last executing test programs: 3.719644588s ago: executing program 0 (id=3951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}, 0x406}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x400000000000192, 0x0) getsockname(r1, &(0x7f0000000240)=@generic, &(0x7f0000000400)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = accept(0xffffffffffffffff, &(0x7f0000000180)=@rc, &(0x7f0000000200)=0x80) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) recvfrom(r3, &(0x7f0000000300)=""/235, 0xeb, 0x60, &(0x7f0000000500)=@can={0x1d, r6}, 0x80) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 3.449252028s ago: executing program 2 (id=3952): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.446518838s ago: executing program 3 (id=3953): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x12, 0x0, "69581d697ea5eb7d897346c6a689c5c2b87a0770b314008d37d3a037371e3242a33d6831a00495b63e21a8b1ed27cd4626acc229839f95059a164925277bc131da641967e304a7c92e0476679299d17d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x25, 0x0, "394281e595fd9eb506cd1a5555af72cd375de18882e299a83da979fa66c8f49889716b8dc73f6c5518c12abfb88e8b811ed8bd3623253c58eed51af8b75008e2576da2b0f564a63d98fb21dc8ab90d76"}, 0xd8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendto(r4, &(0x7f0000000140)="d8e22679f5f78fb4266c64cb7969aaf62df8dbd8787b574a6e564eb1488fde1a026071f0b58404d868201b5d658c1c806057b35f5ae6192deddb1b683a525599fffc0d921962cffc0cce6d6e6051f17950424c0f22794a8a4a011f53b17eb22766f91cbe30485a28b4b96663a35522ab0f45f8627264ca8b4efcb6d3a247a625", 0x80, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x10, r4, 0x180000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$alg(r4, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="34adb7b117d1384e81f1466cd1bb89784724fe60103fe7afea7a501cd45c7925c9ce4dca12609c48a51bb90a3f5ba20f9ceaacedadcd5b5578516d2d239726e86c88f590cdf3b364b5de88d0e0b46849adfe208ce5b70c51744074da11f82ec6c38e608d93fc9677980ae15978d982433322f0b90e1d1307307100be6eaa81e65ee4e327f2da", 0x86}, {&(0x7f0000000540)="6b2496456e55cf26e17b4bef13068d353e368d811302031e0a6572f029b09d73a03113067e323c6a58f7d2f6", 0x2c}], 0x2, &(0x7f00000006c0)=[@iv={0x110, 0x117, 0x2, 0xf7, "6788abba81b24c5f0ee6e1ccebc503975a3c0ef83617da4d18dbc395f966bd3908e90ded5ebddc0a128522e1257e72936292fecab303e2c514587faafb2a1b805d428c65f5288fa3ff6fa44b4b302db360d37e4c50dcc420f1143bc55c2ea6726808d5b273793221bb5dfaeefa287ebfbd8aab1d357db04ed03b260d7dd55c0481d1a86c173a76d598045039eded76fa9e6d57680eef1f40badd59b04f0cac5c8b1f5b419494b9edf8c43b3bec64d41c24a88b72e05e5e1ba9d532699a01f330475131e33961c1740b83941614b6c5a7ab6b27a3390816f54ff02ebcc0fbc8f2cc2777b8fe7b9138a4a2a58a1642b66925efff87cac423"}, @iv={0x110, 0x117, 0x2, 0xf7, "a2063fe1211acce9c7b729818724f70657df8b449d98fbacd12dc7d181c95829ee947cac1ca47116eaa4898428dcaff8ca2068514fd26f7374433756279edb6800e7ed56283b35fd4ca4726720315e9006a6fa5b7c2f9da8d4ce71427531e1621b1804ba1b21055491aa89c1a4b7fbd568012fe6e28b026b1216448a308d58f21f3cb9691de68b5ddc68518bc0e4a200adcef3dd0a54a4a14c4fa08f782e6246f4474a2b54e14c3308de9dbca7d0588b15a7324052192d47a8d489b99319fe37acea2666b4f0f18022b03bafac292e09727a0fb5bafd6fa2f34180240eaf21d8dfea8f6524f2cb42920f10c2fea7c342a493729f8398d2"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x250, 0xa66996aedebb0677}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000600)="1d1dc54a5925b0bffc8e199e49c27b92a56b0aeb4b724133151a5f0ffd455b07a52eb88cacb4a9bb337db5c1e7d0b2e9df6bbacb6a0074cbc2fe5855a787dd538276776141bc9a8f04199e5b8d873c41b42f880ecb5ff32866af1de61853e3b749625681bea28318c22f06de0751765e134dc8c1640fbc92bf6a61", 0x7b}, {&(0x7f0000000940)="eb740f5970d3209542127bd445bb2bfd80788927906b3350d53c22aaa9f90e", 0x1f}, {&(0x7f0000000980)="300742772f33779e06913f7778deb4b4cb8059bb61dc99e4945171d6d9b3bb2203f91c4dbbda4f77f826a612a426727b9c9d582eebfd7c655517ef4f6bba3bcf170f0a7cf6f9a6b47112ccd70560c26023aba0ff2f03b8841cf3f39f1efb0fb82ec324551feb94e158979b5ad373da39068ffe24a975cf86f165281b917a0accc389a56cacbf7dc5c82c2f15d5a5f0c72e4968c1a3a2", 0x96}, {&(0x7f0000000a40)="ef3db089d99dda61986a355ca2a516714c159a0b11accd5309413c846ebc92310b597f7ca75325096b580a96f056fa80453a6184b04e9089772a270287faad0757abb3fbabc28c48b7d74cea40beb45de0d3b2b8be8e5ee95290c7fbbe70ab1262c19be367337dc52e9af88b65af6643c9a405753dfb0f6bff7985ec6014dab91f95fa939ae3094675091a5f18d76e4d958058b965b52635193da77e4932419635df102f8bb2cf5804eee3efd0a07d12230acd5ac05fdd1c66af9af4255beda8b95df72ce6acf66801495ca6005b449ac42634f238295661024cdde939e9cb8e43be020fc3655b5cb7", 0xe9}, {&(0x7f0000000b40)="d2a3d9f86c75ded58fe9adbf0509c97a5ce156a4b2bb953ac770335a3e592abf4a65463e7d61dd3422ac1f6921fe67d17ac001c5674b6c509c8cc9ea18549a62352db8204ba9a342f73af9911457a47cd8236c14df5538a7dfb7f4be4203d6dcab422d2abc189283ad95a2f80282414d5e0c81b3b5357b39951210d460b4d183964d75c5b1be4f2320a9e8ad4e3d66577e8e161560b0bd5859f54472c18037277079d709c0fd9d4b0af8f7570e366e291bab97d9aefe6d77a4dac580a5ec5e3dc15bae16dbf00b0eaf033bf7e8702234", 0xd0}], 0x5, &(0x7f0000000cc0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0xff1}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x400}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xc0, 0x4001}, {0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d80)="e198115e01bcca81ffc321105368718ac0f5fc2893dffa3d882d78cf8239321c80d843dadae28e771d53665c189960c21ee02bd69358e93cfd0f31bc1f1e48663b1d4cc4fd8236800464f99eec9844f52bdd98a7e53d2703a679e0452c1d686da26c2188f63a6238dfe4f2757dcec850418ce662651a159d383f3f287f801e303af77745b2530558d356ae780e5c4fc2346da6e97fbb9ce983be221d802fb473f8490d9741af2e5b21aee8d00877ad60b62b0602c318106de81dad6c", 0xbc}, {&(0x7f0000000e40)="76d472422dc96992e1fb88e32a508cccc1925726d1c28f5ee4cb3fe2477c8114e2c46fbaeae1ed81dc1cc310af3285166454649cd48f458d25ce50ea7a4617d24585eedb529707e898d4864ccb4a1dfbb516a1f7ef7b686b6476241e0eb80cc568b6a6a2f390952857e48888bc6a4660660fb801993cdc2e6b60573d32ea5c5762d2e14586324a23960dd0b30ab48c94263ccb07f983038cfffb60454f439e53d92ff24dcc01239651c2f1df2684a97e45a1c41940f11838ca0a59a4f33ae51934a0de19af4d7e6fb0006e6df848ca2ac172323171d7c6", 0xd7}, {&(0x7f0000000f40)="ac7a1a8dedb1886914259ba8c1be73c52f0150483d4747f7a6deb08f443270a87fbb6983bead299a4b3e17d724cce2f07e6a23321fce279af41b2ada17a6f8387a16f93fb03c8a1aec4c6a43840f950c3cb9b9503d7fb12dcf68b142f024ef05386ea888e08383dbf83e61543532ec628fac98902208dd5335f2164a80770acc99930ff3073a15e1d8f887d4da474a32e2e7818da03d9b3f98411a6b5252d390246d785276e25f4ebd122de9ba2c3623990720241eb2bb8b5421477fe72fd9425a08adfb9d4875bf4d2a08b64e858bc21d7099b8", 0xd4}], 0x3, &(0x7f0000001080)=[@iv={0x30, 0x117, 0x2, 0x1b, "e1abfc611f7f3bc06160b6c6fe1ee59ff3227f8f561d70b6bd8c9b"}], 0x30, 0x840}, {0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000010c0)="17913066dfbff62ff40d47af0ece4a66b2d1e2dd6502bc0bd8cfc565eda5752d6db0abeab4192ed4eaf17c11549bf539374c0eeeb581aea431edc1052230a6eaa45050091e113acd7ee06f7a4fe6f325558f7371f8c1d6cc26e06d92542e5939e805b178fa3b66a960714b459eed087720364139afe2fb017965a21a0910fb1ba96899dc509562bb80dc617293", 0x8d}, {&(0x7f0000001180)="9bc0c8cd6c07aabb1632bf128a14296402a183020bf9832207ec2e6e96a1d49ffd68da36c4eb91a27377dffa860d134e38f76338a966a7b84e677f04608e2552caf7535f17b63da57121b3fbb0e12b29a57e1de0ba7120ab76d45446a807f72ba8c01dd6b7207fdbd051ebf0ae5ba2a01ae4fe7a195a52e7f62bcdc73d743cdf19abb86c32e6b87a32800d420f541e8e0506aa12cfb3cebd2f6f218756ccccf9d7ecf64daecd5920ec23bc866bf98f301e5181afcdce30fb22a19dc1738f29efb4ce12c33c4f821194298a4427c90080120717dd851d5c7e8ee45432c1557fa277304d", 0xe3}, {&(0x7f0000001280)="ebf6ee92e1f4c559578c35ce5fdc85edf9d3264647939973342e3b788f33d06cbf3cd327d599edaaa90494d84ae3b9b972ed4026c8cb4e43ce7aa18253b1d273aac5122bdb34a6054a5c8080ebb62f024de6d7a563428933a6a37040d5b76d9c7df139c6724b9df39d185a050c3438103e1180b86ce6de9862b9cae3195c78fb8c8bfec9a8e46a167f4aa18a1f6b93c94e6895fd870e89b57bc7bfcc9f8acf3ba2d2ce26050f224521387d622077ba5cef6ec9b70bd05f80edd7422e1a793eea947ab9908fa0c3172d2caf9deb14324ec17ca07c7adaf721", 0xd8}, {&(0x7f0000001380)="c789957b817b3932dd0e5df39e1d4080e535f182327e761edbd899127230b352f5e47ddf4128354d534a41d83783ec53221a01c14eadd6e86aa43690ba938fd944bc155d34922bc0e74b69c33f5ed87e8b81ad450b393e1d42a22580e0cfff93084942a48f8598ceadb81cfaa87db78052fa4eec391d0b365e717922af7c6b93c1ba9b982b04c64b79c06c53854e4f0c091c254cd058fece9a3905fb61d738d922d3783ce2cb54443fcbf7fa07fd655a4de62455fb1e94772d383f863eb67db27cc0e456246cc1e075f80e", 0xcb}, {&(0x7f0000001480)="b3be2304", 0x4}, {&(0x7f00000014c0)="f3f03a4e2b659d4898eb2fd0c2382ef70260907cb3bcb18ba99355600fd5eb5e960b4f0ed637a7bb42d5edcc73a234b12992cd8c6c28359ac2d100ca41a3f0ce697265ffa54bd1307e37eb395167d73badb1f62c1ee7ee310035bafd08b430aeff57a46edba00da4305ad9496fc9cf1b6f9afaa4f110", 0x76}, {&(0x7f0000001540)="b2e05af38ae38e2fb5cc5da9bff9ec2e12a7914ebefcc71cce67a787c9ef8161e207abe5cf5f000e147d22e07a727a4bf4e7cdfb1926d82f0b9d175236d3793cb239f29e3f8891fe2a0d930c59e087b489c89b3ced910c0d2b26a43426afa4666c1123058d31aed00b7a0c0a1a3bc9829ee7aefeb89800c031bf5361de45d19b36fd9e32f0e7a30b436743b88241c24074f493da72e66e672cb7ac9ac8593a61f2f13b05fa486c098218fd629154144473776fbc87d078e995d5f7f3414d2705e45f0d38076c831abf8f559af6deb161819da05410de92a038996a0ec790f268fb990cb00bc3c6aa7669", 0xea}, {&(0x7f0000001640)="68dc084364d477469fc528b9e8330f9eb83ad0e0f8c45ea11790980f16747ee931e73bb67969f06e0b5fc76192dabb9c5d162caff7dc82d0f17b3e3ba93f419a3c1f35b4d8ec28c51188355c67c763b8b2f5669e1702cfbd68d4ae1876424ee2f0660815f6f607fb731bbcbe1258fcd0993e5f32144a4881f8cb4b2a6ec8", 0x7e}], 0x8, &(0x7f0000001740)=[@assoc={0x18, 0x117, 0x4, 0x200}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xf1, "e1fceaf2b50bf78f30cd838ec23c2ff8b739cb1bec6a57bd27b00b088f124c7e10b927423e6d36c7f0b2952a31733a15c4b441dc14c14dc1e3f55d9951799fc05d941283ef0c61c20d37798003a4b86020f18e2cd844fa348763b693e26520a4a2ea4586d183da86c4d0ab0f29de98cb5b44df03c6273af31cbfad0a116f5da374a963a536d177c7bf6bb659fa10bdac6c6693534122659b839db483f4b93c80ba0de03d75d12c6037258ccddc4d18e849445a0b9e2d3567c8272fcb3c55efb1e0a0597310e0dacb4367715ce24f40e886cc9ed9d76ea9bd67527e02db18e96fea80eb89a3d0881cbb17f6bdc75107c463"}, @iv={0x60, 0x117, 0x2, 0x49, "1599b2d2f592b8366961aba55a2ac5aa2bcbc4c19aae9b7f0ead68d0edfb23c321c1a90fe267a1fdca74752296f7c25d1a1777eaca809093bc19dbe8bbfe4a344f6a93dafb16623a90"}, @iv={0x78, 0x117, 0x2, 0x5d, "1b51e5efad1f3b5accfd30261bf0604ebf162c124420cbb524ec7c4a1c3aa2569310d832371bab3eed0aa479d45759b37e14d1b4eefe3a87208d2ae6701bd0d3d0568c4b0c483f3855ae14c14e85e7cd60fb7adb8fcba66fba00b9de5e"}], 0x228, 0x40080}, {0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001980)="66e47557dcd5caeb72ddad6a976fffb67f35d7e72499550821b615963863468f0bd380bac42927401f9bcac90edae11fab2dc247044628e32f71e6851d3c5184663d9191535f588b4b51056263d758750dea7748e34734f9c0885043f2", 0x5d}, {&(0x7f0000001a00)="c5570706df6b6b2a916bdd19d829cfe79b19cff3ef2d25303df7167f79d85ba4b01de1de8a12dfc3c56e9d364cd96f84d2c0eaa71ee2414aaa08e21e3baffc82a87a3f864b325a905f2cc49d8ed9d3eff812338c21d56a6da5560f2125", 0x5d}, {&(0x7f0000001a80)="b6b85b59aa3194871233a00c5a09232db347663aee464461727f6ae7f08eb4a63481bd83163f90bc739faa5b68353a1dec0d5ecb041af9c71b51", 0x3a}, {&(0x7f0000001ac0)="332e681a0edf5dcda343697858ce48f108b3f71150a17b31232e6e8ccc77f113918879913b1abceb6fb46ada7b2552d78209bbf0d4781f79124c604095001c7e669a886325515a02609228a24098edbeb70b19425a0b2d5acf193828944c2fba5376f396af43e026954b363f843a661bf79f3ddcc73320f04e55eb151b0eaea2f5e5e7dd58e120fab3912d75860db0314bcdee5de7864389306d0a89709a69fa0e731e1f51cf980feecf3d6d6d2aa4c74b926423a544b3fc", 0xb8}, {&(0x7f0000001b80)="52bc46db1479a354808cce4c67099068b8daa679b400c1409df049f8de084de56d01e0c048b4d6215eda63569b3c055b8d85c38ab3a5b2a0237f9df7256dd3a194a6d7c606a72244c266e1b524b8980d98", 0x51}, {&(0x7f0000001c00)="304054bc92007ffb2ea17499f6c4651688295e610bd29f2662fe842ae9675b4397834c89336f9af92cb654273df1e9260492b8833756b9ee7656e7174bb273ae8715d5993fe35b284227fae730c3f6ae84f61b51a94e2e8be81ff84078473016f8c92d581242dd05282bdc731a6ef521eb3833f1c14205c4b243aeae77616c131105cc3e5cea425969defac527360f5df3235e5dbc3552a47c20fe8d45d850219c8633c67eb0387b5d798f7aa065df64dbb2a857bc2bac231f6797", 0xbb}], 0x6, 0x0, 0x0, 0x8004810}, {0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001d40)="d30bbdcc12540b382d9ab738a8e248818239dd87af646fa3fe3aaf285a1a6206e92a80fd32ce5943659fd9971b56f6f2038b8e253e64a8f166815a7a0a74ed5a2a2dc22986cd97d0bf20ab5712a9710d8e6ca75ff7a9534e4cd14c2a800af0f3b039bc73c7c6e74c525b3eb0a5919522be08701e026809a92ce1b57ef0a81e4129cb85907240fe0ce7b737ee2ca24ac95faf168d840df03843a78143be932dfec974dc95b6ef3fc1cda3f4f423c53a627ed6fea4ee44787dea79ab8e3063ad4545bafb069c05c024cd15ff3da1b7c8", 0xcf}, {&(0x7f0000001e40)="9658272192070b741379ca76c1915f11a8b0cefedbcbfa5b7bf0851fef4c9c727552ad76cbde7915eacc3d96507079710cbaaf546d7e8a6b1ffe0259e5c2580478c75583ee74333b0ed558f9b1e09071081af51c8e136b4acc134b005e160257f3d150ee15", 0x65}], 0x2, &(0x7f0000001f00)=[@iv={0x58, 0x117, 0x2, 0x43, "9b18fbbde638327aa89788ae581874f6cdb6ec0dc8a9cb7202ed7c6cdd01f283ec4dffa8e8191e0c5e076e9dad52fa7e83720c734b4677a17eb6d2a9c4d96c357210f0"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x36, "a51594111699faff41712b5e334076eb6933d0c6f40a762e2d272a80c803d2a7d966c55f5c782b7a7e28d8d5bd15f0a1b82604004f44"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0xf0, 0x40840}, {0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002000)="0c53c7ba8aed1ccb3cf4fcb7338e6cb2c724b3fee02123ca0ee2def07fe1282828d9a9d9576bd1e2e664cb72aeca7cbb37ac893e7903060d2ed41010ba6ed45409322d3e0a0083bb5afcf3ef1df224cf77ac823669ee4e8e81c434393d3f819c6726e3bde646e958ac722a73b70ab5fa97ca91f2f6fe8cfca2c0dbf2d0ad9eafff6d8f01865221665c206b", 0x8b}, {&(0x7f00000020c0)="07b0059112991c3e2d60b2034d2c919ada68fe76d6d59ce0e25ec30f4634e740e6fe4b514731f4c6ed1e076535406828436c0dd0ded3bd2be9c93ab5041df074146722de60e7f390cabaf42bc1040f0209c19d3d3048f3c07ef94ae407ba7e3fedec55e8a10dfd2723356ce326e1b35df331b94603625af0e4c1a89550811861ffba0a1d3b961fa30c0bfdc1a0ac27b232ec2aa28afd840f67428ccc589b0d128cd56e1e63d45d08d7a20b32e071eb6c34839b5afdd5d22a289f35e0852433384b169b913ee6bace819625f74e6b0e7843bfc348f5abbc9cc459603d4923", 0xde}, {&(0x7f00000021c0)="ecd7a054caa0f63ec52bfc9593b60d0fe05923956bbe5410", 0x18}], 0x3, &(0x7f0000002240)=[@assoc={0x18, 0x117, 0x4, 0xfa}], 0x18, 0x48800}], 0x7, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) close(0x3) 3.433881682s ago: executing program 0 (id=3954): socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000007009b001dac1e3707420f53a0fb8b4afa146d0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000020000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) socket(0x10, 0x3, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xb, 0x12, r10, 0xd8611000) 2.911602561s ago: executing program 2 (id=3955): r0 = socket(0x10, 0x803, 0x2000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x190, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ba5}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9ca}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x707}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfff, @remote, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x190}, 0x1, 0x0, 0x0, 0xc002}, 0x408c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="d9", @ANYRESHEX=r0, @ANYBLOB="140002000000000000000000000000000040d4c900000114000101ff0100000000001c00000000000000010800090005"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 2.829956634s ago: executing program 3 (id=3956): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x3a0af83a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0x1019, &(0x7f00000024c0)=""/4121}, 0x94) listen(r1, 0x20) poll(&(0x7f0000000040)=[{r1, 0x804f}], 0x1, 0x11ff) shutdown(r1, 0x0) 2.767077937s ago: executing program 2 (id=3957): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xca35}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x0, 0x9, 0x2, 0xb, 0x400}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000ff8000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) 2.585665975s ago: executing program 0 (id=3959): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b00)="c80308947503af258859e0be5946a3eaf4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c1", 0x3d}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861700becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}, {&(0x7f0000000080)="0819f1", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003080)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40004090) 2.584772383s ago: executing program 3 (id=3960): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000080)) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0500000002"], 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}], 0x28}}], 0x1, 0x84) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x730, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310325bd7000000000000800000008000300", @ANYRES32=r7, @ANYBLOB="08000600e9"], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x14}}}}, &(0x7f00000000c0)=0x84) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r1, 0x0, 0xcd, 0xa6, &(0x7f00000007c0)="16122148089302b073c04cb8f6dc13b4ce9df6179c4a5844465614ef1bdef43d6f35116d25430fef774ff1e56c004c7c5b64d651e4a8f44410c34ab8935fdfe47756c1556bb765de15cc2e064b57ec1244c4ff79541a82c243b66688f6831010f7ea9d09d6378fe36606905cfb09468efadbe20e1a707df08ff843c487029db960f2b50a35718028c2cb2531ba6e533558bf0ed4d8993f2994e9b846830f179588bbf7b39b7fca3958e739c49f3437b545e80be92e3eb7190fdca2e9ad0e7650eb2e187369364d087369f16b3a", &(0x7f00000008c0)=""/166, 0x400, 0x0, 0xa, 0x1000, &(0x7f0000000980)="26b6e19a981520d52d45", &(0x7f0000000a40)="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", 0x5, 0x0, 0x40}, 0x50) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000100)={r10, 0x3}, 0x8) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61, 0x0, 0x0, 0x1000}, {0x6}]}) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r10, &(0x7f0000000280)=0x4) (async) socket(0x0, 0x1, 0x3fe) 2.475669174s ago: executing program 2 (id=3961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.475275595s ago: executing program 1 (id=3962): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r1 = socket(0x1d, 0x3, 0x1) getsockname$netlink(r1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pi6 \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.373589603s ago: executing program 0 (id=3964): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/183, 0xb7}, {0x0}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x9}, 0x80000000}], 0x4, 0x4022, 0x0) 2.166603822s ago: executing program 3 (id=3965): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.000359852s ago: executing program 1 (id=3966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r4, 0x0, 0x0, 0x4000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000000007000001000000000000000000001294200c8d8a2ef2eb0831614ff8bf4afa37724e7ec462c046576ad80265177e5e4e429ebe422ffc3c94fb48959e3779871a3fb0e93616c2"], 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) (async) shutdown(r4, 0x1) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @loopback, 0x9}], 0x1c) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r10}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f0000000540)={0x40, {{0x2, 0x4e24, @multicast1}}}, 0x88) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x82, 0x2, 0x1000000}}}}}, 0x0) 1.959570188s ago: executing program 0 (id=3967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = socket$kcm(0x2, 0x5, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x26e1, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000a04}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe14}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004884) setsockopt$sock_attach_bpf(r8, 0x84, 0x78, &(0x7f0000000040)=r9, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x327c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3ff, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r12, @ANYRESOCT, @ANYRES64=r12, @ANYBLOB="d3ebacf65579333168076bfe45f3b6ee1f1f5789144eea7ae662872849b39256213f4643805b1b1746798b7d0a6d883215a8d7edf91b72825781970ce760762cd914ce07a2ea9e96f21871ce754eac712d8553675c77906b", @ANYRES32, @ANYRESDEC=r10], &(0x7f0000000680)='GPL\x00', 0x10f, 0x2a, &(0x7f0000000140)=""/42, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r11}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) gettid() socket(0x10, 0x803, 0x0) 1.959171106s ago: executing program 2 (id=3968): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x18, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) syz_emit_ethernet(0x176, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x140, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, {[@routing={0x0, 0x0, 0x1, 0x4, 0x300}, @srh={0x84, 0x4, 0x4, 0x2, 0x7, 0x20, 0x9, [@private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @hopopts={0x0, 0x21, '\x00', [@generic={0x7, 0x2a, "030693420bd6b27cfeb45a62eb5114aa53884114c081f9030cf2450c9e15e7760d41ecaf789a01baf6d0"}, @pad1, @ra={0x5, 0x2, 0x2000}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0xdb, 0x87, "38d56fd434ceea9c0c7ff86d2db1de129ee8426b32f97e243748702e5a38504cb79f474cf3f4fafe8e78acf64f5ab7b703bd51061ceafc0d300b05cc9ed668dc5b1c5f12b4a8beb78f396feb75b28e811d8016397f07c31d44b740735a79845e3d3b0d783771f48d60a7670d635d99c75f3ea07ceeacf9af35aae94e6d368c2d6c78cc2f42a00e"}, @calipso={0x7, 0x40, {0x1, 0xe, 0xff, 0x8, [0x3, 0x1000, 0xfff, 0x9, 0x101, 0x3, 0x8]}}]}]}}}}}, 0x0) 1.958638773s ago: executing program 3 (id=3969): socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000007009b001dac1e3707420f53a0fb8b4afa146d0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r6}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff010000000000002f000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) socket(0x10, 0x3, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xb, 0x12, r10, 0xd8611000) 1.784288376s ago: executing program 2 (id=3970): r0 = socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x9) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000e00)=ANY=[@ANYBLOB="24100000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf253a0000000c009900090000000600000004105b004c898d23afd8348c36b85a21ab0f9cb84a8a0ee6d54815e20893651690055ea2ffb847ec89cf393457074967736541f767acb72d640a7a35a861e050bb3c864ac589ecd12347c7a0649ee8e80dc20595bb8c89bef74c94f1d46232304cb0c4b682e05013a55e371530be0439e37910fcb7eb2862dca7c47c41996af477cc7f54d4048e7a77063f816ba035ed78d4be525b4b41634cbbdc216d9ce22b8aad021ea14cfb70f7dc524255248d104d31d272874859cd2b32a5ccebda272e0310c8a6f190e7ae236d5c2ac9f45c846daaed4d0fe19e4a4c81355afb241c3bcfb51d2e77163232be18b232e156c07e47a6ba0d0b3bee4b1988c17bd8cc53f36f319e74a17750f10ed11397729aaa323142269f49ba80525ae7d863c3b704ef988a370686b8f284fd024aa3d4f362c11e99d8a442bb23a4b87120a1c670b0e12a095de05f7b596fef79df54fc36e6b4102d6c92aebaa4a958728f52f1fc681f393bcff58ceca893e213ce88e77e00ca71d19838439c9084adcc9ea44b41617ef08ebf52010f6848b648093202f553d4f45198d0dd610dfeb0795eafa361acd8d490e4aa1ce347a9b1a27fba8272dec9b65c422810e1690829ca73c3fade8b5e5c9713cea64d5bf60b752017664a673a9c30173c270f9a1fc17238e36249143b52002bf8ea151933300a7e3f524626ef0ec65ca2ce415ed11b7233d0ee0592a90e0887a35126ac5298ebd7664ac00691b68511300f9a3b43af625f3a9385066e2f51c47700220c961c6273ff3525b602f04168e5762cf9fbba69d879538d64c0c67039c5bf20e5009e559c456701347441a91b228c0843d5a390324e90ae478e72668cb81b3bdd53828cfec60a4c1e142ed5f31a809ad27ddbf5f5d61c4c9490cfcf7498f08b891a54e700f6ac94a8d5e3318526feb83dcc53307eb293e3450e107a9c5d5ec93230457719c24d8b49b99bda259f36a6a23ef64594531db5a32a797b12c50960f40e6660dfa482fe186ed86d93cbb9cfaf379dd0f262b0d03ede061c85eb41b68a122601f3a48398378d0f105286442b7965ef0c2becdb3472b09d11e4fdeecab255ae6db588f57b16dfdae07b0eebabf4d8843eb7c34071ee09a17e2b02c1f7495eb10b8c282eef0a73191d9ed3599f6d581751bd6f23516185b70d70dffba85eb7146d9bbacf140cab66817e4401ae6bfe895fd17412bbf4a3a6df1dbc9adcfa52a7b727a5e83be078d19805d5729b8e383b5aefc27e0f3cb79e65dc79d2731ecf802699caca7f0eb22aa874b6541430418b7588c6665d76d2df4112e5a258282d4632857ae87a98563c7c0c4a18fd728aa2d5c90bbfb6ab82f46acfb28cdf398252c4ce7bd21d7f14fc12b356619ae5a2db05052ae5e47c08fc97c094da2217657fa702f45704a433309fec624c4eb43b8b85b0970530700b1df3ba6f6a8bd52b086fc6ae5fbafe280ddf39f4df58d3db202231af6780d97377eeae225c46a2ff4da4561e0ea8ac8b3ab8bb53125c170bd1e9eeef72432a5c73441689e972d39e6296900fb64a41704b14b03f215a7a7a2a473e8abf61bd1ab4ee24d06aad0004e960c61b34184cab29b8102c57d61fa9b406f1ba2aeeaa10ca961005f87f31aa9aaf5a25e734112cf8074a52a5cb6ed939599fec572e3fd423636e33d63914ce9728bbefc79bd2b77cfa649eeee62eccbd7981152830090abcc8342886f651f417a19bd457ddcad958e885504d5e5d1577489beac867ad4fe470aaa4e2eab43989dbfbb2bf8eba603a82bebf4c17ef6a96fd5a96d89c12b4aeccfc462b7f7ff9b3a448fe234fea0ce54393f1150ccacb709cc3e36302e478a41fa54355d3673a3c00c6b4ad7feeb1e00aba68f10c7e40d03f0706ee4c86b2a7bfa4fd099d6e3d0cc58d7287a9d0396cc6cb5ab563d8c3ab8e826b4428fbde8130129e09d3b028e8dfcf3305d64198fa30fd107b5f858442a124078d2322ed2955bbd124a135d0b5412e20a93562c32d696a69a565d848fc571e7d7648bac93a69e745fa04838246d5136e0064daa556a1a76fe142379e2e689dcdabbc3e799799b7fe7be838d583e51e695108a8daa3c29da7c3142e8c4f06641ae39494693e346157c36c2edd3b11126569d619d8f75826ffb8122c40af12a2621036619aa14c6861177545359d1c77431070f34f31bb1714449d0a22ce7caf07b4ced2df77b5f51fd14e8f1c903f189601e316e18b577607dd3a76423f422bab992a87eb49a19f948a0972fee8d3345e0a9380b6529421f14cbdd8f9c3bd5c92a3f8b5ed2d273536e68a8ee032723ce125425108bdbb25f1f7ddafd04b198f37b3de49b887a95259571d5ed32999bf32af39ae5da6e5a8cd2d3bac06baa430a063d392d50843f253dc78043bdf8c67d5c8b7b906ddeba808a0747fadca845fd2d0be7e8e947a71121de24621fef584d1e6f7676831a8c60ed49b91ecdb759f4958fb197370b4c89627f5bfc83ca92c4b4ef5c18d708986072332456736dbfd6a94a9aa3d3b658cfd38cde1c3686a0269fde2eedd9506eb5647454102ae1e32a073197bb01766e39d0b969221c36a5107e47fa72ac7fc05437e2e6406642b29e0fdaf32fb5135fb59f29174001d3bf4ea3a538bc16e0760ecac797408fc42690cfb1d482e834edb4d70cbb78b9e0bbb7fe28d049b31c1194b43b056ff7df656a0e30abbf52863fe7ac55e17ebd011cd3db6a2902ac241114465d55d2f12309fae7f35ec551c4ae2b26a9b79b9cc4716b74a340dff9cd39ea8b7b43bb0c961f8abfdc3963a36ef8ab1dc509d678d99b864a8115779be918bec71a36789c323fc11f409e491bdec79eab00a6c462d0a95497ebabf46dcda1e6dfcff3dbb205a26a39409befcf657cf810ca7b58c3d494afecf6e4f00dee3d56e3f706b102c0638ad263c5b85764c04663e7f1bc4e7cd8883a91cf41f72b50ea6b23923e1282784349c79e8e65f2954c9afac0b9f17779093b617872a547835b46c1ed22412bf9d04209bed2c0ed6697761f1af11257485797dee6c79e99a631fea7aed86084d12704eb46c7b5026e1ea9ad2cce63e958c5783faeb464d9e6adbb53ba0572efbbd66673e8edacb61d69b4dd7d44502468faa41ffec3eea3e3b2e7043953c7629dab9afff213b26d209843345956e2206431eee4fcb53f55be1818e8c20e8801cd16c43f2c9de2211eae20ad07691228255ab4aa2668b7766baa7265c1026ea5dabf91d1090c78acf2efae5003a1d48872fef5b4d0f9ce79e606ff68b557f119c1c1abc4efde37b50f6f25186926a05b0d71ea48ea48d2d3d5bd902d06cf73a8716e07fc28f64d43a4b359b72025f8a5473d32a5d065970e53178fbf513427b15e2253c6154c28fe0766d814de13b8e15299be70f788232f92cb0bda2f45e2f5714f893f99e84dfcc386fb67d9bb1f15955f7f0f5de3378566a5f19fed9311168758a07b5f63d7c48f85c6d293cbe9322e6f7baf200fce12b4e8315c1e0d0886b538ac88a2e708dc58bacfa27ce334732a9bc47b49a52fd401d4d348945126479a62728a944f4b7f4d6a6dfa678f0fa4e59870ed41c8c20335550b867ff88c1c231d4e137f882d5591925439f16dd6d0115f52d2b10f3e82d9b2877e5af20b1047e40332db2f188468c71503dbf93f2e219ca01c52b14c8bb74063c6795b80f558d01c1cc288920627aa7280be36e179901cfd1959b3e086b3ff2a74835d92d22bab1f708dce85afdb13f673d1fb082518cc513b2938b6232a5654fb6deed5e0e41c7c251d74394efcf37606b30d967db2cb7dbbd148719113aee73eba8d95ec3d9758ef270d9dc3d5dcc20190b259ef0a9a2fc2ca18edf4ab5b1fc647a404d4e7d31270792a81f0ed24ba3af75c4d206440de5d0793503170bf1e57626e8aed6815aa3f770b330eb79de2bb71f017083a8f1d12a2214f0919221d08be17ffda6ecb7b5c1c69caee7eef6cfa2288cad01cf516d73d4ce75e3c111888968d8db8c0648bbc5f54f6736ffa4acaa2b448ed30bc25e217d7e457ea16df2dfc9e07c73ffea3644b7f5f2ebcc5fe947380b4932d8e2ad0c6f8e1497c9354e4e68f49401f7acc9eea62b05923a6ded8d4870f675aae9a05256eb85419c12af5dc9743093eda8dfd000906fdd829b57a03c705764be19e667df7bd1c22d2a11623b9cd0a16242985a80a4ebed4b86230e5dab38e9174d49b84f77334c238e441c0e1f6719068cc7398df5506f2b2c1f7eb25c7cdc64a7cc0e160b2b5208fffb61516923025d590678ca18bae3e444609bf3c29a9f30d75193ed4ee7a842e33d44b5f83382eb1d7bd8e018516cda8b7d3eb51e3d91c8d3af70b4c69890133c79e463085d356d22db35fd023e03a94cbd82b0370b22bfb00402798fa264771df2e1347057f34db2ea86cbc172fc727713d28541d176c158724419d381121f21afa1af38940bf409b78e446811eaf1e25a92ed7ed202030da2f61ab658a0bbb1539cadf97475b5dd175243de3111b3ec4f6ef1bb56495dee6d0be4c84ce3e4bf03ed584cc6e56580e50ef1ffde4b6a5536f4d15236d17133d83398880f2bdff3ce59e88acef29b0f5625a1aa75e48c8acc64cd9170f3de193e5bc4ef28f6d57ae2fd6b106abda427f7a352abfafa8a686a2c3ab9444fba38171b00e329f5d2572f087452867315bfc9c26dca8c447462fd486953e9dd24e74a1c66bf62071ed7eff87f026dbbc2f0da4218d3d56bdbb6ebeea9360ea24353f3556b011a4af48fc2e36a5e0e8d7d62a775b6a97b1b42a2d411e2a4f4ffe51edc0c9abb53051d4303f55283e7bd2e771a38e1c7bb7009eec4d72e5c3a635c617c8c5cba4bd2fb796bc36ac90bd84bbfd2974581ed5745675c7ee13ccd803814ff94d1885dd37ea6cb184e6d2f563394332500d7b31943cd063cf8a27e9ec8138d559c0697a780b9a49ee965542e7e3a227f5e9e1b4a98cd8017c9df0078dc3b61ac1126eb11f63be895d8fd245d9cbeea3feb34cdaa922c1b1e6ec37429d78a8ed61f236e27259bcba5c90b5aa792529297bfecd0757bf5668cb4ad3c9ec15e77193aa016afd3b97e0c68d16def69ec20d712b72f8d333d56a155fbdfd1638efff14d4326de6ad7183d57cc396cfb49ccbd6d25e5fe8e542ab6a604fe3f64cef695c49e52bdff7fe78a091626df1d60f6bc24ec282e909b82b8139014b090dde7ceff7a58ceac83d328e08b91a78638977a8e9abdf51eb9fb1cfb76ecca894fc14c27e8e66575374990ee38301a32229bca564384cf4b9278505a20e3f0afa5d84cf882ead23bf26fb5748cad73a780a1d1bdaef08889db4b921dbb68583b21313d36b73e113e55b656f48ea48b43389ffd46aad9512f46824c0acace083717b26a9519746b34a9daa9bd987fd6fd6fd87d5b909cf800dcccdb6a852b20cf17b0684a4f4e17829fd7ad178419c3af84a33a9f1d4c9dd8c44c09a847e5c73aae0408153bc2b1c0b983f85b31519c483db047d40452f79c1bf3a41364cca0961ab756bd5d9f092c7813fe2d91635f50e3c720fdc851def2f34bc7677d5d7c87f346067f9401bb804bd6a16b1fffa2d5e6338498727c5eef2ed4fb798d027ba8e4b284e19d667b0903692c30c578f6a204280849492c35e33815390e2e3686aa49a2134e87cad441dd1268c9deba14b3f2f3c1ffca9d12aef009d4240cfd8b0980ec01f59fb55b2894b3170eb877be240f843e586a4a6adfbe8dca55885f2de817b645c85ff94680857a167f2fcba5bc515b7f71"], 0x1024}, 0x1, 0x0, 0x0, 0x4000010}, 0x8c5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x3, 0xf, 0x4, 0x3, 0x0, 0x7, 0x40, 0x200}, &(0x7f0000000240)={0x81, 0x0, 0x3cb, 0xffffffff, 0x9, 0xd61d524, 0x5, 0xcdf4}, &(0x7f0000000280)={0x10001, 0x8, 0x1ff, 0x0, 0x2, 0x2, 0x4, 0x5}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x8]}, 0x8}) 1.550946815s ago: executing program 4 (id=3971): r0 = socket(0x2b, 0x80801, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000180)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f={0xf1, 0x3, 0x2, 0x2, 0x6, 0xe, 0x3, {0x3, 0x2, "a0ae"}, 0x40, 0x56, 0x3, 0x8, 0x1, '/'}}, 0x14) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2020}], 0x1, &(0x7f00000005c0), &(0x7f0000000600)={[0x3]}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getpeername$ax25(r0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x14, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000001c0)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x5, 0x5, 0x4a}, 0x2c) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$inet(r10, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="8c", 0x1}], 0x1}}], 0x1, 0x8000) sendmmsg$alg(r10, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.326000936s ago: executing program 1 (id=3972): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x0, 0x38, "e40549a29634748661505fcd6f4d28c7d1fee6d5f65c949a60c06e72cca906c99a283166413783b5aad79b8b17d78ee76d0d090e36cd8b62"}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}]}}}]}, 0x50}}, 0x0) 1.311226266s ago: executing program 0 (id=3973): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) poll(&(0x7f0000009b00), 0x0, 0x72) pipe(&(0x7f0000000180)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r6 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002880), 0x0, 0x1091) recvmmsg(r6, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003a80)=""/101, 0x65}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000680)=""/105, 0x69}], 0x2}, 0x4000000f}], 0x2, 0x2101, 0x0) pipe(&(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) ioctl$sock_netdev_private(r1, 0x89fe, &(0x7f0000000700)="55a658a057084f8f0b1e18e5df957e1973ba055ca0834a18a6a395d0a5e7bdd68280b0998dcad5b7723ed9f7bbc85b2b3ab135580fbebce6449401e2dbc39dd46196eb017dfd5ad76e3819da77b26ef1be4f428947a403973b9e7cd5e571832e2b3fd26caa9c8ed9341b28adf57d9c3a5ab2692f6828af0d2e7b1e535ae85f6d1517270cbde0e49ce89adfd90894246add7daa830c1d4858095a40fb46e922938d038728736c1f6b") sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="008000000067ebe192002bb39925d5f664cf2ca2cf52c1b3a880f74d481d9c05fc3d04b88cd60bc4856ffd5bd1cef8fb86a33db7342f00da25672457c9fb3fb1c897e3b54d3e48810f39c4ab25c57e125e0d5da3611e", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.063592015s ago: executing program 4 (id=3974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b00)="c80308947503af258859e0be5946a3eaf4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c1", 0x3d}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861700becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}, {&(0x7f0000000080)="0819f1", 0x3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003080)}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x3, 0x40004090) 954.067323ms ago: executing program 4 (id=3975): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x4, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xe, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x3, 0x0, 0x8, 0x1}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', r2, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 841.729617ms ago: executing program 3 (id=3976): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r2, r2, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x4c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x334}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x4c}}, 0x0) 491.690115ms ago: executing program 4 (id=3977): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000700)=""/183, 0xb7}, {0x0}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002900)=""/4111, 0x100f}, {&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000880)=""/253, 0xfd}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x9}, 0x80000000}], 0x4, 0x4022, 0x0) 305.388788ms ago: executing program 1 (id=3978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x4, {{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x1, [{{0x2, 0x4e20, @empty}}]}, 0x110) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c0002800800054000000000080002400000000a080001"], 0xc8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @private2, 0x5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e20, @remote}], 0x58) 279.933453ms ago: executing program 4 (id=3979): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 99.765157ms ago: executing program 1 (id=3980): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000240)=0x42, 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff4d}}], 0x1, 0x200080c0) 98.051018ms ago: executing program 4 (id=3981): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 1 (id=3982): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0xba01}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delpolicy={0x50, 0x14, 0x300, 0x70bd2d, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in=@empty, 0x4e23, 0x8, 0x4e21, 0x0, 0x8, 0x20, 0x20, 0x33}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000280)={0x400, 0x3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x7fffffff, 0x8000000000000, 0x0, 0x0, 0x1000000000000000}, 0x0, &(0x7f00000002c0)={0x402, 0x800, 0x5, 0x0, 0x1}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}, {&(0x7f0000000780)="5765a3212fdcda754f390ed7e95d1c320bfd0c1ad70abe4a9c62df0e6ab2e010e05b4aa5c9911f4e7de895c6b4070514eb5addec9f54ca751885e7c5e77432fb939c0326322348d64c59b7a1e03a52e017f82510bb44fb06a6be95d5cad392ceaa794be397eb1d246e718f63b63f527f7e325e321c47f7b20d48c8fa680ff5e9a4cf19972c540440740c09a317867a32db3cef88e394dbbaba29d733792549f99d8b7bd1055355ae7ebe970b33c98a6f7c", 0xb1}, {&(0x7f0000000840)="cef9187f07bd00cf6501b502ee2df53ade5d9d044676a90bf2aa9e56db05865ff9dfd5e0a45f87c07c617519f236b7139f2801acd67214f5973e5565f847ed48201ea1d02d0f08bd2971d330b747080432b328f969ee276dd108a865f9a5075da7e4c88ae5c182dcf580e3d418528ac00ba1d98c7717c8ac11f1c4a77afc3ecb0a0dcccf0718e24ec12dbdf7720388d529901b1a4375b44741f4a04711e5d1a49c86bf63a3efe5e0a5d560979f6ecf9b507d5ea683f840cc4419c7bee04f6df85b43b9645e384d1d37c353467712227a3c0e37abd56cfd32f265d4efd6b19953d078d2b38d90a8473699", 0xea}], 0x3}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa2000000000000070200e7f7ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000100)={r11}, &(0x7f0000000280)=0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) kernel console output (not intermixed with test programs): [ 395.580694][T16352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2983'. [ 395.609641][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2983'. [ 396.275668][T16370] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 396.304277][T16370] netlink: 'syz.3.2988': attribute type 2 has an invalid length. [ 396.331544][T16370] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.2988'. [ 396.342431][ T5865] syz_tun (unregistering): left allmulticast mode [ 396.389521][T16372] netlink: 'syz.0.2989': attribute type 1 has an invalid length. [ 396.449488][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.462215][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.470941][ T5182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.479068][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.487278][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.516957][T16372] 8021q: adding VLAN 0 to HW filter on device bond11 [ 396.669334][T16375] lo speed is unknown, defaulting to 1000 [ 396.868090][T16396] Bluetooth: MGMT ver 1.23 [ 396.876827][T16394] lo speed is unknown, defaulting to 1000 [ 396.902054][T16397] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 396.913434][T16397] __nla_validate_parse: 1 callbacks suppressed [ 396.913455][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 396.930645][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.934270][T16397] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2995'. [ 397.003318][ T4015] wlan0: Trigger new scan to find an IBSS to join [ 397.167371][T16375] wg1 speed is unknown, defaulting to 1000 [ 397.359358][T16404] netlink: 'syz.2.2998': attribute type 1 has an invalid length. [ 397.494356][T16404] bond1: entered promiscuous mode [ 397.500087][T16404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.596065][T16405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.614713][T16405] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 397.633147][T16405] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 397.672146][T16405] bond1: (slave vxcan1): making interface the new active one [ 397.690195][T16405] vxcan1: entered promiscuous mode [ 397.712492][T16405] bond1: (slave vxcan1): Enslaving as an active interface with an up link [ 397.744476][T16394] wg1 speed is unknown, defaulting to 1000 [ 397.881125][T16427] siw: device registration error -23 [ 397.916972][T16427] netlink: 'syz.2.3003': attribute type 4 has an invalid length. [ 398.196692][T16446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3008'. [ 398.394588][T16375] chnl_net:caif_netlink_parms(): no params data found [ 398.519653][T16459] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 398.577966][T16454] can: request_module (can-proto-0) failed. [ 398.601584][ T5182] Bluetooth: hci2: command tx timeout [ 398.856639][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.864236][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.872193][T16375] bridge_slave_0: entered allmulticast mode [ 398.880249][T16375] bridge_slave_0: entered promiscuous mode [ 398.894283][T16375] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.902723][T16375] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.919307][T16375] bridge_slave_1: entered allmulticast mode [ 398.928405][T16375] bridge_slave_1: entered promiscuous mode [ 398.938330][T16473] lo speed is unknown, defaulting to 1000 [ 399.058635][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3019'. [ 399.095441][T16375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.120071][T16375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.137084][T16480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3019'. [ 399.158036][T16480] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3019'. [ 399.181555][T16480] tipc: Invalid UDP bearer configuration [ 399.181615][T16480] tipc: Enabling of bearer rejected, failed to enable media [ 399.415763][T16375] team0: Port device team_slave_0 added [ 399.445598][T16375] team0: Port device team_slave_1 added [ 399.473190][T16486] syzkaller1: entered promiscuous mode [ 399.483078][T16486] syzkaller1: entered allmulticast mode [ 399.586904][T16486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 399.649853][T16486] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3021'. [ 399.763243][T16486] geneve2: entered promiscuous mode [ 399.839682][T16375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.853118][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.893405][T16375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.907603][T16375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.915987][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.951478][T16375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.985185][T16473] wg1 speed is unknown, defaulting to 1000 [ 400.144353][T16375] hsr_slave_0: entered promiscuous mode [ 400.151957][T16375] hsr_slave_1: entered promiscuous mode [ 400.158298][T16375] debugfs: 'hsr0' already exists in 'hsr' [ 400.165661][T16375] Cannot create hsr debugfs directory [ 400.447798][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 400.619591][T16517] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3028'. [ 400.680906][ T5182] Bluetooth: hci2: command tx timeout [ 400.696678][T16512] bridge_slave_1: left allmulticast mode [ 400.711052][T16512] bridge_slave_1: left promiscuous mode [ 400.729396][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.799740][T16512] bridge_slave_0: left allmulticast mode [ 400.825561][T16512] bridge_slave_0: left promiscuous mode [ 400.832060][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.921919][ T7110] wlan0: Trigger new scan to find an IBSS to join [ 401.021757][T16522] netlink: 'syz.1.3030': attribute type 13 has an invalid length. [ 401.029903][T16522] netlink: 'syz.1.3030': attribute type 17 has an invalid length. [ 401.085268][T16522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.204328][T16522] lo speed is unknown, defaulting to 1000 [ 401.326445][T16375] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 401.549637][T16375] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 401.598464][T16522] wg1 speed is unknown, defaulting to 1000 [ 401.666060][T16375] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 401.749920][T16375] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 401.972247][ T7110] wlan0: Trigger new scan to find an IBSS to join [ 402.086228][T16541] tipc: Enabling of bearer rejected, already enabled [ 402.761662][ T5182] Bluetooth: hci2: command tx timeout [ 402.810077][T16375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.845933][T16375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.887200][T16566] netlink: 'syz.3.3044': attribute type 13 has an invalid length. [ 402.887503][T16564] vlan0: entered promiscuous mode [ 402.897346][T16566] netlink: 'syz.3.3044': attribute type 17 has an invalid length. [ 402.913385][ T7102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.986181][T16572] __nla_validate_parse: 1 callbacks suppressed [ 402.986202][T16572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3045'. [ 403.003911][T16375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 403.153631][T16566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.172264][T16569] xfrm0: entered promiscuous mode [ 403.177545][T16569] xfrm0: entered allmulticast mode [ 403.207414][T16571] lo speed is unknown, defaulting to 1000 [ 403.226423][T16375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.310278][T16573] lo speed is unknown, defaulting to 1000 [ 403.359335][T16588] netlink: 'syz.0.3049': attribute type 1 has an invalid length. [ 403.458207][T16588] 8021q: adding VLAN 0 to HW filter on device bond12 [ 403.516567][T16592] vlan0: entered promiscuous mode [ 403.523162][T16592] bond12: entered promiscuous mode [ 403.529626][T16592] vlan0: entered allmulticast mode [ 403.535649][T16592] bond12: entered allmulticast mode [ 403.563801][T16588] bond12: (slave gretap2): making interface the new active one [ 403.572385][T16588] gretap2: entered promiscuous mode [ 403.578480][T16588] gretap2: entered allmulticast mode [ 403.588047][T16588] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 403.611624][T16571] wg1 speed is unknown, defaulting to 1000 [ 403.853249][T16584] lo speed is unknown, defaulting to 1000 [ 404.202116][T16375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.303679][T16375] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.328724][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.336011][ T9599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.379987][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.387246][ T9599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.506274][T16573] wg1 speed is unknown, defaulting to 1000 [ 404.607372][T16584] wg1 speed is unknown, defaulting to 1000 [ 404.851259][ T5182] Bluetooth: hci2: command tx timeout [ 404.920996][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.150360][T16375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.669631][T16619] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3054'. [ 405.962123][ T9599] wlan0: Trigger new scan to find an IBSS to join [ 405.988523][T16633] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 406.151514][T16375] veth0_vlan: entered promiscuous mode [ 406.170204][T16634] lo speed is unknown, defaulting to 1000 [ 406.176103][T16375] veth1_vlan: entered promiscuous mode [ 406.268435][T16375] veth0_macvtap: entered promiscuous mode [ 406.302925][T16375] veth1_macvtap: entered promiscuous mode [ 406.358809][T16375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.387386][T16375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.601565][ T7102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.627926][ T7102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.669274][T16634] wg1 speed is unknown, defaulting to 1000 [ 406.688709][ T7102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.855653][ T9599] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.991406][T16659] netlink: 'syz.0.3066': attribute type 13 has an invalid length. [ 407.027603][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.031936][T16659] netlink: 'syz.0.3066': attribute type 17 has an invalid length. [ 407.126919][T16659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.151323][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 407.203892][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.232380][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.278081][T16666] lo speed is unknown, defaulting to 1000 [ 407.291102][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 407.488807][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 407.601794][T16669] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3068'. [ 407.637651][ T9595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.663276][ T59] bond8: (slave wlan0): failed to get link speed/duplex [ 407.685769][ T6425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 407.705816][ T9595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.871359][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 407.898087][T16679] sctp: [Deprecated]: syz.3.3069 (pid 16679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.898087][T16679] Use struct sctp_sack_info instead [ 408.001988][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 408.090771][ T30] audit: type=1800 audit(1757742171.274:33): pid=16671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3068" name="memory.events" dev="tmpfs" ino=2953 res=0 errno=0 [ 408.131241][ T7102] bond8: (slave wlan0): failed to get link speed/duplex [ 408.241408][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 408.371927][ T59] bond8: (slave wlan0): failed to get link speed/duplex [ 408.399220][T16666] wg1 speed is unknown, defaulting to 1000 [ 408.953046][ T9606] bond8: (slave wlan0): failed to get link speed/duplex [ 409.611236][T16699] ipvlan2: entered promiscuous mode [ 410.027872][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.053652][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.067134][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.094873][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.113668][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.208232][T16702] lo speed is unknown, defaulting to 1000 [ 410.493169][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3079'. [ 410.573442][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3080'. [ 410.772201][T16721] sctp: [Deprecated]: syz.3.3081 (pid 16721) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.772201][T16721] Use struct sctp_sack_info instead [ 410.905582][T16702] wg1 speed is unknown, defaulting to 1000 [ 411.609753][T16702] chnl_net:caif_netlink_parms(): no params data found [ 411.663838][T16732] netlink: 'syz.3.3085': attribute type 1 has an invalid length. [ 411.690990][T16732] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3085'. [ 411.700066][T16732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3085'. [ 411.931938][T16702] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.941515][T16702] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.949505][T16702] bridge_slave_0: entered allmulticast mode [ 411.967271][T16702] bridge_slave_0: entered promiscuous mode [ 411.997560][T16702] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.016711][T16702] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.037348][T16702] bridge_slave_1: entered allmulticast mode [ 412.046930][T16702] bridge_slave_1: entered promiscuous mode [ 412.142097][T16702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.142727][T16745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3087'. [ 412.187807][T16702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.203502][T16747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3089'. [ 412.208220][ T5879] Bluetooth: hci1: command tx timeout [ 412.373163][T16702] team0: Port device team_slave_0 added [ 412.398271][T16702] team0: Port device team_slave_1 added [ 412.544075][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3091'. [ 412.703521][ T7110] net_ratelimit: 13 callbacks suppressed [ 412.703543][ T7110] bond8: (slave wlan0): failed to get link speed/duplex [ 412.762179][T16702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.789834][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.873903][T16702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.981216][T16702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.988472][T16702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.052951][T16765] sctp: [Deprecated]: syz.4.3094 (pid 16765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.052951][T16765] Use struct sctp_sack_info instead [ 413.096289][T16702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.114561][T16766] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3096'. [ 413.782406][T16702] hsr_slave_0: entered promiscuous mode [ 413.812775][T16702] hsr_slave_1: entered promiscuous mode [ 413.837597][T16702] debugfs: 'hsr0' already exists in 'hsr' [ 413.851970][T16702] Cannot create hsr debugfs directory [ 414.194756][T16785] sctp: [Deprecated]: syz.2.3099 (pid 16785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.194756][T16785] Use struct sctp_sack_info instead [ 414.291188][ T5879] Bluetooth: hci1: command tx timeout [ 415.199491][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 415.235080][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 415.282864][T16702] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.319974][T16702] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 415.366988][T16804] lo speed is unknown, defaulting to 1000 [ 415.374161][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 415.451407][T16809] sctp: [Deprecated]: syz.1.3106 (pid 16809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.451407][T16809] Use struct sctp_sack_info instead [ 415.589466][T16812] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3107'. [ 415.793795][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3108'. [ 415.946547][ T30] audit: type=1800 audit(1757742179.144:34): pid=16815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3107" name="memory.events" dev="tmpfs" ino=192 res=0 errno=0 [ 416.204451][T16702] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.215444][T16702] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 416.281745][T16804] wg1 speed is unknown, defaulting to 1000 [ 416.360678][ T5879] Bluetooth: hci1: command tx timeout [ 416.398586][T16702] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.423094][T16702] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 416.466835][T16830] netlink: 'syz.3.3110': attribute type 11 has an invalid length. [ 416.471425][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 416.494341][T16830] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3110'. [ 416.524912][T16702] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.545901][T16702] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 416.622114][T16834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3112'. [ 416.674875][ T7110] bond8: (slave wlan0): failed to get link speed/duplex [ 416.860969][ T7110] bond8: (slave wlan0): failed to get link speed/duplex [ 416.880885][T16702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.907907][T16702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.995731][T16702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.037332][T16702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.122703][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3115'. [ 417.222887][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 417.253333][T16853] netlink: 648 bytes leftover after parsing attributes in process `syz.4.3117'. [ 417.336182][T16861] sctp: [Deprecated]: syz.3.3118 (pid 16861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.336182][T16861] Use struct sctp_sack_info instead [ 417.509565][T16866] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3121'. [ 417.981896][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 418.067047][T16869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3122'. [ 418.095894][T16702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.203581][ T7102] bond8: (slave wlan0): failed to get link speed/duplex [ 418.224177][T16702] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.260078][ T9597] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.269461][ T9597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.307315][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 418.407023][ T9597] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.414281][ T9597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.455629][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 418.464144][ T5182] Bluetooth: hci1: command tx timeout [ 418.630604][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 418.776486][ T7102] bond8: (slave wlan0): failed to get link speed/duplex [ 418.830205][T16899] FAULT_INJECTION: forcing a failure. [ 418.830205][T16899] name failslab, interval 1, probability 0, space 0, times 0 [ 418.860277][T16899] CPU: 1 UID: 0 PID: 16899 Comm: syz.3.3132 Not tainted syzkaller #0 PREEMPT(full) [ 418.860305][T16899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.860321][T16899] Call Trace: [ 418.860330][T16899] [ 418.860339][T16899] dump_stack_lvl+0x189/0x250 [ 418.860372][T16899] ? __pfx____ratelimit+0x10/0x10 [ 418.860399][T16899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.860420][T16899] ? __pfx__printk+0x10/0x10 [ 418.860449][T16899] ? __pfx___might_resched+0x10/0x10 [ 418.860469][T16899] ? fs_reclaim_acquire+0x7d/0x100 [ 418.860493][T16899] should_fail_ex+0x414/0x560 [ 418.860528][T16899] should_failslab+0xa8/0x100 [ 418.860559][T16899] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 418.860587][T16899] ? __alloc_skb+0x112/0x2d0 [ 418.860608][T16899] ? __lock_acquire+0xab9/0xd20 [ 418.860640][T16899] __alloc_skb+0x112/0x2d0 [ 418.860668][T16899] alloc_skb_with_frags+0xca/0x890 [ 418.860696][T16899] ? ima_match_policy+0x10b/0x2150 [ 418.860733][T16899] sock_alloc_send_pskb+0x857/0x990 [ 418.860791][T16899] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 418.860825][T16899] ? dev_get_by_index+0x22/0x2e0 [ 418.860843][T16899] ? dev_get_by_index+0x22/0x2e0 [ 418.860868][T16899] packet_sendmsg+0x33a0/0x5080 [ 418.860898][T16899] ? __vec_find+0x150/0x420 [ 418.860945][T16899] ? __pfx___might_resched+0x10/0x10 [ 418.860962][T16899] ? __lock_acquire+0xab9/0xd20 [ 418.861003][T16899] ? __pfx_packet_sendmsg+0x10/0x10 [ 418.861017][T16899] ? aa_sk_perm+0x81e/0x950 [ 418.861053][T16899] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 418.861082][T16899] ? __lock_acquire+0xab9/0xd20 [ 418.861107][T16899] ? aa_sock_msg_perm+0xf1/0x1d0 [ 418.861129][T16899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.861151][T16899] ? __pfx_packet_sendmsg+0x10/0x10 [ 418.861171][T16899] __sock_sendmsg+0x219/0x270 [ 418.861195][T16899] ____sys_sendmsg+0x505/0x830 [ 418.861228][T16899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.861265][T16899] ? import_iovec+0x74/0xa0 [ 418.861295][T16899] ___sys_sendmsg+0x21f/0x2a0 [ 418.861324][T16899] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.861390][T16899] ? __fget_files+0x2a/0x420 [ 418.861407][T16899] ? __fget_files+0x3a0/0x420 [ 418.861436][T16899] __x64_sys_sendmsg+0x19b/0x260 [ 418.861465][T16899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.861502][T16899] ? __pfx_ksys_write+0x10/0x10 [ 418.861546][T16899] ? rcu_is_watching+0x15/0xb0 [ 418.861571][T16899] ? do_syscall_64+0xbe/0x3b0 [ 418.861599][T16899] do_syscall_64+0xfa/0x3b0 [ 418.861621][T16899] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.861642][T16899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.861661][T16899] ? clear_bhb_loop+0x60/0xb0 [ 418.861685][T16899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.861709][T16899] RIP: 0033:0x7fc49638eba9 [ 418.861727][T16899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.861742][T16899] RSP: 002b:00007fc4971fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.861768][T16899] RAX: ffffffffffffffda RBX: 00007fc4965d5fa0 RCX: 00007fc49638eba9 [ 418.861784][T16899] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 418.861796][T16899] RBP: 00007fc4971fc090 R08: 0000000000000000 R09: 0000000000000000 [ 418.861809][T16899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.861821][T16899] R13: 00007fc4965d6038 R14: 00007fc4965d5fa0 R15: 00007ffdb4d032b8 [ 418.861853][T16899] [ 419.228202][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 419.357345][ T7102] bond8: (slave wlan0): failed to get link speed/duplex [ 419.391142][T16906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3135'. [ 419.395327][T16702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.511445][ T4015] bond8: (slave wlan0): failed to get link speed/duplex [ 419.650616][ T4015] bond8: (slave wlan0): failed to get link speed/duplex [ 419.814750][T16918] lo speed is unknown, defaulting to 1000 [ 419.821066][T16702] veth0_vlan: entered promiscuous mode [ 419.831930][ T7102] bond8: (slave wlan0): failed to get link speed/duplex [ 419.851615][T16702] veth1_vlan: entered promiscuous mode [ 419.945043][T16702] veth0_macvtap: entered promiscuous mode [ 419.969575][T16702] veth1_macvtap: entered promiscuous mode [ 420.025306][T16702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.122724][T16702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.161132][ T7102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.183661][ T7102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.199251][T16918] wg1 speed is unknown, defaulting to 1000 [ 420.202155][ T7102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.224256][ T7102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.346479][T16930] FAULT_INJECTION: forcing a failure. [ 420.346479][T16930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.374687][T16930] CPU: 1 UID: 0 PID: 16930 Comm: syz.4.3143 Not tainted syzkaller #0 PREEMPT(full) [ 420.374717][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.374729][T16930] Call Trace: [ 420.374737][T16930] [ 420.374745][T16930] dump_stack_lvl+0x189/0x250 [ 420.374773][T16930] ? __pfx____ratelimit+0x10/0x10 [ 420.374805][T16930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.374828][T16930] ? __pfx__printk+0x10/0x10 [ 420.374868][T16930] should_fail_ex+0x414/0x560 [ 420.374902][T16930] _copy_to_user+0x31/0xb0 [ 420.374930][T16930] simple_read_from_buffer+0xe1/0x170 [ 420.374961][T16930] proc_fail_nth_read+0x1b3/0x220 [ 420.374983][T16930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.375007][T16930] ? rw_verify_area+0x2a6/0x4d0 [ 420.375028][T16930] ? __lock_acquire+0xab9/0xd20 [ 420.375050][T16930] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.375071][T16930] vfs_read+0x200/0xa30 [ 420.375093][T16930] ? fdget_pos+0x247/0x320 [ 420.375111][T16930] ? __pfx___mutex_lock+0x10/0x10 [ 420.375132][T16930] ? __pfx_vfs_read+0x10/0x10 [ 420.375155][T16930] ? __fget_files+0x2a/0x420 [ 420.375175][T16930] ? __fget_files+0x3a0/0x420 [ 420.375191][T16930] ? __fget_files+0x2a/0x420 [ 420.375217][T16930] ksys_read+0x145/0x250 [ 420.375240][T16930] ? __pfx_ksys_read+0x10/0x10 [ 420.375260][T16930] ? rcu_is_watching+0x15/0xb0 [ 420.375283][T16930] ? do_syscall_64+0xbe/0x3b0 [ 420.375309][T16930] do_syscall_64+0xfa/0x3b0 [ 420.375329][T16930] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.375348][T16930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.375366][T16930] ? clear_bhb_loop+0x60/0xb0 [ 420.375387][T16930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.375405][T16930] RIP: 0033:0x7f83db58d5bc [ 420.375422][T16930] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 420.375437][T16930] RSP: 002b:00007f83dc408030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.375455][T16930] RAX: ffffffffffffffda RBX: 00007f83db7d5fa0 RCX: 00007f83db58d5bc [ 420.375468][T16930] RDX: 000000000000000f RSI: 00007f83dc4080a0 RDI: 0000000000000004 [ 420.375478][T16930] RBP: 00007f83dc408090 R08: 0000000000000000 R09: 0000000000000000 [ 420.375490][T16930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.375501][T16930] R13: 00007f83db7d6038 R14: 00007f83db7d5fa0 R15: 00007fffadebb458 [ 420.375532][T16930] [ 420.638614][ T5182] Bluetooth: hci1: command 0x0405 tx timeout [ 420.801400][T16933] __nla_validate_parse: 2 callbacks suppressed [ 420.801421][T16933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3144'. [ 421.058225][T16940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3147'. [ 421.193359][T16944] netlink: 'syz.2.3149': attribute type 2 has an invalid length. [ 421.205152][ T4015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.225030][ T4015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.260026][T16944] þ: entered promiscuous mode [ 421.303675][T16945] netlink: 'syz.4.3148': attribute type 4 has an invalid length. [ 421.356298][T16947] netlink: 'syz.4.3148': attribute type 4 has an invalid length. [ 421.391031][ T4015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.399025][ T4015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.430320][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3151'. [ 421.466125][T16945] netlink: 'syz.4.3148': attribute type 4 has an invalid length. [ 421.489154][T16945] netlink: 'syz.4.3148': attribute type 4 has an invalid length. [ 421.561401][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 421.655386][T16955] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3152'. [ 421.795431][T16968] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3071'. [ 421.901828][T16968] batadv1: entered promiscuous mode [ 421.907352][T16968] batadv1: entered allmulticast mode [ 422.027349][T16982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3159'. [ 422.326811][T16994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3163'. [ 422.364709][T16997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'. [ 422.397588][T16992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.489334][T16992] bond0: (slave bond1): Enslaving as an active interface with an up link [ 422.521427][T17003] netlink: 'syz.0.3166': attribute type 13 has an invalid length. [ 422.576449][T17003] netlink: 'syz.0.3166': attribute type 17 has an invalid length. [ 422.647100][T17009] lo speed is unknown, defaulting to 1000 [ 423.004740][T17002] lo speed is unknown, defaulting to 1000 [ 423.082355][ T9595] net_ratelimit: 16 callbacks suppressed [ 423.082376][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 423.242340][ T7110] bond8: (slave wlan0): failed to get link speed/duplex [ 423.361808][ T7102] bond8: (slave wlan0): failed to get link speed/duplex [ 423.442107][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 423.506097][T17025] FAULT_INJECTION: forcing a failure. [ 423.506097][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.571295][T17025] CPU: 1 UID: 0 PID: 17025 Comm: syz.2.3173 Not tainted syzkaller #0 PREEMPT(full) [ 423.571323][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 423.571334][T17025] Call Trace: [ 423.571341][T17025] [ 423.571349][T17025] dump_stack_lvl+0x189/0x250 [ 423.571378][T17025] ? __pfx____ratelimit+0x10/0x10 [ 423.571398][T17025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.571420][T17025] ? __pfx__printk+0x10/0x10 [ 423.571460][T17025] should_fail_ex+0x414/0x560 [ 423.571496][T17025] _copy_to_user+0x31/0xb0 [ 423.571522][T17025] simple_read_from_buffer+0xe1/0x170 [ 423.571551][T17025] proc_fail_nth_read+0x1b3/0x220 [ 423.571577][T17025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.571605][T17025] ? rw_verify_area+0x2a6/0x4d0 [ 423.571627][T17025] ? __lock_acquire+0xab9/0xd20 [ 423.571650][T17025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.571670][T17025] vfs_read+0x200/0xa30 [ 423.571692][T17025] ? fdget_pos+0x247/0x320 [ 423.571712][T17025] ? __pfx___mutex_lock+0x10/0x10 [ 423.571736][T17025] ? __pfx_vfs_read+0x10/0x10 [ 423.571760][T17025] ? __fget_files+0x2a/0x420 [ 423.571782][T17025] ? __fget_files+0x3a0/0x420 [ 423.571799][T17025] ? __fget_files+0x2a/0x420 [ 423.571826][T17025] ksys_read+0x145/0x250 [ 423.571851][T17025] ? __pfx_ksys_read+0x10/0x10 [ 423.571872][T17025] ? rcu_is_watching+0x15/0xb0 [ 423.571894][T17025] ? do_syscall_64+0xbe/0x3b0 [ 423.571921][T17025] do_syscall_64+0xfa/0x3b0 [ 423.571942][T17025] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.571962][T17025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.571979][T17025] ? clear_bhb_loop+0x60/0xb0 [ 423.572000][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.572016][T17025] RIP: 0033:0x7f40e8f8d5bc [ 423.572033][T17025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.572048][T17025] RSP: 002b:00007f40e9ee8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.572068][T17025] RAX: ffffffffffffffda RBX: 00007f40e91d5fa0 RCX: 00007f40e8f8d5bc [ 423.572083][T17025] RDX: 000000000000000f RSI: 00007f40e9ee80a0 RDI: 0000000000000004 [ 423.572095][T17025] RBP: 00007f40e9ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 423.572108][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.572119][T17025] R13: 00007f40e91d6038 R14: 00007f40e91d5fa0 R15: 00007ffe243e0448 [ 423.572153][T17025] [ 423.866574][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.941759][ T59] bond8: (slave wlan0): failed to get link speed/duplex [ 423.955736][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.989675][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 424.027316][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 424.048673][T17031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3174'. [ 424.056010][ T4015] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.074312][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 424.082293][ T4015] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.109306][T17009] wg1 speed is unknown, defaulting to 1000 [ 424.111940][ T59] bond8: (slave wlan0): failed to get link speed/duplex [ 424.152337][ T4015] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.162980][ T4015] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.250679][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 424.293623][T17034] bond_slave_0: entered promiscuous mode [ 424.299534][T17034] bond_slave_1: entered promiscuous mode [ 424.331555][T17034] vlan3: entered promiscuous mode [ 424.351223][T17034] bond0: entered promiscuous mode [ 424.366832][T17034] bond1: entered promiscuous mode [ 424.537803][ T4015] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.590993][ T4015] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.642381][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 424.657184][T17002] wg1 speed is unknown, defaulting to 1000 [ 424.749449][T17027] lo speed is unknown, defaulting to 1000 [ 424.766212][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 424.807039][ T4015] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.827500][ T4015] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.916967][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 425.071028][ T7102] bond8: (slave wlan0): failed to get link speed/duplex [ 425.271186][ T7110] bond8: (slave wlan0): failed to get link speed/duplex [ 425.745401][ T4015] bond3 (unregistering): (slave ip6erspan0): Releasing active interface [ 425.860869][T17070] __nla_validate_parse: 2 callbacks suppressed [ 425.860890][T17070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3184'. [ 426.211566][ T5182] Bluetooth: hci0: command tx timeout [ 426.228082][ T4015] bond4 (unregistering): (slave vti0): Releasing backup interface [ 426.359411][ T4015] bond2 (unregistering): (slave gretap1): Releasing active interface [ 426.384551][ T4015] bond6 (unregistering): (slave gretap2): Releasing active interface [ 426.820708][ T4015] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 426.829325][ T4015] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 426.837494][ T4015] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 426.847183][ T4015] bond0 (unregistering): Released all slaves [ 426.863926][ T4015] bond1 (unregistering): Released all slaves [ 426.880103][ T4015] bond2 (unregistering): Released all slaves [ 427.059387][ T4015] bond3 (unregistering): Released all slaves [ 427.076679][ T4015] bond4 (unregistering): Released all slaves [ 427.092598][ T4015] bond5 (unregistering): Released all slaves [ 427.267536][ T4015] bond6 (unregistering): Released all slaves [ 427.280151][ T4015] bond7 (unregistering): Released all slaves [ 427.295971][T17027] wg1 speed is unknown, defaulting to 1000 [ 427.299933][T17063] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3183'. [ 427.350633][T17055] siw: device registration error -23 [ 427.546700][T17075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3185'. [ 427.584987][ T4015] tipc: Disabling bearer [ 427.684737][ T4015] tipc: Disabling bearer [ 427.720584][ T4015] tipc: Left network mode [ 427.794347][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3187'. [ 427.836762][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3187'. [ 427.918166][T17084] dummy0: entered promiscuous mode [ 427.928662][T17084] team0: entered promiscuous mode [ 427.949581][ T10] IPVS: starting estimator thread 0... [ 427.951563][T17090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3189'. [ 427.964187][T17084] team_slave_0: entered promiscuous mode [ 427.988816][T17084] team_slave_1: entered promiscuous mode [ 428.041610][T17091] IPVS: using max 28 ests per chain, 67200 per kthread [ 428.140970][ T9599] net_ratelimit: 3 callbacks suppressed [ 428.140992][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 428.446917][T17103] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3193'. [ 428.553322][T17106] siw: device registration error -23 [ 428.609418][T17105] bond_slave_0: entered promiscuous mode [ 428.615292][T17105] bond_slave_1: entered promiscuous mode [ 428.631446][T17105] vlan2: entered promiscuous mode [ 428.642513][T17105] bond0: entered promiscuous mode [ 428.791671][ T12] bond8: (slave wlan0): failed to get link speed/duplex [ 428.831462][T17110] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3195'. [ 428.992207][T17119] sctp: [Deprecated]: syz.0.3197 (pid 17119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.992207][T17119] Use struct sctp_sack_info instead [ 428.994645][T17027] chnl_net:caif_netlink_parms(): no params data found [ 429.043458][T17118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3198'. [ 429.096086][ T12] bond8: (slave wlan0): failed to get link speed/duplex [ 429.300862][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 429.328555][T17131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3201'. [ 429.468834][ T4015] hsr_slave_0: left promiscuous mode [ 429.702611][ T4015] team0 (unregistering): Port device batadv1 removed [ 431.128466][ T10] lo speed is unknown, defaulting to 1000 [ 431.137195][ T10] infiniband syz2: ib_query_port failed (-19) [ 431.160962][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 431.206593][T17149] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 431.227920][T17149] macvtap1: entered promiscuous mode [ 431.262079][T17027] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.269449][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.294039][T17027] bridge_slave_0: entered allmulticast mode [ 431.313271][T17027] bridge_slave_0: entered promiscuous mode [ 431.334899][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 431.357134][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.375733][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.410855][T17027] bridge_slave_1: entered allmulticast mode [ 431.419246][T17027] bridge_slave_1: entered promiscuous mode [ 431.489246][T17172] __nla_validate_parse: 6 callbacks suppressed [ 431.489267][T17172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3212'. [ 431.571716][T17176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3211'. [ 431.654340][T17027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.696753][T17182] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3214'. [ 431.710318][T17027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.792918][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 431.925724][T17186] sctp: [Deprecated]: syz.3.3215 (pid 17186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.925724][T17186] Use struct sctp_sack_info instead [ 431.951908][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 432.086514][T17027] team0: Port device team_slave_0 added [ 432.136125][T17027] team0: Port device team_slave_1 added [ 432.336996][ T4015] IPVS: stop unused estimator thread 0... [ 432.348901][T17027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.372615][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.415115][T17027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.442744][T17027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.472502][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.583362][T17027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.791645][T17203] netlink: 'syz.3.3220': attribute type 1 has an invalid length. [ 432.849741][T17027] hsr_slave_0: entered promiscuous mode [ 432.888570][T17027] hsr_slave_1: entered promiscuous mode [ 433.204195][T17215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3224'. [ 433.333288][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 433.651196][ T4015] bond8: (slave wlan0): failed to get link speed/duplex [ 433.794122][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 433.801386][T17239] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3233'. [ 433.849633][T17234] netlink: 'syz.3.3230': attribute type 1 has an invalid length. [ 433.859486][T17234] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3230'. [ 433.954390][T17240] wg1 speed is unknown, defaulting to 1000 [ 433.970642][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 434.089124][T17251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3236'. [ 434.101307][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.121766][ T9599] bond8: (slave wlan0): failed to get link speed/duplex [ 434.163115][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.184073][T17240] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 434.213628][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.250912][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.267453][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.307105][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.309503][T17027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.342407][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.342946][T17027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.380229][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.380492][T17027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.413794][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.414316][T17027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.458280][T17240] wg1 speed is unknown, defaulting to 1000 [ 434.490693][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 434.610644][ T9597] bond8: (slave wlan0): failed to get link speed/duplex [ 434.730682][ T4015] bond8: (slave wlan0): failed to get link speed/duplex [ 434.802717][T17027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.842899][T17274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 434.925387][T17027] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.988810][T17278] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.031381][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 435.089012][ T4015] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.096573][ T4015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.109951][T17284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3246'. [ 435.129618][ T4015] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.137576][ T4015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.631016][T17282] wg1 speed is unknown, defaulting to 1000 [ 435.664681][T17296] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3250'. [ 436.041038][ T5879] Bluetooth: hci1: command 0x0405 tx timeout [ 436.257781][T17027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.351909][T17027] veth0_vlan: entered promiscuous mode [ 436.365479][T17280] wg1 speed is unknown, defaulting to 1000 [ 436.374243][T17305] siw: device registration error -23 [ 436.397409][T17027] veth1_vlan: entered promiscuous mode [ 436.748196][T17317] tipc: Started in network mode [ 436.753590][T17317] tipc: Node identity be1b04acc936, cluster identity 4711 [ 436.764405][T17317] tipc: Enabled bearer , priority 0 [ 436.815279][T17317] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 436.835286][T17317] tipc: Resetting bearer [ 436.928042][T17316] tipc: Disabling bearer [ 436.953699][T17027] veth0_macvtap: entered promiscuous mode [ 437.047370][T17027] veth1_macvtap: entered promiscuous mode [ 437.134743][T17325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3258'. [ 437.169572][T17027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.233779][T17027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.297894][ T9597] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.317261][ T9597] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.350109][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3260'. [ 437.414666][T17338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3261'. [ 437.527891][ T9597] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.557873][ T9597] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.841926][ T9597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.849946][ T9597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.990306][ T7110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.019947][ T7110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.060021][T17359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3267'. [ 438.098991][T17359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3267'. [ 438.370781][ T9606] net_ratelimit: 17 callbacks suppressed [ 438.370800][ T9606] bond8: (slave wlan0): failed to get link speed/duplex [ 438.632147][T17379] netlink: 'syz.4.3271': attribute type 1 has an invalid length. [ 438.672182][T17390] tipc: Started in network mode [ 438.677406][T17390] tipc: Node identity 3281a6ada7f8, cluster identity 4711 [ 438.687003][T17390] tipc: Enabled bearer , priority 0 [ 438.718249][T17378] syzkaller0: entered promiscuous mode [ 438.745505][T17378] syzkaller0: entered allmulticast mode [ 438.784991][ T4015] bond8: (slave wlan0): failed to get link speed/duplex [ 438.819698][T17378] tipc: Resetting bearer [ 438.835180][T17377] tipc: Resetting bearer [ 438.955573][T17377] tipc: Disabling bearer [ 439.032435][ T4015] bond8: (slave wlan0): failed to get link speed/duplex [ 439.097893][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3277'. [ 439.180936][ T9595] bond8: (slave wlan0): failed to get link speed/duplex [ 439.290797][ T7110] bond8: (slave wlan0): failed to get link speed/duplex [ 439.622787][T17425] FAULT_INJECTION: forcing a failure. [ 439.622787][T17425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.637732][T17425] CPU: 0 UID: 0 PID: 17425 Comm: syz.2.3282 Not tainted syzkaller #0 PREEMPT(full) [ 439.637760][T17425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.637773][T17425] Call Trace: [ 439.637781][T17425] [ 439.637789][T17425] dump_stack_lvl+0x189/0x250 [ 439.637817][T17425] ? __pfx____ratelimit+0x10/0x10 [ 439.637841][T17425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.637863][T17425] ? __pfx__printk+0x10/0x10 [ 439.637900][T17425] should_fail_ex+0x414/0x560 [ 439.637935][T17425] strncpy_from_user+0x36/0x290 [ 439.637966][T17425] strncpy_from_user_nofault+0x72/0x150 [ 439.637993][T17425] bpf_bprintf_prepare+0xbbc/0x13d0 [ 439.638031][T17425] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 439.638062][T17425] ? bpf_trace_printk+0xc1/0x190 [ 439.638087][T17425] bpf_trace_printk+0xdb/0x190 [ 439.638105][T17425] ? __lock_acquire+0xab9/0xd20 [ 439.638135][T17425] ? __pfx_bpf_trace_printk+0x10/0x10 [ 439.638156][T17425] ? bpf_trace_run2+0x186/0x4b0 [ 439.638198][T17425] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 439.638215][T17425] bpf_trace_run2+0x284/0x4b0 [ 439.638238][T17425] ? __lock_acquire+0xab9/0xd20 [ 439.638263][T17425] ? bpf_trace_run2+0x186/0x4b0 [ 439.638290][T17425] ? __pfx_bpf_trace_run2+0x10/0x10 [ 439.638320][T17425] ? __bpf_trace_contention_begin+0xcd/0x130 [ 439.638347][T17425] __bpf_trace_contention_begin+0xdc/0x130 [ 439.638368][T17425] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 439.638387][T17425] ? pcpu_alloc_noprof+0x286/0x1720 [ 439.638417][T17425] ? pcpu_alloc_noprof+0x286/0x1720 [ 439.638446][T17425] ? __vmap_pages_range_noflush+0xe44/0xf30 [ 439.638561][T17425] trace_contention_begin+0xf4/0x120 [ 439.638588][T17425] __mutex_lock+0x198/0x1350 [ 439.638628][T17425] ? pcpu_alloc_noprof+0xd4d/0x1720 [ 439.638657][T17425] ? pcpu_alloc_noprof+0x286/0x1720 [ 439.638682][T17425] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 439.638706][T17425] ? __pfx___mutex_lock+0x10/0x10 [ 439.638728][T17425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 439.638759][T17425] ? pcpu_alloc_noprof+0xf85/0x1720 [ 439.638786][T17425] pcpu_alloc_noprof+0x286/0x1720 [ 439.638817][T17425] ? bpf_map_get_memcg+0x9f/0x580 [ 439.638847][T17425] bpf_map_alloc_percpu+0xbc/0x1b0 [ 439.638876][T17425] prealloc_init+0x225/0x630 [ 439.638913][T17425] htab_map_alloc+0x6ce/0xc70 [ 439.638943][T17425] map_create+0xaa0/0x14d0 [ 439.638969][T17425] ? security_bpf+0x7e/0x300 [ 439.638996][T17425] __sys_bpf+0x60f/0x870 [ 439.639019][T17425] ? __pfx___sys_bpf+0x10/0x10 [ 439.639053][T17425] ? ksys_write+0x22a/0x250 [ 439.639078][T17425] ? __pfx_ksys_write+0x10/0x10 [ 439.639108][T17425] __x64_sys_bpf+0x7c/0x90 [ 439.639129][T17425] do_syscall_64+0xfa/0x3b0 [ 439.639150][T17425] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.639185][T17425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.639203][T17425] ? clear_bhb_loop+0x60/0xb0 [ 439.639223][T17425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.639241][T17425] RIP: 0033:0x7f40e8f8eba9 [ 439.639258][T17425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.639273][T17425] RSP: 002b:00007f40e9ee8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.639293][T17425] RAX: ffffffffffffffda RBX: 00007f40e91d5fa0 RCX: 00007f40e8f8eba9 [ 439.639307][T17425] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 439.639318][T17425] RBP: 00007f40e9ee8090 R08: 0000000000000000 R09: 0000000000000000 [ 439.639329][T17425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.639340][T17425] R13: 00007f40e91d6038 R14: 00007f40e91d5fa0 R15: 00007ffe243e0448 [ 439.639367][T17425] [ 440.141309][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.432053][T17427] FAULT_INJECTION: forcing a failure. [ 440.432053][T17427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.487669][T17427] CPU: 0 UID: 0 PID: 17427 Comm: syz.4.3283 Not tainted syzkaller #0 PREEMPT(full) [ 440.487698][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.487711][T17427] Call Trace: [ 440.487718][T17427] [ 440.487726][T17427] dump_stack_lvl+0x189/0x250 [ 440.487755][T17427] ? __pfx____ratelimit+0x10/0x10 [ 440.487778][T17427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.487801][T17427] ? __pfx__printk+0x10/0x10 [ 440.487828][T17427] ? __might_fault+0xb0/0x130 [ 440.487867][T17427] should_fail_ex+0x414/0x560 [ 440.487901][T17427] _copy_from_iter+0x589/0x1790 [ 440.487933][T17427] ? rcu_is_watching+0x15/0xb0 [ 440.487958][T17427] ? __pfx__copy_from_iter+0x10/0x10 [ 440.487983][T17427] ? __build_skb_around+0x257/0x3e0 [ 440.488011][T17427] ? netlink_sendmsg+0x642/0xb30 [ 440.488033][T17427] ? skb_put+0x11b/0x210 [ 440.488061][T17427] netlink_sendmsg+0x6b2/0xb30 [ 440.488094][T17427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.488121][T17427] ? aa_sock_msg_perm+0xf1/0x1d0 [ 440.488144][T17427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.488166][T17427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.488191][T17427] __sock_sendmsg+0x219/0x270 [ 440.488214][T17427] ____sys_sendmsg+0x505/0x830 [ 440.488246][T17427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.488289][T17427] ? import_iovec+0x74/0xa0 [ 440.488318][T17427] ___sys_sendmsg+0x21f/0x2a0 [ 440.488347][T17427] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.488410][T17427] ? __fget_files+0x2a/0x420 [ 440.488427][T17427] ? __fget_files+0x3a0/0x420 [ 440.488456][T17427] __x64_sys_sendmsg+0x19b/0x260 [ 440.488485][T17427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.488522][T17427] ? __pfx_ksys_write+0x10/0x10 [ 440.488545][T17427] ? rcu_is_watching+0x15/0xb0 [ 440.488570][T17427] ? do_syscall_64+0xbe/0x3b0 [ 440.488598][T17427] do_syscall_64+0xfa/0x3b0 [ 440.488620][T17427] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.488642][T17427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.488661][T17427] ? clear_bhb_loop+0x60/0xb0 [ 440.488685][T17427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.488704][T17427] RIP: 0033:0x7f83db58eba9 [ 440.488722][T17427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.488739][T17427] RSP: 002b:00007f83dc408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.488760][T17427] RAX: ffffffffffffffda RBX: 00007f83db7d5fa0 RCX: 00007f83db58eba9 [ 440.488775][T17427] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000004 [ 440.488788][T17427] RBP: 00007f83dc408090 R08: 0000000000000000 R09: 0000000000000000 [ 440.488800][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.488812][T17427] R13: 00007f83db7d6038 R14: 00007f83db7d5fa0 R15: 00007fffadebb458 [ 440.488844][T17427] [ 440.803955][T17406] wg1 speed is unknown, defaulting to 1000 [ 441.117737][T17429] team0: No ports can be present during mode change [ 441.580989][T17444] netlink: 'syz.1.3288': attribute type 10 has an invalid length. [ 441.589288][T17444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3288'. [ 441.592052][T17400] wg1 speed is unknown, defaulting to 1000 [ 441.607879][T17432] siw: device registration error -23 [ 441.659646][T17444] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 442.050334][T17461] bond_slave_0: entered promiscuous mode [ 442.056256][T17461] bond_slave_1: entered promiscuous mode [ 442.069324][T17461] vlan2: entered promiscuous mode [ 442.076258][T17461] bond0: entered promiscuous mode [ 442.361228][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3296'. [ 442.377691][T17469] netlink: 'syz.1.3296': attribute type 20 has an invalid length. [ 442.442521][ T9597] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.496234][ T9597] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.511083][T17469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3296'. [ 442.564425][ T9597] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.593088][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3297'. [ 442.600480][ T9597] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.944219][T17504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3305'. [ 442.985841][T17495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.999538][T17495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.128836][T17495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.171717][T17512] Bluetooth: MGMT ver 1.23 [ 443.190643][T17495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.343304][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 443.354914][T17495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.358836][T17516] netlink: 'syz.2.3308': attribute type 1 has an invalid length. [ 443.375512][T17495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.511824][T17516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3308'. [ 443.542632][T17495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.563729][T17495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.602332][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3310'. [ 443.680645][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3310'. [ 443.973778][T17522] erspan0: entered promiscuous mode [ 444.011753][T17522] erspan0: left promiscuous mode [ 444.082584][ T7110] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.104484][ T7110] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.125256][ T7110] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.150598][ T7110] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.183481][ T9595] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.192371][ T9595] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.218683][ T9595] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.244669][ T9595] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.533861][ T10] IPVS: starting estimator thread 0... [ 444.637606][T17550] IPVS: using max 28 ests per chain, 67200 per kthread [ 445.181773][T17567] sock: sock_timestamping_bind_phc: sock not bind to device [ 445.238591][T17567] vti0: entered promiscuous mode [ 445.550215][T17582] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3331'. [ 445.731622][T17588] bond_slave_0: entered promiscuous mode [ 445.737384][T17588] bond_slave_1: entered promiscuous mode [ 445.771397][T17588] vlan3: entered promiscuous mode [ 445.785982][T17588] bond0: entered promiscuous mode [ 446.021006][ T30] audit: type=1800 audit(1757742209.224:35): pid=17589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3331" name="memory.events" dev="tmpfs" ino=474 res=0 errno=0 [ 446.434802][T17612] netlink: 'syz.1.3340': attribute type 10 has an invalid length. [ 446.474944][T17612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3340'. [ 446.514664][T17612] dummy0: entered promiscuous mode [ 446.542672][T17612] bridge0: port 3(dummy0) entered blocking state [ 446.589632][T17612] bridge0: port 3(dummy0) entered disabled state [ 446.615107][T17612] dummy0: entered allmulticast mode [ 446.643762][T17612] bridge0: port 3(dummy0) entered blocking state [ 446.650320][T17612] bridge0: port 3(dummy0) entered forwarding state [ 446.683059][T17619] tipc: Enabled bearer , priority 0 [ 446.757556][T17564] wg1 speed is unknown, defaulting to 1000 [ 446.768289][T17622] syzkaller0: entered promiscuous mode [ 446.790259][T17622] syzkaller0: entered allmulticast mode [ 446.855481][T17608] tipc: Resetting bearer [ 446.909477][T17614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.977312][T17606] tipc: Resetting bearer [ 447.021744][T17606] tipc: Disabling bearer [ 447.372183][T17647] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 447.407586][T17651] netlink: 'syz.2.3349': attribute type 1 has an invalid length. [ 447.561654][T17654] vlan2: entered promiscuous mode [ 447.852842][T17664] __nla_validate_parse: 1 callbacks suppressed [ 447.852862][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'. [ 447.914853][T17664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3355'. [ 447.940100][T17670] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3357'. [ 447.970888][T17670] FAULT_INJECTION: forcing a failure. [ 447.970888][T17670] name failslab, interval 1, probability 0, space 0, times 0 [ 448.002061][T17670] CPU: 1 UID: 0 PID: 17670 Comm: syz.4.3357 Not tainted syzkaller #0 PREEMPT(full) [ 448.002089][T17670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 448.002101][T17670] Call Trace: [ 448.002109][T17670] [ 448.002118][T17670] dump_stack_lvl+0x189/0x250 [ 448.002145][T17670] ? __pfx____ratelimit+0x10/0x10 [ 448.002167][T17670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.002189][T17670] ? __pfx__printk+0x10/0x10 [ 448.002218][T17670] ? __pfx___might_resched+0x10/0x10 [ 448.002237][T17670] ? fs_reclaim_acquire+0x7d/0x100 [ 448.002261][T17670] should_fail_ex+0x414/0x560 [ 448.002295][T17670] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 448.002319][T17670] should_failslab+0xa8/0x100 [ 448.002347][T17670] __kvmalloc_node_noprof+0x161/0x5f0 [ 448.002375][T17670] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 448.002407][T17670] __nf_hook_entries_try_shrink+0x316/0x6e0 [ 448.002447][T17670] __nf_unregister_net_hook+0x4f6/0x700 [ 448.002482][T17670] nf_unregister_net_hooks+0xcb/0x140 [ 448.002511][T17670] ip_vs_unregister_hooks+0xbc/0x120 [ 448.002539][T17670] ip_vs_unlink_service+0x40d/0xa30 [ 448.002580][T17670] ip_vs_genl_set_cmd+0x5a9/0x1470 [ 448.002630][T17670] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 448.002702][T17670] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 448.002742][T17670] genl_family_rcv_msg_doit+0x212/0x300 [ 448.002780][T17670] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 448.002824][T17670] ? bpf_lsm_capable+0x9/0x20 [ 448.002850][T17670] ? security_capable+0x7e/0x2e0 [ 448.002887][T17670] genl_rcv_msg+0x60e/0x790 [ 448.002923][T17670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.002951][T17670] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 448.002983][T17670] ? __asan_memcpy+0x40/0x70 [ 448.003004][T17670] ? __pfx_ref_tracker_free+0x10/0x10 [ 448.003034][T17670] netlink_rcv_skb+0x208/0x470 [ 448.003055][T17670] ? __lock_acquire+0xab9/0xd20 [ 448.003083][T17670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.003112][T17670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.003157][T17670] ? down_read+0x1ad/0x2e0 [ 448.003184][T17670] genl_rcv+0x28/0x40 [ 448.003208][T17670] netlink_unicast+0x82c/0x9e0 [ 448.003238][T17670] ? __pfx_netlink_unicast+0x10/0x10 [ 448.003260][T17670] ? netlink_sendmsg+0x642/0xb30 [ 448.003281][T17670] ? skb_put+0x11b/0x210 [ 448.003309][T17670] netlink_sendmsg+0x805/0xb30 [ 448.003343][T17670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.003369][T17670] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.003392][T17670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.003412][T17670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.003436][T17670] __sock_sendmsg+0x219/0x270 [ 448.003459][T17670] ____sys_sendmsg+0x505/0x830 [ 448.003490][T17670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.003527][T17670] ? import_iovec+0x74/0xa0 [ 448.003556][T17670] ___sys_sendmsg+0x21f/0x2a0 [ 448.003585][T17670] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.003658][T17670] ? __fget_files+0x2a/0x420 [ 448.003675][T17670] ? __fget_files+0x3a0/0x420 [ 448.003705][T17670] __x64_sys_sendmsg+0x19b/0x260 [ 448.003732][T17670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.003769][T17670] ? __pfx_ksys_write+0x10/0x10 [ 448.003792][T17670] ? rcu_is_watching+0x15/0xb0 [ 448.003818][T17670] ? do_syscall_64+0xbe/0x3b0 [ 448.003848][T17670] do_syscall_64+0xfa/0x3b0 [ 448.003869][T17670] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.003890][T17670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.003910][T17670] ? clear_bhb_loop+0x60/0xb0 [ 448.003934][T17670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.003953][T17670] RIP: 0033:0x7f83db58eba9 [ 448.003971][T17670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.003988][T17670] RSP: 002b:00007f83dc408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.004008][T17670] RAX: ffffffffffffffda RBX: 00007f83db7d5fa0 RCX: 00007f83db58eba9 [ 448.004022][T17670] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000004 [ 448.004035][T17670] RBP: 00007f83dc408090 R08: 0000000000000000 R09: 0000000000000000 [ 448.004047][T17670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.004059][T17670] R13: 00007f83db7d6038 R14: 00007f83db7d5fa0 R15: 00007fffadebb458 [ 448.004092][T17670] [ 448.533388][T17675] siw: device registration error -23 [ 448.573278][ C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 448.584082][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3360'. [ 448.664807][T17676] bond1: (slave vxcan1): Releasing backup interface [ 448.671866][T17676] vxcan1 (unregistering): left promiscuous mode [ 448.679617][T17676] bond1: Destroying bond [ 448.688070][T17680] netlink: 'syz.0.3358': attribute type 10 has an invalid length. [ 449.404820][T17676] bond1 (unregistering): Released all slaves [ 449.548086][T17680] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.559542][T17680] bond0: (slave team0): Enslaving as an active interface with an up link [ 449.582041][T17681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3358'. [ 449.870813][T17698] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3364'. [ 450.010338][T17701] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3366'. [ 450.057733][T17705] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 450.323091][T17721] netlink: 'syz.4.3371': attribute type 3 has an invalid length. [ 450.331558][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3371'. [ 450.411313][T17722] netlink: 'syz.4.3371': attribute type 3 has an invalid length. [ 450.425740][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3371'. [ 450.454806][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3372'. [ 450.625142][ T6427] IPVS: starting estimator thread 0... [ 450.731669][T17731] IPVS: using max 29 ests per chain, 69600 per kthread [ 451.016239][T17745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.063595][T17747] netlink: 'syz.2.3381': attribute type 13 has an invalid length. [ 451.686655][T17747] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.694454][T17747] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.092812][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.123400][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.471722][ T7110] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.530729][ T7110] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.539726][ T7110] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.605656][ T7110] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.848463][T17789] : entered promiscuous mode [ 453.350125][T17770] wg1 speed is unknown, defaulting to 1000 [ 453.570609][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 453.638606][ T30] audit: type=1800 audit(1757742216.824:36): pid=17822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3400" name="memory.events" dev="tmpfs" ino=186 res=0 errno=0 [ 453.815663][T17825] __nla_validate_parse: 5 callbacks suppressed [ 453.815687][T17825] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3402'. [ 454.332677][T17822] wg1 speed is unknown, defaulting to 1000 [ 454.353419][T17841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3408'. [ 454.533916][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3410'. [ 454.638930][T17851] batadv0: entered promiscuous mode [ 454.645218][T17851] macsec1: entered promiscuous mode [ 454.657946][T17851] batadv0: left promiscuous mode [ 454.674714][T17856] sctp: [Deprecated]: syz.1.3411 (pid 17856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.674714][T17856] Use struct sctp_sack_info instead [ 454.881637][ T6444] IPVS: starting estimator thread 0... [ 454.980515][T17861] IPVS: using max 29 ests per chain, 69600 per kthread [ 455.034641][T17868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3415'. [ 455.649520][T17875] macvtap1: entered allmulticast mode [ 455.679068][T17875] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 455.680974][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3421'. [ 455.713243][T17889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3421'. [ 455.731195][T17875] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 455.757543][T17893] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3420'. [ 455.771045][T17894] netlink: 'syz.0.3419': attribute type 1 has an invalid length. [ 455.802983][T17894] netlink: 'syz.0.3419': attribute type 1 has an invalid length. [ 455.812784][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 455.827744][T17894] block nbd4: shutting down sockets [ 455.867752][T17893] 0ªX¹¦À: renamed from caif0 [ 455.877886][T17893] 0ªX¹¦À: entered allmulticast mode [ 455.885182][T17893] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 455.950598][T17882] wg1 speed is unknown, defaulting to 1000 [ 456.120843][T17903] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3423'. [ 456.134088][T17903] netem: invalid attributes len -16 [ 456.139588][T17903] netem: change failed [ 456.336463][T17907] sctp: [Deprecated]: syz.4.3424 (pid 17907) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.336463][T17907] Use struct sctp_sack_info instead [ 456.433329][T17871] wg1 speed is unknown, defaulting to 1000 [ 456.441274][T17910] netlink: 'syz.4.3425': attribute type 15 has an invalid length. [ 456.599807][T17916] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3427'. [ 456.943361][T17922] syzkaller1: entered promiscuous mode [ 456.950251][T17922] syzkaller1: entered allmulticast mode [ 457.454331][T17944] sctp: [Deprecated]: syz.0.3435 (pid 17944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.454331][T17944] Use struct sctp_sack_info instead [ 458.102956][T17984] sctp: [Deprecated]: syz.2.3450 (pid 17984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.102956][T17984] Use struct sctp_sack_info instead [ 458.336117][T17992] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 458.384908][T17992] NCSI netlink: No device for ifindex 0 [ 458.392661][T17989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.433442][T17989] bridge0: port 3(bond1) entered blocking state [ 458.461338][T17989] bridge0: port 3(bond1) entered disabled state [ 458.468934][T17989] bond1: entered allmulticast mode [ 458.514823][T17989] bond1: entered promiscuous mode [ 458.554243][T17989] bridge0: port 3(bond1) entered blocking state [ 458.563435][T17989] bridge0: port 3(bond1) entered forwarding state [ 458.651006][ T30] audit: type=1800 audit(1757742221.834:37): pid=17985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3447" name="memory.events" dev="tmpfs" ino=577 res=0 errno=0 [ 458.939695][ T4015] bridge0: port 3(bond1) entered disabled state [ 458.953204][T17999] __nla_validate_parse: 4 callbacks suppressed [ 458.953224][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 459.135402][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'. [ 459.145622][T18002] netlink: 'syz.0.3453': attribute type 5 has an invalid length. [ 459.180792][T18002] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3453'. [ 459.341775][T18001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.477910][T18002] geneve2: entered promiscuous mode [ 459.500678][T18002] geneve2: entered allmulticast mode [ 459.531146][T18010] tipc: Started in network mode [ 459.538559][T18010] tipc: Node identity 8ad88b8abc45, cluster identity 4711 [ 459.552572][T18010] tipc: Enabled bearer , priority 0 [ 459.592094][T18001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.655519][ T4015] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 459.664529][ T4015] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 459.679709][T17981] wg1 speed is unknown, defaulting to 1000 [ 459.681919][T18012] syzkaller0: entered promiscuous mode [ 459.700055][T18012] syzkaller0: entered allmulticast mode [ 459.780132][T18004] syzkaller0: mtu less than device minimum [ 459.846175][T18003] tipc: Resetting bearer [ 459.909283][T18003] tipc: Disabling bearer [ 459.935989][T18016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3457'. [ 460.036916][T17988] wg1 speed is unknown, defaulting to 1000 [ 460.153601][T18021] tipc: Enabling of bearer rejected, failed to enable media [ 460.339581][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3458'. [ 460.370243][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3458'. [ 460.838437][T18022] wg1 speed is unknown, defaulting to 1000 [ 460.962058][T18030] sctp: [Deprecated]: syz.3.3461 (pid 18030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.962058][T18030] Use struct sctp_sack_info instead [ 461.146087][T18019] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 461.166964][T18019] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 461.343436][T18019] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 461.357261][T18019] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 461.431184][T18001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.444487][T18001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 461.467354][T18034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3462'. [ 461.528143][T18019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 461.542199][T18019] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 461.633227][T18001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.646960][T18001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 461.664829][T18019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 461.671262][T18019] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 461.869655][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 461.889870][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.079849][ T9595] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 462.096540][ T9595] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.140616][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'. [ 462.200899][ T9595] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 462.209210][ T9595] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.251345][ T9595] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 462.277335][ T9595] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.653025][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 462.932473][T18071] sctp: [Deprecated]: syz.0.3472 (pid 18071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.932473][T18071] Use struct sctp_sack_info instead [ 463.055641][T18073] netlink: 'syz.2.3473': attribute type 1 has an invalid length. [ 463.094192][T18073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3473'. [ 464.080945][T18109] 8021q: VLANs not supported on syzkaller1 [ 464.156926][T18117] netlink: 'syz.4.3484': attribute type 1 has an invalid length. [ 464.196672][T18119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3485'. [ 464.244664][T18121] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 464.265178][T18121] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 464.339104][T18119] vlan4: entered promiscuous mode [ 464.392676][T18117] gretap1: entered promiscuous mode [ 464.403839][T18117] bond1: (slave gretap1): making interface the new active one [ 464.415620][T18117] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 464.606306][T18137] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3491'. [ 464.609324][T18138] sctp: [Deprecated]: syz.0.3490 (pid 18138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.609324][T18138] Use struct sctp_sack_info instead [ 464.694660][T18139] siw: device registration error -23 [ 464.775639][T18141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3492'. [ 464.826691][T18141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3492'. [ 464.907909][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'. [ 465.056962][T18149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3496'. [ 465.305764][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3500'. [ 465.453136][T18170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3503'. [ 465.516965][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3505'. [ 465.527209][T18168] unsupported nla_type 52263 [ 465.569218][T18170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3503'. [ 465.714004][T18181] netlink: 'syz.2.3507': attribute type 4 has an invalid length. [ 466.494396][T18209] sctp: [Deprecated]: syz.2.3516 (pid 18209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 466.494396][T18209] Use struct sctp_sack_info instead [ 466.778304][T18219] netlink: 'syz.4.3521': attribute type 13 has an invalid length. [ 466.786387][T18219] netlink: 'syz.4.3521': attribute type 17 has an invalid length. [ 467.027928][T18219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.066010][T18222] vlan4: entered promiscuous mode [ 467.085734][T18221] xfrm0: entered promiscuous mode [ 467.109252][T18221] xfrm0: entered allmulticast mode [ 467.867704][T18223] wg1 speed is unknown, defaulting to 1000 [ 468.315420][T18262] sctp: [Deprecated]: syz.0.3536 (pid 18262) Use of int in max_burst socket option. [ 468.315420][T18262] Use struct sctp_assoc_value instead [ 468.527816][T18267] sctp: [Deprecated]: syz.0.3538 (pid 18267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.527816][T18267] Use struct sctp_sack_info instead [ 468.798840][T18251] wg1 speed is unknown, defaulting to 1000 [ 468.864388][T18247] wg1 speed is unknown, defaulting to 1000 [ 468.969378][T18249] wg1 speed is unknown, defaulting to 1000 [ 469.017025][T18250] wg1 speed is unknown, defaulting to 1000 [ 469.465690][T18273] __nla_validate_parse: 6 callbacks suppressed [ 469.465712][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3539'. [ 469.798469][T18277] vlan5: entered promiscuous mode [ 469.811110][T18277] macvtap0: entered promiscuous mode [ 469.982626][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3543'. [ 470.150022][T18289] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3544'. [ 470.321780][T18297] siw: device registration error -23 [ 470.558335][T18304] netlink: 'syz.4.3547': attribute type 4 has an invalid length. [ 470.605477][T18311] sctp: [Deprecated]: syz.3.3549 (pid 18311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.605477][T18311] Use struct sctp_sack_info instead [ 470.614092][T18313] netlink: 'syz.4.3547': attribute type 4 has an invalid length. [ 470.644248][T18309] bridge0: port 3(dummy0) entered disabled state [ 470.650880][T18309] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.658336][T18309] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.807555][T18309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.817503][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 470.839723][T18309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.026289][ T9606] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.055777][ T9606] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.074137][ T9606] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.090187][ T9606] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.123412][ T9606] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.144575][ T9606] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.151835][T18321] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3551'. [ 471.204633][ T9606] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.224863][ T9606] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.285740][T18325] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20001 [ 471.445521][T18329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3554'. [ 471.592255][T18335] !: renamed from dummy0 (while UP) [ 471.642011][T18337] macsec1: entered promiscuous mode [ 471.662015][T18337] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 471.675806][T18337] macsec1: entered allmulticast mode [ 471.685888][T18337] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 471.797295][T18315] wg1 speed is unknown, defaulting to 1000 [ 471.923364][T18344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3557'. [ 471.960018][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 471.995704][T18344] netlink: 'syz.2.3557': attribute type 5 has an invalid length. [ 472.037581][T18344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3557'. [ 472.095713][T18344] geneve2: entered promiscuous mode [ 472.134013][T18344] geneve2: entered allmulticast mode [ 472.151194][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 472.166555][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 472.194588][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 472.234068][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 472.384477][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 472.558873][T18367] tipc: Enabling of bearer rejected, failed to enable media [ 472.700616][T18375] netlink: 'syz.1.3563': attribute type 1 has an invalid length. [ 473.010691][T18381] vlan2: entered promiscuous mode [ 473.058387][T18386] sctp: [Deprecated]: syz.0.3566 (pid 18386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.058387][T18386] Use struct sctp_sack_info instead [ 473.306276][T18341] wg1 speed is unknown, defaulting to 1000 [ 474.160066][T18370] wg1 speed is unknown, defaulting to 1000 [ 474.245551][T18404] netlink: 'syz.4.3572': attribute type 1 has an invalid length. [ 474.385788][T18404] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.509666][T18406] veth3: entered promiscuous mode [ 474.558285][T18406] bond2: (slave veth3): Enslaving as an active interface with an up link [ 474.894922][T18419] __nla_validate_parse: 2 callbacks suppressed [ 474.894942][T18419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3575'. [ 475.079465][T18423] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 475.708460][T18444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.793594][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3584'. [ 475.949230][T18450] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 475.971813][T18450] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.073297][T18450] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.150526][T18450] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.240873][T18460] !: renamed from dummy0 (while UP) [ 476.284908][T18450] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.336058][T18450] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.582721][T18450] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.638187][T18450] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.691161][T18471] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3590'. [ 477.060294][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 477.104796][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 477.160313][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 477.230687][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 477.453330][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 477.490652][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.520712][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 477.545125][ T30] audit: type=1800 audit(1757742240.744:38): pid=18471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3590" name="memory.events" dev="tmpfs" ino=730 res=0 errno=0 [ 477.590148][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.657124][T18492] vlan2: entered promiscuous mode [ 477.662886][T18492] ip6gretap0: entered promiscuous mode [ 477.786938][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 477.820926][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.898326][ T9599] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 477.924665][ T9599] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 477.939496][T18466] wg1 speed is unknown, defaulting to 1000 [ 477.948162][T18499] netlink: 'syz.3.3595': attribute type 1 has an invalid length. [ 478.061626][T18499] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3595'. [ 478.294072][T18514] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3599'. [ 478.319401][T18514] ipvlan2: entered promiscuous mode [ 478.341013][T18514] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 478.381537][T18518] netlink: 'syz.1.3601': attribute type 2 has an invalid length. [ 478.409824][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3601'. [ 478.790880][T18528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3605'. [ 479.351166][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3612'. [ 479.558709][T18558] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3615'. [ 479.754220][T18561] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 479.767604][T18561] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 480.486242][T18551] wg1 speed is unknown, defaulting to 1000 [ 480.523727][T18571] netlink: 468 bytes leftover after parsing attributes in process `syz.1.3620'. [ 480.851475][T18579] syzkaller1: entered promiscuous mode [ 480.857431][T18579] syzkaller1: entered allmulticast mode [ 481.213324][T18583] netlink: 'syz.3.3625': attribute type 13 has an invalid length. [ 481.255741][T18583] netlink: 'syz.3.3625': attribute type 17 has an invalid length. [ 481.286442][T18583] 0ªX¹¦À: left allmulticast mode [ 481.294337][T18583] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 481.421705][T18575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3622'. [ 481.652437][T18591] netlink: 'syz.4.3627': attribute type 4 has an invalid length. [ 482.091240][T18591] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.099333][T18591] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.537812][T18591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.555445][T18591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.805691][T18583] wg1 speed is unknown, defaulting to 1000 [ 482.822450][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.862884][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.081640][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.123433][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.308097][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3634'. [ 483.799614][T18609] wg1 speed is unknown, defaulting to 1000 [ 484.057153][T18636] netlink: 'syz.4.3638': attribute type 1 has an invalid length. [ 484.065391][T18636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3638'. [ 484.129632][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3638'. [ 484.636107][T18650] netlink: 'syz.4.3643': attribute type 4 has an invalid length. [ 485.596772][T18684] netlink: 'syz.3.3654': attribute type 13 has an invalid length. [ 485.621699][T18684] netlink: 'syz.3.3654': attribute type 17 has an invalid length. [ 485.741534][T18684] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 485.766933][T18688] netlink: 'syz.1.3655': attribute type 4 has an invalid length. [ 485.862504][T18693] netlink: 'syz.0.3656': attribute type 10 has an invalid length. [ 485.915528][T18695] netlink: 'syz.1.3658': attribute type 6 has an invalid length. [ 485.968200][T18687] wg1 speed is unknown, defaulting to 1000 [ 486.046788][T18695] netlink: 'syz.1.3658': attribute type 12 has an invalid length. [ 486.083327][T18695] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3658'. [ 486.300034][T18707] netlink: 'syz.3.3661': attribute type 13 has an invalid length. [ 486.308255][T18707] netlink: 'syz.3.3661': attribute type 17 has an invalid length. [ 486.344248][T18707] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 486.538941][T18709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.568446][T18709] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 486.868135][T18724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3666'. [ 487.073822][T18707] wg1 speed is unknown, defaulting to 1000 [ 487.273590][T18736] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.293871][T18736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.367299][T18743] FAULT_INJECTION: forcing a failure. [ 487.367299][T18743] name failslab, interval 1, probability 0, space 0, times 0 [ 487.381857][T18743] CPU: 0 UID: 0 PID: 18743 Comm: syz.2.3673 Not tainted syzkaller #0 PREEMPT(full) [ 487.381912][T18743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.381925][T18743] Call Trace: [ 487.381933][T18743] [ 487.381942][T18743] dump_stack_lvl+0x189/0x250 [ 487.381975][T18743] ? __pfx____ratelimit+0x10/0x10 [ 487.381998][T18743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.382022][T18743] ? __pfx__printk+0x10/0x10 [ 487.382065][T18743] should_fail_ex+0x414/0x560 [ 487.382100][T18743] should_failslab+0xa8/0x100 [ 487.382130][T18743] __kmalloc_cache_noprof+0x70/0x3d0 [ 487.382157][T18743] ? sctp_add_bind_addr+0x8c/0x370 [ 487.382185][T18743] sctp_add_bind_addr+0x8c/0x370 [ 487.382212][T18743] sctp_copy_local_addr_list+0x30b/0x4e0 [ 487.382240][T18743] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 487.382263][T18743] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 487.382288][T18743] ? sctp_v6_is_any+0x64/0x80 [ 487.382314][T18743] ? sctp_copy_one_addr+0x93/0x360 [ 487.382341][T18743] sctp_bind_addr_copy+0xb3/0x3c0 [ 487.382365][T18743] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 487.382389][T18743] sctp_connect_new_asoc+0x2e0/0x690 [ 487.382420][T18743] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 487.382446][T18743] ? __local_bh_enable_ip+0x12d/0x1c0 [ 487.382475][T18743] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 487.382497][T18743] ? security_sctp_bind_connect+0x7e/0x2e0 [ 487.382527][T18743] sctp_sendmsg+0x155c/0x2810 [ 487.382568][T18743] ? __pfx_sctp_sendmsg+0x10/0x10 [ 487.382599][T18743] ? aa_sk_perm+0x81e/0x950 [ 487.382634][T18743] ? __pfx_aa_sk_perm+0x10/0x10 [ 487.382668][T18743] ? sock_rps_record_flow+0x19/0x410 [ 487.382692][T18743] ? inet_sendmsg+0x2f4/0x370 [ 487.382716][T18743] __sock_sendmsg+0x19c/0x270 [ 487.382740][T18743] __sys_sendto+0x3bd/0x520 [ 487.382767][T18743] ? __pfx___sys_sendto+0x10/0x10 [ 487.382788][T18743] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 487.382828][T18743] ? __fget_files+0x3a0/0x420 [ 487.382858][T18743] ? ksys_write+0x22a/0x250 [ 487.382886][T18743] ? __pfx_ksys_write+0x10/0x10 [ 487.382914][T18743] ? rcu_is_watching+0x15/0xb0 [ 487.382940][T18743] __x64_sys_sendto+0xde/0x100 [ 487.382967][T18743] do_syscall_64+0xfa/0x3b0 [ 487.382990][T18743] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.383012][T18743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.383031][T18743] ? clear_bhb_loop+0x60/0xb0 [ 487.383055][T18743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.383074][T18743] RIP: 0033:0x7f40e8f8eba9 [ 487.383092][T18743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.383110][T18743] RSP: 002b:00007f40e9ee8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.383131][T18743] RAX: ffffffffffffffda RBX: 00007f40e91d5fa0 RCX: 00007f40e8f8eba9 [ 487.383146][T18743] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 487.383159][T18743] RBP: 00007f40e9ee8090 R08: 000020000005ffe4 R09: 000000000000001c [ 487.383172][T18743] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 487.383184][T18743] R13: 00007f40e91d6038 R14: 00007f40e91d5fa0 R15: 00007ffe243e0448 [ 487.383217][T18743] [ 487.768908][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3669'. [ 487.827436][T18740] hsr_slave_0: left promiscuous mode [ 487.861110][T18740] hsr_slave_1: left promiscuous mode [ 487.863516][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3675'. [ 487.993745][T18753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3675'. [ 488.283274][T18763] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3679'. [ 488.331179][T18763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3679'. [ 488.554738][T18771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3683'. [ 488.562473][T18768] IPVS: Error connecting to the multicast addr [ 488.671385][T18774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3683'. [ 488.697890][T18772] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 488.903413][T18736] wg1 speed is unknown, defaulting to 1000 [ 489.175792][T18780] tipc: Enabling of bearer rejected, failed to enable media [ 489.556739][T18799] pim6reg1: entered promiscuous mode [ 489.566208][T18799] pim6reg1: entered allmulticast mode [ 489.648144][T18806] netlink: 356 bytes leftover after parsing attributes in process `syz.3.3692'. [ 489.748680][T18809] validate_nla: 4 callbacks suppressed [ 489.748700][T18809] netlink: 'syz.2.3693': attribute type 4 has an invalid length. [ 490.582877][T18806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.613016][T18806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.642408][T18806] xfrm0: left promiscuous mode [ 490.647353][T18806] xfrm0: left allmulticast mode [ 490.804998][T18806] geneve2: left promiscuous mode [ 490.846840][T18806] vlan4: left promiscuous mode [ 490.895016][ T9599] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.934884][ T9599] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.000611][ T9599] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.039405][ T9599] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.129374][T18826] __nla_validate_parse: 4 callbacks suppressed [ 491.129394][T18826] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3698'. [ 491.133725][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3701'. [ 491.216350][T18824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3697'. [ 491.226722][T18838] netlink: 'syz.0.3699': attribute type 6 has an invalid length. [ 491.621170][ T30] audit: type=1800 audit(1757742254.814:39): pid=18834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3698" name="memory.events" dev="tmpfs" ino=847 res=0 errno=0 [ 491.668964][T18855] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 491.679032][T18853] netlink: 'syz.4.3706': attribute type 13 has an invalid length. [ 491.696365][T18853] netlink: 'syz.4.3706': attribute type 17 has an invalid length. [ 491.745897][T18860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3709'. [ 491.759473][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3709'. [ 491.773077][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 492.043186][T18853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.065007][T18861] bond0: (slave gretap0): Error: Device type is different from other slaves [ 492.079203][T18869] netlink: 'syz.2.3710': attribute type 4 has an invalid length. [ 492.435330][T18862] wg1 speed is unknown, defaulting to 1000 [ 492.651177][T18896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3719'. [ 492.844913][T18909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3720'. [ 492.950824][T18914] IPVS: Error connecting to the multicast addr [ 493.177594][T18919] syzkaller1: entered promiscuous mode [ 493.191050][T18919] syzkaller1: entered allmulticast mode [ 493.197084][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 493.270635][T18924] openvswitch: netlink: Flow actions attr not present in new flow. [ 493.996029][T18958] netlink: 'syz.3.3738': attribute type 3 has an invalid length. [ 494.013325][T18958] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3738'. [ 494.153161][T18969] sctp: [Deprecated]: syz.1.3740 (pid 18969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.153161][T18969] Use struct sctp_sack_info instead [ 494.181152][T18969] FAULT_INJECTION: forcing a failure. [ 494.181152][T18969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.216720][T18969] CPU: 1 UID: 0 PID: 18969 Comm: syz.1.3740 Not tainted syzkaller #0 PREEMPT(full) [ 494.216750][T18969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.216762][T18969] Call Trace: [ 494.216770][T18969] [ 494.216780][T18969] dump_stack_lvl+0x189/0x250 [ 494.216810][T18969] ? __pfx____ratelimit+0x10/0x10 [ 494.216834][T18969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.216857][T18969] ? __pfx__printk+0x10/0x10 [ 494.216898][T18969] should_fail_ex+0x414/0x560 [ 494.216932][T18969] _copy_to_user+0x31/0xb0 [ 494.216962][T18969] simple_read_from_buffer+0xe1/0x170 [ 494.216993][T18969] proc_fail_nth_read+0x1b3/0x220 [ 494.217012][T18969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.217038][T18969] ? rw_verify_area+0x2a6/0x4d0 [ 494.217061][T18969] ? __lock_acquire+0xab9/0xd20 [ 494.217086][T18969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.217109][T18969] vfs_read+0x200/0xa30 [ 494.217134][T18969] ? fdget_pos+0x247/0x320 [ 494.217156][T18969] ? __pfx___mutex_lock+0x10/0x10 [ 494.217181][T18969] ? __pfx_vfs_read+0x10/0x10 [ 494.217208][T18969] ? __fget_files+0x2a/0x420 [ 494.217231][T18969] ? __fget_files+0x3a0/0x420 [ 494.217247][T18969] ? __fget_files+0x2a/0x420 [ 494.217272][T18969] ksys_read+0x145/0x250 [ 494.217300][T18969] ? __pfx_ksys_read+0x10/0x10 [ 494.217323][T18969] ? rcu_is_watching+0x15/0xb0 [ 494.217357][T18969] ? do_syscall_64+0xbe/0x3b0 [ 494.217385][T18969] do_syscall_64+0xfa/0x3b0 [ 494.217408][T18969] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.217430][T18969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.217449][T18969] ? clear_bhb_loop+0x60/0xb0 [ 494.217474][T18969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.217493][T18969] RIP: 0033:0x7fd6ebf8d5bc [ 494.217510][T18969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 494.217528][T18969] RSP: 002b:00007fd6ea1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.217549][T18969] RAX: ffffffffffffffda RBX: 00007fd6ec1d6090 RCX: 00007fd6ebf8d5bc [ 494.217562][T18969] RDX: 000000000000000f RSI: 00007fd6ea1f60a0 RDI: 0000000000000006 [ 494.217575][T18969] RBP: 00007fd6ea1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 494.217588][T18969] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 494.217600][T18969] R13: 00007fd6ec1d6128 R14: 00007fd6ec1d6090 R15: 00007ffe77365ad8 [ 494.217634][T18969] [ 494.552956][T18971] 8021q: VLANs not supported on ipvlan1 [ 494.651413][T18971] macsec1: entered promiscuous mode [ 494.721609][T18971] macsec1: entered allmulticast mode [ 495.415272][T18991] netlink: 'syz.4.3747': attribute type 1 has an invalid length. [ 498.213764][T19009] netlink: 'syz.1.3752': attribute type 14 has an invalid length. [ 498.692277][T18965] wg1 speed is unknown, defaulting to 1000 [ 498.783304][T19035] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 498.793215][T19035] __nla_validate_parse: 4 callbacks suppressed [ 498.793235][T19035] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3759'. [ 499.626440][T19061] veth5: entered promiscuous mode [ 499.856909][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3774'. [ 500.046823][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 500.070191][T19082] pimreg: entered allmulticast mode [ 500.103481][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 500.129870][T19082] dvmrp8: entered allmulticast mode [ 500.154457][T19082] sctp: [Deprecated]: syz.2.3775 (pid 19082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.154457][T19082] Use struct sctp_sack_info instead [ 500.295031][T19097] FAULT_INJECTION: forcing a failure. [ 500.295031][T19097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.323113][T19097] CPU: 1 UID: 0 PID: 19097 Comm: syz.4.3782 Not tainted syzkaller #0 PREEMPT(full) [ 500.323139][T19097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.323151][T19097] Call Trace: [ 500.323158][T19097] [ 500.323167][T19097] dump_stack_lvl+0x189/0x250 [ 500.323195][T19097] ? __pfx____ratelimit+0x10/0x10 [ 500.323218][T19097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.323240][T19097] ? __pfx__printk+0x10/0x10 [ 500.323265][T19097] ? __might_fault+0xb0/0x130 [ 500.323303][T19097] should_fail_ex+0x414/0x560 [ 500.323337][T19097] _copy_from_user+0x2d/0xb0 [ 500.323362][T19097] ___sys_sendmsg+0x158/0x2a0 [ 500.323390][T19097] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.323452][T19097] ? __fget_files+0x2a/0x420 [ 500.323469][T19097] ? __fget_files+0x3a0/0x420 [ 500.323497][T19097] __x64_sys_sendmsg+0x19b/0x260 [ 500.323524][T19097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.323557][T19097] ? __pfx_ksys_write+0x10/0x10 [ 500.323579][T19097] ? rcu_is_watching+0x15/0xb0 [ 500.323604][T19097] ? do_syscall_64+0xbe/0x3b0 [ 500.323632][T19097] do_syscall_64+0xfa/0x3b0 [ 500.323654][T19097] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.323675][T19097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.323693][T19097] ? clear_bhb_loop+0x60/0xb0 [ 500.323716][T19097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.323735][T19097] RIP: 0033:0x7f83db58eba9 [ 500.323753][T19097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.323770][T19097] RSP: 002b:00007f83dc408038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.323791][T19097] RAX: ffffffffffffffda RBX: 00007f83db7d5fa0 RCX: 00007f83db58eba9 [ 500.323803][T19097] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 500.323816][T19097] RBP: 00007f83dc408090 R08: 0000000000000000 R09: 0000000000000000 [ 500.323827][T19097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.323837][T19097] R13: 00007f83db7d6038 R14: 00007f83db7d5fa0 R15: 00007fffadebb458 [ 500.323865][T19097] [ 500.331010][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3780'. [ 500.680586][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3784'. [ 500.771572][T19077] pimreg: left allmulticast mode [ 500.783438][T19077] dvmrp8: left allmulticast mode [ 501.280082][T19131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'. [ 501.786156][T19153] netlink: 'syz.1.3800': attribute type 4 has an invalid length. [ 501.984932][T19164] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3804'. [ 502.093485][T19164] netlink: 'syz.3.3804': attribute type 1 has an invalid length. [ 502.258743][T19164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.315357][T19148] wg1 speed is unknown, defaulting to 1000 [ 502.379942][T19173] bond2: (slave gretap1): making interface the new active one [ 502.389474][T19173] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 502.442820][T19177] tipc: Started in network mode [ 502.448081][T19177] tipc: Node identity 7246977f3884, cluster identity 4711 [ 502.466782][T19177] tipc: Enabled bearer , priority 0 [ 502.695836][T19178] syzkaller0: entered promiscuous mode [ 502.701791][T19178] syzkaller0: entered allmulticast mode [ 502.712376][T19178] tipc: Resetting bearer [ 502.718905][T19183] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3809'. [ 502.888057][T19178] tipc: Resetting bearer [ 502.892374][T19192] netlink: 'syz.2.3813': attribute type 13 has an invalid length. [ 502.903009][T19192] netlink: 'syz.2.3813': attribute type 17 has an invalid length. [ 503.254175][T19206] FAULT_INJECTION: forcing a failure. [ 503.254175][T19206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.276256][T19206] CPU: 1 UID: 0 PID: 19206 Comm: syz.3.3816 Not tainted syzkaller #0 PREEMPT(full) [ 503.276282][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.276294][T19206] Call Trace: [ 503.276302][T19206] [ 503.276311][T19206] dump_stack_lvl+0x189/0x250 [ 503.276337][T19206] ? __pfx____ratelimit+0x10/0x10 [ 503.276358][T19206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.276377][T19206] ? __pfx__printk+0x10/0x10 [ 503.276402][T19206] ? __might_fault+0xb0/0x130 [ 503.276436][T19206] should_fail_ex+0x414/0x560 [ 503.276468][T19206] _copy_from_user+0x2d/0xb0 [ 503.276491][T19206] ___sys_sendmsg+0x158/0x2a0 [ 503.276518][T19206] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.276576][T19206] ? __fget_files+0x2a/0x420 [ 503.276591][T19206] ? __fget_files+0x3a0/0x420 [ 503.276616][T19206] __x64_sys_sendmsg+0x19b/0x260 [ 503.276643][T19206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.276676][T19206] ? __pfx_ksys_write+0x10/0x10 [ 503.276697][T19206] ? rcu_is_watching+0x15/0xb0 [ 503.276719][T19206] ? do_syscall_64+0xbe/0x3b0 [ 503.276744][T19206] do_syscall_64+0xfa/0x3b0 [ 503.276763][T19206] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.276782][T19206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.276799][T19206] ? clear_bhb_loop+0x60/0xb0 [ 503.276821][T19206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.276838][T19206] RIP: 0033:0x7fc49638eba9 [ 503.276854][T19206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.276870][T19206] RSP: 002b:00007fc4971fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.276889][T19206] RAX: ffffffffffffffda RBX: 00007fc4965d5fa0 RCX: 00007fc49638eba9 [ 503.276903][T19206] RDX: 0000000000000800 RSI: 0000200000000140 RDI: 0000000000000003 [ 503.276914][T19206] RBP: 00007fc4971fc090 R08: 0000000000000000 R09: 0000000000000000 [ 503.276925][T19206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.276936][T19206] R13: 00007fc4965d6038 R14: 00007fc4965d5fa0 R15: 00007ffdb4d032b8 [ 503.276965][T19206] [ 503.493204][ T6430] tipc: Node number set to 1254266751 [ 503.696179][T19212] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003 [ 506.034727][T19178] tipc: Disabling bearer [ 506.117727][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3819'. [ 506.133842][T19192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.323541][T19192] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.345579][T19192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.388655][T19197] vlan4: entered promiscuous mode [ 506.747703][T19241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3826'. [ 506.774506][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3827'. [ 506.924141][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3826'. [ 506.936446][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3829'. [ 507.911866][T19241] bond0: (slave team0): Releasing backup interface [ 507.926466][T19241] team0 (unregistering): Port device team_slave_0 removed [ 507.938887][T19241] team0 (unregistering): Port device team_slave_1 removed [ 508.009896][T19198] wg1 speed is unknown, defaulting to 1000 [ 508.555431][T19283] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3836'. [ 509.307901][T19315] tipc: Enabling of bearer rejected, failed to enable media [ 509.520677][T19325] netlink: 'syz.1.3848': attribute type 13 has an invalid length. [ 509.543835][T19325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3848'. [ 509.575336][T19325] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 509.618098][T19328] netlink: 'syz.4.3850': attribute type 13 has an invalid length. [ 509.635332][T19325] syzkaller0: entered promiscuous mode [ 509.644179][T19328] netlink: 'syz.4.3850': attribute type 17 has an invalid length. [ 509.652344][T19325] syzkaller0: entered allmulticast mode [ 509.666259][T19328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.692837][T19301] wg1 speed is unknown, defaulting to 1000 [ 509.702706][T19325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3848'. [ 510.279705][T19328] wg1 speed is unknown, defaulting to 1000 [ 510.806587][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3859'. [ 511.060796][T19368] dvmrp8: entered allmulticast mode [ 511.183947][T19378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3865'. [ 511.248318][T19379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3865'. [ 511.340248][T19385] netlink: 'syz.4.3867': attribute type 13 has an invalid length. [ 511.374861][T19385] netlink: 'syz.4.3867': attribute type 17 has an invalid length. [ 511.421064][T19385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.769333][T19369] wg1 speed is unknown, defaulting to 1000 [ 512.402144][T19385] wg1 speed is unknown, defaulting to 1000 [ 513.035944][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3877'. [ 513.061993][T19414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3876'. [ 513.215612][T19426] netlink: 766 bytes leftover after parsing attributes in process `syz.3.3878'. [ 513.395428][T19430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.502200][T19369] dvmrp8: left allmulticast mode [ 513.860806][T19443] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3885'. [ 513.915385][T19446] netlink: 'syz.4.3886': attribute type 10 has an invalid length. [ 513.971425][T19446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.015406][T19446] batadv_slave_0: entered promiscuous mode [ 514.027498][T19446] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 514.169997][T19458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3887'. [ 514.235287][T19414] wg1 speed is unknown, defaulting to 1000 [ 515.195053][T19483] netlink: 'syz.0.3896': attribute type 10 has an invalid length. [ 515.233352][T19483] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.241539][T19483] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.259604][T19483] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.267266][T19483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.275348][T19483] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.283230][T19483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.354372][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'. [ 515.370183][T19483] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 515.398250][T19476] bond1: left allmulticast mode [ 515.410868][T19476] bond1: left promiscuous mode [ 515.416245][T19476] bridge0: port 3(bond1) entered disabled state [ 515.429979][T19476] bridge_slave_1: left allmulticast mode [ 515.444156][T19476] bridge_slave_1: left promiscuous mode [ 515.450324][T19476] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.461426][T19476] bridge_slave_0: left allmulticast mode [ 515.467436][T19476] bridge_slave_0: left promiscuous mode [ 515.475400][T19476] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.507177][T19476] bond0: (slave bridge0): Releasing backup interface [ 516.000039][T19517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3907'. [ 516.199684][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'. [ 516.210225][T19526] netlink: 'syz.2.3909': attribute type 10 has an invalid length. [ 516.230657][T19527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3910'. [ 516.260111][T19526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3909'. [ 516.293686][T19526] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 516.514585][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3912'. [ 516.533724][T19537] netlink: 'syz.1.3912': attribute type 2 has an invalid length. [ 516.920612][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.930659][T19522] wg1 speed is unknown, defaulting to 1000 [ 517.300859][T19537] wg1 speed is unknown, defaulting to 1000 [ 517.882210][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3918'. [ 518.281683][T19584] netlink: 'syz.4.3925': attribute type 1 has an invalid length. [ 518.310841][T19584] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3925'. [ 518.654192][T19597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3929'. [ 518.688670][T19597] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3929'. [ 518.695258][T19600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3931'. [ 518.699281][T19597] netlink: 'syz.4.3929': attribute type 10 has an invalid length. [ 518.759165][T19597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3929'. [ 518.799979][T19606] netlink: 'syz.0.3931': attribute type 10 has an invalid length. [ 518.810597][T19597] !: entered promiscuous mode [ 518.816186][T19597] bridge0: port 3(0!) entered blocking state [ 518.867307][T19597] bridge0: port 3(0!) entered disabled state [ 518.896942][T19597] !: entered allmulticast mode [ 518.905392][T19597] bridge0: port 3(0!) entered blocking state [ 518.911932][T19597] bridge0: port 3(0!) entered forwarding state [ 520.081047][T19604] wg1 speed is unknown, defaulting to 1000 [ 520.177039][T19644] sctp: [Deprecated]: syz.3.3941 (pid 19644) Use of int in max_burst socket option. [ 520.177039][T19644] Use struct sctp_assoc_value instead [ 520.703926][T19633] wg1 speed is unknown, defaulting to 1000 [ 521.495524][T19685] __nla_validate_parse: 3 callbacks suppressed [ 521.495543][T19685] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3954'. [ 521.547652][T19682] vlan2: entered promiscuous mode [ 521.677992][T19674] wg1 speed is unknown, defaulting to 1000 [ 521.907230][ T30] audit: type=1800 audit(1757742285.104:40): pid=19690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3954" name="memory.events" dev="tmpfs" ino=692 res=0 errno=0 [ 522.228287][T19702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3958'. [ 522.450168][T19714] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3962'. [ 522.490871][T19713] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3962'. [ 523.036774][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3966'. [ 523.108042][T19737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3966'. [ 523.132190][T19745] syzkaller0: entered promiscuous mode [ 523.138171][T19745] syzkaller0: entered allmulticast mode [ 523.193489][T19737] netlink: 'syz.1.3966': attribute type 7 has an invalid length. [ 523.217893][T19739] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3969'. [ 523.244538][T19737] netlink: 'syz.1.3966': attribute type 8 has an invalid length. [ 523.290735][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3966'. [ 523.580002][ T30] audit: type=1800 audit(1757742286.764:41): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3969" name="memory.events" dev="tmpfs" ino=1176 res=0 errno=0 [ 524.127304][T19781] netlink: 'syz.3.3976': attribute type 13 has an invalid length. [ 524.153168][T19781] netlink: 'syz.3.3976': attribute type 17 has an invalid length. [ 524.337493][T19781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.375042][T19781] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.414229][T19781] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 524.470709][T19783] xfrm0: entered promiscuous mode [ 524.486352][T19783] xfrm0: entered allmulticast mode [ 524.778881][T19750] wg1 speed is unknown, defaulting to 1000 [ 524.962351][T19800] netlink: 'syz.4.3981': attribute type 6 has an invalid length. [ 524.993615][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'. [ 525.060164][T19800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.169045][T19807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.178417][T19807] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 525.197484][T19807] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 525.225988][T19784] wg1 speed is unknown, defaulting to 1000 [ 525.445306][T19816] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 526.103682][ T30] audit: type=1800 audit(1757742289.304:42): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3986" name="memory.events" dev="tmpfs" ino=1005 res=0 errno=0 [ 526.193565][T19813] wg1 speed is unknown, defaulting to 1000 [ 542.523010][ T9595] [ 542.525381][ T9595] ============================================ [ 542.531529][ T9595] WARNING: possible recursive locking detected [ 542.537761][ T9595] syzkaller #0 Not tainted [ 542.542246][ T9595] -------------------------------------------- [ 542.548398][ T9595] kworker/u8:24/9595 is trying to acquire lock: [ 542.554711][ T9595] ffff88805ef50218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 542.566877][ T9595] [ 542.566877][ T9595] but task is already holding lock: [ 542.574226][ T9595] ffff88805f736258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 542.586489][ T9595] [ 542.586489][ T9595] other info that might help us debug this: [ 542.594540][ T9595] Possible unsafe locking scenario: [ 542.594540][ T9595] [ 542.601995][ T9595] CPU0 [ 542.605264][ T9595] ---- [ 542.608530][ T9595] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 542.615812][ T9595] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 542.623186][ T9595] [ 542.623186][ T9595] *** DEADLOCK *** [ 542.623186][ T9595] [ 542.631860][ T9595] May be due to missing lock nesting notation [ 542.631860][ T9595] [ 542.640430][ T9595] 8 locks held by kworker/u8:24/9595: [ 542.645841][ T9595] #0: ffff88807f48c948 ((wq_completion)bond3#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 542.657512][ T9595] #1: ffffc9000b52fbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 542.670400][ T9595] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 542.679989][ T9595] #3: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 542.689999][ T9595] #4: ffff88805f736258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 542.702665][ T9595] #5: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 542.712064][ T9595] #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 542.722152][ T9595] #7: ffffffff8e13a140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 542.732594][ T9595] [ 542.732594][ T9595] stack backtrace: [ 542.738570][ T9595] CPU: 1 UID: 0 PID: 9595 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 542.738591][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.738604][ T9595] Workqueue: bond3 bond_alb_monitor [ 542.738630][ T9595] Call Trace: [ 542.738639][ T9595] [ 542.738647][ T9595] dump_stack_lvl+0x189/0x250 [ 542.738669][ T9595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.738687][ T9595] ? __pfx__printk+0x10/0x10 [ 542.738707][ T9595] ? rcu_is_watching+0x15/0xb0 [ 542.738726][ T9595] ? print_lock_name+0xde/0x100 [ 542.738748][ T9595] print_deadlock_bug+0x28b/0x2a0 [ 542.738767][ T9595] validate_chain+0x1a3f/0x2140 [ 542.738784][ T9595] ? __ip_vs_conn_in_get+0x99/0xaa0 [ 542.738810][ T9595] ? look_up_lock_class+0x74/0x170 [ 542.738829][ T9595] ? register_lock_class+0x51/0x320 [ 542.738860][ T9595] __lock_acquire+0xab9/0xd20 [ 542.738885][ T9595] ? __dev_queue_xmit+0x22b7/0x3b50 [ 542.738908][ T9595] lock_acquire+0x120/0x360 [ 542.738930][ T9595] ? __dev_queue_xmit+0x22b7/0x3b50 [ 542.738953][ T9595] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 542.738970][ T9595] ? ip_vs_service_find+0xa61/0xf00 [ 542.738992][ T9595] _raw_spin_lock+0x2e/0x40 [ 542.739008][ T9595] ? __dev_queue_xmit+0x22b7/0x3b50 [ 542.739030][ T9595] __dev_queue_xmit+0x22b7/0x3b50 [ 542.739057][ T9595] ? __dev_queue_xmit+0x27b/0x3b50 [ 542.739083][ T9595] ? neigh_connected_output+0x1ea/0x460 [ 542.739101][ T9595] ? __pfx___dev_queue_xmit+0x10/0x10 [ 542.739124][ T9595] ? read_seqbegin+0x122/0x250 [ 542.739140][ T9595] ? neigh_connected_output+0x1ea/0x460 [ 542.739157][ T9595] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.739175][ T9595] ? read_seqbegin+0x1ac/0x250 [ 542.739191][ T9595] ? __pfx_read_seqbegin+0x10/0x10 [ 542.739219][ T9595] ip_finish_output2+0xd3d/0x1160 [ 542.739234][ T9595] ? ip_skb_dst_mtu+0x18d/0xb70 [ 542.739258][ T9595] ? ip_finish_output2+0x452/0x1160 [ 542.739274][ T9595] ? __pfx_ip_finish_output2+0x10/0x10 [ 542.739289][ T9595] ? ip_skb_dst_mtu+0x18d/0xb70 [ 542.739311][ T9595] ? ip_skb_dst_mtu+0x917/0xb70 [ 542.739335][ T9595] ? ip_finish_output+0x33a/0x3f0 [ 542.739358][ T9595] ip_output+0x29f/0x450 [ 542.739380][ T9595] ? ip_output+0x5b/0x450 [ 542.739401][ T9595] iptunnel_xmit+0x5f8/0xa90 [ 542.739426][ T9595] ip_tunnel_xmit+0x1c41/0x2390 [ 542.739451][ T9595] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 542.739465][ T9595] ? gre_build_header+0x31c/0xa40 [ 542.739491][ T9595] ? __pfx_gre_build_header+0x10/0x10 [ 542.739517][ T9595] gre_tap_xmit+0x590/0x7a0 [ 542.739541][ T9595] ? __pfx_gre_tap_xmit+0x10/0x10 [ 542.739561][ T9595] ? validate_xmit_skb+0xb4c/0x11b0 [ 542.739587][ T9595] dev_hard_start_xmit+0x2d4/0x830 [ 542.739616][ T9595] sch_direct_xmit+0x241/0x4b0 [ 542.739634][ T9595] ? __pfx_sch_direct_xmit+0x10/0x10 [ 542.739653][ T9595] __dev_queue_xmit+0x1857/0x3b50 [ 542.739680][ T9595] ? __dev_queue_xmit+0x27b/0x3b50 [ 542.739708][ T9595] ? __pfx___dev_queue_xmit+0x10/0x10 [ 542.739731][ T9595] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 542.739752][ T9595] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 542.739776][ T9595] ? __build_skb_around+0x257/0x3e0 [ 542.739801][ T9595] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 542.739822][ T9595] ? alb_send_lp_vid+0x139/0x510 [ 542.739851][ T9595] alb_send_lp_vid+0x324/0x510 [ 542.739877][ T9595] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 542.739902][ T9595] ? __lock_acquire+0xab9/0xd20 [ 542.739928][ T9595] alb_send_learning_packets+0x10d/0x2c0 [ 542.739953][ T9595] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 542.739980][ T9595] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 542.740001][ T9595] bond_alb_monitor+0x3e4/0x1800 [ 542.740026][ T9595] ? bond_alb_monitor+0xf1/0x1800 [ 542.740048][ T9595] ? process_scheduled_works+0x9ef/0x17b0 [ 542.740064][ T9595] ? __pfx_bond_alb_monitor+0x10/0x10 [ 542.740087][ T9595] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.740102][ T9595] ? process_scheduled_works+0x9ef/0x17b0 [ 542.740117][ T9595] ? process_scheduled_works+0x9ef/0x17b0 [ 542.740132][ T9595] process_scheduled_works+0xae1/0x17b0 [ 542.740158][ T9595] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.740180][ T9595] worker_thread+0x8a0/0xda0 [ 542.740205][ T9595] kthread+0x70e/0x8a0 [ 542.740225][ T9595] ? __pfx_worker_thread+0x10/0x10 [ 542.740240][ T9595] ? __pfx_kthread+0x10/0x10 [ 542.740260][ T9595] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.740275][ T9595] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.740292][ T9595] ? __pfx_kthread+0x10/0x10 [ 542.740311][ T9595] ret_from_fork+0x436/0x7d0 [ 542.740329][ T9595] ? __pfx_ret_from_fork+0x10/0x10 [ 542.740346][ T9595] ? __switch_to_asm+0x39/0x70 [ 542.740366][ T9595] ? __switch_to_asm+0x33/0x70 [ 542.740386][ T9595] ? __pfx_kthread+0x10/0x10 [ 542.740405][ T9595] ret_from_fork_asm+0x1a/0x30 [ 542.740431][ T9595] [ 544.146688][ T59] !: left allmulticast mode [ 544.151760][ T59] bridge0: port 3(0!) entered disabled state [ 544.159032][ T59] bridge_slave_1: left allmulticast mode [ 544.164957][ T59] bridge_slave_1: left promiscuous mode [ 544.170871][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.179227][ T59] bridge_slave_0: left allmulticast mode [ 544.185261][ T59] bridge_slave_0: left promiscuous mode [ 544.191110][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.338039][ T59] bond1 (unregistering): (slave gretap1): Releasing active interface [ 544.575142][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.584678][ T59] bond_slave_0: left promiscuous mode [ 544.591097][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.599987][ T59] bond_slave_1: left promiscuous mode [ 544.606398][ T59] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 544.616855][ T59] batadv_slave_0: left promiscuous mode [ 544.624413][ T59] bond0 (unregistering): Released all slaves [ 544.633242][ T59] bond1 (unregistering): Released all slaves [ 544.782240][ T59] bond2 (unregistering): (slave veth3): Releasing backup interface [ 544.791458][ T59] bond2 (unregistering): Released all slaves [ 544.933392][ T59] bond3 (unregistering): Released all slaves [ 545.005562][ T59] tipc: Left network mode [ 545.185231][ T59] hsr_slave_0: left promiscuous mode [ 545.201090][ T59] hsr_slave_1: left promiscuous mode [ 545.213124][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.585062][ T59] team0 (unregistering): Port device team_slave_1 removed [ 545.627045][ T59] team0 (unregistering): Port device team_slave_0 removed [ 546.284744][ T59] IPVS: stop unused estimator thread 0... [ 546.363887][ T6428] wg1 speed is unknown, defaulting to 1000 [ 546.369738][ T6428] syz0: Port: 1 Link DOWN [ 546.377087][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 546.387087][ T59] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.442749][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 546.453162][ T59] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.483041][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 546.492839][ T59] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 546.533415][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 546.543640][ T59] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 547.037680][ T59] bridge_slave_1: left allmulticast mode [ 547.043700][ T59] bridge_slave_1: left promiscuous mode [ 547.049430][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.057597][ T59] bridge_slave_0: left allmulticast mode [ 547.064739][ T59] bridge_slave_0: left promiscuous mode [ 547.070643][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.265201][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.275237][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.285489][ T59] bond0 (unregistering): Released all slaves [ 547.426693][ T59] bond1 (unregistering): Released all slaves [ 547.555991][ T59] bond2 (unregistering): (slave gretap1): Releasing active interface [ 547.787886][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.797115][ T59] bond_slave_0: left promiscuous mode [ 547.803779][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.813906][ T59] bond_slave_1: left promiscuous mode [ 547.822863][ T59] bond0 (unregistering): (slave bond1): Releasing backup interface [ 547.831472][ T59] bond1 (unregistering): left promiscuous mode [ 547.837904][ T59] bond0 (unregistering): Released all slaves [ 547.966377][ T59] bond1 (unregistering): Released all slaves [ 547.977671][ T59] bond2 (unregistering): Released all slaves [ 548.430016][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.439624][ T59] bond_slave_0: left promiscuous mode [ 548.449125][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.458127][ T59] bond_slave_1: left promiscuous mode [ 548.464243][ T59] bond0 (unregistering): Released all slaves [ 548.551222][ T59] : left promiscuous mode [ 548.591937][ T59] þ: left promiscuous mode [ 548.641447][ T59] tipc: Left network mode [ 548.662624][ T59] tipc: Left network mode [ 548.677727][ T59] tipc: Left network mode [ 549.291199][ T59] hsr_slave_0: left promiscuous mode [ 549.296988][ T59] hsr_slave_1: left promiscuous mode [ 549.303539][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.311273][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.318878][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.326381][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.335287][ T59] !: left promiscuous mode [ 549.340264][ T59] team0: left promiscuous mode [ 549.345654][ T59] team_slave_0: left promiscuous mode [ 549.351542][ T59] team_slave_1: left promiscuous mode [ 549.359737][ T59] hsr_slave_0: left promiscuous mode [ 549.365670][ T59] hsr_slave_1: left promiscuous mode [ 549.372073][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.379618][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.390201][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.398133][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.410145][ T59] veth1_macvtap: left promiscuous mode [ 549.415992][ T59] veth0_macvtap: left promiscuous mode [ 549.422096][ T59] veth1_vlan: left promiscuous mode [ 549.427357][ T59] veth0_vlan: left promiscuous mode [ 550.069379][ T59] team0 (unregistering): Port device team_slave_1 removed [ 550.110712][ T59] team0 (unregistering): Port device team_slave_0 removed [ 550.804707][ T59] team0 (unregistering): Port device team_slave_1 removed [ 550.849467][ T59] team0 (unregistering): Port device team_slave_0 removed