last executing test programs: 5m10.096030159s ago: executing program 2 (id=4378): r0 = socket$kcm(0x11, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x8}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 5m9.769545166s ago: executing program 2 (id=4380): socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$unix(0x1, 0x1, 0x0) unshare(0x22020600) unshare(0x2a020400) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket(0x11, 0x3, 0xffe) syz_extract_tcp_res(&(0x7f0000000100), 0xcd07, 0x6) syz_emit_ethernet(0x14e, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfd}, @void, {@ipv4={0x800, @udp={{0x37, 0x4, 0x1, 0x1, 0x140, 0x64, 0x0, 0x5, 0x11, 0x0, @empty, @empty, {[@end, @timestamp={0x44, 0x14, 0x30, 0x0, 0x9, [0x8, 0x5b, 0x4, 0x1ee]}, @timestamp={0x44, 0x28, 0xfe, 0x0, 0xb, [0x2, 0x400, 0x6, 0x7fffffff, 0x4, 0x4, 0x7, 0x3, 0x2]}, @noop, @rr={0x7, 0x23, 0x24, [@empty, @multicast2, @loopback, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x39}]}, @cipso={0x86, 0x1c, 0x3, [{0x7, 0x12, "eefd42719600"/16}, {0x0, 0x4, "04f0"}]}, @timestamp_addr={0x44, 0x24, 0x9d, 0x1, 0xc, [{@multicast2, 0x8}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x2, 0x0}, 0x5}, {@multicast2, 0x1ff}]}, @timestamp={0x44, 0x24, 0x1b, 0x0, 0xe, [0x849, 0x2, 0x9, 0x401, 0xffffff81, 0x0, 0x6, 0xe58c]}]}}, {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "a814027aa78f67601111f773749b6b3a2c744bb894ab25e154336229c7e72645", "85c8aeca3c5d3666aa8b3bbccb177faa", {"48a4a3e177079bf16ec87277345a2291", "f93f8830cd7e7d145433fd73bf7b62cc"}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x44) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m7.798882775s ago: executing program 1 (id=4391): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYRES64=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffc}, 0x28}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x1}, 0x1c) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) unshare(0x40000) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e18, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000140)={r3}) 5m7.780784134s ago: executing program 2 (id=4392): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000073018e000000000095"], &(0x7f0000000240)='GPL\x00', 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x16bbdcaa963d4eca], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffc}}}, {{@ipv6={@loopback, @mcast2, [0xff000000], [0x0, 0xff000000], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r3 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x360, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x50, 0x80, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x3}}}, {{@ip={@broadcast, @multicast2, 0xff, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x84}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x14}}}, {{@ip={@loopback, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xa, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000001b40)={0x1, 'dvmrp0\x00'}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x6, 0x18}, 0xc) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000001800)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001480)={0x310, 0x13, 0x9a47c6da93b5d7a, 0x70bd25, 0x25dfdbff, {0x5, 0x2, 0x6, 0xeb, {0x4e21, 0x4e23, [0x4940, 0xf486, 0x2b3dc0, 0x3], [0x9, 0x4ea, 0x2, 0x40], r4, [0x7, 0x80000001]}, 0xfffffff8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "61c42b1556c8c224d675df4d636eaa2242a046b630e5801752e52fc380c7432743d4c826525ffe92189a1e30b03e6a25eeabe815f8a7ec8b42d1fbd01a946fd03abf62b7eee1e58f943e634b7b4754355ba8833f02e3185f4da378311faa9f27c0e57486ce1b8f1460637992fa7aa4bd0f0e9e484fe09c766924f5ed0626778912a6cb47890f9b0097b16136774a3c2d8f049c6ed053c53d7de242c0d6bdcfd1aff7665dfdb2ab1e521828b006e63f7c50553487d324caa282595fd2ee127ea667ecd8bb90b82a44a877c6b939cf7fb7766ff9af2f41482e34ba0f0a0c8cb207ed"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "d90a6365c6dd87c221d1bafef3c3505214558620b94b83565955de53a20bd05ea172a95f4b1b7ce323ceba55"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "23fcade85cda0aa82d9cd5be82fe2e933a359ef7fdb2585b4539dad6e35650eef1358cdb3001721e1fd88d0f15f12164779192ba87ecb1d54a30c90507bcb19325d2a9cee8c8d659ce9dd95ddf102c31b67aacccffbe310989ca15cfdc0037055feff30270b7cb918720b9ae553b4029f9d63b21927e5da8cadb4f87bb35598098b490bfa30e7b71e313cc3a9e4e56fb78c96857ae6238d945d0d395092b81d66485bd7a1ab42f9bd9ed56eaf610b24ca2a298110083ecd89fe6f7caf362e25967bd96da0500a1bbb78a4e4a90704d5b9ab8103bd533452e7bb77f3c9a"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "ec24672aa8185ce00082613b366715724ad352cc709109220c931960b6183f4b0ba5669dcdf68a5efc8339af4978"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "87ca2b4779d54ee48e6d82eefc9d2dce32857e0cb499f06e227e2ef198cdfa908737265c6966b2ad41e73cc13af5694d76015f8692c82b922672733517790b0a76a084cebfddf762116079fb7410260205d2af1d74cd6f19d1238fa0316d95a5777a9d19619ae17e1125c9f1cf9062b91d0a82ca306d4ac997e3e32fd814d86923f52316b053fe9cfa73aae9"}]}, 0x310}}, 0x10) (async) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000001800)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001480)={0x310, 0x13, 0x9a47c6da93b5d7a, 0x70bd25, 0x25dfdbff, {0x5, 0x2, 0x6, 0xeb, {0x4e21, 0x4e23, [0x4940, 0xf486, 0x2b3dc0, 0x3], [0x9, 0x4ea, 0x2, 0x40], r4, [0x7, 0x80000001]}, 0xfffffff8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "61c42b1556c8c224d675df4d636eaa2242a046b630e5801752e52fc380c7432743d4c826525ffe92189a1e30b03e6a25eeabe815f8a7ec8b42d1fbd01a946fd03abf62b7eee1e58f943e634b7b4754355ba8833f02e3185f4da378311faa9f27c0e57486ce1b8f1460637992fa7aa4bd0f0e9e484fe09c766924f5ed0626778912a6cb47890f9b0097b16136774a3c2d8f049c6ed053c53d7de242c0d6bdcfd1aff7665dfdb2ab1e521828b006e63f7c50553487d324caa282595fd2ee127ea667ecd8bb90b82a44a877c6b939cf7fb7766ff9af2f41482e34ba0f0a0c8cb207ed"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "d90a6365c6dd87c221d1bafef3c3505214558620b94b83565955de53a20bd05ea172a95f4b1b7ce323ceba55"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "23fcade85cda0aa82d9cd5be82fe2e933a359ef7fdb2585b4539dad6e35650eef1358cdb3001721e1fd88d0f15f12164779192ba87ecb1d54a30c90507bcb19325d2a9cee8c8d659ce9dd95ddf102c31b67aacccffbe310989ca15cfdc0037055feff30270b7cb918720b9ae553b4029f9d63b21927e5da8cadb4f87bb35598098b490bfa30e7b71e313cc3a9e4e56fb78c96857ae6238d945d0d395092b81d66485bd7a1ab42f9bd9ed56eaf610b24ca2a298110083ecd89fe6f7caf362e25967bd96da0500a1bbb78a4e4a90704d5b9ab8103bd533452e7bb77f3c9a"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "ec24672aa8185ce00082613b366715724ad352cc709109220c931960b6183f4b0ba5669dcdf68a5efc8339af4978"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "87ca2b4779d54ee48e6d82eefc9d2dce32857e0cb499f06e227e2ef198cdfa908737265c6966b2ad41e73cc13af5694d76015f8692c82b922672733517790b0a76a084cebfddf762116079fb7410260205d2af1d74cd6f19d1238fa0316d95a5777a9d19619ae17e1125c9f1cf9062b91d0a82ca306d4ac997e3e32fd814d86923f52316b053fe9cfa73aae9"}]}, 0x310}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x0, 0x6, 0x3, 0x2, 0xfffffffffffffe70, 0x10}, @call={0x85, 0x0, 0x0, 0x8c}, @generic={0xa, 0x7, 0x3, 0x4, 0xe3}]}, &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x50, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000080)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001280)=[r7], &(0x7f00000012c0)=[{0x1, 0x4, 0x2, 0x3}, {0x3, 0x2, 0x1, 0x9}, {0x1, 0x2, 0xb, 0x5}, {0x3ff, 0x2, 0x8, 0x3}, {0x1, 0x2, 0xa, 0x6}, {0x1, 0x2, 0xf, 0x3}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x1, 0x6, 0x4}, {0x5, 0x1, 0xe, 0x6}], 0x10, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x0, 0x6, 0x3, 0x2, 0xfffffffffffffe70, 0x10}, @call={0x85, 0x0, 0x0, 0x8c}, @generic={0xa, 0x7, 0x3, 0x4, 0xe3}]}, &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x50, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000080)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001280)=[r7], &(0x7f00000012c0)=[{0x1, 0x4, 0x2, 0x3}, {0x3, 0x2, 0x1, 0x9}, {0x1, 0x2, 0xb, 0x5}, {0x3ff, 0x2, 0x8, 0x3}, {0x1, 0x2, 0xa, 0x6}, {0x1, 0x2, 0xf, 0x3}, {0x1, 0x4, 0x4, 0x1}, {0x2, 0x1, 0x6, 0x4}, {0x5, 0x1, 0xe, 0x6}], 0x10, 0xc}, 0x94) 5m7.638372471s ago: executing program 1 (id=4395): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5m7.550098793s ago: executing program 1 (id=4396): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0xc7, 0x1}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) unshare(0x20000400) getpeername$packet(r6, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="69e4b9b9b7b81b16587a2d56015c0b5f80740166a66726209bc629b66c1880e2790c37cb5a0647100379c2702f30837efe46d665d6bebf24b66f0da9b6912ce91e35c17bad271c8806d3263471d2f2070407977326db5ae7645f9270bc1a149c973fd5ed590118dc454106328306e06824978973c038675103c25f6536ac5b2e8b6378ec7178fa22b5307f353f93c05f836a331837238ccad6", @ANYRES16=r3, @ANYBLOB="010025bd7100030000008900000008000300", @ANYRES32=r5, @ANYBLOB="20001d801c00008006000500c000000005000c000000000005000b0001000000"], 0x3c}}, 0x4) 5m7.543751847s ago: executing program 2 (id=4397): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5m7.434813685s ago: executing program 1 (id=4399): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) 5m7.410610825s ago: executing program 2 (id=4400): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (fail_nth: 5) 5m7.314242697s ago: executing program 1 (id=4401): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2], &(0x7f00000002c0)='GPL\x00'}, 0x94) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x80, 0x700, 0x9, 0xfffffff8, {{0x17, 0x4, 0x0, 0x2a, 0x5c, 0x64, 0x0, 0x2, 0x4, 0x0, @loopback, @loopback, {[@lsrr={0x83, 0x17, 0x9c, [@remote, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0xa0, [@local, @multicast1]}, @rr={0x7, 0x23, 0xa6, [@multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1, @rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bind$packet(r4, &(0x7f0000000480)={0x11, 0x1, r5, 0x1, 0x9, 0x6, @local}, 0x14) (async) bind$packet(r4, &(0x7f0000000480)={0x11, 0x1, r5, 0x1, 0x9, 0x6, @local}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='b 6:'], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0xd50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0xd50) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x8, 0x9, 0x40100000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000007c4055e4679db1cb68d1c41a4cdf4bec3db5a119fdeb3610034b03fb7350e0476f216278246bfa75d1e2dc8d", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf254900000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000900000074000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x1a, 0x3, 0x9) (async) r11 = socket(0x1a, 0x3, 0x9) socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) bind$unix(r14, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$SO_TIMESTAMP(r14, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r14, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r14, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtclass={0x80, 0x28, 0x49b3770a6da22cc9, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xd, 0x10}, {0x3, 0x7ffd}, {0xe, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xf5, 0x8}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0xb4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x7b, 0x91}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x4b, 0xd3}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1}}}, @tclass_kind_options=@c_netem={0xa}]}, 0x80}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfff2, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) 5m7.114573982s ago: executing program 2 (id=4403): r0 = socket(0x2, 0x80000, 0x0) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0xff5d, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {0x0}], 0x4}}, {{&(0x7f0000000000), 0x6e, &(0x7f0000000400), 0x5, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/37, 0x2c}, {&(0x7f0000001580)=""/20, 0x14}, {&(0x7f0000002fc0)=""/255, 0xff}, {&(0x7f00000017c0)=""/232, 0xe8}, {&(0x7f00000018c0)=""/12, 0xc}, {&(0x7f0000001900)=""/35, 0x23}], 0x6, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/216}, {&(0x7f0000000080)=""/106}, {&(0x7f0000000140)=""/174}, {&(0x7f00000003c0)=""/65}], 0x0, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r1], 0x38}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400"], 0x138}}, 0x0) socket(0x2, 0x80000, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0xff5d, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {0x0}], 0x4}}, {{&(0x7f0000000000), 0x6e, &(0x7f0000000400), 0x5, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/37, 0x2c}, {&(0x7f0000001580)=""/20, 0x14}, {&(0x7f0000002fc0)=""/255, 0xff}, {&(0x7f00000017c0)=""/232, 0xe8}, {&(0x7f00000018c0)=""/12, 0xc}, {&(0x7f0000001900)=""/35, 0x23}], 0x6, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/216}, {&(0x7f0000000080)=""/106}, {&(0x7f0000000140)=""/174}, {&(0x7f00000003c0)=""/65}], 0x0, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x40010122, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r1], 0x38}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400"], 0x138}}, 0x0) (async) 5m6.971390275s ago: executing program 32 (id=4403): r0 = socket(0x2, 0x80000, 0x0) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0xff5d, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {0x0}], 0x4}}, {{&(0x7f0000000000), 0x6e, &(0x7f0000000400), 0x5, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/37, 0x2c}, {&(0x7f0000001580)=""/20, 0x14}, {&(0x7f0000002fc0)=""/255, 0xff}, {&(0x7f00000017c0)=""/232, 0xe8}, {&(0x7f00000018c0)=""/12, 0xc}, {&(0x7f0000001900)=""/35, 0x23}], 0x6, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/216}, {&(0x7f0000000080)=""/106}, {&(0x7f0000000140)=""/174}, {&(0x7f00000003c0)=""/65}], 0x0, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x40010122, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r1], 0x38}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400"], 0x138}}, 0x0) socket(0x2, 0x80000, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0xff5d, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {0x0}], 0x4}}, {{&(0x7f0000000000), 0x6e, &(0x7f0000000400), 0x5, &(0x7f0000001480)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001540)=""/37, 0x2c}, {&(0x7f0000001580)=""/20, 0x14}, {&(0x7f0000002fc0)=""/255, 0xff}, {&(0x7f00000017c0)=""/232, 0xe8}, {&(0x7f00000018c0)=""/12, 0xc}, {&(0x7f0000001900)=""/35, 0x23}], 0x6, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/216}, {&(0x7f0000000080)=""/106}, {&(0x7f0000000140)=""/174}, {&(0x7f00000003c0)=""/65}], 0x0, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x40010122, 0x0) (async) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r1], 0x38}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017800400"], 0x138}}, 0x0) (async) 5m6.965035376s ago: executing program 1 (id=4405): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000d", @ANYRES16=r0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x1843}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) (async) r6 = socket(0x8000000010, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0xff00) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 5m6.62166818s ago: executing program 33 (id=4405): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000d", @ANYRES16=r0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x1843}, 0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) (async) r6 = socket(0x8000000010, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0xff00) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) 28.489342865s ago: executing program 4 (id=6451): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) syz_open_procfs$namespace(0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r4, 0x0, 0x70bd27, 0xfffffffa}, 0x14}}, 0x8084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x1a}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) 27.452859993s ago: executing program 6 (id=6457): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000e9ffffff89119000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000240012800c0001006d6163766c616e0014000280080001001000000008a252e83cc56eee73000500", @ANYRES32=r5, @ANYBLOB], 0x4c}}, 0x20000090) socketpair(0x1e, 0x6, 0xc3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x0, 0x10000, 0x0, 0x0, 0x4, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e24, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}}, 0x4, 0x1}, &(0x7f00000003c0)=0x90) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 27.230476411s ago: executing program 6 (id=6459): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0) bind$isdn(r0, &(0x7f0000000240)={0x22, 0xfa, 0xf, 0x6, 0x1}, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3d, 0x107, 0x0, 0x7, {0x1, 0x7c}}, 0x14}}, 0x4010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r10, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.213345602s ago: executing program 4 (id=6470): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) 25.081808012s ago: executing program 5 (id=6471): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) 24.920811642s ago: executing program 5 (id=6473): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000400)) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031611d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@gettaction={0x24, 0x32, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf2509000000120008000700000008000100010000000500070001070000"], 0x2c}}, 0x64000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x4a, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 24.795769795s ago: executing program 4 (id=6474): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1a0}], 0x1}}], 0x1, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ppoll(0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f00000000c0)) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="8b", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0xfffffffe, @private1, 0xffffffff}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x850) recvmsg(0xffffffffffffffff, 0x0, 0x40) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40012102, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40000) 24.417224926s ago: executing program 0 (id=6477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "040000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000b11}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000033000000445408c26b14b422000000000000ffff0a010101013500000500"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x44, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x15}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8815}, 0xc000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbbb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c000}, 0x20040099) 24.186966695s ago: executing program 5 (id=6479): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 23.852505996s ago: executing program 4 (id=6480): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) 23.773087003s ago: executing program 5 (id=6481): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'wlan0\x00', {0x2}, 0x3}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x8001}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x2000012, 0xfffffffffffffff3, 0x0, &(0x7f00000001c0)="63eced8e46dc3f2ddf33c9f8b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c3e93008f2962df2df74f99e6364282ffe26c8a1b6695417d1dfb5001911c59be6ccafa396c4be7cf5183d17b6d6310321cbc6aa738e625ea065983633b773b02fa38d76d62c404bde3d0ed4e112445e790e9c4c3e6798bca501d78545c6530b464eaf14eaf26abe52c710fa8c82809f69d7a1a16821b0fd7615e418424", @ANYRES16=r4, @ANYBLOB="010300000000fbdbdf251c0000001800018014000200626f6e643000"/38], 0x2c}}, 0x40006) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000b80)=0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) r10 = openat$cgroup_freezer_state(r1, &(0x7f0000000bc0), 0x2, 0x0) (async) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000c00)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r12 = gettid() (async) r13 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$netlink(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r14}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r15 = getgid() (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000c40)=0x0) r17 = getuid() (async) r18 = getgid() sendmsg$netlink(r3, &(0x7f0000003600)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)=[{&(0x7f0000000d00)={0x1148, 0x14, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x30, 0x0, 0x0, @ipv6=@private1}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x105, 0x2e, 0x0, 0x1, [@nested={0x4, 0xb7}, @generic="4b5b9d76687f25e09045c07c36df6b5731a3", @nested={0x4, 0x118}, @generic="0c45d107165d803dd779fb66cf0fbcfeffbc9f1b455b31c10afa3bb8f7bc4cc113cf675b9a8098300cba4857f72f094593904da7f5bae033ab39bdde9d5dc5c29b68bb29df470adc9eaaddb1b3652403745f9403d261239cd50026284c2c33ac6c568fe5e7b19075cc79639c609820d49d6dec46bd758e86ec4e05b0cae0b66bcb538f7a1450b74129d8af5c45a639db85096b9f369209e8ab4faf936c1e", @generic="e4876a5a91", @typed={0x32, 0xc2, 0x0, 0x0, @binary="ca022914e71c6e16a4e2d6332c29bc3e0431b5d83262ce55424db336dee0c05e15da7c4c612f90ec7f59f2ddbd15"}, @typed={0x8, 0x79, 0x0, 0x0, @uid}, @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x98, 0x0, 0x0, @pid}, @generic="f38f6babfb5a6e70fb73fe78f2c25a7192b76a1e7c9b5c635d226819f6c4cac86756f4e619a5e8751e18ee27bb5df5e3bdea88bcf9689b41c9d8b03d5a25b9c63c183865d01de2bed807c79058ef6e6374df6dcc86aac8b45f6448867e5d394b2a5dfaf1fc9df97459c41920056cdbfbfb2c387d523d6a436391ab3bc0467d006f781eaa6a172046028fd158b391195bab97b26d173d20be35ab6846dd30793ec5041cff4c73348445e930bcbf890558aacb19bc5d814815965875e98041c65a9fdf71676d335b7122b7d170d1d8ccd30c137f2bd7aca501c9fb98182b8cc0fcbe6051f416d6fba8df09d82fffce22c57ca4c506135f2f523dfbbca0702dc9a121feaf316f892015c27a00c1b2a7592359296ed7022cfd538001ec27ea345beaa35ffc25111aa7a1346439c69a349b44c4ce2504a317a4a514395d49587d68ef1f76e24508ba7c6ba9247230d68b31740e9410676f16b1720c80fd82708b9aa720527cca9149453070884490905afce329dc106015001258085d977b43a241dc22237865b1ffaac0d249795ccb3513f7630bd9b6ca3fb58e33484d46e6397e67605c6192248208734dafbfb9fd1e5a51ee224ac33827f83ef0e420c2c6a73554073d3737383e862c9c00b20652ddcffb7ea8bdf24b40cc893b24e0e657ee46e277eeeab2570169e405fbb1714b8d5b163e0c1387d2f7965abeba8525912e5e0f45d697a2c328e34e67678ebc58f224311b1131c17a9e4587f2a8206b4fbcba5da0c84bfa809c056a969b001a5433270e17fc71620ef867b18d8738acaf29bb290fe0ab04084bb385d072fb507e2d1365c442d3200a80068eec44f5894539682403793f0bc1dd86ade60af8f044cbfc2d5f8b70f866eeaca353d9a23a545a2263391dc32905fe753070f78453d93985ffc7aadf71ce4c4173988287d38185fc50109b71aad4adfd8d95fbd9a535559df247ce29e83dec3768d895363e16366a85afe8134661329b51030a05252ea1a3308140bb8a75a281eabe483b724dd0dd3e739d5228096c87ce190c7c94777049f27a2a5c01f077bf9e8f6e418ea2c4cc211a5b0c5ffa077bdb44ee7745ae968608da5e92f4240b3d79a6dd500efe1f4cc4108c789ff5d50f683ec318f2431c90c6701ff322a7259ece662eb42ba71530e66e68f1883809a047ba66b6377ad1ef37cdd4e6bf64379df1808c126c7d47ce3464747343a92b96c908ed05a7319e5cc14e72514238bf3107aed232e324a0b6a08c5cb082130d8fe1088ca03d6ff09ee7315f216641a9a38a6ace41ddd04129a475a9efe82b4ab8eb970ab35d5fb3f90ae42003e0c08620090d937d4931d0fdbe45c499bb32831ca8f11c25c69812199362bf492846738aa4ae9a8549c7707dc553f9a56c8a2062533337a407a861c7404a4d541d67befaba17675263cdf5d8aa4fdbbd8084f9ea0c4e4f273eacfc16bb43641e4486f2456cc064b13dece4eb8e461196ca33ab38da7a59e3a3ecce1acb6cce7ec4dfc25f4b8c1faa70e089fe07b55bd14a23100aa4c917a0ffb9032b6ef382f0c47fce645f013f8b4866d8e0340e6577a9e8478505580f496a5ea278e9469535eee2efb3887129585564ebfbfd8a996cd1df3d29c7a2aeed86174cafcd9dfebebe7a7abe1d6841384f672a19aec7dd642ab1f52f74fc651ebf0ae4a6ede649c9fa6832d8a52f8d94f897c7d8fc84242bc4bd473306140683c2142efd5c49b5bdffa9de266f8193577a20bb7553b025e94e26bca4fb9b33ee5f824d6f4470336b74b9cb93fad6bb0b268ca4b1d7dcbbf729ca654c90b5f00c88b86be8207978c4fa6dbc61c2a2848d3e751681c5a356ab807622444876c58adfde90156dce019c0c6cb495f723b6cc3173c90d8e69bff687306690785809b322e12a7c7832115dc2c2e3af99120aa542c4852446c9ffe1eacbfbaaa84d79853adeede1bb93a05a9cb526c12ce2a91e4889ab668976bf352bc3f257f24c891b9b71f4b16c1c7ebc13f77d0b8ff557da949c47331d368e86f6c81bc178831f79b3215662e782ad9cc8624fe6b0000ed19c07d9180b625a8c7326fffbe1923534c597f489266fd5676383ee4ee2d946e9a862cace8ab8fa38d00c38bf2efc22d0c66abfa2a6b2d28b2bf8ca460ec9dd10bea1abf1e5ee601b97bf71b62b048a196ada86af96f7df9bb8afea6f5923323a3e58b5292de41234f67d896452dfc74b26508faae385ec7ff2f401c6f3e3fc0f52505c566967746e262cce08c92ec8bd74923b0a57dbbddc5e462b21a8dfab6c8118bad4cb54ef92e1bbadeffde93a49513fda4068abe84467dd10676b0dfeb6721eca7b28cd296b8d47ed003c85c64d0a16a477d357f48414ed233de312f6fafb2570fb66c7eec9e0240121d5a695569398c7b5269f265206c52d7ac3b80f67df8c028a704cfa57840fe7553fbf4a79303f80c25fa198486e62d9876d0aea8b98b193f113c0dba646a0adb6f090c6cd00f411986c8876b9b24acb552770357237f0836d698316fd3d20273e4374e89c1aa24799d82eb75a84c99717e6b99983b032b28333ba22a459ffe3f0835fa6f44f6c561173e3a111ddd4a4f9e6e636426be1c6e25b086f3ba5ae98fc6226d15b919fc0a1c79cd2e827f1c0c9de843aee4a194412e612d2e7a7c392bbd699ec3325ec00da4e4318e9ff9d1c7092827778be68c0a0e4bf5668ba8a2158dd3198de950233374a2a6936d841dce524f251f7c1d32332e0924e7cb47b7e9c95edc519db25a1e92d7824b08bc3d39b34e04bd81a19bc0e7e2681111e0170d5c83c3d4946cd6ebd1d11a6960daad11438e8dd9203dba609381ed6c30c60b9ccd4f72586fc8d62ff0e927def9ec4ac3cab476b5b6947272fcefa0f6d81ce0c44d947e9e8938d526af01720df5f8d07d73e524684a4f3bb53fb32bb2a8083c579a91bee5f1aa4bbd9f208218628484dc6caca494f561a3be0ca6d1b711e1694d2f508b7fcac2b836d952e949b336ff5a7c63f3690fc3c91a58f27b86aa799a8ecce699da5c9d1c9da09c6ae8a979232ecde08d42b8cda162dbe60780e6789026f4f5acd9dc94d13a426d13e485cbc50153cd940eb2ff2599c9fbe988f62a649a613ecb0c68afcdd7a0d9e6facc2e09d277b415a473195fa6c3d1d0a066b38b3d0846e299d17f55925b9666ae8ef2e68dbe3c7f3b0681049968a477c33defbab0d99fe35e7a8a75279612da2ebb12f9e9ddecbf121ab6d88c9c7fd5b5d139fe581e3419efef331fd4ecff54d1533af49d0fce8aec9749518c3b7eb6fa5ee47e2469789cb76c424b61af4947b2a8d5a0b338494a78610ad96cf99ceaf6827d5fe3e569098494368b2a7684126cebcea6cbc422a7aefed2f99edf1ac2bd1bc5aad381baedc513244d669d447823c343fb08ea567ec4ed77b54fc952c6b07897a83b64c85fd2397e2ec89115f7255e30b82e856859c397e90306ead960ce3f7f5b9b33b0d34d18aef93203971a7c0802370282b4edbfbe0ce0ec48de085166f559b73c168747f34316f48b056060aa488a84553fbe7e805d8963ee40fcf25721187450d7ba689b39c4893c0f37d5475bbe0cfffebf6f7bbccda330cafa957662fcb348aa4e4cd474c56b641ecade621e63a19622e1ab917b03f7b7550076b16a384110c3a32f496e25336d45d817d4fc05b1b2e741ccf526a2eef39ca57878b4626df2aa91aa31373ada56116be4d2cd412a986c1ec01916b9781a178afa89cc92e45032c120e7c409a8a05118b8a5ec332ec8b62328045ee97d29c907203bff9b95aaa93c607f392554604b6b3934fd7404d8095d4543ed2c2b7f62cd1916c78de77f10d81486502fdc69c41313f53ed9c7ff2729d310e1c952247f1db4f59290f3e91c8f3a4cca9a9188b3c6b1ca8a141797c9594005a4a5f2ea928646d93a6f8f89f2198b136187cbc1022582ce2c326c31f4d66d57b0c39e7525982e0fbbe61f4bbb0b180f39947e8d17b5b6c3704564775e4eb156242b994d34cf2191fd4b7bf888ccb31ae71d5f8e2df39f69a7f7f68d900ea9b05df78dd7d51905f78fbcdf519645cc577a5e48f1cdcb508b629e304aa1ccbc6119c3c74a2bc74d1ed1256f5eb24c0df338eba6677ef8de257e5992a2eb1f587a49503517575b77ad14109c97656d8f7a5fc098b6617baff5dcb2d3dee511ad7b48962ef15b41fdb694d1597dd18df18bcf07a2bf81cfb8e7bd83421a16cfc6f78ffefef72c713ed9a0126b82dcfc4d075e486696ac92e0f8f0ab8b4a57e17ca2020a53e45f643f5972b578eff79b92be346d3718e1c7e4879158e4e7d3c5a174167872a531c0650219b7762d1531ff1c50f2c7359f91903036be78c4296ab914e025dd5c85791cbc2d37717b0ea642047d28a69eada5796a1c81a0bba7074d10944afb908b205ac0721c48ce37f8a9d374d7339d1fba6051b58cbcde00f5b179151d8f13fc6341c38825d6da98ee9121267537e604fa395b8272cb82405ddd88f730a2fb77e5aa486dbf7a66561a68b6af7cbd8aff7f2073a2c5c373d92262b62d3ec4355bd9e454584aa57e708f52e4a622ec305d3014baf7cf79b59c91a718454721ca3a8c49757a91e384db47a79af1389f501fe5172b0cceeb11a604f0abe0cb622fadccdee09486463486c850a5d7567aaf5f98a93ccd879d824d3cdf7fea5fdca9e5faeeac0578d7f5bff84bf193f2d236b855c593dbd1a69d56e842d0e5a3274643548722d12aa7955363b773af81be81133743a6d044cf3ad44ebbe6aa70134914f48ea3c9ac0ba2c5321abea8601bfdc61dee76f2ee4e3da4a5506aa7135c59254dba2c47c4d877d918f4fb0d839aa6c9b326c208ec9d35294a44c54cbfb27cb5369c36a70e7b444f0378c49656bed0ff075f4230544d0a650fcab6be3d5492a3f576a020821769c9a579dd04763081f0bc6556f28895574b2cf06cb87d6d1807aa4ef5d0571e3bf1aa94eff3ebbe90b318a1c7df1d44dea423b1e0fb365ff6ab87823b3b9956407f357f507c8981d3ab4db2ab9368552b462433a94bf647c5e14d4f3e0e17057f103ec89e879d1f6e699ee2ac2f5782feb586efdbe092e9feb7f72f65b637647389a3ffa1294c49c3e9344d77ce5c74ff76c005b97e03661df54280c66c5924b6d666fce053e188f510f97c100cbe83df6866b631271b055dce2b1ff82e691b637f93c1a15d7e48ebfab58de0eac098f1e2822de510ead0101fe67f53f97a679bdb7b5ec1fdf35e50122e90b8b847ba225b8c141d1f91f749f149c7d16e791274f30ee33f8df1ca744d04572c3ced50185f8b1e9eea938a3cf5427fed7cc9632e45dc5e16e1e053720240f5d1789be95e99df239c10a6e726866d510f774973aae90cda516da8b14f75cbfb35010f1d3f72e1ebac8f30beedbd9fa20af638e6c5baa908e9cc3836a4f6060846fd87dca210c7470de5a95759eab3046d4e02dc5e366d11e1048ff2f9d3cf123c3491490a788a4fe07c9b7be780b814e1fe0480fbc7d775ed0ff8a2c5a69e7f5e4df9db61f3a5e6e740308b6ef00f957188e4a443d7b4685a23f951cda383cefbd9c506624bc274a74474c48c3071e85f1b8255fc6599f5dd66df7bf357638d4f98c8b54bda87620932014c634490d26a54b3fa8f64764acc7d3b9fbd57efb0bacfbcb6c72a43699a42ea4affb1f720aef10555393154862c22853a43e02c0488da1a0e9c788aa1aad6945d18a8ae779cefe3e028520293b9e2cf77d62de5af8153c443e8aaa3b3989ec23b554"]}, 0x1148}, {&(0x7f0000001e80)={0x1290, 0x39, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x24, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x95, 0xdb, 0x0, 0x1, [@typed={0x8, 0xe4, 0x0, 0x0, @ipv4=@multicast1}, @generic="a533fd7200b70b1e357be9402e5dc8d655368fba0cc446e745faef4fde2abc4d91bd369dab78058fd1de809b4d2f975333e4890064b63adf39e48adb08df9b6bb8071dccc6b5373e0dced6135e829f998bd8f8ba2d767b5eacb066d6cc0b0ef18e89352e61aa761e782895dd877e7df23db10265afbf4c7089bc635a54fe80b6f8a0747bb6", @nested={0x4, 0x32}]}, @nested={0x10, 0xb0, 0x0, 0x1, [@nested={0x4, 0x1b}, @typed={0x8, 0x78, 0x0, 0x0, @uid}]}, @typed={0x7b, 0x71, 0x0, 0x0, @binary="a5dad7031b7e1d0cac067b39bf22cfe3dca7d5c59bbb5c8a3ec6a8cab0b5cf2ca54ba2b9469fd28ec2cb6d74e59e14128ea8028e54cea29fcb4aa1b3cda1531f579b2e7da2a17cba999b8024fe9d7a56a09c6fc9894e8e017cbd8c70f2e068c48b11a562bd0496f75c965d57ff7bb4c8c49a43258636c9"}, @generic="7e3742f733199ceb7f6763a066d024249c3cd2c6b075e64db5b39402ce1a773b1a43a3d6bf8cf93494bcd1806b79daef38dc5766ce1b13cb07672f5fccdb7af08c6b88d806179c08ea0fa98490029a3abf3df296aa1ff429ceeeb977168d0a076cac13d639a512", @typed={0xd3, 0x6, 0x0, 0x0, @binary="81fae1eddd0fcd40692ea7d6c932260a00b989bfec353f116d2065864afdc60413a248769b6f8a61744ffb670d6e86e30f4e88df12de8d8d6a86223c5e9af41692ba739bfd8863fad6bd1e571731b9595ea4c763a683bf9a5f3caf5d900422f5a32c3ce51d61c2632e5ba7ca915dc022509aff96f7ea931d314e4c8e85488b8f51285deb886ab0cc97dca4afb23ac5524f43bbb2b27a579dc32abcb5c6fc04f76084307957b37e918d71b559726f72287b751e94343050feb1ca6ffecca43a75c7d96d7847ad894b1445a840f9232d"}, @generic="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", @typed={0x6, 0x150, 0x0, 0x0, @str='\xfb\x00'}, @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xbf, 0x0, 0x0, @pid}]}, 0x1290}, {&(0x7f0000000500)={0x184, 0x2b, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x60, 0xca, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x3}, @typed={0x53, 0x139, 0x0, 0x0, @binary="d932ae257ee267827facff08077d246f41235397d20ea6f1fbf27a5e4d1559ecee1c6262b9a5091ce3a1090f1e138d4c2c2ce1848d052da6028d8f52dae600cd0aa5f8863a0bc26c2438b0ca5fa973"}]}, @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xca, 0x12d, 0x0, 0x0, @binary="fc557f13eaf91171e9b47fad79c7c7ad570e1c12b548d2d3ee270ca850e948e900ca20c10e89d86bbecd975323d6a42645aa8835f7f2e5aabb3e566ea2ea98e3a96ccdef1b12d6cad8acc260a0624e65616e3096ab63c5e617f71b2b8cd65d886de6fac8e88695ba6b8cd468bc57cd9601387b6e4d36b40e0a0fb473293008605c77e9bb3ed2eab68b6ace2175adae2a206a726b23e76a75f45c855cea2265c820cc1aa465cae4ea1ad5d5bd45ed50e5c1e0c9810f9529f0ad8fb6ef0f5d738d954f966395fe"}, @nested={0x29, 0xa0, 0x0, 0x1, [@generic="43d5668c14b1ccafe4dfa02954d361dc380e76d3e092965cf109b1b6a874851776d5d77d6e"]}, @typed={0x8, 0x31, 0x0, 0x0, @fd=r3}]}, 0x184}, {&(0x7f0000003140)={0x368, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, "", [@nested={0xb2, 0x5a, 0x0, 0x1, [@generic="e63851eeefbd3a757926bb6a39187f3f1084275553e91d17df584f2158adc8f5760e911225ca23149b9d41f4a9ea2813e74312bf5f784b92c707c5e6a1b4cbe25685efedd2ca54b452b75fc86c8d9342b7a880b6ecede060fdde2e73f8fd6c3ef9039d9213e6d9db331fd608cc7b825479e0b64959d842c82ebc5c207fbfe6790d8c2d686e95ac35b54f009dbb308f46ddb51ff0ed410903c559631ac46d44221b7489f15e762e6aa72f16c7e36a"]}, @generic="8bdd32bacf8afebd114f4ed3b6c85fb7bb75db", @typed={0x14, 0xc5, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@loopback}, @generic="eb715c609a918a0e89e8d704c832d206e2d85d2f1488f9249ae3f476cf4f1c3cc9924a73c3cd5be090f8a72a6a1f0c0b6d7e1372764635100b4cc3c3d25c7f1fedaf73b51cc51c2c1f4b76d7c0b2ee887f7ac7a5", @generic="624b9902c6fcde5cb91600e66b219c7c10f1c5b0c175d96c2ef1aebb691d778af7dda472f4c38a359d533cf5425b834b95c2d8dfc5ed8751d0cd763ed547793d81853877fc122db73fc6ce417403ce9e8c45ca067987cfffa34699f543fe698d83e501d5379edc7c91c429ffa2b43333cdbac091ae2983f5052b155b2c97a3185659373156d5da34e30c717011391ddd34531e8a2cf4b49d9bb27a8c903221d561a08d12f6855d0fac1bb6017f42eb18efd5c388c59a997a6e5ab02c0a54e7071c719505ca0c595716db486471e1e137dd043b0c484a302b544b3f", @nested={0x5c, 0x77, 0x0, 0x1, [@nested={0x4, 0x14d}, @typed={0x49, 0xf9, 0x0, 0x0, @binary="3ae72c9d02d8d642901aa599eec5571f3c75b89b69b4b0c9e217d6763ac9ccd9fa551d8fd450b3e82e25705c12be1de16cf5de969d466117bdf233d40f5cf3a62612593bdb"}, @typed={0x8, 0x11b, 0x0, 0x0, @pid}]}, @generic="55ef90186349f75120ec4b518f68795685fd48b017e002b2126241b2befeec238692973efc3408cbc3ef5e26b3b3aa4fbaeb2c6549b2d968da3a55d2de71a50141cb03211039c6e770d5fe5cbda23d63132f9d09f70b8207457c099a31cde7b50e045fb8265a75fc161de454ffbc1784efd42a6726972cb06b369b158b5b1c00f88b0b06b441131615f57f1745fdca231c3ff4a997d73d56acb7ba5017f3026772177e36a5d579b6ac8bc0ae47594c78a0d19db44e51fdb2c00497a43fb266f3b3035c174dbe23787064485b1399457d67803c3053e23c14a6a99224da8f"]}, 0x368}, {&(0x7f0000000780)={0x2c, 0x10, 0x302, 0x70bd2d, 0x25dfdbfc, "", [@typed={0xe, 0x10, 0x0, 0x0, @str='syzkaller\x00'}, @nested={0xc, 0x7c, 0x0, 0x1, [@nested={0x4, 0xf6}, @nested={0x4, 0x134}]}]}, 0x2c}], 0x5, &(0x7f00000034c0)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r1, r1, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r0, r9, r1, r2, r2, r1, r10]}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}], 0x128, 0x20000001}, 0x8045) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x0, @private}}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) 23.633549883s ago: executing program 5 (id=6482): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23.483050489s ago: executing program 0 (id=6483): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, &(0x7f00000000c0)=0x7cfd504e, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r5}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000000900010073797a3000000000090002"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, 0x0, 0x2d) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100000022cbd70000000000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0xdf5e52a1e347dea9}, 0x4008000) 23.225709413s ago: executing program 0 (id=6484): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x40, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f0000000380)}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 23.224632553s ago: executing program 6 (id=6485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) pselect6(0x40, &(0x7f0000000000)={0x4, 0x9, 0x9, 0x0, 0x5409e13e, 0xd29, 0x5, 0x101}, &(0x7f0000000080)={0x1, 0x165b, 0x6, 0x5, 0x200, 0x1ff, 0x10001, 0x1b}, &(0x7f00000000c0)={0xf81, 0x8001, 0x2, 0x400000000000, 0x10001, 0x1, 0x2f0e0, 0x3}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x2c, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0xfffc, 0x0, 0x1000, {[@eol]}}}}}}}, 0x0) 23.003788894s ago: executing program 3 (id=6486): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r2], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x6, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x80002, 0x0) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x100) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000980)=ANY=[@ANYRES32=r2], 0xf4}, 0x1, 0x0, 0x0, 0x8001}, 0x4040081) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000828bd7000fcffff1c0a00000005000500050000000500050004000000080004000f000000080002000100000005000500800000000814020000000000050005000b0000000c00068008000600000000000500050000000000"], 0x60}}, 0x20088000) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000828bd7000fcffff1c0a00000005000500050000000500050004000000080004000f000000080002000100000005000500800000000814020000000000050005000b0000000c00068008000600000000000500050000000000"], 0x60}}, 0x20088000) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r5, 0xffffffffffffffff, 0x26, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)=[0x9, 0xa9af, 0x40d], 0x0, 0x4, 0x3, 0x1}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r13}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r13}, 0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x83, &(0x7f0000000140)={r12}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r12, 0x3}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r12, 0x3}, &(0x7f0000000040)=0x8) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r14], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r14], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r16 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r16, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r14, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x29, 0x0, @empty, @empty}}}}) 22.881005017s ago: executing program 6 (id=6487): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000062f3ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001cd315177afb9caf912d0ee55a00000085000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) unshare(0x2a020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$key(0xf, 0x3, 0x2) ioctl$sock_netdev_private(r6, 0x8914, 0x0) r7 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r7, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, '.\x00'}, 0x6e, 0x0}}], 0x1, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4a6}}, 0x7, 0x1, 0x3, 0x6, 0x1000}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={r9, 0x5}, &(0x7f0000000280)=0x8) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000010000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.869278007s ago: executing program 0 (id=6488): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) getpeername$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) close(0x3) getpeername$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x10, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}}, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x7, 0x4, 0xfffffffffffffff8, 0x3d60891c, 0x780, 0x8, 0x7f, 0x10000, 0x10000, 0x2, 0x6, 0x8, 0x6}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000b40)={r6, 0x10000}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$inet6(0xa, 0x3, 0x3c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028005000c0001000000140007000000000000000000000000000000000108000a00", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) (async) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 22.637661303s ago: executing program 3 (id=6489): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028002100"], 0x38}}, 0x20040810) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) sendfile(r2, r4, &(0x7f0000000240)=0x6, 0x9) 22.636871254s ago: executing program 6 (id=6490): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x80, 0x453, 0x20, 0x70bd25, 0x25dfdbff, "7142a841e88959584f062a0c559b120efbfa2094da0283ff202b57874e2cfd839df1f08b6d688c720153951f8c838a6f2e0823423da8d7df8879e19a8a93b9ff9471ed287d2cf098c8c96ca609c7f9e220374574bfc1df7d2eeb28d42d3d62762e558240017ca75247c8b95553290e79", ["", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2f, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x1, &(0x7f00000006c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x3f, &(0x7f00000003c0)=""/63, 0x40f00, 0x28, '\x00', r2, 0x17, r8, 0x8, &(0x7f0000000540)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2480c, r8, 0x7, 0x0, &(0x7f0000000580)=[{0x1, 0x2, 0x3, 0xa}, {0x4, 0x2, 0x5, 0x6}, {0x4, 0x4, 0x10, 0x3}, {0x3, 0x5, 0xb, 0x8}, {0x3, 0x3, 0x8, 0xc}, {0x0, 0x1, 0x6, 0xa}, {0x2, 0x5, 0x10, 0x1}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) r10 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$BTRFS_IOC_SNAP_DESTROY(r10, 0x5000940f, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40000, 0x4, 0x0, 0xe}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8040) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006, 0x0, 0x0, 0xb}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x9}, {}]}]}}, &(0x7f0000000a80)=""/172, 0x3e, 0xac, 0x9}, 0x28) 22.635714304s ago: executing program 4 (id=6491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xb, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000240)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 22.62622411s ago: executing program 0 (id=6492): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}}, 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x4e23, @private=0xa010102}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 22.546943086s ago: executing program 3 (id=6493): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) 22.441399443s ago: executing program 0 (id=6494): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$FICLONE(r1, 0x40049409, r1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) socket$unix(0x1, 0x1, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x3) close(r0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 22.401857194s ago: executing program 5 (id=6495): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_ct={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x7ff, 0x6, 0x1, 0xff}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2a6e20d5287a7a4a1a42720978a425d3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20004084) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x2, r4, 0x30, r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000580)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 22.190124874s ago: executing program 3 (id=6496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000b060104000000000000000006000002050001000700000024000780080009400000ffff1800018014000240030000000000000000000000000000010900020073797a310000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004804) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x4, 0x3}]}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_getnexthop={0x1c, 0x6a, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xac}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x27) 22.037778504s ago: executing program 3 (id=6497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000028006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000b7f5849d3e1cfd6953c7547eb8ee5b720a864d5a43ef6dbc7107d73bd216fbb76b760338e7a31e17184d6c6162001f9775a0643add127e76f40657bd24c855ac74eacf3f5cb2a0f7a88da0a0596a16bc65b534a7d50315bc529c083eba7495965fa94ae6795dca3715c655eda857d3e99206f6e6c0c5625e7734839047edf7a4cfdb252c422268bf7cdc692f50aa20fcc50d75607bd5ad5d3fd731e8a6d2c8373b"], 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x2c, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0xfffc, 0x0, 0x1000, {[@eol]}}}}}}}, 0x0) 22.017771453s ago: executing program 6 (id=6498): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x40, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f0000000380)}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 21.987770822s ago: executing program 4 (id=6499): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) 21.923960114s ago: executing program 3 (id=6500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000007110b100000000000000008000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setlink={0x30, 0x13, 0x1, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4c00, 0x7920}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = socket$rxrpc(0x21, 0x2, 0x2) listen(r6, 0x5) (async, rerun: 64) listen(r5, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x31, 0xffffffffffffffff, 0x533d2000) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x619}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0, 0x4001}}], 0x48, 0x84}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x80000) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="0e2df49f6622f87cfedcbdaf40add72a686a5b04435eb41d1688dc20e7941153e5a26f681c"], 0x14}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.010898465s ago: executing program 34 (id=6494): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$FICLONE(r1, 0x40049409, r1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) socket$unix(0x1, 0x1, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x3) close(r0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 3.898814753s ago: executing program 35 (id=6495): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x60, 0x2, [@TCA_CGROUP_ACT={0x5c, 0x1, [@m_ct={0x58, 0x1, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x7ff, 0x6, 0x1, 0xff}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "2a6e20d5287a7a4a1a42720978a425d3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20004084) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x2, r4, 0x30, r2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000580)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.540751953s ago: executing program 36 (id=6498): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x40, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, 0x0, &(0x7f0000000380)}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 1.188408964s ago: executing program 37 (id=6500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000007110b100000000000000008000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setlink={0x30, 0x13, 0x1, 0xfffffffa, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4c00, 0x7920}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = socket$rxrpc(0x21, 0x2, 0x2) listen(r6, 0x5) (async, rerun: 64) listen(r5, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x31, 0xffffffffffffffff, 0x533d2000) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x619}, {0x0}, &(0x7f0000000880)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, 0x0, 0x4001}}], 0x48, 0x84}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x80000) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="0e2df49f6622f87cfedcbdaf40add72a686a5b04435eb41d1688dc20e7941153e5a26f681c"], 0x14}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 38 (id=6499): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) kernel console output (not intermixed with test programs): 873][T26901] sctp: [Deprecated]: syz.6.5691 (pid 26901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 896.998873][T26901] Use struct sctp_sack_info instead [ 897.207607][T26902] bond6 (unregistering): Released all slaves [ 897.228942][T26868] wg1 speed is unknown, defaulting to 1000 [ 897.377228][T26906] lo speed is unknown, defaulting to 1000 [ 897.386855][T26906] wg1 speed is unknown, defaulting to 1000 [ 897.395870][T26906] ip6_vti0 speed is unknown, defaulting to 1000 [ 897.416983][T26907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5694'. [ 897.706301][T26910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5695'. [ 897.729209][T26906] wg1 speed is unknown, defaulting to 1000 [ 897.951126][T26917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5697'. [ 897.991069][T26917] ip6tnl0: entered promiscuous mode [ 897.996502][T26917] ip6tnl0: entered allmulticast mode [ 898.058681][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'. [ 898.122157][T26915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5696'. [ 898.152586][T26915] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5696'. [ 898.223547][T26923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5699'. [ 898.404621][T26915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 898.420838][T26923] gretap0: left allmulticast mode [ 898.426206][T26923] gretap0: left promiscuous mode [ 898.434624][T26923] bridge0: port 3(gretap0) entered disabled state [ 898.449261][T26923] bridge_slave_0: left allmulticast mode [ 898.455817][T26923] bridge_slave_0: left promiscuous mode [ 898.464368][T26923] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.535070][T26923] bridge0 (unregistering): left allmulticast mode [ 898.860829][T26939] FAULT_INJECTION: forcing a failure. [ 898.860829][T26939] name failslab, interval 1, probability 0, space 0, times 0 [ 898.873680][T26939] CPU: 1 UID: 0 PID: 26939 Comm: syz.0.5703 Not tainted syzkaller #0 PREEMPT(full) [ 898.873710][T26939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 898.873724][T26939] Call Trace: [ 898.873740][T26939] [ 898.873749][T26939] dump_stack_lvl+0x189/0x250 [ 898.873788][T26939] ? __pfx____ratelimit+0x10/0x10 [ 898.873814][T26939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.873844][T26939] ? __pfx__printk+0x10/0x10 [ 898.873872][T26939] ? __lock_acquire+0xab9/0xd20 [ 898.873902][T26939] should_fail_ex+0x414/0x560 [ 898.873940][T26939] should_failslab+0xa8/0x100 [ 898.873965][T26939] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 898.874002][T26939] ? pfn_valid+0x125/0x4d0 [ 898.874028][T26939] ? pfn_valid+0x440/0x4d0 [ 898.874057][T26939] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 898.874092][T26939] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 898.874124][T26939] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 898.874165][T26939] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 898.874197][T26939] ? bpf_dispatcher_xdp+0x800/0x1000 [ 898.874240][T26939] ? 0xffffffffa0201654 [ 898.874257][T26939] ? 0xffffffffa02016d8 [ 898.874274][T26939] ? 0xffffffffa02019cc [ 898.874291][T26939] ? 0xffffffffa02036d8 [ 898.874308][T26939] ? 0xffffffffa0203bd4 [ 898.874354][T26939] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 898.874396][T26939] ? _copy_from_user+0x94/0xb0 [ 898.874424][T26939] ? bpf_test_init+0x113/0x150 [ 898.874447][T26939] ? xdp_convert_md_to_buff+0x5b/0x330 [ 898.874476][T26939] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 898.874529][T26939] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 898.874562][T26939] ? __fget_files+0x2a/0x420 [ 898.874588][T26939] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 898.874615][T26939] bpf_prog_test_run+0x2c7/0x340 [ 898.874643][T26939] __sys_bpf+0x562/0x860 [ 898.874668][T26939] ? __pfx___sys_bpf+0x10/0x10 [ 898.874709][T26939] ? ksys_write+0x22a/0x250 [ 898.874744][T26939] ? __pfx_ksys_write+0x10/0x10 [ 898.874781][T26939] __x64_sys_bpf+0x7c/0x90 [ 898.874814][T26939] do_syscall_64+0xfa/0xfa0 [ 898.874839][T26939] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.874863][T26939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.874884][T26939] ? clear_bhb_loop+0x60/0xb0 [ 898.874910][T26939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.874931][T26939] RIP: 0033:0x7f808c58f749 [ 898.874951][T26939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.874969][T26939] RSP: 002b:00007f808d514038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 898.874993][T26939] RAX: ffffffffffffffda RBX: 00007f808c7e5fa0 RCX: 00007f808c58f749 [ 898.875009][T26939] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 898.875022][T26939] RBP: 00007f808d514090 R08: 0000000000000000 R09: 0000000000000000 [ 898.875034][T26939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 898.875047][T26939] R13: 00007f808c7e6038 R14: 00007f808c7e5fa0 R15: 00007ffccc54c7a8 [ 898.875083][T26939] [ 899.410931][T26951] sctp: [Deprecated]: syz.0.5706 (pid 26951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 899.410931][T26951] Use struct sctp_sack_info instead [ 899.471476][T26944] lo speed is unknown, defaulting to 1000 [ 899.497237][T26947] lo speed is unknown, defaulting to 1000 [ 899.522242][T26944] wg1 speed is unknown, defaulting to 1000 [ 899.551841][T26947] wg1 speed is unknown, defaulting to 1000 [ 899.559016][T26944] ip6_vti0 speed is unknown, defaulting to 1000 [ 900.151201][T26947] ip6_vti0 speed is unknown, defaulting to 1000 [ 900.160922][T26944] wg1 speed is unknown, defaulting to 1000 [ 900.379654][T26982] FAULT_INJECTION: forcing a failure. [ 900.379654][T26982] name failslab, interval 1, probability 0, space 0, times 0 [ 900.392414][T26982] CPU: 1 UID: 0 PID: 26982 Comm: syz.3.5716 Not tainted syzkaller #0 PREEMPT(full) [ 900.392446][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 900.392461][T26982] Call Trace: [ 900.392471][T26982] [ 900.392481][T26982] dump_stack_lvl+0x189/0x250 [ 900.392516][T26982] ? __pfx____ratelimit+0x10/0x10 [ 900.392543][T26982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.392574][T26982] ? __pfx__printk+0x10/0x10 [ 900.392608][T26982] ? __lock_acquire+0xab9/0xd20 [ 900.392635][T26982] should_fail_ex+0x414/0x560 [ 900.392676][T26982] should_failslab+0xa8/0x100 [ 900.392702][T26982] kmem_cache_alloc_noprof+0x74/0x6e0 [ 900.392735][T26982] ? skb_clone+0x212/0x3a0 [ 900.392763][T26982] ? run_filter+0x23/0x270 [ 900.392795][T26982] skb_clone+0x212/0x3a0 [ 900.392822][T26982] ? packet_rcv+0x567/0x1730 [ 900.392851][T26982] packet_rcv+0x65b/0x1730 [ 900.392891][T26982] __netif_receive_skb_core+0x25f2/0x2f90 [ 900.392925][T26982] ? is_bpf_text_address+0x292/0x2b0 [ 900.392950][T26982] ? is_bpf_text_address+0x26/0x2b0 [ 900.392983][T26982] ? __kernel_text_address+0xd/0x40 [ 900.393022][T26982] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 900.393086][T26982] __netif_receive_skb_list_core+0x23f/0x800 [ 900.393139][T26982] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 900.393177][T26982] netif_receive_skb_list_internal+0x96f/0xcb0 [ 900.393219][T26982] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 900.393256][T26982] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 900.393304][T26982] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 900.393343][T26982] netif_receive_skb_list+0x54/0x450 [ 900.393382][T26982] bpf_test_run_xdp_live+0x178b/0x1b10 [ 900.393421][T26982] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 900.393453][T26982] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 900.393496][T26982] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 900.393528][T26982] ? bpf_dispatcher_xdp+0x800/0x1000 [ 900.393571][T26982] ? 0xffffffffa0201648 [ 900.393588][T26982] ? 0xffffffffa02016d8 [ 900.393606][T26982] ? 0xffffffffa02019cc [ 900.393623][T26982] ? 0xffffffffa02036d8 [ 900.393640][T26982] ? 0xffffffffa0203bd4 [ 900.393688][T26982] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 900.393731][T26982] ? _copy_from_user+0x94/0xb0 [ 900.393761][T26982] ? bpf_test_init+0x113/0x150 [ 900.393785][T26982] ? xdp_convert_md_to_buff+0x5b/0x330 [ 900.393818][T26982] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 900.393867][T26982] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 900.393902][T26982] ? __fget_files+0x2a/0x420 [ 900.393930][T26982] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 900.393960][T26982] bpf_prog_test_run+0x2c7/0x340 [ 900.393990][T26982] __sys_bpf+0x562/0x860 [ 900.394015][T26982] ? __pfx___sys_bpf+0x10/0x10 [ 900.394058][T26982] ? ksys_write+0x22a/0x250 [ 900.394093][T26982] ? __pfx_ksys_write+0x10/0x10 [ 900.394140][T26982] __x64_sys_bpf+0x7c/0x90 [ 900.394175][T26982] do_syscall_64+0xfa/0xfa0 [ 900.394200][T26982] ? lockdep_hardirqs_on+0x9c/0x150 [ 900.394225][T26982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.394247][T26982] ? clear_bhb_loop+0x60/0xb0 [ 900.394274][T26982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.394295][T26982] RIP: 0033:0x7fbd8ab8f749 [ 900.394314][T26982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.394334][T26982] RSP: 002b:00007fbd8ba5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.394356][T26982] RAX: ffffffffffffffda RBX: 00007fbd8ade5fa0 RCX: 00007fbd8ab8f749 [ 900.394373][T26982] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 900.394387][T26982] RBP: 00007fbd8ba5f090 R08: 0000000000000000 R09: 0000000000000000 [ 900.394401][T26982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.394414][T26982] R13: 00007fbd8ade6038 R14: 00007fbd8ade5fa0 R15: 00007fffbdf98d68 [ 900.394452][T26982] [ 901.054866][T26995] netlink: 'syz.4.5720': attribute type 3 has an invalid length. [ 901.195424][T26999] lo speed is unknown, defaulting to 1000 [ 901.233476][T26999] wg1 speed is unknown, defaulting to 1000 [ 901.494396][T26999] ip6_vti0 speed is unknown, defaulting to 1000 [ 901.494424][T26947] wg1 speed is unknown, defaulting to 1000 [ 902.075312][T27019] __nla_validate_parse: 2 callbacks suppressed [ 902.075336][T27019] netlink: 1323 bytes leftover after parsing attributes in process `syz.0.5727'. [ 902.096597][T26999] wg1 speed is unknown, defaulting to 1000 [ 902.497523][T27033] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 902.519764][T27033] bond6 (unregistering): Released all slaves [ 902.693639][T27048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5734'. [ 902.920195][T27060] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5737'. [ 902.942588][T27048] lo speed is unknown, defaulting to 1000 [ 902.948531][T27060] netlink: 'syz.4.5737': attribute type 9 has an invalid length. [ 902.964238][T27060] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5737'. [ 902.984879][T27060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5737'. [ 903.057160][T27048] wg1 speed is unknown, defaulting to 1000 [ 903.069103][T27054] lo speed is unknown, defaulting to 1000 [ 903.081557][T27060] block nbd10: server does not support multiple connections per device. [ 903.092663][T27048] ip6_vti0 speed is unknown, defaulting to 1000 [ 903.112962][T27060] block nbd10: shutting down sockets [ 903.157927][T27066] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5736'. [ 903.296781][T27064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5736'. [ 903.318548][T27064] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5736'. [ 903.481813][T27048] wg1 speed is unknown, defaulting to 1000 [ 903.521656][T27054] wg1 speed is unknown, defaulting to 1000 [ 903.560860][T27054] ip6_vti0 speed is unknown, defaulting to 1000 [ 903.564403][T27079] netlink: 'syz.6.5741': attribute type 1 has an invalid length. [ 903.677972][T27086] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5741'. [ 903.777501][T27083] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 903.819507][T27083] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 903.950704][T27086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 904.032761][T27079] bond6: (slave bridge6): Enslaving as an active interface with a down link [ 904.052684][T27092] macvlan3: entered promiscuous mode [ 904.058143][T27092] macvlan3: entered allmulticast mode [ 904.064663][T27092] bond6: entered promiscuous mode [ 904.070804][T27092] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 904.137066][T27092] bond6: left promiscuous mode [ 904.196964][T27099] xt_TCPMSS: Only works on TCP SYN packets [ 904.503401][T27103] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5746'. [ 904.573705][T27054] wg1 speed is unknown, defaulting to 1000 [ 905.184774][T27123] 0ªî{X¹¦: entered promiscuous mode [ 905.237729][T27126] netlink: 'syz.6.5751': attribute type 4 has an invalid length. [ 906.087893][T27139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 906.230385][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 906.717491][T27154] FAULT_INJECTION: forcing a failure. [ 906.717491][T27154] name failslab, interval 1, probability 0, space 0, times 0 [ 906.730249][T27154] CPU: 0 UID: 0 PID: 27154 Comm: syz.4.5760 Not tainted syzkaller #0 PREEMPT(full) [ 906.730281][T27154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 906.730296][T27154] Call Trace: [ 906.730305][T27154] [ 906.730317][T27154] dump_stack_lvl+0x189/0x250 [ 906.730351][T27154] ? __pfx____ratelimit+0x10/0x10 [ 906.730377][T27154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.730406][T27154] ? __pfx__printk+0x10/0x10 [ 906.730433][T27154] ? __lock_acquire+0xab9/0xd20 [ 906.730466][T27154] should_fail_ex+0x414/0x560 [ 906.730507][T27154] should_failslab+0xa8/0x100 [ 906.730534][T27154] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 906.730573][T27154] ? pfn_valid+0x125/0x4d0 [ 906.730602][T27154] ? pfn_valid+0x440/0x4d0 [ 906.730633][T27154] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 906.730671][T27154] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 906.730703][T27154] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 906.730754][T27154] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 906.730786][T27154] ? bpf_dispatcher_xdp+0x800/0x1000 [ 906.730829][T27154] ? 0xffffffffa02016d8 [ 906.730847][T27154] ? 0xffffffffa0201850 [ 906.730865][T27154] ? 0xffffffffa02019cc [ 906.730882][T27154] ? 0xffffffffa02036d8 [ 906.730899][T27154] ? 0xffffffffa0203bd4 [ 906.730947][T27154] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 906.730990][T27154] ? _copy_from_user+0x94/0xb0 [ 906.731020][T27154] ? bpf_test_init+0x113/0x150 [ 906.731044][T27154] ? xdp_convert_md_to_buff+0x5b/0x330 [ 906.731076][T27154] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 906.731124][T27154] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 906.731159][T27154] ? __fget_files+0x2a/0x420 [ 906.731187][T27154] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 906.731217][T27154] bpf_prog_test_run+0x2c7/0x340 [ 906.731247][T27154] __sys_bpf+0x562/0x860 [ 906.731272][T27154] ? __pfx___sys_bpf+0x10/0x10 [ 906.731291][T27154] ? bpf_trace_run2+0x322/0x4b0 [ 906.731363][T27154] __x64_sys_bpf+0x7c/0x90 [ 906.731397][T27154] do_syscall_64+0xfa/0xfa0 [ 906.731423][T27154] ? lockdep_hardirqs_on+0x9c/0x150 [ 906.731449][T27154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.731471][T27154] ? clear_bhb_loop+0x60/0xb0 [ 906.731499][T27154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.731520][T27154] RIP: 0033:0x7f72e958f749 [ 906.731539][T27154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.731560][T27154] RSP: 002b:00007f72ea438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 906.731583][T27154] RAX: ffffffffffffffda RBX: 00007f72e97e5fa0 RCX: 00007f72e958f749 [ 906.731600][T27154] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 906.731615][T27154] RBP: 00007f72ea438090 R08: 0000000000000000 R09: 0000000000000000 [ 906.731630][T27154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 906.731643][T27154] R13: 00007f72e97e6038 R14: 00007f72e97e5fa0 R15: 00007ffc1319e5c8 [ 906.731682][T27154] [ 907.310722][T27158] lo speed is unknown, defaulting to 1000 [ 907.319576][T27158] wg1 speed is unknown, defaulting to 1000 [ 907.327560][T27158] ip6_vti0 speed is unknown, defaulting to 1000 [ 907.593920][T27158] wg1 speed is unknown, defaulting to 1000 [ 907.879613][T27179] netlink: 'syz.4.5768': attribute type 4 has an invalid length. [ 908.216787][T27183] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5769'. [ 908.227257][T27183] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 908.260150][T27183] openvswitch: netlink: Message has 75 unknown bytes. [ 908.311388][T27198] FAULT_INJECTION: forcing a failure. [ 908.311388][T27198] name failslab, interval 1, probability 0, space 0, times 0 [ 908.324161][T27198] CPU: 0 UID: 0 PID: 27198 Comm: syz.3.5773 Not tainted syzkaller #0 PREEMPT(full) [ 908.324191][T27198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 908.324205][T27198] Call Trace: [ 908.324214][T27198] [ 908.324224][T27198] dump_stack_lvl+0x189/0x250 [ 908.324260][T27198] ? __pfx____ratelimit+0x10/0x10 [ 908.324285][T27198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.324316][T27198] ? __pfx__printk+0x10/0x10 [ 908.324343][T27198] ? __lock_acquire+0xab9/0xd20 [ 908.324377][T27198] should_fail_ex+0x414/0x560 [ 908.324417][T27198] should_failslab+0xa8/0x100 [ 908.324442][T27198] kmem_cache_alloc_bulk_noprof+0x72/0x620 [ 908.324481][T27198] ? pfn_valid+0x125/0x4d0 [ 908.324510][T27198] ? pfn_valid+0x440/0x4d0 [ 908.324541][T27198] bpf_test_run_xdp_live+0x15f6/0x1b10 [ 908.324580][T27198] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 908.324611][T27198] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 908.324654][T27198] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 908.324685][T27198] ? bpf_dispatcher_xdp+0x800/0x1000 [ 908.324728][T27198] ? 0xffffffffa02016d8 [ 908.324747][T27198] ? 0xffffffffa0201898 [ 908.324765][T27198] ? 0xffffffffa02019cc [ 908.324782][T27198] ? 0xffffffffa02036d8 [ 908.324800][T27198] ? 0xffffffffa0203bd4 [ 908.324847][T27198] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 908.324899][T27198] ? _copy_from_user+0x94/0xb0 [ 908.324929][T27198] ? bpf_test_init+0x113/0x150 [ 908.324954][T27198] ? xdp_convert_md_to_buff+0x5b/0x330 [ 908.324985][T27198] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 908.325033][T27198] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 908.325068][T27198] ? __fget_files+0x2a/0x420 [ 908.325097][T27198] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 908.325127][T27198] bpf_prog_test_run+0x2c7/0x340 [ 908.325156][T27198] __sys_bpf+0x562/0x860 [ 908.325181][T27198] ? __pfx___sys_bpf+0x10/0x10 [ 908.325223][T27198] ? ksys_write+0x22a/0x250 [ 908.325258][T27198] ? __pfx_ksys_write+0x10/0x10 [ 908.325298][T27198] __x64_sys_bpf+0x7c/0x90 [ 908.325332][T27198] do_syscall_64+0xfa/0xfa0 [ 908.325358][T27198] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.325384][T27198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.325406][T27198] ? clear_bhb_loop+0x60/0xb0 [ 908.325433][T27198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.325455][T27198] RIP: 0033:0x7fbd8ab8f749 [ 908.325475][T27198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.325494][T27198] RSP: 002b:00007fbd8ba5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 908.325516][T27198] RAX: ffffffffffffffda RBX: 00007fbd8ade5fa0 RCX: 00007fbd8ab8f749 [ 908.325533][T27198] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 908.325548][T27198] RBP: 00007fbd8ba5f090 R08: 0000000000000000 R09: 0000000000000000 [ 908.325562][T27198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.325576][T27198] R13: 00007fbd8ade6038 R14: 00007fbd8ade5fa0 R15: 00007fffbdf98d68 [ 908.325614][T27198] [ 909.087441][T27216] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 909.103836][T27216] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 909.263747][T27217] bond8 (unregistering): Released all slaves [ 909.394983][T27226] netlink: 'syz.6.5781': attribute type 4 has an invalid length. [ 909.555689][T27224] netlink: 'syz.5.5783': attribute type 10 has an invalid length. [ 909.690355][T27224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.700330][T27224] team0: Port device bond0 added [ 909.709040][T27224] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5783'. [ 909.874498][T27247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5789'. [ 910.076250][T27258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5789'. [ 910.290894][T27266] xt_connbytes: Forcing CT accounting to be enabled [ 910.310304][T27265] xt_connbytes: Forcing CT accounting to be enabled [ 910.677181][T27274] netlink: 'syz.5.5795': attribute type 4 has an invalid length. [ 910.771754][T27278] netlink: 'syz.3.5799': attribute type 1 has an invalid length. [ 910.857617][T27278] 8021q: adding VLAN 0 to HW filter on device bond8 [ 910.866797][T27279] bond8: option lacp_rate: unable to set because the bond device is up [ 910.876786][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5799'. [ 910.906629][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5799'. [ 910.993432][T27284] lo speed is unknown, defaulting to 1000 [ 911.001851][T27284] wg1 speed is unknown, defaulting to 1000 [ 911.009578][T27284] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.061046][T27287] FAULT_INJECTION: forcing a failure. [ 911.061046][T27287] name failslab, interval 1, probability 0, space 0, times 0 [ 911.073808][T27287] CPU: 0 UID: 0 PID: 27287 Comm: syz.4.5800 Not tainted syzkaller #0 PREEMPT(full) [ 911.073839][T27287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 911.073853][T27287] Call Trace: [ 911.073862][T27287] [ 911.073873][T27287] dump_stack_lvl+0x189/0x250 [ 911.073909][T27287] ? __pfx____ratelimit+0x10/0x10 [ 911.073935][T27287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.073966][T27287] ? __pfx__printk+0x10/0x10 [ 911.073999][T27287] ? __lock_acquire+0xab9/0xd20 [ 911.074026][T27287] should_fail_ex+0x414/0x560 [ 911.074065][T27287] should_failslab+0xa8/0x100 [ 911.074090][T27287] kmem_cache_alloc_noprof+0x74/0x6e0 [ 911.074122][T27287] ? skb_clone+0x212/0x3a0 [ 911.074151][T27287] ? run_filter+0x23/0x270 [ 911.074182][T27287] skb_clone+0x212/0x3a0 [ 911.074210][T27287] ? packet_rcv+0x567/0x1730 [ 911.074238][T27287] packet_rcv+0x65b/0x1730 [ 911.074276][T27287] __netif_receive_skb_core+0x25f2/0x2f90 [ 911.074310][T27287] ? is_bpf_text_address+0x292/0x2b0 [ 911.074335][T27287] ? is_bpf_text_address+0x26/0x2b0 [ 911.074366][T27287] ? __kernel_text_address+0xd/0x40 [ 911.074405][T27287] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 911.074467][T27287] __netif_receive_skb_list_core+0x23f/0x800 [ 911.074505][T27287] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 911.074541][T27287] netif_receive_skb_list_internal+0x96f/0xcb0 [ 911.074583][T27287] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 911.074622][T27287] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 911.074677][T27287] ? __xdp_build_skb_from_frame+0x34b/0x730 [ 911.074716][T27287] netif_receive_skb_list+0x54/0x450 [ 911.074753][T27287] bpf_test_run_xdp_live+0x178b/0x1b10 [ 911.074792][T27287] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 911.074823][T27287] ? bpf_test_run_xdp_live+0x393/0x1b10 [ 911.074866][T27287] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 911.074898][T27287] ? bpf_dispatcher_xdp+0x800/0x1000 [ 911.074941][T27287] ? 0xffffffffa020168c [ 911.074959][T27287] ? 0xffffffffa02016d8 [ 911.074976][T27287] ? 0xffffffffa02019cc [ 911.074994][T27287] ? 0xffffffffa02036d8 [ 911.075011][T27287] ? 0xffffffffa0203bd4 [ 911.075059][T27287] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 911.075102][T27287] ? _copy_from_user+0x94/0xb0 [ 911.075132][T27287] ? bpf_test_init+0x113/0x150 [ 911.075157][T27287] ? xdp_convert_md_to_buff+0x5b/0x330 [ 911.075188][T27287] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 911.075235][T27287] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 911.075270][T27287] ? __fget_files+0x2a/0x420 [ 911.075299][T27287] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 911.075328][T27287] bpf_prog_test_run+0x2c7/0x340 [ 911.075357][T27287] __sys_bpf+0x562/0x860 [ 911.075381][T27287] ? __pfx___sys_bpf+0x10/0x10 [ 911.075423][T27287] ? ksys_write+0x22a/0x250 [ 911.075458][T27287] ? __pfx_ksys_write+0x10/0x10 [ 911.075497][T27287] __x64_sys_bpf+0x7c/0x90 [ 911.075531][T27287] do_syscall_64+0xfa/0xfa0 [ 911.075556][T27287] ? lockdep_hardirqs_on+0x9c/0x150 [ 911.075582][T27287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.075605][T27287] ? clear_bhb_loop+0x60/0xb0 [ 911.075632][T27287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.075654][T27287] RIP: 0033:0x7f72e958f749 [ 911.075681][T27287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.075702][T27287] RSP: 002b:00007f72ea438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 911.075727][T27287] RAX: ffffffffffffffda RBX: 00007f72e97e5fa0 RCX: 00007f72e958f749 [ 911.075744][T27287] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 911.075758][T27287] RBP: 00007f72ea438090 R08: 0000000000000000 R09: 0000000000000000 [ 911.075773][T27287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.075786][T27287] R13: 00007f72e97e6038 R14: 00007f72e97e5fa0 R15: 00007ffc1319e5c8 [ 911.075825][T27287] [ 911.607066][T27293] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5802'. [ 911.682787][T27296] sctp: [Deprecated]: syz.6.5802 (pid 27296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 911.682787][T27296] Use struct sctp_sack_info instead [ 911.902562][T27301] netlink: 'syz.4.5805': attribute type 3 has an invalid length. [ 911.912366][T27301] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5805'. [ 912.123302][T27309] netlink: 'syz.0.5807': attribute type 13 has an invalid length. [ 912.137397][T27284] wg1 speed is unknown, defaulting to 1000 [ 912.142168][T27303] lo speed is unknown, defaulting to 1000 [ 912.157630][T27315] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 912.903332][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.929586][T27309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.364793][T27303] wg1 speed is unknown, defaulting to 1000 [ 913.380130][T27288] tipc: Enabled bearer , priority 0 [ 913.388321][ T8156] ip6_vti0 speed is unknown, defaulting to 1000 [ 913.400107][ T8156] syz2: Port: 1 Link DOWN [ 913.411949][T27283] tipc: Disabling bearer [ 913.454743][T27318] netlink: 'syz.4.5811': attribute type 4 has an invalid length. [ 913.473274][T26622] wg1 speed is unknown, defaulting to 1000 [ 913.479232][ T37] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.487944][ T37] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 913.501265][T26622] syz0: Port: 1 Link DOWN [ 913.502444][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.519646][ T37] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.528251][ T37] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 913.543987][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.556075][T27303] ip6_vti0 speed is unknown, defaulting to 1000 [ 913.609984][T27330] ip6_vti0 speed is unknown, defaulting to 1000 [ 913.617897][ T37] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.632879][T27339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5814'. [ 913.641965][ T37] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 913.642006][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.680209][ T37] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.696799][ T37] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 913.729944][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.766995][T27341] lo speed is unknown, defaulting to 1000 [ 913.774941][T27341] wg1 speed is unknown, defaulting to 1000 [ 913.983842][T27341] ip6_vti0 speed is unknown, defaulting to 1000 [ 913.990960][T27303] wg1 speed is unknown, defaulting to 1000 [ 914.171585][T27358] lo speed is unknown, defaulting to 1000 [ 914.180392][T27358] wg1 speed is unknown, defaulting to 1000 [ 914.460336][T27358] ip6_vti0 speed is unknown, defaulting to 1000 [ 914.464307][T27341] wg1 speed is unknown, defaulting to 1000 [ 914.910377][T27358] wg1 speed is unknown, defaulting to 1000 [ 915.381191][T27389] batman_adv: batadv0: Adding interface: dummy0 [ 915.387491][T27389] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 915.413466][T27389] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 915.600092][T27393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5825'. [ 915.882409][T27400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5826'. [ 916.558790][T27409] netlink: get zone limit has 8 unknown bytes [ 916.844705][T27415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5832'. [ 917.368391][T27434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5840'. [ 917.386064][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5840'. [ 917.441682][T27434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 917.473618][T27436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.493250][T27440] xt_CT: No such helper "netbios-ns" [ 917.493883][T27436] bond7: (slave bond0): Enslaving as an active interface with an up link [ 917.594521][T27446] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5843'. [ 917.705826][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5845'. [ 918.510300][T27434] bond7 (unregistering): (slave bond0): Releasing backup interface [ 918.524857][T27434] bond7 (unregistering): Released all slaves [ 918.557921][T27451] bridge0: port 1(gretap0) entered blocking state [ 918.565243][T27451] bridge0: port 1(gretap0) entered disabled state [ 918.572545][T27451] gretap0: entered allmulticast mode [ 918.627524][T27468] lo speed is unknown, defaulting to 1000 [ 918.635998][T27468] wg1 speed is unknown, defaulting to 1000 [ 918.644967][T27468] ip6_vti0 speed is unknown, defaulting to 1000 [ 918.797837][T27480] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5852'. [ 918.910798][T27483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5852'. [ 918.983491][T27483] netlink: 'syz.6.5852': attribute type 1 has an invalid length. [ 919.002692][T27483] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5852'. [ 919.030353][T27468] wg1 speed is unknown, defaulting to 1000 [ 919.117497][T27487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5852'. [ 919.604948][T27496] veth11: entered promiscuous mode [ 919.632002][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5854'. [ 920.000642][T27513] xt_TPROXY: Can be used only with -p tcp or -p udp [ 920.038890][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5862'. [ 920.136885][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5863'. [ 920.900101][T27556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5873'. [ 920.929954][T27556] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5873'. [ 921.009316][T27564] netlink: 'syz.4.5874': attribute type 10 has an invalid length. [ 921.079289][T27570] netlink: 'syz.4.5874': attribute type 10 has an invalid length. [ 921.111816][T27565] syzkaller0: entered promiscuous mode [ 921.117376][T27565] syzkaller0: entered allmulticast mode [ 921.145042][T27568] lo speed is unknown, defaulting to 1000 [ 921.180886][T27574] netlink: 'syz.6.5875': attribute type 8 has an invalid length. [ 921.182124][T27568] wg1 speed is unknown, defaulting to 1000 [ 921.225875][T27568] ip6_vti0 speed is unknown, defaulting to 1000 [ 921.278044][T27574] lo speed is unknown, defaulting to 1000 [ 921.286113][T27574] wg1 speed is unknown, defaulting to 1000 [ 921.561209][T27568] wg1 speed is unknown, defaulting to 1000 [ 921.570306][T27574] ip6_vti0 speed is unknown, defaulting to 1000 [ 921.626291][T27597] netlink: 'syz.3.5880': attribute type 1 has an invalid length. [ 921.795759][T27597] 8021q: adding VLAN 0 to HW filter on device bond9 [ 921.816204][T27595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5878'. [ 922.001966][T27565] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 922.062554][T27604] netlink: 'syz.5.5881': attribute type 12 has an invalid length. [ 922.101964][T27574] wg1 speed is unknown, defaulting to 1000 [ 922.106633][T27604] netlink: 'syz.5.5881': attribute type 4 has an invalid length. [ 923.536970][T27659] x_tables: duplicate underflow at hook 1 [ 923.634630][T27663] lo speed is unknown, defaulting to 1000 [ 923.727219][T27663] wg1 speed is unknown, defaulting to 1000 [ 923.882275][T27663] ip6_vti0 speed is unknown, defaulting to 1000 [ 924.587022][T27663] wg1 speed is unknown, defaulting to 1000 [ 924.678768][T27681] __nla_validate_parse: 3 callbacks suppressed [ 924.678792][T27681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5899'. [ 924.745333][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5899'. [ 924.904741][T25532] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 924.926138][T25532] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 924.936503][T25532] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 924.957570][T25532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 924.980439][T25532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 925.013877][T27694] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5902'. [ 925.035904][T27691] lo speed is unknown, defaulting to 1000 [ 925.045243][T27691] wg1 speed is unknown, defaulting to 1000 [ 925.053282][T27691] ip6_vti0 speed is unknown, defaulting to 1000 [ 925.117645][T27696] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5903'. [ 925.150417][T27696] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5903'. [ 925.492574][T27691] wg1 speed is unknown, defaulting to 1000 [ 925.712924][T27709] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5901'. [ 925.733461][T27709] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5901'. [ 925.807472][T27720] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 926.415857][T27733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5913'. [ 926.841827][T27751] batadv0: entered allmulticast mode [ 926.980052][T27691] chnl_net:caif_netlink_parms(): no params data found [ 927.040537][T25532] Bluetooth: hci3: command tx timeout [ 927.124496][T27767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5922'. [ 927.154602][T27770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5921'. [ 927.229757][T27691] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.248545][T27691] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.258831][T27691] bridge_slave_0: entered allmulticast mode [ 927.272661][T27691] bridge_slave_0: entered promiscuous mode [ 927.286214][T27691] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.317001][T27691] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.330196][T27691] bridge_slave_1: entered allmulticast mode [ 927.349628][T27691] bridge_slave_1: entered promiscuous mode [ 927.448886][T27780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 927.585049][T27691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.612994][T27776] lo speed is unknown, defaulting to 1000 [ 927.623671][T27691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 927.637681][T27776] wg1 speed is unknown, defaulting to 1000 [ 927.696093][T27776] ip6_vti0 speed is unknown, defaulting to 1000 [ 927.700683][T27691] team0: Port device team_slave_0 added [ 927.712505][T27691] team0: Port device team_slave_1 added [ 927.794382][T27788] netlink: 'syz.3.5926': attribute type 1 has an invalid length. [ 928.034661][T27788] 8021q: adding VLAN 0 to HW filter on device bond12 [ 928.049167][T27691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.057194][T27691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.087288][T27691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.109579][T27789] bond12: (slave ip6gretap2): making interface the new active one [ 928.119780][T27789] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 928.129351][T27776] wg1 speed is unknown, defaulting to 1000 [ 928.136525][T27691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.146269][T27691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.180004][T27691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.365482][T27691] hsr_slave_0: entered promiscuous mode [ 928.402219][T27691] hsr_slave_1: entered promiscuous mode [ 928.408972][T27691] debugfs: 'hsr0' already exists in 'hsr' [ 928.430359][T27691] Cannot create hsr debugfs directory [ 928.891687][T27818] delete_channel: no stack [ 929.124295][T25532] Bluetooth: hci3: command tx timeout [ 929.541580][T26686] nci: nci_ntf_packet: unknown ntf opcode 0x5 [ 929.687383][T27691] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.772559][T27691] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.847779][T27865] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 929.867074][T27691] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 929.867137][T27867] SET target dimension over the limit! [ 929.957300][T27691] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 930.363222][T27887] lo speed is unknown, defaulting to 1000 [ 930.382984][T27887] wg1 speed is unknown, defaulting to 1000 [ 930.436211][T27890] bond13: entered allmulticast mode [ 930.445370][T27887] ip6_vti0 speed is unknown, defaulting to 1000 [ 930.620082][T27900] __nla_validate_parse: 5 callbacks suppressed [ 930.620104][T27900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5954'. [ 930.696988][T27691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 930.714419][T27691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 930.732662][T27906] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5955'. [ 930.892738][T27691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 930.909235][T27887] wg1 speed is unknown, defaulting to 1000 [ 930.910296][T27691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 930.977254][T27908] bond2 (unregistering): Released all slaves [ 931.148886][T27691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.185586][T27691] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.201653][T25532] Bluetooth: hci3: command tx timeout [ 931.210543][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.217817][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.269322][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.276651][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.673791][T27937] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5962'. [ 931.908396][T27691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.026087][T27978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5971'. [ 933.077918][T27974] bond12 (unregistering): Released all slaves [ 933.152717][T27691] veth0_vlan: entered promiscuous mode [ 933.195088][T27691] veth1_vlan: entered promiscuous mode [ 933.270847][T25532] Bluetooth: hci3: command tx timeout [ 933.293655][T27691] veth0_macvtap: entered promiscuous mode [ 933.314905][T27691] veth1_macvtap: entered promiscuous mode [ 933.349044][T27989] netlink: 'syz.0.5974': attribute type 3 has an invalid length. [ 933.375444][T27691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.428011][T27691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.486568][T26686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.505143][T26686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.543314][T26686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.564088][T26686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.785014][T26726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.812309][T26726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.877983][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.894137][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.041666][T28006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5898'. [ 934.070572][T28006] bridge_slave_1: left allmulticast mode [ 934.076301][T28006] bridge_slave_1: left promiscuous mode [ 934.111065][T28006] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.181015][T28006] bridge_slave_0: left allmulticast mode [ 934.190860][T28006] bridge_slave_0: left promiscuous mode [ 934.220375][T28006] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.475830][T28009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5979'. [ 934.860991][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 934.872479][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 934.883951][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 934.893145][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 934.902302][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 934.966369][T28013] lo speed is unknown, defaulting to 1000 [ 934.976441][T28013] wg1 speed is unknown, defaulting to 1000 [ 934.985182][T28013] ip6_vti0 speed is unknown, defaulting to 1000 [ 935.218282][T28024] netlink: 288 bytes leftover after parsing attributes in process `syz.5.5981'. [ 935.235403][T28013] wg1 speed is unknown, defaulting to 1000 [ 935.451582][T28030] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5985'. [ 935.624949][T28036] netlink: 'syz.3.5988': attribute type 3 has an invalid length. [ 935.842468][T28013] chnl_net:caif_netlink_parms(): no params data found [ 936.017325][T28013] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.036357][T28013] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.041356][T28054] IPv6: addrconf: prefix option has invalid lifetime [ 936.050178][T28013] bridge_slave_0: entered allmulticast mode [ 936.052475][T28013] bridge_slave_0: entered promiscuous mode [ 936.066492][T28013] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.070917][T28045] sctp: [Deprecated]: syz.5.5989 (pid 28045) Use of struct sctp_assoc_value in delayed_ack socket option. [ 936.070917][T28045] Use struct sctp_sack_info instead [ 936.074448][T28013] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.107509][T28013] bridge_slave_1: entered allmulticast mode [ 936.115728][T28013] bridge_slave_1: entered promiscuous mode [ 936.187086][T28013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.202446][T28013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.258487][T28013] team0: Port device team_slave_0 added [ 936.269251][T28013] team0: Port device team_slave_1 added [ 936.319486][T28013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.326853][T28013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.355451][T28013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.375833][T28063] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 936.385560][T28013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.411448][T28013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 936.450837][T28013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.464532][T28067] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 936.490704][T28067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.786813][T28073] bond1 (unregistering): Released all slaves [ 936.831985][T28071] bond14 (unregistering): Released all slaves [ 936.875620][T28013] hsr_slave_0: entered promiscuous mode [ 936.883336][T28013] hsr_slave_1: entered promiscuous mode [ 936.890182][T28013] debugfs: 'hsr0' already exists in 'hsr' [ 936.896193][T28013] Cannot create hsr debugfs directory [ 936.966394][T25532] Bluetooth: hci0: command tx timeout [ 936.976970][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 937.215457][T28085] lo speed is unknown, defaulting to 1000 [ 937.231620][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5998'. [ 937.242480][T28085] wg1 speed is unknown, defaulting to 1000 [ 937.285953][T28085] ip6_vti0 speed is unknown, defaulting to 1000 [ 937.815989][T28085] wg1 speed is unknown, defaulting to 1000 [ 937.866833][T28100] batadv0: entered allmulticast mode [ 938.285183][T28105] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6004'. [ 938.597819][T28111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6006'. [ 939.040181][T25532] Bluetooth: hci0: command tx timeout [ 940.658218][T28107] netlink: 'syz.5.6004': attribute type 1 has an invalid length. [ 940.862862][T28120] netlink: 'syz.3.6009': attribute type 7 has an invalid length. [ 940.900397][T28120] netlink: 'syz.3.6009': attribute type 8 has an invalid length. [ 941.124062][T25532] Bluetooth: hci0: command tx timeout [ 941.308849][T28139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6012'. [ 941.355178][T28139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6012'. [ 941.410623][T28134] lo speed is unknown, defaulting to 1000 [ 941.429132][T28013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 941.465984][T28013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 941.513294][T28013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 941.535238][T28013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 941.559644][T28134] wg1 speed is unknown, defaulting to 1000 [ 941.567682][T28134] ip6_vti0 speed is unknown, defaulting to 1000 [ 941.723920][T28013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.767941][T28013] 8021q: adding VLAN 0 to HW filter on device team0 [ 941.814221][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.821504][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 941.863431][T26730] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.870714][T26730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.966414][T28151] netlink: 'syz.6.6015': attribute type 5 has an invalid length. [ 941.975456][T28151] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6015'. [ 942.122303][T28162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6017'. [ 942.136660][T28162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6017'. [ 942.149881][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms [ 942.157972][ C1] lec:lec_tx_timeout: lec0 [ 942.241830][T28134] wg1 speed is unknown, defaulting to 1000 [ 942.341257][T28013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.436835][T28013] veth0_vlan: entered promiscuous mode [ 942.455505][T28013] veth1_vlan: entered promiscuous mode [ 942.519409][T28013] veth0_macvtap: entered promiscuous mode [ 942.534202][T28013] veth1_macvtap: entered promiscuous mode [ 942.581371][T28013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 942.605942][T28172] lo speed is unknown, defaulting to 1000 [ 942.608319][T28013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 942.655809][T28172] wg1 speed is unknown, defaulting to 1000 [ 942.662400][T26724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.675169][T28172] ip6_vti0 speed is unknown, defaulting to 1000 [ 942.686414][T26724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.704438][T26724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.745148][T26724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.932286][T28162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 942.939095][T28162] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 942.972062][T28162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 942.983185][T28162] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 943.002617][T28162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 943.008759][T28162] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 943.026477][T28162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 943.033258][T28162] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 943.065931][T28172] wg1 speed is unknown, defaulting to 1000 [ 943.083985][T28162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 943.091467][T28162] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 943.219569][T26726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.227606][T26726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.327481][T13706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.337269][T13706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.460326][T28186] syzkaller0: entered promiscuous mode [ 943.467726][T28186] syzkaller0: entered allmulticast mode [ 943.585212][T28191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5978'. [ 943.611755][T28191] FAULT_INJECTION: forcing a failure. [ 943.611755][T28191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.640340][T28191] CPU: 0 UID: 0 PID: 28191 Comm: syz.0.5978 Not tainted syzkaller #0 PREEMPT(full) [ 943.640379][T28191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 943.640401][T28191] Call Trace: [ 943.640414][T28191] [ 943.640424][T28191] dump_stack_lvl+0x189/0x250 [ 943.640462][T28191] ? __pfx____ratelimit+0x10/0x10 [ 943.640488][T28191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.640517][T28191] ? __pfx__printk+0x10/0x10 [ 943.640540][T28191] ? __might_fault+0xb0/0x130 [ 943.640585][T28191] should_fail_ex+0x414/0x560 [ 943.640625][T28191] _copy_from_user+0x2d/0xb0 [ 943.640655][T28191] do_sock_getsockopt+0x17d/0x450 [ 943.640687][T28191] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 943.640713][T28191] ? do_syscall_64+0xa0/0xfa0 [ 943.640739][T28191] ? __fget_files+0x2a/0x420 [ 943.640759][T28191] ? __fget_files+0x3a0/0x420 [ 943.640779][T28191] ? __fget_files+0x2a/0x420 [ 943.640809][T28191] __x64_sys_getsockopt+0x1a5/0x250 [ 943.640835][T28191] ? do_syscall_64+0xa0/0xfa0 [ 943.640864][T28191] ? do_syscall_64+0xa0/0xfa0 [ 943.640893][T28191] do_syscall_64+0xfa/0xfa0 [ 943.640918][T28191] ? lockdep_hardirqs_on+0x9c/0x150 [ 943.640945][T28191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.640967][T28191] ? clear_bhb_loop+0x60/0xb0 [ 943.640994][T28191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.641016][T28191] RIP: 0033:0x7fbb5758f749 [ 943.641036][T28191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.641056][T28191] RSP: 002b:00007fbb58406038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 943.641079][T28191] RAX: ffffffffffffffda RBX: 00007fbb577e5fa0 RCX: 00007fbb5758f749 [ 943.641096][T28191] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000004 [ 943.641110][T28191] RBP: 00007fbb58406090 R08: 0000200000000140 R09: 0000000000000000 [ 943.641124][T28191] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 943.641146][T28191] R13: 00007fbb577e6038 R14: 00007fbb577e5fa0 R15: 00007fffdcffea68 [ 943.641178][T28191] [ 943.641196][T28191] sctp: [Deprecated]: syz.0.5978 (pid 28191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 943.641196][T28191] Use struct sctp_sack_info instead [ 944.351993][T28188] lo speed is unknown, defaulting to 1000 [ 944.458839][T28188] wg1 speed is unknown, defaulting to 1000 [ 944.461999][T28204] lo speed is unknown, defaulting to 1000 [ 944.534038][T28204] wg1 speed is unknown, defaulting to 1000 [ 944.541180][T28188] ip6_vti0 speed is unknown, defaulting to 1000 [ 944.747277][T28212] syzkaller0: entered promiscuous mode [ 944.753428][T28212] syzkaller0: entered allmulticast mode [ 944.981278][T28188] wg1 speed is unknown, defaulting to 1000 [ 945.381124][T28204] ip6_vti0 speed is unknown, defaulting to 1000 [ 945.800334][T28204] wg1 speed is unknown, defaulting to 1000 [ 946.300277][T28226] tipc: Started in network mode [ 946.310623][T28226] tipc: Node identity b2caf0cad0b4, cluster identity 4711 [ 946.328248][T28226] tipc: Enabled bearer , priority 0 [ 946.342056][T28226] syzkaller0: entered promiscuous mode [ 946.347751][T28226] syzkaller0: entered allmulticast mode [ 946.948154][T28225] tipc: Resetting bearer [ 947.075363][T28225] tipc: Disabling bearer [ 947.931116][T28240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6037'. [ 948.553176][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6042'. [ 948.595445][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 948.606988][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 948.619417][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 948.629352][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 948.638326][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 948.707512][T28264] Bluetooth: MGMT ver 1.23 [ 948.829725][T28264] can: request_module (can-proto-5) failed. [ 948.834548][T28255] bond2 (unregistering): Released all slaves [ 948.978356][T28258] lo speed is unknown, defaulting to 1000 [ 948.987218][T28258] wg1 speed is unknown, defaulting to 1000 [ 948.995106][T28258] ip6_vti0 speed is unknown, defaulting to 1000 [ 949.117379][T28278] lo speed is unknown, defaulting to 1000 [ 949.125588][T28278] wg1 speed is unknown, defaulting to 1000 [ 949.214217][T28281] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6048'. [ 949.348637][T28278] ip6_vti0 speed is unknown, defaulting to 1000 [ 949.356859][T28258] wg1 speed is unknown, defaulting to 1000 [ 950.207410][T28278] wg1 speed is unknown, defaulting to 1000 [ 950.445262][T28258] chnl_net:caif_netlink_parms(): no params data found [ 950.730384][ T5836] Bluetooth: hci4: command tx timeout [ 950.811032][T28319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6059'. [ 950.836432][T28258] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.845129][T28258] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.852973][T28258] bridge_slave_0: entered allmulticast mode [ 950.864796][T28258] bridge_slave_0: entered promiscuous mode [ 950.887544][T28258] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.902818][T28258] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.918648][T28258] bridge_slave_1: entered allmulticast mode [ 950.936748][T28258] bridge_slave_1: entered promiscuous mode [ 951.116938][T28258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.159435][T28258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.284149][T28258] team0: Port device team_slave_0 added [ 951.313134][T28258] team0: Port device team_slave_1 added [ 951.773327][T28329] Bluetooth: MGMT ver 1.23 [ 951.780675][T28329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6060'. [ 951.816172][T28258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.823443][T28258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.890018][T28258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.983045][T28258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.998470][T28258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.050249][T28258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.167990][T28334] netlink: 'syz.5.6061': attribute type 1 has an invalid length. [ 952.176831][T28334] netlink: 'syz.5.6061': attribute type 3 has an invalid length. [ 952.188208][T28334] netlink: 'syz.5.6061': attribute type 1 has an invalid length. [ 952.236737][T28334] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6061'. [ 952.307780][T28258] hsr_slave_0: entered promiscuous mode [ 952.332200][T28258] hsr_slave_1: entered promiscuous mode [ 952.344698][T28258] debugfs: 'hsr0' already exists in 'hsr' [ 952.354598][T28258] Cannot create hsr debugfs directory [ 952.665166][T28344] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6065'. [ 952.789463][T28344] netlink: 'syz.4.6065': attribute type 10 has an invalid length. [ 952.798168][ T5836] Bluetooth: hci4: command tx timeout [ 952.884691][T28258] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 952.945311][T28344] team0: Device veth1_macvtap failed to register rx_handler [ 953.066708][T28258] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 953.119936][T28352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6068'. [ 953.193190][T28258] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 953.274897][T28258] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 953.428276][T28365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6074'. [ 953.519882][T28258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 953.575035][T28258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 953.607310][T28258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 953.643402][T28370] x_tables: unsorted underflow at hook 3 [ 953.646064][T28258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 953.750432][T28370] netlink: 6 bytes leftover after parsing attributes in process `syz.6.6075'. [ 953.766799][T28370] netlink: 'syz.6.6075': attribute type 12 has an invalid length. [ 953.778068][T28370] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6075'. [ 954.038005][T28258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.042635][T28390] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6081'. [ 954.178267][T28258] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.213532][T26724] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.220881][T26724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.301475][T26730] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.308696][T26730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.351117][T28400] siw: device registration error -23 [ 954.503992][T28408] netlink: 'syz.6.6084': attribute type 1 has an invalid length. [ 954.518713][T28408] __nla_validate_parse: 1 callbacks suppressed [ 954.518734][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6084'. [ 954.563293][T28408] netlink: 364 bytes leftover after parsing attributes in process `syz.6.6084'. [ 954.605716][T28408] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6084'. [ 954.634231][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6084'. [ 954.873240][ T5836] Bluetooth: hci4: command tx timeout [ 954.888570][T28425] lo speed is unknown, defaulting to 1000 [ 954.896889][T28258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.918104][T28426] netlink: 'syz.6.6089': attribute type 10 has an invalid length. [ 954.947604][T28425] wg1 speed is unknown, defaulting to 1000 [ 954.990528][T28426] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.027868][T28426] bond0: (slave team0): Enslaving as an active interface with an up link [ 955.059086][T28425] ip6_vti0 speed is unknown, defaulting to 1000 [ 955.062484][T28258] veth0_vlan: entered promiscuous mode [ 955.093806][T28258] veth1_vlan: entered promiscuous mode [ 955.143090][T28258] veth0_macvtap: entered promiscuous mode [ 955.197386][T28258] veth1_macvtap: entered promiscuous mode [ 955.239685][T28258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.261239][T28258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.286413][T26713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.302981][T26713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.317266][T26713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.333056][T26713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.478782][T28425] wg1 speed is unknown, defaulting to 1000 [ 955.563096][T26713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.571888][T26713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.614628][T28433] lo speed is unknown, defaulting to 1000 [ 955.615071][T26713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.630318][T26713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.763277][T28433] wg1 speed is unknown, defaulting to 1000 [ 955.962590][T28433] ip6_vti0 speed is unknown, defaulting to 1000 [ 955.964939][T28450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6096'. [ 955.995199][T28452] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6097'. [ 956.043844][T28452] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6097'. [ 956.529546][T28479] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6106'. [ 956.546720][T28480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6106'. [ 956.646440][T28433] wg1 speed is unknown, defaulting to 1000 [ 956.664349][T28485] netlink: 'syz.4.6108': attribute type 2 has an invalid length. [ 956.675370][T28485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6108'. [ 956.951225][ T5836] Bluetooth: hci4: command tx timeout [ 957.210393][T28499] lo speed is unknown, defaulting to 1000 [ 957.235675][T28499] wg1 speed is unknown, defaulting to 1000 [ 957.264032][T28499] ip6_vti0 speed is unknown, defaulting to 1000 [ 957.631499][T28518] bond1 (unregistering): Released all slaves [ 957.648715][T28522] netlink: 'syz.3.6122': attribute type 1 has an invalid length. [ 957.657029][T28522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.670058][T28522] sctp: [Deprecated]: syz.3.6122 (pid 28522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 957.670058][T28522] Use struct sctp_sack_info instead [ 957.688379][T28499] wg1 speed is unknown, defaulting to 1000 [ 957.856159][T28526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 958.254405][T28539] FAULT_INJECTION: forcing a failure. [ 958.254405][T28539] name failslab, interval 1, probability 0, space 0, times 0 [ 958.272214][T28539] CPU: 0 UID: 0 PID: 28539 Comm: syz.4.6129 Not tainted syzkaller #0 PREEMPT(full) [ 958.272246][T28539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.272261][T28539] Call Trace: [ 958.272268][T28539] [ 958.272276][T28539] dump_stack_lvl+0x189/0x250 [ 958.272309][T28539] ? __pfx____ratelimit+0x10/0x10 [ 958.272330][T28539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.272355][T28539] ? __pfx__printk+0x10/0x10 [ 958.272376][T28539] ? __pfx___might_resched+0x10/0x10 [ 958.272396][T28539] ? fs_reclaim_acquire+0x7d/0x100 [ 958.272418][T28539] should_fail_ex+0x414/0x560 [ 958.272450][T28539] should_failslab+0xa8/0x100 [ 958.272471][T28539] kmem_cache_alloc_node_noprof+0x77/0x710 [ 958.272496][T28539] ? __alloc_skb+0x255/0x430 [ 958.272516][T28539] ? napi_skb_cache_get+0x4a5/0x790 [ 958.272534][T28539] ? napi_skb_cache_get+0x151/0x790 [ 958.272557][T28539] __alloc_skb+0x255/0x430 [ 958.272579][T28539] ? __pfx___alloc_skb+0x10/0x10 [ 958.272607][T28539] alloc_skb_with_frags+0xca/0x890 [ 958.272627][T28539] ? __might_fault+0xb0/0x130 [ 958.272665][T28539] sock_alloc_send_pskb+0x84d/0x980 [ 958.272706][T28539] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 958.272731][T28539] ? __pfx__copy_from_iter+0x10/0x10 [ 958.272754][T28539] ? __lock_acquire+0xab9/0xd20 [ 958.272779][T28539] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 958.272812][T28539] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 958.272842][T28539] ? skb_put+0x11b/0x210 [ 958.272865][T28539] l2cap_chan_send+0xa3d/0x2790 [ 958.272910][T28539] ? __pfx_l2cap_chan_send+0x10/0x10 [ 958.272935][T28539] ? __local_bh_enable_ip+0x12d/0x1c0 [ 958.272973][T28539] l2cap_sock_sendmsg+0x32e/0x4a0 [ 958.273000][T28539] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 958.273026][T28539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 958.273063][T28539] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 958.273081][T28539] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 958.273106][T28539] __sock_sendmsg+0x21c/0x270 [ 958.273137][T28539] ____sys_sendmsg+0x52d/0x830 [ 958.273164][T28539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.273195][T28539] ? import_iovec+0x74/0xa0 [ 958.273221][T28539] ___sys_sendmsg+0x21f/0x2a0 [ 958.273246][T28539] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.273301][T28539] ? __fget_files+0x2a/0x420 [ 958.273317][T28539] ? __fget_files+0x3a0/0x420 [ 958.273344][T28539] __sys_sendmmsg+0x227/0x430 [ 958.273372][T28539] ? __pfx___sys_sendmmsg+0x10/0x10 [ 958.273413][T28539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 958.273458][T28539] ? ksys_write+0x22a/0x250 [ 958.273487][T28539] ? __pfx_ksys_write+0x10/0x10 [ 958.273517][T28539] __x64_sys_sendmmsg+0xa0/0xc0 [ 958.273542][T28539] do_syscall_64+0xfa/0xfa0 [ 958.273563][T28539] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.273584][T28539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.273603][T28539] ? clear_bhb_loop+0x60/0xb0 [ 958.273624][T28539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.273642][T28539] RIP: 0033:0x7f39b398f749 [ 958.273659][T28539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.273675][T28539] RSP: 002b:00007f39b4813038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.273695][T28539] RAX: ffffffffffffffda RBX: 00007f39b3be5fa0 RCX: 00007f39b398f749 [ 958.273709][T28539] RDX: 0000000000000001 RSI: 0000200000009d00 RDI: 0000000000000004 [ 958.273720][T28539] RBP: 00007f39b4813090 R08: 0000000000000000 R09: 0000000000000000 [ 958.273731][T28539] R10: 0000000024084044 R11: 0000000000000246 R12: 0000000000000001 [ 958.273743][T28539] R13: 00007f39b3be6038 R14: 00007f39b3be5fa0 R15: 00007fff664575f8 [ 958.273773][T28539] [ 958.893901][T28541] tipc: Started in network mode [ 958.899122][T28541] tipc: Node identity 12fcd85b69b5, cluster identity 4711 [ 958.927012][T28541] tipc: Enabled bearer , priority 0 [ 959.015417][T27330] IPVS: starting estimator thread 0... [ 959.017771][T28547] syzkaller0: entered promiscuous mode [ 959.026766][T28547] syzkaller0: entered allmulticast mode [ 959.054245][T28547] tipc: Resetting bearer [ 959.112154][T28551] IPVS: using max 26 ests per chain, 62400 per kthread [ 959.273758][T28550] lo speed is unknown, defaulting to 1000 [ 959.290439][T28550] wg1 speed is unknown, defaulting to 1000 [ 959.303219][T28550] ip6_vti0 speed is unknown, defaulting to 1000 [ 959.534826][T28540] tipc: Resetting bearer [ 959.600566][T28540] tipc: Disabling bearer [ 959.605384][T28557] __nla_validate_parse: 9 callbacks suppressed [ 959.605410][T28557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6134'. [ 959.682833][T28557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6134'. [ 959.692036][T28557] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6134'. [ 959.714374][T28557] sctp: [Deprecated]: syz.4.6134 (pid 28557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.714374][T28557] Use struct sctp_sack_info instead [ 959.885723][T28562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6136'. [ 960.197279][T28550] wg1 speed is unknown, defaulting to 1000 [ 960.419076][T28581] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 960.673618][T28593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6144'. [ 960.692529][T28596] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6146'. [ 960.740124][T28593] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6144'. [ 960.764312][T28598] sctp: [Deprecated]: syz.5.6146 (pid 28598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 960.764312][T28598] Use struct sctp_sack_info instead [ 961.749691][T28608] lo speed is unknown, defaulting to 1000 [ 961.763686][T28608] wg1 speed is unknown, defaulting to 1000 [ 961.782617][T28608] ip6_vti0 speed is unknown, defaulting to 1000 [ 962.212275][T28608] wg1 speed is unknown, defaulting to 1000 [ 962.786384][T28624] x_tables: ip_tables: ah match: only valid for protocol 51 [ 962.831208][T28624] netlink: 'syz.0.6153': attribute type 13 has an invalid length. [ 962.897603][T28627] FAULT_INJECTION: forcing a failure. [ 962.897603][T28627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.932140][T28627] CPU: 0 UID: 0 PID: 28627 Comm: syz.6.6154 Not tainted syzkaller #0 PREEMPT(full) [ 962.932173][T28627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 962.932187][T28627] Call Trace: [ 962.932197][T28627] [ 962.932207][T28627] dump_stack_lvl+0x189/0x250 [ 962.932244][T28627] ? __pfx____ratelimit+0x10/0x10 [ 962.932269][T28627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 962.932300][T28627] ? __pfx__printk+0x10/0x10 [ 962.932338][T28627] should_fail_ex+0x414/0x560 [ 962.932379][T28627] _copy_to_user+0x31/0xb0 [ 962.932413][T28627] simple_read_from_buffer+0xe1/0x170 [ 962.932453][T28627] proc_fail_nth_read+0x1b3/0x220 [ 962.932486][T28627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.932530][T28627] ? rw_verify_area+0x2a6/0x4d0 [ 962.932558][T28627] ? __lock_acquire+0xab9/0xd20 [ 962.932577][T28627] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.932605][T28627] vfs_read+0x200/0xa30 [ 962.932632][T28627] ? fdget_pos+0x247/0x320 [ 962.932656][T28627] ? __pfx___mutex_lock+0x10/0x10 [ 962.932682][T28627] ? __pfx_vfs_read+0x10/0x10 [ 962.932711][T28627] ? __fget_files+0x2a/0x420 [ 962.932735][T28627] ? __fget_files+0x3a0/0x420 [ 962.932752][T28627] ? __fget_files+0x2a/0x420 [ 962.932784][T28627] ksys_read+0x145/0x250 [ 962.932815][T28627] ? __pfx_ksys_read+0x10/0x10 [ 962.932847][T28627] ? do_syscall_64+0xbe/0xfa0 [ 962.932878][T28627] do_syscall_64+0xfa/0xfa0 [ 962.932901][T28627] ? lockdep_hardirqs_on+0x9c/0x150 [ 962.932925][T28627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.932945][T28627] ? clear_bhb_loop+0x60/0xb0 [ 962.932970][T28627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.932990][T28627] RIP: 0033:0x7f4c9838e15c [ 962.933009][T28627] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 962.933028][T28627] RSP: 002b:00007f4c99271030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.933050][T28627] RAX: ffffffffffffffda RBX: 00007f4c985e5fa0 RCX: 00007f4c9838e15c [ 962.933065][T28627] RDX: 000000000000000f RSI: 00007f4c992710a0 RDI: 0000000000000005 [ 962.933078][T28627] RBP: 00007f4c99271090 R08: 0000000000000000 R09: 0000000000000000 [ 962.933092][T28627] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000001 [ 962.933107][T28627] R13: 00007f4c985e6038 R14: 00007f4c985e5fa0 R15: 00007ffdc08ca7a8 [ 962.933139][T28627] [ 963.494427][T28633] netlink: 'syz.6.6156': attribute type 1 has an invalid length. [ 963.623162][T28636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 963.630543][T28636] IPv6: NLM_F_CREATE should be set when creating new route [ 963.637810][T28636] IPv6: NLM_F_CREATE should be set when creating new route [ 963.722182][T28633] bond7: entered promiscuous mode [ 963.727966][T28633] 8021q: adding VLAN 0 to HW filter on device bond7 [ 963.781793][T28635] 8021q: adding VLAN 0 to HW filter on device bond7 [ 963.800656][T28635] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 963.820305][T28635] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 963.846753][T28635] bond7: (slave wireguard0): making interface the new active one [ 963.855592][T28635] wireguard0: entered promiscuous mode [ 963.863914][T28635] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 964.016313][T28648] sock: sock_set_timeout: `syz.6.6159' (pid 28648) tries to set negative timeout [ 964.140068][T28653] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6160'. [ 964.229691][T28653] sctp: [Deprecated]: syz.0.6160 (pid 28653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 964.229691][T28653] Use struct sctp_sack_info instead [ 964.352924][T28662] netlink: 'syz.6.6161': attribute type 12 has an invalid length. [ 964.368922][T28662] netlink: 'syz.6.6161': attribute type 4 has an invalid length. [ 964.532345][T28660] bond1 (unregistering): Released all slaves [ 964.581954][T28664] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6164'. [ 965.096139][T28686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6171'. [ 965.096139][T28687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6171'. [ 965.124748][T28688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6172'. [ 965.145912][T28690] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6173'. [ 965.158571][T28684] lo speed is unknown, defaulting to 1000 [ 965.195081][T28693] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 965.203356][T28693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.221338][T28684] wg1 speed is unknown, defaulting to 1000 [ 965.229610][T28684] ip6_vti0 speed is unknown, defaulting to 1000 [ 965.450936][T28706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6178'. [ 965.494531][T28697] bond1 (unregistering): Released all slaves [ 965.715280][T28684] wg1 speed is unknown, defaulting to 1000 [ 966.001643][T28716] lo speed is unknown, defaulting to 1000 [ 966.023812][T28716] wg1 speed is unknown, defaulting to 1000 [ 966.025130][T28720] lo speed is unknown, defaulting to 1000 [ 966.035491][T28716] ip6_vti0 speed is unknown, defaulting to 1000 [ 966.052066][T28720] wg1 speed is unknown, defaulting to 1000 [ 966.094607][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6181'. [ 966.522347][T28720] ip6_vti0 speed is unknown, defaulting to 1000 [ 966.534266][T28716] wg1 speed is unknown, defaulting to 1000 [ 966.734604][T28736] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 966.970255][T28720] wg1 speed is unknown, defaulting to 1000 [ 967.163118][T28747] netlink: 'syz.3.6186': attribute type 39 has an invalid length. [ 967.185329][T28747] veth0_macvtap: left promiscuous mode [ 967.249532][T28749] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 968.283088][T28757] netlink: 'syz.3.6187': attribute type 4 has an invalid length. [ 968.401242][T28755] netlink: 'syz.3.6187': attribute type 12 has an invalid length. [ 968.948627][T28770] netlink: 'syz.4.6191': attribute type 13 has an invalid length. [ 968.961793][T28770] netlink: 'syz.4.6191': attribute type 12 has an invalid length. [ 969.420680][T28782] lo speed is unknown, defaulting to 1000 [ 969.433209][T28782] wg1 speed is unknown, defaulting to 1000 [ 969.448049][T28782] ip6_vti0 speed is unknown, defaulting to 1000 [ 969.662839][T28788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.731714][T28788] Bluetooth: MGMT ver 1.23 [ 969.801476][T28791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6195'. [ 969.862194][T28782] wg1 speed is unknown, defaulting to 1000 [ 969.951960][T28794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6197'. [ 970.206277][T28800] syzkaller0: Caught tx_queue_len zero misconfig [ 970.216106][T28801] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6201'. [ 970.240523][T28800] netem: change failed [ 970.466715][T28809] FAULT_INJECTION: forcing a failure. [ 970.466715][T28809] name failslab, interval 1, probability 0, space 0, times 0 [ 970.500191][T28809] CPU: 0 UID: 0 PID: 28809 Comm: syz.6.6203 Not tainted syzkaller #0 PREEMPT(full) [ 970.500232][T28809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 970.500246][T28809] Call Trace: [ 970.500255][T28809] [ 970.500265][T28809] dump_stack_lvl+0x189/0x250 [ 970.500301][T28809] ? __pfx____ratelimit+0x10/0x10 [ 970.500325][T28809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.500355][T28809] ? __pfx__printk+0x10/0x10 [ 970.500381][T28809] ? __pfx___might_resched+0x10/0x10 [ 970.500405][T28809] ? fs_reclaim_acquire+0x7d/0x100 [ 970.500431][T28809] should_fail_ex+0x414/0x560 [ 970.500471][T28809] should_failslab+0xa8/0x100 [ 970.500496][T28809] kmem_cache_alloc_node_noprof+0x77/0x710 [ 970.500528][T28809] ? __alloc_skb+0x255/0x430 [ 970.500551][T28809] ? napi_skb_cache_get+0x4a5/0x790 [ 970.500573][T28809] ? napi_skb_cache_get+0x151/0x790 [ 970.500601][T28809] __alloc_skb+0x255/0x430 [ 970.500629][T28809] ? __pfx___alloc_skb+0x10/0x10 [ 970.500663][T28809] alloc_skb_with_frags+0xca/0x890 [ 970.500689][T28809] ? __might_fault+0xb0/0x130 [ 970.500735][T28809] sock_alloc_send_pskb+0x84d/0x980 [ 970.500787][T28809] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 970.500819][T28809] ? __pfx__copy_from_iter+0x10/0x10 [ 970.500848][T28809] ? __lock_acquire+0xab9/0xd20 [ 970.500881][T28809] l2cap_sock_alloc_skb_cb+0xd7/0x460 [ 970.500917][T28809] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 970.500955][T28809] ? skb_put+0x11b/0x210 [ 970.500984][T28809] l2cap_chan_send+0xa3d/0x2790 [ 970.501040][T28809] ? __pfx_l2cap_chan_send+0x10/0x10 [ 970.501071][T28809] ? __local_bh_enable_ip+0x12d/0x1c0 [ 970.501119][T28809] l2cap_sock_sendmsg+0x32e/0x4a0 [ 970.501152][T28809] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 970.501184][T28809] ? aa_sock_msg_perm+0xf1/0x1d0 [ 970.501228][T28809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 970.501249][T28809] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 970.501280][T28809] __sock_sendmsg+0x21c/0x270 [ 970.501318][T28809] ____sys_sendmsg+0x52d/0x830 [ 970.501353][T28809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.501392][T28809] ? import_iovec+0x74/0xa0 [ 970.501424][T28809] ___sys_sendmsg+0x21f/0x2a0 [ 970.501456][T28809] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.501526][T28809] ? __fget_files+0x2a/0x420 [ 970.501546][T28809] ? __fget_files+0x3a0/0x420 [ 970.501578][T28809] __sys_sendmmsg+0x227/0x430 [ 970.501612][T28809] ? __pfx___sys_sendmmsg+0x10/0x10 [ 970.501650][T28809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 970.501702][T28809] ? ksys_write+0x22a/0x250 [ 970.501737][T28809] ? __pfx_ksys_write+0x10/0x10 [ 970.501774][T28809] __x64_sys_sendmmsg+0xa0/0xc0 [ 970.501806][T28809] do_syscall_64+0xfa/0xfa0 [ 970.501831][T28809] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.501857][T28809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.501879][T28809] ? clear_bhb_loop+0x60/0xb0 [ 970.501907][T28809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.501928][T28809] RIP: 0033:0x7f4c9838f749 [ 970.501949][T28809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 970.501969][T28809] RSP: 002b:00007f4c99271038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 970.501994][T28809] RAX: ffffffffffffffda RBX: 00007f4c985e5fa0 RCX: 00007f4c9838f749 [ 970.502011][T28809] RDX: 0000000000000001 RSI: 0000200000009d00 RDI: 0000000000000004 [ 970.502025][T28809] RBP: 00007f4c99271090 R08: 0000000000000000 R09: 0000000000000000 [ 970.502040][T28809] R10: 0000000024084044 R11: 0000000000000246 R12: 0000000000000002 [ 970.502054][T28809] R13: 00007f4c985e6038 R14: 00007f4c985e5fa0 R15: 00007ffdc08ca7a8 [ 970.502093][T28809] [ 971.487546][T28835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6210'. [ 971.631070][T28831] lo speed is unknown, defaulting to 1000 [ 971.683136][T28849] netlink: 216 bytes leftover after parsing attributes in process `syz.6.6214'. [ 971.686080][T28831] wg1 speed is unknown, defaulting to 1000 [ 971.698852][T28849] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6214'. [ 971.711868][T28840] lo speed is unknown, defaulting to 1000 [ 971.724384][T28849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6214'. [ 971.733431][T28831] ip6_vti0 speed is unknown, defaulting to 1000 [ 971.755631][T28840] wg1 speed is unknown, defaulting to 1000 [ 971.757524][T28851] sctp: [Deprecated]: syz.0.6215 (pid 28851) Use of int in maxseg socket option. [ 971.757524][T28851] Use struct sctp_assoc_value instead [ 971.791708][T28849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6214'. [ 971.898414][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6216'. [ 971.907633][T28854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6216'. [ 971.963159][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6216'. [ 971.972960][T13706] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.007160][T28854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6216'. [ 972.023012][T13706] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.035135][T13706] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.061707][T13706] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 972.079169][T28840] ip6_vti0 speed is unknown, defaulting to 1000 [ 972.080362][T28831] wg1 speed is unknown, defaulting to 1000 [ 972.413393][T28864] syzkaller1: entered promiscuous mode [ 972.419144][T28864] syzkaller1: entered allmulticast mode [ 972.426733][T28864] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 972.699141][T28840] wg1 speed is unknown, defaulting to 1000 [ 973.441598][T28886] lo speed is unknown, defaulting to 1000 [ 973.496748][T28886] wg1 speed is unknown, defaulting to 1000 [ 973.667243][T28886] ip6_vti0 speed is unknown, defaulting to 1000 [ 974.452077][T28919] Unsupported ieee802154 address type: 0 [ 974.488672][T28886] wg1 speed is unknown, defaulting to 1000 [ 974.856392][T28922] dummy0: entered allmulticast mode [ 975.600658][T28936] lo speed is unknown, defaulting to 1000 [ 975.608578][T28936] wg1 speed is unknown, defaulting to 1000 [ 975.623765][T28936] ip6_vti0 speed is unknown, defaulting to 1000 [ 975.960457][T28959] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 975.990823][T28966] __nla_validate_parse: 25 callbacks suppressed [ 975.990847][T28966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6245'. [ 976.115324][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6247'. [ 976.561847][T28936] wg1 speed is unknown, defaulting to 1000 [ 976.700312][T28981] syzkaller0: entered promiscuous mode [ 976.705869][T28981] syzkaller0: entered allmulticast mode [ 977.707277][T28998] netlink: 'syz.3.6255': attribute type 2 has an invalid length. [ 979.669309][T28997] lo speed is unknown, defaulting to 1000 [ 979.687204][T28997] wg1 speed is unknown, defaulting to 1000 [ 979.696098][T28997] ip6_vti0 speed is unknown, defaulting to 1000 [ 979.928624][T29002] netlink: 'syz.4.6256': attribute type 13 has an invalid length. [ 979.937837][T29002] netlink: 'syz.4.6256': attribute type 17 has an invalid length. [ 980.089288][T29002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 980.112991][T28997] wg1 speed is unknown, defaulting to 1000 [ 980.130003][T29006] syzkaller0: entered promiscuous mode [ 980.135539][T29006] syzkaller0: entered allmulticast mode [ 980.150533][T29008] tipc: Started in network mode [ 980.155464][T29008] tipc: Node identity 26825b43361, cluster identity 4711 [ 980.200758][T29008] tipc: Enabled bearer , priority 0 [ 980.219605][T29002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.250913][T29006] tipc: Resetting bearer [ 980.269046][T29005] tipc: Resetting bearer [ 980.305513][T29002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 980.316436][T29005] tipc: Disabling bearer [ 980.459762][T29019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6260'. [ 980.484854][T29003] lo speed is unknown, defaulting to 1000 [ 980.509714][T29019] team0: Caught tx_queue_len zero misconfig [ 980.541497][T29003] wg1 speed is unknown, defaulting to 1000 [ 980.541716][T29019] sctp: [Deprecated]: syz.0.6260 (pid 29019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 980.541716][T29019] Use struct sctp_sack_info instead [ 980.606972][T29003] ip6_vti0 speed is unknown, defaulting to 1000 [ 980.780398][T29016] nbd6: detected capacity change from 0 to 63 [ 980.798612][T29020] block nbd6: NBD_DISCONNECT [ 980.809048][T29020] block nbd6: Disconnected due to user request. [ 980.820610][T29020] block nbd6: shutting down sockets [ 980.902165][T29025] xt_SECMARK: invalid mode: 0 [ 980.972572][T29022] bond8: entered promiscuous mode [ 980.977684][T29022] bond8: entered allmulticast mode [ 980.994173][T29022] 8021q: adding VLAN 0 to HW filter on device bond8 [ 981.002379][T29027] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6261'. [ 981.128814][T29034] bond0: Caught tx_queue_len zero misconfig [ 981.404272][T29003] wg1 speed is unknown, defaulting to 1000 [ 982.107111][T29056] lo speed is unknown, defaulting to 1000 [ 982.140173][T29056] wg1 speed is unknown, defaulting to 1000 [ 982.213269][T29056] ip6_vti0 speed is unknown, defaulting to 1000 [ 982.393797][T29061] lo speed is unknown, defaulting to 1000 [ 982.420947][T29061] wg1 speed is unknown, defaulting to 1000 [ 982.524891][T29057] netlink: 'syz.0.6268': attribute type 2 has an invalid length. [ 982.562674][T29070] tap0: tun_chr_ioctl cmd 1074025677 [ 982.568891][T29070] tap0: linktype set to 776 [ 982.849481][T29061] ip6_vti0 speed is unknown, defaulting to 1000 [ 983.181231][T29056] wg1 speed is unknown, defaulting to 1000 [ 983.196533][T29088] tipc: Enabled bearer , priority 10 [ 983.208957][T29061] wg1 speed is unknown, defaulting to 1000 [ 983.785015][T29104] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 983.807332][T29104] netlink: 'syz.4.6283': attribute type 28 has an invalid length. [ 984.143903][T29117] netlink: 'syz.4.6286': attribute type 21 has an invalid length. [ 984.154619][T29117] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6286'. [ 984.262483][T29117] netlink: 'syz.4.6286': attribute type 4 has an invalid length. [ 984.271448][T29117] netlink: 'syz.4.6286': attribute type 5 has an invalid length. [ 984.289989][T29117] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6286'. [ 984.299548][ T8128] tipc: Node number set to 1652486346 [ 984.325074][T26726] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.345474][T26726] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.453673][T26726] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.472576][T26726] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.565881][T29124] tipc: New replicast peer: 255.255.255.255 [ 984.572679][T29124] tipc: Enabled bearer , priority 10 [ 984.579359][T29131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6288'. [ 984.749071][T29133] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6291'. [ 984.798993][T29133] netlink: 'syz.0.6291': attribute type 9 has an invalid length. [ 984.807113][T29133] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6291'. [ 984.828588][T29133] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6291'. [ 985.501692][T29152] netlink: 'syz.4.6296': attribute type 6 has an invalid length. [ 985.589981][ T8128] tipc: Node number set to 278027075 [ 985.753429][T29155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6298'. [ 985.941983][T29167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6301'. [ 986.237380][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6305'. [ 986.302886][T29185] netlink: 'syz.3.6305': attribute type 16 has an invalid length. [ 986.320454][T29185] netlink: 'syz.3.6305': attribute type 3 has an invalid length. [ 986.344043][T29185] netlink: 18482 bytes leftover after parsing attributes in process `syz.3.6305'. [ 986.358139][T29187] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6306'. [ 986.494694][T29189] mac80211_hwsim hwsim89 wlan0: entered promiscuous mode [ 986.664010][T29163] lo speed is unknown, defaulting to 1000 [ 986.697003][T29163] wg1 speed is unknown, defaulting to 1000 [ 986.965177][T29218] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6313'. [ 986.996054][T29218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6313'. [ 987.007379][T29163] ip6_vti0 speed is unknown, defaulting to 1000 [ 987.014245][T29218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6313'. [ 987.459264][T29255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6321'. [ 987.677645][T29264] netlink: 'syz.3.6321': attribute type 7 has an invalid length. [ 987.722705][T29260] lo speed is unknown, defaulting to 1000 [ 987.751038][T29260] wg1 speed is unknown, defaulting to 1000 [ 988.038734][T29276] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6326'. [ 988.062309][T29276] tunl0: Caught tx_queue_len zero misconfig [ 988.312766][T29285] lo speed is unknown, defaulting to 1000 [ 988.375380][T29285] wg1 speed is unknown, defaulting to 1000 [ 988.477902][T29294] netlink: 'syz.4.6329': attribute type 1 has an invalid length. [ 988.514463][T29294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6329'. [ 988.806894][T29163] wg1 speed is unknown, defaulting to 1000 [ 988.815234][T29260] ip6_vti0 speed is unknown, defaulting to 1000 [ 989.192977][T29285] ip6_vti0 speed is unknown, defaulting to 1000 [ 989.206696][T29260] wg1 speed is unknown, defaulting to 1000 [ 989.302626][T29314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6333'. [ 989.453568][T29285] wg1 speed is unknown, defaulting to 1000 [ 989.472728][T29318] netlink: 'syz.3.6335': attribute type 1 has an invalid length. [ 989.587789][T29322] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 989.690514][T29326] netlink: 'syz.3.6336': attribute type 83 has an invalid length. [ 990.169314][T29336] netlink: 'syz.4.6341': attribute type 13 has an invalid length. [ 990.387227][T29336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.407463][T29336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.646532][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.661903][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.735747][T29342] netlink: 'syz.3.6342': attribute type 1 has an invalid length. [ 990.742703][T29343] : entered promiscuous mode [ 990.748546][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.766494][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.852690][T29342] bond1: entered promiscuous mode [ 990.858293][T29342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.933483][T29343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.942056][T29350] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 990.951221][T29350] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 990.960943][T29343] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 990.971665][T29343] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 990.982361][T29343] bond1: (slave gre1): Opening slave failed [ 991.067705][T29352] team0 (unregistering): Port device team_slave_0 removed [ 991.094717][T29352] team0 (unregistering): Port device team_slave_1 removed [ 991.521782][T29366] __nla_validate_parse: 10 callbacks suppressed [ 991.521808][T29366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6348'. [ 992.417790][T29383] netlink: 'syz.6.6354': attribute type 21 has an invalid length. [ 992.427737][T29383] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6354'. [ 992.437150][T29383] netlink: 'syz.6.6354': attribute type 1 has an invalid length. [ 992.535462][T29389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6357'. [ 992.846891][T29398] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 992.958605][T26620] IPVS: starting estimator thread 0... [ 992.969440][T29406] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 993.005688][T29408] syzkaller0: entered promiscuous mode [ 993.012686][T29408] syzkaller0: entered allmulticast mode [ 993.050085][T29407] IPVS: using max 24 ests per chain, 57600 per kthread [ 993.165016][T29418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6366'. [ 993.180398][T29421] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6368'. [ 993.406340][T29432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 993.428168][T29432] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6369'. [ 993.514383][T29442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6372'. [ 993.628031][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6373'. [ 993.838748][T29457] netlink: 'syz.4.6376': attribute type 3 has an invalid length. [ 993.878220][T29463] netlink: 'syz.0.6377': attribute type 4 has an invalid length. [ 993.907989][ T5836] Bluetooth: hci4: link tx timeout [ 993.915220][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 993.918158][T29463] netlink: 'syz.0.6377': attribute type 4 has an invalid length. [ 993.960029][T25532] Bluetooth: hci4: link tx timeout [ 993.965224][T25532] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 994.041939][T29469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6378'. [ 994.205583][T29476] lo speed is unknown, defaulting to 1000 [ 994.234477][T29476] wg1 speed is unknown, defaulting to 1000 [ 994.266868][T29476] ip6_vti0 speed is unknown, defaulting to 1000 [ 994.319273][T29479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6381'. [ 994.651071][T29476] wg1 speed is unknown, defaulting to 1000 [ 994.993712][T29509] netlink: 'syz.3.6387': attribute type 7 has an invalid length. [ 995.016158][T29509] netlink: 'syz.3.6387': attribute type 7 has an invalid length. [ 995.237659][T29509] lo speed is unknown, defaulting to 1000 [ 995.245863][T29509] wg1 speed is unknown, defaulting to 1000 [ 995.262069][T29509] ip6_vti0 speed is unknown, defaulting to 1000 [ 995.683595][T29509] wg1 speed is unknown, defaulting to 1000 [ 996.000104][T25532] Bluetooth: hci4: command 0x0406 tx timeout [ 997.418879][T29602] __nla_validate_parse: 4 callbacks suppressed [ 997.418901][T29602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6409'. [ 997.440210][T29599] syzkaller0: entered promiscuous mode [ 997.445785][T29599] syzkaller0: entered allmulticast mode [ 997.495223][T29602] geneve2: entered promiscuous mode [ 997.526474][T29603] team0: Device xfrm1 is of different type [ 997.548833][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6410'. [ 997.634125][T26726] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.695080][T29611] netlink: 'syz.4.6411': attribute type 1 has an invalid length. [ 997.705998][T29612] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6407'. [ 997.727803][T29613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6408'. [ 997.872667][T26726] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.881947][T26726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.894303][T29618] netlink: 'syz.4.6411': attribute type 1 has an invalid length. [ 997.905122][T29618] netlink: 248 bytes leftover after parsing attributes in process `syz.4.6411'. [ 997.963751][T29614] bond4: (slave gretap1): making interface the new active one [ 997.976038][T29614] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 997.997494][T29616] vlan2: entered allmulticast mode [ 998.008812][T29616] bond4: entered allmulticast mode [ 998.014436][T29616] gretap1: entered allmulticast mode [ 998.022433][T29616] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 998.062662][T26726] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.073074][T29607] lo speed is unknown, defaulting to 1000 [ 998.404640][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1001.016400][T29607] wg1 speed is unknown, defaulting to 1000 [ 1001.044705][T29624] lo speed is unknown, defaulting to 1000 [ 1001.053384][T29620] lo speed is unknown, defaulting to 1000 [ 1001.068428][T29624] wg1 speed is unknown, defaulting to 1000 [ 1001.082174][T29620] wg1 speed is unknown, defaulting to 1000 [ 1001.092754][T29607] ip6_vti0 speed is unknown, defaulting to 1000 [ 1001.295110][T29650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6418'. [ 1001.579645][T29663] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6421'. [ 1001.590628][T29664] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6421'. [ 1001.705747][T29670] lo speed is unknown, defaulting to 1000 [ 1001.713866][T29670] wg1 speed is unknown, defaulting to 1000 [ 1001.719068][T29620] ip6_vti0 speed is unknown, defaulting to 1000 [ 1001.727543][T29607] wg1 speed is unknown, defaulting to 1000 [ 1001.737567][T29661] tipc: Cannot configure node identity twice [ 1001.744016][T29671] netlink: 'syz.0.6422': attribute type 12 has an invalid length. [ 1001.756962][T29671] netlink: 'syz.0.6422': attribute type 4 has an invalid length. [ 1001.977479][T29620] wg1 speed is unknown, defaulting to 1000 [ 1001.983827][T29624] ip6_vti0 speed is unknown, defaulting to 1000 [ 1002.255471][T29624] wg1 speed is unknown, defaulting to 1000 [ 1002.262418][T29670] ip6_vti0 speed is unknown, defaulting to 1000 [ 1002.647320][T29670] wg1 speed is unknown, defaulting to 1000 [ 1002.673506][T29673] tipc: Enabled bearer , priority 0 [ 1002.684759][T29673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'. [ 1002.737186][T29674] syzkaller0: entered promiscuous mode [ 1002.747407][T29674] syzkaller0: entered allmulticast mode [ 1002.798527][T29673] tipc: Resetting bearer [ 1002.836847][T29672] tipc: Resetting bearer [ 1002.866133][T29672] tipc: Disabling bearer [ 1003.076940][T29679] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6425'. [ 1003.139262][T29679] .70·: renamed from hsr0 [ 1003.158138][T29679] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1003.186570][T29679] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1003.208933][T29679] .70·: entered allmulticast mode [ 1003.214653][T29679] hsr_slave_0: entered allmulticast mode [ 1003.220558][T29679] hsr_slave_1: entered allmulticast mode [ 1003.234826][T29679] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1003.380164][T29687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6427'. [ 1003.753369][T29701] netlink: 'syz.0.6430': attribute type 1 has an invalid length. [ 1003.973069][T29701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1004.118072][T29706] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1004.150341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1004.158475][ C1] lec:lec_tx_timeout: lec0 [ 1004.207635][T29709] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1004.451725][T29701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.706607][T29721] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6433'. [ 1004.796418][T29718] lo speed is unknown, defaulting to 1000 [ 1004.948588][T29720] lo speed is unknown, defaulting to 1000 [ 1004.959032][T29718] wg1 speed is unknown, defaulting to 1000 [ 1005.017946][T29718] ip6_vti0 speed is unknown, defaulting to 1000 [ 1005.043643][T29720] wg1 speed is unknown, defaulting to 1000 [ 1005.557980][T29718] wg1 speed is unknown, defaulting to 1000 [ 1005.558028][T29720] ip6_vti0 speed is unknown, defaulting to 1000 [ 1006.061853][T29720] wg1 speed is unknown, defaulting to 1000 [ 1006.123494][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6445'. [ 1006.180644][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6445'. [ 1006.424258][T29759] hsr_slave_1 (unregistering): left promiscuous mode [ 1007.087553][T29783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 1007.349141][T29782] lo speed is unknown, defaulting to 1000 [ 1007.380052][T29782] wg1 speed is unknown, defaulting to 1000 [ 1007.388105][T29782] ip6_vti0 speed is unknown, defaulting to 1000 [ 1007.441726][T29784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1007.481108][T29784] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6452'. [ 1007.657107][T29793] tipc: Enabled bearer , priority 0 [ 1007.689443][T29793] tipc: Resetting bearer [ 1007.888396][T29801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6457'. [ 1007.901897][T29801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6457'. [ 1007.964139][T29781] lo speed is unknown, defaulting to 1000 [ 1007.970055][T29782] wg1 speed is unknown, defaulting to 1000 [ 1008.029381][T29781] wg1 speed is unknown, defaulting to 1000 [ 1008.078299][T29781] ip6_vti0 speed is unknown, defaulting to 1000 [ 1008.301677][T29812] netlink: 'syz.0.6460': attribute type 3 has an invalid length. [ 1008.330732][T29806] lo speed is unknown, defaulting to 1000 [ 1008.353565][T29806] wg1 speed is unknown, defaulting to 1000 [ 1008.744531][T27332] tipc: Node number set to 1 [ 1008.749404][T29781] wg1 speed is unknown, defaulting to 1000 [ 1008.866670][T29806] ip6_vti0 speed is unknown, defaulting to 1000 [ 1009.494121][T29823] ip6tnl0: Caught tx_queue_len zero misconfig [ 1009.501919][T29806] wg1 speed is unknown, defaulting to 1000 [ 1010.393334][T29844] lo: Caught tx_queue_len zero misconfig [ 1010.608360][T29852] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1010.792708][T29852] netlink: 'syz.5.6473': attribute type 8 has an invalid length. [ 1010.871910][T29852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6473'. [ 1011.739120][T29875] netlink: 'syz.3.6478': attribute type 1 has an invalid length. [ 1011.761064][T29875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6478'. [ 1012.096965][T29885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1012.120119][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1012.139657][T29885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1012.165772][T29885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1012.410915][T29892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6486'. [ 1012.430760][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6486'. [ 1012.511733][T29895] netlink: 'syz.6.6487': attribute type 10 has an invalid length. [ 1012.531847][T29898] netlink: 'syz.0.6488': attribute type 1 has an invalid length. [ 1012.679618][T29901] netlink: 'syz.3.6489': attribute type 33 has an invalid length. [ 1012.732412][T29907] netlink: 'syz.0.6492': attribute type 12 has an invalid length. [ 1012.744085][T29907] netlink: 'syz.0.6492': attribute type 29 has an invalid length. [ 1012.752197][T29907] netlink: 'syz.0.6492': attribute type 2 has an invalid length. [ 1012.773787][T29903] syzkaller0: entered promiscuous mode [ 1012.779343][T29903] syzkaller0: entered allmulticast mode [ 1013.051809][T29913] __nla_validate_parse: 3 callbacks suppressed [ 1013.051854][T29913] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6490'. [ 1013.086276][T29913] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6490'. [ 1013.108021][T29916] netlink: 'syz.5.6495': attribute type 10 has an invalid length. [ 1013.128950][T29917] tipc: Enabled bearer , priority 0 [ 1013.153071][T29902] tipc: Resetting bearer [ 1013.194278][T29902] tipc: Disabling bearer [ 1013.366836][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1013.377730][T29931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1039.357479][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1047.928730][T25532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1048.616655][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1048.736260][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1048.915921][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1049.067811][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1049.176844][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1049.497466][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1049.608885][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1049.875724][T29948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1049.985736][T29948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1051.806713][T25532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1051.938710][T25532] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1052.179365][T25532] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1052.606447][T25532] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1052.756051][T25532] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1052.818042][ T5826] Bluetooth: hci0: command tx timeout [ 1052.967024][T25532] Bluetooth: hci5: command tx timeout [ 1053.597709][T25532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1053.818447][T29948] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1054.089227][T29948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1054.517378][T25532] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1054.626443][T25532] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1054.819354][T25532] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1054.869613][T25532] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1054.888513][ T5826] Bluetooth: hci0: command tx timeout [ 1055.037256][T25532] Bluetooth: hci5: command tx timeout [ 1055.126002][T25532] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1055.449046][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1055.755861][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1055.769054][ T5836] Bluetooth: hci6: command tx timeout [ 1056.956849][T29949] Bluetooth: hci0: command tx timeout [ 1057.118993][T29949] Bluetooth: hci5: command tx timeout [ 1057.838239][T29949] Bluetooth: hci6: command tx timeout [ 1057.926430][T29949] Bluetooth: hci7: command tx timeout [ 1058.657976][T29949] Bluetooth: hci8: command tx timeout [ 1059.046107][T29949] Bluetooth: hci0: command tx timeout [ 1059.206680][T29949] Bluetooth: hci5: command tx timeout [ 1059.857390][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1059.948643][T29948] Bluetooth: hci6: command tx timeout [ 1060.007306][T29948] Bluetooth: hci7: command tx timeout [ 1060.728121][T29948] Bluetooth: hci8: command tx timeout [ 1061.999626][T29948] Bluetooth: hci6: command tx timeout [ 1062.076931][T29948] Bluetooth: hci7: command tx timeout [ 1062.799480][T29948] Bluetooth: hci8: command tx timeout [ 1064.155748][T29948] Bluetooth: hci7: command tx timeout [ 1064.889587][T29948] Bluetooth: hci8: command tx timeout [ 1065.113079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 1065.124711][ C1] lec:lec_tx_timeout: lec0 [ 1069.256590][T29932] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1076.987438][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1077.066190][T29931] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6498'. [ 1107.147861][T29949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1107.209659][T29949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1107.409632][T29949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1107.727939][T29949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1107.985888][T25532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1110.646729][T29948] Bluetooth: hci3: command tx timeout [ 1110.666277][T29948] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1111.065625][T29948] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1111.289160][T29948] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1111.669010][T29948] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1112.019260][T29948] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1112.715941][T25532] Bluetooth: hci3: command tx timeout [ 1113.038468][T26730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1113.516742][T26730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.797897][T29948] Bluetooth: hci3: command tx timeout [ 1115.035954][T29948] Bluetooth: hci9: command tx timeout [ 1115.639108][T25532] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1115.799358][T25532] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1115.918735][T25532] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1116.539445][T25532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1116.895586][T25532] Bluetooth: hci3: command tx timeout [ 1116.966107][T25532] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1117.137720][T29949] Bluetooth: hci9: command tx timeout [ 1117.368708][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1117.536665][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1117.639687][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1117.986164][T29936] lo speed is unknown, defaulting to 1000 [ 1118.096955][T29948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1118.189519][T29948] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1118.677357][T29948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1118.778285][T29948] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1118.838633][T29948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1119.099454][T29948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1119.196253][T25532] Bluetooth: hci9: command tx timeout [ 1119.787531][T29948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1120.237895][T29949] Bluetooth: hci2: command tx timeout [ 1121.286913][T29948] Bluetooth: hci9: command tx timeout [ 1121.328375][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1121.687563][T29948] Bluetooth: hci10: command tx timeout [ 1122.318105][T29948] Bluetooth: hci2: command tx timeout [ 1122.477593][T29948] Bluetooth: hci0: command tx timeout [ 1123.768651][T29948] Bluetooth: hci10: command tx timeout [ 1124.398848][T29948] Bluetooth: hci2: command tx timeout [ 1124.479265][T26730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1124.558787][T29948] Bluetooth: hci0: command tx timeout [ 1124.625526][T26730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.835780][T29948] Bluetooth: hci10: command tx timeout [ 1126.426143][T29936] wg1 speed is unknown, defaulting to 1000 [ 1126.486707][T29948] Bluetooth: hci2: command tx timeout [ 1126.518287][T29936] ip6_vti0 speed is unknown, defaulting to 1000 [ 1126.526238][T29952] lo speed is unknown, defaulting to 1000 [ 1126.598593][T29952] wg1 speed is unknown, defaulting to 1000 [ 1126.649617][T29948] Bluetooth: hci0: command tx timeout [ 1127.113068][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 1127.124652][ C1] lec:lec_tx_timeout: lec0 [ 1127.376323][T29964] lo speed is unknown, defaulting to 1000 [ 1127.578697][T29964] wg1 speed is unknown, defaulting to 1000 [ 1127.926465][T29948] Bluetooth: hci10: command tx timeout [ 1128.518268][T29962] lo speed is unknown, defaulting to 1000 [ 1128.736733][T29948] Bluetooth: hci0: command tx timeout [ 1130.136200][T29962] wg1 speed is unknown, defaulting to 1000 [ 1134.389610][T26730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1134.645816][T26730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.246350][T29968] lo speed is unknown, defaulting to 1000 [ 1136.418815][T29968] wg1 speed is unknown, defaulting to 1000 [ 1136.506684][T29966] lo speed is unknown, defaulting to 1000 [ 1142.967673][T26730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.256824][T26730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.879639][T29949] Bluetooth: hci4: command 0x0406 tx timeout [ 1144.668238][T29966] wg1 speed is unknown, defaulting to 1000 [ 1144.777225][T29969] lo speed is unknown, defaulting to 1000 [ 1144.948170][T29936] wg1 speed is unknown, defaulting to 1000 [ 1145.009508][T29952] ip6_vti0 speed is unknown, defaulting to 1000 [ 1145.137115][T29969] wg1 speed is unknown, defaulting to 1000 [ 1154.806229][T26730] bridge_slave_1: left allmulticast mode [ 1154.967012][T26730] bridge_slave_1: left promiscuous mode [ 1155.098033][T26730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.658093][T26730] bridge_slave_0: left allmulticast mode [ 1157.037189][T26730] bridge_slave_0: left promiscuous mode [ 1157.166349][T26730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.007871][T29949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1169.288713][T29949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1169.489652][T29949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1169.976219][T29949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1170.176859][T29949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1173.126689][T29949] Bluetooth: hci5: command tx timeout [ 1175.196092][T29949] Bluetooth: hci5: command tx timeout [ 1175.976938][T25532] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1176.158138][T25532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1176.338422][T29971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1176.368538][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1176.519396][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1176.579670][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1176.786225][T29971] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1176.817216][T29971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1177.085982][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1177.217278][ T5826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1177.278546][ T5826] Bluetooth: hci5: command tx timeout [ 1177.327727][T29971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1177.356913][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1178.066309][T29949] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1178.116820][T29949] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1178.309450][T29971] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1178.588741][T29971] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1178.636554][T29971] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1178.837879][T29971] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1179.396800][T25532] Bluetooth: hci5: command tx timeout [ 1179.588266][T29971] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1179.679479][T29971] Bluetooth: hci7: command 0x0406 tx timeout [ 1179.866577][T25532] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1179.925725][T25532] Bluetooth: hci6: command tx timeout [ 1180.077822][T25532] Bluetooth: hci1: command tx timeout [ 1182.005626][ T5826] Bluetooth: hci6: command tx timeout [ 1182.167764][ T5826] Bluetooth: hci1: command tx timeout [ 1182.239575][ T5826] Bluetooth: hci8: command tx timeout [ 1182.657069][ T5826] Bluetooth: hci11: command tx timeout [ 1182.729265][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1184.077108][ T5826] Bluetooth: hci6: command tx timeout [ 1184.247649][ T5826] Bluetooth: hci1: command tx timeout [ 1184.326387][ T5826] Bluetooth: hci8: command tx timeout [ 1184.726679][ T5826] Bluetooth: hci11: command tx timeout [ 1186.167351][ T5826] Bluetooth: hci6: command tx timeout [ 1186.327860][ T5826] Bluetooth: hci1: command tx timeout [ 1186.408795][ T5826] Bluetooth: hci8: command tx timeout [ 1186.798687][ T5826] Bluetooth: hci11: command tx timeout [ 1188.152605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1188.163355][ C1] lec:lec_tx_timeout: lec0 [ 1188.487198][ T5826] Bluetooth: hci8: command tx timeout [ 1188.897426][ T5826] Bluetooth: hci11: command tx timeout [ 1202.766675][T26730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.866512][T26730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.609626][T26730] bond0 (unregistering): Released all slaves [ 1214.277424][T26730] bond1 (unregistering): (slave veth3): Releasing active interface [ 1216.387241][T26730] bond1 (unregistering): (slave veth5): Releasing active interface [ 1217.707714][T26730] bond1 (unregistering): Released all slaves [ 1219.315723][T29964] ip6_vti0 speed is unknown, defaulting to 1000 [ 1220.337558][T29952] wg1 speed is unknown, defaulting to 1000 [ 1230.876684][T29948] Bluetooth: hci3: command 0x0406 tx timeout [ 1233.696936][T29948] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1233.938190][T29948] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1234.038937][T29948] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1234.296310][T29948] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1234.416224][T29948] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1236.025633][T29948] Bluetooth: hci9: command 0x0406 tx timeout [ 1237.216245][T29948] Bluetooth: hci12: command tx timeout [ 1239.286431][T29971] Bluetooth: hci12: command tx timeout [ 1240.079318][T25532] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1240.126221][T29949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1240.219010][T29949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1240.345664][T29949] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1240.445814][T29949] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1240.487275][T25532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1240.638955][T25532] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1240.858366][T25532] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1240.926447][T25532] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1241.067282][T25532] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1241.118287][T30001] Bluetooth: hci2: command 0x0406 tx timeout [ 1241.229305][T30001] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1241.357161][T30001] Bluetooth: hci12: command tx timeout [ 1241.546728][T29971] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1241.628748][T29971] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1241.929446][T29971] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1241.998546][T25532] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1243.286317][T29948] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1243.396821][T29948] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1243.446195][T29949] Bluetooth: hci12: command tx timeout [ 1243.596790][T29949] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1243.876946][T29949] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1244.109331][T29949] Bluetooth: hci5: command tx timeout [ 1244.219535][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1244.278688][T29971] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1244.957185][ T5826] Bluetooth: hci14: command tx timeout [ 1245.038886][ T5826] Bluetooth: hci13: command tx timeout [ 1245.565614][T26730] tipc: Disabling bearer [ 1245.759218][T26730] tipc: Left network mode [ 1245.896018][T29964] wg1 speed is unknown, defaulting to 1000 [ 1245.966953][T29962] ip6_vti0 speed is unknown, defaulting to 1000 [ 1246.175561][T29971] Bluetooth: hci5: command tx timeout [ 1246.257258][T29971] Bluetooth: hci10: command 0x0406 tx timeout [ 1246.286575][T29971] Bluetooth: hci0: command 0x0406 tx timeout [ 1247.045609][T29971] Bluetooth: hci14: command tx timeout [ 1247.116096][T29971] Bluetooth: hci13: command tx timeout [ 1247.286465][T29971] Bluetooth: hci15: command tx timeout [ 1248.249103][T29949] Bluetooth: hci5: command tx timeout [ 1249.128761][T29949] Bluetooth: hci14: command tx timeout [ 1249.196335][T29949] Bluetooth: hci13: command tx timeout [ 1249.234341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1249.244960][ C1] lec:lec_tx_timeout: lec0 [ 1249.356960][T29949] Bluetooth: hci15: command tx timeout [ 1249.618100][T29993] lo speed is unknown, defaulting to 1000 [ 1250.338581][T29949] Bluetooth: hci5: command tx timeout [ 1251.195724][T29949] Bluetooth: hci14: command tx timeout [ 1251.277189][T29948] Bluetooth: hci13: command tx timeout [ 1251.306088][T26730] IPVS: stopping backup sync thread 28581 ... [ 1251.435961][T29948] Bluetooth: hci15: command tx timeout [ 1253.526034][T29948] Bluetooth: hci15: command tx timeout [ 1257.146030][T29995] lo speed is unknown, defaulting to 1000 [ 1257.469578][T29993] wg1 speed is unknown, defaulting to 1000 [ 1262.466374][T29995] wg1 speed is unknown, defaulting to 1000 [ 1262.507295][T29999] lo speed is unknown, defaulting to 1000 [ 1263.408998][T29997] lo speed is unknown, defaulting to 1000 [ 1264.778780][T30002] lo speed is unknown, defaulting to 1000 [ 1268.658575][T29968] ip6_vti0 speed is unknown, defaulting to 1000 [ 1286.535966][T29966] ip6_vti0 speed is unknown, defaulting to 1000 [ 1291.545706][ T31] INFO: task syz-executor:29969 blocked for more than 143 seconds. [ 1291.776261][ T31] Not tainted syzkaller #0 [ 1291.917662][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1292.196062][ T31] task:syz-executor state:D stack:25152 pid:29969 tgid:29969 ppid:1 task_flags:0x400140 flags:0x00080003 [ 1292.515849][ T31] Call Trace: [ 1292.519204][ T31] [ 1292.739290][ T31] __schedule+0x1798/0x4cc0 [ 1292.936591][ T31] ? __lock_acquire+0xab9/0xd20 [ 1293.196164][ T31] ? __lock_acquire+0xab9/0xd20 [ 1293.436168][ T31] ? __pfx___schedule+0x10/0x10 [ 1293.555651][ T31] ? schedule+0x91/0x360 [ 1293.675493][ T31] schedule+0x165/0x360 [ 1293.786625][ T31] schedule_preempt_disabled+0x13/0x30 [ 1294.018843][ T31] __mutex_lock+0x7e6/0x1350 [ 1294.148828][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1294.295336][ T31] ? add_one_compat_dev+0xee/0x5c0 [ 1294.445669][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1294.598522][ T31] ? rdma_dev_init_net+0x1d2/0x270 [ 1294.727520][ T31] add_one_compat_dev+0xee/0x5c0 [ 1294.929320][ T31] rdma_dev_init_net+0x1dd/0x270 [ 1294.997578][T30007] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1295.076902][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1295.216597][ T31] ops_init+0x35c/0x5c0 [ 1295.347307][ T31] setup_net+0xfe/0x320 [ 1295.468934][ T31] ? __pfx_setup_net+0x10/0x10 [ 1295.509290][T30007] CPU: 0 UID: 0 PID: 30007 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1295.509323][T30007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1295.509338][T30007] Call Trace: [ 1295.509348][T30007] [ 1295.509359][T30007] dump_stack_lvl+0x189/0x250 [ 1295.509398][T30007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.509428][T30007] ? __pfx__printk+0x10/0x10 [ 1295.509451][T30007] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1295.509504][T30007] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1295.509535][T30007] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1295.509568][T30007] warn_alloc+0x214/0x310 [ 1295.509608][T30007] ? __pfx_warn_alloc+0x10/0x10 [ 1295.509654][T30007] ? __get_vm_area_node+0x28f/0x300 [ 1295.509684][T30007] ? kcov_ioctl+0x55/0x640 [ 1295.509708][T30007] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1295.509771][T30007] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1295.509817][T30007] ? __pfx_kcov_ioctl+0x10/0x10 [ 1295.509839][T30007] vmalloc_user_noprof+0xad/0xf0 [ 1295.509869][T30007] ? kcov_ioctl+0x55/0x640 [ 1295.509891][T30007] kcov_ioctl+0x55/0x640 [ 1295.509913][T30007] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1295.509937][T30007] ? __pfx_kcov_ioctl+0x10/0x10 [ 1295.509957][T30007] __se_sys_ioctl+0xfc/0x170 [ 1295.509988][T30007] do_syscall_64+0xfa/0xfa0 [ 1295.510012][T30007] ? lockdep_hardirqs_on+0x9c/0x150 [ 1295.510036][T30007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.510058][T30007] ? clear_bhb_loop+0x60/0xb0 [ 1295.510083][T30007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.510104][T30007] RIP: 0033:0x7fcacbf8f34b [ 1295.510125][T30007] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1295.510145][T30007] RSP: 002b:00007ffdafedbb10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1295.510169][T30007] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fcacbf8f34b [ 1295.510185][T30007] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000de [ 1295.510200][T30007] RBP: 00007fcacc1e65d8 R08: 00000000000000da R09: 0000000000000000 [ 1295.510215][T30007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.510228][T30007] R13: 0000000000000003 R14: 00007ffdafedbe58 R15: 0000000000000000 [ 1295.510263][T30007] [ 1295.589024][ T31] ? copy_net_ns+0x337/0x4e0 [ 1295.858831][T30007] Mem-Info: [ 1295.868113][T30007] active_anon:6483 inactive_anon:0 isolated_anon:0 [ 1295.868113][T30007] active_file:3622 inactive_file:40363 isolated_file:0 [ 1295.868113][T30007] unevictable:768 dirty:31 writeback:0 [ 1295.868113][T30007] slab_reclaimable:13595 slab_unreclaimable:219858 [ 1295.868113][T30007] mapped:67852 shmem:1413 pagetables:1208 [ 1295.868113][T30007] sec_pagetables:0 bounce:0 [ 1295.868113][T30007] kernel_misc_reclaimable:0 [ 1295.868113][T30007] free:1088043 free_pcp:13682 free_cma:0 [ 1296.246884][ T31] ? down_read_killable+0x1d1/0x350 [ 1296.405868][T30007] Node 0 active_anon:23124kB inactive_anon:0kB active_file:14488kB inactive_file:161252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:268244kB dirty:156kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15664kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1296.446852][ T31] ? preinit_net+0x47d/0x780 [ 1296.625903][ T31] copy_net_ns+0x34e/0x4e0 [ 1296.736103][T30007] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1296.879544][ T31] create_new_namespaces+0x3f3/0x720 [ 1297.059565][ T31] ? security_capable+0x7e/0x2e0 [ 1297.076230][T30007] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1297.215348][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 1297.375916][ T31] ksys_unshare+0x4c8/0x8c0 [ 1297.615558][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1297.669514][T30007] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 1297.756579][ T31] ? dnotify_flush+0x1db/0x5e0 [ 1297.819595][T30007] Node 0 DMA32 free:453556kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20916kB inactive_anon:0kB active_file:14484kB inactive_file:161252kB unevictable:1536kB writepending:32kB zspages:0kB present:3129332kB managed:2565032kB mlocked:0kB bounce:0kB free_pcp:52940kB local_pcp:24760kB free_cma:0kB [ 1298.029238][T30007] lowmem_reserve[]: 0 0 0 0 0 [ 1298.057318][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1298.135426][T30007] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1298.226197][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1298.399218][ T31] __x64_sys_unshare+0x38/0x50 [ 1298.499287][ T31] do_syscall_64+0xfa/0xfa0 [ 1298.606462][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1298.666611][T30007] lowmem_reserve[]: 0 0 0 0 0 [ 1298.759192][T30007] Node 1 Normal free:3896416kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17080kB local_pcp:6004kB free_cma:0kB [ 1298.825588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.935976][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1299.029545][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.279503][ T31] RIP: 0033:0x7f82e2390f47 [ 1299.376702][T30007] lowmem_reserve[]: 0 0 0 0 0 [ 1299.448540][ T31] RSP: 002b:00007ffc4b20bac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1299.595819][ T31] RAX: ffffffffffffffda RBX: 00007f82e25e5f40 RCX: 00007f82e2390f47 [ 1299.649215][T30007] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1299.795982][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1300.035322][ T31] RBP: 00007f82e25e67b8 R08: 0000000000000000 R09: 0000000000000000 [ 1300.209244][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1300.209536][T30007] Node 0 DMA32: 1100*4kB (UME) 430*8kB (UME) 544*16kB (UME) 463*32kB (UME) 357*64kB (UME) 177*128kB (UME) 65*256kB (UM) 57*512kB (UM) 18*1024kB (UM) 2*2048kB (UM) 88*4096kB (M) = 505664kB [ 1300.619413][ T31] R13: 0000000000000003 R14: 00007ffc4b20bd98 R15: 0000000000000000 [ 1300.746551][ T31] [ 1300.826521][T30007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1300.837548][ T31] [ 1300.837548][ T31] Showing all locks held in the system: [ 1301.117965][ T31] 1 lock held by khungtaskd/31: [ 1301.266188][T30007] Node 1 Normal: 202*4kB (UE) 49*8kB (UME) 47*16kB (UME) 110*32kB (UME) 24*64kB (UME) 6*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896416kB