last executing test programs: 12m16.015184276s ago: executing program 3 (id=2004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000400000000000000000000000000600000000000000af00000000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002000000000000000000000000000000ff3e4fc6baa9ba6c30db870feab632463ca8a263ee61c35f8084524178dc400defa11e148c808a293360696d7bc51066e1d6f6ba6f50c55ec5500d273e7638216ecfb4cdc411656ae580fe3e0f11beb25c05d99aad5c7c0fecb3b5"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 12m15.704150647s ago: executing program 3 (id=2006): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x105080, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x10, r0, 0x6b399000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000001180)=@ccm_128={{0x303}, "586227138066a1e7", "dcf5fe61539a83ce1906ca800859bcd1", "37056fa4", "26e668ef9d941c04"}, 0x28) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000011c0)=0x0, &(0x7f0000001200)=0x4) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000001240)={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0xa, 0x8000, 0x6, 0x100, 0x27c6, 0x6140002, r3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2340}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000001400)=""/142, &(0x7f00000014c0)=0x8e) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_FSBULKSTAT(r5, 0xc0205865, &(0x7f0000001700)={&(0x7f0000001500)=0x4, 0x10, &(0x7f0000001540)=[{}, {}], &(0x7f00000016c0)}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x81}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x8000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000001840)=""/4096, &(0x7f0000002840)=0x1000) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000002880)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002900)={0x0, @in6={{0xa, 0x4e22, 0xf55b, @remote}}, 0x101, 0x8000, 0x3, 0x10001, 0xa9, 0x4, 0x7}, &(0x7f00000029c0)=0x9c) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000002a00)={r7, 0xfffff288}, 0x8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f0000002a40)={0x1f, @none}, 0x8) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000002a80)={@dev={0xfe, 0x80, '\x00', 0x1c}, @dev={0xfe, 0x80, '\x00', 0x1c}, @remote, 0x8, 0xc69, 0x1, 0x400, 0xf, 0x2000000, r3}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002b00)={'wlan0\x00'}) r9 = openat$cgroup_ro(r6, &(0x7f0000002b40)='cgroup.controllers\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000002b80)=@generic={0x3, 0x1, 0x59}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002d00)={'gretap0\x00', &(0x7f0000002bc0)={'tunl0\x00', r3, 0x7, 0x0, 0xfff, 0x3, {{0x39, 0x4, 0x0, 0x8, 0xe4, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x4c, 0x5e, 0x3, 0xe, [{@empty, 0x9}, {@empty, 0x2}, {@local, 0xfd}, {@private=0xa010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@remote, 0xffff0001}, {@remote, 0x7}, {@local, 0x9}, {@local, 0x8001}]}, @ssrr={0x89, 0x7, 0x39, [@broadcast]}, @ssrr={0x89, 0x23, 0x48, [@multicast2, @remote, @multicast1, @local, @rand_addr=0x64010100, @multicast1, @remote, @remote]}, @end, @timestamp_addr={0x44, 0x44, 0x9e, 0x1, 0x1, [{@private=0xa010101, 0x5}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xf7f}, {@multicast2, 0xb}, {@loopback, 0x10000}, {@loopback, 0xfffffff9}, {@private=0xa010100, 0x3}, {@empty, 0x3}]}, @ssrr={0x89, 0x13, 0x54, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @local, @broadcast]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000002d40)=@bloom_filter={0x1e, 0x0, 0x7, 0xc6, 0x4005c, r2, 0x3, '\x00', r10, r6, 0x3, 0x0, 0x4, 0x7}, 0x50) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002e00), r9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x28, r11, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880) 12m15.602208782s ago: executing program 3 (id=2009): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000030000008500000013000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "0476bc4b4c"}, @timestamp_addr={0x44, 0x14, 0xa8, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r4, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000016c0)="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", 0x81c}, {&(0x7f0000002880)="1d2a14209b2ce5a4558a11f5ddf93ac8ccea31cb7464525f4cc9722a5ffcbc246fbd62e115d95434cc7e02ba844312", 0x2f}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004dc0)=ANY=[], 0x20}}], 0x2, 0x4084) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) r7 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="018000001d000000000778e000000200"], 0x0) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002d0007012bbd7000fedbdf25087c0000080001800400dd80080003"], 0x24}}, 0x4008030) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 12m15.172011148s ago: executing program 3 (id=2017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000400000000000000000000000000700000000000000af00000000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002000000000000000000000000000000ff3e4fc6baa9ba6c30db870feab632463ca8a263ee61c35f8084524178dc400defa11e148c808a293360696d7bc51066e1d6f6ba6f50c55ec5500d273e7638216ecfb4cdc411656ae580fe3e0f11beb25c05d99aad5c7c0fecb3b5"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 12m14.728551343s ago: executing program 3 (id=2020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x7}, 0x0) unshare(0x20400) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) 12m13.99378099s ago: executing program 3 (id=2026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) 11m58.773658516s ago: executing program 32 (id=2026): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) 3m12.731883949s ago: executing program 0 (id=6574): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_PLIMIT={0x0, 0x2, 0x3ff}]}}]}, 0x48}}, 0x0) 3m12.544825961s ago: executing program 0 (id=6578): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00ffe200bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000006000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3m12.293325659s ago: executing program 0 (id=6580): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06f9a70699d981f994ac2484028a45d3f4c526a7d89deefa87d5171c1014a1f7da9a5b9fd6e397c504606c7b8615ee7354cc8a1e246ec6931afee0e15f8bb4cd86a715dc52619c2b605b49d8a55c4e8ec1199a05988a0ea8da99d3968c32837966c8a5a43a7adbb73b"], 0x48) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r1, 0xaa0f4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) 3m12.07872876s ago: executing program 0 (id=6582): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000bbbd000001000000000000000000000000965cab40e359df36a19862170637acda4e61691554996f735fff0f135e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000600)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)="1d2aa8f448da24e6f9094a0174b21bc541f68e9c3e47237646cedcceda045bcd30d65b06f59aa903e4d7f85d1ff9b75d4fab2cf171bfa8e633263d4a7b5ea7fc9688d3106c6690e1fc54c03597f060f2efad593e9b9b2f79f38f6df56e94c24ee852f9ad9f340af5a7aa82716e03cb5b91c4c7e72c0d2e9a636379035f612e98b14f0f5f79cc55f4babbbb95ac17ff28142422e9b5e58f9e5ed0e18b9f9b62f4ba96ee08d09c187257720a913c5cba1009b88ddeeb78d2834cade6324e844c19fe8a5e3a6ca3e37de9a328c8738743fb15", 0xd1}, {&(0x7f0000000440)="763815ae0e6611dc87377eab5e88fbb592fceb9e265615641759632f2d7ebc258e3d3791f62eafff1d5e4fdb62b98597de24f2719007efc158", 0x39}, {&(0x7f0000000480)="48a9241ca26238cfe6b4301866ddb58aac1db26ed2b73ac59eb61672ff5ec3d58cc0143f0fa3a870ec33d79bc443d778fd1c38d9efec8060cc580b6568cac62889044b636bc6930237eb9ec242437f7beacd49e86e9e132745ab76aedac4457a728668f578b5892a57", 0x69}], 0x3, &(0x7f0000000540)="dfb7365a1624d692aa872aa83ddd8e692b9b4f4cecf028a3585fc731657126358a3e7f6103f6b45174b91eeccafe1c188551dd363ac157e16169a6677eedf26b7847173ceb101ef821883587fb6ab2b3978071571cdea8893b75537e2f4f10b98af19eeb0ad2f685912843aad93af40b8a43f7b265b9bae3291997de09aff49bb8f1c64633b56800dd9fa1a64ac81e737d9f", 0x92, 0x40}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x28000600) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x4d, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000002300)=0x4) 3m11.796229051s ago: executing program 0 (id=6584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000400000000000000000000000000000000000000003af00000000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002000000000000000002000000000000000000000000000000ff3e4fc6baa9ba6c30db870feab632463ca8a263ee61c35f8084524178dc400defa11e148c808a293360696d7bc51066e1d6f6ba6f50c55ec5500d273e7638216ecfb4cdc411656ae580fe3e0f11beb25c05d99aad5c7c0fecb3b5"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m11.662014431s ago: executing program 0 (id=6586): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24060400) r2 = socket(0x2d, 0x2, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x200000, 0xffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r5 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) setsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000180)="7af02e35c30bbf8c56932a562818736169fc75b5441bb3f74d5ed0846e18beb1072dc590ca38219d899569ba210869ed24e7625e1626901d0e6ffee34492", 0x3e) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x38, r6, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,aes)\x00'}, 0x58) 2m55.807206843s ago: executing program 33 (id=6586): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x24060400) r2 = socket(0x2d, 0x2, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x24) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt(0xffffffffffffffff, 0x200000, 0xffffffff, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) r5 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) setsockopt$inet_buf(r5, 0x0, 0x20, &(0x7f0000000180)="7af02e35c30bbf8c56932a562818736169fc75b5441bb3f74d5ed0846e18beb1072dc590ca38219d899569ba210869ed24e7625e1626901d0e6ffee34492", 0x3e) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x38, r6, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,aes)\x00'}, 0x58) 2m41.937587625s ago: executing program 1 (id=6775): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0xfffffffa, 0x200, {0x0, 0x0, 0x0, 0x0, 0x8227}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000280)=0xb, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) unshare(0x20000400) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000070000000000000006000000c312adff0100001f9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2m41.17805726s ago: executing program 1 (id=6782): r0 = socket(0x10, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000040)='\xdc', 0x40001, &(0x7f0000000080)={@align=0x1000, {0x0, 0xcc, 0x8, 0x4}}, 0x200, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x80000001}, 0x4, &(0x7f0000000500)=[{0x2, 0x401, &(0x7f0000000140)='[\x00', &(0x7f0000000180)="20b2093812557cd15f0d8c147cc92a4477b0f4925cbd482ea91f5473e675209ff53218cc6f6a527b2c254cb469e68b7c8d5262b7bbd9fd22112e68ba29ffcdb907474ec420552c329e8b579e7c49893698a6123f4fd100e07c3278f639e457d19478906925b0d8bb6e0095c5345031fb9304fffb1a4982a3a05409af5c8ed7dcb585a91f219fa2a606e5ac42824b3bf4487a88524f7fd7be082e5a830ac92443c99e7c6b94332004129d67067b24b2558f394ec47302b03225f5ad7a6458a3a796667cf05c88a22cb2ff31897652429d165db15d15d57a42aabcc9b05e9639523621e89a807576", 0xe7, 0x1a}, {0x1, 0x7, &(0x7f0000000280)='^\x00', &(0x7f00000002c0)="311032d0e4e4f0cce5d586a1e28fe9ce5b1aacf00f41b285e000f0621b4d840986505f8c0f9efe1d8a8c8f8f7c5de3c05ba3c7b4978ef154a10256ac", 0x3c}, {0x1, 0x8000, &(0x7f0000000300)='^*\x00', &(0x7f0000000340)="ff8eb920740a660d5a28511815968208997a4e015274e4ce15c6e112ed037ee403e412e59abcd212362b6608ec150ae8c743c88609d0a05114755f309061ecad3d484d7544368ad8346fcc2b74dc", 0x4e}, {0x3, 0x8, &(0x7f00000003c0)='$*\x00', &(0x7f0000000400)="d6f3ad4355af67611abc760271ce2d997c5baa0fd473967006ab3f615ee2538b4a73268639e563643b1c77774165407f8ef5340b49db728b1ce69d8fb233480f24f7f0c66c34aefb1f6b7fefaa2ca5cda34e5c685d84135f3b7df6bbe45d4026bb16aaffb40e0acfe0e1faf5f3eacd1357ff863cb7c6cc62d3257c74ab6fdf3da5499b153e95085b99557c46923115f2f89dc70a8655aa04d7c7c842a7da567336ce297fe2cbdaa25bd09395a7627b58e465ebbb5a9fb7e69a46beb5d77c7ff06ea048a7fd9b8430338e1a28cb996dcb9d61280f34ca", 0xd6, 0x20}]}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r2], 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x1412, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES, @RDMA_NLDEV_ATTR_STAT_RES, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x4000054) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) socket$inet6(0xa, 0x80003, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x401}}, 0x27c0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 2m40.819160578s ago: executing program 1 (id=6785): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000ffffffff000000002000000073110b000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="09ffffff000000000000000063012300000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x1, 'veth0_to_batadv\x00', {}, 0xc}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010004a08184edb8bd938bc692bc139b1cce70100a54d00000000000b07000000000a"], 0x80}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x3b, 0x301, 0x2, 0x25dfdbf8, {0x5}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x48090) readv(r3, &(0x7f0000000740)=[{&(0x7f0000001640)=""/244, 0xf4}, {&(0x7f0000000680)=""/138, 0x8a}], 0x2) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000017c0)=r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe5000000071101d000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000540)={0x0, 0x40, 0x10}, &(0x7f0000000580)=0xc) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES64=r8], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 2m38.364329394s ago: executing program 1 (id=6788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}, 0x240400c0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x73, 0x7ff, 0x40, @local, @local, 0x20, 0x40, 0x9, 0x100}}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8811) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x20004890) 2m38.318775932s ago: executing program 1 (id=6790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000811e", @ANYRES16=r1, @ANYBLOB="010000000000108000003400000008000300feffffff08007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r5) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010023010000340200001500000008000300", @ANYRES32=r7, @ANYBLOB="0500290016"], 0x2c}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20040201, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, 0x0, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r9, 0x40086e81, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) 2m35.153710747s ago: executing program 1 (id=6800): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x20000, 0x2b152, 0x9, 0x1f4, 0x3, 0x2}}) (async, rerun: 32) getsockopt$sock_buf(r0, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e3cfdf9c7fd9cb9b23ce3d83a588299142089f9c5b4b35dab37568b6e00f8414c0644b5c27d70ca37a0e27573bb4290da2ffe0a602acda39f07f266479825588a0e2dcdf10a18617caf88dc9770ce45f3301c87d11bf3d6146bba8cb4ea94c37fc", @ANYRES64=0x0], 0x20) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0900000010000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="bd545a4f0700b0d567a4627f0e59714ad7bf9815b29bf81c8121ddf71a798ff3cf36b63a29007055d1999c4a7c079b13a4f75354012f155d3fe2857304efd17d2e493404b91cfa777ec11f54975a49c8cb1feb61656f6d05cf41832e4ede8d7645cddcd4cd", @ANYRES64=0x0], 0x20) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newtaction={0x54c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x538, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9bd, 0x3, 0x92, 0x2, 0x8, 0x4, 0x9955, 0xf16a, 0x2, 0x2, 0x9, 0x4, 0x1, 0x80000000, 0x8, 0x8, 0x7, 0x5, 0x5, 0x8, 0x4, 0x4, 0x2, 0x9, 0x9, 0x40, 0x8001, 0xfff, 0x2, 0x1, 0x0, 0x5, 0x3, 0x0, 0x2, 0x1, 0x8, 0x4, 0xa38, 0xa, 0x6, 0x6, 0x5, 0x871, 0x0, 0xaea6, 0x1, 0x6f5, 0x8, 0xba, 0x7f, 0x2, 0xe, 0xfffffffc, 0x18, 0x7fff, 0x3, 0x21f46918, 0x1, 0x3, 0x1000, 0x0, 0x5, 0x6, 0x7fe00, 0x2, 0x1, 0x1, 0x7fffffff, 0x2, 0x9, 0x9, 0x3, 0xfffffffe, 0x9, 0x4, 0x8b8, 0x8, 0x2, 0x8d, 0x1ff, 0x2, 0x200, 0x3f, 0x8, 0xe299, 0x80000000, 0x3, 0x92, 0x3, 0x7, 0x5, 0x5, 0x9, 0x97e, 0x4, 0x416a, 0xfffffeff, 0xffffff7f, 0x6, 0x7f, 0xfffffe00, 0x5, 0x4, 0xb, 0x8001, 0x8, 0x16000, 0xe, 0x9, 0x8000, 0xfffffffa, 0x8cc, 0x8, 0x7, 0x40e9, 0xa8, 0x9, 0x1000, 0x401, 0x3, 0x3, 0x77b, 0x4, 0x3, 0x8, 0x1, 0x6, 0x400, 0x26, 0x6d108bce, 0x80, 0x7f, 0xfb, 0x6, 0x81, 0xb6, 0x2, 0xfffffff5, 0x7fff, 0x5c, 0x7, 0x8, 0x5, 0x6, 0x612, 0x1, 0x6, 0x8001, 0x8, 0x3, 0x4, 0x1, 0x6, 0x8, 0x40, 0x10001, 0x9, 0x4, 0xcb, 0xcd, 0xbb3, 0xff90, 0xe3, 0x1, 0x7839, 0x2, 0x101, 0x3, 0xab7, 0x2, 0x6, 0x2, 0xc00, 0x2800000, 0x4, 0x4, 0x3, 0x100, 0x2, 0xffffffff, 0x3, 0x8, 0x44, 0x7, 0x7ff, 0xe, 0x5, 0x3, 0x4, 0x40, 0xff, 0x7, 0x6, 0x2, 0x8, 0xdfc, 0xfffffff7, 0x1f7, 0xe, 0x800, 0xbd, 0xfffffff8, 0x0, 0x80000001, 0x5, 0xfffffffc, 0x5, 0x4, 0x7, 0x6, 0x3, 0x200, 0x0, 0xffffffff, 0x0, 0x4a5, 0x9, 0x1, 0xfffffffe, 0x7, 0x9, 0xa, 0x8a74, 0x3ff, 0x579171c8, 0x7, 0x8, 0xd957, 0xf, 0xb, 0xba53, 0x7, 0xffff, 0x4, 0x634, 0x6, 0x4, 0x400, 0x6, 0x5, 0x3, 0xfff, 0x5, 0x5, 0x2, 0x101, 0x5, 0x5, 0xc048, 0x101, 0x1, 0x1, 0x4, 0x6, 0xffffffff]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}, @m_skbedit={0x7c, 0x17, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x8, 0x3, 0x8, 0x3}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0x9, 0x4, 0x1, 0x4eae}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd}]}, {0x7, 0x6, '\x00\x00\x00'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x54c}}, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000004184000a0000010900010073797a31000000002400048020"], 0x80}, 0x1, 0x0, 0x0, 0x4008011}, 0x24000000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000027000100fdff0700001000000e0000000a5f36e9aac7e950cad64eb8b28e89e6d33ce84c8271"], 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffecd, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="d28862ada3b2bc3c67db1f7b2af590c70b5289838f26fbc14c9e74a44c93caccbd6fa185f5908dae6323ec20a494935438cfed2fb3528b81160986e5cc7fb52d131ce77fac38b9e412207bf8f4f09ee12f13eeb80e4fd67b531e1424c77230a22dc4916b399b59086f9e44a2c0cb054adab20c54bfb120f9ee3e542d2ea9acf3edfa", @ANYBLOB="6c7e0a759f08b6f6528663a0a358c7d7a3b3c8e96004d24a4a55f14175dc699b9cd7fe25426c37b77681c6398c94c3bd2342b4703b487c12d3555b5b42c5759ed032083afb18bdddd171d0bcdbfe47508afb1bbc37d174982f63adcf75400f24e7f2f61354c8b2de90ee2772a8dd0973096a98962a92700581adf08e46cce7a82a328530ec5841c553b8f3241bebe6cf3b1dc9e9ae91a67b4e44"], 0x120}, 0x1, 0x0, 0x0, 0x4c804}, 0xc000) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="88a413000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2m19.930915561s ago: executing program 34 (id=6800): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x20000, 0x2b152, 0x9, 0x1f4, 0x3, 0x2}}) (async, rerun: 32) getsockopt$sock_buf(r0, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="e3cfdf9c7fd9cb9b23ce3d83a588299142089f9c5b4b35dab37568b6e00f8414c0644b5c27d70ca37a0e27573bb4290da2ffe0a602acda39f07f266479825588a0e2dcdf10a18617caf88dc9770ce45f3301c87d11bf3d6146bba8cb4ea94c37fc", @ANYRES64=0x0], 0x20) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000082ada487c05ac94a12e9de55a5873cbc7c38b2b93b9abb7ed77ff4cfa4d93ad50945", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf254a0000000f00a8007365636f6e646e616d6500000800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0900000010000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="bd545a4f0700b0d567a4627f0e59714ad7bf9815b29bf81c8121ddf71a798ff3cf36b63a29007055d1999c4a7c079b13a4f75354012f155d3fe2857304efd17d2e493404b91cfa777ec11f54975a49c8cb1feb61656f6d05cf41832e4ede8d7645cddcd4cd", @ANYRES64=0x0], 0x20) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x8001, 0xfffffffffffffece) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@newtaction={0x54c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x538, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x23}, {0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9bd, 0x3, 0x92, 0x2, 0x8, 0x4, 0x9955, 0xf16a, 0x2, 0x2, 0x9, 0x4, 0x1, 0x80000000, 0x8, 0x8, 0x7, 0x5, 0x5, 0x8, 0x4, 0x4, 0x2, 0x9, 0x9, 0x40, 0x8001, 0xfff, 0x2, 0x1, 0x0, 0x5, 0x3, 0x0, 0x2, 0x1, 0x8, 0x4, 0xa38, 0xa, 0x6, 0x6, 0x5, 0x871, 0x0, 0xaea6, 0x1, 0x6f5, 0x8, 0xba, 0x7f, 0x2, 0xe, 0xfffffffc, 0x18, 0x7fff, 0x3, 0x21f46918, 0x1, 0x3, 0x1000, 0x0, 0x5, 0x6, 0x7fe00, 0x2, 0x1, 0x1, 0x7fffffff, 0x2, 0x9, 0x9, 0x3, 0xfffffffe, 0x9, 0x4, 0x8b8, 0x8, 0x2, 0x8d, 0x1ff, 0x2, 0x200, 0x3f, 0x8, 0xe299, 0x80000000, 0x3, 0x92, 0x3, 0x7, 0x5, 0x5, 0x9, 0x97e, 0x4, 0x416a, 0xfffffeff, 0xffffff7f, 0x6, 0x7f, 0xfffffe00, 0x5, 0x4, 0xb, 0x8001, 0x8, 0x16000, 0xe, 0x9, 0x8000, 0xfffffffa, 0x8cc, 0x8, 0x7, 0x40e9, 0xa8, 0x9, 0x1000, 0x401, 0x3, 0x3, 0x77b, 0x4, 0x3, 0x8, 0x1, 0x6, 0x400, 0x26, 0x6d108bce, 0x80, 0x7f, 0xfb, 0x6, 0x81, 0xb6, 0x2, 0xfffffff5, 0x7fff, 0x5c, 0x7, 0x8, 0x5, 0x6, 0x612, 0x1, 0x6, 0x8001, 0x8, 0x3, 0x4, 0x1, 0x6, 0x8, 0x40, 0x10001, 0x9, 0x4, 0xcb, 0xcd, 0xbb3, 0xff90, 0xe3, 0x1, 0x7839, 0x2, 0x101, 0x3, 0xab7, 0x2, 0x6, 0x2, 0xc00, 0x2800000, 0x4, 0x4, 0x3, 0x100, 0x2, 0xffffffff, 0x3, 0x8, 0x44, 0x7, 0x7ff, 0xe, 0x5, 0x3, 0x4, 0x40, 0xff, 0x7, 0x6, 0x2, 0x8, 0xdfc, 0xfffffff7, 0x1f7, 0xe, 0x800, 0xbd, 0xfffffff8, 0x0, 0x80000001, 0x5, 0xfffffffc, 0x5, 0x4, 0x7, 0x6, 0x3, 0x200, 0x0, 0xffffffff, 0x0, 0x4a5, 0x9, 0x1, 0xfffffffe, 0x7, 0x9, 0xa, 0x8a74, 0x3ff, 0x579171c8, 0x7, 0x8, 0xd957, 0xf, 0xb, 0xba53, 0x7, 0xffff, 0x4, 0x634, 0x6, 0x4, 0x400, 0x6, 0x5, 0x3, 0xfff, 0x5, 0x5, 0x2, 0x101, 0x5, 0x5, 0xc048, 0x101, 0x1, 0x1, 0x4, 0x6, 0xffffffff]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}, @m_skbedit={0x7c, 0x17, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x8, 0x3, 0x8, 0x3}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0x9, 0x4, 0x1, 0x4eae}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd}]}, {0x7, 0x6, '\x00\x00\x00'}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x54c}}, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000004184000a0000010900010073797a31000000002400048020"], 0x80}, 0x1, 0x0, 0x0, 0x4008011}, 0x24000000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000027000100fdff0700001000000e0000000a5f36e9aac7e950cad64eb8b28e89e6d33ce84c8271"], 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x4008090) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffecd, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="d28862ada3b2bc3c67db1f7b2af590c70b5289838f26fbc14c9e74a44c93caccbd6fa185f5908dae6323ec20a494935438cfed2fb3528b81160986e5cc7fb52d131ce77fac38b9e412207bf8f4f09ee12f13eeb80e4fd67b531e1424c77230a22dc4916b399b59086f9e44a2c0cb054adab20c54bfb120f9ee3e542d2ea9acf3edfa", @ANYBLOB="6c7e0a759f08b6f6528663a0a358c7d7a3b3c8e96004d24a4a55f14175dc699b9cd7fe25426c37b77681c6398c94c3bd2342b4703b487c12d3555b5b42c5759ed032083afb18bdddd171d0bcdbfe47508afb1bbc37d174982f63adcf75400f24e7f2f61354c8b2de90ee2772a8dd0973096a98962a92700581adf08e46cce7a82a328530ec5841c553b8f3241bebe6cf3b1dc9e9ae91a67b4e44"], 0x120}, 0x1, 0x0, 0x0, 0x4c804}, 0xc000) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="88a413000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 16.628245138s ago: executing program 5 (id=8055): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 16.377057353s ago: executing program 5 (id=8060): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0000ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x16) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000f8ff0000000015"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x36c87000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x14, 0x0, &(0x7f0000000740)="f6f4e9a1d78ad62ceef112b9a7a5335a079fb7db", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x4c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000001200500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f00000003c0)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000380), &(0x7f0000000480)=r3}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {0xffff}, {0x2}, {0x10, 0x4}}}, 0x24}}, 0x20000804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 16.081901761s ago: executing program 5 (id=8065): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x8000) close(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xb0, 0x1403, 0x10, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x401, 0x0, 0x0, {{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@local, 0x1234, 0x33}, @in6=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x5c, 0x1, {{'sha1\x00'}, 0x80, 0x60, "00112233445566778899aabbccddeeff"}}]}, 0x14c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd611cc82500303c01fe80000000000000000000000000000bfe8000000000000000000000000000aa2c04000000000000c910fec000000000000000000000000000aa"], 0x0) 3.874783076s ago: executing program 7 (id=8142): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a0104"], 0xcc}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x8c1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000060900010073797a30000200000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000030900010073797a3000000000140000001100010000000000000000581576f430e4487e7c2ea81f70000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) (async) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8fd00000000bfa100000000000007010000faffffffb702000008000000b70300000280007f720000000000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) (async) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x2000c09c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) (async) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x8, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xbd0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x8, 0x2000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xbd0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bb"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 3.218391948s ago: executing program 6 (id=8149): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast2, 0xb}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)="66c382", 0x3}], 0x1}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000274b7468305f746f5f627269c846f725000000000000000005"], 0x34}}, 0x4044890) r8 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x6a, 0x3, 0x4000, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r9, 0x7}, 0x8) 2.963351102s ago: executing program 6 (id=8151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, 0x28}}, 0x20000001) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3dc, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5a9ade6d}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4528d2fbe0fe5e2ed111d0a0437cc5bb9000c0aad7b254d9775759cc07"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "306d8f082ba37af1e7ce3dad4b0be897a65549385bb93be0c1828331e06ab1c7f849ed3dca4836baa47d3af1045aa023967b06e094c7d7bbca645fb945cdd51bf39a8ca134e7cc79c71d809d8ffdd6c4dbf2abe3f1cbc4dcc07525a61c6cbaa63101149faed46a892ee83bf7ab9f818f7fd0d4ab8d5b2828c94d314831f39b29bb1749181b3bc36907e88812269b983383c587755de1c6589725e3187d5c167bf1cdfce6ac3588a282a7e3e9b69a704dda1b5fc59b30299a15869529271d814d79d96c7204960cb40495ad39f44f76f160b0e4d9b790da4bd4219448624d600aa1133b0cd8d7852f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "043f738d3b1e93fe0326bb54ad4d7f3f2d27e89de8f6d0fd82c809156e95af"}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x118, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f66}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb36}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x625049}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x780}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x3dc}}, 0x4008880) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0xa20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000d40)={{r1, &(0x7f0000000a40)='ib\x00', 0x200, &(0x7f0000000a80)={@_ha_fsid={[0x80000000, 0x34]}, {0xc, 0x3, 0x100, 0x8}}, 0x7, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0x5}, 0x2, &(0x7f0000000d00)=[{0x1, 0x400, &(0x7f0000000b40)='nl80211\x00', &(0x7f0000000b80)="e9d9c937011ec5422b9e647fddd04d3af5e3d225120d7a4b9c89ac19abb1a24e657f41df4a728b3f9be6335a2cc65dcb0c333a9d830d8d88f5cee2c3eec0809b860eebeebd28afcf19f99a686da5f03fbbe3c8571e016230287ab5cdf9ec316cbea65569383dfd33ae4a722c5c60f9e7220154de7431e74bae6cde11783416e90c555e2f7d240b770ac07e8dcd14c8b8e3cb6f922577cfe910dd33b4644092baac7cc098b63f53f67358df98faa07e5451a46dfd94261431fa38b14208a3cb080222351831b6dd1cb5c0edaa6672382cdcf883", 0xd3}, {0x3, 0x47ad, &(0x7f0000000c80)='wlan0\x00', &(0x7f0000000cc0)="f0200daa6eee2db0a69e47fba2723594a918", 0x12, 0x10}]}) setsockopt$inet_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000dc0)=@gcm_128={{}, "38340a6dda656d07", "bdd7f444975c1ab6bd0fb9d27d2ec91c", "225c8e93", "a2c0fd0cb60cc946"}, 0x28) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff3e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xae}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008811}, 0x20000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000f40)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000001000)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000001040)={r9}, 0x8) nanosleep(&(0x7f0000001080), &(0x7f00000010c0)) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff64ed}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xf8, r10, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000054) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001440)={r9, @in6={{0xa, 0x4e22, 0xc9c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x88, 0x2}, &(0x7f0000001500)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000001540)={r11, @in={{0x2, 0x4e23, @multicast2}}, 0x3, 0xc6a}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r12, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff54}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x2004c844}, 0x20048080) 2.391593386s ago: executing program 6 (id=8156): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r4, 0x913e0000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r3}, 0x18) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x8, 0xc, 0x40002}, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0xa0000017}) accept4$bt_l2cap(r1, &(0x7f0000000080), &(0x7f0000000100)=0xe, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r7, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)=';', 0x1}], 0x1, 0x0) r8 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r8, 0x0, 0x8000, 0x0) 2.264411771s ago: executing program 7 (id=8157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0xc0, 0xc, 0x7, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x80, 0x10, 0x12, 0xb25}}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x110, r0, 0xc04ec000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x10}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}}]}]}, 0x78}}, 0x24000040) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48090}, 0x1) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0xfffffffffffffd63, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.952573932s ago: executing program 7 (id=8161): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580115bdcd, 0x10010, r8, 0xba650000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000000)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1700}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94) 1.950877359s ago: executing program 4 (id=8162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0xff96, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x22020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x10000, @value=r2}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000a00000025000100070041414141414141414141414141414141414141414141414141414141414100000000dea4f6f0979ceb3545b1815c414739f9e6ef02f9938f1d5de3bf90d94fdf6e9ed7ddb9089ea38e8eb45fadd03aee59881972b687e5f6d1ee60d47f26ecadc8a63daf0aa24596737934214ef356df4380110e2211c286d7b556cd7e755e61fead2e813fee838cb765e765ba5e79c12ef7b9b1ce00d69b504cc8fab7e1b37159535b1dec86cef32a7dde7daf3a9ef638b78c0ca138cff3388e9dbf336599416c39f84254b3472a40c3b1d0243e4a16649ff6bab99af351c5fb6f0d965d"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x4, 0x8, 0xbc1, 0x100000001, 0x4, 0xffffffffffffffff}, {0x1, 0x800, 0x7fffffff, 0x4, 0x6, 0x1}], ['\x00', '\x00']}) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f00000003c0)) r4 = socket(0x23, 0x2, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000001480)) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xb, 0x6, 0x0, 0x0, @str='^/!,{(\x00'}]}, @nested={0x4, 0x2}, @nested={0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000003b00010000000000000000000a00000025000100412d41414141414141414141414161414141414141414141414141414141414100000000"], 0x3c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe7, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x18, 0x3b, 0x1, 0x0, 0x25dfdbfc, {0x8a}, [@typed={0x4, 0xb8}]}, 0x18}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="92c5dab1bf0412880402a75615e84107c26a018f6cfbe131dcce1b2b9ef6f49e6c1d45aabbb5f2affc3e044fcbaa138a1e582694fec6154fdc31d624024f9b369edd3213b574d98b7de2f4ced832715d70d7537e26383865c57c1e35d15c62c617c1e056b5628170dc93fb4df2723ef95caf03f66aff181feaf8b18b581780c46ffedd1f780288d2900eaffa0b6a94b34d3781f72f46fbebc1c4e5470e74bb9ec8909872e09881e0741c3ec0e9f01078458c6f355e21c1ea6fc0b9a6fe8b", 0xbe) 1.645792913s ago: executing program 2 (id=8164): unshare(0x400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x29) 1.576760575s ago: executing program 4 (id=8165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@report={0x9c, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x33, {@in=@local, @in6=@empty, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0xb0, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) syz_emit_ethernet(0x9a, &(0x7f0000000a40)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x19, 0x8c, 0x64, 0x0, 0xcc, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0x68}, @timestamp={0x44, 0x10, 0x9, 0x0, 0xa, [0x2, 0x33, 0x7c2c]}]}}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "72e3524000", "4b4450edff621723f951130e8fff0ee8", {"ffad4543128a133d1adfb08281433146", "1c5100fffeffffffffffe900"}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@report={0x9c, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x33, {@in=@local, @in6=@empty, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0xb0, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) (async) syz_emit_ethernet(0x9a, &(0x7f0000000a40)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x19, 0x8c, 0x64, 0x0, 0xcc, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x3, 0x68}, @timestamp={0x44, 0x10, 0x9, 0x0, 0xa, [0x2, 0x33, 0x7c2c]}]}}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "72e3524000", "4b4450edff621723f951130e8fff0ee8", {"ffad4543128a133d1adfb08281433146", "1c5100fffeffffffffffe900"}}}}}}}, 0x0) (async) 1.416959901s ago: executing program 4 (id=8166): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xe}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xe}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001080)={0xb80, 0x2ad, 0x0, 0x9, 0x8, 0x5c8, 0x81, 0x5, r2}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001080)={0xb80, 0x2ad, 0x0, 0x9, 0x8, 0x5c8, 0x81, 0x5, r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0920000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0920000000000055090100000000009500000000000000ad0a060000000000b500ffffdf070ae91801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010800000000000000000300000014000780080011400000003d05001500010000000500010006000000050005000200000005000400010000000900020073797a320000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, r4, 0x761, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000001080), 0x0, 0x80c8) syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r5) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), r5) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x28, r7, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x24040000) r8 = socket$inet6(0xa, 0x805, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) getsockopt$bt_hci(r8, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) 1.399390427s ago: executing program 2 (id=8167): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0xe8ff}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1700}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94) 1.396647598s ago: executing program 6 (id=8168): unshare(0x2a020400) r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0xe, 0xfffffffffffffff3) sendto$inet6(r0, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000000824000180090001006d61737100000000140002800800024000000015080002400000000114000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9dffa888d226000024001280090001007866726d000000001400022598ef80080001000300000005000000000000000a000100aaaaaaaaaa2b0000"], 0x50}}, 0xc080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180"], 0x54}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) 1.172037669s ago: executing program 2 (id=8169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x5, 0x14, 0x0, &(0x7f0000000940)="66d4492a0a1b30e6f5d85a6d99e5caab518d1693", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 1.169861392s ago: executing program 7 (id=8170): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x24, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x8, 0x126, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x448, 0x2c, 0xf3f, 0x30bd29, 0x24dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {}, {0xffff, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x418, 0x2, [@TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x228, 0x7, 0x4f84, 0x0, 0x0, 0x2, 0x9, 0x7, 0x4, 0x0, 0x8, 0x0, 0x7fffffff, 0x0, 0x6, 0x100, 0x1, 0x9, 0x80000000, 0x8, 0x2, 0x4dba, 0x5, 0x3, 0x9, 0x0, 0x6, 0xf, 0xfffffffd, 0x6, 0x4, 0xf0, 0x8, 0xffffffff, 0x655c, 0x8, 0x6, 0x3a, 0x337, 0x3, 0x0, 0xfffff801, 0x4, 0x5, 0x0, 0x7ff, 0x100, 0x7fff, 0x0, 0x8, 0x401, 0x0, 0x3, 0xfaa, 0x5, 0x101, 0x5, 0xd2, 0x5, 0x7fffffff, 0x40, 0x6, 0x1, 0xffffffff, 0x0, 0xffffffff, 0xd5, 0x1, 0x7, 0xf, 0x9, 0x7, 0x0, 0xffff, 0x3ce, 0xe00000, 0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x7, 0x8, 0x8, 0x29d7b442, 0x2, 0x7ff, 0x4, 0xb, 0xe, 0x7f, 0x78, 0x6, 0x8, 0x3, 0x5, 0x8, 0x6, 0x0, 0x4, 0x2167, 0xfffffff7, 0x2, 0x2, 0x6, 0x0, 0x5, 0x9, 0x9, 0x7, 0x3, 0x80, 0x7, 0x800, 0x1, 0x81, 0x800, 0x86, 0x6, 0x400, 0x6, 0x8, 0x5, 0x3, 0x6, 0xfffffeff, 0x7, 0xb8, 0xbfbf, 0x2, 0x7, 0x0, 0xaec, 0xffffffff, 0x5, 0x6, 0x7, 0x3, 0x3, 0x1ff, 0x0, 0x3, 0xffffff80, 0xfffffff8, 0x6a, 0x4, 0x9, 0x212, 0xbb79, 0x7285, 0x6, 0x7, 0xffffffff, 0x401, 0x5, 0xffffffff, 0x2, 0xbbf, 0x60, 0xa9c, 0x5, 0x2, 0x80000000, 0x7, 0x2, 0x0, 0x1, 0x2, 0x10, 0x0, 0x1, 0x2, 0x2, 0x5, 0x6b, 0x7, 0x8, 0xcc4cb1b8, 0x10001, 0x8, 0x0, 0x2aa7, 0xc, 0xe1d, 0x0, 0xffffffff, 0x256e, 0x9ef5, 0x9, 0x7, 0x9, 0x0, 0x5, 0x7f, 0xffffff0a, 0x910, 0x3f1, 0x400, 0xffff, 0x9, 0xe04, 0x1, 0x8, 0xd, 0x101, 0x3, 0x655, 0x4, 0x6, 0x2, 0x8, 0x1088, 0x1, 0x0, 0x1, 0x5, 0x0, 0x8000, 0xbe7, 0x5, 0x7, 0x2, 0x1, 0x4f, 0x7ff, 0x6, 0x4, 0x10, 0x7f, 0x1, 0x0, 0x804, 0x55b, 0x2, 0x1, 0x7, 0x80000001, 0x4, 0x7fffffff, 0x81, 0x2b, 0xffffffff, 0xff, 0x7, 0x4, 0x9, 0x8b3, 0x0, 0x1ff, 0x1, 0xbf, 0x7fff, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x20041810}, 0x0) 992.682927ms ago: executing program 7 (id=8171): syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_map={0x0, 0x114, 0x3, {{&(0x7f0000000080)=""/88}, &(0x7f0000000140), 0x7}}], 0x48}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003ec0)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000300)="9718d0d3e2", 0x5}], 0x1}}], 0x1, 0x20000010) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) accept4(r1, &(0x7f0000000340)=@nl=@proc, &(0x7f00000003c0)=0x80, 0x800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="fbffffff00"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="a2aaad3e0f049e0d019fd37b4c4925000000000000f4000000000000"], 0x50) 883.988856ms ago: executing program 4 (id=8172): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f0000000280)) openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 874.138881ms ago: executing program 6 (id=8173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000007}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0xd00, 0xc5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0xdca6bfcc9a561e2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 812.754173ms ago: executing program 2 (id=8174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000280)=0x637, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000680)='4', 0x1}], 0x1}, 0x11) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x80000) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r6, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r3], 0x68}}, 0x0) 575.828684ms ago: executing program 4 (id=8175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf2531000000050033000800000005003300a70000000500350008000000050033000c0000000500330001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20090011) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x8c}}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fedbdf2531000000050033000800000005003300a70000000500350008000000050033000c0000000500330001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20090011) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x37}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}, @CTA_TIMEOUT={0x8}]}, 0x8c}}, 0x4000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) 539.982174ms ago: executing program 6 (id=8176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_EMATCHES={0x4c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x3, 0x0, 0x0, {{0xfffd, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1fde, 0x3, 0x5}, {0x6, 0x2, 0x2}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000045}, 0x2008c014) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'tunl0\x00', 0x100}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f0000000400)="00050090b4", 0x5}, {&(0x7f0000000340)="237f7c", 0x3}], 0x4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x62400408}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040001) 474.470373ms ago: executing program 5 (id=8066): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d0a0000000c000000010000000f0000000100000004000000030000000700000000000000000053dad87ec79ac4b3e4f828ca704540eefe4f224b065729b0122997be5b501ae83694aa6759303b3d62b685919e4e2922c2ae3353b0bf9aaf667b98e1a51a19"], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8}, 0x28) socket(0xa, 0x1, 0x0) (async) r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x75ddbfdedb4202d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="c9f7b98600fc0400000000000019", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x6, @empty, 0x2}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @local}, {0x2, 0x8000, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0xfff9, &(0x7f0000000180)='pim6reg0\x00', 0x2, 0x5, 0x34c7}) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @local}, {0x2, 0x8000, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0xfff9, &(0x7f0000000180)='pim6reg0\x00', 0x2, 0x5, 0x34c7}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6d, @ipv4={'\x00', '\xff\xff', @empty}, 0x1fd}, 0x1c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 348.729361ms ago: executing program 2 (id=8177): unshare(0x400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x29, 0x1, 0x0, 0x29) 287.029291ms ago: executing program 5 (id=8178): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0ff70ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 265.786771ms ago: executing program 2 (id=8179): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4b3f7633015aff9fa5e73369ed3ed4f938752184f1af2029", "14ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f51148dba1a"}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580115bdcd, 0x10010, r8, 0xba650000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000000)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1700}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='GPL\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x40f00, 0x28}, 0x94) 184.488191ms ago: executing program 4 (id=8180): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = socket$kcm(0x2, 0x5, 0x84) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000)=r3, 0x62) (async, rerun: 32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) (rerun: 32) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x1}, 0x14}}, 0x0) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400a004) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1e, 0x80000000, @loopback, 0x6}, 0x1c) (async) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 18.41856ms ago: executing program 5 (id=8181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="01154e00010000112233445588fbca010001160c", 0x36, 0x44011, &(0x7f0000000040)={0x11, 0xd, r3, 0x0, 0x0, 0x0}, 0x14) close(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002080)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002040)={&(0x7f0000000e40)={0x11d4, 0x0, 0xf3a, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x114c, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @local, 0xf5b}}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4100, @mcast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @mcast2, 0x8001}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x35c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @loopback, 0x400}}, @WGPEER_A_ALLOWEDIPS={0x2bc, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8060}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x22c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1f0, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1d0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc094668c90fe1ff76065ac36f0abeac50b3eeb97216d3667de95139b2141935"}, @WGPEER_A_ALLOWEDIPS={0x150, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xda3a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}]}, {0x288, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}]}, {0x5d4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_ALLOWEDIPS={0x5b4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a41909c4cbebbf4bbd9f9918942150cd9a2550daa158fafc13f1e1c6c5db142b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1db842c1998fabac68367a64cff3aeb3ab5383238720f597d36197847580906d"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}]}, 0x11d4}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r8, 0x400454c8, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="66f30410159be256c5f84e8a597c776dbe5809827613d0e3282516d71ac367cf9b6a0161c05264dea32f2daa0e90791bc006a2b8914b8c6549da69407325cf9aaaea7fdb7660f892bbaa922d5e2a41c72aa438c4", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x300, 0x70ad2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0x3, 0xb}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54814}, 0x5) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 7 (id=8182): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffc21, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x3ff, 0x0, 0x0, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bf6fea9}, {0x3}, {0x4}, 0x70bd29, 0x0, 0x2, 0x4}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) close(r0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000005c63e06e700b4af90dd7fb0000000000a7cc9b7e7845b0cc9d26470000000000"], &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r4, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x8, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/19, 0x13}, 0x3}], 0x1, 0x40000083, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00fe0186f6f0bb8c75fb737c6dd9c078fafee1e91bf64479cdc62144f4c12519d812d157a5767f7625840d868f0707487c4f65264a1ae68c5bb8c45e089aeaa8435629ef05f17a1ec9f36f25fd23c756c4820ec50a25eda83096bb9af2bc34207d23c3532be3d28f83a5189d9fe696cb2e8f0ca1489d253e1c2320d61cfe52d0a3beb4815d751b44", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffbfb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r8}, 0xc) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x54, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20aa14261c0233d2619118b287b194920473017087889d5685590e926dba4953"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000006bc0)=[{{&(0x7f00000007c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/78, 0x4e}, {0x0}, {&(0x7f0000000980)=""/137, 0x89}], 0x3, &(0x7f0000002ec0)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000004200)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004280)=""/36, 0x24}], 0x1, &(0x7f0000004300)=""/229, 0xe5}, 0x3}, {{&(0x7f0000004400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004480)}, 0x1}, {{&(0x7f0000004500)=@isdn, 0x80, &(0x7f0000006940)=[{&(0x7f0000004580)=""/219, 0xdb}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/29, 0x1d}, {&(0x7f00000056c0)=""/229, 0xe5}, {&(0x7f00000057c0)=""/64, 0x40}, {&(0x7f0000005800)=""/186, 0xba}, {&(0x7f00000058c0)=""/59, 0x3b}, {&(0x7f0000005900)=""/4096, 0x1000}, {&(0x7f0000006900)=""/39, 0x27}], 0x9, &(0x7f0000006a00)=""/126, 0x7e}, 0x1}, {{&(0x7f0000006a80)=@generic, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006b00)=""/37, 0x25}], 0x1}, 0x40}], 0x5, 0x40010080, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x40, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) kernel console output (not intermixed with test programs): slave geneve2): making interface the new active one [ 892.369237][T31007] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 893.008740][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6755'. [ 893.160481][T30925] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.160665][T30925] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.160797][T30925] bridge_slave_0: entered allmulticast mode [ 893.162827][T30925] bridge_slave_0: entered promiscuous mode [ 893.171079][T30925] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.171278][T30925] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.171641][T30925] bridge_slave_1: entered allmulticast mode [ 893.179561][T30925] bridge_slave_1: entered promiscuous mode [ 893.243030][T31051] tipc: Started in network mode [ 893.243053][T31051] tipc: Node identity , cluster identity 4711 [ 893.243070][T31051] tipc: Failed to obtain node identity [ 893.243099][T31051] tipc: Enabling of bearer rejected, failed to enable media [ 894.375347][T31058] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 895.882039][T30925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.900764][T30925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.006680][T31061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6760'. [ 896.022914][T31061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6760'. [ 896.075168][T30925] team0: Port device team_slave_0 added [ 896.099791][T30925] team0: Port device team_slave_1 added [ 896.139570][T30925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.139588][T30925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.139617][T30925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.141567][T30925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.141582][T30925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.141610][T30925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.320024][T30925] hsr_slave_0: entered promiscuous mode [ 896.321027][T30925] hsr_slave_1: entered promiscuous mode [ 896.321787][T30925] debugfs: 'hsr0' already exists in 'hsr' [ 896.321808][T30925] Cannot create hsr debugfs directory [ 896.584629][T31084] netlink: 'syz.2.6765': attribute type 4 has an invalid length. [ 896.731082][T31094] pimreg: tun_chr_ioctl cmd 1074025681 [ 896.909904][T31096] tc_dump_action: action bad kind [ 896.924331][T31095] tipc: Started in network mode [ 896.924348][T31095] tipc: Node identity , cluster identity 4711 [ 896.924364][T31095] tipc: Failed to obtain node identity [ 896.924389][T31095] tipc: Enabling of bearer rejected, failed to enable media [ 897.480005][T31110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6770'. [ 897.512196][T31110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6770'. [ 898.138976][T31112] openvswitch: netlink: IP tunnel dst address not specified [ 900.081989][T30925] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 900.103776][T30925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 900.104592][T30925] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 900.130164][T30925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 900.134144][T30925] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 900.154492][T30925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 900.155390][T30925] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 900.186653][T30925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 900.219979][T31122] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6774'. [ 900.220000][T31122] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 900.298634][T31135] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6776'. [ 900.298657][T31135] NCSI netlink: No device for ifindex 0 [ 900.300993][T31133] ip6gretap1: entered allmulticast mode [ 900.306071][T31133] batman_adv: batadv0: Adding interface: ip6gretap1 [ 900.306090][T31133] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 900.306126][T31133] batman_adv: batadv0: Interface activated: ip6gretap1 [ 900.371035][T31136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6776'. [ 900.484563][T30925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.530439][T30925] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.556433][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.556528][T11690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.579932][T11690] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.580031][T11690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.625147][T31145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6778'. [ 900.625171][T31145] netlink: 580 bytes leftover after parsing attributes in process `syz.5.6778'. [ 900.716045][T30925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.202878][T31168] tipc: Enabled bearer , priority 0 [ 901.219298][T31160] tipc: Resetting bearer [ 902.964500][ T52] Bluetooth: hci2: command 0x040f tx timeout [ 903.118407][T31166] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 903.591820][T31160] tipc: Disabling bearer [ 903.878992][T31185] ip_tables: iptables: counters copy to user failed while replacing table [ 904.163407][T30925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.536527][T31221] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 904.591501][T31221] bond2 (unregistering): Released all slaves [ 904.612650][T31223] batman_adv: batadv0: Adding interface: veth0 [ 904.612676][T31223] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.612816][T31223] batman_adv: batadv0: Interface activated: veth0 [ 904.691391][T30925] veth0_vlan: entered promiscuous mode [ 904.708179][T30925] veth1_vlan: entered promiscuous mode [ 904.754594][T30925] veth0_macvtap: entered promiscuous mode [ 904.764493][T30925] veth1_macvtap: entered promiscuous mode [ 904.807899][T30925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.826330][T30925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.899271][T11693] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.911601][T21423] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.911726][T21423] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.927926][T21423] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.782351][T31184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 908.556692][T31237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 908.588038][T31244] netlink: 'syz.1.6800': attribute type 3 has an invalid length. [ 908.588260][T31244] netlink: 'syz.1.6800': attribute type 3 has an invalid length. [ 908.595683][T31235] geneve0: entered promiscuous mode [ 908.621428][T31235] batman_adv: batadv0: Adding interface: macvlan2 [ 908.621440][T31235] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.621461][T31235] batman_adv: batadv0: Interface activated: macvlan2 [ 908.661911][T11698] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.662010][T11698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.705775][T21423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.705797][T21423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.762210][ T31] audit: type=1804 audit(1790204208.914:24): pid=31258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6803" name="/newroot/326/cgroup.controllers" dev="tmpfs" ino=1686 res=1 errno=0 [ 908.792375][ T31] audit: type=1800 audit(1790204208.934:25): pid=31258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6803" name="cgroup.controllers" dev="tmpfs" ino=1686 res=0 errno=0 [ 908.845527][T31258] No such timeout policy "syz0" [ 908.925760][T11692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.925784][T11692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.304866][T31272] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 909.883215][T31296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6812'. [ 909.883253][T31296] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6812'. [ 909.911791][T31297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6811'. [ 909.913464][T31296] geneve3: entered promiscuous mode [ 909.913484][T31296] geneve3: entered allmulticast mode [ 909.914988][T25309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.915027][T25309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.927517][T11692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.931259][T21423] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.218279][T31301] xt_CT: No such helper "snmp" [ 910.312876][T31305] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 910.342718][T31306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6815'. [ 910.582390][T31315] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 911.224837][T25309] pim6reg: left allmulticast mode [ 911.224965][T25309] pim6reg99999999: left allmulticast mode [ 911.243178][T31349] netlink: 'syz.4.6827': attribute type 26 has an invalid length. [ 911.455318][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 912.456619][T25309] bond0 (unregistering): Released all slaves [ 912.470108][T25309] bond1 (unregistering): Released all slaves [ 912.485390][T25309] bond2 (unregistering): Released all slaves [ 912.503230][T25309] bond3 (unregistering): Released all slaves [ 912.522490][T25309] bond4 (unregistering): Released all slaves [ 912.536844][T25309] bond5 (unregistering): Released all slaves [ 912.565681][T31344] ip6erspan0: entered allmulticast mode [ 912.584704][T31355] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 912.596552][T31364] bridge0: port 3(netdevsim0) entered blocking state [ 912.614356][T31364] bridge0: port 3(netdevsim0) entered disabled state [ 912.614516][T31364] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 912.679508][T31364] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 912.697006][T31364] bridge0: port 3(netdevsim0) entered blocking state [ 912.697101][T31364] bridge0: port 3(netdevsim0) entered forwarding state [ 912.893715][T25309] ´: left promiscuous mode [ 913.000353][T31380] gre0: entered promiscuous mode [ 913.000381][T31380] gre0: entered allmulticast mode [ 913.032415][T31380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6834'. [ 913.042074][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 913.043262][T25309] ovs-s!!: left promiscuous mode [ 913.148973][T25309] tipc: Disabling bearer [ 913.149094][T25309] tipc: Disabling bearer [ 913.149592][T25309] tipc: Left network mode [ 913.439071][T25309] IPVS: stopping master sync thread 19029 ... [ 913.463771][T31391] netlink: 'syz.4.6837': attribute type 11 has an invalid length. [ 913.523395][T31392] netlink: 'syz.4.6837': attribute type 2 has an invalid length. [ 913.545524][T27550] Bluetooth: hci3: command 0x041b tx timeout [ 913.569956][T31393] netlink: 'syz.4.6837': attribute type 2 has an invalid length. [ 913.783563][T31397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6838'. [ 913.865944][T31398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6838'. [ 913.910336][T31397] ip6gre1: entered promiscuous mode [ 913.910360][T31397] ip6gre1: entered allmulticast mode [ 913.963469][T31397] sit0: left promiscuous mode [ 913.995241][T31397] geneve2: left promiscuous mode [ 914.005015][T31397] ip6tnl1: left promiscuous mode [ 914.040293][T31397] vlan2: left allmulticast mode [ 914.040308][T31397] bridge5: left allmulticast mode [ 914.075444][T31397] hsr1: left promiscuous mode [ 914.093464][T31397] geneve3: left promiscuous mode [ 914.093486][T31397] geneve3: left allmulticast mode [ 914.096924][T31397] ip6erspan0: left allmulticast mode [ 914.116180][T31397] ip6gre1: left promiscuous mode [ 914.116200][T31397] ip6gre1: left allmulticast mode [ 914.133102][T31400] syzkaller0: entered promiscuous mode [ 914.133124][T31400] syzkaller0: entered allmulticast mode [ 914.176549][T21423] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.278186][T11690] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.279102][T11690] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.279144][T11690] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.442834][T25309] veth1_macvtap: left promiscuous mode [ 914.442861][T25309] veth0_macvtap: left promiscuous mode [ 914.442937][T25309] veth1_vlan: left promiscuous mode [ 914.442979][T25309] veth0_vlan: left promiscuous mode [ 914.764453][T31393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.320011][T31423] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 915.338835][T31424] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 915.603180][T27550] Bluetooth: hci3: command 0x041b tx timeout [ 917.682125][T27550] Bluetooth: hci3: command 0x041b tx timeout [ 918.281603][T25309] IPVS: stop unused estimator thread 0... [ 918.317381][T27550] Bluetooth: hci4: command 0x0405 tx timeout [ 918.550093][T31464] IPVS: Error connecting to the multicast addr [ 918.644402][T31469] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6854'. [ 918.695516][T31469] ip6gre0: entered promiscuous mode [ 919.032011][T31476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6857'. [ 919.246441][T31483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6856'. [ 919.383198][T31473] xt_IDLETIMER: label is empty or not nul-terminated [ 919.474086][T28860] block nbd64: NBD_DISCONNECT [ 919.495315][T31490] netlink: 'syz.4.6859': attribute type 12 has an invalid length. [ 919.495338][T31490] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6859'. [ 919.759429][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 919.785393][T29128] udevd[29128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 921.364800][T11693] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 922.055116][T31492] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 922.285092][T31511] netlink: 'syz.5.6865': attribute type 1 has an invalid length. [ 922.339976][T27550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 922.354846][T27550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 922.366037][T27550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 922.367458][T27550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 922.384928][T27550] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 922.678484][T31517] bridge12: entered promiscuous mode [ 922.693224][T31536] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6869'. [ 922.710136][T31517] bond6: (slave bridge12): making interface the new active one [ 922.710856][T31517] bond6: (slave bridge12): Enslaving as an active interface with an up link [ 922.755656][T31521] bridge13: entered promiscuous mode [ 922.770288][T31521] bond6: (slave bridge13): Enslaving as a backup interface with an up link [ 923.077461][T31515] wg2 speed is unknown, defaulting to 1000 [ 923.104745][T31553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6870'. [ 923.544379][T31515] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.544538][T31515] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.544660][T31515] bridge_slave_0: entered allmulticast mode [ 923.546356][T31515] bridge_slave_0: entered promiscuous mode [ 923.582800][T31515] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.583034][T31515] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.583173][T31515] bridge_slave_1: entered allmulticast mode [ 923.585046][T31515] bridge_slave_1: entered promiscuous mode [ 923.646879][T31515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.661041][T31515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 923.704749][T31515] team0: Port device team_slave_0 added [ 923.715624][T31515] team0: Port device team_slave_1 added [ 923.759433][T31515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.759463][T31515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.759488][T31515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.761447][T31515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.761463][T31515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.761492][T31515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.899141][T31515] hsr_slave_0: entered promiscuous mode [ 923.899981][T31515] hsr_slave_1: entered promiscuous mode [ 923.900624][T31515] debugfs: 'hsr0' already exists in 'hsr' [ 923.900646][T31515] Cannot create hsr debugfs directory [ 925.237265][T31511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 925.483026][T31575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6878'. [ 927.141511][T31515] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 927.145504][T31515] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 927.172385][T31515] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 927.194795][T31515] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 927.210203][T31515] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 927.216741][T31515] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.276413][T31515] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 927.298373][T31515] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.427663][T31596] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6881'. [ 927.451255][T31599] x_tables: duplicate entry at hook 1 [ 927.480890][T31596] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 927.573159][T31607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6883'. [ 927.690905][T31610] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6884'. [ 927.778424][T31515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.784712][T31610] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6884'. [ 927.869668][T31515] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.911730][T21423] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.911841][T21423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.964388][T11692] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.964499][T11692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.081607][T31633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6889'. [ 928.644875][T31659] xt_ipcomp: unknown flags 1D [ 928.978001][T31672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 929.013846][T31672] team0: No ports can be present during mode change [ 929.447761][T31688] team0: Port device xfrm0 removed [ 929.448889][T31688] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 929.566416][T31691] team0: Port device xfrm0 added [ 929.808463][T31515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.049591][T31515] veth0_vlan: entered promiscuous mode [ 931.081759][T31515] veth1_vlan: entered promiscuous mode [ 931.218372][T31515] veth0_macvtap: entered promiscuous mode [ 931.246998][T31515] veth1_macvtap: entered promiscuous mode [ 931.354123][T31515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.389681][T31515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.577356][T11645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.577412][T11645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.577452][T11645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.577490][T11645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.011507][T31778] xt_nfacct: accounting object `' does not exist [ 932.131405][T11645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.131430][T11645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.232510][T21423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.232532][T21423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.268358][T31777] netlink: 'syz.5.6918': attribute type 2 has an invalid length. [ 932.521070][T31787] wg2 speed is unknown, defaulting to 1000 [ 932.556089][T31785] netlink: 'syz.2.6920': attribute type 1 has an invalid length. [ 932.661122][T31785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 932.740912][T31794] veth5: entered allmulticast mode [ 933.040584][T31808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6925'. [ 933.161262][T31799] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6924'. [ 933.254383][T31801] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6924'. [ 933.354918][T31806] syzkaller1: entered promiscuous mode [ 933.354942][T31806] syzkaller1: entered allmulticast mode [ 933.672925][T31828] netlink: 3560 bytes leftover after parsing attributes in process `syz.5.6931'. [ 933.992082][T31843] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6936'. [ 934.030153][T31843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6936'. [ 934.086275][T31846] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6937'. [ 934.135448][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.135554][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.135650][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.135753][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.135848][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.135942][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.136033][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.136156][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.136267][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.136384][T31857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 934.395497][T31865] netlink: 'syz.5.6939': attribute type 1 has an invalid length. [ 934.675059][T31865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 934.770746][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6940'. [ 934.771070][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6940'. [ 934.950614][T31884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6942'. [ 935.572114][T31898] Bluetooth: MGMT ver 1.23 [ 935.953342][T31914] x_tables: duplicate underflow at hook 3 [ 935.980606][T31893] syzkaller0: entered promiscuous mode [ 935.980631][T31893] syzkaller0: entered allmulticast mode [ 936.739900][T31947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.740290][T31947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.740649][T31947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.741081][T31947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.741581][T31947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.741985][T31947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 939.141591][T31927] __nla_validate_parse: 2 callbacks suppressed [ 939.141613][T31927] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6950'. [ 939.141696][T31929] lo: entered promiscuous mode [ 939.141860][T31929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 939.202315][T31936] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6951'. [ 939.345085][T31963] gre0: left promiscuous mode [ 939.345111][T31963] gre0: left allmulticast mode [ 939.549815][T31981] netlink: 'syz.7.6963': attribute type 2 has an invalid length. [ 939.549836][T31981] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6963'. [ 939.765242][T31963] bridge0: port 3(netdevsim0) entered disabled state [ 939.765448][T31963] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.766049][T31963] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.273871][T31963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.324884][T31963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.865686][T31971] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 940.902139][T31981] ¿: entered promiscuous mode [ 941.137387][T32006] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6966'. [ 941.345604][T21424] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.345717][T21424] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.345767][T21424] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.345801][T21424] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.461632][T32026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6969'. [ 941.599688][T32033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6969'. [ 941.639582][T32026] veth5: entered allmulticast mode [ 941.754301][T32031] veth5: entered allmulticast mode [ 942.075056][T32043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6970'. [ 942.657264][T32065] syzkaller0: entered promiscuous mode [ 942.657288][T32065] syzkaller0: entered allmulticast mode [ 942.725212][T32065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6977'. [ 942.844935][T32080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6981'. [ 944.346491][T32153] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6989'. [ 944.469234][T32117] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6988'. [ 944.535269][T32160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6991'. [ 944.566603][T32160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6991'. [ 944.575984][T32160] netlink: 'syz.4.6991': attribute type 4 has an invalid length. [ 944.576044][T32160] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6991'. [ 944.619407][ T31] audit: type=1804 audit(1790204244.764:26): pid=32161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6990" name="/newroot/39/cgroup.controllers" dev="tmpfs" ino=216 res=1 errno=0 [ 944.619485][ T31] audit: type=1800 audit(1790204244.764:27): pid=32161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6990" name="cgroup.controllers" dev="tmpfs" ino=216 res=0 errno=0 [ 944.676609][T32160] .`: renamed from bond0 (while UP) [ 944.798818][T32167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6996'. [ 944.870619][T32167] macvtap1: entered promiscuous mode [ 944.870642][T32167] bridge0: entered promiscuous mode [ 944.905095][T32169] geneve0: entered promiscuous mode [ 944.913255][T32169] geneve0: left promiscuous mode [ 944.947797][T32171] lo: left promiscuous mode [ 944.955960][T32171] netlink: 'syz.5.6993': attribute type 30 has an invalid length. [ 945.196018][T32185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7003'. [ 945.196046][T32185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7003'. [ 945.196064][T32185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7003'. [ 945.253747][T32191] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 945.253784][T32191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 945.290303][T21423] IPVS: starting estimator thread 0... [ 945.290520][T32187] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 945.377669][T32192] IPVS: using max 26 ests per chain, 62400 per kthread [ 945.481397][T32205] netlink: 7164 bytes leftover after parsing attributes in process `syz.6.7006'. [ 945.873729][T32213] syzkaller0: entered promiscuous mode [ 945.873756][T32213] syzkaller0: entered allmulticast mode [ 946.324621][ C0] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 948.470800][T32242] vlan5: entered promiscuous mode [ 948.470825][T32242] ip6gretap0: entered promiscuous mode [ 948.853542][T32276] policy can only be matched on NF_INET_PRE_ROUTING [ 948.853558][T32276] unable to load match [ 951.611388][T32312] sctp: [Deprecated]: syz.2.7033 (pid 32312) Use of int in max_burst socket option. [ 951.611388][T32312] Use struct sctp_assoc_value instead [ 951.632363][T32256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.671319][T32299] __nla_validate_parse: 8 callbacks suppressed [ 951.671341][T32299] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7029'. [ 951.673397][T32311] netlink: 'syz.2.7033': attribute type 2 has an invalid length. [ 951.673429][T32311] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7033'. [ 952.066464][T32321] xt_hashlimit: size too large, truncated to 1048576 [ 952.242088][T32327] netlink: 'syz.6.7038': attribute type 1 has an invalid length. [ 952.342236][T32339] veth1_to_bond: entered allmulticast mode [ 952.530134][T32335] veth1_to_bond: left allmulticast mode [ 952.760092][T32362] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 952.763992][T32362] netlink: 'syz.2.7046': attribute type 19 has an invalid length. [ 952.764012][T32362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7046'. [ 952.879708][ T5877] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.880337][ T5877] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.880415][ T5877] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.880551][ T5877] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 952.884581][T32368] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 953.024386][T32371] sctp: [Deprecated]: syz.4.7049 (pid 32371) Use of int in max_burst socket option deprecated. [ 953.024386][T32371] Use struct sctp_assoc_value instead [ 953.775577][T32404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7062'. [ 954.459588][T32427] syzkaller1: entered promiscuous mode [ 954.459616][T32427] syzkaller1: entered allmulticast mode [ 954.695979][T32431] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 954.717339][T27550] Bluetooth: hci6: command 0x041b tx timeout [ 954.882154][T32447] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7077'. [ 954.985532][T32451] netlink: 'syz.7.7081': attribute type 1 has an invalid length. [ 955.066337][T32451] bond1: entered promiscuous mode [ 955.066402][T32451] bond1: entered allmulticast mode [ 955.066792][T32451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 955.105794][T32451] netlink: 'syz.7.7081': attribute type 1 has an invalid length. [ 955.174511][T32466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7082'. [ 955.174549][T32466] netlink: 'syz.2.7082': attribute type 30 has an invalid length. [ 955.210760][T32466] vxlan0: entered promiscuous mode [ 955.210785][T32466] vxlan0: entered allmulticast mode [ 955.226874][T32464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7082'. [ 955.227106][T32464] netlink: 'syz.2.7082': attribute type 30 has an invalid length. [ 955.535857][T32479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.826343][T32464] vxlan0: entered promiscuous mode [ 955.826368][T32464] vxlan0: entered allmulticast mode [ 956.173257][T32494] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7087'. [ 956.210422][T32490] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7087'. [ 956.210451][T32490] nbd: must specify at least one socket [ 956.261387][T32500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 956.352865][T32508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7090'. [ 956.709784][T32527] __nla_validate_parse: 2 callbacks suppressed [ 956.709808][T32527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7094'. [ 956.709826][T32527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7094'. [ 956.798192][T27550] Bluetooth: hci6: command 0x041b tx timeout [ 957.154552][T32538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7098'. [ 957.154587][T32538] netlink: 'syz.6.7098': attribute type 30 has an invalid length. [ 957.205571][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7098'. [ 957.205610][T32539] netlink: 'syz.6.7098': attribute type 30 has an invalid length. [ 958.071133][T32565] netlink: 'syz.5.7103': attribute type 4 has an invalid length. [ 958.071158][T32565] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7103'. [ 958.373241][T32572] netlink: 64587 bytes leftover after parsing attributes in process `syz.5.7104'. [ 958.410498][T32521] batman_adv: batadv0: Interface deactivated: gretap1 [ 958.462611][T32521] batman_adv: batadv0: Interface deactivated: macvlan2 [ 958.578735][T32538] vxlan0: entered promiscuous mode [ 958.578753][T32538] vxlan0: entered allmulticast mode [ 958.600820][T32539] vxlan1: entered promiscuous mode [ 958.600842][T32539] vxlan1: entered allmulticast mode [ 958.649709][T11690] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.649772][T11690] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.649823][T11690] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.649867][T11690] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.649904][T11690] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.649947][T11690] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.649982][T11690] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.650010][T11690] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.650049][T11690] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.650068][T11690] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.650093][T11690] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.650112][T11690] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.878721][T27550] Bluetooth: hci6: command 0x041b tx timeout [ 958.997658][T32591] x_tables: duplicate underflow at hook 1 [ 959.029997][T32592] netlink: 'syz.6.7108': attribute type 2 has an invalid length. [ 959.030017][T32592] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7108'. [ 959.034678][T32591] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7106'. [ 959.046663][T32591] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7106'. [ 959.182655][T32592] sctp: [Deprecated]: syz.6.7108 (pid 32592) Use of int in max_burst socket option. [ 959.182655][T32592] Use struct sctp_assoc_value instead [ 959.544089][T32603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7112'. [ 959.682010][T32628] xt_TCPMSS: Only works on TCP SYN packets [ 960.840770][T32656] bond0: entered promiscuous mode [ 960.841433][T32656] bond0: entered allmulticast mode [ 960.846179][T32656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.957400][T27550] Bluetooth: hci6: command 0x041b tx timeout [ 961.339177][T32689] netlink: 'syz.2.7126': attribute type 11 has an invalid length. [ 961.694037][T32700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 961.786517][T32701] __nla_validate_parse: 9 callbacks suppressed [ 961.786539][T32701] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7130'. [ 961.810197][T32703] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7131'. [ 962.194795][T32719] syzkaller0: entered promiscuous mode [ 962.194820][T32719] syzkaller0: entered allmulticast mode [ 962.355943][T32730] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7136'. [ 962.404037][T32730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7136'. [ 962.563561][T32736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7139'. [ 962.563588][T32736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7139'. [ 962.598198][T32736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7139'. [ 962.598227][T32736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7139'. [ 962.598245][T32736] netlink: 140 bytes leftover after parsing attributes in process `syz.2.7139'. [ 962.598778][T32736] netlink: 'syz.2.7139': attribute type 11 has an invalid length. [ 962.868576][T32745] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7142'. [ 963.038606][T27550] Bluetooth: hci6: command 0x041b tx timeout [ 963.685615][ T324] wg2 speed is unknown, defaulting to 1000 [ 963.723271][ T328] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 963.723340][ C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 963.723460][ T328] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 963.723505][ C1] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 964.351365][ T326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 964.351396][ T326] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 964.372936][ T326] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 964.372961][ T326] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 964.396875][ T326] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 964.396900][ T326] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 964.418950][ T326] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 964.418973][ T326] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 964.451234][ T326] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 964.451258][ T326] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 964.481374][ T326] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 964.481400][ T326] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 966.425273][ T303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 966.809653][ T423] __nla_validate_parse: 36 callbacks suppressed [ 966.809677][ T423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7160'. [ 967.218661][ T451] netlink: 'syz.5.7168': attribute type 2 has an invalid length. [ 967.218683][ T451] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7168'. [ 967.310256][ T453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7169'. [ 967.694794][ T466] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7172'. [ 967.844178][ T471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 968.125951][ T481] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 968.298660][ T493] netlink: 'syz.4.7181': attribute type 2 has an invalid length. [ 968.298682][ T493] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7181'. [ 968.330947][ T496] netlink: 'syz.5.7182': attribute type 9 has an invalid length. [ 968.711994][ T520] 8021q: VLANs not supported on team0 [ 968.735507][ T520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7184'. [ 968.793228][ T522] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7188'. [ 968.989096][ T535] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7190'. [ 968.989152][ T535] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 969.702737][ T559] batman_adv: batadv0: Removing interface: gretap1 [ 969.722068][ T559] batman_adv: batadv0: Removing interface: macvlan2 [ 969.841639][ T566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7198'. [ 970.128867][ T577] netlink: 'syz.2.7200': attribute type 11 has an invalid length. [ 970.133841][ T581] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7203'. [ 970.456182][ T595] netlink: 'syz.7.7210': attribute type 11 has an invalid length. [ 970.505680][ T595] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 970.707681][ T607] IPVS: set_ctl: invalid protocol: 33 172.20.20.31:20003 [ 970.716612][ T607] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20004 [ 971.153632][ T636] netlink: 'syz.4.7224': attribute type 4 has an invalid length. [ 971.250332][ T642] netlink: 'syz.2.7223': attribute type 2 has an invalid length. [ 971.288206][ T642] sctp: [Deprecated]: syz.2.7223 (pid 642) Use of int in max_burst socket option. [ 971.288206][ T642] Use struct sctp_assoc_value instead [ 972.038674][ T679] __nla_validate_parse: 5 callbacks suppressed [ 972.038698][ T679] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7237'. [ 972.038777][ T679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 972.106309][ T679] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7237'. [ 972.106330][ T679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 972.450934][ T697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7241'. [ 972.474789][ T697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7241'. [ 972.475722][ T697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7241'. [ 972.735053][ T703] netlink: 'syz.6.7243': attribute type 2 has an invalid length. [ 973.190056][ T724] netlink: 'syz.5.7250': attribute type 1 has an invalid length. [ 973.267565][ T733] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7252'. [ 973.340691][ T724] bond9: entered promiscuous mode [ 973.341119][ T724] 8021q: adding VLAN 0 to HW filter on device bond9 [ 973.391222][ T729] bond9: (slave bridge14): making interface the new active one [ 973.391245][ T729] bridge14: entered promiscuous mode [ 973.394763][ T729] bond9: (slave bridge14): Enslaving as an active interface with an up link [ 973.504933][ T737] IPVS: Scheduler module ip_vs_sip not found [ 973.521436][ T737] xt_limit: Overflow, try lower: 0/0 [ 973.829583][ T761] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7258'. [ 973.829609][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7258'. [ 973.829627][ T761] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7258'. [ 973.829644][ T761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7258'. [ 973.830353][ T761] openvswitch: netlink: IP tunnel dst address not specified [ 973.888882][ T761] openvswitch: netlink: IP tunnel dst address not specified [ 974.069900][ T772] netlink: 'syz.6.7261': attribute type 6 has an invalid length. [ 974.217601][ T776] veth11: entered allmulticast mode [ 974.365946][ T782] x_tables: duplicate underflow at hook 2 [ 974.389736][ T785] ip_tables: iptables: counters copy to user failed while replacing table [ 974.752717][ T799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 974.812805][ T806] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 974.813235][ T806] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 974.813400][ T806] veth1_virt_wifi: entered allmulticast mode [ 974.840240][ T806] veth1_virt_wifi: left allmulticast mode [ 974.845106][ T806] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 974.845586][ T806] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 974.845751][ T806] veth1_virt_wifi: entered allmulticast mode [ 974.879217][ T806] veth1_virt_wifi: left allmulticast mode [ 975.040301][ T816] veth0: entered promiscuous mode [ 975.795702][ T842] netlink: 'syz.2.7283': attribute type 21 has an invalid length. [ 975.795772][ T842] netlink: 'syz.2.7283': attribute type 6 has an invalid length. [ 976.264810][ T871] sctp: [Deprecated]: syz.2.7291 (pid 871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 976.264810][ T871] Use struct sctp_sack_info instead [ 976.320723][ T874] sctp: [Deprecated]: syz.2.7291 (pid 874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 976.320723][ T874] Use struct sctp_sack_info instead [ 977.350419][ T934] __nla_validate_parse: 20 callbacks suppressed [ 977.350440][ T934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7306'. [ 977.466624][ T940] netlink: 'syz.2.7308': attribute type 2 has an invalid length. [ 977.466647][ T940] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7308'. [ 977.518791][ T940] sctp: [Deprecated]: syz.2.7308 (pid 940) Use of int in max_burst socket option. [ 977.518791][ T940] Use struct sctp_assoc_value instead [ 977.675600][ T955] x_tables: duplicate underflow at hook 3 [ 977.750793][ T955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7310'. [ 978.008768][ T974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7318'. [ 978.061742][ T975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7316'. [ 978.061797][ T975] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7316'. [ 978.438910][ T993] netlink: 'syz.6.7323': attribute type 2 has an invalid length. [ 978.438932][ T993] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7323'. [ 978.484120][ T993] sctp: [Deprecated]: syz.6.7323 (pid 993) Use of int in max_burst socket option. [ 978.484120][ T993] Use struct sctp_assoc_value instead [ 979.121522][ T1031] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7334'. [ 979.124240][ T1029] xt_policy: output policy not valid in PREROUTING and INPUT [ 979.124904][ T1031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7334'. [ 979.428540][ T1054] netlink: 'syz.6.7338': attribute type 2 has an invalid length. [ 979.428566][ T1054] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7338'. [ 979.432631][ T1053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.482515][ T1054] sctp: [Deprecated]: syz.6.7338 (pid 1054) Use of int in max_burst socket option. [ 979.482515][ T1054] Use struct sctp_assoc_value instead [ 980.211057][ T1088] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.312484][ T1109] netlink: 'syz.2.7356': attribute type 1 has an invalid length. [ 980.312503][ T1109] netlink: 'syz.2.7356': attribute type 268 has an invalid length. [ 980.376731][ T1088] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.453970][ T1112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.888039][ T1088] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.245254][ T1088] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 981.245340][ T1088] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 981.250629][ T1088] bridge0: port 3(netdevsim0) entered disabled state [ 981.345349][ T1088] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.383797][ T1134] wg2 speed is unknown, defaulting to 1000 [ 981.532220][ T1161] netlink: 'syz.5.7366': attribute type 1 has an invalid length. [ 981.796766][ T1164] gretap1: entered allmulticast mode [ 981.813351][ T1164] bond10: (slave gretap1): making interface the new active one [ 981.814110][ T1164] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 981.877846][T11696] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.078060][T11658] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.088826][T11690] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.091089][T11690] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.198848][ T1182] netlink: 'syz.6.7370': attribute type 2 has an invalid length. [ 982.215734][ T1182] sctp: [Deprecated]: syz.6.7370 (pid 1182) Use of int in max_burst socket option. [ 982.215734][ T1182] Use struct sctp_assoc_value instead [ 982.365686][ T1186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 982.594751][ T1192] __nla_validate_parse: 6 callbacks suppressed [ 982.594775][ T1192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7375'. [ 982.708504][ T1194] bridge_slave_0: left allmulticast mode [ 982.708531][ T1194] bridge_slave_0: left promiscuous mode [ 982.708766][ T1194] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.780669][ T1194] bridge_slave_1: left allmulticast mode [ 982.780697][ T1194] bridge_slave_1: left promiscuous mode [ 982.792720][ T1194] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.801298][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 982.862935][ T1194] bond0: (slave bond_slave_0): Releasing backup interface [ 982.880180][ T1206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7379'. [ 982.893329][ T1194] bond0: (slave bond_slave_1): Releasing backup interface [ 982.928812][ T1207] netlink: 'syz.2.7381': attribute type 1 has an invalid length. [ 982.928836][ T1207] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7381'. [ 982.928854][ T1207] netlink: 'syz.2.7381': attribute type 1 has an invalid length. [ 982.972311][ T1194] team0: Port device team_slave_0 removed [ 982.985080][ T1194] team0: Port device team_slave_1 removed [ 982.985511][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.002626][ T1194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.015809][ T1194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 983.084990][ T1214] netlink: 'syz.7.7382': attribute type 2 has an invalid length. [ 983.085012][ T1214] netlink: 228 bytes leftover after parsing attributes in process `syz.7.7382'. [ 983.152309][ T1214] sctp: [Deprecated]: syz.7.7382 (pid 1214) Use of int in max_burst socket option. [ 983.152309][ T1214] Use struct sctp_assoc_value instead [ 983.329625][ T1221] netlink: 'syz.2.7386': attribute type 1 has an invalid length. [ 983.463118][ T1221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 983.534651][ T1228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.582363][ T1221] bond4: (slave gretap2): making interface the new active one [ 983.583756][ T1221] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 983.619822][ T1229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7389'. [ 983.620184][ T1228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.693907][ T1237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.763257][ T1242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7394'. [ 983.824232][ T1243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7393'. [ 984.079163][ T1257] netlink: 'syz.4.7399': attribute type 2 has an invalid length. [ 984.079186][ T1257] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7399'. [ 984.172659][ T1264] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7401'. [ 984.176824][ T1261] sctp: [Deprecated]: syz.4.7399 (pid 1261) Use of int in max_burst socket option. [ 984.176824][ T1261] Use struct sctp_assoc_value instead [ 984.501174][ T1274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7406'. [ 984.689334][ T1276] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 984.696266][ T1276] bond2 (unregistering): Released all slaves [ 985.018991][ T1305] tipc: Enabling not permitted [ 985.019027][ T1305] tipc: Enabling of bearer rejected, failed to enable media [ 985.024255][ T1308] netlink: 'syz.4.7415': attribute type 2 has an invalid length. [ 985.093795][ T1308] sctp: [Deprecated]: syz.4.7415 (pid 1308) Use of int in max_burst socket option. [ 985.093795][ T1308] Use struct sctp_assoc_value instead [ 985.112478][ T1312] openvswitch: netlink: Missing key (keys=50, expected=80) [ 985.314495][ T1324] ip_tables: iptables: counters copy to user failed while replacing table [ 985.384519][ T1330] tap0: tun_chr_ioctl cmd 1074025692 [ 986.010717][ T1365] netlink: 'syz.2.7431': attribute type 2 has an invalid length. [ 986.082067][ T1365] sctp: [Deprecated]: syz.2.7431 (pid 1365) Use of int in max_burst socket option. [ 986.082067][ T1365] Use struct sctp_assoc_value instead [ 986.370624][ T1377] netlink: 'syz.4.7435': attribute type 23 has an invalid length. [ 986.370650][ T1377] netlink: 'syz.4.7435': attribute type 11 has an invalid length. [ 986.800167][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 987.288219][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 987.333459][ T1419] bond11: Removing last arp target with arp_interval on [ 987.451418][ T1426] syzkaller0: entered promiscuous mode [ 987.451443][ T1426] syzkaller0: entered allmulticast mode [ 987.464608][ T1426] tipc: Started in network mode [ 987.464639][ T1426] tipc: Node identity fe88, cluster identity 4711 [ 987.465170][ T1426] tipc: Enabled bearer , priority 0 [ 987.896483][ T1446] __nla_validate_parse: 11 callbacks suppressed [ 987.896504][ T1446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7460'. [ 988.121000][ T1459] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7463'. [ 988.578141][T25832] tipc: Node number set to 4270325760 [ 988.904807][ T1473] netlink: 'syz.4.7469': attribute type 1 has an invalid length. [ 988.941459][ T1473] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 989.001784][ T1476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7469'. [ 989.128390][ T1478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 989.168205][ T1478] team0: Port device xfrm0 added [ 989.226921][ T1481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7472'. [ 989.549383][ T1501] xt_addrtype: ipv6 does not support BROADCAST matching [ 989.605519][ T1505] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7481'. [ 989.880591][ T1522] batman_adv: batadv0: Interface deactivated: veth0 [ 989.880618][ T1522] batman_adv: batadv0: Removing interface: veth0 [ 989.931204][ T1522] team0: Port device xfrm0 removed [ 989.935518][ T1522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 989.990012][ T1525] team0: Port device xfrm0 added [ 990.005127][ T1512] tipc: Started in network mode [ 990.005159][ T1512] tipc: Node identity f64562983e02, cluster identity 4711 [ 990.005317][ T1512] tipc: Enabled bearer , priority 0 [ 990.034733][ T1512] wlan1: mtu less than device minimum [ 990.051763][ T1517] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 990.066141][ T1511] tipc: Resetting bearer [ 990.080745][ T1511] tipc: Disabling bearer [ 990.328017][ T1535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.729907][ T1571] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 990.956484][ T1585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7504'. [ 990.979578][ T1582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 991.182477][ T1600] netlink: 9160 bytes leftover after parsing attributes in process `syz.7.7504'. [ 991.314501][ T1605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7508'. [ 991.314528][ T1605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7508'. [ 991.656166][ T1614] team0: Port device xfrm0 removed [ 991.656655][ T1614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 991.694516][ T1614] team0: Port device xfrm0 added [ 992.045445][ T1625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.264963][ T1633] 8021q: VLANs not supported on wg2 [ 992.439784][ T1635] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.440538][ T1635] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.710961][ T1635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.726344][ T1635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.868488][ T1646] team0: Port device xfrm0 removed [ 992.868824][ T1646] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 992.873120][ T1640] netlink: 'syz.6.7522': attribute type 10 has an invalid length. [ 992.908975][ T1647] team0: Port device xfrm0 added [ 992.918344][T11696] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.918454][T11696] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.918561][T11696] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.928461][T11696] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.024560][ T1650] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7525'. [ 993.078854][ T1653] openvswitch: netlink: EtherType 2 is less than min 600 [ 993.264084][ T1665] netlink: 'syz.7.7528': attribute type 1 has an invalid length. [ 993.304277][ T1665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 993.318869][ T1666] syzkaller0: entered promiscuous mode [ 993.318893][ T1666] syzkaller0: entered allmulticast mode [ 993.341671][T11690] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.341760][T11690] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.341798][T11690] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.341835][T11690] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.390451][ T1666] netlink: 'syz.4.7529': attribute type 1 has an invalid length. [ 993.430482][ T1670] macvlan2: entered promiscuous mode [ 993.430508][ T1670] macvlan2: entered allmulticast mode [ 993.430903][ T1670] bond4: entered allmulticast mode [ 993.430984][ T1670] bond4: entered promiscuous mode [ 993.431696][ T1670] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 993.433622][ T1670] team0: Port device macvlan2 added [ 993.520833][ T1670] bond4: (slave ip6gretap1): making interface the new active one [ 993.520862][ T1670] ip6gretap1: entered promiscuous mode [ 993.521018][ T1670] ip6gretap1: entered allmulticast mode [ 993.525012][ T1670] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 993.636893][ T1674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7531'. [ 993.727784][ T1678] netlink: 'syz.4.7532': attribute type 1 has an invalid length. [ 993.788358][ T1678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 993.915666][ T1686] team0: Port device xfrm0 removed [ 993.932820][ T1686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 993.977649][ T1687] team0: Port device xfrm0 added [ 994.144088][ T1698] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 994.190545][ T1699] bond4: left allmulticast mode [ 994.190573][ T1699] ip6gretap1: left allmulticast mode [ 994.190592][ T1699] bond4: left promiscuous mode [ 994.190607][ T1699] ip6gretap1: left promiscuous mode [ 994.223428][ T1702] netlink: 440 bytes leftover after parsing attributes in process `syz.4.7539'. [ 994.245758][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7537'. [ 994.245783][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7537'. [ 994.489633][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7544'. [ 994.489661][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7544'. [ 994.558413][ T1718] team0: Port device xfrm0 removed [ 994.564385][ T1718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 994.651619][ T1718] team0: Port device xfrm0 added [ 994.805646][ T1729] FAULT_INJECTION: forcing a failure. [ 994.805646][ T1729] name failslab, interval 1, probability 0, space 0, times 0 [ 994.805756][ T1729] CPU: 0 UID: 0 PID: 1729 Comm: syz.4.7550 Not tainted syzkaller #0 PREEMPT(full) [ 994.805781][ T1729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 994.805797][ T1729] Call Trace: [ 994.805807][ T1729] [ 994.805817][ T1729] dump_stack_lvl+0xe8/0x150 [ 994.805859][ T1729] should_fail_ex+0x410/0x560 [ 994.805893][ T1729] should_failslab+0xa8/0x100 [ 994.805923][ T1729] ? skb_clone+0x212/0x3a0 [ 994.805957][ T1729] kmem_cache_alloc_noprof+0xa1/0x600 [ 994.805995][ T1729] ? skb_clone+0x212/0x3a0 [ 994.806034][ T1729] skb_clone+0x212/0x3a0 [ 994.806071][ T1729] __netlink_deliver_tap+0x355/0x6e0 [ 994.806120][ T1729] ? netlink_deliver_tap+0x2e/0x1b0 [ 994.806166][ T1729] netlink_deliver_tap+0x19c/0x1b0 [ 994.806200][ T1729] netlink_unicast+0x781/0x940 [ 994.806243][ T1729] netlink_sendmsg+0x813/0xb40 [ 994.806274][ T1729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.806303][ T1729] ? apparmor_socket_sendmsg+0x98/0x360 [ 994.806330][ T1729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.806350][ T1729] sock_sendmsg_nosec+0x13a/0x180 [ 994.806375][ T1729] ____sys_sendmsg+0x54e/0x850 [ 994.806495][ T1729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.806544][ T1729] ? import_iovec+0x73/0xa0 [ 994.806576][ T1729] ___sys_sendmsg+0x2a5/0x360 [ 994.806603][ T1729] ? __lock_acquire+0x747/0x2de0 [ 994.806632][ T1729] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.806729][ T1729] ? __fget_files+0x2a/0x420 [ 994.806758][ T1729] ? __fget_files+0x3a2/0x420 [ 994.806798][ T1729] __x64_sys_sendmsg+0x1b1/0x290 [ 994.806848][ T1729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 994.806903][ T1729] do_syscall_64+0x166/0x520 [ 994.806933][ T1729] ? trace_irq_disable+0x3b/0x140 [ 994.806954][ T1729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.806976][ T1729] ? clear_bhb_loop+0x70/0xc0 [ 994.807003][ T1729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.807026][ T1729] RIP: 0033:0x7ff863b9e159 [ 994.807047][ T1729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.807067][ T1729] RSP: 002b:00007ff864a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.807092][ T1729] RAX: ffffffffffffffda RBX: 00007ff863e25fa0 RCX: 00007ff863b9e159 [ 994.807109][ T1729] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 994.807124][ T1729] RBP: 00007ff864a87090 R08: 0000000000000000 R09: 0000000000000000 [ 994.807139][ T1729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.807153][ T1729] R13: 00007ff863e26038 R14: 00007ff863e25fa0 R15: 00007ffd58a737a8 [ 994.807191][ T1729] [ 995.093372][ T1733] netlink: 'syz.2.7547': attribute type 12 has an invalid length. [ 995.300559][ T1727] team0: Port device xfrm0 removed [ 995.300998][ T1727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 995.555958][ T1746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7555'. [ 995.600405][ T1748] xt_hashlimit: max too large, truncated to 1048576 [ 995.676529][ T1748] No such timeout policy "syz1" [ 995.696658][ T1746] bond12 (unregistering): Released all slaves [ 995.709426][ T1755] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7555'. [ 995.849197][ T1766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7558'. [ 996.324979][ T1783] nbd: socks must be embedded in a SOCK_ITEM attr [ 996.325239][ T1783] block nbd3: shutting down sockets [ 996.389814][ T1787] bridge_slave_0: left allmulticast mode [ 996.389843][ T1787] bridge_slave_0: left promiscuous mode [ 996.390083][ T1787] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.396230][ T1787] bridge_slave_1: left allmulticast mode [ 996.396254][ T1787] bridge_slave_1: left promiscuous mode [ 996.396491][ T1787] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.445178][ T1787] bond0: (slave bond_slave_0): Releasing backup interface [ 996.460243][ T1787] bond0: (slave bond_slave_1): Releasing backup interface [ 996.466019][ T1787] team0: Port device team_slave_0 removed [ 996.485080][ T1787] team0: Port device team_slave_1 removed [ 996.487747][ T1787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.502027][ T1787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.504489][ T1787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 996.952055][ T1811] pimreg: entered allmulticast mode [ 996.973125][ T1811] openvswitch: netlink: Flow key attr not present in new flow. [ 997.064277][ T1817] tipc: Enabling of bearer rejected, failed to enable media [ 997.273162][ T1821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 997.421618][ T1830] tipc: Started in network mode [ 997.421650][ T1830] tipc: Node identity 060322bdef93, cluster identity 4711 [ 997.422455][ T1830] tipc: Enabled bearer , priority 0 [ 997.489850][ T1831] netlink: 'syz.6.7582': attribute type 2 has an invalid length. [ 997.532776][ T1831] sctp: [Deprecated]: syz.6.7582 (pid 1831) Use of int in max_burst socket option. [ 997.532776][ T1831] Use struct sctp_assoc_value instead [ 998.054725][ T1861] __nla_validate_parse: 12 callbacks suppressed [ 998.054746][ T1861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7591'. [ 998.054778][ T1861] netlink: 'syz.6.7591': attribute type 10 has an invalid length. [ 998.054796][ T1861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7591'. [ 998.103292][ T1861] geneve2: entered promiscuous mode [ 998.103315][ T1861] geneve2: entered allmulticast mode [ 998.152836][ T1866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 998.411624][ T1874] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 998.436522][ T1874] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 998.504558][ T1882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7599'. [ 998.549021][ T1882] batadv0: entered promiscuous mode [ 998.549516][ T1882] macvtap1: entered promiscuous mode [ 998.549775][ T1882] macvtap1: entered allmulticast mode [ 998.549793][ T1882] batadv0: entered allmulticast mode [ 998.551151][ T1882] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 998.551916][T25832] tipc: Node number set to 3918537405 [ 998.554493][ T1882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7599'. [ 998.613119][ T1882] batadv0: left allmulticast mode [ 998.613357][ T1882] batadv0: left promiscuous mode [ 998.615030][ T1882] macvtap1: left promiscuous mode [ 998.615053][ T1882] macvtap1: left allmulticast mode [ 998.668132][ T1872] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 998.876613][ T1893] openvswitch: netlink: IPv6 tunnel dst address is zero [ 999.084403][ T1901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 999.331864][ T1921] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7610'. [ 999.336567][ T1920] netlink: 'syz.6.7609': attribute type 9 has an invalid length. [ 999.364754][ T1920] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7609'. [ 999.499582][ T1921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7610'. [ 999.558372][ T1927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7610'. [ 999.635485][ T1931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7613'. [ 999.655199][ T1921] bond4: option tlb_dynamic_lb: invalid value (159) [ 999.755688][ T1921] bond4 (unregistering): Released all slaves [ 999.833321][ T1933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7614'. [ 1000.130442][ T1956] syzkaller0: entered promiscuous mode [ 1000.130467][ T1956] syzkaller0: entered allmulticast mode [ 1000.294715][ T1955] wg2 speed is unknown, defaulting to 1000 [ 1000.416367][ T1963] ¾x9ÿ: renamed from bridge_slave_0 [ 1000.998026][ T1996] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1001.035586][ T1996] veth5: left allmulticast mode [ 1001.035757][ T1996] macvtap1: left promiscuous mode [ 1002.361836][ T2052] xt_policy: output policy not valid in PREROUTING and INPUT [ 1003.076992][ T2088] pimreg: entered allmulticast mode [ 1003.108047][ T2088] pimreg: left allmulticast mode [ 1003.423759][ T2098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.440175][ T2098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.446694][ T2098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.529911][ T2098] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1003.529940][ T2098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1003.534002][ T2098] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1003.534671][ T2105] tipc: Enabling of bearer rejected, failed to enable media [ 1003.624514][ T2112] __nla_validate_parse: 38 callbacks suppressed [ 1003.624537][ T2112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7666'. [ 1004.271574][ T2142] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7678'. [ 1004.333165][ T2130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1004.401956][ T2138] bond4 (unregistering): Released all slaves [ 1004.552005][ T2146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7680'. [ 1004.684656][ T2158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.895242][ T2172] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7687'. [ 1004.931187][ T2175] ip6tnl2: entered promiscuous mode [ 1004.931212][ T2175] ip6tnl2: entered allmulticast mode [ 1004.992562][ T2181] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7691'. [ 1005.360809][ T2204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7696'. [ 1006.179175][ T2230] netlink: 279 bytes leftover after parsing attributes in process `syz.2.7704'. [ 1006.179200][ T2230] veth0_to_bond: default FDB implementation only supports local addresses [ 1006.272035][ T2232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7705'. [ 1006.554082][ T2245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7709'. [ 1006.783427][ T31] audit: type=1804 audit(1790204306.934:28): pid=2247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7711" name="/newroot/519/cgroup.controllers" dev="tmpfs" ino=2677 res=1 errno=0 [ 1006.783561][ T31] audit: type=1800 audit(1790204306.934:29): pid=2247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7711" name="cgroup.controllers" dev="tmpfs" ino=2677 res=0 errno=0 [ 1006.784780][ T31] audit: type=1800 audit(1790204306.934:30): pid=2247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7711" name="cgroup.controllers" dev="tmpfs" ino=2677 res=0 errno=0 [ 1006.785939][ T2237] syzkaller1: entered promiscuous mode [ 1006.785957][ T2237] syzkaller1: entered allmulticast mode [ 1006.875445][ T2247] gretap2: entered promiscuous mode [ 1007.007598][ T2261] netlink: 'syz.5.7715': attribute type 4 has an invalid length. [ 1007.156757][ T2266] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7718'. [ 1007.701494][ T2288] netlink: 'syz.4.7726': attribute type 2 has an invalid length. [ 1007.706406][ T2288] sctp: [Deprecated]: syz.4.7726 (pid 2288) Use of int in max_burst socket option. [ 1007.706406][ T2288] Use struct sctp_assoc_value instead [ 1008.314726][ T2293] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1008.474447][ T2293] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1008.484466][ T2294] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1008.746256][ T2320] __nla_validate_parse: 34 callbacks suppressed [ 1008.746280][ T2320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7733'. [ 1008.746755][ T2316] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 1008.970449][ T2324] netlink: 'syz.7.7734': attribute type 8 has an invalid length. [ 1008.970474][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7734'. [ 1009.013967][ T2330] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1009.014471][ T2330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.014960][ T2330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1009.130552][ T2334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7736'. [ 1009.267402][ T2338] tipc: Enabling of bearer rejected, already enabled [ 1009.528147][ T2359] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7741'. [ 1009.653308][ T2359] IPv6: NLM_F_CREATE should be specified when creating new route [ 1009.981747][ T2367] xt_l2tp: v2 sid > 0xffff: 33554432 [ 1009.996142][ T2367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7743'. [ 1010.682381][ T2390] netlink: 'syz.5.7749': attribute type 17 has an invalid length. [ 1010.796726][ T2390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.805650][ T2390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.819567][ T2390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.868162][ T2390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1010.868187][ T2390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.872577][ T2390] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1011.078671][ T2410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7754'. [ 1011.158243][ T2409] netlink: 'syz.5.7756': attribute type 1 has an invalid length. [ 1011.228012][ T2414] openvswitch: netlink: Message has 8 unknown bytes. [ 1011.522601][ T2420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7757'. [ 1011.629574][ T2437] netlink: 'syz.5.7760': attribute type 3 has an invalid length. [ 1011.629598][ T2437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7760'. [ 1011.716918][ T2438] netlink: 'syz.7.7761': attribute type 10 has an invalid length. [ 1011.720995][ T2438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7761'. [ 1012.114185][ T2451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7766'. [ 1012.278011][ T2461] IPVS: Error connecting to the multicast addr [ 1012.579659][ T2475] team0: Port device xfrm0 removed [ 1012.580123][ T2475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1013.328436][ T2525] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1013.518714][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1013.834395][ T2558] __nla_validate_parse: 8 callbacks suppressed [ 1013.834418][ T2558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7793'. [ 1014.343162][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.343417][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.343662][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.343890][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.344131][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.344355][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.406470][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.406711][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1014.424989][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7803'. [ 1015.771205][ T2665] syzkaller0: left promiscuous mode [ 1015.771227][ T2665] syzkaller0: left allmulticast mode [ 1017.001143][ T2725] FAULT_INJECTION: forcing a failure. [ 1017.001143][ T2725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.001180][ T2725] CPU: 0 UID: 0 PID: 2725 Comm: syz.4.7834 Not tainted syzkaller #0 PREEMPT(full) [ 1017.001205][ T2725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1017.001220][ T2725] Call Trace: [ 1017.001229][ T2725] [ 1017.001240][ T2725] dump_stack_lvl+0xe8/0x150 [ 1017.001282][ T2725] should_fail_ex+0x410/0x560 [ 1017.001315][ T2725] _copy_from_user+0x2d/0xb0 [ 1017.001347][ T2725] __sys_connect+0x155/0x450 [ 1017.001380][ T2725] ? __pfx___sys_connect+0x10/0x10 [ 1017.001421][ T2725] ? __pfx_ksys_write+0x10/0x10 [ 1017.001466][ T2725] __x64_sys_connect+0x7a/0x90 [ 1017.001495][ T2725] do_syscall_64+0x166/0x520 [ 1017.001526][ T2725] ? trace_irq_disable+0x3b/0x140 [ 1017.001550][ T2725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.001574][ T2725] ? clear_bhb_loop+0x70/0xc0 [ 1017.001603][ T2725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.001626][ T2725] RIP: 0033:0x7ff863b9e159 [ 1017.001647][ T2725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.001667][ T2725] RSP: 002b:00007ff864a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1017.001694][ T2725] RAX: ffffffffffffffda RBX: 00007ff863e25fa0 RCX: 00007ff863b9e159 [ 1017.001712][ T2725] RDX: 0000000000000008 RSI: 0000200000002a40 RDI: 0000000000000008 [ 1017.001726][ T2725] RBP: 00007ff864a87090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.001741][ T2725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.001756][ T2725] R13: 00007ff863e26038 R14: 00007ff863e25fa0 R15: 00007ffd58a737a8 [ 1017.001797][ T2725] [ 1017.902030][ T2759] 8021q: VLANs not supported on team0 [ 1018.076251][ T2772] netlink: 'syz.4.7849': attribute type 1 has an invalid length. [ 1018.114621][ T2774] netlink: 'syz.5.7848': attribute type 2 has an invalid length. [ 1018.183911][ T2777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.444960][ T2772] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1020.449371][ T2775] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1020.677814][ T2793] __nla_validate_parse: 35 callbacks suppressed [ 1020.677836][ T2793] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7851'. [ 1020.677880][ T2793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7851'. [ 1020.892270][ T2800] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 1021.288856][ T2818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1021.289968][ T2823] netlink: 'syz.2.7856': attribute type 1 has an invalid length. [ 1021.331817][ T2822] bond4 (unregistering): Released all slaves [ 1021.779212][ T2860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1021.779258][ T2860] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1021.823736][ T2860] netlink: 83 bytes leftover after parsing attributes in process `syz.4.7863'. [ 1021.920393][ T2876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7867'. [ 1021.949383][ T2888] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7866'. [ 1021.987560][ T2888] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7866'. [ 1024.909683][ T2919] FAULT_INJECTION: forcing a failure. [ 1024.909683][ T2919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.909719][ T2919] CPU: 0 UID: 0 PID: 2919 Comm: syz.2.7876 Not tainted syzkaller #0 PREEMPT(full) [ 1024.909744][ T2919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1024.909759][ T2919] Call Trace: [ 1024.909769][ T2919] [ 1024.909779][ T2919] dump_stack_lvl+0xe8/0x150 [ 1024.909819][ T2919] should_fail_ex+0x410/0x560 [ 1024.909853][ T2919] _copy_to_user+0x31/0xb0 [ 1024.909886][ T2919] simple_read_from_buffer+0xe1/0x170 [ 1024.909926][ T2919] proc_fail_nth_read+0x1bb/0x230 [ 1024.909963][ T2919] ? common_file_perm+0x20e/0x2b0 [ 1024.909996][ T2919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1024.910036][ T2919] ? rw_verify_area+0x24a/0x4c0 [ 1024.910073][ T2919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1024.910108][ T2919] vfs_read+0x213/0xa80 [ 1024.910148][ T2919] ? __pfx___mutex_lock+0x10/0x10 [ 1024.910181][ T2919] ? __pfx_vfs_read+0x10/0x10 [ 1024.910218][ T2919] ? __fget_files+0x2a/0x420 [ 1024.910255][ T2919] ? __fget_files+0x3a2/0x420 [ 1024.910286][ T2919] ? __fget_files+0x2a/0x420 [ 1024.910327][ T2919] ksys_read+0x150/0x270 [ 1024.910365][ T2919] ? __pfx_ksys_read+0x10/0x10 [ 1024.910413][ T2919] do_syscall_64+0x166/0x520 [ 1024.910443][ T2919] ? trace_irq_disable+0x3b/0x140 [ 1024.910466][ T2919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.910490][ T2919] ? clear_bhb_loop+0x70/0xc0 [ 1024.910522][ T2919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.910547][ T2919] RIP: 0033:0x7fa434f5e98e [ 1024.910568][ T2919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1024.910596][ T2919] RSP: 002b:00007fa435da6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1024.910622][ T2919] RAX: ffffffffffffffda RBX: 00007fa435da76c0 RCX: 00007fa434f5e98e [ 1024.910639][ T2919] RDX: 000000000000000f RSI: 00007fa435da70a0 RDI: 0000000000000004 [ 1024.910654][ T2919] RBP: 00007fa435da7090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.910670][ T2919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.910684][ T2919] R13: 00007fa435226038 R14: 00007fa435225fa0 R15: 00007fff8b405a28 [ 1024.910722][ T2919] [ 1025.321621][ T2921] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1025.474042][ T2934] geneve2: entered promiscuous mode [ 1025.475849][T30170] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.475914][T30170] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.505615][T21421] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.505856][T11613] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.601959][ T2938] FAULT_INJECTION: forcing a failure. [ 1025.601959][ T2938] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.601996][ T2938] CPU: 0 UID: 0 PID: 2938 Comm: syz.4.7884 Not tainted syzkaller #0 PREEMPT(full) [ 1025.602022][ T2938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1025.602037][ T2938] Call Trace: [ 1025.602047][ T2938] [ 1025.602057][ T2938] dump_stack_lvl+0xe8/0x150 [ 1025.602097][ T2938] should_fail_ex+0x410/0x560 [ 1025.602139][ T2938] should_failslab+0xa8/0x100 [ 1025.602172][ T2938] __kmalloc_noprof+0xfe/0x720 [ 1025.602195][ T2938] ? rcu_is_watching+0x16/0xb0 [ 1025.602225][ T2938] ? tomoyo_realpath_from_path+0xef/0x640 [ 1025.602257][ T2938] ? tomoyo_realpath_from_path+0xef/0x640 [ 1025.602296][ T2938] tomoyo_realpath_from_path+0xef/0x640 [ 1025.602338][ T2938] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1025.602365][ T2938] tomoyo_path_number_perm+0x246/0x5f0 [ 1025.602394][ T2938] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1025.602418][ T2938] ? __lock_acquire+0x747/0x2de0 [ 1025.602460][ T2938] ? hook_file_ioctl+0x1f2/0x600 [ 1025.602509][ T2938] ? __fget_files+0x2a/0x420 [ 1025.602545][ T2938] ? __fget_files+0x2a/0x420 [ 1025.602574][ T2938] ? __fget_files+0x3a2/0x420 [ 1025.602604][ T2938] ? __fget_files+0x2a/0x420 [ 1025.602639][ T2938] security_file_ioctl+0xc3/0x2a0 [ 1025.602665][ T2938] __se_sys_ioctl+0x47/0x170 [ 1025.602693][ T2938] do_syscall_64+0x166/0x520 [ 1025.602722][ T2938] ? trace_irq_disable+0x3b/0x140 [ 1025.602746][ T2938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.602769][ T2938] ? clear_bhb_loop+0x70/0xc0 [ 1025.602798][ T2938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.602822][ T2938] RIP: 0033:0x7ff863b9e159 [ 1025.602844][ T2938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.602864][ T2938] RSP: 002b:00007ff864a87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.602889][ T2938] RAX: ffffffffffffffda RBX: 00007ff863e25fa0 RCX: 00007ff863b9e159 [ 1025.602907][ T2938] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004 [ 1025.602922][ T2938] RBP: 00007ff864a87090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.602937][ T2938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.602952][ T2938] R13: 00007ff863e26038 R14: 00007ff863e25fa0 R15: 00007ffd58a737a8 [ 1025.602993][ T2938] [ 1025.603047][ T2938] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.249336][ T2960] FAULT_INJECTION: forcing a failure. [ 1026.249336][ T2960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.249373][ T2960] CPU: 1 UID: 0 PID: 2960 Comm: syz.7.7889 Not tainted syzkaller #0 PREEMPT(full) [ 1026.249400][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1026.249415][ T2960] Call Trace: [ 1026.249424][ T2960] [ 1026.249435][ T2960] dump_stack_lvl+0xe8/0x150 [ 1026.249487][ T2960] should_fail_ex+0x410/0x560 [ 1026.249520][ T2960] _copy_from_user+0x2d/0xb0 [ 1026.249552][ T2960] ___sys_sendmsg+0x1c6/0x360 [ 1026.249583][ T2960] ? __lock_acquire+0x747/0x2de0 [ 1026.249614][ T2960] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.249684][ T2960] ? __fget_files+0x2a/0x420 [ 1026.249717][ T2960] ? __fget_files+0x3a2/0x420 [ 1026.249771][ T2960] __x64_sys_sendmsg+0x1b1/0x290 [ 1026.249806][ T2960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1026.249859][ T2960] do_syscall_64+0x166/0x520 [ 1026.249888][ T2960] ? trace_irq_disable+0x3b/0x140 [ 1026.249910][ T2960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.249933][ T2960] ? clear_bhb_loop+0x70/0xc0 [ 1026.249962][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.249986][ T2960] RIP: 0033:0x7f4350b9e159 [ 1026.250008][ T2960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.250028][ T2960] RSP: 002b:00007f4351a72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.250053][ T2960] RAX: ffffffffffffffda RBX: 00007f4350e26090 RCX: 00007f4350b9e159 [ 1026.250071][ T2960] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000008 [ 1026.250086][ T2960] RBP: 00007f4351a72090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.250101][ T2960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.250115][ T2960] R13: 00007f4350e26128 R14: 00007f4350e26090 R15: 00007fff14e5aee8 [ 1026.250158][ T2960] [ 1026.254217][ T2959] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.7890'. [ 1026.534205][ T2962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7891'. [ 1026.534231][ T2962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7891'. [ 1026.534260][ T2962] netlink: 'syz.5.7891': attribute type 13 has an invalid length. [ 1026.534277][ T2962] netlink: 'syz.5.7891': attribute type 12 has an invalid length. [ 1026.948261][ T2967] netlink: 'syz.5.7893': attribute type 11 has an invalid length. [ 1027.131695][ T2972] netlink: 'syz.7.7895': attribute type 4 has an invalid length. [ 1027.385000][ T2987] netlink: 'syz.4.7898': attribute type 2 has an invalid length. [ 1027.385024][ T2987] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1027.409727][ T2990] netlink: 'syz.2.7900': attribute type 4 has an invalid length. [ 1027.411539][ T2987] sctp: [Deprecated]: syz.4.7898 (pid 2987) Use of int in max_burst socket option. [ 1027.411539][ T2987] Use struct sctp_assoc_value instead [ 1027.486240][ T2991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1027.524725][ T2996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7901'. [ 1027.561328][ T2996] ovs-system: entered promiscuous mode [ 1027.581163][ T2991] team0: Device xfrm0 is of different type [ 1027.781805][ T3004] pim6reg1: entered promiscuous mode [ 1027.781833][ T3004] pim6reg1: entered allmulticast mode [ 1027.785451][ T3002] netlink: 'syz.7.7904': attribute type 1 has an invalid length. [ 1027.990351][ T3009] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7904'. [ 1028.114648][ T3020] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1028.435967][ T3006] bond5: (slave veth1): Enslaving as an active interface with a down link [ 1028.464034][ T3002] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1028.603356][ T3029] netlink: 'syz.4.7908': attribute type 1 has an invalid length. [ 1028.603374][ T3029] netlink: 576 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1029.019670][ T3042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7911'. [ 1029.092209][ T3049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7914'. [ 1029.207732][ T3057] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7914'. [ 1029.331030][ T3058] batman_adv: batadv0: Adding interface: macsec0 [ 1029.331051][ T3058] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.344459][ T3058] batman_adv: batadv0: Interface activated: macsec0 [ 1029.524596][ T3073] ip_tables: iptables: counters copy to user failed while replacing table [ 1029.637710][ T3075] FAULT_INJECTION: forcing a failure. [ 1029.637710][ T3075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.637747][ T3075] CPU: 1 UID: 0 PID: 3075 Comm: syz.2.7917 Not tainted syzkaller #0 PREEMPT(full) [ 1029.637773][ T3075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1029.637787][ T3075] Call Trace: [ 1029.637796][ T3075] [ 1029.637806][ T3075] dump_stack_lvl+0xe8/0x150 [ 1029.637845][ T3075] should_fail_ex+0x410/0x560 [ 1029.637877][ T3075] _copy_from_iter+0x1d3/0x1660 [ 1029.637904][ T3075] ? __alloc_skb+0x27a/0x7a0 [ 1029.637934][ T3075] ? __alloc_skb+0x27a/0x7a0 [ 1029.637962][ T3075] ? __alloc_skb+0x27a/0x7a0 [ 1029.637990][ T3075] ? __pfx__copy_from_iter+0x10/0x10 [ 1029.638012][ T3075] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1029.638047][ T3075] ? __alloc_skb+0x27a/0x7a0 [ 1029.638070][ T3075] ? __alloc_skb+0x27a/0x7a0 [ 1029.638102][ T3075] ? netlink_sendmsg+0x650/0xb40 [ 1029.638125][ T3075] ? skb_put+0x112/0x210 [ 1029.638166][ T3075] netlink_sendmsg+0x6c0/0xb40 [ 1029.638199][ T3075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.638230][ T3075] ? apparmor_socket_sendmsg+0x98/0x360 [ 1029.638259][ T3075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.638280][ T3075] sock_sendmsg_nosec+0x13a/0x180 [ 1029.638307][ T3075] ____sys_sendmsg+0x54e/0x850 [ 1029.638344][ T3075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.638386][ T3075] ? import_iovec+0x73/0xa0 [ 1029.638418][ T3075] ___sys_sendmsg+0x2a5/0x360 [ 1029.638452][ T3075] ? __lock_acquire+0x747/0x2de0 [ 1029.638480][ T3075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.638550][ T3075] ? __fget_files+0x2a/0x420 [ 1029.638582][ T3075] ? __fget_files+0x3a2/0x420 [ 1029.638625][ T3075] __x64_sys_sendmsg+0x1b1/0x290 [ 1029.638660][ T3075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.638716][ T3075] do_syscall_64+0x166/0x520 [ 1029.638745][ T3075] ? trace_irq_disable+0x3b/0x140 [ 1029.638768][ T3075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.638792][ T3075] ? clear_bhb_loop+0x70/0xc0 [ 1029.638820][ T3075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.638844][ T3075] RIP: 0033:0x7fa434f9e159 [ 1029.638865][ T3075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.638884][ T3075] RSP: 002b:00007fa435da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.638910][ T3075] RAX: ffffffffffffffda RBX: 00007fa435225fa0 RCX: 00007fa434f9e159 [ 1029.638928][ T3075] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000008 [ 1029.638942][ T3075] RBP: 00007fa435da7090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.638957][ T3075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.638972][ T3075] R13: 00007fa435226038 R14: 00007fa435225fa0 R15: 00007fff8b405a28 [ 1029.639008][ T3075] [ 1031.159729][ T3125] sctp: [Deprecated]: syz.5.7928 (pid 3125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1031.159729][ T3125] Use struct sctp_sack_info instead [ 1031.173924][ T3125] sctp: [Deprecated]: syz.5.7928 (pid 3125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1031.173924][ T3125] Use struct sctp_sack_info instead [ 1031.184504][ T3117] bond_slave_0: entered promiscuous mode [ 1031.184525][ T3117] bond_slave_0: entered allmulticast mode [ 1031.217451][ T3117] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1031.266395][ T3125] __nla_validate_parse: 1 callbacks suppressed [ 1031.266410][ T3125] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7928'. [ 1031.381823][ T3130] FAULT_INJECTION: forcing a failure. [ 1031.381823][ T3130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.381858][ T3130] CPU: 0 UID: 0 PID: 3130 Comm: syz.2.7930 Not tainted syzkaller #0 PREEMPT(full) [ 1031.381884][ T3130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1031.381899][ T3130] Call Trace: [ 1031.381909][ T3130] [ 1031.381919][ T3130] dump_stack_lvl+0xe8/0x150 [ 1031.381960][ T3130] should_fail_ex+0x410/0x560 [ 1031.382003][ T3130] _copy_from_iter+0x1d3/0x1660 [ 1031.382031][ T3130] ? __alloc_skb+0x27a/0x7a0 [ 1031.382061][ T3130] ? __alloc_skb+0x27a/0x7a0 [ 1031.382090][ T3130] ? __alloc_skb+0x27a/0x7a0 [ 1031.382118][ T3130] ? __pfx__copy_from_iter+0x10/0x10 [ 1031.382142][ T3130] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1031.382178][ T3130] ? __alloc_skb+0x27a/0x7a0 [ 1031.382203][ T3130] ? __alloc_skb+0x27a/0x7a0 [ 1031.382237][ T3130] ? netlink_sendmsg+0x650/0xb40 [ 1031.382259][ T3130] ? skb_put+0x112/0x210 [ 1031.382303][ T3130] netlink_sendmsg+0x6c0/0xb40 [ 1031.382334][ T3130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.382365][ T3130] ? apparmor_socket_sendmsg+0x98/0x360 [ 1031.382394][ T3130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.382415][ T3130] sock_sendmsg_nosec+0x13a/0x180 [ 1031.382441][ T3130] ____sys_sendmsg+0x54e/0x850 [ 1031.382477][ T3130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.382515][ T3130] ? import_iovec+0x73/0xa0 [ 1031.382546][ T3130] ___sys_sendmsg+0x2a5/0x360 [ 1031.382574][ T3130] ? __lock_acquire+0x747/0x2de0 [ 1031.382603][ T3130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.382668][ T3130] ? __fget_files+0x2a/0x420 [ 1031.382698][ T3130] ? __fget_files+0x3a2/0x420 [ 1031.382741][ T3130] __x64_sys_sendmsg+0x1b1/0x290 [ 1031.382775][ T3130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1031.382827][ T3130] do_syscall_64+0x166/0x520 [ 1031.382857][ T3130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.382880][ T3130] ? clear_bhb_loop+0x70/0xc0 [ 1031.382908][ T3130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.382931][ T3130] RIP: 0033:0x7fa434f9e159 [ 1031.382952][ T3130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.382979][ T3130] RSP: 002b:00007fa435da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.383003][ T3130] RAX: ffffffffffffffda RBX: 00007fa435225fa0 RCX: 00007fa434f9e159 [ 1031.383021][ T3130] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000008 [ 1031.383036][ T3130] RBP: 00007fa435da7090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.383050][ T3130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.383064][ T3130] R13: 00007fa435226038 R14: 00007fa435225fa0 R15: 00007fff8b405a28 [ 1031.383099][ T3130] [ 1032.162249][ T3167] netlink: 'syz.2.7936': attribute type 9 has an invalid length. [ 1032.231688][ T3171] netlink: 'syz.5.7937': attribute type 2 has an invalid length. [ 1032.231714][ T3171] netlink: 228 bytes leftover after parsing attributes in process `syz.5.7937'. [ 1032.280844][ T3171] sctp: [Deprecated]: syz.5.7937 (pid 3171) Use of int in max_burst socket option. [ 1032.280844][ T3171] Use struct sctp_assoc_value instead [ 1032.501461][ T3182] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7939'. [ 1033.083571][ T3212] netlink: 'syz.5.7944': attribute type 20 has an invalid length. [ 1033.084871][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7944'. [ 1033.314430][ T3224] netlink: 'syz.2.7945': attribute type 1 has an invalid length. [ 1033.549444][ T3223] bond6: (slave veth0_to_bond): making interface the new active one [ 1033.550740][ T3223] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1033.791143][ T3244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7948'. [ 1033.791171][ T3244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7948'. [ 1033.920122][ T3250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7949'. [ 1034.037475][ T3252] netlink: 'syz.5.7950': attribute type 3 has an invalid length. [ 1034.037498][ T3252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7950'. [ 1034.112684][ T3256] netlink: 252 bytes leftover after parsing attributes in process `syz.7.7952'. [ 1034.126114][ T3257] netlink: 252 bytes leftover after parsing attributes in process `syz.7.7952'. [ 1034.246175][ T3262] team0: Port device xfrm0 removed [ 1034.263368][ T3262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1034.284894][ T3267] team0: Port device xfrm0 added [ 1034.523252][ T3276] Bluetooth: hci0: unsupported parameter 5135 [ 1034.523277][ T3276] Bluetooth: hci0: unsupported parameter 8192 [ 1034.523291][ T3276] Bluetooth: hci0: unsupported parameter 5135 [ 1034.523317][ T3276] Bluetooth: hci0: unsupported parameter 8192 [ 1034.525641][ T3279] netlink: 'syz.4.7960': attribute type 1 has an invalid length. [ 1034.586621][ T3279] bond4: entered promiscuous mode [ 1034.592640][ T3279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1034.655295][ T3282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1034.655765][ T3282] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 1034.655794][ T3282] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1034.720941][ T3282] bond4: (slave gre1): making interface the new active one [ 1034.720967][ T3282] gre1: entered promiscuous mode [ 1034.723634][ T3282] bond4: (slave gre1): Enslaving as an active interface with an up link [ 1034.799611][ T3287] bond4 (unregistering): (slave gre1): Releasing backup interface [ 1034.799642][ T3287] gre1: left promiscuous mode [ 1034.814937][ T3287] bond4 (unregistering): Released all slaves [ 1035.314594][ T3306] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20000 [ 1035.355563][ T3315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1035.359437][ T3319] team0: Device xfrm0 is of different type [ 1035.614012][ T3324] netlink: 'syz.2.7974': attribute type 1 has an invalid length. [ 1036.051131][ T3349] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1036.276738][ T3369] team0: Port device xfrm0 removed [ 1036.293811][ T3369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.345781][ T3381] netlink: 'syz.5.7989': attribute type 1 has an invalid length. [ 1036.356661][ T3375] team0: Port device xfrm0 added [ 1036.408291][ T3381] __nla_validate_parse: 13 callbacks suppressed [ 1036.408314][ T3381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7989'. [ 1036.434456][ T3382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1036.461898][ T3384] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7988'. [ 1036.491309][ T3381] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7989'. [ 1036.491388][ T3381] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7989'. [ 1036.530795][ T3378] IPVS: Scheduler module ip_vs_mh not found [ 1036.591854][ T3378] team0: No ports can be present during mode change [ 1036.595807][ T3393] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1036.685759][ T3398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1036.775053][ T3405] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7992'. [ 1036.775246][ T3405] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7992'. [ 1038.731561][ T3483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.843270][ T3491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1038.866064][ T3491] team0: Device xfrm0 is of different type [ 1039.378883][ T3516] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8020'. [ 1039.485168][ T3522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8019'. [ 1039.485196][ T3522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8019'. [ 1039.575985][ T3526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1039.633013][ T3528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8022'. [ 1039.954777][ T3530] bond12: option lacp_rate: invalid value (3) [ 1039.965320][ T3530] bond12 (unregistering): Released all slaves [ 1040.012079][ T3535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.123330][ T3541] bond7: Unable to set up delay as MII monitoring is disabled [ 1040.146646][ T3541] bond7 (unregistering): Released all slaves [ 1041.260456][ T3584] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1041.408842][ T3586] nbd: must specify a size in bytes for the device [ 1041.534092][ T3588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.153140][ T3595] __nla_validate_parse: 3 callbacks suppressed [ 1044.153160][ T3595] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8041'. [ 1044.185009][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8041'. [ 1044.220428][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8041'. [ 1044.313408][ T3603] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8044'. [ 1044.337695][ T3606] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8041'. [ 1044.367734][ T3606] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8041'. [ 1044.722557][ T3632] tipc: Enabling of bearer rejected, failed to enable media [ 1044.726541][ T3634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8050'. [ 1044.778609][ T3633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8049'. [ 1045.143684][ T3635] netlink: 'syz.4.8047': attribute type 2 has an invalid length. [ 1045.362727][ T3657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1045.529750][ T3664] bond6: (slave veth0_to_bond): Releasing active interface [ 1045.547808][ T3664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1045.575701][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8054'. [ 1046.067772][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8064'. [ 1046.492118][ T3711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.758747][T27550] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1046.761757][T27550] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1046.784020][T27550] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1046.803073][T27550] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1046.806696][T27550] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1046.849821][ T52] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1046.852158][ T52] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1046.854362][ T52] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1046.864197][ T52] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1046.891300][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1047.280590][ T3735] xt_MASQUERADE: bad rangesize 20224 [ 1047.384395][ T3745] xt_MASQUERADE: bad rangesize 20224 [ 1047.866660][ T3717] wg2 speed is unknown, defaulting to 1000 [ 1047.892352][ T3763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.263079][ T3775] netlink: 'syz.6.8080': attribute type 10 has an invalid length. [ 1048.332904][ T3775] dummy0: entered promiscuous mode [ 1048.333204][ T3775] bridge0: port 1(dummy0) entered blocking state [ 1048.333383][ T3775] bridge0: port 1(dummy0) entered disabled state [ 1048.333810][ T3775] dummy0: entered allmulticast mode [ 1048.524874][ T3783] netlink: 'syz.6.8082': attribute type 2 has an invalid length. [ 1048.546877][ T3783] sctp: [Deprecated]: syz.6.8082 (pid 3783) Use of int in max_burst socket option. [ 1048.546877][ T3783] Use struct sctp_assoc_value instead [ 1048.957268][ T52] Bluetooth: hci7: command tx timeout [ 1048.980455][T30170] veth5: left allmulticast mode [ 1048.980481][T30170] veth5: left promiscuous mode [ 1048.984629][T30170] bridge9: port 2(veth5) entered disabled state [ 1049.013870][T30170] veth3: left allmulticast mode [ 1049.013895][T30170] veth3: left promiscuous mode [ 1049.014107][T30170] bridge9: port 1(veth3) entered disabled state [ 1049.086382][T30170] tipc: Resetting bearer [ 1049.087385][ T3809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.266579][T30170] tipc: Disabling bearer [ 1049.291766][T30170] team0: Port device xfrm0 removed [ 1049.364800][T30170] bond10 (unregistering): (slave gretap1): Releasing active interface [ 1049.389825][T30170] gretap0 (unregistering): left promiscuous mode [ 1049.610056][T30170] bond6 (unregistering): (slave bridge12): Releasing backup interface [ 1049.610081][T30170] bond6 (unregistering): (slave bridge12): the permanent HWaddr of slave - 4a:28:97:e8:94:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1049.610109][T30170] bond6 (unregistering): (slave bridge13): making interface the new active one [ 1049.610251][T30170] bond6 (unregistering): (slave bridge13): Error 16 setting MAC of new active slave [ 1049.662806][T30170] bond6 (unregistering): (slave bridge13): Releasing backup interface [ 1049.678287][T30170] bond9 (unregistering): (slave bridge14): Releasing backup interface [ 1049.678316][T30170] bridge14 (unregistering): left promiscuous mode [ 1049.731124][T30170] bond0 (unregistering): Released all slaves [ 1049.736053][T30170] bond1 (unregistering): Released all slaves [ 1049.770367][T30170] bond2 (unregistering): Released all slaves [ 1049.785924][T30170] bond3 (unregistering): Released all slaves [ 1049.802966][T30170] bond4 (unregistering): Released all slaves [ 1049.818995][T30170] bond5 (unregistering): Released all slaves [ 1049.852252][T30170] bond6 (unregistering): Released all slaves [ 1049.867968][T30170] bond7 (unregistering): Released all slaves [ 1049.884239][T30170] bond8 (unregistering): Released all slaves [ 1049.906719][T30170] bond9 (unregistering): Released all slaves [ 1049.923530][T30170] bond10 (unregistering): Released all slaves [ 1049.940070][T30170] bond11 (unregistering): Released all slaves [ 1050.003904][ T3800] syzkaller1: entered promiscuous mode [ 1050.003928][ T3800] syzkaller1: entered allmulticast mode [ 1050.332678][T30170] tipc: Left network mode [ 1050.435527][ T3828] netlink: 'syz.4.8093': attribute type 2 has an invalid length. [ 1050.435550][ T3828] __nla_validate_parse: 5 callbacks suppressed [ 1050.435565][ T3828] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8093'. [ 1050.570724][ T3828] sctp: [Deprecated]: syz.4.8093 (pid 3828) Use of int in max_burst socket option. [ 1050.570724][ T3828] Use struct sctp_assoc_value instead [ 1051.003151][ T3840] syzkaller0: entered promiscuous mode [ 1051.003178][ T3840] syzkaller0: entered allmulticast mode [ 1051.038675][ T52] Bluetooth: hci7: command tx timeout [ 1051.062433][ T3848] tipc: Enabling of bearer rejected, failed to enable media [ 1051.079425][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.079539][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.079979][ T3717] bridge_slave_0: entered allmulticast mode [ 1051.083300][ T3717] bridge_slave_0: entered promiscuous mode [ 1051.098739][ T3848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8098'. [ 1051.251921][ T3848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.252817][ T3717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.252969][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.253108][ T3717] bridge_slave_1: entered allmulticast mode [ 1051.255544][ T3717] bridge_slave_1: entered promiscuous mode [ 1051.323574][ T3853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.324011][ T3853] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1051.324868][ T3853] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 1051.467698][ T3861] mac80211_hwsim hwsim84 wlan1: entered promiscuous mode [ 1051.503065][ T3861] bond1: (slave wlan1): Enslaving as an active interface with an up link [ 1051.806777][ T3717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.824244][ T3717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.825533][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1051.994730][ T3717] team0: Port device team_slave_0 added [ 1052.004489][ T3717] team0: Port device team_slave_1 added [ 1052.148345][ T3717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.148365][ T3717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.148393][ T3717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.155857][ T3717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.155876][ T3717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.155906][ T3717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.579991][ T3717] hsr_slave_0: entered promiscuous mode [ 1052.584223][ T3717] hsr_slave_1: entered promiscuous mode [ 1052.587436][ T3717] debugfs: 'hsr0' already exists in 'hsr' [ 1052.587506][ T3717] Cannot create hsr debugfs directory [ 1052.696582][ T3910] sctp: [Deprecated]: syz.2.8106 (pid 3910) Use of int in max_burst socket option. [ 1052.696582][ T3910] Use struct sctp_assoc_value instead [ 1053.027772][ T3922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1053.069959][ T3922] team0: Port device xfrm0 added [ 1053.117088][ T52] Bluetooth: hci7: command tx timeout [ 1053.502973][ T3945] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8112'. [ 1053.600622][T30170] veth1_to_team: left promiscuous mode [ 1053.656135][T30170] hsr_slave_0: left promiscuous mode [ 1053.672348][T30170] hsr_slave_1: left promiscuous mode [ 1054.433319][ T3952] netlink: 'syz.4.8114': attribute type 1 has an invalid length. [ 1054.439402][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1054.949472][ T3977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8119'. [ 1055.205865][ T52] Bluetooth: hci7: command tx timeout [ 1055.461457][ T3991] bond8 (unregistering): Released all slaves [ 1055.566589][ T4010] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8123'. [ 1055.605646][T30170] IPVS: stop unused estimator thread 0... [ 1055.637925][ T4012] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8123'. [ 1055.723712][ T3992] syzkaller1: entered promiscuous mode [ 1055.723740][ T3992] syzkaller1: entered allmulticast mode [ 1055.867114][ T4017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8124'. [ 1056.113278][ T4034] netlink: 220 bytes leftover after parsing attributes in process `syz.7.8126'. [ 1056.113302][ T4034] tc_dump_action: action bad kind [ 1056.369390][ T4043] team0: Port device xfrm0 removed [ 1056.369784][ T4043] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1056.595106][ T4057] netlink: 'syz.4.8130': attribute type 6 has an invalid length. [ 1056.595130][ T4057] netlink: 'syz.4.8130': attribute type 7 has an invalid length. [ 1056.595145][ T4057] netlink: 'syz.4.8130': attribute type 8 has an invalid length. [ 1056.666297][ T3717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1056.693984][ T3717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1056.726072][ T3717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1056.755417][ T3717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1056.760920][ T3717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1056.783339][ T3717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1056.792013][ T3717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1056.819616][ T3717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1057.184220][ T4078] ip_tables: iptables: counters copy to user failed while replacing table [ 1057.355211][ T3717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.451906][ T3717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.478946][T24519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.479059][T24519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.505944][ T4088] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8135'. [ 1057.525763][T30170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.525870][T30170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.548939][ T4088] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8135'. [ 1058.070214][ T4113] dummy0: left allmulticast mode [ 1058.070465][ T4113] bridge0: port 1(dummy0) entered disabled state [ 1058.105797][ T4113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1058.168772][ T4117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8141'. [ 1058.415488][ T4127] tipc: Cannot configure node identity twice [ 1058.421555][ T4127] tipc: Enabling of bearer rejected, failed to enable media [ 1058.449639][ T4129] tipc: Enabling of bearer rejected, failed to enable media [ 1058.814283][ T4151] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8147'. [ 1059.057355][ T4165] FAULT_INJECTION: forcing a failure. [ 1059.057355][ T4165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.057393][ T4165] CPU: 1 UID: 0 PID: 4165 Comm: syz.2.8150 Not tainted syzkaller #0 PREEMPT(full) [ 1059.057420][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1059.057434][ T4165] Call Trace: [ 1059.057444][ T4165] [ 1059.057454][ T4165] dump_stack_lvl+0xe8/0x150 [ 1059.057492][ T4165] should_fail_ex+0x410/0x560 [ 1059.057529][ T4165] _copy_from_user+0x2d/0xb0 [ 1059.057560][ T4165] do_ip_setsockopt+0x3be/0x2e30 [ 1059.057670][ T4165] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1059.057705][ T4165] ? reacquire_held_locks+0x117/0x1a0 [ 1059.057733][ T4165] ? release_sock+0x2f/0x260 [ 1059.057767][ T4165] ? mptcp_setsockopt+0xc94/0x3550 [ 1059.057829][ T4165] ip_setsockopt+0x66/0x110 [ 1059.057860][ T4165] mptcp_setsockopt+0xf89/0x3550 [ 1059.057892][ T4165] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1059.057914][ T4165] ? kmem_cache_free+0x182/0x650 [ 1059.057958][ T4165] ? aa_sock_opt_perm+0xe8/0x1e0 [ 1059.057990][ T4165] ? sock_common_setsockopt+0x36/0xc0 [ 1059.058015][ T4165] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1059.058043][ T4165] do_sock_setsockopt+0x17c/0x1b0 [ 1059.058078][ T4165] __x64_sys_setsockopt+0x13d/0x1b0 [ 1059.058113][ T4165] do_syscall_64+0x166/0x520 [ 1059.058142][ T4165] ? trace_irq_disable+0x3b/0x140 [ 1059.058166][ T4165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.058190][ T4165] ? clear_bhb_loop+0x70/0xc0 [ 1059.058219][ T4165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.058242][ T4165] RIP: 0033:0x7fa434f9e159 [ 1059.058264][ T4165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.058284][ T4165] RSP: 002b:00007fa435da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1059.058310][ T4165] RAX: ffffffffffffffda RBX: 00007fa435225fa0 RCX: 00007fa434f9e159 [ 1059.058328][ T4165] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 1059.058342][ T4165] RBP: 00007fa435da7090 R08: 0000000000000029 R09: 0000000000000000 [ 1059.058357][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.058371][ T4165] R13: 00007fa435226038 R14: 00007fa435225fa0 R15: 00007fff8b405a28 [ 1059.058406][ T4165] [ 1059.376487][ T3717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.502715][ T4174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8153'. [ 1059.892058][ T4188] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8157'. [ 1060.151254][ T3717] veth0_vlan: entered promiscuous mode [ 1060.186943][ T3717] veth1_vlan: entered promiscuous mode [ 1060.220161][ T4207] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 1060.331922][ T4210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1060.336900][ T3717] veth0_macvtap: entered promiscuous mode [ 1060.439017][ T3717] veth1_macvtap: entered promiscuous mode [ 1060.518501][ T3717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.551565][ T3717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.767094][T30170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.777302][T25309] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.777353][T25309] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.777391][T25309] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.943144][ T4229] __nla_validate_parse: 1 callbacks suppressed [ 1060.943167][ T4229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8168'. [ 1060.945420][ T4229] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8168'. [ 1061.299735][T11696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.299760][T11696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.375040][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8174'. [ 1061.476057][T30170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.476082][T30170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.158124][ T32] INFO: task syz.1.6800:31243 blocked for more than 143 seconds. [ 1062.158152][ T32] Not tainted syzkaller #0 [ 1062.158164][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1062.158176][ T32] task:syz.1.6800 state:D stack:25696 pid:31243 tgid:31232 ppid:27549 task_flags:0x400140 flags:0x00080002 [ 1062.158250][ T32] Call Trace: [ 1062.158260][ T32] [ 1062.158276][ T32] __schedule+0x17db/0x58f0 [ 1062.158341][ T32] ? __pfx___schedule+0x10/0x10 [ 1062.158379][ T32] ? schedule+0x90/0x2b0 [ 1062.158410][ T32] schedule+0x164/0x2b0 [ 1062.158440][ T32] schedule_preempt_disabled+0x13/0x30 [ 1062.158467][ T32] __mutex_lock+0x7c1/0x1550 [ 1062.158504][ T32] ? __mutex_lock+0x5d4/0x1 ** replaying previous printk message ** [ 1062.158504][ T32] ? __mutex_lock+0x5d4/0x1550 [ 1062.158539][ T32] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1062.158692][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1062.158733][ T32] ? net_generic+0x1e/0x240 [ 1062.158760][ T32] ? net_generic+0x1e/0x240 [ 1062.158794][ T32] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1062.158832][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1062.158867][ T32] ? rcu_is_watching+0x16/0xb0 [ 1062.158897][ T32] ? trace_kmalloc+0x2a/0xf0 [ 1062.158924][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 1062.158952][ T32] ? __nla_parse+0x40/0x60 [ 1062.158988][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1062.159020][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1062.159060][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 1062.159097][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1062.159140][ T32] ? bpf_lsm_capable+0x9/0x20 [ 1062.159161][ T32] ? security_capable+0x7e/0x2c0 [ 1062.159197][ T32] genl_rcv_msg+0x614/0x7a0 [ 1062.159234][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1062.159260][ T32] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 1062.159307][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1062.159374][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1062.159405][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1062.159459][ T32] ? down_read+0x2be/0x330 [ 1062.159496][ T32] genl_rcv+0x28/0x40 [ 1062.159523][ T32] netlink_unicast+0x7bd/0x940 [ 1062.159570][ T32] netlink_sendmsg+0x813/0xb40 [ 1062.159605][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.159638][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1062.159676][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.159698][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 1062.159727][ T32] ____sys_sendmsg+0x54e/0x850 [ 1062.159766][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.159809][ T32] ? import_iovec+0x73/0xa0 [ 1062.159844][ T32] ___sys_sendmsg+0x2a5/0x360 [ 1062.159876][ T32] ? __lock_acquire+0x747/0x2de0 [ 1062.159906][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.159944][ T32] ? futex_wait+0x2a2/0x390 [ 1062.160013][ T32] ? __fget_files+0x2a/0x420 [ 1062.160238][ T32] ? __fget_files+0x3a2/0x420 [ 1062.160286][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 1062.160322][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1062.160380][ T32] do_syscall_64+0x166/0x520 [ 1062.160409][ T32] ? trace_irq_disable+0x3b/0x140 [ 1062.160433][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.160458][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1062.160487][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.160511][ T32] RIP: 0033:0x7f5f3499e159 [ 1062.160532][ T32] RSP: 002b:00007f5f35881028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.160559][ T32] RAX: ffffffffffffffda RBX: 00007f5f34c26540 RCX: 00007f5f3499e159 [ 1062.160577][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 00000000000000c6 [ 1062.160593][ T32] RBP: 00007f5f34a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1062.160609][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.160624][ T32] R13: 00007f5f34c265d8 R14: 00007f5f34c26540 R15: 00007ffe89950818 [ 1062.160671][ T32] [ 1062.160733][ T32] [ 1062.160733][ T32] Showing all locks held in the system: [ 1062.160792][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1062.160871][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1062.161048][ T32] locks held by getty/5373: 2, on CPU#0: [ 1062.161064][ T32] #0: ffff88803566c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1062.161187][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1062.161253][ T32] locks held by kworker/u8:30/11613: 2, on CPU#0: [ 1062.161271][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1062.161337][ T32] #1: ffffc900063bfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1062.161419][ T32] locks held by udevd/29128: 1, last CPU#1: [ 1062.161436][ T32] #0: ffff88801f28e460 (sb_writers){.+.+}-{0:0}, at: try_to_wake_up+0x67/0x14d0 [ 1062.161497][ T32] locks held by kworker/u8:17/30170: 2, on CPU#1: [ 1062.161514][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1062.161578][ T32] #1: ffffc90006077c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1062.161665][ T32] locks held by syz.0.6586/30478: 2, on CPU#1: [ 1062.161682][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1062.175317][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1062.175400][ T32] locks held by syz.1.6800/31243: 2, on CPU#1: [ 1062.175417][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1062.175476][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 1062.175538][ T32] locks held by syz-executor/31515: 4, last CPU#0: [ 1062.175555][ T32] #0: ffffffff8ee363b0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 1062.175618][ T32] #1: ffff8880778e9d38 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1062.175720][ T32] #2: ffff88805f9f1078 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1062.175797][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1062.197688][ T32] locks held by kworker/1:26/3338: 3, last CPU#1: [ 1062.197706][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1062.197768][ T32] #1: ffffc9000648fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1062.197830][ T32] #2: ffff88807b11c250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1062.198009][ T32] locks held by syz.2.8179/4283: 1, last CPU#1: [ 1062.198027][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 1062.198085][ T32] locks held by modprobe/4292: 1, last CPU#0: [ 1062.198101][ T32] #0: ffff88805f9f1d38 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1062.198170][ T32] locks held by syz.5.8181/4295: 2, last CPU#1: [ 1062.198187][ T32] #0: ffffffff8f58b3c0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: __debug_object_init+0x2ea/0x3c0 [ 1062.198307][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 1062.198377][ T32] locks held by modprobe/4297: 1, last CPU#1: [ 1062.198393][ T32] #0: ffff88804f7103b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1062.198469][ T32] locks held by sed/4298: 3, last CPU#0: [ 1062.198485][ T32] #0: ffff88805f9f03b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1062.205557][ T32] #1: ffffffff8f58b3c0 (fill_pool_map-wait-type-override){+.+.}-{3:3}, at: debug_object_activate+0x364/0x420 [ 1062.205635][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1062.205700][ T32] [ 1062.205707][ T32] ============================================= [ 1062.205707][ T32] [ 1062.205731][ T32] NMI backtrace for cpu 1 [ 1062.205747][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1062.205771][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1062.205786][ T32] Call Trace: [ 1062.205795][ T32] [ 1062.205805][ T32] dump_stack_lvl+0xe8/0x150 [ 1062.205841][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1062.205947][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1062.205986][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1062.206014][ T32] sys_info+0x135/0x170 [ 1062.206047][ T32] watchdog+0xfd7/0x1030 [ 1062.206079][ T32] ? watchdog+0x1c7/0x1030 [ 1062.206111][ T32] kthread+0x38b/0x480 [ 1062.206135][ T32] ? __pfx_watchdog+0x10/0x10 [ 1062.206163][ T32] ? __pfx_kthread+0x10/0x10 [ 1062.206191][ T32] ret_from_fork+0x514/0xb70 [ 1062.206217][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1062.206238][ T32] ? __switch_to+0xc89/0x1420 [ 1062.206286][ T32] ? __pfx_kthread+0x10/0x10 [ 1062.206309][ T32] ret_from_fork_asm+0x1a/0x30 [ 1062.206359][ T32] [ 1062.206397][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1062.206434][ C0] NMI backtrace for cpu 0 [ 1062.206448][ C0] CPU: 0 UID: 0 PID: 4298 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 1062.206470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1062.206482][ C0] RIP: 0010:__lock_acquire+0xb06/0x2de0 [ 1062.206505][ C0] Code: c7 c6 27 cd 53 8e 67 48 0f b9 3a 90 31 c0 48 83 78 40 00 0f 84 73 1d 00 00 49 8b 45 20 25 ff 1f 00 00 48 0f a3 05 0a d9 f7 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 d0 14 3c 94 eb 32 83 3d d1 68 [ 1062.206522][ C0] RSP: 0018:ffffc900037feb58 EFLAGS: 00000003 [ 1062.206539][ C0] RAX: 0000000000000007 RBX: 000000000ea576ba RCX: 000000000fe53d80 [ 1062.206552][ C0] RDX: 00000000f40e1e5c RSI: 0000000075fe7b6b RDI: ffff888028d40000 [ 1062.206566][ C0] RBP: 4b388fc700000000 R08: ffffffff8177f1df R09: 0000000000000000 [ 1062.206581][ C0] R10: ffffc900037fee38 R11: ffffffff81b28ab0 R12: 0000000000004000 [ 1062.206595][ C0] R13: ffff888028d40bd8 R14: ffff888028d40bd8 R15: 0000000000000001 [ 1062.206609][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 1062.206625][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1062.206639][ C0] CR2: 00007f19e0ec0a10 CR3: 000000007cfdc000 CR4: 00000000003526f0 [ 1062.206661][ C0] Call Trace: [ 1062.206668][ C0] [ 1062.206680][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.206705][ C0] ? lock_acquire+0x115/0x350 [ 1062.206726][ C0] lock_acquire+0x115/0x350 [ 1062.206744][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1062.206771][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1062.206792][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.206811][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1062.206833][ C0] unwind_next_frame+0xac/0x2550 [ 1062.206854][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1062.206877][ C0] ? do_syscall_64+0x166/0x520 [ 1062.206905][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1062.206930][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1062.206962][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1062.206981][ C0] arch_stack_walk+0x11b/0x150 [ 1062.207005][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.207026][ C0] ? ptlock_alloc+0x20/0x70 [ 1062.207054][ C0] stack_trace_save+0xa9/0x100 [ 1062.207072][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1062.207089][ C0] ? post_alloc_hook+0x208/0x250 [ 1062.207118][ C0] ? get_page_from_freelist+0x2209/0x2280 [ 1062.207142][ C0] kasan_save_track+0x3e/0x80 [ 1062.207161][ C0] ? kasan_save_track+0x3e/0x80 [ 1062.207180][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1062.207200][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1062.207228][ C0] ? ptlock_alloc+0x20/0x70 [ 1062.207252][ C0] ? pte_alloc_one+0x7a/0x370 [ 1062.207272][ C0] ? __pte_alloc+0x25/0x1a0 [ 1062.207289][ C0] ? move_page_tables+0x1b00/0x1ed0 [ 1062.207309][ C0] ? relocate_vma_down+0x3c9/0x5f0 [ 1062.207333][ C0] ? setup_arg_pages+0x6ff/0xbd0 [ 1062.207359][ C0] ? load_elf_binary+0xc6c/0x28d0 [ 1062.207398][ C0] ? bprm_execve+0x930/0x1590 [ 1062.207425][ C0] ? do_execveat_common+0x4f4/0x670 [ 1062.207443][ C0] ? __x64_sys_execve+0x97/0xc0 [ 1062.207470][ C0] ? do_syscall_64+0x166/0x520 [ 1062.207492][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.207534][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1062.207560][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1062.207588][ C0] ? ptlock_alloc+0x20/0x70 [ 1062.207614][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1062.207647][ C0] ? ptlock_alloc+0x20/0x70 [ 1062.207682][ C0] ptlock_alloc+0x20/0x70 [ 1062.207708][ C0] pte_alloc_one+0x7a/0x370 [ 1062.207731][ C0] __pte_alloc+0x25/0x1a0 [ 1062.207750][ C0] move_page_tables+0x1b00/0x1ed0 [ 1062.207781][ C0] ? move_page_tables+0x5cf/0x1ed0 [ 1062.207808][ C0] ? __pfx_move_page_tables+0x10/0x10 [ 1062.207833][ C0] ? __pfx_vma_expand+0x10/0x10 [ 1062.207852][ C0] ? mas_prev_slot+0xbc5/0xbf0 [ 1062.207883][ C0] relocate_vma_down+0x3c9/0x5f0 [ 1062.207911][ C0] ? __pfx_relocate_vma_down+0x10/0x10 [ 1062.207950][ C0] ? mprotect_fixup+0x972/0xad0 [ 1062.207977][ C0] ? setup_arg_pages+0x30e/0xbd0 [ 1062.208003][ C0] ? down_write_killable+0x17e/0x240 [ 1062.208033][ C0] ? kasan_save_free_info+0x40/0x50 [ 1062.208060][ C0] ? kmem_cache_free+0x182/0x650 [ 1062.208081][ C0] ? tlb_finish_mmu+0x192/0x220 [ 1062.208100][ C0] setup_arg_pages+0x6ff/0xbd0 [ 1062.208133][ C0] ? __pfx_setup_arg_pages+0x10/0x10 [ 1062.208163][ C0] ? get_random_u64+0x49d/0x870 [ 1062.208189][ C0] ? get_random_u64+0x13b/0x870 [ 1062.208212][ C0] ? get_random_u64+0x4d4/0x870 [ 1062.208241][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1062.208274][ C0] load_elf_binary+0xc6c/0x28d0 [ 1062.208305][ C0] ? put_binfmt_handler+0x2f/0x340 [ 1062.208326][ C0] ? load_misc_binary+0x23f/0x15d0 [ 1062.208350][ C0] ? load_misc_binary+0x91c/0x15d0 [ 1062.208375][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 1062.208407][ C0] bprm_execve+0x930/0x1590 [ 1062.208442][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 1062.208476][ C0] do_execveat_common+0x4f4/0x670 [ 1062.208498][ C0] __x64_sys_execve+0x97/0xc0 [ 1062.208528][ C0] do_syscall_64+0x166/0x520 [ 1062.208554][ C0] ? trace_irq_disable+0x3b/0x140 [ 1062.208574][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.208593][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1062.208615][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.208633][ C0] RIP: 0033:0x7f5c54298107 [ 1062.208660][ C0] Code: Unable to access opcode bytes at 0x7f5c542980dd. [ 1062.208714][ C0] RSP: 002b:00007ffc2ca676d8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1062.208733][ C0] RAX: ffffffffffffffda RBX: 00005640ce9da080 RCX: 00007f5c54298107 [ 1062.208748][ C0] RDX: 00005640ce9da0a8 RSI: 00005640ce9da080 RDI: 00005640ce9da138 [ 1062.208762][ C0] RBP: 00005640ce9da138 R08: 00007ffc2ca6ce8f R09: 0000000000000000 [ 1062.208775][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00005640ce9da0a8 [ 1062.208788][ C0] R13: 00007f5c5445de8b R14: 00005640ce9da0a8 R15: 0000000000000000 [ 1062.208812][ C0] [ 1062.261082][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1063.629593][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1063.638725][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1063.648799][ T32] Call Trace: [ 1063.652101][ T32] [ 1063.655054][ T32] vpanic+0x56d/0xa60 [ 1063.659070][ T32] ? __pfx___schedule+0x10/0x10 [ 1063.663954][ T32] ? __pfx_vpanic+0x10/0x10 [ 1063.668492][ T32] panic+0xc5/0xd0 [ 1063.672265][ T32] ? __pfx_panic+0x10/0x10 [ 1063.676721][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1063.682203][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1063.687603][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1063.693797][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1063.699974][ T32] watchdog+0x1030/0x1030 [ 1063.704361][ T32] ? watchdog+0x1c7/0x1030 [ 1063.708805][ T32] kthread+0x38b/0x480 [ 1063.712906][ T32] ? __pfx_watchdog+0x10/0x10 [ 1063.717609][ T32] ? __pfx_kthread+0x10/0x10 [ 1063.722250][ T32] ret_from_fork+0x514/0xb70 [ 1063.726858][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1063.731989][ T32] ? __switch_to+0xc89/0x1420 [ 1063.736696][ T32] ? __pfx_kthread+0x10/0x10 [ 1063.741306][ T32] ret_from_fork_asm+0x1a/0x30 [ 1063.746112][ T32] [ 1063.749299][ T32] Kernel Offset: disabled [ 1063.753638][ T32] Rebooting in 86400 seconds..