last executing test programs: 5m12.550162187s ago: executing program 1 (id=4796): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m11.635472564s ago: executing program 1 (id=4805): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001240)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRESDEC=r2, @ANYBLOB='f'], 0x6a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="142000001000010000000000000000000000000a44000000060a0b840000000000000000020000002400048020000180"], 0x6c}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x9, 0xfffffff7, 0x20000008, 0x40024, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m11.494077678s ago: executing program 1 (id=4806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x90, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x73, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @random="7d73b97d7a62", {0x5, 0x2}}, 0xdcdf, @random=0x2, 0x410, @val={0x0, 0x5, @random="0b968d613b"}, @void, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x1, 0x1, 0xdd27, 0xcd}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0xb5, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x83f6, 0x75}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfd, 0x4, 0x20}}, @val={0x76, 0x6, {0x8, 0x8, 0x9, 0xfe00}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="d3154fce926497a49800528a48886a5fa704a20000000000000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf25670000000c009900c50a000021000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0xfc, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "4d9f6e749eab0c15473a7baed7569062c1753ead6cb39c3b7ea312e4211befbd62f9f6880474c3bea02d5af83e57e97d08c81560c6ab527094f096fb4ec97f677e2024269ba3fcf3a0912a92d528c877358b91af7c66539c5509a92a36351599ab86333a30feaffe047b180a3f271b7fe082fa11c204cd0b2dcbf16f6de9e6a3d3bf8179fde986e8e18874d967c9aaf5"}, @NFTA_RULE_USERDATA={0x1b, 0x7, 0x1, 0x0, "ec9bcf195a139e101798893b42f5d418bcb0d47f68d533"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xd4, 0x2, 0xa, 0x605, 0x0, 0x0, {0x8, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x22, 0x6, "c49d237a16523b3bf53d2366f2034d67392c33b945826545e40cb9a83a81"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x65, 0x6, "bc5363f71f5bec378974cce8c8a77527484668cb03f44fb9d10a28e91b17b0b982c70b932a543f8eeaaeaeb2eb07a2b1246598bdc3c8910d44751892696305ecd80aaa1fa3337086f1852404485b6c2f0a46445d591dd5809b164b69f22368cafa"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0xf8, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe000000000000000}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2410}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x388}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001580)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16, @ANYRES16=r6, @ANYRES16, @ANYBLOB], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) epoll_create1(0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, 0x0, 0x20008001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m10.546465396s ago: executing program 1 (id=4813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 5m10.520473604s ago: executing program 0 (id=4814): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getpid() socket$inet6(0xa, 0x1, 0x9) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x42800000, 0x0, 0x0, 0x0, 0x401}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5d}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000200)=[{0x1, 0x3, 0x7, 0x6}, {0x3, 0x3, 0x7, 0x4}, {0x2, 0x4, 0x9, 0xd}, {0x2, 0x2, 0xb, 0x1}, {0x4, 0x1, 0xb, 0x9}, {0x5, 0x4, 0x5, 0xb}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000c80)=[@in6={0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8a1}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002500)={r5, 0x0, 0x30, 0x1c, &(0x7f0000000680)="b738371d277a094472f900401c1f47ed9ac2b1ddac679c6d3991b0ec114cb56a7d730933edf2acddc0b1c6e920461bf3", &(0x7f00000006c0)=""/28, 0x3, 0x0, 0xd4, 0x1000, &(0x7f0000001400)="aa1cee1898a3ca508bd2a86538e7631cfdab7fcc92ddbf006d25ec1de47166ecdcb5a7d254abcffb7909ac1432010097e3ec7f9a42cf592a836f9cf3fadacccc9612f5260a22e01d63710395839830bd3e2c350398820b63904bda3084f439d63fcf01a5f71137b99e72d8f03247c058dbf0356d83f3ce57feec414e3d9a6acc5cd6eb3e2b8dde3d78a39fc77aa3656be2b510cac9848c37e209c9d532c517b6d40883a6f6d4e70967adfb894bad1bcca0b5530680ab377e64f1455ec70c78906b19b21d831dfcb2a366d5c8882e4b5c187f62b0", &(0x7f0000001500)="1ba9412a60d0a65aaad216508dd35678b8474c598de466e6ddbb7cf740caeb85b3f3ed8f2262c45502d8eb1b7fc7d4ef6f393e653a574f087edd31f28d975ca46918023d28d96fc0b083395e05758cff8f4ce485adaa9882fffb098bfc0deafa36f5d6403e503a8b8af0b520af825a44094916bdabb82115b8288f349d9d76622062d68d2406ad3ccfb4cbb43754ce7b4c1512143e47fa3c397296fab5cf1d380994b5aafbcff00ebe512c9bd000ae31dbc8472b5dbe4b17981fad7f3d48ccb11be412af46e3ffa6b6a9bbcbedad03323bcef5ae557f1580c26b1d3356003dd22ff8a7b8c9bd50c7f4112e684bd404405ac5a34c3b8ec6b5bdf138e7a09a6e5300a938cdaf5025e062c7b7be65154f2fc2ecc5e4d61fe2a1ae489af76fcc53f11b5c77e98c2a4a036a90542c8befece7ac62260d46e489070b7a719d673550ed619762b993232059942fb89197be4e95dc87407c476d4c69c0f19f59a6f30f4eb06cf94b211be32933ec0d5541668b5d036ae3c8ec1c10eb517411fc3ca222b4607c588809530ff6bfd516a7cc4067c6eef20b3cc60b69ca3a7a3397471513cee8710130f9b0aee718ef19694e609e18b11341c9ddfdd087f1abd1c6dd9f59d9b44b653b26388a17aeab14d48a5f28e9158ce8a833df14bce4e3debe6470b967c387a825334ab9ecc0926cc22b6838f671a1d198ea117da9a2e4469beb3ea25c3f4607f18ad5f8921294dd76132d79abcca449ff4853b691c217d88287eaa28711cbb69a179c379876b7cc40ee44b45d59c95701353a4516a41fe45bac36276a4b9da785d5535d1a73242d8e2184310291c86d2b42c26e7c71139168c9b5b06a3e1db1a14dedc7f63cd7412d2dfd6bc896fcc686308702c0e5afe34d202deb3e51f1fa052ab17112c43d9090c4109192ed9ee292e0585b8dd4f1c8a43f29e5d1dff130331636cc194d74d9380dd314a31bcdf6afda9132ade3217a1677395bd50e8753801917885b78a7cb804838e46323cb0810f3484e43403edfb17100c2494cec1a0daee01ce371b097161332eb057dd59ce66c2e86f25e568c229248a0418a264ccd68db1f3cfbce7f169c9a707e25877264afd5ed91b2c0131abedfdf9490df548fe348fa6c3a7de2c6308b1cdd56067a0b1a2c1df90493ea22412b16e356018121be86013a28d2872f2fb177812feeeae3139c081a0cab0ccd2990d832acc9961d7c68a2d14429d2f67e19e47257030288c02f8f763fd6cfb1f980ee87250de652b17b8b6c5139dc6e3d0c1498a078ff41e9b4b87d8d35dbf7c515fdf32a505875b500b1efbd8c825f638ebec1581f6d77a0629f8c0bedcd802b1d22c510141918cbbdbb659af077bc7c02975f40f14f3f9c2a02dacf89a407236bec44e07b541164033e0e1956e6abf2d9c7b13c5728e11918ab565ea447de2b2701d4777f0595961b159ee178c0db8330615154ccef29ca386211e7cd955db6f57325ca8bc2989c3aed9c3cc7949e7ae7c9f5217887876ef705df50183c4736e9f3e064fe2cae56d318dd8c7056158b7921888527996c323b2fa31e6f6e736ed20eb6c836df74b80b2f1bafe92120fba23ba4d6f5c9de7132f965e81cab59e020a1f63e0d9e1924f7c7052d0b17bdf5adde48517c0e1b8cf7912f8c359589a565765f3648fdd49447ce2ba2bbc4fd7bf6178fbb977c9a38247d23034ef54c1413f8fddf0ac0ba656859dc634c1afa7d97e6b9c1d69a4aa0ce7ea0157d3e97ea6840e9503af67af00e3cc6185f196818b5fedae3c30e346abf9012ffe1fb25d4d8aaa6a26c8b3f17e532f8cb38dd55b240ca1ca26e2fe027c9c8f9c05c8e3714de066fd9a84c09405393dab9b24dde959a5996f0d29cb6e0ea7e2dda1b79069f3d3115e13b8536688ada768fe72f4f7921ee70b600e599dddcc676341892e85d2bbbacaed1f4014752772b729e850a0dde50343e3a9b8f49a69de1dbc304e0ffdb37cb832b85ac276c9f33e3cbe2dce5fdfdf7fdb919b84542f1cc99182e59e80c913449d39ecca28e31ba021465c43a1ce6a64e202b10719d62dad7af88ed8d5428c45951b5f803daf5c14dd5457465f9865000e19381eaf5df98b232fe147b6c1f0bc7a8294cc52b3ad0daf1ec7ca4fe00e161507be02fa98ccafcf457de7d16a8292b3c39c3351caf4d9f82415eb3929a03c610e42ca1b7713de699b80872d505db31bb86fa9de22f62ea38190a3aac3e466029e7e933432e63635dba714a82df3a1244e400b91ff89884c1c76cdf66ee6d6d0a1d9e4e13e1391bd7c65a767af666efbb967bb4f37ba8eef4f41619be7d10789dfbbf3aaa645ef807fb3c0080031abf01d338ca3742d9a970617ec8c9d058440ab2f3a32c4bef4c1f1218c5d8dd62f629686f8c5e1f7e3cef2db9d20a94165be33fd008d13150297187d39649d2afdd2e94e41ca0b811c4f9cf848fc8f8ffb92230262bfc40dedef92f269407f0c45e9ffbb878b1fa0ca3c9f0f3c15ab47088d6c4b643575bc7066f7a91e11a5e36295e240f27fdd52f85c0f1d3d495a563c1a7d771e8b33fb29c95cf5671ac8f790e86cb4995fa93d58a009436a0588ec7b2cc0626c81c8244e028cf03737b958e8157a3d8f7700a46c37cc5d226495cc3fd20794ebf4a32f87a7fe69b448a0c90daf8493584800cac71f82c799a419798d41e9cbd457dec3c047d2c09f41f2e56b8c5a73b12ce851d1145e691d75a17f3ed5bb7b42349641df5227600bbf9deb194ca411b7e7ea3dbd77b6f8c3ab3499363dbc3454c52d55497cfd88be58eb742e750e487237ffda4eeaf7b94b2e77d11ea78bede8bba8293d4c8dacf5fc6947b2a3ece5792ca3023a9c0d5142492feed7e785841fa6a7d9424d222d900528efe4326a3664474115edc6b33b5aec8c1ad57556f96ac89d8acde0ead7e27fd59feb576a0da4bdd748c87e109354ff7fc905ba108b53e7493460888140fa2bf64566fdb18cb5103ec5d36cda57302745cf6dffd37d282843a063a1a5b43e9cf7288ff36e4af6a6e98d27bbbde992ede8dd2a0be25eaecf5bef2462a019f4ea01cc8545a193aa074e0d6741e8866b533668e80a0aeda7f4031e87accb73013b7942a38d15b71d31ce1e9debd8e5567a9674bbbb1698f2f5fb8beb39ed6e6063119384ff9577839c7fac4498be5f14a629f30e0e20f1f3187def5aceaeb7c15b5013c12bdb08815ce942c043647a2982f1fd986dd327284deb97d43bcd99aed01f4f517e7e8e49f1ae8ba83528bf5e39469eae183f7ab3876c43bcf633fc9fe80779edbeb3a8c37659b9da6ae923d471ffd1321e59ccbd78cbc5286b7089d3c40bc5a2f5659816639803710f87cd669572fec2c34925b23adcbf3ccb15f878e60ab8655040c5fd057b3bfc62bed30d88e33332fd6a7cc62aa2135674a114f45be589b596b08bae580cb48f3da60a1f8dd67cf945a81e15622b9c1ff4321fbe14ac2e7e52379a64a8987f565409fdd796f7a924ab2201bbc06145c68c558d3df7439414404e6ed103b0c29b6e01771289ec9ee57ebb79cf52503ff417594da1178b957f5871e22edb7a4f03b927bc3d62da9ef98ca72d4d279ec894f7a37039c77e1b3a3c7f8b0f127ba91f8b248144e369558d0da2d3436746e7f8a5bdd70849bd7503bc50a1b2a351bb3ea4af8f1b07c92621799c9c546b9f96f66807ef104dc9b2752ef3c2e9507af66135bcc2c303b2d3bd2889754ebe4cda50933d17c29f8557213cf9bd7d0340ba75eff660d4f4f0e02dbc59ab9e9a90492ce74aa152d328de8a9d0b0f3aad637a917707f6147424eb33d6220472e78c7d4d008e902605c34d7abad26d3e5437fef8ea5b724703e41a1e41df6fb2b8490c20fc18388adecf779c92e628b8a55d88f17465f86b16d46daff69efd3e2ce2e5254b780661145671e4971255710d5fc781dc9dc490d770739f8a4629e631fa01fbcf2c38f7a6b57e2c1f43b45f0b362cb46ddcf9ead03c39d650c572710a9e56d2fcf994f45686fe552275266fc3038b70a704d28d323cbb8334ae43ca2092bc79ed6c60ea6b2b9a41fc722de94dae5fda5ae23162123b522058462c00c4f85f222edf5b92e25304422ba6c376ed49f51f89428b51092e336f60b7ad34e956fda0a9dc9658ec7eee9ed1651d11f8447aa4060b1f1342b46aecd469b887f6629bd601f0ebba2039c7e0a96e38780afafd7cd4cdf535a9049600b3d094980b0364ca0ed2c46851bc497a5f17dc753de4456edfdf15c17e01f275070fbc436ab8a3fda2996a5440909a0450723d454ae17222cb45878447814fc79ca527c7ac997fbbb3fc5be94cf5fed5d724bac28ea14055f5cd03cfff4fda294e10ff84c0410cb909fb1af12e74407a24cf968631dd39b4e4740c1ed0f56c7d109c4488b00307a2d9f4a5ea08d7bc140526dd2f347f9665a1a999d3b50a2516e929cf45880643477dcb1bf8e03d758eafd3554e7c7e07ea56a0144f0c37d011f4fefa3abdc5429add605ad50e8e31efc0026a50969495a25038f7ae120290583b6dc988b18f4ad2abe52b5cdd052989e097431902fcc3c192c4b3ef6cf3f6f06a1eacf6b4e54b90a9fc8084caf035d2fa615d97e8c57954c07fb7b96931da05c3fab6771587012cb98121f8fa4c8c9f80164a59b6d55a1b0598bdde793bd4602654e514d1b83e72a16b7b9d57850bfa99f9d38c0fab925a0736335fcd671440b546e7631b8ac24c7e2e47d28f76ec6d1f66d994d24942712ef26621d59c14471911fdc3792702753ceae5106552e9f38f761d51e88784d4309e958d5a8c67466a2f0d0f19366b5591da9140893326345aad78ca8bb4bab12477a5fc351a13c65422546fdcd34104d3fb947ac60a8cf2872b6ebd4e4945f9afafed8d01ca01768e13dc9af3431e730ec11362d9bc449cda695707270159a5b4ed573d982f3581d00ca81811522ee290ee679632714612a73d958a30b9f4d4d3354d99b2fe6f968aa7a646fee666233156d8943847d0ab6ae10caecb802b1737c89474ad552950f9389e40bc42bb5c0be142de18411c7dce6eccf01fdf35034096a11491ed95cfdb2e91ee8f7465a13cdbae950c16d1635881bc155760f9a21b83ffb5d481ebf37ccbba345d8636e51a9946a6c26fa064c9566748b4eb49ddcac47f3ca1b51a7698b73db9eb583348d09c87d28359524e6b14f18ba0699c5112959a8090536c74555a22491b887db4ac4f78d46085943885faa8864d16983578d00a75602287ad9edba42ec045ec1fee5589f654cdde169d5b33110a89b8b01ca894d86cfec33db699bedf0d6a58d760d0d6477b0dbdd555354b2486293c7592b52d73de12834b119168435f7354c2353e1a5c27e4de2fa8f5083ceb8488c66c2904faa6d8900c192469be3e0662d70c53257189d6ef09f84c51914d80144e20cfc0bfd20f41869c7b5581d55b6feeffd12b7c04d7b0803138c67aa408c92610f49507c6e61ca55e1f08d19c589da3334d7cf9f261217c09c7156119a7913c8dd867bfe2a6cfc6b9be7b3900e36dfb493651c6b1bdbfb4707c334d558db24a8f13ec4549979a078542881d1672a60a8f6a7829f78cc07bdb2eef04826e099cb712714e6074ccad5a83be11ad5f8bc5206df07fc84a260713ac2d9ca6452a2cbe73d2e472cc044835aa6a5c4775ef4a9abdf91e1b83332ddb3f543a93b82b8d5f16cd1b518ed41207b9a527f7d72e0071272ff38e6b151a66705ea69ca57cf47212bb1c16395b6c43758ffb8ffa0797877f8bdea6fb656", 0x5, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='netdevsim0\x00'}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4571, 0x4) syz_emit_ethernet(0x86, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x80, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0xc40, 0x2c, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffe0, 0xffff}, {0x7, 0xfff3}, {0xfff1, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x33a400}, @TCA_RATE={0x6, 0x5, {0x1, 0xbb}}, @filter_kind_options=@f_matchall={{0xd}, {0xbfc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x87806f72cf6ca4ae, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x18c, 0x2, [@m_mpls={0x58, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x401, 0xa85, 0xffffffffffffffff, 0x3, 0x7}, 0x2}}]}, {0x10, 0x6, "d2ea453587746c888091f451"}, {0xc}, {0xc, 0x8, {0x3, 0x7}}}}, @m_ct={0x130, 0xe, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x196f}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x17f}, @TCA_CT_LABELS={0x14, 0x7, "a8832fef79ad9fb72cf163c0afd9752a"}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_PARMS={0x18, 0x1, {0xffff, 0xfff, 0x10000000, 0x1, 0x4}}, @TCA_CT_MARK={0x8}]}, {0xa0, 0x6, "149848ed13a9630f29da8723785f5792e3094b58f52183712e86ac618e49d23fabf1b4a35cd45c38321554000da604c42aa465e9d612937db78973318b1e40b08a8e71e3c07ccbb18e5118401829330e19e3cf0549bc40b5ceded835df3c59fe5f66d2323cf247b85f207ed4e4cdabc4791dabbbf05e99d94e26aa49164fa5864db9384b23cc8bdbfdcaa597f87946929d7d399777e59e04756be02d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x960, 0x2, [@m_gact={0x168, 0x14, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24ff, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a7a, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xa12c, 0x8, 0xd, 0x5f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x6, 0x1, 0x35fc, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb8e, 0x7, 0x0, 0x9, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a64, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18a9, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xbb9, 0xd, 0x3, 0xfffff276}}]}, {0xa9, 0x6, "bca4e8688ea39dcd2b0ff4215498a4855f9516ca6cc1d531cf1bcfbb35e9a5c5c1db50eaabf5e1d757c1040333ab66c68b2c765c3be41a1aee358584525b0ca42f452c81540b537824c9af7433be67762de7e44fd5ed58f42c078315e42e2ebf06b2d8575a5861a87a6628cbf214afc388aac1bba02d2494773b86290d8d99b5db36e2121097ee17fe2fd8dc861c91d15610f3520ca6f065f705c868be26ae362dc7bc166d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x170, 0xd, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x0, 0x10000000, 0xffff, 0x9}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0xfd, 0x6, "ae1a237a8d90de30750c5e84a5bcefd86154b2651a2489c8c7edd13ec7fd35dc01dbf8d994c687c4cc464545c23545192b193f0cfff86e21e5d169e3c1c6f50901302a56ec0b7c958992b7c6c0bf1c07685b8afee017dbfc7816bf34f670a3fefb08715a61f25993900f07a3e3125f8b07b5d791f345e7b0703f2690a8bcc8ba7ef7ec6c77589dc20a8e1d045eeb848d16eb01471ea48b0e5604be76381cd1d609021172f909632fa75a409ac97fc3e9f6217c05aad9c36702bf819a9bf0302d94c05e746d078f0b33b44f050932694962766feb64cc54457a59c5c798664d1b3375abfbf814f62d802a0350e8deb36f8038cf309f4cf95ddf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xd8, 0xe, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_LABELS={0x14, 0x7, "6dbbd7e158f12f591fb6e35b14be2d23"}, @TCA_CT_MARK={0x8, 0x5, 0xa}]}, {0x7f, 0x6, "f6761fd220cf95b1c00abdf7ebf3b9ffb88033bc5aa7d774157076f1ffe703152a63f95d15376a6d4c869238dfc0fe19a8218d2788712c3225c4313aa08949b3bfed0731e94f7f25f500fe6b34ecd525b44eed27446e69ff729e30863db109348499b97592dc19292a946dd6cd14dc4644da8d596fff114b6d70ad"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x120, 0x17, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0xda, 0x6, "553544ad0752437d632420120dea9feb0b481e73fc0e43ab42ab95ec28d59d174ea46f3e1d9d13d79a37bbaf785db8f064f67ed7af3f666af105d37fbf38502cf0ba9864ea12d4058ad4bcaa340cfb39d472e623eaeb277cd16ef966e756597d065003b92038d32ad2bf3fbb5216f959e7d95ab3c6dc0c165b8d4f4a20b4fff6df3d59f99edc058103ab8c089f4c29aa3b846530112c47aec85f6293dca813b60507a14e474c602c6a257f1b8a55196fb1c5c02efa7ac3b37c8525edeb79dc34b8b27234b898695c30dcd477148b20a1712e24983f15"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x110, 0x11, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7b, 0x5, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffffa, 0x5, 0x5, 0x7fff}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8, 0x20000000, 0x9, 0xffff}}]}, {0x99, 0x6, "535022df9309a04cea69bd662c8e798bbed2a9bc5bf5504682a3a8e3ab12e818521e2506ce07f0332ae0ff9492282082b4ee6f4dbca96ad7985b0b9e6b7cf5421227d794bc0f3c1234ca5297711b7b8c23bece9a7f31298d681e74fcf395074605e160267f26f3fe6b89e6a3c5a7310fa527acd99a5d5759c562c6f1913233d1418bea576446a446b0e4d3accfade1f3d594dceb0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_gact={0xe8, 0x10, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cad, 0x7}}]}, {0xad, 0x6, "7ca8149a4302ee6a87d948abdeedc023bb449c0c6b86becc82706109cf8b758a459c91f847bda01b19c066dace9012b77542f2a0f43f38f6b2dcda289dbd36017d3fa884caed5dd0481721c9b0fcefed56e0b64665a8248fd67e6b416886eca5f442cd7ce1ba048815a302568eca489cfb933ff01b384b093d39bb5b06a209f52dc8016688820a6f6e77b613cdda71d7a09fe2d23ded57526240568b843e2601b4fc24bb12574fa4a0"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xf4, 0x16, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0xffffffb8, 0x0, 0x7, 0xe5}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0x3, 0x2, 0xcb8}, {0x0, 0x86, 0x4, 0x5}, {0xf8, 0xdd, 0x3, 0x10001}]}]}, {0x86, 0x6, "1a125973e1a6fd69ef466181027c88f198024897982048bf6b58c2240affc03e0dab677fb646a89e8041e8204eebe21b6a7c8f9ddf3d05a1087069c734e6c575b3b189bd52ac0a26b3521a899f2c20f996de6fa7d30567cd57e6f569760d392d964e71a58e93abb25b420c9ddf7321602ad9f3869d16c7984383da55586dfde77039"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0xc0, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0x94, 0x6, "5f0356538df7a36bb3f81864bece0a722be98fb1b3d7904c52903f96106cab9a9f86bc5e3d65eeca0fcecc8c1885a902b6bce7d20a0f6ee48980a4c50b78b23b5a8db72a3d36718c1957086176584a593bbde2062c89d1d8cf913873367e5f039ec4fec227f4b6e49467f1c88f0d60ef3cabacdd9f54021fdf1542dcb9ccf395754b83a93c60c774e7c4b841a7c3efde"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe0, 0xf, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x6d, 0x6, "cafa0fe3a43bcdb3928a715ca06152419fa83313c9ddce309ea52a89812620d137f9b98e1958a4d9b4e6df15b5a889cd0a575aad7b7d670331a06dd017885c68ca962ba855b66929633984d1d146298af5ae9e0d0062930ff2b1d5d879c06470090c38559c1638d916"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_ACT={0xd4, 0x2, [@m_skbedit={0xd0, 0xc, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x9a, 0x6, "4f67fa5d36923c07898959d2342fe81875af1f934d0ec5273bec5cf821a7766b403f44731c21702aa39ef68d88025035f841b281c864167547ff9b572ab42a2526d2db163823debdc7fef850aa9b922b3e0d70493e1b700d7d2e5350a8510aa0243ca79a0ca61b8403513dd816dce33aadaf9613a58ba9e2bbabb4482ad25a46fe47ee3f0ace330519d9448db2f7cd849522473f5af5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0xc40}, 0x1, 0x0, 0x0, 0x40}, 0x41) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2000, 0x4) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x400121e0, 0x0) 5m10.401906205s ago: executing program 1 (id=4815): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m10.380697689s ago: executing program 4 (id=4816): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001240)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRESDEC=r2, @ANYBLOB='f'], 0x6a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="142000001000010000000000000000000000000a44000000060a0b840000000000000000020000002400048020000180"], 0x6c}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x9, 0xfffffff7, 0x20000008, 0x40024, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m10.079351024s ago: executing program 4 (id=4817): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="11e73bce"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000022000011000000180001801400020069705f76746930"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m10.059984789s ago: executing program 2 (id=4818): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01762dbd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000050074000300000008001400", @ANYRES32=r1], 0x40}}, 0x0) 5m9.914729667s ago: executing program 0 (id=4819): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400e0ffb7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, r11, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x54}}, 0x0) ppoll(&(0x7f00000003c0)=[{r4, 0x80a0}, {r1, 0x80}, {r8, 0x2180}, {r2, 0x2}, {r7, 0x2390}, {r4, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 5m9.872215183s ago: executing program 2 (id=4820): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 5m9.807343364s ago: executing program 4 (id=4821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 5m9.764751102s ago: executing program 2 (id=4822): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01762dbd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000050074000300000008001400", @ANYRES32=r1], 0x40}}, 0x0) 5m9.637707159s ago: executing program 2 (id=4823): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x90, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x73, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @random="7d73b97d7a62", {0x5, 0x2}}, 0xdcdf, @random=0x2, 0x410, @val={0x0, 0x5, @random="0b968d613b"}, @void, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x1, 0x1, 0xdd27, 0xcd}}, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x1, 0xb5, 0x7}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1000, 0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x3}, 0x1, 0x83f6, 0x75}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfd, 0x4, 0x20}}, @val={0x76, 0x6, {0x8, 0x8, 0x9, 0xfe00}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="d3154fce926497a49800528a48886a5fa704a20000000000000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbdf25670000000c009900c50a000021000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008081}, 0x5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0xfc, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x94, 0x7, 0x1, 0x0, "4d9f6e749eab0c15473a7baed7569062c1753ead6cb39c3b7ea312e4211befbd62f9f6880474c3bea02d5af83e57e97d08c81560c6ab527094f096fb4ec97f677e2024269ba3fcf3a0912a92d528c877358b91af7c66539c5509a92a36351599ab86333a30feaffe047b180a3f271b7fe082fa11c204cd0b2dcbf16f6de9e6a3d3bf8179fde986e8e18874d967c9aaf5"}, @NFTA_RULE_USERDATA={0x1b, 0x7, 0x1, 0x0, "ec9bcf195a139e101798893b42f5d418bcb0d47f68d533"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xd4, 0x2, 0xa, 0x605, 0x0, 0x0, {0x8, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x22, 0x6, "c49d237a16523b3bf53d2366f2034d67392c33b945826545e40cb9a83a81"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x65, 0x6, "bc5363f71f5bec378974cce8c8a77527484668cb03f44fb9d10a28e91b17b0b982c70b932a543f8eeaaeaeb2eb07a2b1246598bdc3c8910d44751892696305ecd80aaa1fa3337086f1852404485b6c2f0a46445d591dd5809b164b69f22368cafa"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0xf8, 0xb, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe000000000000000}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2410}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x388}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001580)=ANY=[@ANYRES64, @ANYRES8, @ANYRES16, @ANYRES16=r6, @ANYRES16, @ANYBLOB], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) epoll_create1(0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, 0x0, 0x20008001) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5m9.450289555s ago: executing program 3 (id=4824): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x3, 0xa}, {@in=@local, 0x4d6, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x44}, [@algo_aead={0x4c, 0x12, {{'seqiv(ccm(blowfish-asm))\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x40008c0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) syz_emit_ethernet(0x102, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}, {@empty, 0x1000}]}, @lsrr={0x83, 0xf, 0x90, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x2c, 0x0, 0x4, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4, 0x9}, @sack={0x5, 0xa, [0x1000, 0x3]}, @mptcp=@remove_addr={0x1e, 0x5c, 0x0, 0x0, "9aef75b36495f7124659e3171a3c5a4dc358fcb18d1bf06990d115431fc9efea03c804ac99ed56e3e0300508d5f1aececb0f0635e9f02452594fde87db52bef694521ee9003532e59c08ffa1b79158a3e3764bf1838aed54d3"}, @generic={0x5, 0x12, "07da8760085011c7acec54965717d80e"}, @generic={0x2, 0x6, "8b958b34"}, @eol, @sack={0x5, 0x12, [0x5, 0xfff, 0x7, 0x8]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 5m9.436305702s ago: executing program 1 (id=4825): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000040000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004280)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@remote}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000004380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000043c0), &(0x7f0000004400)=0xc) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004440), &(0x7f0000004480)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) sendmsg$netlink(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x10, 0x34, 0x1, 0x70bd26, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x9000}, 0x884) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005780), &(0x7f00000057c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000005800)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005840), &(0x7f0000005880)=0xc) 5m9.387772567s ago: executing program 4 (id=4826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 5m9.273962925s ago: executing program 4 (id=4827): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) 5m9.233197707s ago: executing program 3 (id=4828): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}}, 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) socketpair(0x29, 0x4, 0x80000001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000280), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffffff857b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) 5m9.119206702s ago: executing program 3 (id=4829): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x80010003, @rand_addr=' \x01\x00', 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c80)=""/116, 0x74}, {&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xc, 0x0, 0x0, 0xb00}, 0x40d60b70}], 0x1, 0x0, 0x0) 5m9.058340514s ago: executing program 3 (id=4830): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getpid() socket$inet6(0xa, 0x1, 0x9) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x2d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x42800000, 0x0, 0x0, 0x0, 0x401}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5d}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000200)=[{0x1, 0x3, 0x7, 0x6}, {0x3, 0x3, 0x7, 0x4}, {0x2, 0x4, 0x9, 0xd}, {0x2, 0x2, 0xb, 0x1}, {0x4, 0x1, 0xb, 0x9}, {0x5, 0x4, 0x5, 0xb}], 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000c80)=[@in6={0xa, 0x4e23, 0xfc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8a1}], 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002500)={r5, 0x0, 0x30, 0x1c, &(0x7f0000000680)="b738371d277a094472f900401c1f47ed9ac2b1ddac679c6d3991b0ec114cb56a7d730933edf2acddc0b1c6e920461bf3", &(0x7f00000006c0)=""/28, 0x3, 0x0, 0xd4, 0x1000, &(0x7f0000001400)="aa1cee1898a3ca508bd2a86538e7631cfdab7fcc92ddbf006d25ec1de47166ecdcb5a7d254abcffb7909ac1432010097e3ec7f9a42cf592a836f9cf3fadacccc9612f5260a22e01d63710395839830bd3e2c350398820b63904bda3084f439d63fcf01a5f71137b99e72d8f03247c058dbf0356d83f3ce57feec414e3d9a6acc5cd6eb3e2b8dde3d78a39fc77aa3656be2b510cac9848c37e209c9d532c517b6d40883a6f6d4e70967adfb894bad1bcca0b5530680ab377e64f1455ec70c78906b19b21d831dfcb2a366d5c8882e4b5c187f62b0", &(0x7f0000001500)="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", 0x5, 0x0, 0x5}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='netdevsim0\x00'}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4571, 0x4) syz_emit_ethernet(0x86, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x80, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=@newtfilter={0xc40, 0x2c, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffe0, 0xffff}, {0x7, 0xfff3}, {0xfff1, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x33a400}, @TCA_RATE={0x6, 0x5, {0x1, 0xbb}}, @filter_kind_options=@f_matchall={{0xd}, {0xbfc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x87806f72cf6ca4ae, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_ACT={0x18c, 0x2, [@m_mpls={0x58, 0x16, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x401, 0xa85, 0xffffffffffffffff, 0x3, 0x7}, 0x2}}]}, {0x10, 0x6, "d2ea453587746c888091f451"}, {0xc}, {0xc, 0x8, {0x3, 0x7}}}}, @m_ct={0x130, 0xe, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x196f}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x17f}, @TCA_CT_LABELS={0x14, 0x7, "a8832fef79ad9fb72cf163c0afd9752a"}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_PARMS={0x18, 0x1, {0xffff, 0xfff, 0x10000000, 0x1, 0x4}}, @TCA_CT_MARK={0x8}]}, {0xa0, 0x6, "149848ed13a9630f29da8723785f5792e3094b58f52183712e86ac618e49d23fabf1b4a35cd45c38321554000da604c42aa465e9d612937db78973318b1e40b08a8e71e3c07ccbb18e5118401829330e19e3cf0549bc40b5ceded835df3c59fe5f66d2323cf247b85f207ed4e4cdabc4791dabbbf05e99d94e26aa49164fa5864db9384b23cc8bdbfdcaa597f87946929d7d399777e59e04756be02d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_ACT={0x960, 0x2, [@m_gact={0x168, 0x14, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24ff, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1a7a, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xa12c, 0x8, 0xd, 0x5f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x6, 0x1, 0x35fc, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb8e, 0x7, 0x0, 0x9, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a64, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18a9, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xbb9, 0xd, 0x3, 0xfffff276}}]}, {0xa9, 0x6, "bca4e8688ea39dcd2b0ff4215498a4855f9516ca6cc1d531cf1bcfbb35e9a5c5c1db50eaabf5e1d757c1040333ab66c68b2c765c3be41a1aee358584525b0ca42f452c81540b537824c9af7433be67762de7e44fd5ed58f42c078315e42e2ebf06b2d8575a5861a87a6628cbf214afc388aac1bba02d2494773b86290d8d99b5db36e2121097ee17fe2fd8dc861c91d15610f3520ca6f065f705c868be26ae362dc7bc166d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x170, 0xd, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7, 0x0, 0x10000000, 0xffff, 0x9}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ACTION={0x6, 0x3, 0x10}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0xfd, 0x6, "ae1a237a8d90de30750c5e84a5bcefd86154b2651a2489c8c7edd13ec7fd35dc01dbf8d994c687c4cc464545c23545192b193f0cfff86e21e5d169e3c1c6f50901302a56ec0b7c958992b7c6c0bf1c07685b8afee017dbfc7816bf34f670a3fefb08715a61f25993900f07a3e3125f8b07b5d791f345e7b0703f2690a8bcc8ba7ef7ec6c77589dc20a8e1d045eeb848d16eb01471ea48b0e5604be76381cd1d609021172f909632fa75a409ac97fc3e9f6217c05aad9c36702bf819a9bf0302d94c05e746d078f0b33b44f050932694962766feb64cc54457a59c5c798664d1b3375abfbf814f62d802a0350e8deb36f8038cf309f4cf95ddf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xd8, 0xe, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_LABELS={0x14, 0x7, "6dbbd7e158f12f591fb6e35b14be2d23"}, @TCA_CT_MARK={0x8, 0x5, 0xa}]}, {0x7f, 0x6, "f6761fd220cf95b1c00abdf7ebf3b9ffb88033bc5aa7d774157076f1ffe703152a63f95d15376a6d4c869238dfc0fe19a8218d2788712c3225c4313aa08949b3bfed0731e94f7f25f500fe6b34ecd525b44eed27446e69ff729e30863db109348499b97592dc19292a946dd6cd14dc4644da8d596fff114b6d70ad"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x120, 0x17, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0xda, 0x6, "553544ad0752437d632420120dea9feb0b481e73fc0e43ab42ab95ec28d59d174ea46f3e1d9d13d79a37bbaf785db8f064f67ed7af3f666af105d37fbf38502cf0ba9864ea12d4058ad4bcaa340cfb39d472e623eaeb277cd16ef966e756597d065003b92038d32ad2bf3fbb5216f959e7d95ab3c6dc0c165b8d4f4a20b4fff6df3d59f99edc058103ab8c089f4c29aa3b846530112c47aec85f6293dca813b60507a14e474c602c6a257f1b8a55196fb1c5c02efa7ac3b37c8525edeb79dc34b8b27234b898695c30dcd477148b20a1712e24983f15"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x110, 0x11, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7b, 0x5, 0xffffffffffffffff, 0x3, 0x5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffffa, 0x5, 0x5, 0x7fff}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x8, 0x20000000, 0x9, 0xffff}}]}, {0x99, 0x6, "535022df9309a04cea69bd662c8e798bbed2a9bc5bf5504682a3a8e3ab12e818521e2506ce07f0332ae0ff9492282082b4ee6f4dbca96ad7985b0b9e6b7cf5421227d794bc0f3c1234ca5297711b7b8c23bece9a7f31298d681e74fcf395074605e160267f26f3fe6b89e6a3c5a7310fa527acd99a5d5759c562c6f1913233d1418bea576446a446b0e4d3accfade1f3d594dceb0e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_gact={0xe8, 0x10, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1cad, 0x7}}]}, {0xad, 0x6, "7ca8149a4302ee6a87d948abdeedc023bb449c0c6b86becc82706109cf8b758a459c91f847bda01b19c066dace9012b77542f2a0f43f38f6b2dcda289dbd36017d3fa884caed5dd0481721c9b0fcefed56e0b64665a8248fd67e6b416886eca5f442cd7ce1ba048815a302568eca489cfb933ff01b384b093d39bb5b06a209f52dc8016688820a6f6e77b613cdda71d7a09fe2d23ded57526240568b843e2601b4fc24bb12574fa4a0"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xf4, 0x16, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0xffffffb8, 0x0, 0x7, 0xe5}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1, 0x3, 0x2, 0xcb8}, {0x0, 0x86, 0x4, 0x5}, {0xf8, 0xdd, 0x3, 0x10001}]}]}, {0x86, 0x6, "1a125973e1a6fd69ef466181027c88f198024897982048bf6b58c2240affc03e0dab677fb646a89e8041e8204eebe21b6a7c8f9ddf3d05a1087069c734e6c575b3b189bd52ac0a26b3521a899f2c20f996de6fa7d30567cd57e6f569760d392d964e71a58e93abb25b420c9ddf7321602ad9f3869d16c7984383da55586dfde77039"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_csum={0xc0, 0x1b, 0x0, 0x0, {{0x9}, {0x4}, {0x94, 0x6, "5f0356538df7a36bb3f81864bece0a722be98fb1b3d7904c52903f96106cab9a9f86bc5e3d65eeca0fcecc8c1885a902b6bce7d20a0f6ee48980a4c50b78b23b5a8db72a3d36718c1957086176584a593bbde2062c89d1d8cf913873367e5f039ec4fec227f4b6e49467f1c88f0d60ef3cabacdd9f54021fdf1542dcb9ccf395754b83a93c60c774e7c4b841a7c3efde"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xe0, 0xf, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x6d, 0x6, "cafa0fe3a43bcdb3928a715ca06152419fa83313c9ddce309ea52a89812620d137f9b98e1958a4d9b4e6df15b5a889cd0a575aad7b7d670331a06dd017885c68ca962ba855b66929633984d1d146298af5ae9e0d0062930ff2b1d5d879c06470090c38559c1638d916"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_ACT={0xd4, 0x2, [@m_skbedit={0xd0, 0xc, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x9a, 0x6, "4f67fa5d36923c07898959d2342fe81875af1f934d0ec5273bec5cf821a7766b403f44731c21702aa39ef68d88025035f841b281c864167547ff9b572ab42a2526d2db163823debdc7fef850aa9b922b3e0d70493e1b700d7d2e5350a8510aa0243ca79a0ca61b8403513dd816dce33aadaf9613a58ba9e2bbabb4482ad25a46fe47ee3f0ace330519d9448db2f7cd849522473f5af5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0xc40}, 0x1, 0x0, 0x0, 0x40}, 0x41) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2000, 0x4) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x400121e0, 0x0) 5m9.000048922s ago: executing program 0 (id=4831): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="11e73bce"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x0, 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000022000011000000180001801400020069705f76746930"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m8.72337496s ago: executing program 0 (id=4832): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'ip6gre0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100"], 0x64}}, 0x0) 5m8.70628156s ago: executing program 2 (id=4833): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$inet6(r2, &(0x7f0000000300)=""/219, 0xdb, 0x2002, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @loopback, 0xae}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='westwood\x00', 0x9) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x9c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x98393d4e042e8d58}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) 5m8.680486851s ago: executing program 3 (id=4834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc02}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000b080)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x48}}, 0x20040054) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3f00330080000000ffffffffffff0802110000001e3d1ae5ecc200000000000000000000640080000102960c0301ae0406060194e34a"], 0x74}}, 0x0) 5m8.488838521s ago: executing program 0 (id=4835): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000100)="e0b9547ed387", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x40000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m8.441323603s ago: executing program 3 (id=4836): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x8, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffb, 0x99, 0x9, 0x5, 0x5, 0x81}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2005}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x100, 0xffffffff, 0x0, 0x1, 0x1}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4m58.624476773s ago: executing program 4 (id=4837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 4m54.973154561s ago: executing program 2 (id=4838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 4m53.029536392s ago: executing program 0 (id=4839): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x3, 0xa}, {@in=@local, 0x4d6, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x44}, [@algo_aead={0x4c, 0x12, {{'seqiv(ccm(blowfish-asm))\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x40008c0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) syz_emit_ethernet(0x102, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}, {@empty, 0x1000}]}, @lsrr={0x83, 0xf, 0x90, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x2c, 0x0, 0x4, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4, 0x9}, @sack={0x5, 0xa, [0x1000, 0x3]}, @mptcp=@remove_addr={0x1e, 0x5c, 0x0, 0x0, "9aef75b36495f7124659e3171a3c5a4dc358fcb18d1bf06990d115431fc9efea03c804ac99ed56e3e0300508d5f1aececb0f0635e9f02452594fde87db52bef694521ee9003532e59c08ffa1b79158a3e3764bf1838aed54d3"}, @generic={0x5, 0x12, "07da8760085011c7acec54965717d80e"}, @generic={0x2, 0x6, "8b958b34"}, @eol, @sack={0x5, 0x12, [0x5, 0xfff, 0x7, 0x8]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 4m47.798610372s ago: executing program 32 (id=4825): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000040000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004280)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@remote}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000004380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000043c0), &(0x7f0000004400)=0xc) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004440), &(0x7f0000004480)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) sendmsg$netlink(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x10, 0x34, 0x1, 0x70bd26, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x9000}, 0x884) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005780), &(0x7f00000057c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000005800)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005840), &(0x7f0000005880)=0xc) 4m40.261916302s ago: executing program 33 (id=4836): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x8, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xb}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffb, 0x99, 0x9, 0x5, 0x5, 0x81}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2005}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x100, 0xffffffff, 0x0, 0x1, 0x1}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4m34.077951361s ago: executing program 34 (id=4839): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x3, 0xa}, {@in=@local, 0x4d6, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x44}, [@algo_aead={0x4c, 0x12, {{'seqiv(ccm(blowfish-asm))\x00'}, 0x0, 0x180}}]}, 0x13c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x40008c0) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000000) syz_emit_ethernet(0x102, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x5, 0x0, @private=0xa010100, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x4000}, {@empty, 0x1000}]}, @lsrr={0x83, 0xf, 0x90, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x2c, 0x0, 0x4, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4, 0x9}, @sack={0x5, 0xa, [0x1000, 0x3]}, @mptcp=@remove_addr={0x1e, 0x5c, 0x0, 0x0, "9aef75b36495f7124659e3171a3c5a4dc358fcb18d1bf06990d115431fc9efea03c804ac99ed56e3e0300508d5f1aececb0f0635e9f02452594fde87db52bef694521ee9003532e59c08ffa1b79158a3e3764bf1838aed54d3"}, @generic={0x5, 0x12, "07da8760085011c7acec54965717d80e"}, @generic={0x2, 0x6, "8b958b34"}, @eol, @sack={0x5, 0x12, [0x5, 0xfff, 0x7, 0x8]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 4m30.987919866s ago: executing program 35 (id=4838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe0ec}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 4m26.669435466s ago: executing program 36 (id=4837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 0s ago: executing program 9 (id=4844): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000040000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004280)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@remote}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000004380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000043c0), &(0x7f0000004400)=0xc) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004440), &(0x7f0000004480)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) sendmsg$netlink(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x10, 0x34, 0x1, 0x70bd26, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x9000}, 0x884) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000044c0), &(0x7f0000004500)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005780), &(0x7f00000057c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000005800)) kernel console output (not intermixed with test programs): 415.431058][T16350] RDX: 0000000000000810 RSI: 0000400000000240 RDI: 000000000000000c [ 415.431071][T16350] RBP: 00007fd469274090 R08: 0000000000000000 R09: 0000000000000000 [ 415.431083][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.431095][T16350] R13: 0000000000000000 R14: 00007fd4685a5fa0 R15: 00007ffda4ee7218 [ 415.431133][T16350] [ 415.718533][T16359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3620'. [ 415.764408][T16361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3619'. [ 415.891243][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 415.934930][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 415.958932][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3622'. [ 415.975225][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.985763][T16370] FAULT_INJECTION: forcing a failure. [ 415.985763][T16370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.054986][T16370] CPU: 0 UID: 0 PID: 16370 Comm: syz.0.3622 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 416.055020][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 416.055034][T16370] Call Trace: [ 416.055042][T16370] [ 416.055051][T16370] dump_stack_lvl+0x241/0x360 [ 416.055084][T16370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.055107][T16370] ? __pfx__printk+0x10/0x10 [ 416.055130][T16370] ? __pfx_lock_release+0x10/0x10 [ 416.055169][T16370] should_fail_ex+0x40a/0x550 [ 416.055206][T16370] _copy_from_user+0x2d/0xb0 [ 416.055236][T16370] copy_msghdr_from_user+0xae/0x680 [ 416.055275][T16370] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 416.055304][T16370] ? __fget_files+0x2a/0x410 [ 416.055338][T16370] ? __fget_files+0x2a/0x410 [ 416.055378][T16370] __sys_sendmsg+0x209/0x350 [ 416.055409][T16370] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.055478][T16370] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 416.055512][T16370] ? do_syscall_64+0x100/0x230 [ 416.055543][T16370] ? do_syscall_64+0xb6/0x230 [ 416.055573][T16370] do_syscall_64+0xf3/0x230 [ 416.055600][T16370] ? clear_bhb_loop+0x35/0x90 [ 416.055633][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.055663][T16370] RIP: 0033:0x7ffad418d169 [ 416.055681][T16370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.055700][T16370] RSP: 002b:00007ffad4f19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.055723][T16370] RAX: ffffffffffffffda RBX: 00007ffad43a6080 RCX: 00007ffad418d169 [ 416.055738][T16370] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000007 [ 416.055751][T16370] RBP: 00007ffad4f19090 R08: 0000000000000000 R09: 0000000000000000 [ 416.055764][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.055776][T16370] R13: 0000000000000000 R14: 00007ffad43a6080 R15: 00007fff5aca1278 [ 416.055808][T16370] [ 417.004881][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.157045][T16401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3634'. [ 417.339142][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3633'. [ 417.368458][T16405] lo speed is unknown, defaulting to 1000 [ 417.410262][T16405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3633'. [ 417.498541][T16410] sch_fq: defrate 511 ignored. [ 418.054882][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.138204][T16422] siw: device registration error -23 [ 418.477988][T16425] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3639'. [ 418.498510][ T8061] IPVS: starting estimator thread 0... [ 418.521520][T16427] wg1: entered promiscuous mode [ 418.541524][T16427] wg1: entered allmulticast mode [ 418.584920][T16428] IPVS: using max 19 ests per chain, 45600 per kthread [ 418.888608][T16437] openvswitch: netlink: VXLAN extension 26 out of range max 1 [ 419.084869][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.175695][T16447] FAULT_INJECTION: forcing a failure. [ 419.175695][T16447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.209631][T16447] CPU: 1 UID: 0 PID: 16447 Comm: syz.0.3649 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 419.209746][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 419.209761][T16447] Call Trace: [ 419.209773][T16447] [ 419.209785][T16447] dump_stack_lvl+0x241/0x360 [ 419.209815][T16447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.209840][T16447] ? __pfx__printk+0x10/0x10 [ 419.209869][T16447] should_fail_ex+0x40a/0x550 [ 419.209904][T16447] _copy_from_user+0x2d/0xb0 [ 419.209933][T16447] copy_from_sockptr_offset+0x6b/0xb0 [ 419.209979][T16447] do_ip6t_set_ctl+0xbe6/0x1270 [ 419.210015][T16447] ? nf_setsockopt+0x240/0x2c0 [ 419.210036][T16447] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 419.210067][T16447] ? rcu_is_watching+0x15/0xb0 [ 419.210092][T16447] ? trace_contention_end+0x3c/0x120 [ 419.210128][T16447] ? __mutex_unlock_slowpath+0x227/0x800 [ 419.210165][T16447] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.210193][T16447] ? aa_sk_perm+0x96d/0xab0 [ 419.210231][T16447] ? __pfx_aa_sk_perm+0x10/0x10 [ 419.210265][T16447] nf_setsockopt+0x295/0x2c0 [ 419.210291][T16447] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 419.210324][T16447] do_sock_setsockopt+0x3af/0x720 [ 419.210354][T16447] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 419.210384][T16447] ? __fget_files+0x395/0x410 [ 419.210414][T16447] ? __fget_files+0x2a/0x410 [ 419.210454][T16447] __x64_sys_setsockopt+0x1ee/0x280 [ 419.210484][T16447] do_syscall_64+0xf3/0x230 [ 419.210513][T16447] ? clear_bhb_loop+0x35/0x90 [ 419.210555][T16447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.210585][T16447] RIP: 0033:0x7ffad418d169 [ 419.210605][T16447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.210623][T16447] RSP: 002b:00007ffad4f3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 419.210646][T16447] RAX: ffffffffffffffda RBX: 00007ffad43a5fa0 RCX: 00007ffad418d169 [ 419.210662][T16447] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 419.210675][T16447] RBP: 00007ffad4f3a090 R08: 00000000000005b0 R09: 0000000000000000 [ 419.210698][T16447] R10: 00004000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 419.210711][T16447] R13: 0000000000000000 R14: 00007ffad43a5fa0 R15: 00007fff5aca1278 [ 419.210743][T16447] [ 419.733876][T16443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.758951][T16443] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.827585][T16443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.889154][T16454] macsec0: entered allmulticast mode [ 419.916925][T16457] veth1_macvtap: entered allmulticast mode [ 419.951085][T16457] macsec0: left allmulticast mode [ 419.965507][T16457] veth1_macvtap: left allmulticast mode [ 420.124844][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.319895][T16474] FAULT_INJECTION: forcing a failure. [ 420.319895][T16474] name failslab, interval 1, probability 0, space 0, times 0 [ 420.365282][T16474] CPU: 1 UID: 0 PID: 16474 Comm: syz.2.3657 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 420.365316][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.365330][T16474] Call Trace: [ 420.365338][T16474] [ 420.365347][T16474] dump_stack_lvl+0x241/0x360 [ 420.365382][T16474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.365406][T16474] ? __pfx__printk+0x10/0x10 [ 420.365431][T16474] ? __kmalloc_noprof+0xb5/0x4c0 [ 420.365462][T16474] ? __pfx___might_resched+0x10/0x10 [ 420.365490][T16474] ? aa_get_newest_label+0xff/0x6f0 [ 420.365530][T16474] should_fail_ex+0x40a/0x550 [ 420.365569][T16474] should_failslab+0xac/0x100 [ 420.365601][T16474] __kmalloc_noprof+0xdd/0x4c0 [ 420.365630][T16474] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 420.365657][T16474] ? apparmor_capable+0x13b/0x1b0 [ 420.365687][T16474] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 420.365730][T16474] genl_rcv_msg+0x80b/0xec0 [ 420.365765][T16474] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.365823][T16474] ? __pfx_lock_acquire+0x10/0x10 [ 420.365855][T16474] ? __pfx_hwsim_set_edge_lqi+0x10/0x10 [ 420.365890][T16474] ? __pfx___might_resched+0x10/0x10 [ 420.365930][T16474] netlink_rcv_skb+0x206/0x480 [ 420.365963][T16474] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.365990][T16474] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.366057][T16474] genl_rcv+0x28/0x40 [ 420.366078][T16474] netlink_unicast+0x7f6/0x990 [ 420.366118][T16474] ? __pfx_netlink_unicast+0x10/0x10 [ 420.366144][T16474] ? __virt_addr_valid+0x45f/0x530 [ 420.366166][T16474] ? __phys_addr_symbol+0x2f/0x70 [ 420.366186][T16474] ? __check_object_size+0x47a/0x730 [ 420.366222][T16474] netlink_sendmsg+0x8de/0xcb0 [ 420.366269][T16474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.366307][T16474] ? aa_sock_msg_perm+0x91/0x160 [ 420.366347][T16474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.366378][T16474] __sock_sendmsg+0x221/0x270 [ 420.366413][T16474] ____sys_sendmsg+0x53a/0x860 [ 420.366446][T16474] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.366468][T16474] ? __fget_files+0x2a/0x410 [ 420.366504][T16474] ? __fget_files+0x2a/0x410 [ 420.366546][T16474] __sys_sendmsg+0x269/0x350 [ 420.366579][T16474] ? __pfx___sys_sendmsg+0x10/0x10 [ 420.366619][T16474] ? do_sys_openat2+0x17a/0x1d0 [ 420.366681][T16474] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 420.366722][T16474] ? do_syscall_64+0x100/0x230 [ 420.366755][T16474] ? do_syscall_64+0xb6/0x230 [ 420.366786][T16474] do_syscall_64+0xf3/0x230 [ 420.366814][T16474] ? clear_bhb_loop+0x35/0x90 [ 420.366849][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.366878][T16474] RIP: 0033:0x7f17a018d169 [ 420.366897][T16474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.366916][T16474] RSP: 002b:00007f17a0f57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.366938][T16474] RAX: ffffffffffffffda RBX: 00007f17a03a5fa0 RCX: 00007f17a018d169 [ 420.366954][T16474] RDX: 0000000000000180 RSI: 0000400000000040 RDI: 0000000000000004 [ 420.366968][T16474] RBP: 00007f17a0f57090 R08: 0000000000000000 R09: 0000000000000000 [ 420.366981][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.366994][T16474] R13: 0000000000000000 R14: 00007f17a03a5fa0 R15: 00007ffdef001658 [ 420.367027][T16474] [ 420.373287][T16477] __nla_validate_parse: 5 callbacks suppressed [ 420.373311][T16477] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3656'. [ 420.429184][T16478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.943390][T16490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3660'. [ 421.174866][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 421.248626][T16498] lo speed is unknown, defaulting to 1000 [ 421.543884][T16504] FAULT_INJECTION: forcing a failure. [ 421.543884][T16504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.566941][T16504] CPU: 0 UID: 0 PID: 16504 Comm: syz.1.3665 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 421.566976][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 421.566990][T16504] Call Trace: [ 421.566998][T16504] [ 421.567007][T16504] dump_stack_lvl+0x241/0x360 [ 421.567040][T16504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.567064][T16504] ? __pfx__printk+0x10/0x10 [ 421.567093][T16504] ? __pfx_lock_release+0x10/0x10 [ 421.567136][T16504] should_fail_ex+0x40a/0x550 [ 421.567174][T16504] _copy_from_user+0x2d/0xb0 [ 421.567206][T16504] copy_msghdr_from_user+0xae/0x680 [ 421.567245][T16504] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 421.567275][T16504] ? __fget_files+0x2a/0x410 [ 421.567311][T16504] ? __fget_files+0x2a/0x410 [ 421.567353][T16504] __sys_sendmsg+0x209/0x350 [ 421.567385][T16504] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.567425][T16504] ? do_sys_openat2+0x17a/0x1d0 [ 421.567484][T16504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 421.567520][T16504] ? do_syscall_64+0x100/0x230 [ 421.567552][T16504] ? do_syscall_64+0xb6/0x230 [ 421.567583][T16504] do_syscall_64+0xf3/0x230 [ 421.567682][T16504] ? clear_bhb_loop+0x35/0x90 [ 421.567723][T16504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.567754][T16504] RIP: 0033:0x7f907ad8d169 [ 421.567772][T16504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.567791][T16504] RSP: 002b:00007f907bbfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.567813][T16504] RAX: ffffffffffffffda RBX: 00007f907afa5fa0 RCX: 00007f907ad8d169 [ 421.567828][T16504] RDX: 0000000000000000 RSI: 0000400000006040 RDI: 0000000000000004 [ 421.567843][T16504] RBP: 00007f907bbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 421.567857][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.567870][T16504] R13: 0000000000000000 R14: 00007f907afa5fa0 R15: 00007ffede05b048 [ 421.567903][T16504] [ 421.850986][T16506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3666'. [ 422.077890][T16498] lo speed is unknown, defaulting to 1000 [ 422.204838][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.814700][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3673'. [ 422.868688][T16536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3674'. [ 422.963192][T16541] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3676'. [ 423.078354][T16543] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3678'. [ 423.129519][T16545] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3677'. [ 423.244854][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 423.281942][T16540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.289712][T16548] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3679'. [ 423.310753][T16540] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.321997][T16540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.571124][T16552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.583484][T16552] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.597001][T16552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.614520][T16565] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 423.669237][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3682'. [ 423.745247][T16567] lo speed is unknown, defaulting to 1000 [ 424.285129][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.029643][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.060141][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.078284][T16610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.121552][T16567] lo speed is unknown, defaulting to 1000 [ 425.324871][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.588461][T16630] __nla_validate_parse: 3 callbacks suppressed [ 425.588484][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3701'. [ 425.641502][T16637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3703'. [ 426.031713][T16652] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3708'. [ 426.059999][T16650] netlink: 'syz.2.3707': attribute type 11 has an invalid length. [ 426.374904][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.515712][T16669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3713'. [ 426.533544][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3714'. [ 426.550129][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3714'. [ 426.679480][T16672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.007060][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 427.242262][T16696] lo speed is unknown, defaulting to 1000 [ 427.345727][T16701] x_tables: duplicate underflow at hook 1 [ 427.414848][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.602493][T16705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3726'. [ 427.704669][T16706] sctp: [Deprecated]: syz.0.3725 (pid 16706) Use of int in maxseg socket option. [ 427.704669][T16706] Use struct sctp_assoc_value instead [ 427.765803][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 428.107067][T16719] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3730'. [ 428.250951][T16696] lo speed is unknown, defaulting to 1000 [ 428.303158][T16726] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3732'. [ 428.347386][T16720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.444846][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.904647][T16743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.918626][T16743] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.939524][T16750] dccp_v4_rcv: dropped packet with invalid checksum [ 428.989566][T16743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.043014][T16745] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 429.075554][T16745] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 429.095272][T16745] netlink: 'syz.1.3735': attribute type 2 has an invalid length. [ 429.484846][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.524856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.043175][T16814] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 431.062192][T16814] __nla_validate_parse: 3 callbacks suppressed [ 431.062219][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3761'. [ 431.197096][T16817] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 431.378008][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'. [ 431.394109][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 431.564844][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.627443][T16836] FAULT_INJECTION: forcing a failure. [ 431.627443][T16836] name failslab, interval 1, probability 0, space 0, times 0 [ 431.684931][T16836] CPU: 1 UID: 0 PID: 16836 Comm: syz.4.3771 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 431.684967][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 431.684982][T16836] Call Trace: [ 431.684990][T16836] [ 431.685008][T16836] dump_stack_lvl+0x241/0x360 [ 431.685043][T16836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.685068][T16836] ? __pfx__printk+0x10/0x10 [ 431.685106][T16836] should_fail_ex+0x40a/0x550 [ 431.685145][T16836] should_failslab+0xac/0x100 [ 431.685177][T16836] ? skb_clone+0x20c/0x390 [ 431.685203][T16836] kmem_cache_alloc_noprof+0x70/0x380 [ 431.685240][T16836] skb_clone+0x20c/0x390 [ 431.685272][T16836] __netlink_deliver_tap+0x3c4/0x7f0 [ 431.685318][T16836] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.685349][T16836] netlink_deliver_tap+0x19d/0x1b0 [ 431.685383][T16836] netlink_unicast+0x7c4/0x990 [ 431.685422][T16836] ? __pfx_netlink_unicast+0x10/0x10 [ 431.685450][T16836] ? __virt_addr_valid+0x45f/0x530 [ 431.685473][T16836] ? __phys_addr_symbol+0x2f/0x70 [ 431.685493][T16836] ? __check_object_size+0x47a/0x730 [ 431.685529][T16836] netlink_sendmsg+0x8de/0xcb0 [ 431.685575][T16836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.685613][T16836] ? aa_sock_msg_perm+0x91/0x160 [ 431.685653][T16836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.685713][T16836] __sock_sendmsg+0x221/0x270 [ 431.685749][T16836] ____sys_sendmsg+0x53a/0x860 [ 431.685786][T16836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.685811][T16836] ? __fget_files+0x2a/0x410 [ 431.685846][T16836] ? __fget_files+0x2a/0x410 [ 431.685889][T16836] __sys_sendmsg+0x269/0x350 [ 431.685921][T16836] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.685962][T16836] ? do_sys_openat2+0x17a/0x1d0 [ 431.686023][T16836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.686060][T16836] ? do_syscall_64+0x100/0x230 [ 431.686092][T16836] ? do_syscall_64+0xb6/0x230 [ 431.686124][T16836] do_syscall_64+0xf3/0x230 [ 431.686152][T16836] ? clear_bhb_loop+0x35/0x90 [ 431.686186][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.686217][T16836] RIP: 0033:0x7fd46838d169 [ 431.686237][T16836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.686255][T16836] RSP: 002b:00007fd469274038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.686279][T16836] RAX: ffffffffffffffda RBX: 00007fd4685a5fa0 RCX: 00007fd46838d169 [ 431.686295][T16836] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 431.686309][T16836] RBP: 00007fd469274090 R08: 0000000000000000 R09: 0000000000000000 [ 431.686323][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.686335][T16836] R13: 0000000000000000 R14: 00007fd4685a5fa0 R15: 00007ffda4ee7218 [ 431.686368][T16836] [ 432.066141][T16833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3770'. [ 432.139616][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 432.268246][T16848] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3774'. [ 432.441589][T16848] FAULT_INJECTION: forcing a failure. [ 432.441589][T16848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.462361][T16848] CPU: 0 UID: 0 PID: 16848 Comm: syz.1.3774 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 432.462393][T16848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.462407][T16848] Call Trace: [ 432.462415][T16848] [ 432.462424][T16848] dump_stack_lvl+0x241/0x360 [ 432.462458][T16848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.462482][T16848] ? __pfx__printk+0x10/0x10 [ 432.462506][T16848] ? __pfx_lock_release+0x10/0x10 [ 432.462539][T16848] ? __lock_acquire+0x1397/0x2100 [ 432.462578][T16848] should_fail_ex+0x40a/0x550 [ 432.462624][T16848] _copy_from_user+0x2d/0xb0 [ 432.462654][T16848] kstrtouint_from_user+0xc6/0x190 [ 432.462682][T16848] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 432.462710][T16848] ? __pfx_lock_acquire+0x10/0x10 [ 432.462754][T16848] proc_fail_nth_write+0xaa/0x2d0 [ 432.462785][T16848] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 432.462814][T16848] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 432.462852][T16848] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 432.462886][T16848] vfs_write+0x29f/0xd10 [ 432.462911][T16848] ? fdget_pos+0x254/0x320 [ 432.462941][T16848] ? __mutex_unlock_slowpath+0x227/0x800 [ 432.462974][T16848] ? __pfx_vfs_write+0x10/0x10 [ 432.462995][T16848] ? do_sys_openat2+0x17a/0x1d0 [ 432.463029][T16848] ? __fget_files+0x2a/0x410 [ 432.463063][T16848] ? __fget_files+0x395/0x410 [ 432.463093][T16848] ? __fget_files+0x2a/0x410 [ 432.463135][T16848] ksys_write+0x18f/0x2b0 [ 432.463161][T16848] ? __pfx_ksys_write+0x10/0x10 [ 432.463185][T16848] ? do_syscall_64+0x100/0x230 [ 432.463215][T16848] ? do_syscall_64+0xb6/0x230 [ 432.463246][T16848] do_syscall_64+0xf3/0x230 [ 432.463273][T16848] ? clear_bhb_loop+0x35/0x90 [ 432.463326][T16848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.463360][T16848] RIP: 0033:0x7f907ad8bc1f [ 432.463379][T16848] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 432.463397][T16848] RSP: 002b:00007f907bbfb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 432.463419][T16848] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f907ad8bc1f [ 432.463434][T16848] RDX: 0000000000000001 RSI: 00007f907bbfb0a0 RDI: 0000000000000004 [ 432.463448][T16848] RBP: 00007f907bbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 432.463461][T16848] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 432.463474][T16848] R13: 0000000000000000 R14: 00007f907afa5fa0 R15: 00007ffede05b048 [ 432.463508][T16848] [ 432.625189][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.645213][T16843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.750284][T16843] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.792601][T16843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.016153][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 433.035138][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 433.644894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.813473][T16883] "syz.2.3786" (16883) uses obsolete ecb(arc4) skcipher [ 434.394319][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3792'. [ 434.424515][T16905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 434.684869][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.998607][T16922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3801'. [ 435.098416][T16936] FAULT_INJECTION: forcing a failure. [ 435.098416][T16936] name failslab, interval 1, probability 0, space 0, times 0 [ 435.152032][T16936] CPU: 0 UID: 0 PID: 16936 Comm: syz.4.3803 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 435.152064][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 435.152078][T16936] Call Trace: [ 435.152087][T16936] [ 435.152096][T16936] dump_stack_lvl+0x241/0x360 [ 435.152140][T16936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.152162][T16936] ? __pfx__printk+0x10/0x10 [ 435.152181][T16936] ? __kmalloc_noprof+0xb5/0x4c0 [ 435.152206][T16936] ? __pfx___might_resched+0x10/0x10 [ 435.152233][T16936] should_fail_ex+0x40a/0x550 [ 435.152264][T16936] should_failslab+0xac/0x100 [ 435.152289][T16936] __kmalloc_noprof+0xdd/0x4c0 [ 435.152312][T16936] ? ip_options_get+0x9d/0x5b0 [ 435.152333][T16936] ip_options_get+0x9d/0x5b0 [ 435.152354][T16936] ? __pfx_ip_options_get+0x10/0x10 [ 435.152372][T16936] ? __pfx_lock_release+0x10/0x10 [ 435.152398][T16936] ? ip4_string+0xd5/0xb90 [ 435.152425][T16936] ip_cmsg_send+0x4cf/0xa80 [ 435.152456][T16936] raw_sendmsg+0x6c5/0x2500 [ 435.152492][T16936] ? __pfx_raw_sendmsg+0x10/0x10 [ 435.152522][T16936] ? aa_sk_perm+0x96d/0xab0 [ 435.152553][T16936] ? __pfx_aa_sk_perm+0x10/0x10 [ 435.152581][T16936] ? inet_sendmsg+0x330/0x390 [ 435.152605][T16936] __sock_sendmsg+0x1a6/0x270 [ 435.152633][T16936] ____sys_sendmsg+0x53a/0x860 [ 435.152660][T16936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.152679][T16936] ? __fget_files+0x2a/0x410 [ 435.152708][T16936] ? __sys_sendmmsg+0x392/0x720 [ 435.152729][T16936] ? __might_fault+0xaa/0x120 [ 435.152750][T16936] __sys_sendmmsg+0x36a/0x720 [ 435.152779][T16936] ? __pfx___sys_sendmmsg+0x10/0x10 [ 435.152809][T16936] ? __pfx_lock_release+0x10/0x10 [ 435.152832][T16936] ? kstrtouint_from_user+0x128/0x190 [ 435.152870][T16936] ? ksys_write+0x22a/0x2b0 [ 435.152889][T16936] ? __pfx_lock_release+0x10/0x10 [ 435.152919][T16936] ? sb_end_write+0xe9/0x1c0 [ 435.152945][T16936] ? vfs_write+0x7fa/0xd10 [ 435.152965][T16936] ? __mutex_unlock_slowpath+0x227/0x800 [ 435.153014][T16936] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 435.153047][T16936] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 435.153077][T16936] ? do_syscall_64+0x100/0x230 [ 435.153102][T16936] __x64_sys_sendmmsg+0xa0/0xb0 [ 435.153131][T16936] do_syscall_64+0xf3/0x230 [ 435.153155][T16936] ? clear_bhb_loop+0x35/0x90 [ 435.153181][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.153204][T16936] RIP: 0033:0x7fd46838d169 [ 435.153220][T16936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.153235][T16936] RSP: 002b:00007fd469274038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 435.153254][T16936] RAX: ffffffffffffffda RBX: 00007fd4685a5fa0 RCX: 00007fd46838d169 [ 435.153268][T16936] RDX: 0000000000000002 RSI: 0000400000004c80 RDI: 0000000000000003 [ 435.153279][T16936] RBP: 00007fd469274090 R08: 0000000000000000 R09: 0000000000000000 [ 435.153290][T16936] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000002 [ 435.153301][T16936] R13: 0000000000000000 R14: 00007fd4685a5fa0 R15: 00007ffda4ee7218 [ 435.153325][T16936] [ 435.532385][T16932] netlink: set zone limit has 4 unknown bytes [ 435.724899][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.708740][T16990] FAULT_INJECTION: forcing a failure. [ 436.708740][T16990] name failslab, interval 1, probability 0, space 0, times 0 [ 436.768680][T16990] CPU: 1 UID: 0 PID: 16990 Comm: syz.1.3824 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 436.768718][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.768732][T16990] Call Trace: [ 436.768741][T16990] [ 436.768751][T16990] dump_stack_lvl+0x241/0x360 [ 436.768786][T16990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.768811][T16990] ? __pfx__printk+0x10/0x10 [ 436.768836][T16990] ? __kmalloc_cache_noprof+0x48/0x390 [ 436.768869][T16990] ? __pfx___might_resched+0x10/0x10 [ 436.768916][T16990] should_fail_ex+0x40a/0x550 [ 436.768954][T16990] should_failslab+0xac/0x100 [ 436.768987][T16990] __kmalloc_cache_noprof+0x70/0x390 [ 436.769018][T16990] ? ima_calc_file_hash+0xaae/0x1b30 [ 436.769046][T16990] ima_calc_file_hash+0xaae/0x1b30 [ 436.769085][T16990] ? is_bpf_text_address+0x26/0x2a0 [ 436.769107][T16990] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 436.769176][T16990] ? mark_lock+0x9a/0x360 [ 436.769211][T16990] ? __lock_acquire+0x1397/0x2100 [ 436.769248][T16990] ? make_vfsgid+0x51/0xa0 [ 436.769271][T16990] ? generic_fillattr+0x58f/0x830 [ 436.769318][T16990] ima_collect_measurement+0x529/0xb20 [ 436.769356][T16990] ? __pfx_ima_collect_measurement+0x10/0x10 [ 436.769389][T16990] ? rcu_is_watching+0x15/0xb0 [ 436.769414][T16990] ? trace_contention_end+0x3c/0x120 [ 436.769446][T16990] ? __asan_memset+0x23/0x50 [ 436.769485][T16990] ? ima_get_hash_algo+0x156/0x4d0 [ 436.769516][T16990] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 436.769559][T16990] process_measurement+0x1351/0x1fb0 [ 436.769607][T16990] ? __pfx_process_measurement+0x10/0x10 [ 436.769635][T16990] ? __pfx_lock_acquire+0x10/0x10 [ 436.769667][T16990] ? aa_file_perm+0x137/0xf50 [ 436.769687][T16990] ? do_syscall_64+0xf3/0x230 [ 436.769754][T16990] ? lockdep_init_map_type+0xa1/0x910 [ 436.769794][T16990] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 436.769832][T16990] ima_file_mmap+0x1cd/0x220 [ 436.769851][T16990] ? __raw_spin_lock_init+0x45/0x100 [ 436.769881][T16990] ? __pfx_ima_file_mmap+0x10/0x10 [ 436.769899][T16990] ? file_init_path+0x3b/0x570 [ 436.769932][T16990] ? end_current_label_crit_section+0x151/0x180 [ 436.769968][T16990] ? common_file_perm+0x1a6/0x210 [ 436.770007][T16990] security_mmap_file+0x7aa/0xa40 [ 436.770040][T16990] vm_mmap_pgoff+0x141/0x430 [ 436.770072][T16990] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 436.770103][T16990] ? hugetlb_file_setup+0x3dc/0x5c0 [ 436.770138][T16990] ksys_mmap_pgoff+0x53e/0x720 [ 436.770179][T16990] do_syscall_64+0xf3/0x230 [ 436.770226][T16990] ? clear_bhb_loop+0x35/0x90 [ 436.770261][T16990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.770290][T16990] RIP: 0033:0x7f907ad8d169 [ 436.770309][T16990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.770327][T16990] RSP: 002b:00007f907bbda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 436.770351][T16990] RAX: ffffffffffffffda RBX: 00007f907afa6080 RCX: 00007f907ad8d169 [ 436.770367][T16990] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000400000000000 [ 436.770382][T16990] RBP: 00007f907bbda090 R08: ffffffffffffffff R09: 0000000000000000 [ 436.770397][T16990] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 436.770411][T16990] R13: 0000000000000001 R14: 00007f907afa6080 R15: 00007ffede05b048 [ 436.770444][T16990] [ 437.133978][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.165366][ T30] audit: type=1800 audit(1742228419.565:3): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3824" name="anon_hugepage" dev="hugetlbfs" ino=62860 res=0 errno=0 [ 437.510780][T16997] __nla_validate_parse: 3 callbacks suppressed [ 437.510803][T16997] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3826'. [ 437.536785][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 437.632214][T17003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.913981][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3836'. [ 437.931354][T17016] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 438.040447][T17023] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.3838'. [ 438.204859][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.573581][T17041] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.3842'. [ 439.019598][T17048] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3847'. [ 439.074341][T17053] FAULT_INJECTION: forcing a failure. [ 439.074341][T17053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.100341][T17049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.122142][T17053] CPU: 0 UID: 0 PID: 17053 Comm: syz.3.3848 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 439.122176][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 439.122191][T17053] Call Trace: [ 439.122199][T17053] [ 439.122209][T17053] dump_stack_lvl+0x241/0x360 [ 439.122242][T17053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.122266][T17053] ? __pfx__printk+0x10/0x10 [ 439.122290][T17053] ? __pfx_lock_release+0x10/0x10 [ 439.122332][T17053] should_fail_ex+0x40a/0x550 [ 439.122370][T17053] _copy_from_user+0x2d/0xb0 [ 439.122400][T17053] copy_msghdr_from_user+0xae/0x680 [ 439.122439][T17053] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 439.122469][T17053] ? __fget_files+0x2a/0x410 [ 439.122505][T17053] ? __fget_files+0x2a/0x410 [ 439.122546][T17053] __sys_sendmmsg+0x32b/0x720 [ 439.122584][T17053] ? __pfx___sys_sendmmsg+0x10/0x10 [ 439.122623][T17053] ? __pfx_lock_release+0x10/0x10 [ 439.122652][T17053] ? kstrtouint_from_user+0x128/0x190 [ 439.122722][T17053] ? ksys_write+0x22a/0x2b0 [ 439.122753][T17053] ? __pfx_lock_release+0x10/0x10 [ 439.122792][T17053] ? sb_end_write+0xe9/0x1c0 [ 439.122823][T17053] ? vfs_write+0x7fa/0xd10 [ 439.122849][T17053] ? __mutex_unlock_slowpath+0x227/0x800 [ 439.122907][T17053] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 439.122943][T17053] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.122977][T17053] ? do_syscall_64+0x100/0x230 [ 439.123009][T17053] __x64_sys_sendmmsg+0xa0/0xb0 [ 439.123037][T17053] do_syscall_64+0xf3/0x230 [ 439.123065][T17053] ? clear_bhb_loop+0x35/0x90 [ 439.123104][T17053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.123133][T17053] RIP: 0033:0x7f2845f8d169 [ 439.123153][T17053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.123172][T17053] RSP: 002b:00007f2846d55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.123195][T17053] RAX: ffffffffffffffda RBX: 00007f28461a5fa0 RCX: 00007f2845f8d169 [ 439.123212][T17053] RDX: 00000000040000cf RSI: 0000400000000900 RDI: 0000000000000003 [ 439.123227][T17053] RBP: 00007f2846d55090 R08: 0000000000000000 R09: 0000000000000000 [ 439.123241][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.123253][T17053] R13: 0000000000000000 R14: 00007f28461a5fa0 R15: 00007ffdb0fbe338 [ 439.123285][T17053] [ 439.274970][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.482019][T17060] lo speed is unknown, defaulting to 1000 [ 439.899648][T17072] lo speed is unknown, defaulting to 1000 [ 440.238594][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'. [ 440.299021][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.299048][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.337919][ T3718] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 440.347770][ T3718] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 440.369326][T17060] lo speed is unknown, defaulting to 1000 [ 440.387917][T17091] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3859'. [ 441.178764][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 441.260624][T17113] lo speed is unknown, defaulting to 1000 [ 441.334873][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.379930][T17119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3870'. [ 441.783631][T17133] lo speed is unknown, defaulting to 1000 [ 442.000221][T17148] netlink: 'syz.4.3881': attribute type 10 has an invalid length. [ 442.052077][T17133] lo speed is unknown, defaulting to 1000 [ 442.066559][T17148] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.114295][T17148] bond0: (slave team0): Enslaving as an active interface with an up link [ 442.364864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.705355][T17165] netlink: 'syz.3.3885': attribute type 39 has an invalid length. [ 442.790014][T17166] __nla_validate_parse: 6 callbacks suppressed [ 442.790037][T17166] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3885'. [ 442.825813][T17138] xt_hashlimit: size too large, truncated to 1048576 [ 442.933583][T17169] FAULT_INJECTION: forcing a failure. [ 442.933583][T17169] name failslab, interval 1, probability 0, space 0, times 0 [ 443.021436][T17169] CPU: 0 UID: 0 PID: 17169 Comm: syz.1.3886 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 443.021471][T17169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.021485][T17169] Call Trace: [ 443.021493][T17169] [ 443.021502][T17169] dump_stack_lvl+0x241/0x360 [ 443.021537][T17169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.021561][T17169] ? __pfx__printk+0x10/0x10 [ 443.021586][T17169] ? __kmalloc_cache_noprof+0x48/0x390 [ 443.021730][T17169] ? __pfx___might_resched+0x10/0x10 [ 443.021770][T17169] should_fail_ex+0x40a/0x550 [ 443.021810][T17169] should_failslab+0xac/0x100 [ 443.021842][T17169] __kmalloc_cache_noprof+0x70/0x390 [ 443.021872][T17169] ? nf_tables_newtable+0x52c/0x1e10 [ 443.021910][T17169] nf_tables_newtable+0x52c/0x1e10 [ 443.021948][T17169] ? nfnl_pernet+0x23/0x240 [ 443.021973][T17169] ? __skb_clone+0x5c/0x6c0 [ 443.022003][T17169] ? __pfx_nf_tables_newtable+0x10/0x10 [ 443.022045][T17169] ? __nla_parse+0x40/0x60 [ 443.022082][T17169] nfnetlink_rcv+0x14e3/0x2ab0 [ 443.022143][T17169] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 443.022220][T17169] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.022250][T17169] ? skb_clone+0x240/0x390 [ 443.022276][T17169] ? __pfx_lock_release+0x10/0x10 [ 443.022334][T17169] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.022369][T17169] netlink_unicast+0x7f6/0x990 [ 443.022406][T17169] ? __pfx_netlink_unicast+0x10/0x10 [ 443.022433][T17169] ? __virt_addr_valid+0x45f/0x530 [ 443.022455][T17169] ? __phys_addr_symbol+0x2f/0x70 [ 443.022479][T17169] ? __check_object_size+0x47a/0x730 [ 443.022512][T17169] netlink_sendmsg+0x8de/0xcb0 [ 443.022550][T17169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.022582][T17169] ? aa_sock_msg_perm+0x91/0x160 [ 443.022617][T17169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.022670][T17169] __sock_sendmsg+0x221/0x270 [ 443.022702][T17169] ____sys_sendmsg+0x53a/0x860 [ 443.022733][T17169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.022753][T17169] ? __fget_files+0x2a/0x410 [ 443.022783][T17169] ? __fget_files+0x2a/0x410 [ 443.022819][T17169] __sys_sendmsg+0x269/0x350 [ 443.022846][T17169] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.022880][T17169] ? do_sys_openat2+0x17a/0x1d0 [ 443.022935][T17169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.022965][T17169] ? do_syscall_64+0x100/0x230 [ 443.022993][T17169] ? do_syscall_64+0xb6/0x230 [ 443.023021][T17169] do_syscall_64+0xf3/0x230 [ 443.023045][T17169] ? clear_bhb_loop+0x35/0x90 [ 443.023074][T17169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.023099][T17169] RIP: 0033:0x7f907ad8d169 [ 443.023118][T17169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.023135][T17169] RSP: 002b:00007f907bbfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.023156][T17169] RAX: ffffffffffffffda RBX: 00007f907afa5fa0 RCX: 00007f907ad8d169 [ 443.023171][T17169] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 443.023183][T17169] RBP: 00007f907bbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 443.023195][T17169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.023207][T17169] R13: 0000000000000000 R14: 00007f907afa5fa0 R15: 00007ffede05b048 [ 443.023237][T17169] [ 443.404847][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.536756][T17163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3885'. [ 443.852411][T17180] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.3889'. [ 444.204985][T17188] IPVS: length: 78 != 8 [ 444.346911][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3895'. [ 444.444880][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.602663][T17202] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3896'. [ 445.333671][T17224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3904'. [ 445.378635][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3905'. [ 445.400826][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3905'. [ 445.455003][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3905'. [ 445.484835][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.526185][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.431843][ T2989] bond0 (unregistering): (slave bond1): Releasing backup interface [ 447.446918][ T2989] bond0 (unregistering): Released all slaves [ 447.574890][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.652205][ T2989] bond1 (unregistering): Released all slaves [ 447.785334][ T2989] : left promiscuous mode [ 447.900170][T17260] lo speed is unknown, defaulting to 1000 [ 448.071732][ T2989] tipc: Disabling bearer [ 448.081733][ T2989] tipc: Disabling bearer [ 448.087516][ T2989] tipc: Left network mode [ 448.105742][T17264] netlink: 'syz.4.3917': attribute type 1 has an invalid length. [ 448.310566][T17274] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 448.319954][T17274] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 448.328718][T17274] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 448.352025][T17280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.358967][T17274] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 448.397345][T17274] bond1: (slave geneve2): making interface the new active one [ 448.432546][T17274] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 448.757445][T17285] netlink: 'syz.2.3923': attribute type 1 has an invalid length. [ 448.788571][T17285] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3923'. [ 448.839956][T17292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3923'. [ 449.054610][ T2989] hsr_slave_0: left promiscuous mode [ 449.078069][ T2989] hsr_slave_1: left promiscuous mode [ 449.144676][ T2989] veth1_macvtap: left promiscuous mode [ 449.158284][ T2989] veth0_macvtap: left promiscuous mode [ 449.170884][ T2989] veth1_vlan: left promiscuous mode [ 449.181910][ T2989] veth0_vlan: left promiscuous mode [ 450.207012][ T8061] lo speed is unknown, defaulting to 1000 [ 450.213406][ T8061] infiniband syz2: ib_query_port failed (-19) [ 450.510137][T17315] FAULT_INJECTION: forcing a failure. [ 450.510137][T17315] name failslab, interval 1, probability 0, space 0, times 0 [ 450.551371][T17315] CPU: 0 UID: 0 PID: 17315 Comm: syz.2.3931 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 450.551404][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.551418][T17315] Call Trace: [ 450.551426][T17315] [ 450.551435][T17315] dump_stack_lvl+0x241/0x360 [ 450.551468][T17315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.551491][T17315] ? __pfx__printk+0x10/0x10 [ 450.551516][T17315] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 450.551549][T17315] ? __pfx___might_resched+0x10/0x10 [ 450.551582][T17315] should_fail_ex+0x40a/0x550 [ 450.551618][T17315] should_failslab+0xac/0x100 [ 450.551647][T17315] kmem_cache_alloc_node_noprof+0x77/0x380 [ 450.551691][T17315] ? __alloc_skb+0x1c3/0x440 [ 450.551720][T17315] __alloc_skb+0x1c3/0x440 [ 450.551743][T17315] ? ____sys_sendmsg+0x53a/0x860 [ 450.551771][T17315] ? __pfx___alloc_skb+0x10/0x10 [ 450.551801][T17315] ? netlink_ack_tlv_len+0x6e/0x200 [ 450.551836][T17315] netlink_ack+0x145/0xa60 [ 450.551864][T17315] ? __pfx_lock_acquire+0x10/0x10 [ 450.551901][T17315] ? __pfx___might_resched+0x10/0x10 [ 450.551939][T17315] netlink_rcv_skb+0x294/0x480 [ 450.551971][T17315] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.551998][T17315] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.552043][T17315] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 450.552092][T17315] genl_rcv+0x28/0x40 [ 450.552115][T17315] netlink_unicast+0x7f6/0x990 [ 450.552154][T17315] ? __pfx_netlink_unicast+0x10/0x10 [ 450.552180][T17315] ? __virt_addr_valid+0x45f/0x530 [ 450.552203][T17315] ? __phys_addr_symbol+0x2f/0x70 [ 450.552224][T17315] ? __check_object_size+0x47a/0x730 [ 450.552258][T17315] netlink_sendmsg+0x8de/0xcb0 [ 450.552314][T17315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.552352][T17315] ? aa_sock_msg_perm+0x91/0x160 [ 450.552393][T17315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.552423][T17315] __sock_sendmsg+0x221/0x270 [ 450.552456][T17315] ____sys_sendmsg+0x53a/0x860 [ 450.552491][T17315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.552513][T17315] ? __fget_files+0x2a/0x410 [ 450.552547][T17315] ? __fget_files+0x2a/0x410 [ 450.552587][T17315] __sys_sendmsg+0x269/0x350 [ 450.552618][T17315] ? __pfx___sys_sendmsg+0x10/0x10 [ 450.552658][T17315] ? do_sys_openat2+0x17a/0x1d0 [ 450.552730][T17315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 450.552765][T17315] ? do_syscall_64+0x100/0x230 [ 450.552797][T17315] ? do_syscall_64+0xb6/0x230 [ 450.552827][T17315] do_syscall_64+0xf3/0x230 [ 450.552854][T17315] ? clear_bhb_loop+0x35/0x90 [ 450.552887][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.552914][T17315] RIP: 0033:0x7f17a018d169 [ 450.552934][T17315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.552956][T17315] RSP: 002b:00007f17a0f57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.552980][T17315] RAX: ffffffffffffffda RBX: 00007f17a03a5fa0 RCX: 00007f17a018d169 [ 450.552995][T17315] RDX: 0000000000000000 RSI: 0000400000001180 RDI: 0000000000000003 [ 450.553009][T17315] RBP: 00007f17a0f57090 R08: 0000000000000000 R09: 0000000000000000 [ 450.553023][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.553035][T17315] R13: 0000000000000000 R14: 00007f17a03a5fa0 R15: 00007ffdef001658 [ 450.553069][T17315] [ 451.455881][ T2989] IPVS: stop unused estimator thread 0... [ 451.999033][T17351] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3942'. [ 452.357137][T17358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.390732][T17358] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.420733][T17358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.668608][T17373] x_tables: duplicate underflow at hook 2 [ 452.683979][T17366] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.3946'. [ 452.984604][T17383] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3954'. [ 453.236869][T17386] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.265710][T17386] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.282959][T17386] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.297527][T17386] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 453.415678][T17401] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3958'. [ 453.457723][T17396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.474040][T17396] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.505302][T17396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.113388][T17427] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 454.140349][T17427] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 454.358467][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3971'. [ 454.394945][T17436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3971'. [ 454.699990][T17445] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3974'. [ 454.745672][T17447] netlink: 'syz.0.3976': attribute type 10 has an invalid length. [ 454.762201][T17447] netlink: 1252 bytes leftover after parsing attributes in process `syz.0.3976'. [ 454.792246][T17447] openvswitch: netlink: Message has 5 unknown bytes. [ 455.164216][T17467] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3984'. [ 455.302785][T17472] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3986'. [ 455.515868][T17482] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3990'. [ 455.631884][T17487] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3992'. [ 455.633394][T17480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.665561][T17480] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.679814][T17480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.870104][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3994'. [ 456.136552][T17505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3999'. [ 458.828653][T17579] netlink: 'syz.1.4020': attribute type 10 has an invalid length. [ 458.911559][T17579] veth1_macvtap: left promiscuous mode [ 458.924536][T17579] team0: Device veth1_macvtap failed to register rx_handler [ 459.598084][T17595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.632886][T17595] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.702050][T17595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.831349][T17608] netlink: 'syz.1.4028': attribute type 4 has an invalid length. [ 460.450761][T17628] __nla_validate_parse: 6 callbacks suppressed [ 460.450786][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4037'. [ 460.525041][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4037'. [ 460.560422][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4037'. [ 460.796440][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 460.848318][T17637] hsr_slave_1: Device is already in use. [ 461.127961][T17653] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4043'. [ 461.564532][T17662] IPVS: set_ctl: invalid protocol: 103 172.30.1.2:20129 [ 461.941111][T17644] delete_channel: no stack [ 462.172089][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4056'. [ 462.578751][T17687] smc: net device bond0 applied user defined pnetid SYZ2 [ 462.849398][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 462.901508][T17704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4062'. [ 462.932424][T17704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4062'. [ 463.166416][T17713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4063'. [ 463.558300][T17732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4069'. [ 463.923598][T17746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.940765][T17746] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.960955][T17746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.737646][T17766] netlink: 'syz.3.4079': attribute type 1 has an invalid length. [ 466.309370][T17819] __nla_validate_parse: 2 callbacks suppressed [ 466.309396][T17819] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4097'. [ 466.361721][T17821] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4098'. [ 466.438374][T17824] FAULT_INJECTION: forcing a failure. [ 466.438374][T17824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.441247][T17825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4100'. [ 466.459325][T17824] CPU: 0 UID: 0 PID: 17824 Comm: syz.0.4099 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 466.459360][T17824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 466.459375][T17824] Call Trace: [ 466.459384][T17824] [ 466.459393][T17824] dump_stack_lvl+0x241/0x360 [ 466.459429][T17824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.459456][T17824] ? __pfx__printk+0x10/0x10 [ 466.459482][T17824] ? __pfx_lock_release+0x10/0x10 [ 466.459527][T17824] should_fail_ex+0x40a/0x550 [ 466.459573][T17824] _copy_from_user+0x2d/0xb0 [ 466.459606][T17824] copy_msghdr_from_user+0xae/0x680 [ 466.459647][T17824] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 466.459679][T17824] ? __fget_files+0x2a/0x410 [ 466.459717][T17824] ? __fget_files+0x2a/0x410 [ 466.459760][T17824] __sys_sendmsg+0x209/0x350 [ 466.459793][T17824] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.459833][T17824] ? do_sys_openat2+0x17a/0x1d0 [ 466.459896][T17824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 466.459932][T17824] ? do_syscall_64+0x100/0x230 [ 466.459967][T17824] ? do_syscall_64+0xb6/0x230 [ 466.459998][T17824] do_syscall_64+0xf3/0x230 [ 466.460027][T17824] ? clear_bhb_loop+0x35/0x90 [ 466.460063][T17824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.460093][T17824] RIP: 0033:0x7ffad418d169 [ 466.460113][T17824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.460133][T17824] RSP: 002b:00007ffad4f3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.460183][T17824] RAX: ffffffffffffffda RBX: 00007ffad43a5fa0 RCX: 00007ffad418d169 [ 466.460200][T17824] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 466.460222][T17824] RBP: 00007ffad4f3a090 R08: 0000000000000000 R09: 0000000000000000 [ 466.460236][T17824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.460250][T17824] R13: 0000000000000000 R14: 00007ffad43a5fa0 R15: 00007fff5aca1278 [ 466.460285][T17824] [ 466.868678][T17826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.880943][T17826] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.946382][T17826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.466762][T17858] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4110'. [ 467.509571][T17862] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4112'. [ 467.549827][T17862] syzkaller1: entered promiscuous mode [ 467.558806][T17862] syzkaller1: entered allmulticast mode [ 467.569208][T17862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4112'. [ 467.755231][T17869] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4114'. [ 467.881298][T17870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4114'. [ 468.344495][T17882] sctp: [Deprecated]: syz.1.4119 (pid 17882) Use of int in max_burst socket option. [ 468.344495][T17882] Use struct sctp_assoc_value instead [ 468.745412][T17891] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4123'. [ 468.844369][T17893] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.4124'. [ 468.876397][T17893] openvswitch: netlink: Flow key attribute not present in set flow. [ 469.551518][T17925] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 470.139498][T17951] FAULT_INJECTION: forcing a failure. [ 470.139498][T17951] name failslab, interval 1, probability 0, space 0, times 0 [ 470.205086][T17951] CPU: 0 UID: 0 PID: 17951 Comm: syz.2.4144 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 470.205121][T17951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 470.205135][T17951] Call Trace: [ 470.205144][T17951] [ 470.205153][T17951] dump_stack_lvl+0x241/0x360 [ 470.205187][T17951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.205212][T17951] ? __pfx__printk+0x10/0x10 [ 470.205238][T17951] ? kmem_cache_alloc_noprof+0x48/0x380 [ 470.205270][T17951] ? __pfx___might_resched+0x10/0x10 [ 470.205304][T17951] should_fail_ex+0x40a/0x550 [ 470.205343][T17951] should_failslab+0xac/0x100 [ 470.205373][T17951] ? ptlock_alloc+0x20/0x70 [ 470.205393][T17951] kmem_cache_alloc_noprof+0x70/0x380 [ 470.205430][T17951] ptlock_alloc+0x20/0x70 [ 470.205451][T17951] pte_alloc_one+0x73/0x160 [ 470.205485][T17951] __handle_mm_fault+0x3ac2/0x70f0 [ 470.205516][T17951] ? mark_lock+0x9a/0x360 [ 470.205569][T17951] ? __pfx___handle_mm_fault+0x10/0x10 [ 470.205615][T17951] ? mt_find+0x2a9/0x920 [ 470.205644][T17951] ? __pfx_lock_release+0x10/0x10 [ 470.205690][T17951] ? mt_find+0x2a9/0x920 [ 470.205720][T17951] ? mt_find+0x6c8/0x920 [ 470.205748][T17951] ? mt_find+0x2a9/0x920 [ 470.205781][T17951] ? __pfx_mt_find+0x10/0x10 [ 470.205831][T17951] ? find_vma+0xf9/0x170 [ 470.205851][T17951] ? __pfx_find_vma+0x10/0x10 [ 470.205869][T17951] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 470.205906][T17951] handle_mm_fault+0x3e5/0x8d0 [ 470.205951][T17951] exc_page_fault+0x2b9/0x8b0 [ 470.205985][T17951] asm_exc_page_fault+0x26/0x30 [ 470.206013][T17951] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 470.206036][T17951] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 470.206054][T17951] RSP: 0018:ffffc900037379b8 EFLAGS: 00050202 [ 470.206075][T17951] RAX: 00007ffffffff001 RBX: 0000400000000040 RCX: 000000000000000c [ 470.206109][T17951] RDX: 0000000000000001 RSI: 0000400000000040 RDI: ffffc90003737a40 [ 470.206125][T17951] RBP: ffffc90003737c30 R08: ffffc90003737a4b R09: 1ffff920006e6f49 [ 470.206141][T17951] R10: dffffc0000000000 R11: fffff520006e6f4a R12: 000000000000048a [ 470.206157][T17951] R13: dffffc0000000000 R14: ffffc90003737a40 R15: 000000000000000c [ 470.206191][T17951] _copy_from_user+0x7b/0xb0 [ 470.206222][T17951] do_ip_vs_set_ctl+0x2e3/0xe40 [ 470.206253][T17951] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 470.206284][T17951] ? __mutex_lock+0x397/0x1010 [ 470.206320][T17951] ? __mutex_unlock_slowpath+0x227/0x800 [ 470.206359][T17951] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 470.206393][T17951] ? __pfx___mutex_lock+0x10/0x10 [ 470.206433][T17951] nf_setsockopt+0x295/0x2c0 [ 470.206457][T17951] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 470.206493][T17951] smc_setsockopt+0x275/0xd10 [ 470.206525][T17951] ? __pfx_smc_setsockopt+0x10/0x10 [ 470.206551][T17951] ? aa_sock_opt_perm+0x79/0x120 [ 470.206591][T17951] ? __pfx_smc_setsockopt+0x10/0x10 [ 470.206613][T17951] do_sock_setsockopt+0x3af/0x720 [ 470.206645][T17951] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 470.206676][T17951] ? __fget_files+0x395/0x410 [ 470.206707][T17951] ? __fget_files+0x2a/0x410 [ 470.206749][T17951] __x64_sys_setsockopt+0x1ee/0x280 [ 470.206781][T17951] do_syscall_64+0xf3/0x230 [ 470.206810][T17951] ? clear_bhb_loop+0x35/0x90 [ 470.206843][T17951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.206872][T17951] RIP: 0033:0x7f17a018d169 [ 470.206891][T17951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.206909][T17951] RSP: 002b:00007f17a0f36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 470.206931][T17951] RAX: ffffffffffffffda RBX: 00007f17a03a6080 RCX: 00007f17a018d169 [ 470.206947][T17951] RDX: 000000000000048a RSI: 0000000000000000 RDI: 0000000000000003 [ 470.206960][T17951] RBP: 00007f17a0f36090 R08: 000000000000000c R09: 0000000000000000 [ 470.206974][T17951] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001 [ 470.206988][T17951] R13: 0000000000000000 R14: 00007f17a03a6080 R15: 00007ffdef001658 [ 470.207022][T17951] [ 471.052189][T17974] FAULT_INJECTION: forcing a failure. [ 471.052189][T17974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.114634][T17974] CPU: 1 UID: 0 PID: 17974 Comm: syz.3.4150 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 471.114668][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 471.114683][T17974] Call Trace: [ 471.114692][T17974] [ 471.114702][T17974] dump_stack_lvl+0x241/0x360 [ 471.114739][T17974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.114762][T17974] ? __pfx__printk+0x10/0x10 [ 471.114786][T17974] ? __pfx_lock_release+0x10/0x10 [ 471.114827][T17974] should_fail_ex+0x40a/0x550 [ 471.114862][T17974] _copy_from_user+0x2d/0xb0 [ 471.114892][T17974] csum_and_copy_from_iter_full+0x1fa/0x2180 [ 471.114937][T17974] ? rcu_is_watching+0x15/0xb0 [ 471.114962][T17974] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 471.114988][T17974] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 471.115043][T17974] ? __build_skb_around+0x245/0x3d0 [ 471.115075][T17974] ip_generic_getfrag+0x158/0x310 [ 471.115101][T17974] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 471.115147][T17974] __ip6_append_data+0x3aad/0x4190 [ 471.115198][T17974] ? __pfx_raw6_getfrag+0x10/0x10 [ 471.115258][T17974] ? __pfx___ip6_append_data+0x10/0x10 [ 471.115290][T17974] ? ip6_setup_cork+0xaaf/0x11c0 [ 471.115320][T17974] ? lockdep_hardirqs_on+0x99/0x150 [ 471.115352][T17974] ip6_append_data+0x25f/0x380 [ 471.115387][T17974] ? __pfx_raw6_getfrag+0x10/0x10 [ 471.115424][T17974] rawv6_sendmsg+0x191a/0x24c0 [ 471.115479][T17974] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 471.115550][T17974] ? sock_rps_record_flow+0x1a/0x400 [ 471.115580][T17974] ? inet_sendmsg+0x330/0x390 [ 471.115609][T17974] __sock_sendmsg+0x1a6/0x270 [ 471.115644][T17974] ____sys_sendmsg+0x53a/0x860 [ 471.115680][T17974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.115704][T17974] ? __fget_files+0x2a/0x410 [ 471.115740][T17974] ? __fget_files+0x2a/0x410 [ 471.115781][T17974] __sys_sendmsg+0x269/0x350 [ 471.115813][T17974] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.115853][T17974] ? do_sys_openat2+0x17a/0x1d0 [ 471.115916][T17974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.115951][T17974] ? do_syscall_64+0x100/0x230 [ 471.115984][T17974] ? do_syscall_64+0xb6/0x230 [ 471.116014][T17974] do_syscall_64+0xf3/0x230 [ 471.116049][T17974] ? clear_bhb_loop+0x35/0x90 [ 471.116083][T17974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.116112][T17974] RIP: 0033:0x7f2845f8d169 [ 471.116132][T17974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.116150][T17974] RSP: 002b:00007f2846d55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.116174][T17974] RAX: ffffffffffffffda RBX: 00007f28461a5fa0 RCX: 00007f2845f8d169 [ 471.116190][T17974] RDX: 0000000000000004 RSI: 00004000000000c0 RDI: 0000000000000003 [ 471.116203][T17974] RBP: 00007f2846d55090 R08: 0000000000000000 R09: 0000000000000000 [ 471.116217][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.116230][T17974] R13: 0000000000000000 R14: 00007f28461a5fa0 R15: 00007ffdb0fbe338 [ 471.116262][T17974] [ 471.993918][T18002] __nla_validate_parse: 2 callbacks suppressed [ 471.993941][T18002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 472.893470][T18037] FAULT_INJECTION: forcing a failure. [ 472.893470][T18037] name failslab, interval 1, probability 0, space 0, times 0 [ 472.906242][T18037] CPU: 0 UID: 0 PID: 18037 Comm: syz.3.4174 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 472.906272][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.906287][T18037] Call Trace: [ 472.906295][T18037] [ 472.906305][T18037] dump_stack_lvl+0x241/0x360 [ 472.906341][T18037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.906366][T18037] ? __pfx__printk+0x10/0x10 [ 472.906390][T18037] ? __lock_acquire+0x1397/0x2100 [ 472.906434][T18037] should_fail_ex+0x40a/0x550 [ 472.906473][T18037] should_failslab+0xac/0x100 [ 472.906507][T18037] kmem_cache_alloc_node_noprof+0x77/0x380 [ 472.906539][T18037] ? __alloc_skb+0x1c3/0x440 [ 472.906578][T18037] __alloc_skb+0x1c3/0x440 [ 472.906609][T18037] ? __pfx___alloc_skb+0x10/0x10 [ 472.906644][T18037] arp_create+0x1cc/0xa60 [ 472.906667][T18037] ? __pfx_lock_acquire+0x10/0x10 [ 472.906705][T18037] ? __pfx_arp_create+0x10/0x10 [ 472.906738][T18037] arp_send_dst+0xa9/0x2e0 [ 472.906770][T18037] arp_solicit+0xd3c/0xf80 [ 472.906797][T18037] ? arp_solicit+0x13a/0xf80 [ 472.906828][T18037] ? __pfx_arp_solicit+0x10/0x10 [ 472.906854][T18037] ? __pfx_lock_release+0x10/0x10 [ 472.906888][T18037] ? __skb_clone+0x454/0x6c0 [ 472.906925][T18037] ? __pfx_arp_solicit+0x10/0x10 [ 472.906952][T18037] __neigh_event_send+0xef5/0x15d0 [ 472.906999][T18037] neigh_resolve_output+0x1b5/0x740 [ 472.907034][T18037] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 472.907072][T18037] ip_finish_output2+0xdeb/0x12e0 [ 472.907100][T18037] ? ip_finish_output2+0x43e/0x12e0 [ 472.907134][T18037] ? __pfx_ip_finish_output2+0x10/0x10 [ 472.907161][T18037] ? ip_skb_dst_mtu+0x8b5/0xbc0 [ 472.907182][T18037] ? ip_skb_dst_mtu+0x147/0xbc0 [ 472.907208][T18037] ? __ip_finish_output+0x349/0x400 [ 472.907238][T18037] NF_HOOK+0x9e/0x430 [ 472.907262][T18037] ? NF_HOOK+0xfa/0x430 [ 472.907283][T18037] ? __pfx_NF_HOOK+0x10/0x10 [ 472.907308][T18037] ? __pfx_dst_output+0x10/0x10 [ 472.907328][T18037] ? __virt_addr_valid+0x183/0x530 [ 472.907347][T18037] ? __virt_addr_valid+0x45f/0x530 [ 472.907369][T18037] ? __phys_addr_symbol+0x2f/0x70 [ 472.907389][T18037] ? __check_object_size+0x47a/0x730 [ 472.907418][T18037] ? ip_fast_csum+0x1f4/0x2b0 [ 472.907448][T18037] raw_send_hdrinc+0xcbb/0x1680 [ 472.907488][T18037] ? __pfx_raw_send_hdrinc+0x10/0x10 [ 472.907523][T18037] raw_sendmsg+0x1986/0x2500 [ 472.907581][T18037] ? __pfx_raw_sendmsg+0x10/0x10 [ 472.907622][T18037] ? aa_sk_perm+0x96d/0xab0 [ 472.907662][T18037] ? __pfx_aa_sk_perm+0x10/0x10 [ 472.907699][T18037] ? inet_sendmsg+0x330/0x390 [ 472.907730][T18037] __sock_sendmsg+0x1a6/0x270 [ 472.907765][T18037] ____sys_sendmsg+0x53a/0x860 [ 472.907801][T18037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.907825][T18037] ? __fget_files+0x2a/0x410 [ 472.907861][T18037] ? __fget_files+0x2a/0x410 [ 472.907903][T18037] __sys_sendmmsg+0x36a/0x720 [ 472.907943][T18037] ? __pfx___sys_sendmmsg+0x10/0x10 [ 472.907983][T18037] ? __pfx_lock_release+0x10/0x10 [ 472.908013][T18037] ? kstrtouint_from_user+0x128/0x190 [ 472.908065][T18037] ? ksys_write+0x22a/0x2b0 [ 472.908089][T18037] ? __pfx_lock_release+0x10/0x10 [ 472.908128][T18037] ? sb_end_write+0xe9/0x1c0 [ 472.908161][T18037] ? vfs_write+0x7fa/0xd10 [ 472.908188][T18037] ? __mutex_unlock_slowpath+0x227/0x800 [ 472.908249][T18037] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.908285][T18037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.908321][T18037] ? do_syscall_64+0x100/0x230 [ 472.908354][T18037] __x64_sys_sendmmsg+0xa0/0xb0 [ 472.908383][T18037] do_syscall_64+0xf3/0x230 [ 472.908411][T18037] ? clear_bhb_loop+0x35/0x90 [ 472.908445][T18037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.908474][T18037] RIP: 0033:0x7f2845f8d169 [ 472.908492][T18037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.908509][T18037] RSP: 002b:00007f2846d55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 472.908532][T18037] RAX: ffffffffffffffda RBX: 00007f28461a5fa0 RCX: 00007f2845f8d169 [ 472.908548][T18037] RDX: 0000000000000002 RSI: 0000400000002fc0 RDI: 0000000000000003 [ 472.908561][T18037] RBP: 00007f2846d55090 R08: 0000000000000000 R09: 0000000000000000 [ 472.908600][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.908613][T18037] R13: 0000000000000000 R14: 00007f28461a5fa0 R15: 00007ffdb0fbe338 [ 472.908646][T18037] [ 473.749980][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'. [ 473.794928][T18051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4178'. [ 473.912092][T18059] x_tables: duplicate underflow at hook 2 [ 473.959059][T18056] wireguard0: entered promiscuous mode [ 473.973859][T18056] wireguard0: entered allmulticast mode [ 474.006748][T18059] syzkaller0: entered promiscuous mode [ 474.012308][T18059] syzkaller0: entered allmulticast mode [ 474.067580][T18068] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4185'. [ 474.079176][T18059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4181'. [ 474.882336][T18091] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 475.069880][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4194'. [ 475.105977][T18095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4194'. [ 475.381091][T18103] unsupported nla_type 52263 [ 475.402295][T18105] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4198'. [ 475.959465][T18117] netlink: 'syz.0.4200': attribute type 30 has an invalid length. [ 476.077693][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4200'. [ 476.101880][T18118] vlan3: entered allmulticast mode [ 476.107480][T18118] batadv0: entered allmulticast mode [ 476.119186][T18120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4202'. [ 476.556730][T18126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.565935][T18126] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.595467][T18126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.707700][T18129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.737613][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.767156][T18129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 477.007915][T18146] __nla_validate_parse: 3 callbacks suppressed [ 477.007938][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4210'. [ 477.814027][T18167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4217'. [ 478.385174][T18177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4219'. [ 478.558800][T18183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4220'. [ 478.588788][T18183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4220'. [ 478.621686][T18182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.651589][T18182] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.669584][T18182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.798965][T18185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4221'. [ 479.345383][T18194] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4224'. [ 479.354399][T18194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4224'. [ 479.434336][T18197] batadv_slave_1: entered promiscuous mode [ 479.543902][T18193] batadv_slave_1: left promiscuous mode [ 479.871190][T18204] wireguard1: entered promiscuous mode [ 479.879757][T18204] wireguard1: entered allmulticast mode [ 480.176521][T18214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4229'. [ 480.844398][T18223] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4232'. [ 481.282629][T18223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.331691][T18223] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.452508][T18223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.072263][T18260] __nla_validate_parse: 2 callbacks suppressed [ 482.072285][T18260] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4244'. [ 482.235108][T18265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4246'. [ 482.257583][T18267] FAULT_INJECTION: forcing a failure. [ 482.257583][T18267] name failslab, interval 1, probability 0, space 0, times 0 [ 482.270838][T18267] CPU: 1 UID: 0 PID: 18267 Comm: syz.1.4247 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 482.270867][T18267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 482.270881][T18267] Call Trace: [ 482.270889][T18267] [ 482.270900][T18267] dump_stack_lvl+0x241/0x360 [ 482.270933][T18267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.270958][T18267] ? __pfx__printk+0x10/0x10 [ 482.271003][T18267] should_fail_ex+0x40a/0x550 [ 482.271043][T18267] should_failslab+0xac/0x100 [ 482.271075][T18267] ? skb_clone+0x20c/0x390 [ 482.271100][T18267] kmem_cache_alloc_noprof+0x70/0x380 [ 482.271138][T18267] skb_clone+0x20c/0x390 [ 482.271163][T18267] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 482.271189][T18267] dev_queue_xmit_nit+0x249/0xca0 [ 482.271215][T18267] ? dev_queue_xmit_nit+0x2b/0xca0 [ 482.271239][T18267] ? validate_xmit_skb+0x9f9/0x1040 [ 482.271272][T18267] dev_hard_start_xmit+0x15f/0x7d0 [ 482.271300][T18267] ? __pfx_validate_xmit_skb+0x10/0x10 [ 482.271340][T18267] __dev_queue_xmit+0x1b73/0x3f40 [ 482.271367][T18267] ? kasan_save_track+0x51/0x80 [ 482.271398][T18267] ? ____sys_sendmsg+0x53a/0x860 [ 482.271430][T18267] ? __dev_queue_xmit+0x2f4/0x3f40 [ 482.271463][T18267] ? __pfx___dev_queue_xmit+0x10/0x10 [ 482.271509][T18267] ? __copy_skb_header+0xa7/0x5a0 [ 482.271536][T18267] ? __asan_memcpy+0x40/0x70 [ 482.271558][T18267] ? __skb_clone+0x5c/0x6c0 [ 482.271590][T18267] ? __skb_clone+0x454/0x6c0 [ 482.271625][T18267] ? skb_clone+0x240/0x390 [ 482.271656][T18267] __netlink_deliver_tap+0x561/0x7f0 [ 482.271703][T18267] ? netlink_deliver_tap+0x2e/0x1b0 [ 482.271734][T18267] netlink_deliver_tap+0x19d/0x1b0 [ 482.271768][T18267] netlink_unicast+0x7c4/0x990 [ 482.271808][T18267] ? __pfx_netlink_unicast+0x10/0x10 [ 482.271834][T18267] ? __virt_addr_valid+0x45f/0x530 [ 482.271857][T18267] ? __phys_addr_symbol+0x2f/0x70 [ 482.271877][T18267] ? __check_object_size+0x47a/0x730 [ 482.271913][T18267] netlink_sendmsg+0x8de/0xcb0 [ 482.271960][T18267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.272005][T18267] ? aa_sock_msg_perm+0x91/0x160 [ 482.272045][T18267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.272076][T18267] __sock_sendmsg+0x221/0x270 [ 482.272109][T18267] ____sys_sendmsg+0x53a/0x860 [ 482.272137][T18267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.272156][T18267] ? __fget_files+0x2a/0x410 [ 482.272184][T18267] ? __fget_files+0x2a/0x410 [ 482.272218][T18267] __sys_sendmsg+0x269/0x350 [ 482.272243][T18267] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.272275][T18267] ? do_sys_openat2+0x17a/0x1d0 [ 482.272323][T18267] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.272351][T18267] ? do_syscall_64+0x100/0x230 [ 482.272376][T18267] ? do_syscall_64+0xb6/0x230 [ 482.272401][T18267] do_syscall_64+0xf3/0x230 [ 482.272423][T18267] ? clear_bhb_loop+0x35/0x90 [ 482.272450][T18267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.272473][T18267] RIP: 0033:0x7f907ad8d169 [ 482.272489][T18267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.272504][T18267] RSP: 002b:00007f907bbfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.272524][T18267] RAX: ffffffffffffffda RBX: 00007f907afa5fa0 RCX: 00007f907ad8d169 [ 482.272537][T18267] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 482.272548][T18267] RBP: 00007f907bbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 482.272559][T18267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.272570][T18267] R13: 0000000000000000 R14: 00007f907afa5fa0 R15: 00007ffede05b048 [ 482.272596][T18267] [ 482.958138][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 483.207408][T18283] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.4251'. [ 483.283885][T18277] bond0: (slave bond_slave_0): Releasing backup interface [ 483.333853][T18282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.347434][T18282] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.361982][T18282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.850239][T18293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4256'. [ 484.170393][T18304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.785646][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'. [ 486.152148][T18347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4274'. [ 486.236179][T18350] RDS: rds_bind could not find a transport for ::4000:0:40:0, load rds_tcp or rds_rdma? [ 487.219461][T18372] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 487.234606][T18372] team0: Port device macvlan0 added [ 487.383683][T18374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4281'. [ 487.424140][T18374] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 487.859364][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4288'. [ 487.998007][T18394] wireguard0: entered promiscuous mode [ 488.017118][T18394] wireguard0: entered allmulticast mode [ 489.309752][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 490.106926][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4303'. [ 490.116990][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4303'. [ 490.998389][T18463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4308'. [ 491.135424][T18467] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 492.526789][T18491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.552316][T18491] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.579151][T18491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.601733][T18502] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 492.613859][T18505] netlink: 'syz.4.4319': attribute type 1 has an invalid length. [ 492.613927][T18505] netlink: 'syz.4.4319': attribute type 1 has an invalid length. [ 492.649947][T18500] netlink: 'syz.1.4318': attribute type 72 has an invalid length. [ 493.085067][ T5149] Bluetooth: hci2: command 0x0405 tx timeout [ 493.339612][T18525] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4328'. [ 493.639653][T18535] x_tables: ip_tables: udp match: only valid for protocol 17 [ 493.682264][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4329'. [ 494.843146][T18571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4341'. [ 495.480715][T18590] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.4345'. [ 495.700076][T18596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.709338][T18596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.794040][T18597] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 496.001798][T18607] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4350'. [ 496.263623][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4353'. [ 496.274700][T18611] batadv0: left allmulticast mode [ 496.294088][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4353'. [ 496.481501][T18618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.501301][T18618] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.526446][T18618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.955380][T18626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4354'. [ 497.307558][T18630] FAULT_INJECTION: forcing a failure. [ 497.307558][T18630] name failslab, interval 1, probability 0, space 0, times 0 [ 497.337413][T18630] CPU: 1 UID: 0 PID: 18630 Comm: syz.0.4357 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 497.337447][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.337461][T18630] Call Trace: [ 497.337469][T18630] [ 497.337479][T18630] dump_stack_lvl+0x241/0x360 [ 497.337514][T18630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.337539][T18630] ? __pfx__printk+0x10/0x10 [ 497.337564][T18630] ? fs_reclaim_acquire+0x93/0x130 [ 497.337588][T18630] ? __pfx___might_resched+0x10/0x10 [ 497.337622][T18630] should_fail_ex+0x40a/0x550 [ 497.337660][T18630] should_failslab+0xac/0x100 [ 497.337691][T18630] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 497.337723][T18630] ? ima_collect_measurement+0x5cd/0xb20 [ 497.337750][T18630] ? ima_collect_measurement+0x5cd/0xb20 [ 497.337775][T18630] krealloc_noprof+0x10f/0x300 [ 497.337811][T18630] ima_collect_measurement+0x5cd/0xb20 [ 497.337849][T18630] ? __pfx_ima_collect_measurement+0x10/0x10 [ 497.337883][T18630] ? rcu_is_watching+0x15/0xb0 [ 497.337909][T18630] ? trace_contention_end+0x3c/0x120 [ 497.337942][T18630] ? __asan_memset+0x23/0x50 [ 497.337982][T18630] ? ima_get_hash_algo+0x156/0x4d0 [ 497.338012][T18630] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 497.338055][T18630] process_measurement+0x1351/0x1fb0 [ 497.338099][T18630] ? __pfx_process_measurement+0x10/0x10 [ 497.338122][T18630] ? __pfx_lock_acquire+0x10/0x10 [ 497.338154][T18630] ? aa_file_perm+0x137/0xf50 [ 497.338174][T18630] ? do_syscall_64+0xf3/0x230 [ 497.338242][T18630] ? lockdep_init_map_type+0xa1/0x910 [ 497.338283][T18630] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 497.338321][T18630] ima_file_mmap+0x1cd/0x220 [ 497.338341][T18630] ? __raw_spin_lock_init+0x45/0x100 [ 497.338381][T18630] ? __pfx_ima_file_mmap+0x10/0x10 [ 497.338401][T18630] ? file_init_path+0x3b/0x570 [ 497.338433][T18630] ? end_current_label_crit_section+0x151/0x180 [ 497.338473][T18630] ? common_file_perm+0x1a6/0x210 [ 497.338512][T18630] security_mmap_file+0x7aa/0xa40 [ 497.338545][T18630] vm_mmap_pgoff+0x141/0x430 [ 497.338578][T18630] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 497.338609][T18630] ? hugetlb_file_setup+0x3dc/0x5c0 [ 497.338644][T18630] ksys_mmap_pgoff+0x53e/0x720 [ 497.338686][T18630] do_syscall_64+0xf3/0x230 [ 497.338714][T18630] ? clear_bhb_loop+0x35/0x90 [ 497.338749][T18630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.338778][T18630] RIP: 0033:0x7ffad418d169 [ 497.338797][T18630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.338814][T18630] RSP: 002b:00007ffad4f3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 497.338838][T18630] RAX: ffffffffffffffda RBX: 00007ffad43a5fa0 RCX: 00007ffad418d169 [ 497.338854][T18630] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000400000000000 [ 497.338868][T18630] RBP: 00007ffad4f3a090 R08: ffffffffffffffff R09: 0000000000000000 [ 497.338882][T18630] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002 [ 497.338896][T18630] R13: 0000000000000000 R14: 00007ffad43a5fa0 R15: 00007fff5aca1278 [ 497.338929][T18630] [ 497.339477][ T30] audit: type=1800 audit(1742228479.755:4): pid=18630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4357" name="anon_hugepage" dev="hugetlbfs" ino=70989 res=0 errno=0 [ 497.813430][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4365'. [ 497.822698][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4365'. [ 498.290071][T18665] netlink: 'syz.3.4372': attribute type 3 has an invalid length. [ 498.660880][T18677] __nla_validate_parse: 4 callbacks suppressed [ 498.660904][T18677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4376'. [ 498.715207][T18660] tipc: Started in network mode [ 498.720158][T18660] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 498.732352][T18660] tipc: Enabled bearer , priority 10 [ 498.770153][T18677] netlink: 'syz.0.4376': attribute type 29 has an invalid length. [ 498.941039][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4378'. [ 498.966681][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4378'. [ 499.006291][T18685] netlink: 'syz.1.4379': attribute type 72 has an invalid length. [ 499.080118][T18690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4381'. [ 499.252813][T18696] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4384'. [ 499.417319][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4387'. [ 499.454411][T18704] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4388'. [ 499.468719][T18706] netlink: 'syz.2.4389': attribute type 8 has an invalid length. [ 499.680415][T18714] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.4391'. [ 499.780743][T18718] netlink: 'syz.0.4392': attribute type 72 has an invalid length. [ 499.797354][T18711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.827097][T18711] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.845176][ T9] tipc: Node number set to 10136234 [ 499.853796][T18711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.915594][T18720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4393'. [ 499.930340][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4393'. [ 500.601443][T18747] netlink: 'syz.4.4403': attribute type 72 has an invalid length. [ 500.714375][T18750] netlink: 'syz.0.4404': attribute type 39 has an invalid length. [ 501.306384][T18776] gtp0: entered promiscuous mode [ 501.311548][T18776] gtp0: entered allmulticast mode [ 501.870289][T18785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.880704][T18785] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.893633][T18785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.968143][ T64] bridge_slave_1: left allmulticast mode [ 501.974404][ T64] bridge_slave_1: left promiscuous mode [ 501.983260][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.052185][ T64] bridge_slave_0: left allmulticast mode [ 502.065410][ T64] bridge_slave_0: left promiscuous mode [ 502.071417][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.709817][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.741299][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.761441][ T64] bond0 (unregistering): (slave team0): Releasing backup interface [ 502.778595][ T64] bond0 (unregistering): Released all slaves [ 502.960797][ T64] bond1 (unregistering): Released all slaves [ 503.135126][ T64] tipc: Left network mode [ 503.808522][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 503.823221][T18842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.868114][T18842] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.916906][T18842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.077849][ T64] hsr_slave_0: left promiscuous mode [ 504.097048][ T64] hsr_slave_1: left promiscuous mode [ 504.179866][ T64] veth1_macvtap: left promiscuous mode [ 504.187884][ T64] veth0_macvtap: left promiscuous mode [ 504.214490][ T64] veth1_vlan: left promiscuous mode [ 504.232562][ T64] veth0_vlan: left promiscuous mode [ 504.867464][ T64] team0 (unregistering): Port device team_slave_1 removed [ 504.922963][ T64] team0 (unregistering): Port device team_slave_0 removed [ 505.677131][T18867] FAULT_INJECTION: forcing a failure. [ 505.677131][T18867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.802448][T18871] __nla_validate_parse: 11 callbacks suppressed [ 505.802471][T18871] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4443'. [ 505.845383][T18867] CPU: 0 UID: 0 PID: 18867 Comm: syz.4.4440 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 505.845415][T18867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.845429][T18867] Call Trace: [ 505.845437][T18867] [ 505.845446][T18867] dump_stack_lvl+0x241/0x360 [ 505.845480][T18867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.845504][T18867] ? __pfx__printk+0x10/0x10 [ 505.845533][T18867] ? snprintf+0xda/0x120 [ 505.845558][T18867] should_fail_ex+0x40a/0x550 [ 505.845598][T18867] _copy_to_user+0x31/0xb0 [ 505.845630][T18867] simple_read_from_buffer+0xca/0x150 [ 505.845664][T18867] proc_fail_nth_read+0x1e9/0x250 [ 505.845699][T18867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.845735][T18867] ? rw_verify_area+0x243/0x630 [ 505.845758][T18867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 505.845792][T18867] vfs_read+0x1f8/0xb40 [ 505.845825][T18867] ? fdget_pos+0x254/0x320 [ 505.845859][T18867] ? __pfx___mutex_lock+0x10/0x10 [ 505.845889][T18867] ? __pfx_vfs_read+0x10/0x10 [ 505.845916][T18867] ? __fget_files+0x2a/0x410 [ 505.845949][T18867] ? __fget_files+0x395/0x410 [ 505.845979][T18867] ? __fget_files+0x2a/0x410 [ 505.846021][T18867] ksys_read+0x18f/0x2b0 [ 505.846047][T18867] ? __pfx_ksys_read+0x10/0x10 [ 505.846072][T18867] ? do_syscall_64+0x100/0x230 [ 505.846104][T18867] ? do_syscall_64+0xb6/0x230 [ 505.846135][T18867] do_syscall_64+0xf3/0x230 [ 505.846164][T18867] ? clear_bhb_loop+0x35/0x90 [ 505.846198][T18867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.846227][T18867] RIP: 0033:0x7fd46838bb7c [ 505.846247][T18867] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 505.846266][T18867] RSP: 002b:00007fd469274030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 505.846288][T18867] RAX: ffffffffffffffda RBX: 00007fd4685a5fa0 RCX: 00007fd46838bb7c [ 505.846305][T18867] RDX: 000000000000000f RSI: 00007fd4692740a0 RDI: 0000000000000005 [ 505.846319][T18867] RBP: 00007fd469274090 R08: 0000000000000000 R09: 0000000000000000 [ 505.846332][T18867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.846345][T18867] R13: 0000000000000000 R14: 00007fd4685a5fa0 R15: 00007ffda4ee7218 [ 505.846379][T18867] [ 508.121599][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4457'. [ 509.176575][T18944] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4463'. [ 509.690974][T18958] xt_bpf: check failed: parse error [ 510.598074][T18978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4473'. [ 510.688879][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4476'. [ 510.801892][T18978] bond0: (slave bond_slave_0): Releasing backup interface [ 510.913131][ C0] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(182840612452751) <= P.seqno(182840612452750) <= S.SWH(182840612452825)) and (P.ackno exists or LAWL(150539711020476) <= P.ackno(150539711020476) <= S.AWH(150539711020476), sending SYNC... [ 512.503165][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4487'. [ 512.542824][T19024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4487'. [ 512.700349][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4488'. [ 512.808539][T19033] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4491'. [ 512.921658][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4493'. [ 513.261690][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4500'. [ 513.892092][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4503'. [ 514.122969][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4506'. [ 514.510364][T19085] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4511'. [ 514.991381][T19098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.031053][T19098] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.092212][T19098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.186582][T19112] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 515.437332][T19117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4518'. [ 515.565903][T19124] FAULT_INJECTION: forcing a failure. [ 515.565903][T19124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.600052][T19124] CPU: 1 UID: 0 PID: 19124 Comm: syz.4.4521 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 515.600085][T19124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 515.600100][T19124] Call Trace: [ 515.600108][T19124] [ 515.600118][T19124] dump_stack_lvl+0x241/0x360 [ 515.600152][T19124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.600176][T19124] ? __pfx__printk+0x10/0x10 [ 515.600204][T19124] ? snprintf+0xda/0x120 [ 515.600229][T19124] should_fail_ex+0x40a/0x550 [ 515.600267][T19124] _copy_to_user+0x31/0xb0 [ 515.600298][T19124] simple_read_from_buffer+0xca/0x150 [ 515.600343][T19124] proc_fail_nth_read+0x1e9/0x250 [ 515.600387][T19124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.600421][T19124] ? rw_verify_area+0x243/0x630 [ 515.600444][T19124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.600477][T19124] vfs_read+0x1f8/0xb40 [ 515.600501][T19124] ? fdget_pos+0x254/0x320 [ 515.600535][T19124] ? __pfx___mutex_lock+0x10/0x10 [ 515.600564][T19124] ? __pfx_vfs_read+0x10/0x10 [ 515.600583][T19124] ? do_sys_openat2+0x17a/0x1d0 [ 515.600616][T19124] ? __fget_files+0x2a/0x410 [ 515.600655][T19124] ? __fget_files+0x395/0x410 [ 515.600684][T19124] ? __fget_files+0x2a/0x410 [ 515.600723][T19124] ksys_read+0x18f/0x2b0 [ 515.600749][T19124] ? __pfx_ksys_read+0x10/0x10 [ 515.600774][T19124] ? do_syscall_64+0x100/0x230 [ 515.600806][T19124] ? do_syscall_64+0xb6/0x230 [ 515.600837][T19124] do_syscall_64+0xf3/0x230 [ 515.600863][T19124] ? clear_bhb_loop+0x35/0x90 [ 515.600897][T19124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.600933][T19124] RIP: 0033:0x7fd46838bb7c [ 515.600953][T19124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 515.600970][T19124] RSP: 002b:00007fd469274030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.600993][T19124] RAX: ffffffffffffffda RBX: 00007fd4685a5fa0 RCX: 00007fd46838bb7c [ 515.601008][T19124] RDX: 000000000000000f RSI: 00007fd4692740a0 RDI: 0000000000000008 [ 515.601022][T19124] RBP: 00007fd469274090 R08: 0000000000000000 R09: 0000000000000000 [ 515.601035][T19124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.601048][T19124] R13: 0000000000000000 R14: 00007fd4685a5fa0 R15: 00007ffda4ee7218 [ 515.601077][T19124] [ 516.082598][T19126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.092587][T19126] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.107866][T19126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.299189][T19146] netlink: 'syz.1.4526': attribute type 20 has an invalid length. [ 516.350067][T19147] openvswitch: netlink: IPv4 tun info is not correct [ 516.490509][T19149] FAULT_INJECTION: forcing a failure. [ 516.490509][T19149] name failslab, interval 1, probability 0, space 0, times 0 [ 516.535653][T19149] CPU: 1 UID: 0 PID: 19149 Comm: syz.1.4527 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 516.535687][T19149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 516.535701][T19149] Call Trace: [ 516.535709][T19149] [ 516.535719][T19149] dump_stack_lvl+0x241/0x360 [ 516.535753][T19149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.535778][T19149] ? __pfx__printk+0x10/0x10 [ 516.535804][T19149] ? __kmalloc_noprof+0xb5/0x4c0 [ 516.535844][T19149] ? __pfx___might_resched+0x10/0x10 [ 516.535873][T19149] ? genl_get_cmd+0x19e/0xce0 [ 516.535900][T19149] should_fail_ex+0x40a/0x550 [ 516.535938][T19149] should_failslab+0xac/0x100 [ 516.535968][T19149] __kmalloc_noprof+0xdd/0x4c0 [ 516.535997][T19149] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 516.536066][T19149] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 516.536102][T19149] genl_rcv_msg+0x80b/0xec0 [ 516.536145][T19149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.536203][T19149] ? __pfx_lock_acquire+0x10/0x10 [ 516.536235][T19149] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 516.536265][T19149] ? __pfx___might_resched+0x10/0x10 [ 516.536307][T19149] netlink_rcv_skb+0x206/0x480 [ 516.536341][T19149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.536368][T19149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.536412][T19149] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 516.536460][T19149] genl_rcv+0x28/0x40 [ 516.536482][T19149] netlink_unicast+0x7f6/0x990 [ 516.536521][T19149] ? __pfx_netlink_unicast+0x10/0x10 [ 516.536546][T19149] ? __virt_addr_valid+0x45f/0x530 [ 516.536569][T19149] ? __phys_addr_symbol+0x2f/0x70 [ 516.536588][T19149] ? __check_object_size+0x47a/0x730 [ 516.536621][T19149] netlink_sendmsg+0x8de/0xcb0 [ 516.536665][T19149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.536703][T19149] ? aa_sock_msg_perm+0x91/0x160 [ 516.536743][T19149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.536774][T19149] __sock_sendmsg+0x221/0x270 [ 516.536808][T19149] ____sys_sendmsg+0x53a/0x860 [ 516.536850][T19149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.536873][T19149] ? __fget_files+0x2a/0x410 [ 516.536910][T19149] ? __fget_files+0x2a/0x410 [ 516.536953][T19149] __sys_sendmsg+0x269/0x350 [ 516.536985][T19149] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.537026][T19149] ? do_sys_openat2+0x17a/0x1d0 [ 516.537089][T19149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 516.537126][T19149] ? do_syscall_64+0x100/0x230 [ 516.537160][T19149] ? do_syscall_64+0xb6/0x230 [ 516.537191][T19149] do_syscall_64+0xf3/0x230 [ 516.537220][T19149] ? clear_bhb_loop+0x35/0x90 [ 516.537254][T19149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.537283][T19149] RIP: 0033:0x7f907ad8d169 [ 516.537303][T19149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.537322][T19149] RSP: 002b:00007f907bbfb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.537345][T19149] RAX: ffffffffffffffda RBX: 00007f907afa5fa0 RCX: 00007f907ad8d169 [ 516.537362][T19149] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000005 [ 516.537376][T19149] RBP: 00007f907bbfb090 R08: 0000000000000000 R09: 0000000000000000 [ 516.537389][T19149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.537402][T19149] R13: 0000000000000000 R14: 00007f907afa5fa0 R15: 00007ffede05b048 [ 516.537436][T19149] [ 517.680906][T19175] __nla_validate_parse: 1 callbacks suppressed [ 517.680930][T19175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4537'. [ 517.865101][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4538'. [ 518.532310][T19192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.589660][T19192] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.609557][T19192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.657973][T19202] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 518.891284][T19208] FAULT_INJECTION: forcing a failure. [ 518.891284][T19208] name failslab, interval 1, probability 0, space 0, times 0 [ 518.905341][T19208] CPU: 1 UID: 0 PID: 19208 Comm: syz.4.4546 Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 518.905366][T19208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 518.905377][T19208] Call Trace: [ 518.905384][T19208] [ 518.905392][T19208] dump_stack_lvl+0x241/0x360 [ 518.905420][T19208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.905441][T19208] ? __pfx__printk+0x10/0x10 [ 518.905456][T19208] ? __asan_memset+0x23/0x50 [ 518.905475][T19208] ? lockdep_init_map_type+0xa1/0x910 [ 518.905505][T19208] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 518.905537][T19208] should_fail_ex+0x40a/0x550 [ 518.905570][T19208] should_failslab+0xac/0x100 [ 518.905607][T19208] __kmalloc_cache_noprof+0x70/0x390 [ 518.905631][T19208] ? l2cap_chan_create+0x50/0x760 [ 518.905658][T19208] l2cap_chan_create+0x50/0x760 [ 518.905683][T19208] l2cap_sock_create+0x1dc/0x300 [ 518.905710][T19208] bt_sock_create+0x161/0x230 [ 518.905732][T19208] __sock_create+0x4c0/0xa30 [ 518.905765][T19208] rfcomm_dlc_open+0x2de/0x10d0 [ 518.905794][T19208] ? __local_bh_enable_ip+0x168/0x200 [ 518.905815][T19208] ? lockdep_hardirqs_on+0x99/0x150 [ 518.905837][T19208] ? __local_bh_enable_ip+0x168/0x200 [ 518.905857][T19208] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 518.905882][T19208] ? rfcomm_sock_connect+0x2d7/0x610 [ 518.905901][T19208] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 518.905921][T19208] ? do_raw_spin_unlock+0x13c/0x8b0 [ 518.905952][T19208] rfcomm_sock_connect+0x305/0x610 [ 518.905978][T19208] __sys_connect+0x288/0x2d0 [ 518.905995][T19208] ? __fget_files+0x2a/0x410 [ 518.906021][T19208] ? __pfx___sys_connect+0x10/0x10 [ 518.906052][T19208] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 518.906082][T19208] ? do_syscall_64+0x100/0x230 [ 518.906112][T19208] __x64_sys_connect+0x7a/0x90 [ 518.906132][T19208] do_syscall_64+0xf3/0x230 [ 518.906156][T19208] ? clear_bhb_loop+0x35/0x90 [ 518.906184][T19208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.906209][T19208] RIP: 0033:0x7fd46838d169 [ 518.906228][T19208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.906242][T19208] RSP: 002b:00007fd469274038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 518.906260][T19208] RAX: ffffffffffffffda RBX: 00007fd4685a5fa0 RCX: 00007fd46838d169 [ 518.906272][T19208] RDX: 000000000000000a RSI: 0000400000005dc0 RDI: 0000000000000008 [ 518.906283][T19208] RBP: 00007fd469274090 R08: 0000000000000000 R09: 0000000000000000 [ 518.906294][T19208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.906304][T19208] R13: 0000000000000000 R14: 00007fd4685a5fa0 R15: 00007ffda4ee7218 [ 518.906331][T19208] [ 519.707382][T19232] netlink: 'syz.1.4553': attribute type 4 has an invalid length. [ 519.777106][T19232] netlink: 'syz.1.4553': attribute type 4 has an invalid length. [ 520.415145][T19249] netlink: 'syz.1.4559': attribute type 4 has an invalid length. [ 520.443859][T19249] netlink: 'syz.1.4559': attribute type 4 has an invalid length. [ 521.662727][T19286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4572'. [ 521.672989][T19288] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4573'. [ 522.316266][T19295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.324394][T19295] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.345599][T19295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.364025][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4579'. [ 522.768686][T19330] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4585'. [ 523.405514][ T5149] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 523.405768][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 523.569851][T19351] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4590'. [ 523.662070][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 524.453406][T19362] xt_bpf: check failed: parse error [ 524.584031][T19365] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4595'. [ 524.747408][T19366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.757886][T19366] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.767921][T19366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.154618][T19378] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 525.404663][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4603'. [ 525.648686][T19392] xt_bpf: check failed: parse error [ 526.139644][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'. [ 526.789550][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'. [ 526.813029][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 526.823535][T19439] netlink: 'syz.2.4619': attribute type 14 has an invalid length. [ 526.894786][T19442] xt_bpf: check failed: parse error [ 526.946715][T19445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4622'. [ 527.731578][T19470] Cannot find add_set index 3 as target [ 528.345255][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4633'. [ 528.354551][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4633'. [ 528.461984][T19483] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4631'. [ 528.472259][T19492] xt_bpf: check failed: parse error [ 528.772218][T19498] netlink: 'syz.3.4636': attribute type 1 has an invalid length. [ 529.153294][T19520] netlink: 'syz.1.4643': attribute type 1 has an invalid length. [ 529.177491][T19520] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 529.349190][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4646'. [ 529.372268][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4646'. [ 529.480616][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4647'. [ 529.611203][T19536] xt_bpf: check failed: parse error [ 530.752709][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 530.771527][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4659'. [ 531.032922][T19573] xt_bpf: check failed: parse error [ 531.854062][T19603] vlan2: entered promiscuous mode [ 531.859525][T19603] team0: entered promiscuous mode [ 531.865508][T19603] team_slave_0: entered promiscuous mode [ 531.871775][T19603] team_slave_1: entered promiscuous mode [ 531.880611][T19603] team0: Device vlan2 is already an upper device of the team interface [ 531.894233][T19603] team0: left promiscuous mode [ 531.899290][T19603] team_slave_0: left promiscuous mode [ 531.905410][T19603] team_slave_1: left promiscuous mode [ 532.083238][T19606] netlink: 'syz.1.4672': attribute type 34 has an invalid length. [ 532.241666][T19611] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4674'. [ 532.616594][T19624] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4679'. [ 534.015037][T19672] __nla_validate_parse: 1 callbacks suppressed [ 534.015057][T19672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4694'. [ 534.346074][T19685] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.375911][T19685] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4698'. [ 534.612452][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4701'. [ 534.836384][T19673] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4693'. [ 535.186480][T19714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4706'. [ 535.907649][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'. [ 535.995699][T19742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4718'. [ 536.339638][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 536.400352][T19745] xt_bpf: check failed: parse error [ 536.778558][T19763] lo speed is unknown, defaulting to 1000 [ 536.784520][T19763] lo speed is unknown, defaulting to 1000 [ 536.797308][T19763] lo speed is unknown, defaulting to 1000 [ 536.862362][T19763] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 536.908433][T19763] lo speed is unknown, defaulting to 1000 [ 536.920510][T19763] lo speed is unknown, defaulting to 1000 [ 536.936272][T19763] lo speed is unknown, defaulting to 1000 [ 536.950581][T19763] lo speed is unknown, defaulting to 1000 [ 536.987433][T19763] lo speed is unknown, defaulting to 1000 [ 537.010161][T19763] lo speed is unknown, defaulting to 1000 [ 537.377950][T19772] xt_bpf: check failed: parse error [ 537.400248][T19754] lo speed is unknown, defaulting to 1000 [ 537.404207][T19757] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4722'. [ 538.097239][T19791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4731'. [ 538.428485][T19798] lo speed is unknown, defaulting to 1000 [ 538.647594][T19809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.656941][T19809] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.671278][T19809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.157746][T19825] __nla_validate_parse: 2 callbacks suppressed [ 539.157770][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4743'. [ 539.341261][T19830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4744'. [ 539.373077][T19832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'. [ 539.390821][T19825] bond0: (slave bond_slave_0): Releasing backup interface [ 539.646479][T19841] xt_bpf: check failed: parse error [ 539.689007][T19844] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4749'. [ 540.050787][T19851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4750'. [ 540.057502][T19844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.070289][T19844] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.083534][T19844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.284188][T19852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.298118][T19852] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.312667][T19852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.701920][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 540.718940][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 540.735305][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 540.919752][T19877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4757'. [ 541.225239][T19890] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4762'. [ 541.417521][T19899] vlan2: entered promiscuous mode [ 541.422626][T19899] bond0: entered promiscuous mode [ 541.433542][T19899] bond_slave_1: entered promiscuous mode [ 541.622033][T19899] bond0: left promiscuous mode [ 541.629469][T19899] bond_slave_1: left promiscuous mode [ 541.938256][T19915] syzkaller0: left promiscuous mode [ 541.943769][T19915] syzkaller0: left allmulticast mode [ 542.418228][T19929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.451032][T19929] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.470771][T19929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 542.692631][T19945] netlink: 'syz.2.4782': attribute type 4 has an invalid length. [ 543.100033][T19961] xt_bpf: check failed: parse error [ 543.508055][T19969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.543134][T19969] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.572738][T19969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 543.604215][T19978] netem: change failed [ 544.333283][T19994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.357024][T19994] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.389341][T19994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.543765][T20010] netlink: 'syz.1.4805': attribute type 72 has an invalid length. [ 544.702762][T20016] __nla_validate_parse: 12 callbacks suppressed [ 544.702778][T20016] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4807'. [ 544.823472][T20018] lo speed is unknown, defaulting to 1000 [ 545.422761][T20018] lo speed is unknown, defaulting to 1000 [ 545.469304][T20019] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4808'. [ 545.608532][T20034] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4813'. [ 545.853242][T20045] netlink: 'syz.4.4816': attribute type 72 has an invalid length. [ 546.133645][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 546.217222][T20053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4819'. [ 546.373854][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4822'. [ 546.504464][T20057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.514664][T20057] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.527388][T20057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.761286][T20073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4826'. [ 547.519338][T20099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4834'. [ 550.574724][ C1] sched: DL replenish lagged too much [ 552.648433][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4836'. [ 628.380578][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 635.431231][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 637.019419][T20120] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 662.957086][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 663.019956][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 663.291147][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 663.409458][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 663.603579][ T5149] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 663.691403][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 666.038254][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.542276][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 666.987763][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.146152][ T5842] Bluetooth: hci1: command tx timeout [ 668.296977][T20133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 668.332308][T20133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 668.411356][T20133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 669.388427][ T5853] Bluetooth: hci1: command tx timeout [ 671.107601][T20133] Bluetooth: hci0: command tx timeout [ 671.531027][ T5853] Bluetooth: hci1: command tx timeout [ 673.420779][T20133] Bluetooth: hci0: command tx timeout [ 673.813971][T20133] Bluetooth: hci1: command tx timeout [ 675.506684][T20133] Bluetooth: hci0: command tx timeout [ 677.853412][T20133] Bluetooth: hci0: command tx timeout [ 728.702750][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.490262][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 730.002659][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.589100][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.612526][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 730.632473][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 740.790383][T20133] Bluetooth: hci2: command tx timeout [ 742.950175][T20133] Bluetooth: hci2: command tx timeout [ 745.241047][T20133] Bluetooth: hci2: command tx timeout [ 747.804965][T20133] Bluetooth: hci2: command tx timeout [ 760.552510][T20132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 760.581190][T20132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 760.733993][T20132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 760.787987][T20132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 760.840934][T20132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 760.871607][T20132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 760.911679][T20132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 760.962411][T20132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 760.991306][T20132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.032503][T20132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 761.611453][T20132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 761.653111][T20142] lo speed is unknown, defaulting to 1000 [ 761.693357][T20132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 763.601452][T20132] Bluetooth: hci0: command tx timeout [ 764.425098][T20132] Bluetooth: hci1: command tx timeout [ 765.682308][T20132] Bluetooth: hci0: command tx timeout [ 766.584029][T20132] Bluetooth: hci1: command tx timeout [ 767.882127][T20132] Bluetooth: hci0: command tx timeout [ 769.019995][T20132] Bluetooth: hci1: command tx timeout [ 769.988404][ T5853] Bluetooth: hci0: command tx timeout [ 771.106407][ T5853] Bluetooth: hci1: command tx timeout [ 789.657602][T20132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 790.226964][T20132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 790.672384][T20132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 790.702942][T20132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 790.730872][T20132] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 790.758761][T20132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.162024][T20132] Bluetooth: hci3: command tx timeout [ 795.456442][T20132] Bluetooth: hci3: command tx timeout [ 797.642252][T20132] Bluetooth: hci3: command tx timeout [ 799.810515][T20132] Bluetooth: hci3: command tx timeout [ 824.375345][T20132] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 827.001245][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 828.649311][T20132] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 828.700314][ T5842] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 828.719273][T20163] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 828.972276][T20132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 829.371148][T20132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 830.974319][T20165] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 831.386174][T20164] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 856.440381][T20133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 856.470452][T20133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 856.636899][T20133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 856.828866][T20133] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 856.972777][T20133] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 857.128362][T20133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 857.157409][T20133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 857.378239][T20133] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 857.669497][T20133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.699382][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 857.731348][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 857.759149][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 860.427176][ T5853] Bluetooth: hci1: command tx timeout [ 862.742852][ T5842] Bluetooth: hci1: command tx timeout [ 863.236865][ T5842] Bluetooth: hci0: command tx timeout [ 863.266168][T20133] Bluetooth: hci2: command 0x0406 tx timeout [ 864.883867][T20132] Bluetooth: hci1: command tx timeout [ 867.499644][T20132] Bluetooth: hci0: command tx timeout [ 867.517059][ T5842] Bluetooth: hci1: command tx timeout [ 869.625052][T20132] Bluetooth: hci0: command tx timeout [ 872.763831][ T5842] Bluetooth: hci0: command tx timeout [ 926.183925][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 926.419257][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 926.849961][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 927.310562][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 927.582288][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 927.617862][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 930.387865][T20132] Bluetooth: hci1: command tx timeout [ 933.380848][T20132] Bluetooth: hci1: command tx timeout [ 936.273985][T20132] Bluetooth: hci1: command tx timeout [ 938.471756][T20132] Bluetooth: hci1: command tx timeout [ 963.506518][T20132] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 965.737483][ T5842] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 967.751370][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 967.774145][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.155532][T20194] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 972.101131][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 973.831207][T20192] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 986.780721][T20132] Bluetooth: hci0: command 0x0406 tx timeout [ 1010.746177][ T31] INFO: task kworker/u8:7:2989 blocked for more than 143 seconds. [ 1010.754085][ T31] Not tainted 6.14.0-rc6-syzkaller-01228-g2c99b2e1634d #0 [ 1012.544688][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1012.553437][ T31] task:kworker/u8:7 state:D stack:20400 pid:2989 tgid:2989 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1014.572483][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 1014.996396][ T31] Call Trace: [ 1015.011094][ T31] [ 1015.014070][ T31] __schedule+0x190e/0x4c90 [ 1015.607709][ T31] ? __pfx___schedule+0x10/0x10 [ 1015.757212][ T31] ? __pfx_lock_release+0x10/0x10 [ 1015.762341][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1016.593876][ T31] ? kthread_data+0x52/0xd0 [ 1016.800070][ T31] ? schedule+0x90/0x320 [ 1017.006289][ T31] ? wq_worker_sleeping+0x66/0x240 [ 1017.011721][ T31] ? schedule+0x90/0x320 [ 1017.879042][ T31] schedule+0x14b/0x320 [ 1017.883337][ T31] schedule_preempt_disabled+0x13/0x30 [ 1018.247167][ T31] __mutex_lock+0x817/0x1010 [ 1018.251877][ T31] ? __mutex_lock+0x602/0x1010 [ 1019.197533][ T31] ? addrconf_dad_work+0x10e/0x16a0 [ 1019.202921][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1019.950428][ T31] addrconf_dad_work+0x10e/0x16a0 [ 1020.324188][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1020.617378][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1020.623829][ T31] ? process_scheduled_works+0x9c6/0x18e0