last executing test programs: 6.255800219s ago: executing program 2 (id=8484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@var={0x5, 0x0, 0x0, 0xe, 0x5, 0x2}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x30, 0x5f, 0x61, 0x30, 0x0]}}, &(0x7f0000000100)=""/70, 0x3c, 0x46, 0x1, 0xffff}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0xb4, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000006000000", @ANYRES32, @ANYRES32=0x0], 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.955539533s ago: executing program 0 (id=8493): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000400)={{0xffffffffffffffff, &(0x7f0000000080)=',]&-\\\\\x00', 0x10083, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x5]}, {0x3, 0x7fff, 0x8, 0x4}}, 0x10000, &(0x7f0000000100), &(0x7f0000000140)=0x8}, 0x2, &(0x7f00000003c0)=[{0x3, 0x5, &(0x7f0000000180)='/!(\x00', &(0x7f0000000240)="a16fd45759b49a63f91ad5d508ddc48a7b7c3d31693cc06fbec84194bb9af9f321cfe3cb2121a842936de20b970ad67410f9ef098686ec3c3d2ca4ddad86b796c058afde9c4d", 0x46, 0x32}, {0x3, 0x1, &(0x7f00000002c0)='$.$)@!\x00', &(0x7f0000000340)="7c24264e12eed6e9dc475660bb88dd4f6aa6fafebfacbc79d0516424bbc56c5a635e941ba8dd6ad6e4ad9a21e46692a8cb803676cea4532b71a383aa3c405169fb6acf61a44dcf2b22b644e0ba438f7bd06880c3885774975aee9523405edb75b382cd82277a663df946fb061c2023a5f14de359ec", 0x75, 0x20}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r4, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@delqdisc={0x13c, 0x25, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0x8}, {0x4, 0x7}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x110, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4041) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, 0x42, 0x400, 0x0, 0x0, {0x3, 0x1}, [@typed={0x8, 0x11c, 0x0, 0x0, @uid=r6}]}, 0x1c}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000016c0)=0x8000007b, 0x4) 2.901401262s ago: executing program 3 (id=8494): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0xfffffff9, 0x1ff}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xb, &(0x7f0000000900)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xb2}}, @generic={0x18, 0x2, 0x3, 0x0, 0x100000a}, @generic, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.779309642s ago: executing program 2 (id=8496): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x228, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6, 0x2}, 0x0, 0x70, 0xb8, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x1, 'pptp\x00', {0x1fe}}}}, {{@ip={@private=0xa010100, @rand_addr=0x64010101, 0x80000080, 0x0, 'pim6reg\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x6, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x9, 0x7, 'pptp\x00', 'syz1\x00', {0xb98}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010700000000fcdbdf2567"], 0x38}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r4, 0x3, 0x2}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES8, @ANYBLOB="0400000400"/20, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0100000003"], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040040) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r10, 0x5, 0x1, 0xfdb6, &(0x7f00000000c0)='%', 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 2.665696399s ago: executing program 3 (id=8498): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010101}}, 0x1e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x5, 0x7ff, 0x3ff, 0x2, 0xffffffffffffffff, 0x23c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0xf}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000380)=[{r5}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000580)={0xa0000004}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r8, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x56}, @generic={0x0, 0x5, 0x1, 0x7ffe, 0x5}, @ldst={0x3, 0x3, 0x1, 0x2, 0x8, 0x10a, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0xb, 0x0, 0x10, 0x1}, @alu={0x4, 0x0, 0x1, 0x4, 0x9, 0xffffffffffffffc0, 0x8}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8005}], &(0x7f0000000100)='GPL\x00', 0x3, 0x26, &(0x7f0000000140)=""/38, 0x41000, 0x44, '\x00', r9, 0x0, r8, 0x8, &(0x7f0000000180)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[r1, r2, r7], &(0x7f00000003c0)=[{0x0, 0x5, 0x7, 0xe}], 0x10, 0x100}, 0x94) 2.595432033s ago: executing program 4 (id=8499): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x7fffffff, 0x400}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x80000000, 0x3, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xe7, 0x1000, 0x2, 0xffffffff, 0xde, 0x5}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.47509364s ago: executing program 0 (id=8501): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f00000046c0)='y', 0x1}, {0x0}], 0x2}}], 0x1, 0x48070) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x81}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0xfffffffd, 0xfffffffe, {{@in6=@private0, @in=@local, 0xfffc, 0x0, 0x1, 0x0, 0xa, 0xe0, 0x80, 0x3b}, 0xfffffffe}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@multicast1, @in6=@remote, @in6=@local, 0x2b, 0x2, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) unshare(0x22020600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3, 0x0, 0x0, 0xfffffc00}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x14, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214d9ec2c31ce00fcd9df2508"], 0x20}, 0x1, 0x0, 0x0, 0x4004801}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x71, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29b76b0032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.282756575s ago: executing program 2 (id=8503): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000850000002a1800008500000010fff80095000000000000003fc8e750d3a1489a1fcce33dff59f0cc1f8cf047ab498a8f7d43722adb6b879f0c03c59225d957d8c900"/81], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x222}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x80) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 32) listen(r0, 0x0) (async, rerun: 32) accept4(r0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250100000008000800", @ANYRES32=r2, @ANYBLOB="1a4b2496bd02eb1ba0b1849922309746fd64c490db5ca8a87a44b87d2c6621ba78eb8219cfb2c67b06a7fcc3eb91f51fc2ae6fb0f85fcdb87e75cfeb7e670dfa25007999ed2a2a0831a81b9c72988cfeeb6679e7f6ff5fa4d5e4fc3dee775d81863571653f61ef5c1e67046ed4e6944aa15585114a9b19a2107bce969fcce0f76d8c1f827d8f8d63fb66b410b84e08f18487f9a7750263ae6b850f802e8419e9e9fb3b0a422a85b744ce8fc5ce313470325c421f8a3f5238cca0165833137f3929f433a2f8"], 0x1c}}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRESDEC], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) (async) syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa009700000086dd60f57a0d7bd581a3e0140040cf247ec500000000000000000000000000bbff02000000000000ec0000000000000102009078000000006050835900000000fc0100000000000008ff01000000000000000000000000000106000c00"/122], 0x0) (async) r4 = accept4(r3, 0x0, &(0x7f0000000040), 0x800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01062abd7000ffdbdf250600000006"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x20008000) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0xd4, 0x12, 0x5, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x21, 0x0, 0x8}}) (rerun: 32) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x1, 0xb}, {0x0, 0x9}, {0x3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "a3b1ce122ce2c3a1c7c1be3af78e4a13"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@dev, @empty, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000001a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x222200}, 0xc, &(0x7f0000001a00)={&(0x7f0000001a80)=ANY=[@ANYBLOB="e8140000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="1400020068737230000000000000000000000000140002006e657464657673696d300000000000000800030002000000"], 0x14e8}, 0x1, 0x0, 0x0, 0x8011}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00'}) 2.135101676s ago: executing program 0 (id=8504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd, 0xfffffffc}}, 0x44) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, 0x1404, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f00000002c0)={0x2, 0x9}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.kill\x00', 0x275a, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="4c00000011000f14001100020000150002000000200000", 0x17) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r7, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@getqdisc={0x3c, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0x10, 0x7}, {0x1e, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 2.031029751s ago: executing program 4 (id=8505): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000600)={0x0, 0x2c, "eb57b0a26bff21fb4aec43ca9be60fbbed813ecf6c6181355ff42c6f4a65a77029c305778a28f0987c4b3c15"}, &(0x7f0000000640)=0x34) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000680)={r3, 0x7ff}, &(0x7f00000006c0)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000680)={r3, 0x7ff}, &(0x7f00000006c0)=0x8) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f00000000c0)={0xa, 0x2, 0x401, @empty}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f00000000c0)={0xa, 0x2, 0x401, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x0, 0x298, 0x298, 0xd0, 0x1c8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x2, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x0, 0xff6b], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) 1.947255815s ago: executing program 2 (id=8506): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x21, 0x80000, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x3, 0x0, 0x2, 0x3, 0xa, 0xfffe}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffd0d, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0) write$tun(r4, 0x0, 0xfdef) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd56261e20522c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x94) recvfrom$inet6(r3, &(0x7f00000006c0)=""/222, 0xde, 0x10100, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471103e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c75628043f0489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) 1.876818997s ago: executing program 4 (id=8507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0xa) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) sendmsg$tipc(r1, &(0x7f0000000c40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2, 0x1}}, 0x10, &(0x7f0000000bc0), 0x2, &(0x7f0000000c00)="c3ca30b4c1a0ba1f19fc5b5d", 0x5d}, 0x28040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00'/11, @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500060005000000"], 0x3c}}, 0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000080)) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffff) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xc4}}, 0xc000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000040)={r10, 0x1000}, 0x8) (async, rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000900)={{r2, &(0x7f0000000080)='GPL\x00', 0xb0400, &(0x7f00000000c0)={@align=0x5, {0x6, 0x7, 0xe2b, 0xdc50}}, 0x200, &(0x7f0000000100), &(0x7f0000000140)}, 0x6, &(0x7f0000000840)=[{0x3, 0xffff0222, &(0x7f00000001c0)='/-\x00', &(0x7f0000000240)="80b9279ec513fe75671a35932d2c72e46cd4cb77156ad1f01b56da9ed58790dadeb661a28abb187db143f501e8e8e44a4e2940cc232ece3804b35f93783daaf2d1c5623265bda7e11fe4b1be3e8e061a63f298d73826839ac445a2f2487ed8a1ed526e7bdfc8f0d593bc48811993f293ad4c0eed60de020a6c1d962247d1e0bea36d9f1b699637c0854c2cf6b05ccd5f35b813abae686ee6f0429c7a4dfd6fabf20ba960cfe06e49efbb9758db749ccb33c88dce9e884ee7d56b38daf3c4e7223bb42feab050b670ba4f2de3873a92ed97e1ad33ba577e9da2d713ab363264f1ae0846a4977ec0390415c01987c6b4df6b", 0xf1}, {0x2, 0x4, &(0x7f0000000500)='\x00', &(0x7f0000000540)="494931011247a17f4489e98e4f43d42af112b6d21b2bf6f3be7cdeacfbf81680d8867776b0f46fb09cf80e1603540e8e222594cf8479ef603617c1b6189b900d310f9d8307518b62e1cda0", 0x4b, 0x7a}, {0x1, 0x200, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="dd3d297cbf25d2b66594615b66034a7125591afe7a2cc01812cc96b9917490c103f3b6e285b41ab77a08db5c44841861546c1a20b46cde402764a2651db2f19998af2b04d5f14af9c6816cef6f4fefd7c089029c", 0x54, 0x20}, {0x1, 0x3, &(0x7f0000000680)=':S&.\x00', &(0x7f00000006c0)="80fd23433bb59cb82a00720b2bb01892e3862b5a87e37879a26dc4dbedd8b61f741f20982647b1e4e72e63ac63", 0x2d, 0x28}, {0x1, 0x6, &(0x7f0000000700)='\x00', &(0x7f0000000740)="37b2bf3f1d3b55af39f89207cf23a86ac6ad12e4b20b03d076cf3529aad45d84fdc34c128a0381aed229404c5cbd479034f3e3743c0751bc2972272f4ba86ba4f045191f635949db168562ce87c908c6b5d96ce5b71be0de62b08dcfe246a55167ec33556fa7433e4750eee74bd0491924edce6cf6c47b", 0x77, 0x2}, {0x3, 0x8, &(0x7f00000007c0)='}){\xfb-(\x12!\xf0!{-[\\}\\#]\\[,-@$\x00', &(0x7f0000000800), 0x0, 0x8}]}) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.812534393s ago: executing program 0 (id=8508): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r0, 0xf04, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x27}, @void, @val={0xc, 0x99, {0x7, 0x1}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x93, 0xc5, "a9fe9d990f44640cf20da21c4cbc3a2a7fbe1e7f6d1698ca6e42b7f12488edc807d7fcc0b2151a08b5496163bb549d83323e05c6aeed26e1f43bb2de9cdcdf6411ceb9207b163a37922213a6705a5238f4bb50821baf13c565b922a3b800ec8c56be3b28ea6008c61b9c4223ef721b06e2718d42c8d1a9ad45b8c30c0d7865eeae245a5524436b639117af1a49d1d0"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4000080) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x6, {{0x2, 0x4e21, @broadcast}}}, 0x88) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x23}, @void, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000003c0), 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x280, 0x280, 0xffffffff, 0xa8, 0x180, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000400), {[{{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @loopback, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x40, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @remote, @multicast1, @port=0x4e20, @icmp_id=0x68}}}}, {{@ip={@private=0xa010102, @multicast2, 0xffffffff, 0x0, 'tunl0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0xc, 0x2}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x70, 0x40, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="c17660d9f47a", 0x9, 0x10, [0x3b, 0x11, 0x17, 0x40, 0x3d, 0xe, 0x2a, 0x26, 0x2f, 0x22, 0x28, 0x12, 0x6, 0x18, 0x24, 0x3a], 0x2, 0x7, 0x8}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x24, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x64, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r4, 0x17, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xff, 0xa}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7643}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048001}, 0x48010) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000bc0)={'ip_vti0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x286f13aec1c164dd, 0x8, 0x5, 0x3, {{0x13, 0x4, 0x0, 0x3a, 0x4c, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast2, @local, {[@cipso={0x86, 0x35, 0x3, [{0x1, 0x9, "e74e3de3606a63"}, {0x6, 0xa, "33b3e5b0eacedb0f"}, {0x5, 0x11, "99c36b851939ebb422a5305d3e4559"}, {0x0, 0xb, "cebeee0b3bd249e11b"}]}]}}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000fc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000c80)={0x2e0, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x79bb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdf8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x169d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5e54}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x984}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2160}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1de2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x91}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1a4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}]}, 0x2e0}}, 0x4000014) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001000)={[{0x2d, 'net'}, {0x2b, 'hugetlb'}, {0x2d, 'net'}, {0x2d, 'perf_event'}, {0x2b, 'blkio'}, {0x2b, 'freezer'}]}, 0x2f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) r11 = accept4$tipc(r10, 0x0, &(0x7f0000001080), 0x80000) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x35, 0x0, "99270b748342fab0790b063743c06316dc79011f46db3b0a439eed6ed1e26e0c579142159171f72ca233f81113f8853d77199ff4b444007899c89c6b1284d73a2814c2fc4711ea54aac8139bae46c6b7"}, 0xd8) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000011c0)) setsockopt$inet_group_source_req(r12, 0x0, 0x2f, &(0x7f0000001200)={0xfffff000, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) recvmmsg$unix(r3, &(0x7f0000003080)=[{{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/120, 0x78}], 0x1, &(0x7f0000001480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000001740)=[{&(0x7f00000015c0)=""/24, 0x18}, {&(0x7f0000001600)=""/25, 0x19}, {&(0x7f0000001640)=""/38, 0x26}, {&(0x7f0000001680)=""/13, 0xd}, {&(0x7f00000016c0)=""/11, 0xb}, {&(0x7f0000001700)=""/46, 0x2e}], 0x6, &(0x7f00000017c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/234, 0xea}, {&(0x7f0000001a00)=""/253, 0xfd}, {&(0x7f0000001b00)=""/110, 0x6e}, {&(0x7f0000001b80)=""/201, 0xc9}], 0x4}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001d40)=""/157, 0x9d}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/33, 0x21}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/227, 0xe3}], 0x5, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x4, 0x10101, &(0x7f0000003180)={0x77359400}) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000003200), r11) sendmsg$TIPC_CMD_GET_LINKS(r14, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x24, r15, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x52}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) sendmsg$802154_dgram(r13, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000003300)="0585fd1fd075429062d40c065ab8037f3d6e8ae9ab29a1f83f7f3cd2f2fbd7888799a7479dd25efb3fa0809d2eb565ef3d313bd4c908a17fd1871f77b023f5fef001fc7d6985f1e2495f9210d52d224398e06bd0317f749a45f3f2173f9ae5a992bfb912fdf5bfa6f922634f8e2e75da0cd7750e189d82a3fd35027ba2e64dbad3a550ab50014768c64d36151c84f2dfbbb2611be785866acb18dfe3ba66bea19206117f7941f488cbe5370fadf005bc1c2992b19085bde3a5ed8ef1af4896d2daa2b9ea8b446861815c655fc597f092260cd85f607bc1c935eef6b04bc237588531f73b001632ba04f18a", 0xeb}, 0x1, 0x0, 0x0, 0xc5}, 0x4008000) syz_emit_ethernet(0x21, &(0x7f0000003480)={@random="7decfc081d54", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x8654, "0985f788665dff6ed77f07fe1dc07c2246ef51"}}}, &(0x7f00000034c0)={0x1, 0x4, [0x6ca, 0x5cd, 0x907, 0x162]}) 1.571887761s ago: executing program 3 (id=8509): r0 = socket$igmp6(0xa, 0x3, 0x2) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="f8db1ee27885bb20c49bcd899b524606b33cc93c7db2c20b868b07769ccdd0eb0318d868d536fd2637d9e31714095e10f9054d9edd135c2b7ba2987231490abc565cfa44996a10defc24acb98a9895dd", 0x50}, {&(0x7f00000000c0)="4424598f1032a6d9e99423b7dae3c5a264ccb911afafadf67b326a39c0cf0e4bb9f80fefb15a91a235cfb258426870437dc1b97ea4b02f28771508fdf78679d3efd27bace0bf1d2bfe28db6ea7a79a15f1c71a4965fefd271c670a6f8325d53ac10d697c6fc116b0cf040bd6b2de4764d7a8555ed2f3cdc7133054f7bb00d767ca9ae809b8ab43169630a313526f8c5f0e569ff7589f0e14b25de5acf0448e10cf4c7c37032f23a359a2d45b210eeb759891542dcd99c59cc7e4e3", 0xbb}, {&(0x7f0000000180)="98e22f199d37f51cbb807e6cad4c04bfd574086da84c2d2a84a31a8a8fe59b7d4abb9b0a5f27acdbabc33b2ca2b4dc7296abf394af2581a0fd613a983b30aa17acc954da05deb0a5f4ac994cdd8dcd6cd77c0f7056717f4c2a54d59f20a5e0ce83a6f925b9c2d982f9094bdff8bc7669367b9580947b75ffa44c477b80e1503ab2b876f6d15171177af7e4c3bb2699245b", 0x91}, {&(0x7f0000000240)="86e71335e393324f9f30976f670356c455e7e9b24578142c6f71bc", 0x1b}, {&(0x7f0000000280)="f9605dd2e233def4cc460e6d2e10552dae8c149738b2fbc803dfe40b668d83834cf9c12e498f7e7da760fd6f83e8f5c561c7317c9d3f448b428a1e4736cf627fb7d4f3417fb3adfa5c5f52b536a025b9a6466d333edc7a71683f25a1aa91bb3b88e9a248ea8ce5fd5d3989639673e09466f37d93055af473bd68c1d71e0e841619955f408e0d2606f2147c397dba11", 0x8f}, {&(0x7f0000000340)="82972f38726c8032688b2886358e42da9625a24b737d47ec93e3410a3614f9c23262f70b54a1f1a36f0ca9f8a6eb7b2f22dffab365101e543e08b57cb6d558a9dcbff71798167e90863c38ad34f651e006af4d95c333817d5999d50fe0a06741ab961aba0ecd27550779145d12cbcf0fd5049796a9c0aa7f652f40ca7bb787094f0e2d74d614c37e9e50d69f54d3ee670bb94868db73dd0cdddc92e0607255c7a6a2ed66ba7da682cfa4171dfde78d7c10", 0xb1}], 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000000)=0x101) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 1.528511107s ago: executing program 0 (id=8510): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB="7800006700040000000000f9ffff6235cb5bff000000", @ANYRES32=0x0, @ANYRES64], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB="7800006700040000000000f9ffff6235cb5bff000000", @ANYRES32=0x0, @ANYRES64], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r0}, 0x38) socket$kcm(0x29, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000200)=0xc) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe200000000000000000000000000001fe800000000000000000000000000002"], 0x64) (async) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe200000000000000000000000000001fe800000000000000000000000000002"], 0x64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "b27caf000600", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) (async) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @private2}, 0xffff, {[0x2, 0x9, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x44]}}, 0x5c) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x14}, @private=0xa010102}) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0xf67ee000) writev(r1, &(0x7f0000000e00), 0x0) recvfrom(r1, 0x0, 0x0, 0x17, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.486817629s ago: executing program 1 (id=8511): r0 = socket$inet6(0xa, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0xb, 0x20}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7fff}]}, &(0x7f0000000640)=0x10) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r4 = socket$unix(0x1, 0x5, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) unshare(0x8040480) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000050000000100000000010000", @ANYRES32, @ANYRES16=r0, @ANYBLOB="2e2dcb2bfa987507364fa84a0773c5e13410a03f3b21af7c8770a68c3d430635be4dc3696cee9d4b17a6d49c61b88fab8f", @ANYRES32=r3, @ANYRESOCT], 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000ffff000000b70800000d0000007b8af8ff00000000bfa2000300000000b70400000000000085000000010000009500008524a5da52825c8a806603e69a93e7563d76e7e26908382181710b85fd6497360fce10e33cb35ce74bad38cfe5ba0c6dcf05d67ae81545b5391a542991d97ed1916214ca62926863fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r8, @ANYRESOCT=r8, @ANYRES64=r5, @ANYRESHEX=r7, @ANYRES64=r4, @ANYBLOB="4393f9380e85168d", @ANYRESOCT=r6, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r11 = socket$inet(0x2, 0x2, 0x8) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf4}}, 0x40814) setsockopt$IP_VS_SO_SET_DELDEST(r11, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x0, 0xf}, {@loopback, 0x4e1f, 0x4, 0x3}}, 0x44) r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r13, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) 1.299259362s ago: executing program 3 (id=8512): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x24, 0x26, 0x301, 0x70bd29, 0x25dfdbfd, {0x20}, [@nested={0x10, 0x131, 0x0, 0x1, [@nested={0xc, 0x15f, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @binary="4245fbf0"}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4020}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002cbd70000500000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0xa, 0x15e, 0x0, 0x0, @binary="ff7f00000000"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000005e0000b704000000000000850000005700000095"], 0x0}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x4000, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x89}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r9, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x23, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000800000000046000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000005184000ffffffff18140000", @ANYRES32=r3, @ANYBLOB="00000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183700000400000000000000000000008510000005000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000017000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001414163384030000000000008500000083000000bf0900000000000055090100000000009500001000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a00)=ANY=[@ANYBLOB="480000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000200012800f000100626f6e645f736c61766500000c000580060005000a000000080005002ac144dafaf265d2bf84dd55e1994d40f53a281ee6b9f444038682d0c5edea06008fe4af779e651a4e30c7159c5479463b1f4bd118a5c319b918d8b311", @ANYRES32=r14, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.132709149s ago: executing program 3 (id=8513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4101, 0x1005}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002c80)=""/174, 0xae}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000040)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f00000008c0)=""/4092, 0xffc}, {&(0x7f0000000180)=""/62, 0x3e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1ec, 0x0, 0x100, 0xff, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xf, 0x30}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x0, {0x3, 0x6, 0x95, 0x7}}}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x28}, @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x40}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x81}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}]}}, @NL80211_ATTR_KEYS={0x184, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "99f24a22ead1d68fc49fe2cec3"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0xe, 0x4, "5e22ce730f9763668684"}, @NL80211_KEY_SEQ={0xf, 0x4, "9c4e8da30172587871e4c6"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "ae48ce"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0c2502cd25"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "b4053de46dbfa101"}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) unshare(0x400) getsockopt$sock_int(r2, 0x1, 0xc, 0x0, &(0x7f0000000040)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async) r5 = socket(0x8, 0x2, 0x0) connect$bt_sco(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b3b2000000000000000000008510000001000000950000000000000085000000b10000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x51, &(0x7f00000004c0)=""/163, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 868.001157ms ago: executing program 4 (id=8514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000000ec0)=""/225, 0x0, 0xe1, 0x0, 0x1}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 654.940923ms ago: executing program 2 (id=8515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) r2 = epoll_create1(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) sendmmsg$unix(r7, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [r8, r8]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x50, 0x40800}}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e23, 0x1, 0x4e24, 0xc, 0x0, 0x80, 0xa0, 0x2f, r6, r10}, {0x4, 0xfffffffffffffffc, 0x0, 0x7, 0x7, 0x1ff, 0x5, 0x4}, {0x1ff, 0xa743, 0x7, 0xffffffff}, 0x3, 0x6e6bb4, 0x2, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d5, 0x2b}, 0x14, @in=@multicast2, 0x0, 0x5, 0x0, 0xe, 0x7, 0x8, 0x6}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111bc000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) accept4$alg(r0, 0x0, 0x0, 0x80000) (async) epoll_create1(0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) (async) sendmmsg$unix(r7, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [r8, r8]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x50, 0x40800}}], 0x1, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e23, 0x1, 0x4e24, 0xc, 0x0, 0x80, 0xa0, 0x2f, r6, r10}, {0x4, 0xfffffffffffffffc, 0x0, 0x7, 0x7, 0x1ff, 0x5, 0x4}, {0x1ff, 0xa743, 0x7, 0xffffffff}, 0x3, 0x6e6bb4, 0x2, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d5, 0x2b}, 0x14, @in=@multicast2, 0x0, 0x5, 0x0, 0xe, 0x7, 0x8, 0x6}}, 0xe8) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111bc000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf82}, 0x94) (async) 612.393476ms ago: executing program 4 (id=8516): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x1fffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="1400000016000b63d25a80f77311d12022508ec9a280c1877fb9494b3efd6422b3a1471c070000000000000036a8ec7284e9dfa4b143947091460dfed9682a69b7bf85496a94ac7112c28b08d44b0045d1fcb429e2ec1e9c50e35076de3005251d18ff1c7cc04617871e6bf72833bbcb401f3b770a565f40920055535cd3bf29b167a87d03372f25f602f6d4241d514230dbedc2fbf390266b0d031f00977dc116e966d4b0c2106b8febbfc97038253fc92255723d706166950fa8", 0xbb}], 0x1}, 0x20000080) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"95e0fcc3958bed6dec4ae4e25503b72f", 0x0, 0x0, {0x10, 0x7de847a6}, {0x4, 0x2}, 0xff, [0xdd, 0x9, 0x7, 0x7, 0x3ff, 0x1, 0x6, 0x6b, 0x735, 0x6, 0x6, 0x8, 0x9, 0x2, 0xe, 0x9]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) sendmmsg$sock(r0, &(0x7f0000002f80)=[{{&(0x7f0000000040)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000140)="5bcd99f65fbca1685b62be0fc1bb433be53153cd46dd5e8a04f5080ce89baf7bdca094e5a91e4043473e28e3a68850850c01626c300ecc22572b6d9faad19e7e904cdf3e1d34d98a8b79d3a271b7a5c7a64329c2f2625b50e3f582e14e20fcf7ff5f411db7d0855e11e416726fa805a259b42f90b51360ce053ebd6a5b7a8b3a53d2a6537e5a9ec88f0505b53a69dfdb25fc610934703b2c322e0c6265299e15cc18b890637ccc89cc8be349588e07984dacd09e6ccc4fd2868a9bf0cc17a76b6615242bdabe17e925c95029923106d4665e8bbd200e65b9d2cd35e1", 0xdc}, {&(0x7f0000000240)="8881f56385c167db15c6847c447fd748f4da5e729da2f920299aa0c50f428691ba0096bb84806545feaf7f1d2dac573100bbc8641a0ad2c41a424fa636ad137cbcf995aeeec6c3ec5d6e67c86f8eb45f64f0968dac27e618db06ea5fac143255bda3ee027e8948ca5efbedbb03a17e3539df7e939e3e515fa4ba727f60005a63eec4f9908e113e8d1e66d12f12243762aa168c10a20c4941c8764ae99a139fd51981", 0xa2}, {&(0x7f0000000300)="ef7bb90657c3c7158ec5f2c6151462f4614696f1d8d778615a4211249960fc83a999300ba97bd2", 0x27}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="c833dfb07270258832620668", 0xc}, {&(0x7f0000001540)="aa18c88210e7e22ef6961b21917a58a4f64a1b44cbbc819d2ee8e3723637786479b5ec2d4d1e6117893fc3dd16e3781972d0b26f8535ce32716fc95cc326ec4e004bbd820cbe24f172e19eb2409e4811cae01d3cd5fefa89", 0x58}, {&(0x7f00000015c0)="5953da9334855dda23f5c470486f365aeae7b4aed04d9cd89cf32d73ce0538c7724a916cb391f5bfac3c8e5cff670016b6ff3f5f3ac2f18d14b1a7a5ce92b1c74fb2b397f840723eb60b7ef0e33e2626cfd7835ab68611ceb0ed11c387", 0x5d}], 0x8, &(0x7f00000016c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}}, {{&(0x7f0000001740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x0, 0x2, 0x0, 0x4, {0xa, 0x4e22, 0x7, @local, 0xf}}}, 0x80, &(0x7f00000017c0)}}, {{&(0x7f0000001800)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001880)="15e7f84009032f86ab6fec1c17228f21411cbacfd6d81847e849c1af67daca125bbb82506a24ecd70bdbef742c68d498b2b4d7f93c7d84ec64400c41d613ee09cf8c2ce6809270dcc65101f25454f4963eda08ab237acfee0f4b9b0927fa3dd72a572bc42849060ef14146594b391cb988361ea6d6e26a6bebfe46767645ada8b66fe71a58c3dae08ab0dd5e7da39a0ddb0b35676339d023cb46002f27c704fb129ef8f3f3e113", 0xa7}, {&(0x7f0000001940)="626793f657511fcc1e1407f0b92870cb5e729352d2d830beec12708f167096b85d6909cfb1f29f152505e74acc7afa6698947b5d2f8f1b0990a2ea0f89edfc2a83a5cdaa7efdb67d4c02157ac6aa3070422148f93b7d48ea4ad5b9dd1021c2cf29dcaf8b40853004485449f4c4ca695105fc47542ce9a8afedc575d8d442362773b89e34b4d66b7f163772a93f83976280fb1933f17f748ace93372d268632f5c9eced129879b15d553a6359271145634bf750a2e1fb2a45b635b21554869db8f243b7e9499664f841b5e52015b4c9", 0xcf}, {&(0x7f0000001a40)="f35c25a4135953d9cd78d69cd96921a4f4fcef1e560a09165760", 0x1a}], 0x3}}, {{&(0x7f0000001ac0)=@isdn={0x22, 0xed, 0x1, 0x6, 0x8d}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001b40)="d0478ff6d6ea3eb93938", 0xa}, {&(0x7f0000001b80)="e0ec85495cf5bc09ae08d70bbff74a35b1d1153a4da3b3f323adcd03ab4cdbaadd16209637cc01492813e9b35401a3b1883c94ba9b7bfcd79839355096f8f72dd6e6659a95fcf9733b7803908fef41116201a200b97e53cadc2b88e59a4db5d36113dde6c953ca1421833295745274e591055f8ce144d49a1503067bde4b6584c448f5", 0x83}, {&(0x7f0000001c40)="cbb99b774ac3238171901fac1fa426e7330b311a1fb9ad61aa9d5f3d93e0d280317f6219dfc32217e5158c0eca5d3dd05f68591e81fca552e649abd9d1f82190b899f383c7f4d858ea53905652653adce5abf8b8e205bfab83f089a8c73dbca9fed51faa27f0707fffe8dc1031d9770c3e98d5aa7e2e56ed02ef5673d219c189d65022245b72c16e520f59c257f1345b3c3380f3b580c12edf648e74abf6c4fd811171c748dbdfb682420d16e744617dcc3071f018e5c6f2fa97a4695063a76add636b8f90866f63170b34c79f8e0a615a6c078e4bdbc14ddb5381f117129772dbbcd4abdc7a85af72babaace058e130ec5f", 0xf2}, {&(0x7f0000001d40)="c1b17de216d0a08e4c890cc87a67c08204315b9868993f0ea05a3f34ed0295b3c80c0ecc464afdbd4167f6110fbbbc5ba4e9b2aafee653025d4a24862dc7b646c96cd205aa8b65e20d93654318078ed2586824681ebc5518558f8310b3b22674476963277e8bbd7cd8972fa6d1980a505cb71c01bd54e3cfd98220f4f625c28b221bb636349af265b8772fff8250bff414934f2eb7d4778887e2e64ff1447e4aff861ac22cddd299f3ca9e7ce1277ce3d4d6", 0xb2}, {&(0x7f0000001e00)="bcee6b03f3a7c8d644cbf9edd11b6f18a4f87ea8e7f12b7c71c91caebcf0202462af3998f39e41c7a225c8c9bad8e7f7f7b910fc83c76b0974df990ad30c828d24972c64b64a66ff6aa2af87c7605a4fd0db431724e2791573793206c3552f6b53645b2ac785e460b39d1019fc28886f4effd9a49c54b26f65052642b74d1f2e47edfd76bfbac1ee3a44a2f5f19e850b12c43acbb11538a8b1f94cbb1be0b796b0eaf1c45168ff581c0e09b0a4cda92c66b27fe7475a3dac2bfde998c9daf4462aaa62a3c0cb3bd7ebb7c3febd61ba60fbe7c3a259b4a057100585ae3a00cbc242654fa388d69859a0d2bb99667a99d990a56fa918", 0xf5}, {&(0x7f0000001f00)="740c732257716e52832f37d3d0af4975990a81a28059bdc19e842c28adf27de8816cbc696dd0034c29d5d2f5b5268a0027eff8739bbedf779735c8fb21c9ee63ecfd", 0x42}, {&(0x7f0000001f80)="0de841ba4fab4557c0faebfc2a5f5b39b2711001d08df062375cd7c7b27d8e3e49a26766b71fa494f112eb068b5ff8f9beecd3d4a3c70295", 0x38}, {&(0x7f0000001fc0)="ef44247f7c1334bd37ee8ee306f7c1b9feb0e1e89092a1a11f5e0094e89a77959916be28a5635940b7f31c1bfb9e74c82763bbfe39fef787373f377ad019e267189e123b0c3d36436b7552da267b473f", 0x50}, {&(0x7f0000002040)="f5a695203e44e8ebc99ad2daf794475cadb06760a0b4fd450dc6e0e2670d57cef2813fab57282572e208ccef9fe7732b24bece98552fa9fbff2d294e3269e853dc867eeff910ff08cf037681e27fea6739bf811711a46e5dae48a2e8a3aa0d8fd71fa3049e3e8f8e4925b5a8dabf1b048bc2ca76b3ee1fbcaae171ba32e136fc1ea4fb39c613534275e3d4a12267dfff352771a82dff6dd480982b0ea1a3c0a04eaaad624660e4600796c06e84b422391be819e24f820e3cbaa0d66d8b75b70edf58630b2c", 0xc5}], 0x9, &(0x7f0000002200)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8d8d}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x810}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}], 0xa8}}, {{&(0x7f00000022c0)=@isdn={0x22, 0x7, 0xa, 0x6, 0xfd}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002340)="c3682c415eaa845cc0153b373c4d4c36737365eec9f722ff8893615a12ead339d65c4119e9c44b08240badf124cff267fbff07af9042596ad57a3053811db67ac51aa372a3c89a3e4e6d9a43e8259a79e212f86810b663e9f9f8a830bbc9d8eb6646038d33171fbd0e49ac7bb56a055ba406595ec9d44561b42e3e5459548f124dbcf64a2713252c493b2ce982808fe43347b12b95817215138f0d5f2a0d1faef98c1c32da162d21c09574ad95d5d9c89079844b095d848e3a59880d4147ec41a5c57b228d41", 0xc6}, {&(0x7f0000002440)="fc60f8f3f56865242297c63c25ee3b266194b5d7dccf2b6719e13c9f9f321161ba73a052633c3f3b3eeeb494ffa4e90469db29a834229852e473d12821e5f093e95e2750b20fe567e3c72cd64745fcf2592cf95fe2b1a5772b66810ac4", 0x5d}, {&(0x7f00000024c0)="b0f71c584be8cac00d9b7994b9de2e6f3daabf2c300c28aa66745a89b7bea1a91859f54927b3d7b909028f3c3e9a7536e3b4f6f0988dfb1a960f3e76d7974651074f76223d0983428e6c76703ce30e5df5bcd89f73399eb1d3b0545df6fd94941d179230dfd37f0c5ebcfe1a2b8aa60fc82594224101a6f5d7b50edade235bb9be9c9c374ab1234c381bab7b00cbd6fb80b17838589f507b7f9940f6ebcf3ec11c90852be6422608b819be97711573c7c5dc602e1a661093238f6c47d550fddcc9223404828a3172", 0xc8}, {&(0x7f00000025c0)="43365fa09516ddacbc3a7c1f8fbe4c2a6f35d612747a21e90801982ec4c92c5ee2d393e5262b811adc45c52faca02f8ae3b696e0de2aa2ca7fe8e264cf932670c308", 0x42}, {&(0x7f0000002640)="0a09619bacb35115ad9f0679956e58c4746662ce91c5b9adedaa8f48b990a94eee807b728cee7640e54b613ac19b5a8a711af1433dcf006e7f85d83599d71fdab2616260f676dfe084a8553abb44081a0ae7e0a791da349db9824197b760d30fc47199b0e7599899afd160c7b569d813a90b0db9bdbae3b8ee40c6c53ec71d", 0x7f}, {&(0x7f00000026c0)="58660f35186a50c54fc29bbeda1fa8fc66e33eb44356d4de62143b4c836d0070e9d9bbf990e2fe0341d1bc9e5eaff4af5fe0bdff9958444f25eebaeb648dea294c42233184be8ffad9587157203609c3728296030d99130a5688f3c4106bfd876330f5423df340ebb9a0b578f1e28724740f44abe95244676cb0d2f1bd4172e07aa74e14497eb0d0c50ff5199c03f2ab5bc5d8ecef8f046134051d7e73c2a09d0e96f12a179d21bed2b02ea92493ad15d12d8172565a071122a87fbd8db4b66b7ad3f5e2462bd401909dca319fcfd1ceb9ad48c037ed7bfe3d0f18e9b446c4c91411b4ba859b12130cf8555809eb", 0xee}, {&(0x7f00000027c0)="c063be12a29c3e0d9f622a9fbcc79ffca646b9d57ac82cb79d5c841824a4d81195709378a7d6c6368ba6aa1bcfdc809cda1ddd651607293b5912d0e0a18593a1c8ad3a05ee9ffd1d6c5b62ad27d489d2a0e164f4710d532a031115a42229876096f3477ebcd93a75d9244853a1e782fccb21e67e8c325300415732852dfb82b349731b4af60dfe832bb52940b6bfe7528f76553e0de1b0ae4100cfce8664a6e4fd318086117df214fc6f96afb2e09f679642f77baedc2ed069dc", 0xba}, {&(0x7f0000002880)="e389a6102f1fefe1c97fa1a64414d05015c7f216f2b11ff68a92f4d83f609bb85781ea62b659b1da5145c498d814b0a9d9336966609ad6e48d8277d27e71ae28ac2698a5d66e687345a25cc589ffa7f86be52c47aedafef7eefd78cf3abdb411d6b8e33975472754ffa06150757c5ecb850638070c5073fc4f2c00f1cfaec425b6bc282eb5527a1e9848c0f3b9e5e0a5121e43892246d4b5bfffc5d3d634765632e2428f5bc51ce3b2d31869cb2f69051082ed6fcc0bb2ce8229fc1097fe67fc9d4e663b7f643d536a95683c8ddb9f869ee55c6f4303fe49f94fd040c914d835651ec70f8e10ad835c079e692c", 0xed}, {&(0x7f0000002980)="afb0e9072eb53e150b564b86538fcdb9755322fd994f908eb832b7c32ded9bf07547ba9b536d132fcc831f561e35f757748ad636c1dc04635ef642c7cafca20d98d228397600d862aa1755bab27417a35435f842525029da45c1879550f1334ec6bbbd89cfed0b893118538b6fad92540e3c12aeb90434060910a6f88cc8726b7c518cd81cbc73fc56903e2c81144c30993fb381c8433deffb8c3c19da83f488efcbcddde83aed8d32a441154cc3d0495fccdfa64835e870", 0xb8}, {&(0x7f0000002a40)="27fd76f03df52f8889483040e410697175ede4530ddd22185d0244b28995b8b4a3bab2ce437c3a298318e57b447ca6ee7a0c6e7c24193fad0aa948f19d4617bb2ca3763cadbf37bfa9738382bad7870ab07ed087863f1047dd4ead71184f81306fcea730b53b711f43e318dcc3e1b8730ff5b31a977328902eb79d63202e50aed57f5febb63fc6194d8bffe9e5130d384396988306b47ccf59bafd115654", 0x9e}], 0xa, &(0x7f0000002bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x3765d9b3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xc0f}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0x60}}, {{&(0x7f0000002c40)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002cc0)="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", 0xfe}, {&(0x7f0000002dc0)="ddcc96977231f23714e1643c5ab6dbc5b3e2fb36199c15a12b430a3041dd97d5db8b58d5125b5c45f764", 0x2a}, {&(0x7f0000002e00)="8cf907afabbed7735c6c10409257dadf4b831ad979a748ca79413acd93b54d36e7146629a1571d041982b184ba446cdbd0c49e3bfa3e7d4818c797f167eb653c8ff1af85084607c650ce825118c32036b8ce53e66b3137725c2203110538eef27f3c33e8075157c29d188b104b", 0x6d}], 0x3, &(0x7f0000002ec0)=[@txtime={{0x18, 0x1, 0x3d, 0xe4d7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x90}}], 0x6, 0x8010) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000340)={0xbe3}) 500.617526ms ago: executing program 1 (id=8517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x40) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0x10000008}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r3, 0x84, 0x24, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x818583c5f4911e14, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0x1e}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7f, 0xd036d87fd37a00c5, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x10) 299.405849ms ago: executing program 0 (id=8518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x3, @remote, 0x40}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x2, 0x400c055) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000003380)={0x0, 0x3}, &(0x7f00000033c0)=0x8) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, r3, 0x1, 0x7, 0x40, 0x5, "324ad999a592c333dc267708e8c5876f6411ac7926c30b58794795647111d1f8f15a08544f2c96b61f56a2cbf66034ee0c0e2fba4eeb65ffee5d1e3d947a7c", 0x8}, 0x60) 298.753914ms ago: executing program 4 (id=8519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000000c0)={'wlan0\x00', 0xf41b, 0x7fff}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "51ad34d9ea841223e5d0f932af16e921"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 297.41827ms ago: executing program 1 (id=8520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5eeb1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 185.596594ms ago: executing program 1 (id=8521): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) accept$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 136.293654ms ago: executing program 2 (id=8522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x29, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7a}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x4, 0xb4, &(0x7f0000000580)=""/180, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x0, 0x1, 0x400}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[0x1, r1], &(0x7f0000000840)=[{0x3, 0x5, 0x10, 0x3}, {0x1, 0x3, 0x4, 0x8}, {0x4, 0x2, 0x5, 0x8}], 0x10, 0xe89}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000003000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0x1, "d7", 'U-l', 0x15}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x18f1}]}}]}, 0x48}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r3, r7, 0x25, 0xf, @void}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_ACTIVATE_TARGET(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r13, 0x1, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x20040015}, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x14d, 0x0, 0x1, [@nested={0x13, 0x7a, 0x0, 0x1, [@nested={0xc, 0x28, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @u32=0x3}]}, @generic="a96c45"]}]}]}, 0x28}], 0x1}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x0) 88.070895ms ago: executing program 1 (id=8523): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008d0000000000000003fa000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00006a00000086000000bf0920000000000055090100ffffffff950000000000000018000000000000000000000007000000bf91000000000000b702000003000000850000002a000000b70000000000003e95"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="180000008d0000000000000003fa000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00006a00000086000000bf0920000000000055090100ffffffff950000000000000018000000000000000000000007000000bf91000000000000b702000003000000850000002a000000b70000000000003e95"], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) (async) 86.691373ms ago: executing program 3 (id=8524): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x1, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a01020000000000000000010020000900030073"], 0xa8}}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000020000000900010073797a30000000000900020073797a3000000000080003400000000320000480060001"], 0xa4}}, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000280)="2267ca47a81c719ca900a5ee397510ed7e0591b75840f95e1ccfe2ec31df70231eb902ce8ecb2e731c86f423449d28876af079f3f69bad781dc7926bfe1050a01706cba50c749344e191e06075e13e1dce4c55f6283315dd86750fb4acf20904f83f2904240621e356b28aa8775fa1a4df9dff29eb072cb9d037", 0x7a}, {&(0x7f0000000540)="412458704f14c55d1b76bbfba4f575237976c60874d8b417998bc4f440f9569b19c9956a7edbc684a60b9814943e0380099c652ee1a1835e03855b5a9fe594ff25dd5ec65ab25bba0348cd16488b5f48f2be979d4cace9928545ef1b5a293abd119c6e811bbda3767b0078ac57132013705695551eb7952c4428f22f34b738ad800777c8ddd79cc1139f1d65609f8c057f1b83848066a943303be610f30baf1beb73055be95a3d55321f37889b1009c8afcaf5f84d640628dfbbae3f0817e00988ef67f1f34aada14e", 0xc9}, {&(0x7f0000000640)="b615f58d109c45555a41", 0xa}, {&(0x7f0000000700)="6a664a86b4632527c4b7ebfa1e00cff061d2f24c1de82bfcf090c762fb6ad30b9058dab577f57b53f5c989c0eb97d314b2712a20b022aff8670a5f40c4275d7ac7722f064f769bdeebd2ef488298d83436be1c79acf98dd34b5189abbaa12773e6c65260ce91b54fe7f54dd86f9a7d4f60829a3e723ebaf34d68eed52fddc1b561c9a0a4841c4dcf43bddc6922", 0x8d}, {&(0x7f00000007c0)="cbe1762e87ad0702a74a963fd42149f81b8997cadee22ab277d948784ba6493390148228a13332ec20e560fb44d1a1732f6dee2d91e119ff3ebee281de9edb4068c6dbc2aa2b88cdb3e74d293634cc5981f75210868a63c422a0f2e29afc4f890b50a142eb69fa84e51874accb853cfda2b7f0cc90cb16ab8abeac20a2eaf5a4291366f074edd9361543bd7cb27741c84e7da1d4384fc89c200f4ac9308936017faddfced9bb92a4da60b902b3e133818ccf39bd8baf3300987f112be6d19bf0bfa9030f67c557dafbb91f453eabccee11bd332b2e58ec97d74390b3b0dea84856", 0xe1}, {&(0x7f00000008c0)="0946f156f3c6934c025ba2aa0931b963563c7fde4cbeb8029b8cf837715d6e9619a796c4954b31b41e3987bca5bf21708523c7d19711c9710658c854902f1ed6cd5eecc717a6bbeafbaaa9cf8feab468bca058104be63f1257fed5e94146b57a8dd9d3d896dc0a8f6a71242130842105fc673c253b35020accadb0ccd12e4f653099faba5977bea977c741787c3b85597a98ea02fbadf54c498c99dc1a07189058954b322f0f3f13cae61a308b390771a090d94c3b702c18ba07a96100d719b2de01ff9291185cafd05869f2b0beb5f6aee244820ccc5403b05530d4", 0xdc}, {&(0x7f00000009c0)="4eb218bfcf46eeda5303185e06570a30b8738ded1c92e6b33d450d9b2dc0040951135955dc279ea58b1e83ea39a030f2f1d28499e7207d877ee4d56f541c34516a860634e6e9acfe7c2af807c0a9a064be0db58581968593b44df66dbd7bc239cd6912f6122221bd84132dcbae1ae290ec6782add3bc657f2b8479fa0a51292926a67694a679", 0x86}, {&(0x7f0000000a80)}], 0x8, &(0x7f0000001c40)=[{0xa8, 0x88, 0x6, "72452c7d9c52ef02a6b2a9b20469e36fd174d72c15a5cb5669f82d485b4c7294a2f00a4fc0fad18cff63268dad850ae85ca9391deaffc8490935aa7171958af011901db2a52682f766fbb19c285e8d33899a624c86612b5852e89f3c42c5213284fbf7ab20e275425200a160a966299a80791f89ed52d28c0d62161ac8c44a8ef30e7c3df9bd881abdfaa4a54cc3035f4f6365b587"}, {0x88, 0x11, 0x8, "eb7168d61555846ae680ffcbad65297447da7f3b5f1757fb2355f1dc19b907cd65fbd8e44ec5e9c66aadb0cb84658f813ab5cad25f19e47f7aaeed672656aace56b2d56d63bb7522eb94bf993259d9a19a50b281872623033b0a8c80622655e164313c57fce9502593227805e12c9f3f62c6276465"}], 0x130}, 0x880) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$inet6(0xa, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32=r6], 0x24}}, 0x0) r7 = socket(0x2b, 0x1, 0x1) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@private1}, &(0x7f0000000100)=0x14) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@lsrr={0x83, 0x3, 0xd9}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x2, [0x0, 0x0, 0x0]}, @ssrr={0x89, 0x3, 0xfa}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6af}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x60) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x5}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x1000, r2}, 0x38) 0s ago: executing program 1 (id=8525): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r1, @ANYBLOB="312000000000000014002b80080002"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000280)={0x8, 0x3, 0xfffffffffffffffd, 0x9, 0x800, 0x5}) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r4, @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001900010027bd70000000000000000000000000000000000000000001fc020000000000000000000000000000000100000000000001ffffff2f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f000000000000000500000000000000020000000000000801000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r6 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/166, 0xa6}, {&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001980)=""/4097, 0x1001}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/133, 0x85}], 0x8}}], 0x4000000000000ab, 0x40010122, 0x0) write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x38}, 0x94) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="74050000", @ANYRES16=r9, @ANYBLOB="00012bbd7000fedbdf2501000000050006000700000014000100fe8000000000000000000000000000aa050006000600000018000400df8f000007000000060000000f000000feffffff0800030000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c110}, 0x8040) (async) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f00000000c0)="510003000000", 0x6) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000500)=0x1, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffff98}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000180)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): to HW filter on device bond4 [ 1222.519356][ T5478] netlink: 'syz.3.6845': attribute type 2 has an invalid length. [ 1222.519375][ T5478] __nla_validate_parse: 3 callbacks suppressed [ 1222.519386][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6845'. [ 1222.519401][ T5478] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1222.566283][T31800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.566380][T31800] bridge0: port 1(bridge_slave_0) entered listening state [ 1222.569968][T31800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.570061][T31800] bridge0: port 2(bridge_slave_1) entered listening state [ 1222.798792][T31798] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1222.807569][T31800] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1222.807826][T31800] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1222.807913][T31800] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1222.971835][ T5498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6854'. [ 1223.098101][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 1223.249879][ T5502] syzkaller0: entered promiscuous mode [ 1223.249907][ T5502] syzkaller0: entered allmulticast mode [ 1223.538667][ T5531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1226.076311][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6877'. [ 1226.082780][ T5565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.209059][ T5568] syzkaller1: entered promiscuous mode [ 1226.209082][ T5568] syzkaller1: entered allmulticast mode [ 1226.410944][ T5579] pim6reg: entered allmulticast mode [ 1226.512399][ T5592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6885'. [ 1226.670865][ T5600] x_tables: duplicate entry at hook 1 [ 1226.681252][ T5596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6887'. [ 1226.799072][ T5606] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6888'. [ 1226.799453][ T5606] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6888'. [ 1227.020488][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6891'. [ 1227.138762][ T5618] bond1: entered promiscuous mode [ 1227.139310][ T5618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1227.192768][ T5617] bond2: entered promiscuous mode [ 1227.199079][ T5617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1227.211717][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6895'. [ 1227.212780][ T5626] netlink: 'syz.2.6895': attribute type 1 has an invalid length. [ 1227.266614][ T5626] bond1: option mode: invalid value (8) [ 1227.275176][ T5626] bond1 (unregistering): Released all slaves [ 1227.447844][ T5638] pim6reg: entered allmulticast mode [ 1227.451984][ T5640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1227.476958][ T5641] netlink: 'syz.3.6896': attribute type 1 has an invalid length. [ 1227.612876][ T5647] __nla_validate_parse: 2 callbacks suppressed [ 1227.612900][ T5647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6900'. [ 1227.660540][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1227.662237][ T5650] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1227.826159][ T5666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6904'. [ 1227.914892][ T5664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1227.914935][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1228.872390][ T5720] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1228.872408][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6913'. [ 1228.970013][ T5720] tipc: Enabling of bearer rejected, failed to enable media [ 1229.097969][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 1229.149871][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6921'. [ 1229.285982][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1229.420596][ T5766] ip_tables: iptables: counters copy to user failed while replacing table [ 1229.440501][ T5766] tipc: Cannot configure node identity twice [ 1229.516638][ T5771] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1230.379672][ T5805] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 1230.538059][ T5814] netlink: 'syz.1.6938': attribute type 30 has an invalid length. [ 1230.558120][ T5814] vxlan0: entered promiscuous mode [ 1230.558140][ T5814] vxlan0: entered allmulticast mode [ 1230.562154][T31801] IPVS: starting estimator thread 0... [ 1230.574404][T31801] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.574444][T31801] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.574475][T31801] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.574507][T31801] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.654052][ T5818] IPVS: using max 31 ests per chain, 74400 per kthread [ 1230.878970][ T5799] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.6934:5799 [ 1230.917802][ T5830] netlink: 'syz.2.6942': attribute type 14 has an invalid length. [ 1230.972139][ T5832] tipc: Enabling of bearer rejected, failed to enable media [ 1231.251352][ T5837] netlink: 'syz.0.6945': attribute type 2 has an invalid length. [ 1231.306872][ T5837] : entered promiscuous mode [ 1231.408604][ T5854] vxcan4: entered allmulticast mode [ 1232.691583][ T5919] netlink: 'syz.1.6970': attribute type 23 has an invalid length. [ 1232.734753][ T5925] xt_hashlimit: size too large, truncated to 1048576 [ 1232.734770][ T5925] xt_hashlimit: max too large, truncated to 1048576 [ 1232.849796][ T5928] geneve2: entered promiscuous mode [ 1232.851071][T21794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.851170][T21794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.851236][T21794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.851272][T21794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.975359][ T5934] __nla_validate_parse: 14 callbacks suppressed [ 1232.975502][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6973'. [ 1233.793545][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1234.205443][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6988'. [ 1234.205518][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6988'. [ 1234.205536][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6988'. [ 1234.205613][ T5988] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6988'. [ 1234.205630][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6988'. [ 1234.245913][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1234.245979][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1234.393728][T21794] tipc: Subscription rejected, illegal request [ 1234.639628][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6994'. [ 1234.761880][ T6017] hsr0: entered allmulticast mode [ 1234.761902][ T6017] hsr_slave_0: entered allmulticast mode [ 1234.761918][ T6017] hsr_slave_1: entered allmulticast mode [ 1234.791449][ T6017] hsr_slave_0: left promiscuous mode [ 1234.793571][ T6017] hsr_slave_1: left promiscuous mode [ 1234.808937][ T6017] hsr0 (unregistering): left allmulticast mode [ 1235.909066][ T6070] ip_tables: iptables: counters copy to user failed while replacing table [ 1235.954830][ T6078] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1236.048780][ T6084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.416163][ T6105] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1237.080496][ T6136] veth0: entered promiscuous mode [ 1237.178311][ T6134] veth0: left promiscuous mode [ 1237.446408][ T6163] netlink: 'syz.1.7030': attribute type 3 has an invalid length. [ 1237.446428][ T6163] netlink: 'syz.1.7030': attribute type 2 has an invalid length. [ 1237.821842][ T6183] macsec0: entered promiscuous mode [ 1237.835405][ T6183] macsec0 (unregistering): left promiscuous mode [ 1237.896392][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1237.897147][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1238.348980][ T6210] netlink: 'syz.4.7040': attribute type 1 has an invalid length. [ 1238.401836][ T6214] __nla_validate_parse: 10 callbacks suppressed [ 1238.401854][ T6214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7040'. [ 1238.473335][ T6219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7040'. [ 1238.495489][ T6210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1238.511585][ T6218] macsec0: entered promiscuous mode [ 1238.531341][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7041'. [ 1238.560815][ T6218] veth1_macvtap: left promiscuous mode [ 1238.589231][ T6218] macsec0 (unregistering): left promiscuous mode [ 1238.746296][ T6231] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1238.767793][ T6210] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1238.783748][ T6210] bond3: (slave bond4): Enslaving as an active interface with a down link [ 1238.811387][ T6214] bond3 (unregistering): (slave bond4): Releasing active interface [ 1238.825690][ T6214] bond3 (unregistering): Released all slaves [ 1239.047172][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1239.047218][ T6244] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1239.051074][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1239.051118][ T6244] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7044'. [ 1239.245189][ T6253] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1239.270736][ T6255] netlink: 'syz.1.7047': attribute type 1 has an invalid length. [ 1239.300113][ T6253] gretap0: entered promiscuous mode [ 1239.320854][ T6253] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1239.321191][ T6253] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7048'. [ 1239.649627][ T6277] xt_hashlimit: size too large, truncated to 1048576 [ 1239.824819][ T6284] xt_hashlimit: size too large, truncated to 1048576 [ 1241.026791][ T6311] wg2 speed is unknown, defaulting to 1000 [ 1241.031203][ T6311] wg2 speed is unknown, defaulting to 1000 [ 1241.323223][ T6346] sctp: [Deprecated]: syz.0.7074 (pid 6346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1241.323223][ T6346] Use struct sctp_sack_info instead [ 1241.447832][ T6351] netlink: 'syz.3.7077': attribute type 8 has an invalid length. [ 1241.754989][ T6367] syzkaller0: entered promiscuous mode [ 1241.755011][ T6367] syzkaller0: entered allmulticast mode [ 1241.907166][ T6372] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1242.230709][ T6384] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1242.547144][ T6398] syzkaller0: entered promiscuous mode [ 1242.547167][ T6398] syzkaller0: entered allmulticast mode [ 1242.586303][ T6398] TC_ACT_REPEAT abuse ? [ 1242.626311][ T6402] nbd: couldn't find a device at index 0 [ 1243.282326][ T6371] wg2 speed is unknown, defaulting to 1000 [ 1243.298197][ T6371] wg2 speed is unknown, defaulting to 1000 [ 1243.472526][ T6406] __nla_validate_parse: 35 callbacks suppressed [ 1243.472550][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1243.539197][ T6406] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1243.849458][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7094'. [ 1243.851864][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7096'. [ 1243.872084][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7096'. [ 1243.872442][ T6417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1244.217147][ T6431] tipc: Enabling of bearer rejected, failed to enable media [ 1244.221367][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7101'. [ 1244.231990][ T6422] netlink: 'syz.1.7099': attribute type 1 has an invalid length. [ 1244.277888][ T6438] tipc: Enabling of bearer rejected, failed to enable media [ 1244.282495][ T6422] netlink: 'syz.1.7099': attribute type 1 has an invalid length. [ 1244.575594][ T6447] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1244.611442][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7106'. [ 1244.897616][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7110'. [ 1245.175784][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7114'. [ 1245.176546][ T6473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7114'. [ 1245.395892][ T6480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1246.535405][ T6533] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7123'. [ 1246.570430][ T6534] bond_slave_0: entered promiscuous mode [ 1246.570456][ T6534] bond_slave_0: entered allmulticast mode [ 1246.572080][ T6534] bond0: (slave bond_slave_0): Releasing backup interface [ 1246.580796][ T6534] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1246.741105][ T6541] netlink: 'syz.3.7125': attribute type 1 has an invalid length. [ 1246.845054][ T6548] bond3: (slave geneve4): making interface the new active one [ 1246.848723][ T6548] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 1246.850669][T31758] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1246.863360][T31801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1246.863611][T31801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1246.863746][T31758] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1246.987569][ T6499] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1247.355095][ T6565] netlink: 'syz.4.7134': attribute type 5 has an invalid length. [ 1248.023206][T31758] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.023247][T31758] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.023279][T31758] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.023308][T31758] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1248.393143][ T6605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1248.639282][ T6618] __nla_validate_parse: 8 callbacks suppressed [ 1248.639302][ T6618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7154'. [ 1248.700081][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1248.781145][ T6631] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7158'. [ 1248.781169][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7158'. [ 1248.821666][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7160'. [ 1249.105364][ T6656] netlink: 'syz.0.7162': attribute type 1 has an invalid length. [ 1249.105400][ T6656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.205818][ T6637] gretap0: left promiscuous mode [ 1249.276151][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.328184][ T6637] bond_slave_0: left promiscuous mode [ 1249.345802][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.347903][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.368588][ T6637] veth1_vlan: left promiscuous mode [ 1249.369735][ T6637] veth0_vlan: left promiscuous mode [ 1249.371367][ T6637] veth0_vlan: entered promiscuous mode [ 1249.391324][ T6637] veth1_vlan: entered promiscuous mode [ 1249.411034][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1249.412289][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1249.429515][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1249.430792][ T6637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1249.431465][ T6637] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1249.484735][ T6653] gretap1: entered promiscuous mode [ 1249.487775][ T6661] dummy0: left promiscuous mode [ 1249.525234][ T6661] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1249.576621][ T6661] ipip0: left promiscuous mode [ 1249.611099][ T6661] bond1: left promiscuous mode [ 1249.671021][ T6661] bond2: left promiscuous mode [ 1249.936684][T31801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.936798][T31801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.939821][T31801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.939930][T31801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.135879][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7171'. [ 1250.135904][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7171'. [ 1250.135941][ T6693] netlink: 'syz.4.7171': attribute type 6 has an invalid length. [ 1250.174308][T26451] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1250.174480][T26451] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1250.174616][T26451] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1250.273603][T26451] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1250.477040][ T6716] openvswitch: netlink: Multiple metadata blocks provided [ 1250.586112][ T6721] sctp: [Deprecated]: syz.3.7173 (pid 6721) Use of int in max_burst socket option deprecated. [ 1250.586112][ T6721] Use struct sctp_assoc_value instead [ 1250.617031][ T6724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7176'. [ 1250.649665][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1250.840623][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7181'. [ 1250.979706][ T6736] lo: entered allmulticast mode [ 1251.012647][ T6743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1251.038479][ T6736] dvmrp8: entered allmulticast mode [ 1251.430592][ T6734] lo: left allmulticast mode [ 1251.912304][ T6802] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1252.078477][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 1252.742474][ T31] audit: type=1107 audit(1790605730.785:33): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f ‡ñ7' [ 1253.226259][ T6876] IPVS: set_ctl: invalid protocol: 60319 24.3.0.0:0 [ 1253.253264][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.253287][ C1] bridge0: topology change detected, propagating [ 1253.253662][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.253679][ C1] bridge0: topology change detected, propagating [ 1254.429592][ T6932] __nla_validate_parse: 40 callbacks suppressed [ 1254.429617][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7224'. [ 1254.507213][ T6925] syzkaller0: entered promiscuous mode [ 1254.507232][ T6925] syzkaller0: entered allmulticast mode [ 1254.511123][ T6937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7225'. [ 1254.598563][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7222'. [ 1254.637850][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7227'. [ 1254.682425][ T6943] netlink: 'syz.1.7229': attribute type 11 has an invalid length. [ 1254.848990][ T6952] netlink: 'syz.3.7231': attribute type 2 has an invalid length. [ 1254.849014][ T6952] netlink: 'syz.3.7231': attribute type 2 has an invalid length. [ 1254.910517][ T6958] netlink: 'syz.4.7233': attribute type 1 has an invalid length. [ 1254.943486][ T6959] netlink: 'syz.0.7232': attribute type 1 has an invalid length. [ 1255.164078][ T6974] syzkaller0: entered promiscuous mode [ 1255.164102][ T6974] syzkaller0: entered allmulticast mode [ 1255.169848][ T1318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.179329][ T6969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1255.328353][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7236'. [ 1255.329947][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 1255.329978][ T6979] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7236'. [ 1255.330379][ T6985] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1255.459557][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7238'. [ 1255.482264][ T6987] bridge0: port 3(vlan3) entered blocking state [ 1255.482463][ T6987] bridge0: port 3(vlan3) entered disabled state [ 1255.482610][ T6987] vlan3: entered allmulticast mode [ 1255.482628][ T6987] geneve0: entered allmulticast mode [ 1255.512305][ T6987] vlan3: entered promiscuous mode [ 1255.512326][ T6987] geneve0: entered promiscuous mode [ 1255.649308][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7241'. [ 1255.780246][ T7002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7244'. [ 1255.958361][ T7012] žÿ: renamed from team_slave_1 [ 1256.329261][ T7029] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1256.399522][ T7039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1256.416023][ T1318] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1256.416070][ T1318] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1256.416108][ T1318] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1256.416144][ T1318] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1256.493216][ T7038] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1256.553552][ T7038] bond4 (unregistering): Released all slaves [ 1256.639487][ T7053] openvswitch: netlink: Multiple metadata blocks provided [ 1256.670370][ T7046] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1256.931811][ T7062] veth1_to_bond: entered allmulticast mode [ 1256.947770][ T7063] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 1257.010160][ T7063] sctp: [Deprecated]: syz.4.7263 (pid 7063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1257.010160][ T7063] Use struct sctp_sack_info instead [ 1257.036457][ T7060] veth1_to_bond: left allmulticast mode [ 1257.297246][ T7075] openvswitch: netlink: Flow actions attr not present in new flow. [ 1258.239768][ T7133] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 1258.456325][ T7135] smbdirect: ib_dev[syÿÿ] renamed to [sy] [ 1258.668669][ T7147] geneve0: entered promiscuous mode [ 1259.476590][ T7182] netlink: 'syz.2.7290': attribute type 10 has an invalid length. [ 1260.479564][ T7197] __nla_validate_parse: 22 callbacks suppressed [ 1260.479584][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1260.479722][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7294'. [ 1260.692251][ T7214] net_ratelimit: 1 callbacks suppressed [ 1260.692275][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1260.914225][ T7220] tipc: Enabled bearer , priority 0 [ 1260.917607][ T7220] syzkaller0: entered promiscuous mode [ 1260.917630][ T7220] syzkaller0: entered allmulticast mode [ 1261.120285][ T7220] tipc: Resetting bearer [ 1261.145737][ T7219] tipc: Resetting bearer [ 1261.182252][ T7219] tipc: Disabling bearer [ 1261.640958][ T7218] wg2 speed is unknown, defaulting to 1000 [ 1261.650945][ T7218] wg2 speed is unknown, defaulting to 1000 [ 1261.769446][ T7246] FAULT_INJECTION: forcing a failure. [ 1261.769446][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1261.771560][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: syz.4.7307 Not tainted syzkaller #0 PREEMPT(full) [ 1261.771597][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1261.771617][ T7246] Call Trace: [ 1261.771625][ T7246] [ 1261.771634][ T7246] dump_stack_lvl+0xe8/0x150 [ 1261.771672][ T7246] should_fail_ex+0x410/0x560 [ 1261.771703][ T7246] _copy_from_user+0x2d/0xb0 [ 1261.771794][ T7246] ___sys_sendmsg+0x1c6/0x360 [ 1261.771824][ T7246] ? __lock_acquire+0x747/0x2de0 [ 1261.771851][ T7246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1261.771912][ T7246] ? __fget_files+0x2a/0x420 [ 1261.771958][ T7246] ? __fget_files+0x3a2/0x420 [ 1261.772001][ T7246] __x64_sys_sendmsg+0x1b1/0x290 [ 1261.772038][ T7246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1261.772096][ T7246] do_syscall_64+0x166/0x520 [ 1261.772131][ T7246] ? trace_irq_disable+0x3b/0x140 [ 1261.772155][ T7246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.772180][ T7246] ? clear_bhb_loop+0x70/0xc0 [ 1261.772208][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.772232][ T7246] RIP: 0033:0x7fbe4099e159 [ 1261.772254][ T7246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.772273][ T7246] RSP: 002b:00007fbe41794028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1261.772298][ T7246] RAX: ffffffffffffffda RBX: 00007fbe40c25fa0 RCX: 00007fbe4099e159 [ 1261.772316][ T7246] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1261.772331][ T7246] RBP: 00007fbe41794090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.772346][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1261.772360][ T7246] R13: 00007fbe40c26038 R14: 00007fbe40c25fa0 R15: 00007ffc5b258f68 [ 1261.772405][ T7246] [ 1262.636014][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7313'. [ 1262.650649][ T7268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7313'. [ 1262.658636][ T7268] netlink: 'syz.2.7313': attribute type 2 has an invalid length. [ 1263.209864][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7316'. [ 1263.261604][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7316'. [ 1263.591595][ T7278] wg2 speed is unknown, defaulting to 1000 [ 1263.606027][ T7278] wg2 speed is unknown, defaulting to 1000 [ 1264.589042][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7324'. [ 1264.749248][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7324'. [ 1264.888758][ T7314] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1264.890457][ T7314] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1264.932847][ T7320] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1264.948083][ T7310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1265.060812][ T7312] syzkaller0: entered promiscuous mode [ 1265.060830][ T7312] syzkaller0: entered allmulticast mode [ 1265.965471][ T7335] netlink: 'syz.4.7328': attribute type 1 has an invalid length. [ 1266.238106][ T7340] netlink: 'syz.4.7328': attribute type 1 has an invalid length. [ 1267.569235][ T7335] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1267.608625][ T7340] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1268.161361][ T7382] netlink: zone id is out of range [ 1268.222224][ T7382] netlink: 'syz.3.7337': attribute type 1 has an invalid length. [ 1268.234895][ T7382] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1268.283451][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7339'. [ 1268.283892][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7339'. [ 1268.529420][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7346'. [ 1268.545825][ T7405] netlink: 'syz.2.7346': attribute type 1 has an invalid length. [ 1268.638188][ T7409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7347'. [ 1268.810311][ T7416] sch_fq: defrate 0 ignored. [ 1268.818745][ T7416] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1269.087003][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7354'. [ 1269.118056][ T7440] vlan2: entered allmulticast mode [ 1269.118076][ T7440] bridge1: entered allmulticast mode [ 1269.120937][ T7440] bridge1: port 1(erspan0) entered blocking state [ 1269.121103][ T7440] bridge1: port 1(erspan0) entered disabled state [ 1269.121241][ T7440] erspan0: entered allmulticast mode [ 1269.156009][ T7440] erspan0: entered promiscuous mode [ 1269.170057][ T7440] rdma_op ffff888029fffa38 conn xmit_rdma 0000000000000000 [ 1269.271708][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7356'. [ 1270.016923][ T7458] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7358'. [ 1270.017314][ T7458] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7358'. [ 1271.969708][ T7429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1271.985609][ T7442] netlink: 'syz.4.7356': attribute type 1 has an invalid length. [ 1271.985628][ T7442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7356'. [ 1271.985989][ T7442] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 1271.992258][ T7443] netlink: 'syz.4.7356': attribute type 1 has an invalid length. [ 1272.003706][ T7443] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR [ 1272.147220][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147293][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147370][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147439][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147513][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147584][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147646][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147712][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147773][ T7465] x_tables: duplicate entry at hook 1 [ 1272.147837][ T7465] x_tables: duplicate entry at hook 1 [ 1272.307212][ T7477] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1272.338941][ T7480] netlink: 'syz.3.7359': attribute type 1 has an invalid length. [ 1272.347403][ T7481] netlink: 'syz.0.7363': attribute type 1 has an invalid length. [ 1272.478131][ T7481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1272.560132][ T7484] bond6: (slave veth5): Enslaving as an active interface with a down link [ 1272.567570][ T7487] lo: left promiscuous mode [ 1272.596704][ T7484] netlink: 'syz.0.7363': attribute type 1 has an invalid length. [ 1272.629368][ T7487] bridge1: port 1(erspan0) entered blocking state [ 1272.629477][ T7487] bridge1: port 1(erspan0) entered forwarding state [ 1272.675655][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.677273][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.678235][ T7487] dummy0: left promiscuous mode [ 1272.742736][ T7487] batadv_slave_1: entered promiscuous mode [ 1272.756062][ T7487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1272.756085][ T7487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1272.760443][ T7487] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1272.775119][T31798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.775212][T31798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.783964][T31798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.784188][T31798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.866448][ T7481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.870100][ T7481] bond6: (slave batadv0): making interface the new active one [ 1272.871570][ T7481] batadv0: entered promiscuous mode [ 1272.872103][ T7481] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 1272.919174][ T7497] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1272.956770][ T7500] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1272.959316][ T7500] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 1273.409814][ T7531] __nla_validate_parse: 7 callbacks suppressed [ 1273.409848][ T7531] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7373'. [ 1273.679117][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7378'. [ 1273.855590][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7379'. [ 1273.855615][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7379'. [ 1273.855645][ T7555] netlink: 'syz.2.7379': attribute type 4 has an invalid length. [ 1273.901414][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7379'. [ 1273.962803][ T7559] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7379'. [ 1274.309296][ T7578] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1274.310410][ T7579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7391'. [ 1274.311736][ T7582] pim6reg99999999: entered allmulticast mode [ 1274.383454][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7394'. [ 1274.410923][ T7588] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001 [ 1274.738410][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7400'. [ 1278.348533][ T7665] IPv6: Can't replace route, no match found [ 1278.520453][ T7672] __nla_validate_parse: 9 callbacks suppressed [ 1278.520471][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7414'. [ 1278.666038][ T7679] sctp: [Deprecated]: syz.4.7418 (pid 7679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1278.666038][ T7679] Use struct sctp_sack_info instead [ 1278.702776][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7417'. [ 1278.704431][ T7680] smbdirect: ib_dev[sy] renamed to [s] [ 1278.731890][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7417'. [ 1278.858173][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1278.858197][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1279.118864][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1279.119809][ T7703] netlink: 'syz.3.7423': attribute type 5 has an invalid length. [ 1279.499678][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7431'. [ 1279.547686][ T7735] syzkaller0: entered promiscuous mode [ 1279.547710][ T7735] syzkaller0: entered allmulticast mode [ 1279.627342][ T7734] tipc: Enabled bearer , priority 0 [ 1279.646939][ T7745] netlink: 'syz.4.7432': attribute type 1 has an invalid length. [ 1279.646959][ T7745] netlink: 'syz.4.7432': attribute type 2 has an invalid length. [ 1279.669397][ T7733] tipc: Resetting bearer [ 1279.699145][ T7733] tipc: Disabling bearer [ 1280.079684][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1280.079709][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1280.128120][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.128305][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.208574][ T7768] netlink: 'syz.2.7440': attribute type 7 has an invalid length. [ 1280.210373][ T7768] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1280.503492][ T7811] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.503529][ T7811] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1280.503556][ T7811] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1280.503591][ T7811] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.503617][ T7811] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1280.503642][ T7811] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1280.504608][ T7811] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.504635][ T7811] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1280.504658][ T7811] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1280.504689][ T7811] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.504712][ T7811] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1280.504735][ T7811] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1280.949252][ T7792] netlink: 'syz.0.7445': attribute type 12 has an invalid length. [ 1281.013356][ T7795] netlink: 'syz.3.7446': attribute type 4 has an invalid length. [ 1281.216118][ T7798] xt_IDLETIMER: timeout value is too big [ 1281.312840][ T7802] netlink: 'syz.4.7449': attribute type 1 has an invalid length. [ 1281.700293][ T7818] syzkaller0: entered promiscuous mode [ 1281.700315][ T7818] syzkaller0: entered allmulticast mode [ 1281.746634][ T7823] can: request_module (can-proto-0) failed. [ 1281.869796][ T7824] can: request_module (can-proto-0) failed. [ 1282.155958][ T7851] siw: device registration error -23 [ 1282.517276][ T7874] netlink: 'syz.1.7462': attribute type 30 has an invalid length. [ 1283.088849][ T7885] netlink: 'syz.3.7463': attribute type 1 has an invalid length. [ 1284.673839][ T7847] gretap0: entered promiscuous mode [ 1284.712466][ T7854] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1284.717254][ T7849] netlink: 'syz.2.7459': attribute type 1 has an invalid length. [ 1284.717310][ T7849] netlink: 'syz.2.7459': attribute type 29 has an invalid length. [ 1284.717344][ T7849] __nla_validate_parse: 16 callbacks suppressed [ 1284.717360][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7459'. [ 1284.720880][ T7867] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1284.721001][ T7858] netlink: 'syz.2.7459': attribute type 1 has an invalid length. [ 1284.721036][ T7858] netlink: 'syz.2.7459': attribute type 29 has an invalid length. [ 1284.721063][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7459'. [ 1284.739581][ T7874] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1284.751762][ T1318] batadv0: left promiscuous mode [ 1284.910458][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7465'. [ 1284.910979][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7465'. [ 1285.030262][ T7895] netlink: 'syz.0.7466': attribute type 2 has an invalid length. [ 1285.030289][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7466'. [ 1285.128968][ T7901] syz.4.7469: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1285.129040][ T7901] CPU: 1 UID: 0 PID: 7901 Comm: syz.4.7469 Not tainted syzkaller #0 PREEMPT(full) [ 1285.129065][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1285.129079][ T7901] Call Trace: [ 1285.129088][ T7901] [ 1285.129097][ T7901] dump_stack_lvl+0xe8/0x150 [ 1285.129137][ T7901] warn_alloc+0x24d/0x270 [ 1285.129162][ T7901] ? kasan_save_track+0x4f/0x80 [ 1285.129185][ T7901] ? kasan_save_track+0x3e/0x80 [ 1285.129210][ T7901] ? __pfx_warn_alloc+0x10/0x10 [ 1285.129230][ T7901] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1285.129262][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.129305][ T7901] __vmalloc_node_range_noprof+0x127/0x1540 [ 1285.129360][ T7901] ? rcu_is_watching+0x16/0xb0 [ 1285.129404][ T7901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1285.129437][ T7901] ? __kmalloc_cache_noprof+0x321/0x600 [ 1285.129460][ T7901] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1285.129481][ T7901] ? xskq_create+0x56/0x220 [ 1285.129516][ T7901] xskq_create+0x148/0x220 [ 1285.129544][ T7901] ? xsk_init_queue+0x8a/0xe0 [ 1285.129573][ T7901] xsk_init_queue+0x8a/0xe0 [ 1285.129601][ T7901] xsk_setsockopt+0x52a/0x960 [ 1285.129630][ T7901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1285.129655][ T7901] ? __pfx_aa_sk_perm+0x10/0x10 [ 1285.129696][ T7901] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1285.129725][ T7901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1285.129752][ T7901] do_sock_setsockopt+0x17c/0x1b0 [ 1285.129787][ T7901] __x64_sys_setsockopt+0x13d/0x1b0 [ 1285.129823][ T7901] do_syscall_64+0x166/0x520 [ 1285.129852][ T7901] ? trace_irq_disable+0x3b/0x140 [ 1285.129877][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.129900][ T7901] ? clear_bhb_loop+0x70/0xc0 [ 1285.129927][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.129949][ T7901] RIP: 0033:0x7fbe4099e159 [ 1285.129969][ T7901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.129988][ T7901] RSP: 002b:00007fbe41794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1285.130011][ T7901] RAX: ffffffffffffffda RBX: 00007fbe40c25fa0 RCX: 00007fbe4099e159 [ 1285.130029][ T7901] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1285.130042][ T7901] RBP: 00007fbe40a3506b R08: 0000000000000004 R09: 0000000000000000 [ 1285.130056][ T7901] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.130070][ T7901] R13: 00007fbe40c26038 R14: 00007fbe40c25fa0 R15: 00007ffc5b258f68 [ 1285.130105][ T7901] [ 1285.130126][ T7901] Mem-Info: [ 1285.130136][ T7901] active_anon:5949 inactive_anon:0 isolated_anon:0 [ 1285.130136][ T7901] active_file:642 inactive_file:43449 isolated_file:0 [ 1285.130136][ T7901] unevictable:21 dirty:131 writeback:0 [ 1285.130136][ T7901] slab_reclaimable:14305 slab_unreclaimable:157177 [ 1285.130136][ T7901] mapped:29649 shmem:545 pagetables:1327 [ 1285.130136][ T7901] sec_pagetables:0 bounce:0 [ 1285.130136][ T7901] kernel_misc_reclaimable:0 [ 1285.130136][ T7901] free:1172735 free_pcp:11285 free_cma:0 [ 1285.130191][ T7901] Node 0 active_anon:23796kB inactive_anon:0kB active_file:2568kB inactive_file:173596kB unevictable:84kB isolated(anon):0kB isolated(file):0kB mapped:118596kB dirty:524kB writeback:0kB shmem:2180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20112kB pagetables:5164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1285.130248][ T7901] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1285.130301][ T7901] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.130360][ T7901] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1285.130408][ T7901] Node 0 DMA32 free:731572kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23796kB inactive_anon:0kB active_file:2568kB inactive_file:173596kB unevictable:84kB writepending:524kB zspages:0kB present:3129332kB managed:2546840kB mlocked:84kB bounce:0kB free_pcp:45140kB local_pcp:20536kB free_cma:0kB [ 1285.130473][ T7901] lowmem_reserve[]: 0 0 0 0 0 [ 1285.147503][ T7901] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.147663][ T7901] lowmem_reserve[]: 0 0 0 0 0 [ 1285.147761][ T7901] Node 1 Normal free:3944008kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.147933][ T7901] lowmem_reserve[]: 0 0 0 0 0 [ 1285.148032][ T7901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1285.148319][ T7901] Node 0 DMA32: 3309*4kB (UME) 940*8kB (UME) 384*16kB (UM) 359*32kB (UME) 124*64kB (UME) 46*128kB (UME) 18*256kB (U) 8*512kB (UME) 3*1024kB (M) 4*2048kB (UM) 161*4096kB (UM) = 731636kB [ 1285.148706][ T7901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1285.148951][ T7901] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 3*16kB (UM) 2*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944008kB [ 1285.159714][ T7901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1285.159759][ T7901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1285.159797][ T7901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1285.159852][ T7901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1285.159891][ T7901] 44632 total pagecache pages [ 1285.159913][ T7901] 0 pages in swap cache [ 1285.159932][ T7901] Free swap = 124996kB [ 1285.159964][ T7901] Total swap = 124996kB [ 1285.159986][ T7901] 2097051 pages RAM [ 1285.160005][ T7901] 0 pages HighMem/MovableOnly [ 1285.160024][ T7901] 428725 pages reserved [ 1285.160043][ T7901] 0 pages cma reserved [ 1285.521705][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7469'. [ 1285.765565][ T7901] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1286.000775][ T7925] bond5: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1286.024522][ T7925] bond5 (unregistering): Released all slaves [ 1286.035292][ T7929] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1286.050164][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7475'. [ 1286.084711][ T7928] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7475'. [ 1286.177792][ T7932] mac80211_hwsim hwsim98 ..ãc¤±: renamed from wlan1 [ 1286.396829][ T7947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7480'. [ 1286.471348][ T31] audit: type=1804 audit(1790605764.515:34): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7481" name="/newroot/273/memory.events" dev="tmpfs" ino=1422 res=1 errno=0 [ 1286.471569][ T31] audit: type=1800 audit(1790605764.515:35): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7481" name="memory.events" dev="tmpfs" ino=1422 res=0 errno=0 [ 1286.472566][ T31] audit: type=1804 audit(1790605764.515:36): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.7481" name="/newroot/273/memory.events" dev="tmpfs" ino=1422 res=1 errno=0 [ 1286.828419][ T7964] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1287.199604][ T7985] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1287.728126][ T8009] netlink: 'syz.2.7497': attribute type 3 has an invalid length. [ 1288.140621][ T8032] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 1288.831693][ T8061] netlink: 'syz.2.7513': attribute type 21 has an invalid length. [ 1288.831765][ T8061] netlink: 'syz.2.7513': attribute type 4 has an invalid length. [ 1288.831779][ T8061] netlink: 'syz.2.7513': attribute type 5 has an invalid length. [ 1289.250367][ T8080] syzkaller0: entered promiscuous mode [ 1289.250390][ T8080] syzkaller0: entered allmulticast mode [ 1289.267568][ T8082] syzkaller0: entered promiscuous mode [ 1289.267588][ T8082] syzkaller0: entered allmulticast mode [ 1289.284676][ T7811] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.287064][T31801] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.287176][T31801] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.287269][T31801] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1289.298584][ T8082] tipc: Started in network mode [ 1289.298663][ T8082] tipc: Node identity 4a3b9af5db72, cluster identity 4711 [ 1289.299727][ T8082] tipc: Enabled bearer , priority 0 [ 1289.538892][ T8092] tipc: New replicast peer: 255.255.255.255 [ 1289.549149][ T8092] tipc: Enabled bearer , priority 26 [ 1289.845748][ T8108] netlink: 'syz.0.7521': attribute type 4 has an invalid length. [ 1292.447454][ T8128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1292.450378][ T8128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1292.476371][ T8128] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1292.481869][ T8128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1292.499020][ T8132] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1292.541651][T31912] tipc: Node number set to 2437520117 [ 1292.775784][ T8153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1292.776320][ T8155] xt_check_table_hooks: 23 callbacks suppressed [ 1292.776404][ T8155] x_tables: duplicate entry at hook 1 [ 1292.892373][ T8154] __nla_validate_parse: 15 callbacks suppressed [ 1292.892395][ T8154] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7538'. [ 1293.011888][ T8155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1293.012452][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1293.160754][ T8155] netlink: 'syz.1.7535': attribute type 1 has an invalid length. [ 1293.194015][ T8176] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 1293.194050][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1293.199402][ T8177] netlink: 'syz.2.7540': attribute type 1 has an invalid length. [ 1293.250952][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7540'. [ 1293.408383][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7542'. [ 1293.408774][ T8177] bond1: entered promiscuous mode [ 1293.409148][ T8177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1293.462992][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7542'. [ 1293.548282][ T8196] x_tables: duplicate underflow at hook 1 [ 1293.820102][ T8211] syzkaller1: entered promiscuous mode [ 1293.820133][ T8211] syzkaller1: entered allmulticast mode [ 1293.965884][ T8216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7554'. [ 1294.027775][ T8215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1294.218607][ T1318] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.219179][ T8224] netlink: Failed to add %pK helper -22 [ 1294.219233][ T8224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1294.219457][ T1318] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.219486][ T1318] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1294.282007][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7555'. [ 1294.295541][ T8230] ip_tables: iptables: counters copy to user failed while replacing table [ 1294.410268][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1294.831547][ T8266] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7564'. [ 1294.890453][ T8266] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1294.903739][ T8266] bond5 (unregistering): Released all slaves [ 1295.005832][ T8272] lo: entered promiscuous mode [ 1295.005855][ T8272] lo: entered allmulticast mode [ 1295.010634][ T8272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1295.228868][ T8282] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1295.259512][ T8282] bond5 (unregistering): Released all slaves [ 1295.406331][ T8292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1295.458673][ T8292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.571963][ T8295] caif0: tun_chr_ioctl cmd 2147767507 [ 1295.856988][ T8305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.017464][ T8291] wg2 speed is unknown, defaulting to 1000 [ 1296.030308][ T8291] wg2 speed is unknown, defaulting to 1000 [ 1296.049338][ T8313] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1296.140130][ T8314] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1296.160605][ T8314] bond4 (unregistering): Released all slaves [ 1296.304353][ T8319] bridge0: port 3(vlan3) entered blocking state [ 1296.304467][ T8319] bridge0: port 3(vlan3) entered forwarding state [ 1296.340336][ T8317] netlink: 'syz.2.7575': attribute type 3 has an invalid length. [ 1296.340551][ T8317] netlink: 'syz.2.7575': attribute type 3 has an invalid length. [ 1296.360161][ T8327] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1297.292842][ T8357] syzkaller0: entered promiscuous mode [ 1297.292867][ T8357] syzkaller0: entered allmulticast mode [ 1298.389613][ T8369] wg2 speed is unknown, defaulting to 1000 [ 1298.403165][ T8369] wg2 speed is unknown, defaulting to 1000 [ 1299.310380][ T8424] __nla_validate_parse: 6 callbacks suppressed [ 1299.310401][ T8424] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7603'. [ 1299.310418][ T8424] netlink: 'syz.0.7603': attribute type 1 has an invalid length. [ 1299.415331][ T8428] syzkaller0: left promiscuous mode [ 1299.415354][ T8428] syzkaller0: left allmulticast mode [ 1299.556420][ T8438] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7606'. [ 1299.835043][ T8445] syzkaller0: entered promiscuous mode [ 1299.835064][ T8445] syzkaller0: entered allmulticast mode [ 1300.280423][ T8463] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7610'. [ 1300.335428][ T8468] ip6t_srh: unknown srh invflags BA61 [ 1300.408861][ T8468] dvmrp0: entered allmulticast mode [ 1300.446810][ T8470] dvmrp1: entered allmulticast mode [ 1300.475474][ T8468] dvmrp0: left allmulticast mode [ 1300.475566][ T8468] dvmrp1: left allmulticast mode [ 1300.698452][ T8475] bond0: entered promiscuous mode [ 1300.698474][ T8475] bond_slave_1: entered promiscuous mode [ 1300.715504][ T8475] batadv0: entered promiscuous mode [ 1300.720681][ T8475] debugfs: 'hsr0' already exists in 'hsr' [ 1300.720701][ T8475] Cannot create hsr debugfs directory [ 1300.750262][ T8475] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1300.832726][ T8484] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7616'. [ 1301.042236][ T8490] netlink: 'syz.4.7619': attribute type 13 has an invalid length. [ 1301.221739][ T8494] syzkaller1: entered promiscuous mode [ 1301.221765][ T8494] syzkaller1: entered allmulticast mode [ 1301.528941][ T8508] netlink: 'syz.4.7626': attribute type 1 has an invalid length. [ 1301.528973][ T8508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7626'. [ 1301.529276][ T8511] netlink: 'syz.4.7626': attribute type 1 has an invalid length. [ 1301.529291][ T8511] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7626'. [ 1302.568671][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7632'. [ 1302.903826][ T8560] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7635'. [ 1303.264858][ T5635] Bluetooth: hci5: link tx timeout [ 1303.264877][ T5635] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.265014][ T5628] Bluetooth: hci5: link tx timeout [ 1303.265026][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.269109][ T5628] Bluetooth: hci5: link tx timeout [ 1303.269126][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.270648][ T5628] Bluetooth: hci5: link tx timeout [ 1303.270661][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.270726][ T5628] Bluetooth: hci5: link tx timeout [ 1303.270736][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.270826][ T5628] Bluetooth: hci5: link tx timeout [ 1303.270837][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.271334][ T5628] Bluetooth: hci5: link tx timeout [ 1303.271348][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.271438][ T5628] Bluetooth: hci5: link tx timeout [ 1303.271449][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.271590][ T5628] Bluetooth: hci5: link tx timeout [ 1303.271602][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.271698][ T5628] Bluetooth: hci5: link tx timeout [ 1303.271710][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.271808][ T5628] Bluetooth: hci5: link tx timeout [ 1303.271820][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.271916][ T5628] Bluetooth: hci5: link tx timeout [ 1303.271928][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.272048][ T5628] Bluetooth: hci5: link tx timeout [ 1303.272060][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.299387][ T5628] Bluetooth: hci5: link tx timeout [ 1303.299403][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.299441][ T5628] Bluetooth: hci5: link tx timeout [ 1303.299452][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.305159][ T5628] Bluetooth: hci5: link tx timeout [ 1303.305173][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.344730][ T5628] Bluetooth: hci5: link tx timeout [ 1303.344745][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.352457][ T5628] Bluetooth: hci5: link tx timeout [ 1303.352474][ T5628] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1303.620740][ T8594] net_ratelimit: 1 callbacks suppressed [ 1303.620760][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.621165][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1304.055690][ T8605] vlan2: entered promiscuous mode [ 1304.130181][ T8616] syzkaller1: entered promiscuous mode [ 1304.130205][ T8616] syzkaller1: entered allmulticast mode [ 1304.243287][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7653'. [ 1304.445755][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7659'. [ 1304.450268][ T5628] block nbd0: Receive control failed (result -107) [ 1305.330235][ T8674] xt_l2tp: invalid flags combination: 8 [ 1305.330651][ T8675] xt_l2tp: invalid flags combination: 8 [ 1305.334850][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 1305.508607][ T8686] ip6t_srh: unknown srh invflags 4000 [ 1305.690906][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.691262][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.691567][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.691918][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.730062][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.730372][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.730679][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.730976][ T8701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1305.773361][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.773361][ T8701] [ 1305.773488][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.773488][ T8701] [ 1305.773618][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.773618][ T8701] [ 1305.773740][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.773740][ T8701] [ 1305.773863][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.773863][ T8701] [ 1305.773983][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.773983][ T8701] [ 1305.774104][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.774104][ T8701] [ 1305.774224][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.774224][ T8701] [ 1305.774356][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.774356][ T8701] [ 1305.774477][ T8701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1305.774477][ T8701] [ 1306.068485][ T8708] netlink: 'syz.4.7677': attribute type 1 has an invalid length. [ 1306.667372][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7686'. [ 1307.365854][ T8753] netlink: 'syz.4.7687': attribute type 1 has an invalid length. [ 1308.781469][ T8753] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1308.808486][ T8754] gretap1: entered allmulticast mode [ 1309.273118][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7694'. [ 1309.273154][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7694'. [ 1309.343751][T26451] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 1309.343942][T26451] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 1309.343975][T26451] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 1309.344007][T26451] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 1309.371485][ T8792] net_ratelimit: 5 callbacks suppressed [ 1309.372786][ T8792] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1310.056260][ T8808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7700'. [ 1310.063798][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7698'. [ 1310.071675][ T8808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7700'. [ 1310.078196][ T8808] netlink: 'syz.4.7700': attribute type 4 has an invalid length. [ 1310.079763][ T8808] netlink: 'syz.4.7700': attribute type 4 has an invalid length. [ 1310.286414][ T8815] block nbd0: reconnected socket [ 1310.294553][ T8815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7704'. [ 1310.329082][ T8817] GUP no longer grows the stack in syz.4.7703 (8817): 200000003000-20000000a000 (200000001000) [ 1310.329116][ T8817] CPU: 1 UID: 0 PID: 8817 Comm: syz.4.7703 Not tainted syzkaller #0 PREEMPT(full) [ 1310.329142][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1310.329156][ T8817] Call Trace: [ 1310.329165][ T8817] [ 1310.329176][ T8817] dump_stack_lvl+0xe8/0x150 [ 1310.329229][ T8817] __get_user_pages+0x23b6/0x2750 [ 1310.329265][ T8817] ? lock_acquire+0x115/0x350 [ 1310.329309][ T8817] ? __gup_longterm_locked+0xc3b/0x15c0 [ 1310.329349][ T8817] __gup_longterm_locked+0xd52/0x15c0 [ 1310.329382][ T8817] ? lock_acquire+0x115/0x350 [ 1310.329423][ T8817] gup_fast_fallback+0x1d92/0x20e0 [ 1310.329485][ T8817] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1310.329516][ T8817] ? futex_unqueue+0x22/0x240 [ 1310.329541][ T8817] ? is_valid_gup_args+0x11f/0x200 [ 1310.329573][ T8817] ? get_user_pages_fast+0x4d/0xb0 [ 1310.329604][ T8817] __iov_iter_get_pages_alloc+0x378/0xa40 [ 1310.329640][ T8817] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1310.329668][ T8817] iov_iter_get_pages2+0x5e/0xa0 [ 1310.329699][ T8817] __se_sys_vmsplice+0x7b5/0x1660 [ 1310.329755][ T8817] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1310.329788][ T8817] ? __pfx_futex_wait+0x10/0x10 [ 1310.329853][ T8817] ? 0xffffffffff600000 [ 1310.329913][ T8817] do_syscall_64+0x166/0x520 [ 1310.329943][ T8817] ? trace_irq_disable+0x3b/0x140 [ 1310.329966][ T8817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.329989][ T8817] ? clear_bhb_loop+0x70/0xc0 [ 1310.330016][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.330038][ T8817] RIP: 0033:0x7fbe4099e159 [ 1310.330057][ T8817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1310.330076][ T8817] RSP: 002b:00007fbe41794028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1310.330099][ T8817] RAX: ffffffffffffffda RBX: 00007fbe40c25fa0 RCX: 00007fbe4099e159 [ 1310.330116][ T8817] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1310.330130][ T8817] RBP: 00007fbe40a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1310.330144][ T8817] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1310.330158][ T8817] R13: 00007fbe40c26038 R14: 00007fbe40c25fa0 R15: 00007ffc5b258f68 [ 1310.330202][ T8817] [ 1310.443743][ T5635] block nbd0: Receive control failed (result -32) [ 1310.739776][ T8834] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7706'. [ 1310.868088][ T8839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.195081][ T8857] FAULT_INJECTION: forcing a failure. [ 1311.195081][ T8857] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.195113][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.0.7717 Not tainted syzkaller #0 PREEMPT(full) [ 1311.195134][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1311.195146][ T8857] Call Trace: [ 1311.195154][ T8857] [ 1311.195164][ T8857] dump_stack_lvl+0xe8/0x150 [ 1311.195199][ T8857] should_fail_ex+0x410/0x560 [ 1311.195229][ T8857] should_failslab+0xa8/0x100 [ 1311.195257][ T8857] ? skb_clone+0x212/0x3a0 [ 1311.195288][ T8857] kmem_cache_alloc_noprof+0xa1/0x600 [ 1311.195321][ T8857] ? skb_clone+0x212/0x3a0 [ 1311.195356][ T8857] skb_clone+0x212/0x3a0 [ 1311.195388][ T8857] __netlink_deliver_tap+0x355/0x6e0 [ 1311.195420][ T8857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1311.195441][ T8857] netlink_deliver_tap+0x19c/0x1b0 [ 1311.195463][ T8857] netlink_unicast+0x781/0x940 [ 1311.195504][ T8857] netlink_sendmsg+0x813/0xb40 [ 1311.195534][ T8857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.195563][ T8857] ? apparmor_socket_sendmsg+0x98/0x360 [ 1311.195589][ T8857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1311.195609][ T8857] sock_sendmsg_nosec+0x13a/0x180 [ 1311.195633][ T8857] ____sys_sendmsg+0x54e/0x850 [ 1311.195667][ T8857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1311.195705][ T8857] ? import_iovec+0x73/0xa0 [ 1311.195734][ T8857] ___sys_sendmsg+0x2a5/0x360 [ 1311.195768][ T8857] ? __lock_acquire+0x747/0x2de0 [ 1311.195794][ T8857] ? __pfx____sys_sendmsg+0x10/0x10 [ 1311.195857][ T8857] ? __fget_files+0x2a/0x420 [ 1311.195885][ T8857] ? __fget_files+0x3a2/0x420 [ 1311.195922][ T8857] __x64_sys_sendmsg+0x1b1/0x290 [ 1311.195954][ T8857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1311.196003][ T8857] do_syscall_64+0x166/0x520 [ 1311.196030][ T8857] ? trace_irq_disable+0x3b/0x140 [ 1311.196050][ T8857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.196070][ T8857] ? clear_bhb_loop+0x70/0xc0 [ 1311.196095][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.196114][ T8857] RIP: 0033:0x7f9e7899e159 [ 1311.196133][ T8857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.196149][ T8857] RSP: 002b:00007f9e797df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1311.196171][ T8857] RAX: ffffffffffffffda RBX: 00007f9e78c25fa0 RCX: 00007f9e7899e159 [ 1311.196186][ T8857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1311.196199][ T8857] RBP: 00007f9e797df090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.196212][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.196224][ T8857] R13: 00007f9e78c26038 R14: 00007f9e78c25fa0 R15: 00007ffd63a5faf8 [ 1311.196257][ T8857] [ 1311.556136][ T8862] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1311.679669][ T8858] team0: Device xfrm0 is of different type [ 1311.714561][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7718'. [ 1312.056311][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7722'. [ 1312.331080][ T8890] tipc: Enabling of bearer rejected, failed to enable media [ 1312.754190][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7731'. [ 1313.244858][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1313.467499][ T8945] SET target dimension over the limit! [ 1314.181763][ T8953] wg2 speed is unknown, defaulting to 1000 [ 1314.288764][ T8953] wg2 speed is unknown, defaulting to 1000 [ 1315.469968][ T8898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1315.803835][ T8965] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1316.065512][ T8977] x_tables: duplicate underflow at hook 1 [ 1316.214127][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7746'. [ 1316.278132][ T8991] netlink: 'syz.4.7748': attribute type 2 has an invalid length. [ 1316.322555][ T8994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1316.546775][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1316.717807][ T9008] x_tables: duplicate underflow at hook 1 [ 1316.729468][ T9008] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7752'. [ 1316.741022][ T9008] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7752'. [ 1316.873131][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1316.886623][ T9015] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1316.994316][ T9034] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7755'. [ 1317.077472][ T9018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1317.077488][ T9018] IPv6: NLM_F_CREATE should be set when creating new route [ 1317.307713][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7757'. [ 1317.424580][ T9046] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1317.427752][ T9046] bond7 (unregistering): Released all slaves [ 1317.588688][ T9046] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1317.591419][ T9046] bond7 (unregistering): Released all slaves [ 1317.676835][ T9064] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7761'. [ 1317.741212][ T9067] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7763'. [ 1317.765598][ T9046] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1317.766932][ T9046] bond7 (unregistering): Released all slaves [ 1317.937052][ T9046] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1317.940062][ T9046] bond7 (unregistering): Released all slaves [ 1318.115398][ T9046] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1318.141366][ T9046] bond7 (unregistering): Released all slaves [ 1318.488317][ T9099] sctp: [Deprecated]: syz.4.7771 (pid 9099) Use of int in maxseg socket option. [ 1318.488317][ T9099] Use struct sctp_assoc_value instead [ 1318.542856][ T9099] veth3: entered promiscuous mode [ 1318.641145][ T9106] syzkaller0: entered promiscuous mode [ 1318.641165][ T9106] syzkaller0: entered allmulticast mode [ 1318.906903][ T9118] netlink: 'syz.2.7775': attribute type 3 has an invalid length. [ 1319.262560][ T9131] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1320.002602][ T9160] tipc: Cannot configure node identity twice [ 1320.004334][ T9160] tipc: Enabled bearer , priority 0 [ 1320.148324][ T9172] netlink: 'syz.0.7788': attribute type 1 has an invalid length. [ 1320.168641][ T9172] gretap2: entered allmulticast mode [ 1320.213730][ T9167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1320.488567][T31798] vlan3: left allmulticast mode [ 1320.488590][T31798] bridge_slave_0: left allmulticast mode [ 1320.508102][T31798] vlan3: left promiscuous mode [ 1320.508591][T31798] bridge0: port 1(vlan3) entered disabled state [ 1320.528471][T31798] vlan2: left promiscuous mode [ 1320.528491][T31798] geneve0: left promiscuous mode [ 1320.528882][T31798] geneve0: entered promiscuous mode [ 1320.549958][T31798] vlan2: left allmulticast mode [ 1320.549975][T31798] geneve0: left allmulticast mode [ 1320.550120][T31798] bridge0: port 4(vlan2) entered disabled state [ 1320.602842][T31798] pim6reg: left allmulticast mode [ 1321.500759][T31798] bond0 (unregistering): (slave geneve5): Releasing active interface [ 1321.525640][T31798] bond1 (unregistering): (slave geneve3): Releasing active interface [ 1321.615856][T31798] team0: Port device bridge3 removed [ 1321.634391][T31798] bond1 (unregistering): Released all slaves [ 1321.649568][T31798] bond2 (unregistering): Released all slaves [ 1321.667739][T31798] bond3 (unregistering): Released all slaves [ 1321.683389][T31798] bond4 (unregistering): Released all slaves [ 1321.714860][T31798] bond5 (unregistering): Released all slaves [ 1321.730534][T31798] bond6 (unregistering): Released all slaves [ 1321.746292][T31798] bond7 (unregistering): Released all slaves [ 1321.761763][T31798] bond0 (unregistering): Released all slaves [ 1321.782537][T31798] bond8 (unregistering): Released all slaves [ 1321.809485][T31798] bond9 (unregistering): Released all slaves [ 1321.866764][T25259] tipc: Node number set to 3516636468 [ 1321.989835][T31798] tipc: Disabling bearer [ 1321.990184][T31798] tipc: Left network mode [ 1322.171006][ T9241] __nla_validate_parse: 6 callbacks suppressed [ 1322.171025][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7803'. [ 1322.244919][ T9234] syzkaller0: entered promiscuous mode [ 1322.244940][ T9234] syzkaller0: entered allmulticast mode [ 1325.641666][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7812'. [ 1325.861003][ T9313] team0: Port device team_slave_0 removed [ 1325.913304][ T9325] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7812'. [ 1325.920792][ T9318] syzkaller1: entered promiscuous mode [ 1325.920812][ T9318] syzkaller1: entered allmulticast mode [ 1327.281336][T31798] hsr_slave_0: left promiscuous mode [ 1327.282046][T31798] hsr_slave_1: left promiscuous mode [ 1327.338017][T31798] batadv_slave_1: left promiscuous mode [ 1327.338182][T31798] veth1_vlan: left promiscuous mode [ 1327.338263][T31798] v: left promiscuous mode [ 1328.118391][ T9296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1328.197340][T31798] IPVS: stop unused estimator thread 0... [ 1328.561803][ T9411] xt_l2tp: invalid flags combination: 8 [ 1328.599717][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7831'. [ 1328.618712][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7831'. [ 1328.625774][ T9417] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7831'. [ 1329.404471][ T9460] xt_hl: Unknown TTL match mode: 237 [ 1329.734172][ T9482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7847'. [ 1330.104723][ T9498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1330.153222][ T9498] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 1330.308168][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7851'. [ 1332.259749][ T9458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1332.439475][ T9511] netlink: 'syz.1.7855': attribute type 10 has an invalid length. [ 1332.439498][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7855'. [ 1332.446766][ T9511] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7855'. [ 1332.550031][ T9516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7856'. [ 1332.550537][ T9516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7856'. [ 1332.615231][ T31] audit: type=1804 audit(1790605810.665:37): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7859" name="/newroot/345/cgroup.controllers" dev="tmpfs" ino=1793 res=1 errno=0 [ 1332.615290][ T31] audit: type=1800 audit(1790605810.665:38): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7859" name="cgroup.controllers" dev="tmpfs" ino=1793 res=0 errno=0 [ 1332.616665][ T31] audit: type=1800 audit(1790605810.665:39): pid=9524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7859" name="cgroup.controllers" dev="tmpfs" ino=1793 res=0 errno=0 [ 1332.717618][ T9528] netlink: 'syz.0.7858': attribute type 2 has an invalid length. [ 1332.807340][ T9518] bond4: entered allmulticast mode [ 1332.962100][ T9537] bond0: entered promiscuous mode [ 1332.962125][ T9537] bond_slave_0: entered promiscuous mode [ 1332.962355][ T9537] bond_slave_1: entered promiscuous mode [ 1332.981190][ T9537] batadv0: entered promiscuous mode [ 1333.001707][ T9537] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1333.154883][ T9546] syzkaller0: entered promiscuous mode [ 1333.154905][ T9546] syzkaller0: entered allmulticast mode [ 1333.312535][ T9546] tipc: Enabled bearer , priority 0 [ 1333.327085][ T9544] tipc: Resetting bearer [ 1333.441121][ T9556] netlink: 'syz.2.7868': attribute type 1 has an invalid length. [ 1333.441145][ T9556] netlink: 'syz.2.7868': attribute type 4 has an invalid length. [ 1333.462830][ T9544] tipc: Disabling bearer [ 1334.876885][ T9576] bond7 (unregistering): Released all slaves [ 1335.260974][ T9603] __nla_validate_parse: 2 callbacks suppressed [ 1335.260994][ T9603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1335.566438][ T9628] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7885'. [ 1335.596960][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7882'. [ 1335.631694][ T9621] v: renamed from veth0_vlan [ 1335.702639][ T9619] netlink: 'syz.0.7882': attribute type 4 has an invalid length. [ 1335.702663][ T9619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7882'. [ 1335.879665][ T9619] .`: renamed from bond0 (while UP) [ 1336.022750][ T9643] syzkaller1: entered promiscuous mode [ 1336.022772][ T9643] syzkaller1: entered allmulticast mode [ 1336.055700][ T9661] netlink: 'syz.4.7890': attribute type 1 has an invalid length. [ 1336.060875][ T9661] xt_l2tp: invalid flags combination: 8 [ 1336.061249][ T9661] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7890'. [ 1336.096743][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7890'. [ 1336.365175][ T9674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7892'. [ 1336.365521][ T9674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7892'. [ 1336.365744][ T9674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7892'. [ 1336.365939][ T9674] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7892'. [ 1337.394318][ T5280] v: left promiscuous mode [ 1337.439029][T31912] v: entered promiscuous mode [ 1337.568738][ T9738] syzkaller0: entered promiscuous mode [ 1337.568761][ T9738] syzkaller0: entered allmulticast mode [ 1338.033972][ T9771] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1338.071927][ T9773] openvswitch: netlink: Flow key attr not present in new flow. [ 1338.845268][ T9819] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1338.845738][ T9819] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1338.862157][ T9821] xfrm0: entered allmulticast mode [ 1338.898126][ T9821] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1339.951635][ T9848] ip_tables: iptables: counters copy to user failed while replacing table [ 1340.336786][ T9882] xt_IDLETIMER: label is empty or not nul-terminated [ 1340.378718][ T9882] syzkaller0: entered promiscuous mode [ 1340.378738][ T9882] syzkaller0: entered allmulticast mode [ 1340.836273][ T9898] __nla_validate_parse: 71 callbacks suppressed [ 1340.836292][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7944'. [ 1341.045509][ T9898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7944'. [ 1341.075410][ T9899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.639970][ T9930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7946'. [ 1341.769223][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7947'. [ 1341.769435][ T9936] netlink: 'syz.2.7948': attribute type 1 has an invalid length. [ 1341.795130][ T9935] netlink: 'syz.1.7947': attribute type 1 has an invalid length. [ 1341.795150][ T9935] nbd: error processing sock list [ 1341.795385][ T9935] block nbd7: shutting down sockets [ 1342.157096][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.439561][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7954'. [ 1342.686704][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7961'. [ 1342.798470][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1342.868635][ T9991] x_tables: duplicate underflow at hook 3 [ 1342.917795][ T9989] pim6reg: entered allmulticast mode [ 1342.920655][ T9989] pim6reg: left allmulticast mode [ 1343.030535][ T9998] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7965'. [ 1343.104282][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7966'. [ 1343.176462][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7966'. [ 1343.293434][T10014] netlink: 'syz.1.7968': attribute type 10 has an invalid length. [ 1343.297032][T10014] team0: Port device dummy0 added [ 1343.297900][T10014] netlink: 'syz.1.7968': attribute type 10 has an invalid length. [ 1343.304377][T10014] team0: Port device dummy0 removed [ 1343.459236][T10021] bridge_slave_0: left allmulticast mode [ 1343.459260][T10021] bridge_slave_0: left promiscuous mode [ 1343.459460][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.486795][T10021] bridge_slave_1: left promiscuous mode [ 1343.487028][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.548010][T10022] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1343.671659][T10038] ip_tables: iptables: counters copy to user failed while replacing table [ 1344.103735][T10064] netlink: 'syz.3.7984': attribute type 1 has an invalid length. [ 1344.103890][T10065] netlink: 'syz.3.7984': attribute type 1 has an invalid length. [ 1396.630098][T10144] __nla_validate_parse: 5 callbacks suppressed [ 1396.630120][T10144] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7985'. [ 1396.630167][T10144] netlink: 'syz.0.7985': attribute type 9 has an invalid length. [ 1396.630180][T10144] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7985'. [ 1396.667130][T10139] syzkaller0: entered promiscuous mode [ 1396.667149][T10139] syzkaller0: entered allmulticast mode [ 1396.669502][T10139] tipc: Enabled bearer , priority 0 [ 1396.670158][T10146] netlink: 'syz.0.7985': attribute type 1 has an invalid length. [ 1396.731976][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.760845][T10154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1396.782082][T10151] bond0: (slave geneve3): making interface the new active one [ 1396.796877][T10151] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1396.798883][T31798] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.798927][T31798] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.805189][T31798] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.820394][T31798] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.842234][T10155] tipc: Resetting bearer [ 1396.917715][T31785] tipc: Subscription rejected, illegal request [ 1396.971601][T10169] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7991'. [ 1396.972833][T10169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7991'. [ 1397.047115][T10171] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7990'. [ 1397.048431][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7990'. [ 1397.101302][T10173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7991'. [ 1397.192217][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1397.813248][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.846976][T10138] tipc: Resetting bearer [ 1397.914148][T10138] tipc: Disabling bearer [ 1397.930097][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7993'. [ 1398.122768][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7994'. [ 1398.596464][T10225] veth5: entered allmulticast mode [ 1398.911550][T10188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1399.225814][T10253] Bluetooth: MGMT ver 1.23 [ 1399.318624][T10264] netlink: 'syz.2.8011': attribute type 16 has an invalid length. [ 1399.318646][T10264] netlink: 'syz.2.8011': attribute type 3 has an invalid length. [ 1399.878038][T10296] netlink: 'syz.3.8018': attribute type 8 has an invalid length. [ 1399.954220][T10304] netlink: 'syz.0.8020': attribute type 19 has an invalid length. [ 1399.954243][T10304] netlink: 'syz.0.8020': attribute type 20 has an invalid length. [ 1399.956239][T10304] netlink: 'syz.0.8020': attribute type 19 has an invalid length. [ 1399.956258][T10304] netlink: 'syz.0.8020': attribute type 20 has an invalid length. [ 1400.239924][T10321] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 1400.272738][T10323] netlink: 'syz.0.8024': attribute type 10 has an invalid length. [ 1400.498793][T10329] caif0: tun_chr_ioctl cmd 2147767507 [ 1400.732664][T10344] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1400.941210][T10371] ip_tables: iptables: counters copy to user failed while replacing table [ 1401.130792][T10380] bridge_slave_0: left allmulticast mode [ 1401.130819][T10380] bridge_slave_0: left promiscuous mode [ 1401.131077][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.489430][T10397] tipc: Enabling of bearer rejected, already enabled [ 1401.491751][T10392] syzkaller0: entered promiscuous mode [ 1401.491773][T10392] syzkaller0: entered allmulticast mode [ 1401.822052][T10420] xt_policy: output policy not valid in PREROUTING and INPUT [ 1402.069201][T10432] __nla_validate_parse: 23 callbacks suppressed [ 1402.069221][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8051'. [ 1402.356982][T10441] bond7 (unregistering): Released all slaves [ 1402.479424][T10432] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.590652][T10432] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.711143][T10432] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.750084][T10432] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.785154][T10451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1403.035434][T31798] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.036521][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8064'. [ 1403.092774][T10483] gretap0: left promiscuous mode [ 1403.159819][T10483] geneve2: left promiscuous mode [ 1403.166379][T10483] syzkaller0: left promiscuous mode [ 1403.186073][T10483] veth3: left promiscuous mode [ 1403.187877][T10483] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1403.189648][T10483] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1403.224817][T31798] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.232073][T10500] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8066'. [ 1403.335230][ T1318] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.346207][T31798] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.547248][T10511] ip_tables: iptables: counters copy to user failed while replacing table [ 1403.699496][T10527] validate_nla: 5 callbacks suppressed [ 1403.699514][T10527] netlink: 'syz.4.8071': attribute type 2 has an invalid length. [ 1403.794955][T10518] IPVS: Unknown mcast interface: veth1_virt_wifi [ 1403.927415][T10537] ip_tables: iptables: counters copy to user failed while replacing table [ 1403.978303][T10537] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1403.980275][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1403.980632][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'. [ 1404.086646][T10542] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8074'. [ 1404.090257][T10544] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8074'. [ 1404.221394][T10550] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1404.618424][T10562] tipc: Resetting bearer [ 1404.622176][T10569] No such timeout policy "syz1" [ 1404.637686][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8082'. [ 1404.671786][T10564] netlink: 'syz.2.8081': attribute type 32 has an invalid length. [ 1404.709682][T10562] tipc: Disabling bearer [ 1404.782072][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8084'. [ 1405.039105][T10602] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1405.781419][T10631] syzkaller1: entered promiscuous mode [ 1405.781445][T10631] syzkaller1: entered allmulticast mode [ 1406.326537][ T31] audit: type=1804 audit(1790605884.375:40): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8105" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2038 res=1 errno=0 [ 1406.326660][ T31] audit: type=1800 audit(1790605884.375:41): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8105" name="cgroup.controllers" dev="tmpfs" ino=2038 res=0 errno=0 [ 1406.954121][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.000521][T10700] bridge_slave_0 (unregistering): left allmulticast mode [ 1407.000552][T10700] bridge_slave_0 (unregistering): left promiscuous mode [ 1407.000625][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.115726][T10715] __nla_validate_parse: 16 callbacks suppressed [ 1407.115746][T10715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8116'. [ 1407.121122][T10718] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8116'. [ 1407.256695][T10721] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8117'. [ 1407.308994][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8119'. [ 1407.331237][T10726] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8117'. [ 1407.340665][T10725] veth5: entered allmulticast mode [ 1407.442651][T10730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1407.804375][T10733] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8120'. [ 1407.809384][T10733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1407.957475][T10737] bond6: option arp_validate: invalid value (1048579) [ 1407.958935][T10737] bond6 (unregistering): Released all slaves [ 1407.991909][T10723] wg2 speed is unknown, defaulting to 1000 [ 1407.991977][T10735] bond5: option arp_validate: invalid value (1048579) [ 1408.009847][T10723] wg2 speed is unknown, defaulting to 1000 [ 1408.047153][T10740] syzkaller0: entered promiscuous mode [ 1408.047175][T10740] syzkaller0: entered allmulticast mode [ 1408.204805][T10752] vcan0: tx address claim with broadcast sa [ 1408.300980][T10761] pim6reg: left allmulticast mode [ 1408.354592][T10763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1408.651267][T10773] netlink: 15 bytes leftover after parsing attributes in process `syz.4.8130'. [ 1408.908894][T10788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8134'. [ 1409.123742][T10795] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 1409.123777][T10795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1409.170298][T10795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8137'. [ 1409.170644][T10794] netlink: 'syz.4.8137': attribute type 12 has an invalid length. [ 1409.433867][T10810] netlink: 'syz.0.8140': attribute type 1 has an invalid length. [ 1409.433902][T10810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1410.039781][T10841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1410.041334][T10840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1410.355089][T10855] netlink: 'syz.2.8151': attribute type 1 has an invalid length. [ 1410.355457][T10855] openvswitch: netlink: IP tunnel dst address not specified [ 1410.904177][T10880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8160'. [ 1411.068363][T10903] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1411.727280][T10942] netlink: 'syz.2.8175': attribute type 83 has an invalid length. [ 1412.211366][T10974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.272430][T10970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.330503][T10970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.540214][T10988] netlink: 'syz.3.8186': attribute type 4 has an invalid length. [ 1412.555718][T10988] netlink: 'syz.3.8186': attribute type 4 has an invalid length. [ 1412.755713][T11000] __nla_validate_parse: 35 callbacks suppressed [ 1412.755735][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8189'. [ 1412.782477][T11000] netlink: 'syz.4.8189': attribute type 1 has an invalid length. [ 1412.782501][T11000] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8189'. [ 1412.814923][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8190'. [ 1412.836218][T11005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8191'. [ 1413.055289][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8196'. [ 1413.450841][T11044] netlink: 199784 bytes leftover after parsing attributes in process `syz.4.8202'. [ 1413.450867][T11044] netlink: 'syz.4.8202': attribute type 1 has an invalid length. [ 1413.520090][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8204'. [ 1413.747370][T11058] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1413.762693][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8206'. [ 1413.856972][T11068] netlink: 'syz.0.8209': attribute type 1 has an invalid length. [ 1414.009156][T11076] net_ratelimit: 2 callbacks suppressed [ 1414.009218][T11076] ip_tables: iptables: counters copy to user failed while replacing table [ 1414.108957][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8211'. [ 1414.109084][T11083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.204176][T11083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.101651][T11143] netlink: 'syz.0.8226': attribute type 1 has an invalid length. [ 1415.194519][T11143] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1415.251152][T11142] netlink: 'syz.3.8227': attribute type 30 has an invalid length. [ 1415.286001][T11139] netlink: 'syz.0.8226': attribute type 10 has an invalid length. [ 1415.306163][T11148] bond7: (slave veth11): Enslaving as an active interface with a down link [ 1415.371904][T11143] bond7: (slave dummy0): making interface the new active one [ 1415.383646][T11143] dummy0: entered promiscuous mode [ 1415.389462][T11143] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1415.435423][T11139] bond7: (slave dummy0): Releasing active interface [ 1416.791287][T11197] geneve0: Device is already in use. [ 1417.110093][T11211] netlink: 'syz.3.8243': attribute type 10 has an invalid length. [ 1417.162717][T11227] syz.2.8244: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1417.162794][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.2.8244 Not tainted syzkaller #0 PREEMPT(full) [ 1417.162820][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1417.162836][T11227] Call Trace: [ 1417.162849][T11227] [ 1417.162860][T11227] dump_stack_lvl+0xe8/0x150 [ 1417.162904][T11227] warn_alloc+0x24d/0x270 [ 1417.162931][T11227] ? kasan_save_track+0x4f/0x80 [ 1417.162957][T11227] ? kasan_save_track+0x3e/0x80 [ 1417.162987][T11227] ? __pfx_warn_alloc+0x10/0x10 [ 1417.163009][T11227] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1417.163044][T11227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.163092][T11227] __vmalloc_node_range_noprof+0x127/0x1540 [ 1417.163155][T11227] ? rcu_is_watching+0x16/0xb0 [ 1417.163201][T11227] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1417.163246][T11227] ? __kmalloc_cache_noprof+0x321/0x600 [ 1417.163266][T11227] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1417.163286][T11227] ? xskq_create+0x56/0x220 [ 1417.163317][T11227] xskq_create+0x148/0x220 [ 1417.163342][T11227] ? xsk_init_queue+0x8a/0xe0 [ 1417.163368][T11227] xsk_init_queue+0x8a/0xe0 [ 1417.163395][T11227] xsk_setsockopt+0x52a/0x960 [ 1417.163420][T11227] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1417.163444][T11227] ? __pfx_aa_sk_perm+0x10/0x10 [ 1417.163489][T11227] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1417.163515][T11227] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1417.163540][T11227] do_sock_setsockopt+0x17c/0x1b0 [ 1417.163573][T11227] __x64_sys_setsockopt+0x13d/0x1b0 [ 1417.163606][T11227] do_syscall_64+0x166/0x520 [ 1417.163633][T11227] ? trace_irq_disable+0x3b/0x140 [ 1417.163654][T11227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.163674][T11227] ? clear_bhb_loop+0x70/0xc0 [ 1417.163699][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.163719][T11227] RIP: 0033:0x7f5af459e159 [ 1417.163738][T11227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1417.163756][T11227] RSP: 002b:00007f5af54a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1417.163777][T11227] RAX: ffffffffffffffda RBX: 00007f5af4826090 RCX: 00007f5af459e159 [ 1417.163792][T11227] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1417.163805][T11227] RBP: 00007f5af463506b R08: 0000000000000004 R09: 0000000000000000 [ 1417.163818][T11227] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1417.163831][T11227] R13: 00007f5af4826128 R14: 00007f5af4826090 R15: 00007ffd9f5bfc88 [ 1417.163864][T11227] [ 1417.315853][T11227] Mem-Info: [ 1417.315892][T11227] active_anon:5824 inactive_anon:0 isolated_anon:0 [ 1417.315892][T11227] active_file:642 inactive_file:43485 isolated_file:0 [ 1417.315892][T11227] unevictable:23 dirty:225 writeback:0 [ 1417.315892][T11227] slab_reclaimable:15181 slab_unreclaimable:152204 [ 1417.315892][T11227] mapped:29663 shmem:564 pagetables:1383 [ 1417.315892][T11227] sec_pagetables:0 bounce:0 [ 1417.315892][T11227] kernel_misc_reclaimable:0 [ 1417.315892][T11227] free:1175795 free_pcp:12739 free_cma:0 [ 1417.321923][T11227] Node 0 active_anon:23296kB inactive_anon:0kB active_file:2568kB inactive_file:173740kB unevictable:92kB isolated(anon):0kB isolated(file):0kB mapped:118652kB dirty:900kB writeback:0kB shmem:2256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18508kB pagetables:5388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1417.322105][T11227] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1417.322320][T11227] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.322512][T11227] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1417.322638][T11227] Node 0 DMA32 free:745864kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23296kB inactive_anon:0kB active_file:2568kB inactive_file:173740kB unevictable:92kB writepending:900kB zspages:0kB present:3129332kB managed:2546840kB mlocked:92kB bounce:0kB free_pcp:48892kB local_pcp:21776kB free_cma:0kB [ 1417.336810][T11227] lowmem_reserve[]: 0 0 0 0 0 [ 1417.337038][T11227] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.351289][T11227] lowmem_reserve[]: 0 0 0 0 0 [ 1417.351414][T11227] Node 1 Normal free:3941956kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 1417.351567][T11227] lowmem_reserve[]: 0 0 0 0 0 [ 1417.351662][T11227] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1417.351994][T11227] Node 0 DMA32: 2148*4kB (UM) 1164*8kB (UME) 452*16kB (UME) 969*32kB (UME) 158*64kB (UM) 44*128kB (UM) 49*256kB (UM) 14*512kB (UE) 23*1024kB (UME) 6*2048kB (UME) 151*4096kB (UM) = 745936kB [ 1417.360798][T11227] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1417.372520][T11227] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 3*16kB (UM) 2*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (UM) = 3941956kB [ 1417.387503][T11227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.387572][T11227] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1417.387619][T11227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.394916][T11227] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1417.395004][T11227] 44687 total pagecache pages [ 1417.395021][T11227] 0 pages in swap cache [ 1417.395048][T11227] Free swap = 124996kB [ 1417.395070][T11227] Total swap = 124996kB [ 1417.395098][T11227] 2097051 pages RAM [ 1417.395120][T11227] 0 pages HighMem/MovableOnly [ 1417.395148][T11227] 428725 pages reserved [ 1417.395170][T11227] 0 pages cma reserved [ 1417.871594][T11211] team0 (unregistering): Port device team_slave_0 removed [ 1417.923822][T11211] team0 (unregistering): Port device team_slave_1 removed [ 1417.958766][T11227] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1417.968582][T11234] __nla_validate_parse: 8 callbacks suppressed [ 1417.968601][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8246'. [ 1418.064221][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8247'. [ 1418.339139][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8253'. [ 1418.339168][T11252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8253'. [ 1418.371000][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8253'. [ 1418.371026][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8253'. [ 1418.533819][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8260'. [ 1418.536738][T11262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8255'. [ 1418.550667][T11270] netlink: 'syz.0.8260': attribute type 8 has an invalid length. [ 1418.550706][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8260'. [ 1418.565701][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.612339][T11271] netlink: 'syz.0.8260': attribute type 1 has an invalid length. [ 1418.612360][T11271] nbd: error processing sock list [ 1418.612685][T11271] block nbd7: shutting down sockets [ 1418.786767][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8254'. [ 1418.936605][T11285] bridge0: port 4(bond0) entered blocking state [ 1418.936806][T11285] bridge0: port 4(bond0) entered disabled state [ 1418.936939][T11285] bond0: entered allmulticast mode [ 1418.936954][T11285] bond_slave_0: entered allmulticast mode [ 1418.936970][T11285] bond_slave_1: entered allmulticast mode [ 1418.987753][T11285] bond0: entered promiscuous mode [ 1418.987774][T11285] bond_slave_0: entered promiscuous mode [ 1418.989128][T11285] bond_slave_1: entered promiscuous mode [ 1419.064717][T11281] hsr_slave_1 (unregistering): left promiscuous mode [ 1419.177818][T11302] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1419.182604][T11302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1419.190346][T11302] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1419.230869][T11302] netlink: 'syz.3.8263': attribute type 39 has an invalid length. [ 1419.290334][T11310] sctp: [Deprecated]: syz.2.8265 (pid 11310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1419.290334][T11310] Use struct sctp_sack_info instead [ 1420.001735][T11342] tipc: Started in network mode [ 1420.001770][T11342] tipc: Node identity 42fe5019b1e, cluster identity 4711 [ 1420.026847][T11342] tipc: Enabled bearer , priority 0 [ 1420.400829][T11320] wg2 speed is unknown, defaulting to 1000 [ 1420.402832][T11320] wg2 speed is unknown, defaulting to 1000 [ 1420.492565][T11339] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1421.047296][T11337] wg2 speed is unknown, defaulting to 1000 [ 1421.049385][T11337] wg2 speed is unknown, defaulting to 1000 [ 1421.113576][T25754] tipc: Node number set to 4078850073 [ 1422.674208][T11379] netlink: 'syz.3.8286': attribute type 23 has an invalid length. [ 1423.096002][T11413] __nla_validate_parse: 9 callbacks suppressed [ 1423.096023][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8292'. [ 1423.288114][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8295'. [ 1424.249998][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8300'. [ 1424.278011][T11445] x_tables: duplicate entry at hook 4 [ 1424.370988][T11440] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1424.410375][T11440] bond7 (unregistering): Released all slaves [ 1424.477759][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8305'. [ 1424.491979][T11461] syzkaller1: entered promiscuous mode [ 1424.492058][T11461] syzkaller1: entered allmulticast mode [ 1424.599817][T11466] set_target_v0_checkentry: 55 callbacks suppressed [ 1424.599844][T11466] SET target dimension over the limit! [ 1424.661547][T11469] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8309'. [ 1424.690446][T11471] netlink: 'syz.0.8308': attribute type 10 has an invalid length. [ 1424.765146][T11476] netlink: 'syz.0.8308': attribute type 10 has an invalid length. [ 1424.804418][T11481] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8312'. [ 1424.900236][T11486] netlink: 'syz.4.8314': attribute type 1 has an invalid length. [ 1424.986550][T11486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1425.045481][T11496] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8313'. [ 1425.074904][T11486] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 1425.132195][T21794] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1425.307820][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8315'. [ 1425.350313][T21794] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1425.553965][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8319'. [ 1425.838512][T11539] netlink: 976 bytes leftover after parsing attributes in process `syz.1.8324'. [ 1426.041818][T11553] netlink: 'syz.1.8327': attribute type 1 has an invalid length. [ 1426.140471][T11553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1426.591883][T11576] hsr0: entered allmulticast mode [ 1426.591905][T11576] hsr_slave_0: entered allmulticast mode [ 1426.591922][T11576] hsr_slave_1: entered allmulticast mode [ 1426.592715][T11576] hsr_slave_0: left promiscuous mode [ 1426.617917][T11576] hsr_slave_1: left promiscuous mode [ 1426.639333][T11576] hsr0 (unregistering): left allmulticast mode [ 1428.726602][T11529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1428.925656][T11598] bond3: option mode: invalid value (7) [ 1428.927568][T11598] bond3 (unregistering): Released all slaves [ 1428.998137][T11601] __nla_validate_parse: 5 callbacks suppressed [ 1428.998170][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8339'. [ 1429.089908][T11608] netlink: 'syz.1.8341': attribute type 39 has an invalid length. [ 1429.191759][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8342'. [ 1429.304146][T11619] xt_l2tp: v2 doesn't support IP mode [ 1429.378689][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8342'. [ 1429.664669][T11632] gretap2: entered promiscuous mode [ 1429.923989][T11653] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8349'. [ 1430.005711][T11654] syzkaller0: left allmulticast mode [ 1430.139387][T11666] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1430.139409][T11666] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8352'. [ 1430.367549][T11671] smc: removing ib device s [ 1430.425049][T11672] netlink: 284 bytes leftover after parsing attributes in process `syz.1.8354'. [ 1430.608825][T11671] smbdirect: ib_dev[s] removed [ 1430.701176][T11685] tc_dump_action: action bad kind [ 1430.970040][T11694] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1431.095113][T11689] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1431.317846][T11700] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1431.647864][T11711] syzkaller0: entered promiscuous mode [ 1431.647887][T11711] syzkaller0: entered allmulticast mode [ 1432.002091][T11727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8366'. [ 1432.087493][T11727] tc_dump_action: action bad kind [ 1432.087894][T11738] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8368'. [ 1432.942290][T11823] syzkaller0: left promiscuous mode [ 1432.942335][T11823] syzkaller0: left allmulticast mode [ 1433.449504][T11848] netlink: 'syz.0.8384': attribute type 5 has an invalid length. [ 1433.450453][T11848] netlink: 'syz.0.8384': attribute type 5 has an invalid length. [ 1433.474069][T11848] netlink: 'syz.0.8384': attribute type 5 has an invalid length. [ 1433.475366][T11849] netlink: 'syz.0.8384': attribute type 5 has an invalid length. [ 1433.767343][T11862] syzkaller0: entered promiscuous mode [ 1433.767367][T11862] syzkaller0: entered allmulticast mode [ 1434.020752][T11869] netlink: 'syz.0.8390': attribute type 3 has an invalid length. [ 1434.020776][T11869] __nla_validate_parse: 15 callbacks suppressed [ 1434.020789][T11869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8390'. [ 1434.242042][T11874] netlink: 'syz.0.8391': attribute type 10 has an invalid length. [ 1434.428173][T11878] netlink: 'syz.4.8393': attribute type 21 has an invalid length. [ 1434.428255][T11878] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8393'. [ 1434.428288][T11878] netlink: 'syz.4.8393': attribute type 1 has an invalid length. [ 1435.273621][T11921] bridge4: entered allmulticast mode [ 1435.428232][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428246][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428253][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428259][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428266][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428273][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428279][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428286][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428293][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428300][T11925] tc action pedit offset must be on 32 bit boundaries [ 1435.428314][T11925] 0: reclassify loop, rule prio 0, protocol 800 [ 1435.646814][T11928] netlink: 'syz.1.8405': attribute type 1 has an invalid length. [ 1435.646840][T11928] netlink: 'syz.1.8405': attribute type 1 has an invalid length. [ 1435.876549][T11939] netlink: 'syz.4.8408': attribute type 30 has an invalid length. [ 1435.977244][T11943] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1436.059047][T11949] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8411'. [ 1436.251554][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8414'. [ 1436.303427][T11963] veth0: entered promiscuous mode [ 1436.308049][T11962] veth0: left promiscuous mode [ 1436.714075][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8423'. [ 1436.765473][T11985] bridge0: port 1(veth0) entered blocking state [ 1436.765571][T11985] bridge0: port 1(veth0) entered disabled state [ 1436.765703][T11985] veth0: entered allmulticast mode [ 1436.804875][T11988] nbd7: detected capacity change from 0 to 63 [ 1436.808030][T11985] veth0: entered promiscuous mode [ 1436.808616][T11985] bridge0: port 1(veth0) entered blocking state [ 1436.808712][T11985] bridge0: port 1(veth0) entered forwarding state [ 1436.924603][T10574] block nbd7: Receive control failed (result -104) [ 1437.132108][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1437.226962][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1437.283911][T12020] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1437.283929][T12020] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8426'. [ 1437.810685][T12031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8431'. [ 1437.888873][T12033] netlink: 'syz.4.8432': attribute type 1 has an invalid length. [ 1437.974353][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 1438.015351][T12039] veth7: entered allmulticast mode [ 1438.033031][T12033] bond7: (slave veth0_to_bond): making interface the new active one [ 1438.034742][T12033] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1438.061519][T12033] macvlan2: entered promiscuous mode [ 1438.061538][T12033] macvlan2: entered allmulticast mode [ 1438.062215][T12033] bond7: entered promiscuous mode [ 1438.062242][T12033] veth0_to_bond: entered promiscuous mode [ 1438.067108][T12033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1438.076956][T12033] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1438.087055][T12033] bond7: left promiscuous mode [ 1438.087099][T12033] veth0_to_bond: left promiscuous mode [ 1439.901223][T11998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1440.064313][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 1440.157582][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.157711][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.157854][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.157982][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.158110][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.158238][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.158363][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.158500][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.158628][T12054] openvswitch: netlink: Multiple metadata blocks provided [ 1440.255993][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8436'. [ 1440.298575][T12060] netlink: 'syz.4.8439': attribute type 10 has an invalid length. [ 1440.345348][T12060] netlink: 'syz.4.8439': attribute type 10 has an invalid length. [ 1440.433357][T12060] team0: Port device dummy0 removed [ 1440.598927][T12048] syzkaller1: entered promiscuous mode [ 1440.598951][T12048] syzkaller1: entered allmulticast mode [ 1440.956148][T12089] team0: Device macvlan3 is up. Set it down before adding it as a team port [ 1441.067141][T12093] team0: Device macvlan3 is up. Set it down before adding it as a team port [ 1441.286696][T12103] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8449'. [ 1441.305442][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8450'. [ 1441.305474][T12109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8450'. [ 1441.305501][T12109] vlan0: entered promiscuous mode [ 1441.425733][T12120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8452'. [ 1441.467816][T12122] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1441.468394][T12122] net_ratelimit: 13 callbacks suppressed [ 1441.468408][T12122] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1441.470220][T12121] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1441.610053][T12132] ipt_ah: unknown flags FF [ 1441.610460][T12125] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1441.612248][T12125] bond7 (unregistering): Released all slaves [ 1442.134514][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 1442.437079][T12159] xt_socket: unknown flags 0x4c [ 1443.126753][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8463'. [ 1443.146654][T12168] 8021q: adding VLAN 0 to HW filter on device ipvlan23 [ 1444.278713][T12114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1444.354831][T12141] netlink: 'syz.4.8455': attribute type 1 has an invalid length. [ 1444.354855][T12141] netlink: 'syz.4.8455': attribute type 7 has an invalid length. [ 1444.354868][T12141] netlink: 'syz.4.8455': attribute type 8 has an invalid length. [ 1444.354881][T12141] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8455'. [ 1444.354897][T12141] NCSI netlink: No device for ifindex 1071448112 [ 1444.551601][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8466'. [ 1444.589443][T12174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8466'. [ 1444.785197][T12194] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 1444.939325][T12206] ip6tnl2: entered promiscuous mode [ 1444.939347][T12206] ip6tnl2: entered allmulticast mode [ 1445.008708][T12212] netlink: 'syz.4.8474': attribute type 1 has an invalid length. [ 1445.038379][T12212] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1445.410256][T12229] netlink: 15 bytes leftover after parsing attributes in process `syz.0.8481'. [ 1445.871417][T12247] batadv_slave_1: entered promiscuous mode [ 1448.848740][T12246] batadv_slave_1: left promiscuous mode [ 1449.421037][T12290] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1449.471148][T12294] netlink: 'syz.0.8501': attribute type 21 has an invalid length. [ 1449.471188][T12294] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8501'. [ 1449.471277][T12294] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8501'. [ 1449.684969][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8503'. [ 1449.908828][T12314] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1450.119194][T12327] x_tables: duplicate underflow at hook 1 [ 1450.126281][T12320] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8507'. [ 1451.907148][T12401] netlink: 'syz.3.8524': attribute type 3 has an invalid length. [ 1451.907171][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8524'. [ 1451.948393][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.950351][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1451.950369][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.950543][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.950565][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1451.950578][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.950722][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.950742][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1451.950754][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.950881][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.950901][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1451.950913][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.951079][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1451.951100][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1451.951225][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1451.951355][T ** replaying previous printk message ** [ 1451.951355][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1451.951512][T12411] netlink: 'syz.1.8525': attribute type 2 has an invalid length. [ 1452.066626][T12405] batman_adv: batadv0: Adding interface: syzkaller0 [ 1452.066670][T12405] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.066759][T12405] batman_adv: batadv0: Interface activated: syzkaller0 [ 1452.090841][T12404] [ 1452.151749][T12404] ====================================================== [ 1452.158811][T12404] WARNING: possible circular locking dependency detected [ 1452.165874][T12404] syzkaller #0 Not tainted [ 1452.170298][T12404] ------------------------------------------------------ [ 1452.177393][T12404] syz.3.8524/12404 is trying to acquire lock: [ 1452.183476][T12404] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 1452.192717][T12404] [ 1452.192717][T12404] but task is already holding lock: [ 1452.200142][T12404] ffff88807e91b6b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1452.209664][T12404] [ 1452.209664][T12404] which lock already depends on the new lock. [ 1452.209664][T12404] [ 1452.220074][T12404] [ 1452.220074][T12404] the existing dependency chain (in reverse order) is: [ 1452.229095][T12404] [ 1452.229095][T12404] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 1452.236745][T12404] __might_fault+0xcb/0x130 [ 1452.241793][T12404] _copy_from_user+0x28/0xb0 [ 1452.246937][T12404] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1452.253471][T12404] ip_generic_getfrag+0x149/0x2d0 [ 1452.259083][T12404] __ip6_append_data+0x3b26/0x40c0 [ 1452.264796][T12404] ip6_append_data+0x108/0x270 [ 1452.270121][T12404] rawv6_sendmsg+0x1298/0x18c0 [ 1452.275519][T12404] sock_sendmsg_nosec+0x10e/0x180 [ 1452.281079][T12404] ____sys_sendmsg+0x54e/0x850 [ 1452.286378][T12404] ___sys_sendmsg+0x2a5/0x360 [ 1452.291593][T12404] __x64_sys_sendmsg+0x1b1/0x290 [ 1452.297069][T12404] do_syscall_64+0x166/0x520 [ 1452.302199][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.308633][T12404] [ 1452.308633][T12404] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1452.316372][T12404] lock_sock_nested+0x41/0x100 [ 1452.321706][T12404] inet_shutdown+0x6a/0x390 [ 1452.326827][T12404] nbd_mark_nsock_dead+0x2cb/0x550 [ 1452.332510][T12404] recv_work+0x1cee/0x1e10 [ 1452.337469][T12404] process_scheduled_works+0xc3d/0x1630 [ 1452.343575][T12404] worker_thread+0xa47/0xfb0 [ 1452.348725][T12404] kthread+0x38b/0x480 [ 1452.353323][T12404] ret_from_fork+0x514/0xb70 [ 1452.358454][T12404] ret_from_fork_asm+0x1a/0x30 [ 1452.363751][T12404] [ 1452.363751][T12404] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1452.371420][T12404] __mutex_lock+0x19d/0x1550 [ 1452.376576][T12404] nbd_queue_rq+0x373/0xff0 [ 1452.381618][T12404] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1452.387806][T12404] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1452.394726][T12404] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1452.401240][T12404] blk_mq_run_work_fn+0x16c/0x300 [ 1452.406813][T12404] process_scheduled_works+0xc3d/0x1630 [ 1452.412911][T12404] worker_thread+0xa47/0xfb0 [ 1452.418078][T12404] kthread+0x38b/0x480 [ 1452.422714][T12404] ret_from_fork+0x514/0xb70 [ 1452.427833][T12404] ret_from_fork_asm+0x1a/0x30 [ 1452.433145][T12404] [ 1452.433145][T12404] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1452.440379][T12404] __mutex_lock+0x19d/0x1550 [ 1452.445518][T12404] nbd_queue_rq+0xc1/0xff0 [ 1452.450464][T12404] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1452.456542][T12404] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1452.463417][T12404] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1452.469972][T12404] blk_mq_run_work_fn+0x16c/0x300 [ 1452.475541][T12404] process_scheduled_works+0xc3d/0x1630 [ 1452.481624][T12404] worker_thread+0xa47/0xfb0 [ 1452.486746][T12404] kthread+0x38b/0x480 [ 1452.491357][T12404] ret_from_fork+0x514/0xb70 [ 1452.496473][T12404] ret_from_fork_asm+0x1a/0x30 [ 1452.501782][T12404] [ 1452.501782][T12404] -> #3 (set->srcu){.+.+}-{0:0}: [ 1452.508945][T12404] __synchronize_srcu+0xc9/0x2f0 [ 1452.514432][T12404] elevator_switch+0x1e8/0x7b0 [ 1452.519800][T12404] elevator_change+0x2fa/0x480 [ 1452.525094][T12404] elevator_set_default+0x375/0x440 [ 1452.530823][T12404] blk_register_queue+0x3f3/0x4e0 [ 1452.536430][T12404] __add_disk+0x6b8/0xdb0 [ 1452.541298][T12404] add_disk_fwnode+0x100/0x3a0 [ 1452.546596][T12404] nbd_dev_add+0x733/0xb60 [ 1452.551545][T12404] nbd_init+0x168/0x1f0 [ 1452.556303][T12404] do_one_initcall+0x250/0x870 [ 1452.561621][T12404] do_initcall_level+0x10a/0x1a0 [ 1452.567131][T12404] do_initcalls+0x59/0xa0 [ 1452.572009][T12404] kernel_init_freeable+0x29d/0x3e0 [ 1452.577750][T12404] kernel_init+0x22/0x1d0 [ 1452.582610][T12404] ret_from_fork+0x514/0xb70 [ 1452.587734][T12404] ret_from_fork_asm+0x1a/0x30 [ 1452.593059][T12404] [ 1452.593059][T12404] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1452.600892][T12404] __mutex_lock+0x19d/0x1550 [ 1452.606019][T12404] elevator_change+0x1af/0x480 [ 1452.611424][T12404] elevator_set_none+0xb5/0x140 [ 1452.616813][T12404] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1452.623159][T12404] nbd_start_device+0x189/0xb30 [ 1452.628563][T12404] nbd_genl_connect+0x167d/0x1cd0 [ 1452.634115][T12404] genl_family_rcv_msg_doit+0x233/0x340 [ 1452.640206][T12404] genl_rcv_msg+0x614/0x7a0 [ 1452.645241][T12404] netlink_rcv_skb+0x226/0x4a0 [ 1452.650571][T12404] genl_rcv+0x28/0x40 [ 1452.655088][T12404] netlink_unicast+0x7bd/0x940 [ 1452.660381][T12404] netlink_sendmsg+0x813/0xb40 [ 1452.665670][T12404] sock_sendmsg_nosec+0x13a/0x180 [ 1452.671224][T12404] ____sys_sendmsg+0x54e/0x850 [ 1452.676522][T12404] ___sys_sendmsg+0x2a5/0x360 [ 1452.681731][T12404] __x64_sys_sendmsg+0x1b1/0x290 [ 1452.687217][T12404] do_syscall_64+0x166/0x520 [ 1452.692361][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.698787][T12404] [ 1452.698787][T12404] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1452.707429][T12404] blk_alloc_queue+0x544/0x690 [ 1452.712728][T12404] __blk_mq_alloc_disk+0x194/0x390 [ 1452.718419][T12404] nbd_dev_add+0x494/0xb60 [ 1452.723378][T12404] nbd_init+0x168/0x1f0 [ 1452.728088][T12404] do_one_initcall+0x250/0x870 [ 1452.733383][T12404] do_initcall_level+0x10a/0x1a0 [ 1452.738855][T12404] do_initcalls+0x59/0xa0 [ 1452.743749][T12404] kernel_init_freeable+0x29d/0x3e0 [ 1452.749511][T12404] kernel_init+0x22/0x1d0 [ 1452.754365][T12404] ret_from_fork+0x514/0xb70 [ 1452.759485][T12404] ret_from_fork_asm+0x1a/0x30 [ 1452.764790][T12404] [ 1452.764790][T12404] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1452.772022][T12404] __lock_acquire+0x164c/0x2de0 [ 1452.777404][T12404] lock_acquire+0x115/0x350 [ 1452.782440][T12404] fs_reclaim_acquire+0x71/0x100 [ 1452.787913][T12404] prepare_alloc_pages+0x149/0x600 [ 1452.793548][T12404] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1452.799881][T12404] alloc_pages_mpol+0x21e/0x390 [ 1452.805261][T12404] alloc_pages_noprof+0xb1/0x2b0 [ 1452.810723][T12404] __pmd_alloc+0x3a/0x5c0 [ 1452.815597][T12404] handle_mm_fault+0xe9d/0x3750 [ 1452.820993][T12404] do_user_addr_fault+0x746/0x1340 [ 1452.826670][T12404] exc_page_fault+0x6a/0xc0 [ 1452.831702][T12404] asm_exc_page_fault+0x26/0x30 [ 1452.837095][T12404] rep_movs_alternative+0x4a/0xa0 [ 1452.842658][T12404] _copy_from_user+0x7a/0xb0 [ 1452.847786][T12404] do_ip6t_set_ctl+0x74c/0xe30 [ 1452.853174][T12404] nf_setsockopt+0x26f/0x290 [ 1452.858348][T12404] smc_setsockopt+0x232/0xb00 [ 1452.863613][T12404] do_sock_setsockopt+0x17c/0x1b0 [ 1452.869179][T12404] __x64_sys_setsockopt+0x13d/0x1b0 [ 1452.875259][T12404] do_syscall_64+0x166/0x520 [ 1452.880380][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.886800][T12404] [ 1452.886800][T12404] other info that might help us debug this: [ 1452.886800][T12404] [ 1452.897055][T12404] Chain exists of: [ 1452.897055][T12404] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 1452.897055][T12404] [ 1452.909695][T12404] Possible unsafe locking scenario: [ 1452.909695][T12404] [ 1452.917151][T12404] CPU0 CPU1 [ 1452.922543][T12404] ---- ---- [ 1452.927933][T12404] rlock(&mm->mmap_lock); [ 1452.932447][T12404] lock(sk_lock-AF_INET6); [ 1452.939480][T12404] lock(&mm->mmap_lock); [ 1452.946337][T12404] lock(fs_reclaim); [ 1452.950329][T12404] [ 1452.950329][T12404] *** DEADLOCK *** [ 1452.950329][T12404] [ 1452.958523][T12404] locks held by syz.3.8524/12404: 2, last CPU#0: [ 1452.964893][T12404] #0: ffff8880223024a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x174/0xb00 [ 1452.975458][T12404] #1: ffff88807e91b6b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 1452.985392][T12404] [ 1452.985392][T12404] stack backtrace: [ 1452.991306][T12404] CPU: 0 UID: 0 PID: 12404 Comm: syz.3.8524 Not tainted syzkaller #0 PREEMPT(full) [ 1453.000782][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1453.010854][T12404] Call Trace: [ 1453.014158][T12404] [ 1453.017099][T12404] dump_stack_lvl+0xe8/0x150 [ 1453.021712][T12404] print_circular_bug+0x2e2/0x300 [ 1453.026756][T12404] check_noncircular+0x12f/0x150 [ 1453.031706][T12404] __lock_acquire+0x164c/0x2de0 [ 1453.036571][T12404] ? fib4_rule_action+0x8f/0x330 [ 1453.041618][T12404] ? fib_rules_lookup+0x99/0xeb0 [ 1453.046617][T12404] lock_acquire+0x115/0x350 [ 1453.051220][T12404] ? prepare_alloc_pages+0x149/0x600 [ 1453.056524][T12404] fs_reclaim_acquire+0x71/0x100 [ 1453.061499][T12404] ? prepare_alloc_pages+0x149/0x600 [ 1453.066800][T12404] prepare_alloc_pages+0x149/0x600 [ 1453.071984][T12404] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1453.077822][T12404] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1453.084178][T12404] ? __pfx_policy_nodemask+0x10/0x10 [ 1453.089569][T12404] ? do_raw_spin_lock+0x12b/0x2f0 [ 1453.094607][T12404] ? lock_acquire+0x115/0x350 [ 1453.099300][T12404] alloc_pages_mpol+0x21e/0x390 [ 1453.104165][T12404] alloc_pages_noprof+0xb1/0x2b0 [ 1453.109110][T12404] __pmd_alloc+0x3a/0x5c0 [ 1453.113457][T12404] handle_mm_fault+0xe9d/0x3750 [ 1453.118347][T12404] ? handle_mm_fault+0xf1/0x3750 [ 1453.123300][T12404] ? __pfx_handle_mm_fault+0x10/0x10 [ 1453.128598][T12404] ? __lock_acquire+0x747/0x2de0 [ 1453.133544][T12404] ? lock_mm_and_find_vma+0xa7/0x340 [ 1453.138840][T12404] do_user_addr_fault+0x746/0x1340 [ 1453.143972][T12404] exc_page_fault+0x6a/0xc0 [ 1453.148493][T12404] asm_exc_page_fault+0x26/0x30 [ 1453.153352][T12404] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1453.159192][T12404] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1453.178807][T12404] RSP: 0018:ffffc9000f967a98 EFLAGS: 00050202 [ 1453.184933][T12404] RAX: 00007ffffffff001 RBX: 0000000000000060 RCX: 0000000000000060 [ 1453.192943][T12404] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000f967bb0 [ 1453.200958][T12404] RBP: ffffc9000f967d18 R08: ffffc9000f967c0f R09: 1ffff92001f2cf81 [ 1453.208952][T12404] R10: dffffc0000000000 R11: fffff52001f2cf82 R12: dffffc0000000000 [ 1453.216939][T12404] R13: 0000000000000060 R14: ffffc9000f967bb0 R15: 0000000000000000 [ 1453.224928][T12404] _copy_from_user+0x7a/0xb0 [ 1453.229545][T12404] do_ip6t_set_ctl+0x74c/0xe30 [ 1453.234325][T12404] ? rcu_is_watching+0x16/0xb0 [ 1453.239114][T12404] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1453.244423][T12404] ? __mutex_unlock_slowpath+0x731/0x900 [ 1453.250079][T12404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1453.256073][T12404] ? __pfx___mutex_lock+0x10/0x10 [ 1453.261116][T12404] ? vfs_write+0x9d5/0xba0 [ 1453.265581][T12404] nf_setsockopt+0x26f/0x290 [ 1453.270187][T12404] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1453.276085][T12404] smc_setsockopt+0x232/0xb00 [ 1453.280774][T12404] ? __pfx_smc_setsockopt+0x10/0x10 [ 1453.286001][T12404] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1453.291555][T12404] ? __pfx_smc_setsockopt+0x10/0x10 [ 1453.296767][T12404] do_sock_setsockopt+0x17c/0x1b0 [ 1453.301817][T12404] __x64_sys_setsockopt+0x13d/0x1b0 [ 1453.307028][T12404] do_syscall_64+0x166/0x520 [ 1453.311626][T12404] ? trace_irq_disable+0x3b/0x140 [ 1453.316655][T12404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.322735][T12404] ? clear_bhb_loop+0x70/0xc0 [ 1453.327430][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.333327][T12404] RIP: 0033:0x7f6379f9e159 [ 1453.337772][T12404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.357472][T12404] RSP: 002b:00007f637ae61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1453.365892][T12404] RAX: ffffffffffffffda RBX: 00007f637a226090 RCX: 00007f6379f9e159 [ 1453.373876][T12404] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000009 [ 1453.381852][T12404] RBP: 00007f637a03506b R08: 0000000000000060 R09: 0000000000000000 [ 1453.389834][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.397816][T12404] R13: 00007f637a226128 R14: 00007f637a226090 R15: 00007ffcf1b63a48 [ 1453.405893][T12404]