0x7, 0x5, 0x3, 0x400, 0x5, 0x6, 0x8aca, 0x1, 0x4, 0x516a48ef, 0x2, 0x3, 0xffff, 0x5, 0x7, 0x7a79, 0x9, 0xfffffff7, 0x0, 0x8, 0x3, 0xa2, 0x5, 0xffff, 0x1, 0x255, 0x9, 0x7, 0x0, 0xfffffffe, 0x8000, 0xa, 0x8, 0xe88, 0x8, 0x7, 0xffff8212, 0x2, 0x4, 0x61, 0x1, 0x6e5, 0xffffffc0, 0x3ff, 0x8, 0xa, 0x10001, 0x0, 0x9, 0x4, 0xfffffff9, 0x10000, 0x3, 0x6, 0x3ff, 0x8, 0xc, 0x101, 0xc, 0x4, 0xcd, 0x7ff, 0x3, 0x2, 0x8, 0xfffffffe, 0x2, 0x4, 0x0, 0x8, 0x3, 0x5, 0x1f, 0x1, 0x3, 0x0, 0x6, 0x9bd, 0x4, 0x100, 0x2, 0x0, 0x2, 0xdf87, 0x8, 0x2, 0xc, 0x40000000, 0x4, 0x5, 0x0, 0xe, 0x9, 0x3d5, 0x6, 0x4, 0x400, 0x8, 0x1, 0x80000001, 0x10, 0x0, 0x9, 0xa0, 0x3, 0xa4bc701c, 0xff, 0x7fffffff, 0x3c, 0xd, 0x7, 0x1, 0x3, 0x7, 0xa06c, 0x1, 0x6, 0x4, 0x4, 0x5, 0x5, 0x1ff, 0x10, 0x69b, 0x2, 0x4, 0x3, 0xffff, 0x0, 0x6, 0x5, 0xfffffffe, 0x0, 0x0, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x1, 0x7, 0x1, 0x4, 0x1, 0xe, 0x3, 0x4, 0x7f, 0xa, 0x4, 0x80000000, 0x8, 0x200, 0x401, 0x4d19, 0x3, 0x2, 0x7, 0x5, 0x0, 0x3ff, 0x9abc, 0x7, 0x8, 0x6, 0x3, 0x10, 0x9, 0x0, 0x7, 0x80000001, 0x6, 0x8, 0x9a, 0x5, 0x7fff, 0x4e, 0x7fffffff, 0x7, 0x10000, 0x1000, 0x2, 0x7ff, 0x8, 0x4, 0x4, 0x5, 0x400, 0x4, 0x5, 0x80000000, 0x81, 0x904, 0xc5c3, 0x8, 0x6, 0xfc2, 0x200, 0x4, 0x6, 0xfffffff7, 0x2, 0x1, 0xfffffffd, 0x200, 0x7ff, 0xe8cd, 0x5, 0x10, 0x2, 0x2, 0x3def99, 0xfffffffc, 0x1d, 0x8, 0x3, 0x57e3, 0x3, 0x7058, 0x3, 0x4, 0x4, 0x7, 0x2, 0x7, 0x7, 0x3, 0x0, 0x6, 0x3, 0xfffffffc, 0x7ff, 0x2, 0x10001, 0x0, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x5, 0x4, 0x3, 0x3, {0x1, 0x1, 0xfffe, 0x4, 0xfe01, 0x4}, {0x9, 0x1, 0x2, 0xc00, 0xfffb, 0x4}, 0xffff7fff, 0x4, 0x38000}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x2, 0xbcf, 0xdd1, 0x8, {0x9, 0x1, 0x2, 0x6, 0x4, 0x2}, {0xb, 0x0, 0x800, 0xba, 0x1, 0x4c}, 0x3, 0x9, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xc4c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xffffff25, 0x1, 0x4, 0xd, 0x100, 0x3, 0x1c, 0x0, 0x10001, 0x5, 0x0, 0x1, 0x8, 0x200, 0x2, 0x1961, 0x148, 0x3, 0xffffffff, 0x5, 0x1, 0xc, 0x9, 0xfffffe00, 0x2, 0x9, 0x0, 0x40, 0x3, 0x7, 0x4, 0x7d, 0x800, 0xb, 0x7, 0x0, 0x2, 0xc86b, 0x5, 0x7, 0xf, 0xa7, 0x4, 0x80000001, 0x4, 0x6, 0x1, 0x2, 0x4, 0x401, 0x7, 0x7, 0x9, 0x3a4f, 0xe73, 0x800, 0x3, 0x5, 0x3, 0x0, 0x0, 0xfffff701, 0x9, 0x3, 0x533b, 0x7fff, 0x80000001, 0x44, 0x0, 0x8649, 0x9, 0xfffffffd, 0x5, 0x9, 0x7fff, 0x5, 0xdd8418f3, 0xeda, 0x5, 0x6, 0x426, 0x6, 0xb, 0x1ff, 0x4955, 0x6, 0x8, 0x3ff, 0x8, 0x3, 0x2114d6f5, 0x5, 0xa, 0x4, 0x9, 0xfffffffc, 0x4, 0x8001, 0xff, 0x0, 0x8, 0x5, 0x3, 0x3, 0x2, 0x2, 0xfffffff9, 0x0, 0x7fffffff, 0x39cf7227, 0x2, 0x8, 0x1, 0x10001, 0x9, 0x10001, 0x7, 0xcba, 0x3, 0x40, 0x3ff, 0x101, 0x2, 0x6, 0x9, 0x1, 0xfffffff5, 0x6, 0xf, 0x7fff, 0x1602, 0x1, 0x2, 0x2, 0x9, 0x9, 0x0, 0x5, 0x1, 0x6, 0xffffffff, 0x36eedc64, 0x2, 0x3, 0x40, 0xffffffff, 0x713, 0x8000, 0x6, 0x4, 0x4, 0xfffffff7, 0x3, 0xf, 0x1e, 0xf5, 0x6e, 0x1800, 0x0, 0xb, 0x59, 0x8001, 0x0, 0x4, 0x3, 0x59, 0x8, 0x53, 0x81, 0x7, 0x7, 0x8, 0x3, 0x2, 0x7, 0x5, 0x3379, 0x7, 0x6, 0x2, 0xfffffffd, 0x3, 0x2, 0x4, 0x7f, 0x7, 0x0, 0x8, 0x1, 0xde9, 0x6, 0xf, 0x7, 0x9, 0x6, 0xbeb1, 0x3, 0x4, 0x9, 0x3, 0x6, 0x2, 0x3ff, 0x7, 0x7, 0x4, 0x5, 0x401, 0x6, 0x0, 0x7, 0x7, 0x8, 0xa, 0xa, 0x2, 0xfffffff7, 0x9, 0x0, 0x28b8, 0x9, 0x9, 0x6, 0xffffffff, 0x41b1, 0x6f04, 0x5, 0xd6a, 0xf89, 0x3, 0xa, 0x200, 0x3, 0x9, 0x5, 0x6, 0x1, 0x3, 0x9, 0xb, 0x6, 0x81, 0x2, 0x1, 0x2, 0x8001, 0x5, 0x7, 0x0, 0x4, 0x6, 0x9, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x3, 0x7, 0x6, 0x4, {0x10, 0x0, 0xa29, 0x4, 0x9, 0x6}, {0x10, 0x1, 0x7, 0x8, 0x0, 0x6}, 0x400, 0x4, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]]}, {0x46, 0x6, "6d1eefbd1d233e3581d9877f06da665fcffde46fb69e1da25dca9460019ece4f00c638c00248ec849f48235e9d15828710c6239ea47cf8c7f8da66c0c1071b03d863"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000000003000008000100"], 0x1c}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100df7a454f8a50de1a18000000"], 0x14}, 0x1, 0x0, 0x0, 0x60000090}, 0x40090) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r7 = socket(0x400000000010, 0x2, 0x0) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @local}}}, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000440)={'sit0\x00', r9, 0x20, 0x7887, 0x7250, 0xf1, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x69, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x44, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0xc, [{@multicast1, 0x4}]}, @timestamp_addr={0x44, 0xc, 0xdc, 0x1, 0x8, [{@broadcast, 0x4}]}, @generic={0x89, 0xc, "d5395981c5cdd733a13f"}, @generic={0x86, 0x3, 'r'}, @generic={0x0, 0xd, "fe42d3c50fb0ca571bdfeb"}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @ssrr={0x89, 0x17, 0xb5, [@broadcast, @local, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async, rerun: 32) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x22c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd91}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ddb5a2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x33e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x802a, @private0, 0xe6}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x80) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000002c40)=ANY=[@ANYBLOB="f0140000", @ANYRES16=0x0, @ANYBLOB="000025bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x14f0}, 0x1, 0x0, 0x0, 0x24048000}, 0x800) r10 = socket(0x10, 0x3, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x7) (async) sendmsg$kcm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x9, 0xb, 0x2}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0)=@int=0x8fe0, 0x4) writev(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) 256.88661ms ago: executing program 3 (id=1443): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000005c0)=0xffffffff, 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, 0x0, 0x56) 121.694228ms ago: executing program 1 (id=1444): socket$can_raw(0x1d, 0x3, 0x1) close(0x4) 120.692661ms ago: executing program 2 (id=1445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="04000000000076c55edb3e8914eb0000000000001cc592ea516be35562af41dfaad89a41c986fa6169524847420200000089c5dd98d57b636fb70ef1a5ee31", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000040)=0x80000000, 0x4) socket$isdn(0x22, 0x3, 0x25) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r5 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}, 0x1, 0x0, 0x0, 0x4044051}, 0x0) 12.205747ms ago: executing program 1 (id=1446): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc0850) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000004c0)={r0, 0x4, 0x7, 0x7}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0xfffffffb, 0x200, 0x8000}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd70100400000005020000"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x400b5) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="201843cb3be3a459cac0469c46c605e1f68c3c32a5ecb5c3b4f3a01c41e6e496e33d79010195e65637b029c8f9cf96b1bcdcd5135bfd92e20eb4a1269b7203fe6bcf8f76319315b6a82a46357349d96ba9ac4976e1e44ed5741aa63964fd7c5ac4cefd3451f8ee4fdc15df66c57b8216a3753817a90db8c77139e3e93fcfd3240e239bb79d31edbeed91714688f93401c97152f83acf396c79333716e6f38d0b477fafe2a434093d1db9af16e6b64497836a", @ANYRES16=r1, @ANYBLOB="020026bd7000fcdbdf25020000000c0016006c16ca000000000005000700020000000c001600000000000000000014002000fe8000000000000000000000000000bb"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x80000005, 0x0, 0x2, 0x1, 0x100}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) syz_open_procfs$namespace(r8, &(0x7f00000000c0)='ns/time_for_children\x00') r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1447): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[], 0x20) kernel console output (not intermixed with test programs): .929898][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.937787][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.093536][ T7209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.113856][ T7209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.173607][ T7244] can: request_module (can-proto-0) failed. [ 120.430815][ T1060] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.465689][ T7236] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 120.474970][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 120.506034][ T1060] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.566965][ T1060] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.652589][ T1060] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.667616][ T1060] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.678194][ T1060] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.688268][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 120.721162][ T1060] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.741704][ T7256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 120.790927][ T1060] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.794041][ T7260] netlink: 64 bytes leftover after parsing attributes in process `syz.0.303'. [ 120.841212][ T1060] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.853491][ T7256] netlink: 256 bytes leftover after parsing attributes in process `syz.0.303'. [ 120.890966][ T1060] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.922205][ T1060] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.942758][ T1060] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.953572][ T7267] xfrm0: entered promiscuous mode [ 120.961142][ T7267] xfrm0: entered allmulticast mode [ 121.231642][ T7267] xfrm0: left promiscuous mode [ 121.237531][ T7267] xfrm0: left allmulticast mode [ 121.258941][ T7267] 0·: left allmulticast mode [ 121.264755][ T7267] hsr_slave_0: left allmulticast mode [ 121.270154][ T7267] hsr_slave_1: left allmulticast mode [ 121.301037][ T7267] vlan0: left promiscuous mode [ 121.439382][ T3528] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.448991][ T3528] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.491181][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.516598][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.716876][ T7294] netlink: 'syz.3.311': attribute type 5 has an invalid length. [ 121.757802][ T7294] netlink: 'syz.3.311': attribute type 6 has an invalid length. [ 122.249696][ T7322] __nla_validate_parse: 39 callbacks suppressed [ 122.249713][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.318'. [ 122.270066][ T7322] netlink: 'syz.2.318': attribute type 10 has an invalid length. [ 122.278963][ T7322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.318'. [ 122.299279][ T7322] dummy0: entered promiscuous mode [ 122.308100][ T7322] dummy0: entered allmulticast mode [ 122.318875][ T7322] bridge0: port 3(dummy0) entered blocking state [ 122.329027][ T7322] bridge0: port 3(dummy0) entered disabled state [ 122.628475][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'. [ 122.680086][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'. [ 123.230499][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.325'. [ 123.591989][ T7362] netlink: 'syz.2.330': attribute type 10 has an invalid length. [ 123.778647][ T7368] netlink: 'syz.4.332': attribute type 27 has an invalid length. [ 123.800989][ T7368] netlink: 'syz.4.332': attribute type 27 has an invalid length. [ 123.829063][ T7364] bond2: (slave ip6gretap1): making interface the new active one [ 123.830612][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 123.863694][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 123.894093][ T7364] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 123.954105][ T7362] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.984320][ T7362] bond0: (slave team0): Enslaving as an active interface with an up link [ 124.553281][ T7389] netlink: 'syz.4.337': attribute type 2 has an invalid length. [ 124.576715][ T7389] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 124.600388][ T7389] netlink: 'syz.4.337': attribute type 1 has an invalid length. [ 124.627798][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.336'. [ 124.652927][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.336'. [ 124.975330][ T7420] netlink: 'syz.0.342': attribute type 1 has an invalid length. [ 125.059321][ T7422] netlink: 40 bytes leftover after parsing attributes in process `syz.4.343'. [ 125.373556][ T7435] netlink: 'syz.4.346': attribute type 10 has an invalid length. [ 125.395295][ T7435] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.702067][ T7443] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 125.800646][ T7443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.941476][ T7445] bond1: (slave gretap1): making interface the new active one [ 125.987820][ T7445] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 126.113049][ T7443] macsec1: entered promiscuous mode [ 126.121757][ T7443] bond0: entered promiscuous mode [ 126.127455][ T7443] bond_slave_0: entered promiscuous mode [ 126.159545][ T7443] bond_slave_1: entered promiscuous mode [ 126.170403][ T7443] team0: entered promiscuous mode [ 126.185391][ T7443] team_slave_0: entered promiscuous mode [ 126.192180][ T7443] team_slave_1: entered promiscuous mode [ 126.206739][ T7443] bond0: left promiscuous mode [ 126.211804][ T7443] bond_slave_0: left promiscuous mode [ 126.234354][ T7443] bond_slave_1: left promiscuous mode [ 126.240042][ T7443] team0: left promiscuous mode [ 126.248085][ T7443] team_slave_0: left promiscuous mode [ 126.257468][ T7443] team_slave_1: left promiscuous mode [ 126.332248][ T7455] netlink: 'syz.3.353': attribute type 6 has an invalid length. [ 126.738724][ T7219] IPVS: starting estimator thread 0... [ 126.852873][ T7480] IPVS: using max 33 ests per chain, 79200 per kthread [ 127.434606][ T7503] __nla_validate_parse: 9 callbacks suppressed [ 127.434623][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'. [ 127.458031][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'. [ 127.507929][ T7506] vxcan3: entered allmulticast mode [ 127.676090][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.737648][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 127.783566][ T7514] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0 [ 127.797547][ T7514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.967115][ T7517] raw_sendmsg: syz.3.367 forgot to set AF_INET. Fix it! [ 128.169423][ T7525] tipc: Enabled bearer , priority 0 [ 128.189972][ T7525] syzkaller0: entered promiscuous mode [ 128.202588][ T7525] syzkaller0: entered allmulticast mode [ 128.211600][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.371'. [ 128.252930][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.371'. [ 128.364474][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 128.399777][ T7525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.370'. [ 128.461586][ T7531] tipc: Resetting bearer [ 128.480027][ T7524] tipc: Resetting bearer [ 128.526828][ T7524] tipc: Disabling bearer [ 128.546464][ T7543] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 128.701395][ T7554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.379'. [ 128.727548][ T7554] netlink: 256 bytes leftover after parsing attributes in process `syz.3.379'. [ 128.781413][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.378'. [ 128.791586][ T7552] tc_dump_action: action bad kind [ 129.449119][ T7589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 130.078323][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.086165][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.408172][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.448369][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.509757][ T30] audit: type=1800 audit(1756551776.589:3): pid=7617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.393" name="memory.events" dev="tmpfs" ino=391 res=0 errno=0 [ 130.759309][ T7602] team0: left promiscuous mode [ 130.768908][ T7602] team_slave_0: left promiscuous mode [ 130.779156][ T7602] team_slave_1: left promiscuous mode [ 130.858698][ T7613] bridge2: port 1(veth3) entered blocking state [ 130.869110][ T7613] bridge2: port 1(veth3) entered disabled state [ 130.880908][ T7613] veth3: entered allmulticast mode [ 130.910138][ T7613] veth3: entered promiscuous mode [ 130.928411][ T7618] bridge2: port 2(veth0_to_bond) entered blocking state [ 130.938594][ T7618] bridge2: port 2(veth0_to_bond) entered disabled state [ 130.949556][ T7618] veth0_to_bond: entered allmulticast mode [ 130.966829][ T7618] veth0_to_bond: entered promiscuous mode [ 131.033997][ T7620] vlan2: entered allmulticast mode [ 131.040080][ T7620] veth1: entered allmulticast mode [ 131.051424][ T7620] bridge2: port 3(vlan2) entered blocking state [ 131.058690][ T7620] bridge2: port 3(vlan2) entered disabled state [ 131.068988][ T7620] vlan2: entered promiscuous mode [ 131.080978][ T7620] veth1: entered promiscuous mode [ 131.090267][ T7625] tipc: Enabling of bearer rejected, failed to enable media [ 131.120943][ T6709] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.143763][ T6709] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.182999][ T6709] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.219902][ T6709] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.363930][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.371986][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.491138][ T7640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.714844][ T7654] openvswitch: netlink: Flow key attr not present in new flow. [ 131.742423][ T7660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.171032][ T7674] macsec0: entered promiscuous mode [ 132.176562][ T7674] macsec0: entered allmulticast mode [ 132.184049][ T7675] macsec0: left promiscuous mode [ 132.195869][ T7675] macsec0: left allmulticast mode [ 132.661770][ T7706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.897030][ T7713] __nla_validate_parse: 12 callbacks suppressed [ 132.897049][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 132.949788][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951503][ T7718] netlink: 48 bytes leftover after parsing attributes in process `syz.2.425'. [ 132.956236][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.361776][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 133.381402][ T7745] netlink: 'syz.3.432': attribute type 3 has an invalid length. [ 133.400372][ T7745] netlink: 3 bytes leftover after parsing attributes in process `syz.3.432'. [ 133.411974][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 133.479794][ T7757] dvmrp8: entered allmulticast mode [ 133.639858][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.436'. [ 133.649259][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.436'. [ 133.651198][ T7764] netlink: 124 bytes leftover after parsing attributes in process `syz.4.437'. [ 133.816008][ T7766] nbd2: detected capacity change from 0 to 63 [ 133.824866][ T7773] block nbd2: NBD_DISCONNECT [ 133.825836][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 133.874276][ T7773] block nbd2: Disconnected due to user request. [ 133.897897][ T7773] block nbd2: shutting down sockets [ 133.916081][ T7766] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 133.955108][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 134.319906][ T7808] netlink: 'syz.0.446': attribute type 28 has an invalid length. [ 134.470085][ T30] audit: type=1107 audit(1756551780.549:4): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_¥3¥öR#]»ä šås*¿¥§?Gø…[ê¡ZÀcÆ.~)€`¸ÂH¦ÃµË½ZÝ¿b^óá°Òz[Ë뫲ô§ß6±]1¢<æŽ[|Ïpßõ˜ø°·yiµ@±’°n´ÃOÓÏÇ6zv¿¬D{Ô5ªAÕ¥ÒKs£øÖ©3^¶‡pè1™U%«A*=çþ§*cP×"—¿Ã‚¸â´Á\f v¶æï0fLœ£m†s0„àöüñ—ºûW_^¯¿' [ 134.745514][ T7830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.848075][ T7842] _ÐZ`Ô€@S: entered promiscuous mode [ 135.290496][ T7868] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 135.302443][ T7868] team0: Device ipvlan2 is already an upper device of the team interface [ 135.530896][ T7884] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 135.552723][ T7882] tipc: Started in network mode [ 135.557631][ T7882] tipc: Node identity b61139e1ad7b, cluster identity 4711 [ 135.568760][ T7882] tipc: Enabled bearer , priority 0 [ 135.579327][ T7884] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 135.593787][ T7884] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.613912][ T7883] tipc: Enabling of bearer rejected, already enabled [ 135.630540][ T7882] syzkaller0: entered promiscuous mode [ 135.636809][ T7882] syzkaller0: entered allmulticast mode [ 135.678286][ T7895] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 135.774393][ T7883] tipc: Resetting bearer [ 135.798672][ T7894] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 135.815539][ T7892] vlan0: entered promiscuous mode [ 135.815688][ T7883] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 135.831897][ T7880] tipc: Resetting bearer [ 135.856445][ T7880] tipc: Disabling bearer [ 136.020400][ T7910] netlink: 'syz.4.478': attribute type 3 has an invalid length. [ 136.050232][ T7913] tipc: Enabled bearer , priority 0 [ 136.064394][ T7912] tipc: Resetting bearer [ 136.102020][ T7911] tipc: Disabling bearer [ 136.111944][ T7891] syz.1.467 (7891) used greatest stack depth: 15128 bytes left [ 136.263657][ T7922] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 136.448292][ T7930] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 136.458681][ T7930] syzkaller1: linktype set to 778 [ 136.849472][ T7953] netlink: 'syz.2.492': attribute type 13 has an invalid length. [ 137.043634][ T7961] netlink: 'syz.1.495': attribute type 4 has an invalid length. [ 137.411757][ T7976] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 138.041798][ T8005] __nla_validate_parse: 11 callbacks suppressed [ 138.041817][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'. [ 138.518944][ T8015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.769753][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 138.782297][ T8026] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.850869][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.005348][ T51] Bluetooth: hci4: link tx timeout [ 139.010877][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.041193][ T5866] Bluetooth: hci4: link tx timeout [ 139.047290][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.055055][ T5866] Bluetooth: hci4: link tx timeout [ 139.060262][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.224680][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.517'. [ 139.305374][ T8043] bridge0: entered promiscuous mode [ 139.341894][ T8053] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 139.350256][ T8043] bridge0: port 3(macvlan3) entered blocking state [ 139.364094][ T8043] bridge0: port 3(macvlan3) entered disabled state [ 139.375809][ T8043] macvlan3: entered allmulticast mode [ 139.381418][ T8043] bridge0: entered allmulticast mode [ 139.392928][ T8043] macvlan3: left allmulticast mode [ 139.398186][ T8043] bridge0: left allmulticast mode [ 139.416008][ T8043] bridge0: left promiscuous mode [ 139.519353][ T8053] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.549024][ T8063] bond3: (slave ip6gretap2): making interface the new active one [ 139.568903][ T8063] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 139.629573][ T8069] veth3: entered promiscuous mode [ 139.638863][ T8069] bond3: (slave veth3): Enslaving as an active interface with a down link [ 139.648736][ T8059] syzkaller1: entered promiscuous mode [ 139.657336][ T8059] syzkaller1: entered allmulticast mode [ 139.668300][ T8053] erspan0: entered allmulticast mode [ 139.690357][ T8053] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 139.749191][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.524'. [ 139.773453][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.524'. [ 139.852448][ T8082] bridge0: entered allmulticast mode [ 139.879239][ T8082] pim6reg: entered allmulticast mode [ 139.891747][ T8084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.527'. [ 139.966540][ T8088] netlink: 84 bytes leftover after parsing attributes in process `syz.3.526'. [ 140.071722][ T8090] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 140.229376][ T8090] netlink: 232 bytes leftover after parsing attributes in process `syz.2.528'. [ 140.322635][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 140.451769][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 140.830074][ T8117] veth1_virt_wifi: entered allmulticast mode [ 141.082964][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 141.281854][ T8141] netlink: 'syz.0.544': attribute type 8 has an invalid length. [ 141.823764][ T8168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.974942][ T8174] FAULT_INJECTION: forcing a failure. [ 141.974942][ T8174] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.019004][ T8174] CPU: 1 UID: 0 PID: 8174 Comm: syz.3.551 Not tainted syzkaller #0 PREEMPT(full) [ 142.019028][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.019045][ T8174] Call Trace: [ 142.019053][ T8174] [ 142.019061][ T8174] dump_stack_lvl+0x189/0x250 [ 142.019094][ T8174] ? __pfx____ratelimit+0x10/0x10 [ 142.019117][ T8174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.019136][ T8174] ? __pfx__printk+0x10/0x10 [ 142.019158][ T8174] ? __might_fault+0xb0/0x130 [ 142.019191][ T8174] should_fail_ex+0x414/0x560 [ 142.019218][ T8174] _copy_from_user+0x2d/0xb0 [ 142.019237][ T8174] ___sys_sendmsg+0x158/0x2a0 [ 142.019259][ T8174] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.019315][ T8174] ? __fget_files+0x2a/0x420 [ 142.019330][ T8174] ? __fget_files+0x3a0/0x420 [ 142.019356][ T8174] __sys_sendmmsg+0x227/0x430 [ 142.019380][ T8174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.019396][ T8174] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 142.019441][ T8174] ? ksys_write+0x22a/0x250 [ 142.019464][ T8174] ? __pfx_ksys_write+0x10/0x10 [ 142.019481][ T8174] ? rcu_is_watching+0x15/0xb0 [ 142.019504][ T8174] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.019530][ T8174] do_syscall_64+0xfa/0x3b0 [ 142.019546][ T8174] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.019561][ T8174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.019577][ T8174] ? clear_bhb_loop+0x60/0xb0 [ 142.019597][ T8174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.019613][ T8174] RIP: 0033:0x7f507e38ebe9 [ 142.019633][ T8174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.019653][ T8174] RSP: 002b:00007f507f154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.019675][ T8174] RAX: ffffffffffffffda RBX: 00007f507e5c5fa0 RCX: 00007f507e38ebe9 [ 142.019687][ T8174] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 142.019698][ T8174] RBP: 00007f507f154090 R08: 0000000000000000 R09: 0000000000000000 [ 142.019708][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.019717][ T8174] R13: 00007f507e5c6038 R14: 00007f507e5c5fa0 R15: 00007ffdca04d6d8 [ 142.019746][ T8174] [ 142.344625][ T30] audit: type=1800 audit(1756551788.409:5): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.548" name="memory.events" dev="tmpfs" ino=468 res=0 errno=0 [ 142.588280][ T8184] tipc: Enabled bearer , priority 0 [ 142.598613][ T8184] syzkaller0: entered promiscuous mode [ 142.604479][ T8184] syzkaller0: entered allmulticast mode [ 142.622841][ T8175] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 142.645143][ T8184] tipc: Resetting bearer [ 142.661552][ T8182] tipc: Resetting bearer [ 142.681387][ T8182] tipc: Disabling bearer [ 143.145457][ T8207] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 146.343875][ T8216] netlink: 'syz.3.565': attribute type 3 has an invalid length. [ 146.375815][ T8221] __nla_validate_parse: 5 callbacks suppressed [ 146.375831][ T8221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.562'. [ 146.456317][ T8221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.562'. [ 146.723137][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 146.872348][ T8241] netlink: 72 bytes leftover after parsing attributes in process `syz.3.570'. [ 146.881402][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'. [ 146.893438][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 147.022855][ T8250] vlan0: left promiscuous mode [ 147.040808][ T8253] delete_channel: no stack [ 147.043177][ T8252] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 147.145704][ T8250] netlink: 68 bytes leftover after parsing attributes in process `syz.0.573'. [ 147.404896][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 147.721344][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 148.272200][ T8305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.319586][ T8309] netlink: 'syz.0.590': attribute type 4 has an invalid length. [ 148.336622][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 148.581862][ T8322] unsupported nlmsg_type 40 [ 150.216564][ T8343] tipc: Enabled bearer , priority 0 [ 150.231212][ T8344] syzkaller0: entered promiscuous mode [ 150.237619][ T8344] syzkaller0: entered allmulticast mode [ 150.339935][ T8352] tipc: Resetting bearer [ 150.341566][ T8361] netlink: 'syz.4.602': attribute type 3 has an invalid length. [ 150.414012][ T8352] tipc: Disabling bearer [ 150.658916][ T8384] netlink: 'syz.3.606': attribute type 13 has an invalid length. [ 150.694953][ T8384] netlink: 'syz.3.606': attribute type 17 has an invalid length. [ 150.898335][ T8384] erspan0: left allmulticast mode [ 151.005811][ T8406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.102974][ T8374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.150958][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.166316][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.180742][ T8374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.197804][ T8384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.364548][ T8417] netlink: 'syz.0.612': attribute type 12 has an invalid length. [ 151.756806][ T8434] netlink: 'syz.1.617': attribute type 12 has an invalid length. [ 152.106573][ T8442] __nla_validate_parse: 3 callbacks suppressed [ 152.106590][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 152.138327][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.621'. [ 152.157447][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.621'. [ 152.170807][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 152.189217][ T8448] netlink: 'syz.4.620': attribute type 6 has an invalid length. [ 152.344656][ T8451] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.622'. [ 152.742961][ T8471] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 152.792563][ T8471] netlink: 'syz.0.626': attribute type 3 has an invalid length. [ 152.844196][ T8468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 152.860791][ T8471] netlink: 564 bytes leftover after parsing attributes in process `syz.0.626'. [ 152.989598][ T8466] syzkaller0: entered promiscuous mode [ 153.003916][ T8466] syzkaller0: entered allmulticast mode [ 153.192073][ T8485] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 153.351816][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'. [ 153.372581][ T8496] netlink: 28 bytes leftover after parsing attributes in process `syz.2.633'. [ 153.630189][ T8507] vlan2: entered promiscuous mode [ 153.642240][ T8507] vlan2: entered allmulticast mode [ 153.649054][ T8507] hsr_slave_1: entered allmulticast mode [ 153.685928][ T8521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.638'. [ 154.516087][ T8579] netlink: 'syz.2.656': attribute type 3 has an invalid length. [ 154.690680][ T8586] syzkaller1: entered promiscuous mode [ 154.696642][ T8586] syzkaller1: entered allmulticast mode [ 154.707907][ T8586] !: renamed from dummy0 [ 154.906758][ T8588] netlink: 'syz.1.653': attribute type 6 has an invalid length. [ 155.297123][ T8594] nbd: must specify at least one socket [ 155.449889][ T8601] syzkaller1: entered promiscuous mode [ 155.471468][ T8601] syzkaller1: entered allmulticast mode [ 155.486294][ T8604] bond0: entered promiscuous mode [ 155.491370][ T8604] bond_slave_0: entered promiscuous mode [ 155.501977][ T8604] bond_slave_1: entered promiscuous mode [ 155.508755][ T8604] team0: entered promiscuous mode [ 155.518716][ T8604] team_slave_0: entered promiscuous mode [ 155.525198][ T8604] team_slave_1: entered promiscuous mode [ 155.541083][ T8604] batadv0: entered promiscuous mode [ 155.548714][ T8604] debugfs: 'hsr1' already exists in 'hsr' [ 155.560199][ T8604] Cannot create hsr debugfs directory [ 155.566314][ T8604] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 155.576611][ T8604] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 155.587358][ T8604] hsr1: entered allmulticast mode [ 155.596126][ T8604] bond0: entered allmulticast mode [ 155.601366][ T8604] bond_slave_0: entered allmulticast mode [ 155.607537][ T8604] bond_slave_1: entered allmulticast mode [ 155.613643][ T8604] team0: entered allmulticast mode [ 155.618864][ T8604] team_slave_0: entered allmulticast mode [ 155.624697][ T8604] team_slave_1: entered allmulticast mode [ 155.630435][ T8604] batadv0: entered allmulticast mode [ 155.636432][ T8604] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 155.646959][ T8606] tipc: Started in network mode [ 155.652734][ T8606] tipc: Node identity c6dd5ab6a933, cluster identity 4711 [ 155.659964][ T8606] tipc: Enabled bearer , priority 0 [ 155.693798][ T8601] syzkaller0: entered promiscuous mode [ 155.699300][ T8601] syzkaller0: entered allmulticast mode [ 155.705320][ T8601] tipc: Resetting bearer [ 155.775373][ T8600] tipc: Resetting bearer [ 156.762802][ T5982] tipc: Node number set to 1877891766 [ 157.283511][ T8600] tipc: Disabling bearer [ 157.319644][ T8625] __nla_validate_parse: 6 callbacks suppressed [ 157.319663][ T8625] netlink: 32 bytes leftover after parsing attributes in process `syz.4.668'. [ 157.486560][ T8635] netlink: 27 bytes leftover after parsing attributes in process `syz.1.671'. [ 157.516424][ T8635] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 157.592154][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 157.841038][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 158.080863][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'. [ 158.091887][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 158.092292][ T8682] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 158.281814][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 158.710299][ T8704] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 158.857053][ T8710] bond2: (slave geneve2): making interface the new active one [ 158.871432][ T8710] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 158.948353][ T1142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 158.971157][ T1142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.021242][ T1142] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.075022][ T1142] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.870507][ T8756] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 159.879493][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.705'. [ 159.936178][ T8756] geneve0: entered promiscuous mode [ 159.942260][ T8756] geneve0: entered allmulticast mode [ 159.975938][ T8756] team0: Port device geneve0 added [ 159.997431][ T3528] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.029987][ T3528] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.069938][ T3528] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.109636][ T3528] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.356620][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.363613][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.432706][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 196.439714][ T5879] Bluetooth: hci1: command 0x0406 tx timeout [ 196.443668][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 227.469478][ T8798] netlink: 'syz.1.713': attribute type 19 has an invalid length. [ 227.480746][ T8797] tipc: Can't bind to reserved service type 1 [ 227.710164][ T8807] tc_dump_action: action bad kind [ 228.065710][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.724'. [ 228.106550][ T8824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.724'. [ 228.135458][ T8796] netlink: 156 bytes leftover after parsing attributes in process `syz.0.712'. [ 228.205064][ T8838] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 228.216291][ T8838] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 228.249206][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 228.298774][ T8838] netlink: 'syz.3.726': attribute type 30 has an invalid length. [ 228.322724][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.336015][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.346642][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 228.370189][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.384163][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.396242][ T8838] netlink: 'syz.3.726': attribute type 30 has an invalid length. [ 228.411293][ T8843] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 228.426281][ T8843] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.726'. [ 229.209124][ T8868] netlink: 'syz.1.734': attribute type 2 has an invalid length. [ 230.235405][ T8898] netlink: 'syz.4.740': attribute type 2 has an invalid length. [ 230.251583][ T8898] netlink: 136 bytes leftover after parsing attributes in process `syz.4.740'. [ 230.474035][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.744'. [ 230.604377][ T8925] netlink: 256 bytes leftover after parsing attributes in process `syz.2.746'. [ 230.724913][ T8930] batadv_slave_1: entered promiscuous mode [ 230.777036][ T8932] netlink: 68 bytes leftover after parsing attributes in process `syz.0.749'. [ 230.804674][ T8934] netlink: 'syz.3.748': attribute type 1 has an invalid length. [ 230.919654][ T8936] bridge_slave_1: left allmulticast mode [ 230.942638][ T8936] bridge_slave_1: left promiscuous mode [ 230.955393][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.965674][ T8936] bridge_slave_0: left allmulticast mode [ 230.971498][ T8936] bridge_slave_0: left promiscuous mode [ 230.983315][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.035252][ T8936] bridge0 (unregistering): left allmulticast mode [ 231.426471][ T8923] batadv_slave_1: left promiscuous mode [ 232.063262][ T8959] netlink: 'syz.3.757': attribute type 21 has an invalid length. [ 232.145482][ T8959] netlink: 'syz.3.757': attribute type 4 has an invalid length. [ 232.181778][ T8959] netlink: 'syz.3.757': attribute type 5 has an invalid length. [ 232.520949][ T8982] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 232.547661][ T1142] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 232.547691][ T8982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.683456][ T3528] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 233.442303][ T9016] bridge_slave_0: left allmulticast mode [ 233.456322][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.470057][ T9016] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 233.781481][ T9028] __nla_validate_parse: 6 callbacks suppressed [ 233.781499][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 233.849787][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 233.858801][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 233.873843][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 233.891702][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 233.892858][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.915130][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 233.928072][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.940206][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 233.951606][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.968649][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.203635][ T9056] validate_nla: 1 callbacks suppressed [ 234.203654][ T9056] netlink: 'syz.3.777': attribute type 10 has an invalid length. [ 234.236001][ T9056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.777'. [ 234.277106][ T9056] bond0: entered promiscuous mode [ 234.299416][ T9056] bond_slave_0: entered promiscuous mode [ 234.322669][ T9056] bond0: entered allmulticast mode [ 234.328325][ T9056] bond_slave_0: entered allmulticast mode [ 234.340756][ T9056] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 234.380783][ T9067] netlink: 48 bytes leftover after parsing attributes in process `syz.0.783'. [ 234.522066][ T9074] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 234.534505][ T9074] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 234.546460][ T9074] netlink: 'syz.0.786': attribute type 12 has an invalid length. [ 234.588820][ T9074] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535 [ 234.708343][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 234.844501][ T7219] IPVS: starting estimator thread 0... [ 234.943015][ T9096] IPVS: using max 31 ests per chain, 74400 per kthread [ 235.613777][ T9143] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 235.838060][ T9164] batman_adv: batadv0: Adding interface: dummy0 [ 235.844602][ T9164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.870200][ T9164] batman_adv: batadv0: Interface activated: dummy0 [ 235.900855][ T9163] batadv0: mtu less than device minimum [ 235.911307][ T9163] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 235.923442][ T9163] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 236.433430][ T9194] atomic_op ffff888032d56198 conn xmit_atomic 0000000000000000 [ 237.820171][ T9252] syzkaller0: entered promiscuous mode [ 237.826541][ T9252] syzkaller0: entered allmulticast mode [ 239.884448][ T9308] netlink: 'syz.2.841': attribute type 30 has an invalid length. [ 239.931340][ T9308] nbd: must specify a size in bytes for the device [ 239.944071][ T9308] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 239.975754][ T9308] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 240.022818][ T9308] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 240.048631][ T9308] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 240.066636][ T9302] __nla_validate_parse: 8 callbacks suppressed [ 240.066654][ T9302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 240.182005][ T9320] netlink: 256 bytes leftover after parsing attributes in process `syz.1.847'. [ 240.297659][ T9323] geneve2: entered promiscuous mode [ 240.304709][ T9323] geneve2: entered allmulticast mode [ 240.316557][ T1060] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.335935][ T1060] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.380326][ T1060] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.409677][ T1060] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.414264][ T9329] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 240.509247][ T9329] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 240.522959][ T9329] team0: Failed to send options change via netlink (err -105) [ 240.530496][ T9329] team0: Port device dummy0 added [ 240.856980][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 241.004738][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 241.031408][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 241.071282][ T9358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.855'. [ 241.570449][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.861'. [ 241.696745][ T9393] netlink: 'syz.3.860': attribute type 9 has an invalid length. [ 241.707581][ T9393] netlink: 224 bytes leftover after parsing attributes in process `syz.3.860'. [ 241.863946][ T9410] netlink: 248 bytes leftover after parsing attributes in process `syz.4.864'. [ 241.909364][ T9412] net_ratelimit: 17 callbacks suppressed [ 241.909382][ T9412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.943471][ T9412] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 241.958670][ T9414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.867'. [ 242.034276][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.053670][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.093685][ T9420] netlink: 'syz.2.866': attribute type 10 has an invalid length. [ 242.119324][ T9420] team0: Device ipvlan1 failed to register rx_handler [ 242.445583][ T9435] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 242.833330][ T9468] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20001 [ 243.786338][ T9514] ip6tnl1: entered promiscuous mode [ 243.801007][ T9514] ip6tnl1: entered allmulticast mode [ 243.952413][ T9519] netlink: 'syz.2.891': attribute type 2 has an invalid length. [ 243.970589][ T9520] netlink: 'syz.4.890': attribute type 13 has an invalid length. [ 244.035227][ T9520] netlink: 'syz.4.890': attribute type 17 has an invalid length. [ 244.119539][ T9532] sctp: [Deprecated]: syz.3.892 (pid 9532) Use of int in maxseg socket option. [ 244.119539][ T9532] Use struct sctp_assoc_value instead [ 244.211501][ T9520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.224293][ T9520] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.234990][ T9520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.365819][ T9540] bridge_slave_0: default FDB implementation only supports local addresses [ 244.458712][ T9548] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.494441][ T9548] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.572240][ T9548] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.583788][ T9548] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.751813][ T9548] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.764454][ T9548] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.879900][ T9548] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.892024][ T9548] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.993361][ T30] audit: type=1800 audit(1756551891.079:6): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.904" name="memory.events" dev="tmpfs" ino=948 res=0 errno=0 [ 245.141097][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.149850][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.201848][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.236383][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.279675][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.288715][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.335424][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.362546][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.152395][ T9627] __nla_validate_parse: 14 callbacks suppressed [ 246.152413][ T9627] netlink: 256 bytes leftover after parsing attributes in process `syz.1.915'. [ 246.181914][ T9627] netlink: 48 bytes leftover after parsing attributes in process `syz.1.915'. [ 246.216276][ T9629] dvmrp8: left allmulticast mode [ 246.326194][ T9634] netlink: 56 bytes leftover after parsing attributes in process `syz.2.917'. [ 246.339299][ T9627] lo speed is unknown, defaulting to 1000 [ 246.351074][ T9634] Set syz0 is full, maxelem 0 reached [ 246.391517][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'. [ 246.438050][ T9627] lo speed is unknown, defaulting to 1000 [ 246.464987][ T9627] lo speed is unknown, defaulting to 1000 [ 246.619943][ T9645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.920'. [ 246.649347][ T9645] netlink: 'syz.0.920': attribute type 1 has an invalid length. [ 246.667739][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'. [ 246.866127][ T5982] lo speed is unknown, defaulting to 1000 [ 246.880042][ T9627] infiniband syz0: set down [ 246.912830][ T9627] infiniband syz0: added lo [ 247.049182][ T9666] netlink: 68 bytes leftover after parsing attributes in process `syz.4.924'. [ 247.140115][ T9627] RDS/IB: syz0: added [ 247.156525][ T9627] smc: adding ib device syz0 with port count 1 [ 247.183088][ T9627] smc: ib device syz0 port 1 has pnetid [ 247.202576][ T7397] lo speed is unknown, defaulting to 1000 [ 247.252295][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.927'. [ 247.257360][ T9627] lo speed is unknown, defaulting to 1000 [ 247.288428][ T9670] tipc: Enabled bearer , priority 0 [ 247.328527][ T9669] tipc: Resetting bearer [ 248.735202][ T9669] tipc: Disabling bearer [ 248.750360][ T9685] batadv_slave_1: entered promiscuous mode [ 248.758059][ T9627] lo speed is unknown, defaulting to 1000 [ 248.764136][ T9686] batadv_slave_1: left promiscuous mode [ 248.843628][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 248.873178][ T9689] netlink: 'syz.4.931': attribute type 21 has an invalid length. [ 248.881492][ T9689] netlink: 132 bytes leftover after parsing attributes in process `syz.4.931'. [ 248.903669][ T9689] netlink: 'syz.4.931': attribute type 4 has an invalid length. [ 248.950940][ T9693] netlink: 'syz.3.934': attribute type 4 has an invalid length. [ 249.259626][ T9698] bond0: left promiscuous mode [ 249.286395][ T9698] bond_slave_0: left promiscuous mode [ 249.304822][ T9698] bond0: left allmulticast mode [ 249.320430][ T9698] bond_slave_0: left allmulticast mode [ 249.362982][ T9698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.488813][ T9705] lo speed is unknown, defaulting to 1000 [ 249.883072][ T9744] netlink: zone id is out of range [ 249.888226][ T9744] netlink: zone id is out of range [ 249.893568][ T9744] netlink: zone id is out of range [ 249.898679][ T9744] netlink: zone id is out of range [ 249.909625][ T9744] netlink: zone id is out of range [ 249.916169][ T9744] netlink: zone id is out of range [ 249.921463][ T9744] netlink: zone id is out of range [ 249.926995][ T9744] netlink: zone id is out of range [ 249.932219][ T9744] netlink: zone id is out of range [ 249.955951][ T9627] lo speed is unknown, defaulting to 1000 [ 250.265866][ T9756] nbd: must specify a device to reconfigure [ 250.488086][ T9627] lo speed is unknown, defaulting to 1000 [ 250.776519][ T9777] team0: Device gtp0 is of different type [ 250.954930][ T9627] lo speed is unknown, defaulting to 1000 [ 251.296637][ T9627] lo speed is unknown, defaulting to 1000 [ 251.311234][ T9794] __nla_validate_parse: 7 callbacks suppressed [ 251.311251][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 251.332202][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.959'. [ 251.921647][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 251.942714][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 252.122276][ T9817] netlink: 'syz.2.965': attribute type 2 has an invalid length. [ 252.149172][ T9817] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 252.162797][ T9817] netlink: 152 bytes leftover after parsing attributes in process `syz.2.965'. [ 252.340220][ T9829] netlink: 'syz.1.970': attribute type 142 has an invalid length. [ 252.475868][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 252.907060][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 253.228768][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 253.260078][ T9875] _ÐZ`Ô€@S: entered promiscuous mode [ 253.340368][ T9873] netlink: 84 bytes leftover after parsing attributes in process `syz.3.978'. [ 253.443027][ T9873] lo speed is unknown, defaulting to 1000 [ 253.545616][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 254.176410][ T9917] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 254.194582][ T9919] netlink: 'syz.0.986': attribute type 5 has an invalid length. [ 254.231961][ T9917] team0: Port device geneve0 added [ 254.240665][ T9918] tipc: Enabled bearer , priority 0 [ 254.274541][ T9907] syzkaller0: entered promiscuous mode [ 254.280305][ T9907] syzkaller0: entered allmulticast mode [ 254.294685][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.319842][ T1060] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.357198][ T1060] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.405803][ T9907] tipc: Resetting bearer [ 254.419289][ T1060] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.510093][ T9906] tipc: Resetting bearer [ 254.598977][ T9906] tipc: Disabling bearer [ 254.692414][ T9934] tipc: Enabled bearer , priority 0 [ 254.753527][ T9934] syzkaller0: entered promiscuous mode [ 254.759038][ T9934] syzkaller0: entered allmulticast mode [ 254.906465][ T9934] tipc: Resetting bearer [ 254.943451][ T9933] tipc: Resetting bearer [ 255.034486][ T9945] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 255.043789][ T9933] tipc: Disabling bearer [ 255.221961][ T9951] net_ratelimit: 12 callbacks suppressed [ 255.221978][ T9951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.571769][ T9967] bond0: (slave bond_slave_0): Releasing backup interface [ 255.602319][ T9967] bond0: (slave bond_slave_1): Releasing backup interface [ 255.642408][ T9967] team0: Port device team_slave_0 removed [ 255.651088][ T9967] team0: Port device team_slave_1 removed [ 255.661722][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.670419][ T9967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.756634][ T9972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.767652][ T9972] bond0: (slave bond3): Enslaving as an active interface with an up link [ 255.797355][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.898445][ T9980] lo speed is unknown, defaulting to 1000 [ 255.988994][ T9997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.580899][T10023] netlink: 'syz.3.1019': attribute type 2 has an invalid length. [ 256.649868][T10023] : entered promiscuous mode [ 256.653641][T10019] __nla_validate_parse: 14 callbacks suppressed [ 256.653656][T10019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 256.760468][T10019] bridge5: entered promiscuous mode [ 256.767858][T10032] netlink: 'syz.1.1017': attribute type 32 has an invalid length. [ 256.781835][T10019] bridge5: entered allmulticast mode [ 256.815641][T10019] team0: Port device bridge5 added [ 257.027290][T10034] tipc: Enabling of bearer rejected, failed to enable media [ 257.222380][T10044] tipc: Enabled bearer , priority 0 [ 257.232094][T10044] syzkaller0: entered promiscuous mode [ 257.239468][T10044] syzkaller0: entered allmulticast mode [ 257.267914][T10044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 257.291357][T10049] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20003 [ 257.295194][T10044] tipc: Resetting bearer [ 257.327851][T10051] ieee802154 phy0 wpan0: encryption failed: -90 [ 257.463019][T10043] tipc: Resetting bearer [ 257.519511][T10043] tipc: Disabling bearer [ 257.651771][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1034'. [ 257.915272][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 257.967925][T10103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1042'. [ 258.007122][T10105] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1043'. [ 258.022488][T10103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1042'. [ 258.041372][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'. [ 317.235478][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.675352][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.924272][T10116] netlink: 'syz.0.1046': attribute type 4 has an invalid length. [ 382.942761][T10116] netlink: 'syz.0.1046': attribute type 4 has an invalid length. [ 382.962641][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 382.975941][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 383.064367][T10121] nbd0: detected capacity change from 0 to 127 [ 383.081145][ T51] block nbd0: Receive control failed (result -32) [ 383.099352][T10125] lo speed is unknown, defaulting to 1000 [ 383.145097][T10135] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1050'. [ 383.587723][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 383.627280][T10160] gtp1: entered promiscuous mode [ 383.636741][T10160] gtp1: entered allmulticast mode [ 383.779703][T10142] lo speed is unknown, defaulting to 1000 [ 384.236589][T10189] syzkaller1: entered allmulticast mode [ 384.299905][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 384.668349][T10200] FAULT_INJECTION: forcing a failure. [ 384.668349][T10200] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 384.717651][T10200] CPU: 1 UID: 0 PID: 10200 Comm: syz.3.1070 Not tainted syzkaller #0 PREEMPT(full) [ 384.717678][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 384.717695][T10200] Call Trace: [ 384.717703][T10200] [ 384.717710][T10200] dump_stack_lvl+0x189/0x250 [ 384.717736][T10200] ? __pfx____ratelimit+0x10/0x10 [ 384.717761][T10200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.717780][T10200] ? __pfx__printk+0x10/0x10 [ 384.717803][T10200] ? fs_reclaim_acquire+0x7d/0x100 [ 384.717837][T10200] should_fail_ex+0x414/0x560 [ 384.717864][T10200] prepare_alloc_pages+0x213/0x610 [ 384.717889][T10200] __alloc_frozen_pages_noprof+0x123/0x370 [ 384.717911][T10200] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 384.717938][T10200] ? policy_nodemask+0x27c/0x720 [ 384.717966][T10200] alloc_pages_mpol+0x232/0x4a0 [ 384.717993][T10200] vma_alloc_folio_noprof+0xe4/0x200 [ 384.718018][T10200] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 384.718053][T10200] folio_prealloc+0x30/0x180 [ 384.718076][T10200] do_wp_page+0x1231/0x5800 [ 384.718120][T10200] ? __pfx_do_wp_page+0x10/0x10 [ 384.718136][T10200] ? do_raw_spin_lock+0x121/0x290 [ 384.718158][T10200] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 384.718190][T10200] __handle_mm_fault+0x1033/0x5440 [ 384.718229][T10200] ? __pfx___handle_mm_fault+0x10/0x10 [ 384.718265][T10200] ? follow_page_pte+0xd03/0x13e0 [ 384.718298][T10200] handle_mm_fault+0x40a/0x8e0 [ 384.718331][T10200] __get_user_pages+0x1699/0x2ce0 [ 384.718348][T10200] ? __lock_acquire+0xab9/0xd20 [ 384.718408][T10200] __gup_longterm_locked+0xde9/0x1660 [ 384.718449][T10200] ? sanity_check_pinned_pages+0x123a/0x1300 [ 384.718478][T10200] gup_fast_fallback+0x1e6a/0x2010 [ 384.718534][T10200] ? __pfx_gup_fast_fallback+0x10/0x10 [ 384.718551][T10200] ? stack_trace_save+0x9c/0xe0 [ 384.718569][T10200] ? __pfx_stack_trace_save+0x10/0x10 [ 384.718600][T10200] ? pin_user_pages_fast+0x4d/0xb0 [ 384.718622][T10200] iov_iter_extract_pages+0x35a/0x5e0 [ 384.718651][T10200] extract_iter_to_sg+0xe46/0x24e0 [ 384.718685][T10200] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 384.718729][T10200] ? __asan_memset+0x22/0x50 [ 384.718751][T10200] af_alg_get_rsgl+0x436/0x810 [ 384.718791][T10200] skcipher_recvmsg+0x3c0/0x11c0 [ 384.718816][T10200] ? aa_sk_perm+0x81e/0x950 [ 384.718852][T10200] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 384.718876][T10200] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 384.718891][T10200] ? security_socket_recvmsg+0x7e/0x2e0 [ 384.718910][T10200] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 384.718930][T10200] sock_recvmsg+0x229/0x270 [ 384.718957][T10200] ____sys_recvmsg+0x1c9/0x460 [ 384.718987][T10200] ? __pfx_____sys_recvmsg+0x10/0x10 [ 384.719024][T10200] ? import_iovec+0x74/0xa0 [ 384.719048][T10200] ___sys_recvmsg+0x1b5/0x510 [ 384.719074][T10200] ? __pfx____sys_recvmsg+0x10/0x10 [ 384.719121][T10200] ? __fget_files+0x3a0/0x420 [ 384.719149][T10200] __x64_sys_recvmsg+0x198/0x260 [ 384.719171][T10200] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 384.719200][T10200] ? __pfx_ksys_write+0x10/0x10 [ 384.719218][T10200] ? rcu_is_watching+0x15/0xb0 [ 384.719241][T10200] ? do_syscall_64+0xbe/0x3b0 [ 384.719263][T10200] do_syscall_64+0xfa/0x3b0 [ 384.719278][T10200] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.719294][T10200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.719310][T10200] ? clear_bhb_loop+0x60/0xb0 [ 384.719330][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.719350][T10200] RIP: 0033:0x7f507e38ebe9 [ 384.719366][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.719380][T10200] RSP: 002b:00007f507f154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 384.719399][T10200] RAX: ffffffffffffffda RBX: 00007f507e5c5fa0 RCX: 00007f507e38ebe9 [ 384.719411][T10200] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 384.719421][T10200] RBP: 00007f507f154090 R08: 0000000000000000 R09: 0000000000000000 [ 384.719431][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 384.719446][T10200] R13: 00007f507e5c6038 R14: 00007f507e5c5fa0 R15: 00007ffdca04d6d8 [ 384.719476][T10200] [ 385.380184][T10214] netlink: 'syz.2.1074': attribute type 9 has an invalid length. [ 385.844704][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1079'. [ 386.056047][T10238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 386.125907][T10242] lo speed is unknown, defaulting to 1000 [ 386.715089][T10276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.828426][T10282] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 386.852175][T10282] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1094'. [ 386.891058][T10276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.914849][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 386.938309][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 387.014917][T10276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.227143][T10276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.307917][T10301] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 387.409252][T10301] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.530837][ T60] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.627870][ T60] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.664975][ T60] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.690993][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.771248][T10318] FAULT_INJECTION: forcing a failure. [ 387.771248][T10318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.799084][T10318] CPU: 1 UID: 0 PID: 10318 Comm: syz.0.1105 Not tainted syzkaller #0 PREEMPT(full) [ 387.799108][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.799118][T10318] Call Trace: [ 387.799125][T10318] [ 387.799133][T10318] dump_stack_lvl+0x189/0x250 [ 387.799158][T10318] ? __pfx____ratelimit+0x10/0x10 [ 387.799182][T10318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.799200][T10318] ? __pfx__printk+0x10/0x10 [ 387.799235][T10318] should_fail_ex+0x414/0x560 [ 387.799262][T10318] _copy_from_user+0x2d/0xb0 [ 387.799281][T10318] copy_from_sockptr+0x5e/0xa0 [ 387.799306][T10318] do_ipv6_setsockopt+0x1741/0x2eb0 [ 387.799338][T10318] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 387.799361][T10318] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 387.799396][T10318] ? vfs_write+0x956/0xb30 [ 387.799421][T10318] ? __pfx___might_resched+0x10/0x10 [ 387.799448][T10318] ? __lock_acquire+0xab9/0xd20 [ 387.799476][T10318] ? aa_sk_perm+0x81e/0x950 [ 387.799511][T10318] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.799539][T10318] ? __fget_files+0x2a/0x420 [ 387.799552][T10318] ? aa_sock_opt_perm+0xff/0x1b0 [ 387.799572][T10318] ipv6_setsockopt+0x59/0x170 [ 387.799586][T10318] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 387.799612][T10318] do_sock_setsockopt+0x179/0x1b0 [ 387.799635][T10318] __x64_sys_setsockopt+0x13f/0x1b0 [ 387.799659][T10318] do_syscall_64+0xfa/0x3b0 [ 387.799674][T10318] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.799690][T10318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.799707][T10318] ? clear_bhb_loop+0x60/0xb0 [ 387.799727][T10318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.799743][T10318] RIP: 0033:0x7f5f2638ebe9 [ 387.799759][T10318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.799772][T10318] RSP: 002b:00007f5f27209038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 387.799790][T10318] RAX: ffffffffffffffda RBX: 00007f5f265c5fa0 RCX: 00007f5f2638ebe9 [ 387.799803][T10318] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 387.799812][T10318] RBP: 00007f5f27209090 R08: 0000000000000014 R09: 0000000000000000 [ 387.799823][T10318] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 387.799833][T10318] R13: 00007f5f265c6038 R14: 00007f5f265c5fa0 R15: 00007fffe3e1d928 [ 387.799863][T10318] [ 388.289047][T10329] __nla_validate_parse: 2 callbacks suppressed [ 388.289064][T10329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1108'. [ 388.410373][T10342] bond3: entered promiscuous mode [ 388.427606][T10342] bond3: entered allmulticast mode [ 388.435848][T10342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.618687][T10363] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1117'. [ 388.625834][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'. [ 388.667631][T10366] FAULT_INJECTION: forcing a failure. [ 388.667631][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 388.672259][T10363] batadv1: entered promiscuous mode [ 388.685243][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.0.1119 Not tainted syzkaller #0 PREEMPT(full) [ 388.685267][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.685276][T10366] Call Trace: [ 388.685283][T10366] [ 388.685290][T10366] dump_stack_lvl+0x189/0x250 [ 388.685314][T10366] ? __pfx____ratelimit+0x10/0x10 [ 388.685338][T10366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.685356][T10366] ? __pfx__printk+0x10/0x10 [ 388.685380][T10366] ? __pfx___might_resched+0x10/0x10 [ 388.685396][T10366] ? fs_reclaim_acquire+0x7d/0x100 [ 388.685423][T10366] should_fail_ex+0x414/0x560 [ 388.685449][T10366] should_failslab+0xa8/0x100 [ 388.685472][T10366] __kmalloc_noprof+0xcb/0x4f0 [ 388.685491][T10366] ? sock_kmalloc+0xd6/0x160 [ 388.685515][T10366] sock_kmalloc+0xd6/0x160 [ 388.685536][T10366] ipv6_sock_ac_join+0x325/0x8c0 [ 388.685566][T10366] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 388.685589][T10366] ? _copy_from_user+0x94/0xb0 [ 388.685611][T10366] do_ipv6_setsockopt+0x1e90/0x2eb0 [ 388.685644][T10366] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 388.685666][T10366] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 388.685701][T10366] ? vfs_write+0x956/0xb30 [ 388.685725][T10366] ? __pfx___might_resched+0x10/0x10 [ 388.685749][T10366] ? __lock_acquire+0xab9/0xd20 [ 388.685777][T10366] ? aa_sk_perm+0x81e/0x950 [ 388.685803][T10366] ? __pfx_aa_sk_perm+0x10/0x10 [ 388.685827][T10366] ? __fget_files+0x2a/0x420 [ 388.685840][T10366] ? aa_sock_opt_perm+0xff/0x1b0 [ 388.685859][T10366] ipv6_setsockopt+0x59/0x170 [ 388.685873][T10366] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 388.685897][T10366] do_sock_setsockopt+0x179/0x1b0 [ 388.685919][T10366] __x64_sys_setsockopt+0x13f/0x1b0 [ 388.685942][T10366] do_syscall_64+0xfa/0x3b0 [ 388.685957][T10366] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.685972][T10366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.685988][T10366] ? clear_bhb_loop+0x60/0xb0 [ 388.686008][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.686023][T10366] RIP: 0033:0x7f5f2638ebe9 [ 388.686038][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.686050][T10366] RSP: 002b:00007f5f27209038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 388.686068][T10366] RAX: ffffffffffffffda RBX: 00007f5f265c5fa0 RCX: 00007f5f2638ebe9 [ 388.686080][T10366] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 388.686089][T10366] RBP: 00007f5f27209090 R08: 0000000000000014 R09: 0000000000000000 [ 388.686099][T10366] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 388.686116][T10366] R13: 00007f5f265c6038 R14: 00007f5f265c5fa0 R15: 00007fffe3e1d928 [ 388.686144][T10366] [ 388.973971][T10363] batadv1: entered allmulticast mode [ 389.249275][T10397] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 389.270871][T10397] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1124'. [ 389.411455][T10397] wlan1: mtu less than device minimum [ 389.420016][T10400] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 389.441797][T10406] IPv6: Can't replace route, no match found [ 389.478114][T10404] geneve3: entered promiscuous mode [ 389.524150][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 389.552827][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 389.561872][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 389.592500][ T36] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 389.611311][ T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 389.657915][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 389.698381][T10414] FAULT_INJECTION: forcing a failure. [ 389.698381][T10414] name failslab, interval 1, probability 0, space 0, times 0 [ 389.738840][T10414] CPU: 1 UID: 0 PID: 10414 Comm: syz.4.1131 Not tainted syzkaller #0 PREEMPT(full) [ 389.738865][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.738875][T10414] Call Trace: [ 389.738882][T10414] [ 389.738890][T10414] dump_stack_lvl+0x189/0x250 [ 389.738914][T10414] ? __pfx____ratelimit+0x10/0x10 [ 389.738938][T10414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.738957][T10414] ? __pfx__printk+0x10/0x10 [ 389.738985][T10414] ? __bpf_trace_fib6_table_lookup+0x16d/0x1f0 [ 389.739018][T10414] should_fail_ex+0x414/0x560 [ 389.739046][T10414] should_failslab+0xa8/0x100 [ 389.739067][T10414] ? __pfx_ip6_dst_gc+0x10/0x10 [ 389.739084][T10414] kmem_cache_alloc_noprof+0x73/0x3c0 [ 389.739105][T10414] ? dst_alloc+0x105/0x170 [ 389.739125][T10414] ? __pfx_ip6_dst_gc+0x10/0x10 [ 389.739144][T10414] dst_alloc+0x105/0x170 [ 389.739161][T10414] ? fib6_node_lookup+0x112/0x1b0 [ 389.739186][T10414] ip6_create_rt_rcu+0x224/0x4c0 [ 389.739208][T10414] ? __pfx_ip6_create_rt_rcu+0x10/0x10 [ 389.739228][T10414] ? rt6_find_cached_rt+0x21c/0x270 [ 389.739255][T10414] ip6_pol_route_lookup+0xb0b/0xcd0 [ 389.739285][T10414] ? ip6_pol_route_lookup+0xd2/0xcd0 [ 389.739307][T10414] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 389.739327][T10414] ? rcuref_put+0x1b7/0x210 [ 389.739346][T10414] ? __pfx_rcuref_put+0x10/0x10 [ 389.739377][T10414] ? dst_release+0x79/0x1b0 [ 389.739397][T10414] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 389.739415][T10414] fib6_rule_action+0x748/0x7d0 [ 389.739437][T10414] ? __pfx_fib6_rule_action+0x10/0x10 [ 389.739459][T10414] fib_rules_lookup+0x767/0xe90 [ 389.739487][T10414] ? fib_rules_lookup+0x96/0xe90 [ 389.739505][T10414] ? __pfx_fib_rules_lookup+0x10/0x10 [ 389.739527][T10414] ? l3mdev_update_flow+0x29/0x640 [ 389.739546][T10414] ? l3mdev_update_flow+0x4d1/0x640 [ 389.739571][T10414] fib6_rule_lookup+0x18e/0x6f0 [ 389.739592][T10414] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 389.739611][T10414] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 389.739637][T10414] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 389.739665][T10414] ? rt6_lookup+0xb9/0x1d0 [ 389.739689][T10414] rt6_lookup+0x119/0x1d0 [ 389.739711][T10414] ? __pfx_rt6_lookup+0x10/0x10 [ 389.739738][T10414] ? sock_kmalloc+0xd6/0x160 [ 389.739759][T10414] ? ipv6_sock_ac_join+0x37b/0x8c0 [ 389.739785][T10414] ipv6_sock_ac_join+0x55d/0x8c0 [ 389.739817][T10414] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 389.739840][T10414] ? _copy_from_user+0x94/0xb0 [ 389.739864][T10414] do_ipv6_setsockopt+0x1e90/0x2eb0 [ 389.739898][T10414] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 389.739921][T10414] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 389.739960][T10414] ? vfs_write+0x956/0xb30 [ 389.739985][T10414] ? __pfx___might_resched+0x10/0x10 [ 389.740022][T10414] ? __lock_acquire+0xab9/0xd20 [ 389.740051][T10414] ? aa_sk_perm+0x81e/0x950 [ 389.740079][T10414] ? __pfx_aa_sk_perm+0x10/0x10 [ 389.740104][T10414] ? __fget_files+0x2a/0x420 [ 389.740117][T10414] ? aa_sock_opt_perm+0xff/0x1b0 [ 389.740138][T10414] ipv6_setsockopt+0x59/0x170 [ 389.740153][T10414] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 389.740178][T10414] do_sock_setsockopt+0x179/0x1b0 [ 389.740202][T10414] __x64_sys_setsockopt+0x13f/0x1b0 [ 389.740227][T10414] do_syscall_64+0xfa/0x3b0 [ 389.740243][T10414] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.740259][T10414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.740275][T10414] ? clear_bhb_loop+0x60/0xb0 [ 389.740295][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.740311][T10414] RIP: 0033:0x7f8164b8ebe9 [ 389.740327][T10414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.740340][T10414] RSP: 002b:00007f8165972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 389.740358][T10414] RAX: ffffffffffffffda RBX: 00007f8164dc5fa0 RCX: 00007f8164b8ebe9 [ 389.740371][T10414] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 389.740381][T10414] RBP: 00007f8165972090 R08: 0000000000000014 R09: 0000000000000000 [ 389.740391][T10414] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 389.740402][T10414] R13: 00007f8164dc6038 R14: 00007f8164dc5fa0 R15: 00007ffc99169338 [ 389.740434][T10414] [ 389.762998][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 390.084736][T10435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1137'. [ 390.190010][T10422] tipc: Enabling of bearer rejected, failed to enable media [ 390.225952][T10429] lo speed is unknown, defaulting to 1000 [ 390.275147][T10438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1139'. [ 390.449786][T10449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1142'. [ 390.497196][ T30] audit: type=1800 audit(1756552036.549:7): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1140" name="memory.events" dev="tmpfs" ino=1159 res=0 errno=0 [ 390.565587][T10449] gretap0: entered promiscuous mode [ 390.588490][T10449] gretap0: left promiscuous mode [ 390.747027][T10457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.876837][T10461] syzkaller0: entered promiscuous mode [ 390.884171][T10461] syzkaller0: entered allmulticast mode [ 390.891314][T10440] lo speed is unknown, defaulting to 1000 [ 393.411991][T10502] __nla_validate_parse: 2 callbacks suppressed [ 393.412011][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1150'. [ 393.460940][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 393.581529][T10515] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1153'. [ 393.597052][T10509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.607400][T10515] netlink: zone id is out of range [ 393.616885][T10515] netlink: zone id is out of range [ 393.622022][T10515] netlink: zone id is out of range [ 393.627479][T10515] netlink: zone id is out of range [ 393.632830][T10515] netlink: zone id is out of range [ 393.638859][T10515] netlink: get zone limit has 8 unknown bytes [ 393.867872][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 393.887060][T10526] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1159'. [ 393.888170][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 393.970998][T10529] lo speed is unknown, defaulting to 1000 [ 393.978698][T10527] netlink: 'syz.0.1158': attribute type 20 has an invalid length. [ 394.227473][T10538] batman_adv: batadv0: Interface deactivated: dummy0 [ 394.625547][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.652061][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.686081][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.706902][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.745677][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.792469][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.821782][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.849231][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.911709][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.940079][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.978018][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.001745][T10555] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 395.002653][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.135180][T10558] bond4 (unregistering): Released all slaves [ 395.267636][T10570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 395.335801][T10561] bond4: (slave gretap2): making interface the new active one [ 395.349363][T10561] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 395.364994][T10530] lo speed is unknown, defaulting to 1000 [ 395.368721][T10570] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.527888][T10578] netlink: 'syz.0.1169': attribute type 6 has an invalid length. [ 395.610505][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 395.822103][T10596] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1171'. [ 395.938064][T10607] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 396.007058][T10605] bridge_slave_0: left promiscuous mode [ 396.036395][T10607] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1174'. [ 396.045316][T10605] vlan2: left promiscuous mode [ 396.200153][ T1060] bond2: (slave ip6gretap2): link status up again after 0 ms [ 396.232564][ T60] bond2: (slave ip6gretap2): link status up again after 0 ms [ 396.253365][T10608] lo speed is unknown, defaulting to 1000 [ 396.268219][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 396.336264][T10629] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 396.866611][T10639] tipc: Enabled bearer , priority 0 [ 396.904208][T10638] tipc: Disabling bearer [ 397.673566][T10676] macsec0: entered promiscuous mode [ 397.678818][T10676] macsec0: entered allmulticast mode [ 397.717169][T10676] veth1_macvtap: entered allmulticast mode [ 397.731156][T10676] macsec0: left promiscuous mode [ 397.751047][T10676] macsec0: left allmulticast mode [ 397.759089][T10676] veth1_macvtap: left allmulticast mode [ 397.995516][T10685] geneve4: entered promiscuous mode [ 398.027230][T10687] tipc: Enabled bearer , priority 0 [ 398.056431][T10687] syzkaller0: entered promiscuous mode [ 398.077686][T10687] syzkaller0: entered allmulticast mode [ 398.116929][T10686] tipc: Resetting bearer [ 398.142079][T10686] tipc: Disabling bearer [ 398.214170][T10701] vlan2: entered promiscuous mode [ 398.227102][T10701] ip6gretap0: entered promiscuous mode [ 398.502132][T10719] xt_time: unknown flags 0xf4 [ 398.645027][ T36] net_ratelimit: 17 callbacks suppressed [ 398.645047][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 398.794284][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 398.912913][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 398.953542][T10729] __nla_validate_parse: 9 callbacks suppressed [ 398.953563][T10729] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1209'. [ 398.959260][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 398.960805][T10728] netlink: 'syz.1.1211': attribute type 12 has an invalid length. [ 399.032793][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 399.033005][T10728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1211'. [ 399.169572][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'. [ 399.195537][T10728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.202919][T10728] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 399.222670][ T1142] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 399.223606][ T7398] lo speed is unknown, defaulting to 1000 [ 399.262460][ T7398] syz0: Port: 1 Link ACTIVE [ 399.279385][T10742] tipc: Enabled bearer , priority 0 [ 399.298890][ T7400] lo speed is unknown, defaulting to 1000 [ 399.307634][T10735] syzkaller0: entered promiscuous mode [ 399.313816][T10735] syzkaller0: entered allmulticast mode [ 399.343099][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 399.383991][T10735] tipc: Resetting bearer [ 399.393138][T10733] tipc: Resetting bearer [ 399.455906][T10733] tipc: Disabling bearer [ 399.503695][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 399.533482][T10750] syzkaller0: entered promiscuous mode [ 399.540253][T10750] syzkaller0: entered allmulticast mode [ 399.664690][T10759] netlink: 'syz.2.1218': attribute type 10 has an invalid length. [ 399.700355][T10752] lo speed is unknown, defaulting to 1000 [ 399.706443][T10759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.730455][T10759] batadv_slave_0: entered promiscuous mode [ 399.753273][T10759] batadv_slave_0: entered allmulticast mode [ 399.804999][T10759] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 399.929824][ T1142] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 400.083543][ T1142] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 400.156284][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 400.181210][T10775] netlink: 'syz.3.1222': attribute type 5 has an invalid length. [ 400.213879][T10775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1222'. [ 400.393294][T10775] geneve2: entered promiscuous mode [ 400.411018][T10775] geneve2: entered allmulticast mode [ 400.434202][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 400.458895][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 400.496914][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 400.657673][T10773] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.794834][T10773] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.900846][T10753] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1217'. [ 400.960956][T10773] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 401.165658][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1227'. [ 401.190961][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 401.368482][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 401.518676][ T3528] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 401.750879][ T3528] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 401.812765][ T3528] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 401.836095][T10818] FAULT_INJECTION: forcing a failure. [ 401.836095][T10818] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 401.866099][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.0.1234 Not tainted syzkaller #0 PREEMPT(full) [ 401.866122][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.866133][T10818] Call Trace: [ 401.866140][T10818] [ 401.866148][T10818] dump_stack_lvl+0x189/0x250 [ 401.866173][T10818] ? __pfx____ratelimit+0x10/0x10 [ 401.866196][T10818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.866215][T10818] ? __pfx__printk+0x10/0x10 [ 401.866239][T10818] ? fs_reclaim_acquire+0x7d/0x100 [ 401.866284][T10818] should_fail_ex+0x414/0x560 [ 401.866310][T10818] prepare_alloc_pages+0x213/0x610 [ 401.866334][T10818] __alloc_frozen_pages_noprof+0x123/0x370 [ 401.866354][T10818] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 401.866381][T10818] ? policy_nodemask+0x27c/0x720 [ 401.866408][T10818] alloc_pages_mpol+0x232/0x4a0 [ 401.866435][T10818] vma_alloc_folio_noprof+0xe4/0x200 [ 401.866460][T10818] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 401.866495][T10818] folio_prealloc+0x30/0x180 [ 401.866517][T10818] do_wp_page+0x1231/0x5800 [ 401.866559][T10818] ? __pfx_do_wp_page+0x10/0x10 [ 401.866575][T10818] ? do_raw_spin_lock+0x121/0x290 [ 401.866598][T10818] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 401.866627][T10818] __handle_mm_fault+0x1033/0x5440 [ 401.866665][T10818] ? __pfx___handle_mm_fault+0x10/0x10 [ 401.866702][T10818] ? follow_page_pte+0xd03/0x13e0 [ 401.866731][T10818] handle_mm_fault+0x40a/0x8e0 [ 401.866763][T10818] __get_user_pages+0x1699/0x2ce0 [ 401.866779][T10818] ? __lock_acquire+0xab9/0xd20 [ 401.866839][T10818] __gup_longterm_locked+0xde9/0x1660 [ 401.866873][T10818] ? sanity_check_pinned_pages+0x1241/0x1300 [ 401.866895][T10818] ? gup_fast_fallback+0x195f/0x2010 [ 401.866920][T10818] gup_fast_fallback+0x1e6a/0x2010 [ 401.866971][T10818] ? __lock_acquire+0xab9/0xd20 [ 401.866995][T10818] ? __pfx_gup_fast_fallback+0x10/0x10 [ 401.867013][T10818] ? kasan_save_track+0x4f/0x80 [ 401.867030][T10818] ? kasan_save_track+0x3e/0x80 [ 401.867046][T10818] ? __kasan_kmalloc+0x93/0xb0 [ 401.867066][T10818] ? sock_kmalloc+0xd6/0x160 [ 401.867082][T10818] ? af_alg_get_rsgl+0x236/0x810 [ 401.867099][T10818] ? skcipher_recvmsg+0x3c0/0x11c0 [ 401.867117][T10818] ? ____sys_recvmsg+0x1c9/0x460 [ 401.867134][T10818] ? ___sys_recvmsg+0x1b5/0x510 [ 401.867150][T10818] ? __x64_sys_recvmsg+0x198/0x260 [ 401.867171][T10818] ? pin_user_pages_fast+0x4d/0xb0 [ 401.867193][T10818] iov_iter_extract_pages+0x35a/0x5e0 [ 401.867221][T10818] extract_iter_to_sg+0xe46/0x24e0 [ 401.867262][T10818] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 401.867284][T10818] ? sock_kmalloc+0xd6/0x160 [ 401.867303][T10818] ? rcu_is_watching+0x15/0xb0 [ 401.867319][T10818] ? trace_kmalloc+0x1f/0xd0 [ 401.867337][T10818] ? __kmalloc_noprof+0x29b/0x4f0 [ 401.867364][T10818] ? __asan_memset+0x22/0x50 [ 401.867386][T10818] af_alg_get_rsgl+0x436/0x810 [ 401.867425][T10818] skcipher_recvmsg+0x3c0/0x11c0 [ 401.867450][T10818] ? aa_sk_perm+0x81e/0x950 [ 401.867487][T10818] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 401.867511][T10818] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 401.867528][T10818] ? security_socket_recvmsg+0x7e/0x2e0 [ 401.867548][T10818] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 401.867569][T10818] sock_recvmsg+0x229/0x270 [ 401.867597][T10818] ____sys_recvmsg+0x1c9/0x460 [ 401.867627][T10818] ? __pfx_____sys_recvmsg+0x10/0x10 [ 401.867665][T10818] ? import_iovec+0x74/0xa0 [ 401.867688][T10818] ___sys_recvmsg+0x1b5/0x510 [ 401.867715][T10818] ? __pfx____sys_recvmsg+0x10/0x10 [ 401.867764][T10818] ? __fget_files+0x3a0/0x420 [ 401.867793][T10818] __x64_sys_recvmsg+0x198/0x260 [ 401.867815][T10818] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 401.867846][T10818] ? __pfx_ksys_write+0x10/0x10 [ 401.867865][T10818] ? rcu_is_watching+0x15/0xb0 [ 401.867887][T10818] ? do_syscall_64+0xbe/0x3b0 [ 401.867910][T10818] do_syscall_64+0xfa/0x3b0 [ 401.867924][T10818] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.867940][T10818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.867956][T10818] ? clear_bhb_loop+0x60/0xb0 [ 401.867978][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.867994][T10818] RIP: 0033:0x7f5f2638ebe9 [ 401.868010][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.868024][T10818] RSP: 002b:00007f5f27209038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 401.868043][T10818] RAX: ffffffffffffffda RBX: 00007f5f265c5fa0 RCX: 00007f5f2638ebe9 [ 401.868056][T10818] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 401.868067][T10818] RBP: 00007f5f27209090 R08: 0000000000000000 R09: 0000000000000000 [ 401.868078][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.868088][T10818] R13: 00007f5f265c6038 R14: 00007f5f265c5fa0 R15: 00007fffe3e1d928 [ 401.868120][T10818] [ 401.872764][T10821] netlink: 'syz.1.1235': attribute type 6 has an invalid length. [ 402.050098][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 402.891610][T10871] bond0: (slave wlan1): Releasing backup interface [ 402.914951][T10871] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode [ 402.924166][T10871] bond0: Destroying bond [ 402.979145][T10879] netlink: 'syz.2.1246': attribute type 10 has an invalid length. [ 403.057018][T10871] bond0 (unregistering): Released all slaves [ 403.336257][T10887] lo speed is unknown, defaulting to 1000 [ 403.714431][T10908] netlink: 'syz.2.1254': attribute type 303 has an invalid length. [ 403.756156][ T13] net_ratelimit: 21 callbacks suppressed [ 403.756174][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 403.952996][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 404.094343][T10921] __nla_validate_parse: 7 callbacks suppressed [ 404.094359][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1257'. [ 404.159224][T10905] lo speed is unknown, defaulting to 1000 [ 404.221764][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1257'. [ 404.252135][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 404.310405][T10919] macsec2: entered promiscuous mode [ 404.329785][T10919] syzkaller0: entered promiscuous mode [ 404.339085][T10919] syzkaller0: left promiscuous mode [ 404.383578][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 404.587514][T10941] delete_channel: no stack [ 404.693175][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 405.041552][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 405.254098][T10956] dvmrp8: entered allmulticast mode [ 405.277297][T10950] dvmrp8: left allmulticast mode [ 405.351794][T10964] nbd: must specify at least one socket [ 405.373471][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 405.482919][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 405.604973][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 405.728200][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 405.814103][T10980] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1270'. [ 405.882188][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 406.086028][T10991] dummy0: left promiscuous mode [ 406.100259][T10991] bridge0: port 3(dummy0) entered disabled state [ 406.112023][T10991] bridge_slave_1: left allmulticast mode [ 406.121741][T10991] bridge_slave_1: left promiscuous mode [ 406.128192][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.192071][T10993] tipc: Enabling of bearer rejected, failed to enable media [ 406.271713][T11000] netlink: 'syz.4.1275': attribute type 13 has an invalid length. [ 406.287183][T11000] netlink: 'syz.4.1275': attribute type 17 has an invalid length. [ 406.350384][T11000] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.458655][T11003] lo speed is unknown, defaulting to 1000 [ 406.940906][T11014] lo speed is unknown, defaulting to 1000 [ 407.185226][T11030] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1285'. [ 407.271176][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 407.383252][T11018] lo speed is unknown, defaulting to 1000 [ 407.427762][T11043] netlink: 'syz.2.1287': attribute type 10 has an invalid length. [ 408.123808][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1293'. [ 408.524583][T11074] syz.2.1297: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 408.579887][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.2.1297 Not tainted syzkaller #0 PREEMPT(full) [ 408.579914][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.579925][T11074] Call Trace: [ 408.579932][T11074] [ 408.579939][T11074] dump_stack_lvl+0x189/0x250 [ 408.579968][T11074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.579987][T11074] ? __pfx__printk+0x10/0x10 [ 408.580009][T11074] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.580029][T11074] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 408.580050][T11074] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 408.580072][T11074] warn_alloc+0x214/0x310 [ 408.580097][T11074] ? stack_depot_save_flags+0x40/0x860 [ 408.580121][T11074] ? __pfx_warn_alloc+0x10/0x10 [ 408.580146][T11074] ? kasan_save_track+0x4f/0x80 [ 408.580165][T11074] ? xskq_create+0x56/0x170 [ 408.580186][T11074] ? xsk_init_queue+0xb0/0x110 [ 408.580205][T11074] ? xsk_setsockopt+0x4dc/0x8d0 [ 408.580224][T11074] ? do_sock_setsockopt+0x179/0x1b0 [ 408.580239][T11074] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 408.580254][T11074] ? do_syscall_64+0xfa/0x3b0 [ 408.580268][T11074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.580294][T11074] __vmalloc_node_range_noprof+0x125/0x12f0 [ 408.580349][T11074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.580378][T11074] ? __kasan_kmalloc+0x93/0xb0 [ 408.580402][T11074] vmalloc_user_noprof+0xad/0xf0 [ 408.580423][T11074] ? xskq_create+0xbf/0x170 [ 408.580447][T11074] xskq_create+0xbf/0x170 [ 408.580473][T11074] xsk_init_queue+0xb0/0x110 [ 408.580507][T11074] xsk_setsockopt+0x4dc/0x8d0 [ 408.580533][T11074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.580554][T11074] ? __pfx_aa_sk_perm+0x10/0x10 [ 408.580581][T11074] ? aa_sock_opt_perm+0xff/0x1b0 [ 408.580601][T11074] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.580619][T11074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.580641][T11074] do_sock_setsockopt+0x179/0x1b0 [ 408.580665][T11074] __x64_sys_setsockopt+0x13f/0x1b0 [ 408.580689][T11074] do_syscall_64+0xfa/0x3b0 [ 408.580705][T11074] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.580721][T11074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.580738][T11074] ? clear_bhb_loop+0x60/0xb0 [ 408.580758][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.580774][T11074] RIP: 0033:0x7ff9cdb8ebe9 [ 408.580789][T11074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.580804][T11074] RSP: 002b:00007ff9ce93c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.580823][T11074] RAX: ffffffffffffffda RBX: 00007ff9cddc5fa0 RCX: 00007ff9cdb8ebe9 [ 408.580835][T11074] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 408.580845][T11074] RBP: 00007ff9cdc11e19 R08: 0000000000000004 R09: 0000000000000000 [ 408.580856][T11074] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.580867][T11074] R13: 00007ff9cddc6038 R14: 00007ff9cddc5fa0 R15: 00007fff6f795988 [ 408.580898][T11074] [ 408.580915][T11074] Mem-Info: [ 408.893078][ T49] net_ratelimit: 15 callbacks suppressed [ 408.893098][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 408.906770][T11074] active_anon:7326 inactive_anon:0 isolated_anon:0 [ 408.906770][T11074] active_file:3409 inactive_file:39963 isolated_file:0 [ 408.906770][T11074] unevictable:768 dirty:281 writeback:0 [ 408.906770][T11074] slab_reclaimable:12221 slab_unreclaimable:133426 [ 408.906770][T11074] mapped:31125 shmem:4208 pagetables:966 [ 408.906770][T11074] sec_pagetables:0 bounce:0 [ 408.906770][T11074] kernel_misc_reclaimable:0 [ 408.906770][T11074] free:1291670 free_pcp:12985 free_cma:0 [ 409.032470][T11074] Node 0 active_anon:27412kB inactive_anon:0kB active_file:13636kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124952kB dirty:1140kB writeback:0kB shmem:13176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12868kB pagetables:3644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.090216][T11074] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 409.143025][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 409.190829][T11074] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 409.252829][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 409.268800][T11074] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 409.298136][T11074] Node 0 DMA32 free:1267456kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17864kB inactive_anon:0kB active_file:13636kB inactive_file:158088kB unevictable:1536kB writepending:1140kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:43088kB local_pcp:21864kB free_cma:0kB [ 409.380794][T11074] lowmem_reserve[]: 0 0 1 1 1 [ 409.381341][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 409.397396][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 409.406863][T11074] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 409.452035][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1302'. [ 409.462782][T11074] lowmem_reserve[]: 0 0 0 0 0 [ 409.472763][T11074] Node 1 Normal free:3890900kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18880kB local_pcp:10176kB free_cma:0kB [ 409.512906][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1302'. [ 409.519162][T11105] lo speed is unknown, defaulting to 1000 [ 409.536323][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1302'. [ 409.543175][T11074] lowmem_reserve[]: 0 0 0 0 0 [ 409.551441][T11074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 409.565052][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 409.567067][T11074] Node 0 DMA32: 738*4kB (UM) 911*8kB (UME) 368*16kB (UME) 490*32kB (UME) 212*64kB (UME) 128*128kB (UM) 48*256kB (UME) 26*512kB (UME) 19*1024kB (UME) 7*2048kB (UM) 280*4096kB (UM) = 1268032kB [ 409.592028][T11074] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 409.605515][T11074] Node 1 Normal: 211*4kB (UME) 49*8kB (UME) 50*16kB (UME) 109*32kB (UME) 31*64kB (UME) 9*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3890900kB [ 409.632491][T11074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.649113][T11074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.672666][T11074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 409.682351][T11074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 409.701273][T11074] 44747 total pagecache pages [ 409.706094][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 409.717850][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 409.727022][T11118] block nbd0: backend image doesn't match with ª [ 409.776383][T11074] 0 pages in swap cache [ 409.797078][T11074] Free swap = 124996kB [ 409.801275][T11074] Total swap = 124996kB [ 409.823481][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 409.842947][T11074] 2097051 pages RAM [ 409.852038][T11074] 0 pages HighMem/MovableOnly [ 409.869701][T11074] 425669 pages reserved [ 409.884962][T11127] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1308'. [ 409.896735][T11074] 0 pages cma reserved [ 409.920808][ T49] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 409.971676][T11127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.996201][T11127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.018237][T11127] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 410.054176][T11127] bond0 (unregistering): (slave bond3): Releasing backup interface [ 410.068717][T11127] bond0 (unregistering): Released all slaves [ 410.124375][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.172597][T11134] netlink: 'syz.1.1304': attribute type 6 has an invalid length. [ 410.373667][ T36] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.508421][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 410.858168][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'. [ 411.210749][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 411.249603][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1320'. [ 411.376237][T11181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1323'. [ 411.608507][T11196] netlink: 'syz.2.1329': attribute type 4 has an invalid length. [ 411.687275][T11203] sctp: [Deprecated]: syz.1.1331 (pid 11203) Use of int in maxseg socket option. [ 411.687275][T11203] Use struct sctp_assoc_value instead [ 411.780895][T11205] netlink: 'syz.2.1332': attribute type 2 has an invalid length. [ 411.898228][T11220] tipc: New replicast peer: 255.255.255.255 [ 411.942330][T11220] tipc: Enabled bearer , priority 10 [ 412.020545][T11221] lo speed is unknown, defaulting to 1000 [ 413.096668][T11253] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 413.291401][T11253] 8021q: adding VLAN 0 to HW filter on device bond5 [ 413.939464][T11301] lo speed is unknown, defaulting to 1000 [ 413.964084][ T6709] net_ratelimit: 24 callbacks suppressed [ 413.964102][ T6709] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 414.096508][T11299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.129424][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 414.248743][T11302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.256124][T11302] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 414.268254][T11302] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 414.381990][T11316] lo speed is unknown, defaulting to 1000 [ 414.424943][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 414.743748][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 414.964506][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.095814][T11360] __nla_validate_parse: 11 callbacks suppressed [ 415.095833][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 415.236356][T11361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1374'. [ 415.289381][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1374'. [ 415.309075][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 415.318380][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.407402][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 415.492122][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 415.514326][T11365] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1375'. [ 415.550758][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 415.568494][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.595947][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 415.638239][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 415.758352][T11372] lo speed is unknown, defaulting to 1000 [ 415.764940][ T13] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 415.896751][T11383] FAULT_INJECTION: forcing a failure. [ 415.896751][T11383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.927445][T11383] CPU: 0 UID: 0 PID: 11383 Comm: syz.3.1380 Not tainted syzkaller #0 PREEMPT(full) [ 415.927485][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.927501][T11383] Call Trace: [ 415.927508][T11383] [ 415.927516][T11383] dump_stack_lvl+0x189/0x250 [ 415.927541][T11383] ? __pfx____ratelimit+0x10/0x10 [ 415.927566][T11383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.927585][T11383] ? __pfx__printk+0x10/0x10 [ 415.927609][T11383] ? fs_reclaim_acquire+0x7d/0x100 [ 415.927640][T11383] should_fail_ex+0x414/0x560 [ 415.927666][T11383] prepare_alloc_pages+0x213/0x610 [ 415.927692][T11383] __alloc_frozen_pages_noprof+0x123/0x370 [ 415.927714][T11383] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 415.927742][T11383] ? policy_nodemask+0x27c/0x720 [ 415.927771][T11383] alloc_pages_mpol+0x232/0x4a0 [ 415.927799][T11383] vma_alloc_folio_noprof+0xe4/0x200 [ 415.927825][T11383] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 415.927869][T11383] folio_prealloc+0x30/0x180 [ 415.927893][T11383] do_wp_page+0x1231/0x5800 [ 415.927937][T11383] ? __pfx_do_wp_page+0x10/0x10 [ 415.927954][T11383] ? do_raw_spin_lock+0x121/0x290 [ 415.927976][T11383] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 415.928007][T11383] __handle_mm_fault+0x1033/0x5440 [ 415.928045][T11383] ? __pfx___handle_mm_fault+0x10/0x10 [ 415.928081][T11383] ? follow_page_pte+0xd03/0x13e0 [ 415.928112][T11383] handle_mm_fault+0x40a/0x8e0 [ 415.928144][T11383] __get_user_pages+0x1699/0x2ce0 [ 415.928161][T11383] ? __lock_acquire+0xab9/0xd20 [ 415.928220][T11383] __gup_longterm_locked+0xde9/0x1660 [ 415.928255][T11383] ? sanity_check_pinned_pages+0x1241/0x1300 [ 415.928276][T11383] ? gup_fast_fallback+0x195f/0x2010 [ 415.928298][T11383] gup_fast_fallback+0x1e6a/0x2010 [ 415.928353][T11383] ? __pfx_gup_fast_fallback+0x10/0x10 [ 415.928372][T11383] ? kasan_save_track+0x4f/0x80 [ 415.928390][T11383] ? kasan_save_track+0x3e/0x80 [ 415.928407][T11383] ? __kasan_kmalloc+0x93/0xb0 [ 415.928426][T11383] ? sock_kmalloc+0xd6/0x160 [ 415.928444][T11383] ? af_alg_get_rsgl+0x236/0x810 [ 415.928461][T11383] ? skcipher_recvmsg+0x3c0/0x11c0 [ 415.928480][T11383] ? ____sys_recvmsg+0x1c9/0x460 [ 415.928502][T11383] ? ___sys_recvmsg+0x1b5/0x510 [ 415.928518][T11383] ? __x64_sys_recvmsg+0x198/0x260 [ 415.928541][T11383] ? pin_user_pages_fast+0x4d/0xb0 [ 415.928564][T11383] iov_iter_extract_pages+0x35a/0x5e0 [ 415.928593][T11383] extract_iter_to_sg+0xe46/0x24e0 [ 415.928628][T11383] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 415.928658][T11383] ? rcu_is_watching+0x15/0xb0 [ 415.928676][T11383] ? trace_kmalloc+0x1f/0xd0 [ 415.928694][T11383] ? __kmalloc_noprof+0x29b/0x4f0 [ 415.928721][T11383] ? __asan_memset+0x22/0x50 [ 415.928742][T11383] af_alg_get_rsgl+0x436/0x810 [ 415.928784][T11383] skcipher_recvmsg+0x3c0/0x11c0 [ 415.928809][T11383] ? aa_sk_perm+0x81e/0x950 [ 415.928845][T11383] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 415.928875][T11383] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 415.928892][T11383] ? security_socket_recvmsg+0x7e/0x2e0 [ 415.928912][T11383] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 415.928933][T11383] sock_recvmsg+0x229/0x270 [ 415.928959][T11383] ____sys_recvmsg+0x1c9/0x460 [ 415.928988][T11383] ? __pfx_____sys_recvmsg+0x10/0x10 [ 415.929026][T11383] ? import_iovec+0x74/0xa0 [ 415.929049][T11383] ___sys_recvmsg+0x1b5/0x510 [ 415.929075][T11383] ? __pfx____sys_recvmsg+0x10/0x10 [ 415.929123][T11383] ? __fget_files+0x3a0/0x420 [ 415.929151][T11383] __x64_sys_recvmsg+0x198/0x260 [ 415.929173][T11383] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 415.929204][T11383] ? __pfx_ksys_write+0x10/0x10 [ 415.929222][T11383] ? rcu_is_watching+0x15/0xb0 [ 415.929245][T11383] ? do_syscall_64+0xbe/0x3b0 [ 415.929267][T11383] do_syscall_64+0xfa/0x3b0 [ 415.929283][T11383] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.929298][T11383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.929315][T11383] ? clear_bhb_loop+0x60/0xb0 [ 415.929336][T11383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.929352][T11383] RIP: 0033:0x7f507e38ebe9 [ 415.929367][T11383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.929382][T11383] RSP: 002b:00007f507f154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 415.929400][T11383] RAX: ffffffffffffffda RBX: 00007f507e5c5fa0 RCX: 00007f507e38ebe9 [ 415.929412][T11383] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 415.929423][T11383] RBP: 00007f507f154090 R08: 0000000000000000 R09: 0000000000000000 [ 415.929433][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.929443][T11383] R13: 00007f507e5c6038 R14: 00007f507e5c5fa0 R15: 00007ffdca04d6d8 [ 415.929473][T11383] [ 416.471504][T11378] lo speed is unknown, defaulting to 1000 [ 416.544757][ T6709] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 416.706837][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 417.075058][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 417.620784][T11416] lo speed is unknown, defaulting to 1000 [ 418.016781][T11429] FAULT_INJECTION: forcing a failure. [ 418.016781][T11429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 418.040552][T11429] CPU: 1 UID: 0 PID: 11429 Comm: syz.1.1393 Not tainted syzkaller #0 PREEMPT(full) [ 418.040578][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.040589][T11429] Call Trace: [ 418.040595][T11429] [ 418.040603][T11429] dump_stack_lvl+0x189/0x250 [ 418.040629][T11429] ? __pfx____ratelimit+0x10/0x10 [ 418.040654][T11429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.040673][T11429] ? __pfx__printk+0x10/0x10 [ 418.040726][T11429] ? fs_reclaim_acquire+0x7d/0x100 [ 418.040760][T11429] should_fail_ex+0x414/0x560 [ 418.040788][T11429] prepare_alloc_pages+0x213/0x610 [ 418.040811][T11429] __alloc_frozen_pages_noprof+0x123/0x370 [ 418.040833][T11429] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 418.040858][T11429] ? policy_nodemask+0x27c/0x720 [ 418.040887][T11429] alloc_pages_mpol+0x232/0x4a0 [ 418.040915][T11429] vma_alloc_folio_noprof+0xe4/0x200 [ 418.040939][T11429] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 418.040975][T11429] folio_prealloc+0x30/0x180 [ 418.041000][T11429] do_wp_page+0x1231/0x5800 [ 418.041045][T11429] ? __pfx_do_wp_page+0x10/0x10 [ 418.041062][T11429] ? do_raw_spin_lock+0x121/0x290 [ 418.041084][T11429] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 418.041114][T11429] __handle_mm_fault+0x1033/0x5440 [ 418.041153][T11429] ? __pfx___handle_mm_fault+0x10/0x10 [ 418.041190][T11429] ? follow_page_pte+0xd03/0x13e0 [ 418.041223][T11429] handle_mm_fault+0x40a/0x8e0 [ 418.041255][T11429] __get_user_pages+0x1699/0x2ce0 [ 418.041270][T11429] ? __lock_acquire+0xab9/0xd20 [ 418.041329][T11429] __gup_longterm_locked+0xde9/0x1660 [ 418.041356][T11429] ? sanity_check_pinned_pages+0x1241/0x1300 [ 418.041374][T11429] ? gup_fast_fallback+0x195f/0x2010 [ 418.041395][T11429] gup_fast_fallback+0x1e6a/0x2010 [ 418.041446][T11429] ? __pfx_gup_fast_fallback+0x10/0x10 [ 418.041465][T11429] ? kasan_save_track+0x4f/0x80 [ 418.041483][T11429] ? kasan_save_track+0x3e/0x80 [ 418.041500][T11429] ? __kasan_kmalloc+0x93/0xb0 [ 418.041517][T11429] ? sock_kmalloc+0xd6/0x160 [ 418.041535][T11429] ? af_alg_get_rsgl+0x236/0x810 [ 418.041551][T11429] ? skcipher_recvmsg+0x3c0/0x11c0 [ 418.041570][T11429] ? ____sys_recvmsg+0x1c9/0x460 [ 418.041587][T11429] ? ___sys_recvmsg+0x1b5/0x510 [ 418.041603][T11429] ? __x64_sys_recvmsg+0x198/0x260 [ 418.041626][T11429] ? pin_user_pages_fast+0x4d/0xb0 [ 418.041649][T11429] iov_iter_extract_pages+0x35a/0x5e0 [ 418.041686][T11429] extract_iter_to_sg+0xe46/0x24e0 [ 418.041720][T11429] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 418.041750][T11429] ? rcu_is_watching+0x15/0xb0 [ 418.041768][T11429] ? trace_kmalloc+0x1f/0xd0 [ 418.041785][T11429] ? __kmalloc_noprof+0x29b/0x4f0 [ 418.041812][T11429] ? __asan_memset+0x22/0x50 [ 418.041834][T11429] af_alg_get_rsgl+0x436/0x810 [ 418.041873][T11429] skcipher_recvmsg+0x3c0/0x11c0 [ 418.041896][T11429] ? aa_sk_perm+0x81e/0x950 [ 418.041930][T11429] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 418.041953][T11429] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 418.041969][T11429] ? security_socket_recvmsg+0x7e/0x2e0 [ 418.041988][T11429] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 418.042009][T11429] sock_recvmsg+0x229/0x270 [ 418.042036][T11429] ____sys_recvmsg+0x1c9/0x460 [ 418.042065][T11429] ? __pfx_____sys_recvmsg+0x10/0x10 [ 418.042103][T11429] ? import_iovec+0x74/0xa0 [ 418.042126][T11429] ___sys_recvmsg+0x1b5/0x510 [ 418.042151][T11429] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.042199][T11429] ? __fget_files+0x3a0/0x420 [ 418.042227][T11429] __x64_sys_recvmsg+0x198/0x260 [ 418.042249][T11429] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 418.042280][T11429] ? __pfx_ksys_write+0x10/0x10 [ 418.042298][T11429] ? rcu_is_watching+0x15/0xb0 [ 418.042321][T11429] ? do_syscall_64+0xbe/0x3b0 [ 418.042343][T11429] do_syscall_64+0xfa/0x3b0 [ 418.042358][T11429] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.042377][T11429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.042391][T11429] ? clear_bhb_loop+0x60/0xb0 [ 418.042410][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.042424][T11429] RIP: 0033:0x7f1dc3b8ebe9 [ 418.042439][T11429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.042452][T11429] RSP: 002b:00007f1dc49e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 418.042472][T11429] RAX: ffffffffffffffda RBX: 00007f1dc3dc5fa0 RCX: 00007f1dc3b8ebe9 [ 418.042485][T11429] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 418.042495][T11429] RBP: 00007f1dc49e1090 R08: 0000000000000000 R09: 0000000000000000 [ 418.042506][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.042516][T11429] R13: 00007f1dc3dc6038 R14: 00007f1dc3dc5fa0 R15: 00007ffea4b55048 [ 418.042547][T11429] [ 418.097107][T11426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.352012][T11438] netlink: 'syz.0.1394': attribute type 11 has an invalid length. [ 418.374294][T11426] dummy0: left allmulticast mode [ 418.628240][T11423] rdma_rxe: rxe_newlink: failed to add lo [ 418.661699][T11440] tipc: Enabling of bearer rejected, failed to enable media [ 419.019317][T11466] FAULT_INJECTION: forcing a failure. [ 419.019317][T11466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.050273][T11466] CPU: 0 UID: 0 PID: 11466 Comm: syz.1.1399 Not tainted syzkaller #0 PREEMPT(full) [ 419.050299][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.050309][T11466] Call Trace: [ 419.050316][T11466] [ 419.050324][T11466] dump_stack_lvl+0x189/0x250 [ 419.050348][T11466] ? __pfx____ratelimit+0x10/0x10 [ 419.050371][T11466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.050387][T11466] ? __pfx__printk+0x10/0x10 [ 419.050420][T11466] should_fail_ex+0x414/0x560 [ 419.050445][T11466] _copy_to_user+0x31/0xb0 [ 419.050466][T11466] simple_read_from_buffer+0xe1/0x170 [ 419.050493][T11466] proc_fail_nth_read+0x1b3/0x220 [ 419.050515][T11466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.050536][T11466] ? rw_verify_area+0x2a6/0x4d0 [ 419.050554][T11466] ? __lock_acquire+0xab9/0xd20 [ 419.050574][T11466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.050604][T11466] vfs_read+0x1fd/0xa30 [ 419.050623][T11466] ? fdget_pos+0x247/0x320 [ 419.050644][T11466] ? __pfx___mutex_lock+0x10/0x10 [ 419.050662][T11466] ? __pfx_vfs_read+0x10/0x10 [ 419.050682][T11466] ? __fget_files+0x2a/0x420 [ 419.050701][T11466] ? __fget_files+0x3a0/0x420 [ 419.050714][T11466] ? __fget_files+0x2a/0x420 [ 419.050736][T11466] ksys_read+0x145/0x250 [ 419.050757][T11466] ? __pfx_ksys_read+0x10/0x10 [ 419.050784][T11466] ? do_syscall_64+0xbe/0x3b0 [ 419.050805][T11466] do_syscall_64+0xfa/0x3b0 [ 419.050820][T11466] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.050836][T11466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.050851][T11466] ? clear_bhb_loop+0x60/0xb0 [ 419.050871][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.050887][T11466] RIP: 0033:0x7f1dc3b8d5fc [ 419.050901][T11466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 419.050915][T11466] RSP: 002b:00007f1dc49e1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.050932][T11466] RAX: ffffffffffffffda RBX: 00007f1dc3dc5fa0 RCX: 00007f1dc3b8d5fc [ 419.050945][T11466] RDX: 000000000000000f RSI: 00007f1dc49e10a0 RDI: 0000000000000004 [ 419.050956][T11466] RBP: 00007f1dc49e1090 R08: 0000000000000000 R09: 0000000000000000 [ 419.050967][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.050976][T11466] R13: 00007f1dc3dc6038 R14: 00007f1dc3dc5fa0 R15: 00007ffea4b55048 [ 419.051002][T11466] [ 419.285762][ T1060] net_ratelimit: 8 callbacks suppressed [ 419.285781][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 419.412689][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 419.623657][ T6709] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 419.802568][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 419.872930][T11487] lo speed is unknown, defaulting to 1000 [ 419.963071][ T49] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 420.022077][T11506] bridge0: entered allmulticast mode [ 420.133342][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 420.183440][T11509] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 420.213967][T11509] macsec1: entered promiscuous mode [ 420.233641][T11509] macsec1: entered allmulticast mode [ 420.256889][T11509] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 420.302736][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 420.433019][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 420.476817][T11525] netlink: 'syz.3.1419': attribute type 1 has an invalid length. [ 420.687221][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 420.813806][ T60] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 421.369890][T11554] rdma_op ffff8880549c49f0 conn xmit_rdma 0000000000000000 [ 421.402876][T11554] xt_limit: Overflow, try lower: 271964/0 [ 421.900806][T11576] __nla_validate_parse: 36 callbacks suppressed [ 421.900824][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1428'. [ 422.035343][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1429'. [ 422.097896][T11583] tipc: Enabled bearer , priority 0 [ 422.208163][T11586] syzkaller0: entered promiscuous mode [ 422.222936][T11586] syzkaller0: entered allmulticast mode [ 422.267721][T11577] tipc: Resetting bearer [ 422.290217][T11575] tipc: Resetting bearer [ 422.336017][T11575] tipc: Disabling bearer [ 422.812545][T11618] FAULT_INJECTION: forcing a failure. [ 422.812545][T11618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.857847][T11618] CPU: 1 UID: 0 PID: 11618 Comm: syz.1.1437 Not tainted syzkaller #0 PREEMPT(full) [ 422.857874][T11618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.857884][T11618] Call Trace: [ 422.857891][T11618] [ 422.857899][T11618] dump_stack_lvl+0x189/0x250 [ 422.857924][T11618] ? __pfx____ratelimit+0x10/0x10 [ 422.857947][T11618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.857963][T11618] ? __pfx__printk+0x10/0x10 [ 422.857984][T11618] ? fs_reclaim_acquire+0x7d/0x100 [ 422.858013][T11618] should_fail_ex+0x414/0x560 [ 422.858038][T11618] prepare_alloc_pages+0x213/0x610 [ 422.858060][T11618] __alloc_frozen_pages_noprof+0x123/0x370 [ 422.858080][T11618] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 422.858105][T11618] ? policy_nodemask+0x27c/0x720 [ 422.858130][T11618] alloc_pages_mpol+0x232/0x4a0 [ 422.858154][T11618] vma_alloc_folio_noprof+0xe4/0x200 [ 422.858176][T11618] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 422.858208][T11618] folio_prealloc+0x30/0x180 [ 422.858229][T11618] do_wp_page+0x1231/0x5800 [ 422.858269][T11618] ? __pfx_do_wp_page+0x10/0x10 [ 422.858284][T11618] ? do_raw_spin_lock+0x121/0x290 [ 422.858315][T11618] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.858343][T11618] __handle_mm_fault+0x1033/0x5440 [ 422.858377][T11618] ? __pfx___handle_mm_fault+0x10/0x10 [ 422.858409][T11618] ? follow_page_pte+0xd03/0x13e0 [ 422.858438][T11618] handle_mm_fault+0x40a/0x8e0 [ 422.858467][T11618] __get_user_pages+0x1699/0x2ce0 [ 422.858482][T11618] ? __lock_acquire+0xab9/0xd20 [ 422.858536][T11618] __gup_longterm_locked+0xde9/0x1660 [ 422.858566][T11618] ? sanity_check_pinned_pages+0x1241/0x1300 [ 422.858586][T11618] ? gup_fast_fallback+0x195f/0x2010 [ 422.858607][T11618] gup_fast_fallback+0x1e6a/0x2010 [ 422.858660][T11618] ? __pfx_gup_fast_fallback+0x10/0x10 [ 422.858677][T11618] ? kasan_save_track+0x4f/0x80 [ 422.858693][T11618] ? kasan_save_track+0x3e/0x80 [ 422.858709][T11618] ? __kasan_kmalloc+0x93/0xb0 [ 422.858727][T11618] ? sock_kmalloc+0xd6/0x160 [ 422.858744][T11618] ? af_alg_get_rsgl+0x236/0x810 [ 422.858761][T11618] ? skcipher_recvmsg+0x3c0/0x11c0 [ 422.858779][T11618] ? ____sys_recvmsg+0x1c9/0x460 [ 422.858796][T11618] ? ___sys_recvmsg+0x1b5/0x510 [ 422.858811][T11618] ? __x64_sys_recvmsg+0x198/0x260 [ 422.858833][T11618] ? pin_user_pages_fast+0x4d/0xb0 [ 422.858855][T11618] iov_iter_extract_pages+0x35a/0x5e0 [ 422.858883][T11618] extract_iter_to_sg+0xe46/0x24e0 [ 422.858917][T11618] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 422.858945][T11618] ? rcu_is_watching+0x15/0xb0 [ 422.858962][T11618] ? trace_kmalloc+0x1f/0xd0 [ 422.858980][T11618] ? __kmalloc_noprof+0x29b/0x4f0 [ 422.859006][T11618] ? __asan_memset+0x22/0x50 [ 422.859026][T11618] af_alg_get_rsgl+0x436/0x810 [ 422.859066][T11618] skcipher_recvmsg+0x3c0/0x11c0 [ 422.859091][T11618] ? aa_sk_perm+0x81e/0x950 [ 422.859125][T11618] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 422.859149][T11618] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 422.859166][T11618] ? security_socket_recvmsg+0x7e/0x2e0 [ 422.859184][T11618] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 422.859204][T11618] sock_recvmsg+0x229/0x270 [ 422.859232][T11618] ____sys_recvmsg+0x1c9/0x460 [ 422.859260][T11618] ? __pfx_____sys_recvmsg+0x10/0x10 [ 422.859305][T11618] ? import_iovec+0x74/0xa0 [ 422.859329][T11618] ___sys_recvmsg+0x1b5/0x510 [ 422.859354][T11618] ? __pfx____sys_recvmsg+0x10/0x10 [ 422.859402][T11618] ? __fget_files+0x3a0/0x420 [ 422.859430][T11618] __x64_sys_recvmsg+0x198/0x260 [ 422.859452][T11618] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 422.859483][T11618] ? __pfx_ksys_write+0x10/0x10 [ 422.859502][T11618] ? rcu_is_watching+0x15/0xb0 [ 422.859530][T11618] ? do_syscall_64+0xbe/0x3b0 [ 422.859551][T11618] do_syscall_64+0xfa/0x3b0 [ 422.859566][T11618] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.859582][T11618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.859598][T11618] ? clear_bhb_loop+0x60/0xb0 [ 422.859619][T11618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.859635][T11618] RIP: 0033:0x7f1dc3b8ebe9 [ 422.859652][T11618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.859666][T11618] RSP: 002b:00007f1dc49e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 422.859686][T11618] RAX: ffffffffffffffda RBX: 00007f1dc3dc5fa0 RCX: 00007f1dc3b8ebe9 [ 422.859699][T11618] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 422.859710][T11618] RBP: 00007f1dc49e1090 R08: 0000000000000000 R09: 0000000000000000 [ 422.859721][T11618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 422.859731][T11618] R13: 00007f1dc3dc6038 R14: 00007f1dc3dc5fa0 R15: 00007ffea4b55048 [ 422.859762][T11618] [ 423.891875][T11649] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1445'. [ 423.906080][T11649] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1445'. [ 423.916231][T11649] netlink: 'syz.2.1445': attribute type 5 has an invalid length. [ 423.938897][T11649] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1445'. [ 424.087815][T11649] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1445'. [ 424.089237][T11655] lo speed is unknown, defaulting to 1000 [ 424.333994][ T1060] net_ratelimit: 25 callbacks suppressed [ 424.334016][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 424.502719][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 424.653664][ T3528] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 424.762567][ T1060] bond2: (slave ip6gretap2): failed to get link speed/duplex [ 424.874489][ T7441] ------------[ cut here ]------------ [ 424.880189][ T7441] refcount_t: underflow; use-after-free. [ 424.886134][ T7441] WARNING: CPU: 0 PID: 7441 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 424.895604][ T7441] Modules linked in: [ 424.899728][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 424.909230][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.919471][ T7441] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 424.925675][ T7441] Code: 00 b3 e2 8b e8 37 34 bb fc 90 0f 0b 90 90 eb d7 e8 8b 95 f7 fc c6 05 50 6c c5 0a 01 90 48 c7 c7 60 b3 e2 8b e8 17 34 bb fc 90 <0f> 0b 90 90 eb b7 e8 6b 95 f7 fc c6 05 2d 6c c5 0a 01 90 48 c7 c7 [ 424.945458][ T7441] RSP: 0018:ffffc90004cf7700 EFLAGS: 00010246 [ 424.951509][ T7441] RAX: b3868d617102fb00 RBX: 0000000000000003 RCX: ffff888078645a00 [ 424.959497][ T7441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 424.967487][ T7441] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 424.975470][ T7441] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 424.983697][ T7441] R13: ffff88807d1a9860 R14: ffff88807d1a9878 R15: ffffffff86002530 [ 424.991657][ T7441] FS: 0000000000000000(0000) GS:ffff888125c17000(0000) knlGS:0000000000000000 [ 425.000751][ T7441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.007382][ T7441] CR2: 000020000000f000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 425.015374][ T7441] Call Trace: [ 425.018720][ T7441] [ 425.021678][ T7441] klist_dec_and_del+0x3c7/0x3d0 [ 425.026697][ T7441] ? __pfx_klist_children_put+0x10/0x10 [ 425.032259][ T7441] klist_del+0xa6/0x110 [ 425.036447][ T7441] device_del+0x280/0x8e0 [ 425.040762][ T7441] ? _raw_spin_unlock_irq+0x2e/0x50 [ 425.045989][ T7441] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 425.052040][ T7441] ? __pfx_device_del+0x10/0x10 [ 425.056949][ T7441] ? netdev_unregister_kobject+0x344/0x450 [ 425.062869][ T7441] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 425.069740][ T7441] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 425.076657][ T7441] ? rtnl_net_dev_lock+0x257/0x2f0 [ 425.081891][ T7441] unregister_netdevice_queue+0x33c/0x380 [ 425.087651][ T7441] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 425.093915][ T7441] ? rtnl_net_dev_lock+0x36/0x2f0 [ 425.099007][ T7441] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 425.104140][ T7441] unregister_netdev+0x1f/0x60 [ 425.108886][ T7441] bnep_session+0x294d/0x2b40 [ 425.113576][ T7441] ? rcu_is_watching+0x15/0xb0 [ 425.118338][ T7441] ? trace_sched_exit_tp+0x36/0x110 [ 425.123576][ T7441] ? __lock_acquire+0xab9/0xd20 [ 425.128429][ T7441] ? __pfx_bnep_session+0x10/0x10 [ 425.133828][ T7441] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.139708][ T7441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.146078][ T7441] ? __pfx_woken_wake_function+0x10/0x10 [ 425.151709][ T7441] ? __kthread_parkme+0x7b/0x200 [ 425.156659][ T7441] ? __kthread_parkme+0x1a1/0x200 [ 425.161760][ T7441] kthread+0x70e/0x8a0 [ 425.165858][ T7441] ? __pfx_bnep_session+0x10/0x10 [ 425.170866][ T7441] ? __pfx_kthread+0x10/0x10 [ 425.175475][ T7441] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.180792][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.186022][ T7441] ? __pfx_kthread+0x10/0x10 [ 425.190598][ T7441] ret_from_fork+0x3f9/0x770 [ 425.195316][ T7441] ? __pfx_ret_from_fork+0x10/0x10 [ 425.200414][ T7441] ? __switch_to_asm+0x39/0x70 [ 425.205302][ T7441] ? __switch_to_asm+0x33/0x70 [ 425.210052][ T7441] ? __pfx_kthread+0x10/0x10 [ 425.214666][ T7441] ret_from_fork_asm+0x1a/0x30 [ 425.219439][ T7441] [ 425.222516][ T7441] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.229784][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 425.239222][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.249276][ T7441] Call Trace: [ 425.252542][ T7441] [ 425.255482][ T7441] dump_stack_lvl+0x99/0x250 [ 425.260054][ T7441] ? __asan_memcpy+0x40/0x70 [ 425.264627][ T7441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.269802][ T7441] ? __pfx__printk+0x10/0x10 [ 425.274380][ T7441] vpanic+0x281/0x750 [ 425.278361][ T7441] ? __pfx__printk+0x10/0x10 [ 425.282934][ T7441] ? __pfx_vpanic+0x10/0x10 [ 425.287413][ T7441] ? is_bpf_text_address+0x26/0x2b0 [ 425.292599][ T7441] panic+0xb9/0xc0 [ 425.296319][ T7441] ? __pfx_panic+0x10/0x10 [ 425.300726][ T7441] __warn+0x31b/0x4b0 [ 425.304687][ T7441] ? refcount_warn_saturate+0x11a/0x1d0 [ 425.310211][ T7441] ? refcount_warn_saturate+0x11a/0x1d0 [ 425.315738][ T7441] report_bug+0x2be/0x4f0 [ 425.320050][ T7441] ? refcount_warn_saturate+0x11a/0x1d0 [ 425.325603][ T7441] ? refcount_warn_saturate+0x11a/0x1d0 [ 425.331129][ T7441] ? refcount_warn_saturate+0x11c/0x1d0 [ 425.336652][ T7441] handle_bug+0x84/0x160 [ 425.340873][ T7441] exc_invalid_op+0x1a/0x50 [ 425.345369][ T7441] asm_exc_invalid_op+0x1a/0x20 [ 425.350213][ T7441] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 425.356346][ T7441] Code: 00 b3 e2 8b e8 37 34 bb fc 90 0f 0b 90 90 eb d7 e8 8b 95 f7 fc c6 05 50 6c c5 0a 01 90 48 c7 c7 60 b3 e2 8b e8 17 34 bb fc 90 <0f> 0b 90 90 eb b7 e8 6b 95 f7 fc c6 05 2d 6c c5 0a 01 90 48 c7 c7 [ 425.375952][ T7441] RSP: 0018:ffffc90004cf7700 EFLAGS: 00010246 [ 425.381999][ T7441] RAX: b3868d617102fb00 RBX: 0000000000000003 RCX: ffff888078645a00 [ 425.389970][ T7441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 425.397977][ T7441] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 425.405926][ T7441] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000 [ 425.413878][ T7441] R13: ffff88807d1a9860 R14: ffff88807d1a9878 R15: ffffffff86002530 [ 425.421893][ T7441] ? __pfx_klist_children_put+0x10/0x10 [ 425.427439][ T7441] klist_dec_and_del+0x3c7/0x3d0 [ 425.432359][ T7441] ? __pfx_klist_children_put+0x10/0x10 [ 425.437882][ T7441] klist_del+0xa6/0x110 [ 425.442015][ T7441] device_del+0x280/0x8e0 [ 425.446325][ T7441] ? _raw_spin_unlock_irq+0x2e/0x50 [ 425.451507][ T7441] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 425.457550][ T7441] ? __pfx_device_del+0x10/0x10 [ 425.462379][ T7441] ? netdev_unregister_kobject+0x344/0x450 [ 425.468186][ T7441] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 425.474588][ T7441] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 425.481348][ T7441] ? rtnl_net_dev_lock+0x257/0x2f0 [ 425.486528][ T7441] unregister_netdevice_queue+0x33c/0x380 [ 425.492229][ T7441] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 425.498450][ T7441] ? rtnl_net_dev_lock+0x36/0x2f0 [ 425.503453][ T7441] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 425.508645][ T7441] unregister_netdev+0x1f/0x60 [ 425.513389][ T7441] bnep_session+0x294d/0x2b40 [ 425.518048][ T7441] ? rcu_is_watching+0x15/0xb0 [ 425.522821][ T7441] ? trace_sched_exit_tp+0x36/0x110 [ 425.528004][ T7441] ? __lock_acquire+0xab9/0xd20 [ 425.532847][ T7441] ? __pfx_bnep_session+0x10/0x10 [ 425.537848][ T7441] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 425.543723][ T7441] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.550031][ T7441] ? __pfx_woken_wake_function+0x10/0x10 [ 425.555644][ T7441] ? __kthread_parkme+0x7b/0x200 [ 425.560560][ T7441] ? __kthread_parkme+0x1a1/0x200 [ 425.565582][ T7441] kthread+0x70e/0x8a0 [ 425.569648][ T7441] ? __pfx_bnep_session+0x10/0x10 [ 425.574659][ T7441] ? __pfx_kthread+0x10/0x10 [ 425.579235][ T7441] ? _raw_spin_unlock_irq+0x23/0x50 [ 425.584416][ T7441] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.589589][ T7441] ? __pfx_kthread+0x10/0x10 [ 425.594175][ T7441] ret_from_fork+0x3f9/0x770 [ 425.598744][ T7441] ? __pfx_ret_from_fork+0x10/0x10 [ 425.603832][ T7441] ? __switch_to_asm+0x39/0x70 [ 425.608577][ T7441] ? __switch_to_asm+0x33/0x70 [ 425.613330][ T7441] ? __pfx_kthread+0x10/0x10 [ 425.617897][ T7441] ret_from_fork_asm+0x1a/0x30 [ 425.622646][ T7441] [ 426.701316][ T7441] Shutting down cpus with NMI [ 426.706354][ T7441] Kernel Offset: disabled [ 426.710667][ T7441] Rebooting in 86400 seconds..