last executing test programs: 7.990628993s ago: executing program 3 (id=5812): socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000eced9bef1d5c3e8200000000001000000014000000b7030000000000008500000083000000bf0987ff000000005509010000000000950000080000000043e7b5538500000085000000b7000000000000009500"/97], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x71be}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept(r2, &(0x7f0000000240)=@sco, &(0x7f0000000000)=0x80) close(0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, r2, 0x10000000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x12, 0xffffffffffffffff, 0x194e000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x97, &(0x7f0000001300)=""/151, 0x0, 0xa}, 0x94) shutdown(r0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 6.459604917s ago: executing program 3 (id=5824): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) 6.331718294s ago: executing program 3 (id=5826): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "ca024f5b66b99841", "f97dce3824535fdedf20730fd87562aea5bd495b98ed64d78e8fdd643d4a0666", "81c734e0", "f21da7f300e54e69"}, 0x38) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x810) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) unshare(0x2c060000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) socket$inet6(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "ca024f5b66b99841", "f97dce3824535fdedf20730fd87562aea5bd495b98ed64d78e8fdd643d4a0666", "81c734e0", "f21da7f300e54e69"}, 0x38) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x810) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) 6.08460512s ago: executing program 3 (id=5827): close(0x4) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(r0, 0x101, 0x4, &(0x7f00000003c0)=""/150, &(0x7f0000000540)=0x96) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000380)='syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 5.729892932s ago: executing program 1 (id=5831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 2.348572116s ago: executing program 3 (id=5844): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket(0x1e, 0x4, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000009000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffeeffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182a0000", @ANYRES32=0x1, @ANYBLOB="00000000080000005047100010000000007701000000000085200000010000004bb90001fcffffff18110000", @ANYRES32=r6, @ANYRES8=r0], 0x0, 0x201, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xb, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x7, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000040), 0x20000000000001f7, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket(0x1a, 0x803, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x7d8, 0x308, 0x220, 0x0, 0x308, 0x4d8, 0x708, 0x708, 0x708, 0x708, 0x708, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x118, 0x140, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x20, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev, [0xff000000], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x20}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0x4]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1, @private1, @empty, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x838) 2.278138284s ago: executing program 2 (id=5847): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000001500)=""/15, 0xf}], 0xffffff1f}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000600000000000000000007020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008b00000095000000000000006f20ea0294de9d5ebe3b5b0c0b1527fe2db86c9776be96a1681599408dc25f6d99d8b4046d81c8a2865aa0b9a5e6f5818763db83bb7e6c97b2c95f7a91ef16d53f69c1f2777e513fc70bc36346246b53309b3c68cd81364fefa77ad5e2f47fe9bf64a02f0c9798dd80c2f621a18c38e86423a6d54ba0a080956b7577402e9fee6d688dc46ae1"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000000), 0x4) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000001500)=""/15, 0xf}], 0xffffff1f}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001a00)=[{&(0x7f0000001680)=""/82, 0x52}], 0x1}}], 0x90}, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000600000000000000000007020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008b00000095000000000000006f20ea0294de9d5ebe3b5b0c0b1527fe2db86c9776be96a1681599408dc25f6d99d8b4046d81c8a2865aa0b9a5e6f5818763db83bb7e6c97b2c95f7a91ef16d53f69c1f2777e513fc70bc36346246b53309b3c68cd81364fefa77ad5e2f47fe9bf64a02f0c9798dd80c2f621a18c38e86423a6d54ba0a080956b7577402e9fee6d688dc46ae1"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000000), 0x4) (async) 2.137290505s ago: executing program 4 (id=5848): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xb20cf6141e01826d) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x8000f28, 0x0) splice(r9, 0x0, r8, 0x0, 0x7f, 0xe) write(r7, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newchain={0x6bc, 0x64, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff2, 0x7}, {0xc, 0x6}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x680, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2d}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}, @TCA_U32_ACT={0x354, 0x7, [@m_ife={0x124, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xd6f, 0x0, 0x0, 0x9952, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x61, 0x1, 0x5, 0x6, 0x5}, 0x1}}]}, {0xaa, 0x6, "aefc73555f9d9b66c86b8c82d157d400fd0f9f538936414d0c0473c92f0ab67977069b4d5cc58fb07204261c1db7ac5d47f8b754ba7a9bf977d7f575c7ba6101f4c8dbbd1c87b0080298bea7d6e8df1d040f58d1bbf831972dbcc7b2287f693a562254763383009ee6cb92e60d0fbb7eaab591df34d48a888a9390bfe4a1e37ab1088b2a92064718b13d5fded08de337d257f04b247413682bd050c6e5a365185c2b5f478d87"}, {0xc, 0x7, {0x36b1d3759726b2a8, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xbc, 0x1f, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x7fff, 0xffffffffffffffff, 0x40, 0x9}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0x6c, 0x6, "65823852bd02189d3ba30d8ff449e5dfce1ff13d66a95ad8efd0a52d8ac32f7587f73206000941316f5ff65b0c552f56cbb9636fcc605d8665b841d52f54a842772211ed10fd992893a39946f9b7ed6b3768162edde734882fcdf8a58b516b82dea9a9d9dcd1230e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x170, 0x19, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x0, 0x401, 0x9}}, @TCA_DEF_DATA={0xa, 0x3, '}\'\xb4-%\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xb, 0x3, '-[&-\x86{\x00'}, @TCA_DEF_DATA={0x6, 0x3, '^\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'htb\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x2, 0xe, 0x7, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x8, 0x1, 0x771d, 0x293}}]}, {0xbc, 0x6, "142882953340c1d59507e4f9e544f635a260d3802c44426aebae33087861489fb2d974a25c1a8980cb9bb75ddcd341e400a7b32ad87f609bd188a62707a458415eef40368532d3506c7c02fa302728043fe38b7c673bab8f69ae7915b509fac2bd5efbcab83d9e63d8aebb32c599edf12a06bae303711f35c5a78ad94c73c9347fb3e1aefc7c8a92077bced7e1a968413c919d66e78b46666dbecbb66461696eeb44a5fb3fda2cfea3bc4bc15f181af91faa4adea64e89b6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_ACT={0x2f0, 0x7, [@m_simple={0x114, 0x16, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x3, 0x20000000, 0xc998, 0x2d41}}, @TCA_DEF_DATA={0x10, 0x3, ']\x98\'@@,:-,>\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x6, 0x10000000, 0x9, 0x4}}]}, {0x9e, 0x6, "41383ee8e420de724ed81940c1b3b58c11e49c52467c9dc95bc8bde89fd660d2d987dd887b4ccf24689d5bab89a189b3654b2ed22e452b69e63961d8be43d1f24a3de12b6953dabe11f73f23785983be3cd99c51705c1f0a864d091621708a6638f487578fbaffbf6f3704ee5c3ea12abc2aba9be7fc50f29f1aeff9c8439a9de1fe2f55e46b9d290eae622243aaa8ba4cbdaefd6df4f31330e2"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xf4, 0x18, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x30, 0x6, {0x0, 'filter\x00', 0x1, 0x6, "16a7ee9668f8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x43, 0x6, "a65afcce38eee5205a5c9a32a685523af411b28a413b68f21a73d09e9d86f671128c507c1ffbfe652d50640fa77ab91438761ebe007fa374d41a5ea5b9c8b2"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xe4, 0x1d, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}]}, {0xa9, 0x6, "040bcc42d4502346c928b16aaee3a3c2c2b46b68f8db13437cc9410facb23674146f4f41579d698b0f8bc22a0090b91459bb81efc85e977f37030bb861f15d0dcbe2e142e3520c076801a4f1ea2f1c8425a1e958ccdba1300b41c6c65a49294dc33d7addab2119c7ab4433f80084018a85b90083814ab7b21a75045ebc7b142b3699b6792b3045c13f7dba9cd6879e8fb3fb372e4fdf6f7385451c2886aa0c676a35ef3bc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'dvmrp1\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x6bc}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x11a}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 2.136746304s ago: executing program 1 (id=5849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0xc000, r0}, 0x18) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r1, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) socket$kcm(0x10, 0x7, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="00000000b382d9b6983b71b8c40defd100008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r4, 0x4, 0xfa, 0xdf, 0x4, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x20, 0x8000, 0x1, 0x2}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x6, 0x8, 0x7ffd, 0x20000, 0xffffffffffffffff, 0x0, '\x00', r7}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r8, &(0x7f0000000140)="f78b", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000001900000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400ad4bbaab4c8fb245f03c2abba90f5a5e5ecb15b61328f9621997a96536c2098cfcab83ff1f180d653a4294c39f6b91321608aaf69d75ecd0cc694a0c8019232b253e75c9daed74372a600ac77f3e55443406aee6", 0x5a}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x4) splice(r5, 0x0, r9, 0x0, 0x80000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000181500000000000000000000000078136c2877aca70ee35f2bd0f9c06de16f895a138423fc17c0ebe08cf473970cbc3b900da357b127255b16a75b9221b5580ff7dedb1b7f66fe78a3af55f2117ad51668a5506fff1f423f454ace69e8c9ac77c36ad20e591b25a200d81b81fe83b9d2ac2f0b620c7749542a209b57ba6b74542478e7417257b6f48718a689de80b35d3a2861", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000002100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', r4, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.136521547s ago: executing program 2 (id=5850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r5 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f0000000840)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) 2.136122827s ago: executing program 0 (id=5851): socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r3, 0xe4}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000efa000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x11e, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 32) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYRES16], 0xfdef) 1.769146355s ago: executing program 2 (id=5852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003780)=@newchain={0x60, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x60}}, 0x44004) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8, @ANYRES64=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000010000850000007d000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x500, 0xf8, 0x3d0, 0x1c8, 0x3d0, 0x300, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x1, 0x6}, {0x0, 0x3, 0x1}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x4c000) 1.628602642s ago: executing program 1 (id=5853): syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0005000000000800492d0038006600000501907864010101ac1414bb4404dcb289078bffffffff44043e50000d00907800010005000007b200000000000008a8"], 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000002", @ANYRES16=r2, @ANYBLOB="010030bd7000fedbdf250600000008000300000000000800030000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40804) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000440)=0x62, 0x4) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02007e51d936cd5f693f9b0200000000000000010000000500070008000000c08fbd9dc6c74b9fc8dfb1861d01bc99f71e005fa1e7ea3bb27fcfe7f46444012b305f39e206e254fc593968d641"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r4 = socket$isdn_base(0x22, 0x3, 0x0) close(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000240)) bpf$MAP_CREATE(0x24, &(0x7f00000000c0), 0x48) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00005a0a3144001e000800fd00000600e2ff0008000d002ada000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r5, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) 1.628096362s ago: executing program 0 (id=5854): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x9a, @mcast2, 0x1f6a}}, 0x2, 0x7}, 0x90) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @private}, &(0x7f00000001c0)=0xc) (async) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async, rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000fc00000000000000000000000000000100000400000000000a0060003b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000e9a37c4c000000000400000000000000fffffffffffffffe0000000000000000030000000000000002000000000000000200000000000000ff7f00000000000006000000008000"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRES64=r7], 0xb8}}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0xa, '\x00', r3}, 0x94) (async, rerun: 64) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (rerun: 64) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000b7befe64031ea3a091d057ab7c95637a78871fdcf39074fe89373ffe606f32579c320b84eba3e1979953a5ac1ab22cf8f7d904784d98cbebdd1f54fb87460b6e62085e2d630594d459e43e06dd9d9e213bafc585900b68fe580f0aa11dc44ed88dbf20fd1db5099282278be23e30fe852d4fdbaf9130d9a2264e9fe6c128", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}}, 0x4000) (async, rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0xa00}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'hsr0\x00', 0x700}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket(0x22, 0xa, 0x0) (async) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000180031070000000000bf92e335fc849471aef5c5f7d38abf7f74570600be07000008001700ffffffff000000000000000000002000000000"], 0x2c}}, 0x0) (async) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, &(0x7f0000000000)) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000040001901feffffff00000000017c003492280c00018006000600800a000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (rerun: 32) 1.591552187s ago: executing program 4 (id=5855): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x400}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000540001002bbd700001dcdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="0100030000000000000000000000f80000000000080000002cb3f22afa2514f03d77800f008626849c2cb11f1be391ea355eb3bf177e12c49c5d6fa01f1f731e2608168e8e5d797c788837d5f8793752ac11ed319800d042390b469fa5566c1400fa1965e0810909431f1c5eca80a698828b8550bad8286947"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x27, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)=ANY=[@ANYBLOB="30000000000b050000000000000000000700000308000240000000010c0001004e465155455545000800034000000001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x8) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) bind$ax25(r9, &(0x7f0000000080)={{0x3, @default}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) connect$ax25(r9, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x306, @random="2b8a053ba46c"}, 0x10, {0x2, 0x4e24, @remote}, 'veth1_to_bond\x00'}) 1.53385551s ago: executing program 2 (id=5856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000200000000000000000000009500000000000000bbd687ed5521d54f8c2b59a1a8421c7c67fa75bf4d9451c499b7b36e00b5219f7d20e06edf8ffa0ca7832092452d3081836621dc5eba7c3f1eb3145e9f1bd5837e93ae5098b2ea1811907b450c36337b833fc98e97a8be63ac9fa6f0f7556c2abb16a352ee9529f8a6d3345107540d8b70af79ef2a53733387d843b53ffcca18994e4993d38f1bd3f6287a1d17909e2a40c5e7bc9655958a556a55"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x110, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3674917455309f0d3e83bbba8d81df1d"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "621185bd84b543e1514c98c1ab96f38b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "18ae64ff6e4c45b5db2e888cdfa8242b"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c8e6c1e08ba4a41cc258dc8ce5ef2cc3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "21a138c2370656376ed4a49776c10f634dc589b13274cad5b82ac60a2089be1d"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x45}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x20000015) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$packet(0x11, 0x2, 0x300) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r5, 0x121, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x44810) sendmsg$NFT_BATCH(r3, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$alg(0x26, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r9 = gettid() r10 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 1.456485338s ago: executing program 1 (id=5857): syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x1, 0x2, 0x30, 0x68, 0x0, 0xff, 0x6, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x54, 0x0, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, 0x0, 0x24000084) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) close(r3) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001000000000000000000140003002001"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711239000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004000)={&(0x7f0000003f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@func={0xf, 0x0, 0x0, 0xc, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4b, 0x0, 0x77, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000003f80)=""/98, 0x37, 0x62, 0x0, 0xfffffffd, 0x10000}, 0x28) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000004040)) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r11, 0x1, 0x11, 0x0, &(0x7f0000000400)) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r13 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r13, r12, 0x0, 0x0, 0x0}, 0x30) 1.455372607s ago: executing program 0 (id=5858): socket$tipc(0x1e, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@generic={0x0, 0xffffffffffffffff, 0x1000000}, 0x18) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0xfffffcaa) r1 = socket(0x15, 0x5, 0x0) connect$netrom(r1, 0x0, 0x0) unshare(0x38050f00) 1.320080565s ago: executing program 3 (id=5859): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311410000000000851000000200000085000000a200000095000000080000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.31629035s ago: executing program 2 (id=5860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x48) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) (async) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000300), 0x0}, 0x20) 1.220651957s ago: executing program 0 (id=5861): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f0000003380)=""/4094, 0xffe}], 0x2, 0x0, 0x500}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x3, 0x42, 0x0) 1.220169397s ago: executing program 4 (id=5862): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x1c, r1, 0x303, 0xfffffffd, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xaefb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) 1.158887865s ago: executing program 1 (id=5864): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x2004}) (async) epoll_wait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x2000c800) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001002dbd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000020000000000000000000000000000000000200"/112], 0xb8}}, 0x2c000010) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="7e3ad8b1150001000000000000000000ac14143c0000000000000000000000000000000000000000000000000000000000000000460000000050000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007034fb092594520100000000000000000000000000090f00000000000000000000000000000f00000000000000ffffffff000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000b56b6e0000000000000000000000ca349102c424520c95b9d535f4ea35288cbab5146f1a"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) recvmsg(r5, &(0x7f0000001840)={&(0x7f00000018c0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f00000005c0)=""/19, 0x13}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000001880)=""/15, 0xf}], 0x6, &(0x7f0000000840)=""/4096, 0x1000}, 0x80000120) (async) unshare(0x24020c00) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f0000000240)="94", 0x1) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) (async) tee(r8, r10, 0x2, 0x100000000000003) (async) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r5, &(0x7f0000000780), 0x0, 0x6492008a05d4ae63) 1.110883187s ago: executing program 0 (id=5865): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x92a, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x92a, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aafe97198525940643f6bb155f44fdd308d88cdfc2710b5a", 0x18, 0x80a4, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @mcast2, 0x5}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x21}, 0x80000000}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="ea0f2a20b6c1b805a550d9f8ccc6ea3abbfbb94e2ee74557247f75a076c35581c1eea62982a64538252fc5d53930d240eafaefb0640e45343b3291ee06a690b34fd9f176fbc9f0d9a2cd1fbe1cf74edfe0bbbcca77792f9832fc", 0x5a}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000290000003e000000000000000000001014003eab0f32302e880ce555e2ddc9f5b42aa630090bd624"], 0x30}, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r7, r6, 0x25, 0x14, @val=@netkit={@void, @value=r7}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045060024006700007f119078ac1414bbac1414114e234e220010900c58fbf2d7b79e138cfefb04c9df10aaccc4346cc784948248bf33bce1758eb21e630b518c65ce3ea4db39f502db3409a93283608c57084aba512783123707000000eb78d0a412a99dcbf3e5603dfbc6d07840dad16c2051aa6b0e8f03001a9b88aee16d99636c6eecd421b730eb749f8843af68a9e15f4eb616fd"], 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 992.240366ms ago: executing program 2 (id=5866): unshare(0x6a040200) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xffffffff], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000b00)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ip6tnl0\x00', 0x2}) (async, rerun: 64) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000004c40)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703011c22522ba800000000000000", 0xf}, {&(0x7f0000000a00)="ebe3a047961a7dc028b8ce11fe56b53e19956141c499f4e3e0fd01000000000000000000", 0x24}], 0x2, 0x0, 0x0, 0x2000847}, {0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000c40)="f7f45c521a5c533ab2672607e9307eab2ebcfeb8a626ce54b7b0d31ef02c00d8cc067fd16ff2a2279def42e5e3ae0d8e545ef4d7f79c4e2fc167c6a95c69cdf25eca05ea346f8ebd8a665cdcbaefb3bf3a9d468dce949ca80ce85d5a754f875d55aa4c37c1b64e383d8f45b933c960c1f74c96d90c6d7c8617c836966d50f3bdb46295a8fece52ae565facd35abf8fc4ecd13a0bf9061398a07896bda14b651f22003f3de22abe90356fa9267ba5d429ae2c80d486d7d2ff9b5755b27b474a2750aa0f966de8d268686017731f1d3fb65dc42b032c4ef2cfb4926ced0ee949f14f0991a08d2a4cde39", 0xe9}, {&(0x7f00000010c0)="6833de39fa979bacff05eb8e95eecbea56291201297e2d671030a67df28b64308072e669db3599b74587722dfe4955abd2e483922904e4060b44c829100361fec9f734b55cd3b6f1f089d9bd8e9588b86b0ae29be484b46ec297d2ee24e4955ea5f4e67f4105a91d4d90fbe2efcfca7c02d9c7532f5f75987733c856430bd5fa49b5e4c806429fc1a9b35f9e5e9aaa252a4153d739591d83b596699117a242a306e629b1836972747c340043cb87", 0xae}, {&(0x7f0000001180)="cce70a74e601acf556e52dfd76299e6139eeeaef0ac6859528aa1f10fb6e45abeb378c6e78fd6b51d2fea1c98ccaa88bf6b007896a0896fe997a45858d6d3d601296fef6996a2e85eb9da8ab52c07f255b54488659073a8614", 0x59}, {&(0x7f0000001300)="fd1e43ec8861a9f6807dfc14435db2887260d130425e8ae188eec5f3f23b990fb3a165a9a51e4b723ffac5663b33cb28b740035a0465e0e154fdc5b3c2889bf865997b7b891fed846ed20ca62ea26f1fd00a7dc1efccb011d00ff1d2f0ba66a50478c3a398dedd749e58c37aa1caad4916d6b3ac8084f5102d171cbe46888007172ac627498eb1ce86130eb34cdbfd8ea1808dd438cfa8352e31151f04c52bf8dd4c9f0cd4d8887b8953a7e30af18aaa28648c9e0d8c22a8ba74cf4092fff1155ad09fede99743953c41873be460e7af56b4a20e0cac2fd9045209d9cd581569002338f87eb3656a1e1306655147d0a53261c8fcefd783cf", 0xf8}, {&(0x7f0000001400)="3598833d20410f62ca8b7b7648c597e96544a47055a2239ae9c0b20fd5765404d3e642f809dd25dc187a69ae34f11f5badc55aa3f92726c082e85b7c0f9d432614580be75e94a44feda3f5b4ea72f58befffa0c14cfd1402af5ac31a85201bd21292bc38", 0x64}, {&(0x7f0000001480)="61a7d3f1f52e3e382022796dadf20934f9358901b9130d569e4beccec9f79ec1a8982f12aef9f4342361876f99836815f4bd5bffeb84847704988c096a93165aeb98b6d4b42ce99cf3adf1f3ea108d3cf294f3531a8d25a6a137dfece05974a466656660bc811d53eb0209e842fdeb551955d2b19d8634fdeb3b9b82bf82597cdfe462e3e589f687089f435e6fb8aba4291e223037cfdc928f3a6595125876e2bb95e4f94c6ad1dc9bbb1bc681b34ae0709bb9766a810e4b2c12", 0xba}], 0x6, 0x0, 0x0, 0x810}, {0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000015c0)="f3193c871ef4270be031676486d319e651167acbc812b101b6391e13caaa41eb7c0ef1ad7b9f2ae599be6b41008b1003b99a031c30156f4444aabebbeba3055dd37e1c042b125d137d60936fdd9e54d573f90ed3bcda7eb7f78137a21badfd10f302f7b9e7e6e92367fe1de4917ddd49845a57901e323bfc283a9e941bdb6466e585", 0x82}, {&(0x7f0000001680)="e3675898ee8851df8a72d1c7b8e6e82142028d36f7302851e6ea5b70ea993a11318a89f05a28b17c63e4837f239a43b0371798116002e75018b40a1813ba0ba70c656e574d044ab0fef6aaacc02384769a2cf03f3abd0381c82106a106dea01d2dba0cdcdb84eacd5a32fc0ba6c295", 0x6f}], 0x2, &(0x7f0000001700)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xc}], 0x78, 0x14000000}, {0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000001780)="82bbdf016196ef22f84981de5525b83342a6db13c0439b3b3be2052ac13d1fd92fef07ef1758674e22d09ad3650db491c49d78b1f06d010da48753f1c6fad1e5103c35e715e565158b25878fbfa3b2fa66f783a8e687ab6f65122093ec41f7cfa47629a2b1ef735913f5ff3beecd5a9524bd5cfde951154aa2228187698b2ce4d50e84340e11cc84d5b9d8c081f99855641ebd9b99a0230d59701c6ed863cf08039b9edb3d41812c28baee8006ec683702b0adb899ff4f7ee58af7dfa4511138d167c4bc56860d4ab4df2368e729dd88bf5ac9a32616fd0ac7309d3f9f0bd08240a3aed0229332796c87004a57be17da1dade27dffd19fa09db1d12aa160bdfdc9a5bc7d53054f5127f64ec5456ff706875f569a1c2817a36cd8ba1d97cb9039428dd3ee2324f807ff22b08a4b0f5ea8ad1194ddc19f65ec23a8816d9de800cdcd4cbc6dd8fc4e3274080e270bad4be760dc054799179b9f349ff031d1aa1fc1ec147322d3cc206adba613aba3effa91d2c1a63f11f5341e18cfe0a2414ca0d9b128e86f5bfcce76de110020dc3efe25f2a8cb5eb2c6084dbc77d586be91ed9b4c1d05a385bc08222a3d019a4b21e7295f93bad017396abbcabcd6c9e46cd2ed73dd209120f2983e07376a81517519c91eba8807bee3bd047adc300a524299c822f96bfb2eb006573378ad0123228bf41d8354e5e7baa5937c54d719fe62d72b942954efe26d29eda4e861d0214b0c7d204d1c56a94344890e2a7717e74c11fee5287c84542904f22757a6145094d737fcd714e4601a38032865188bbc9c3584828acd070da99172942f26b1f3cbd413fa10392ca9d1ac61c6a56984d2a764cda33fdd67dd883994e9b67e455789de6167c82834666f075b4ce0d1d4e9c3c92980d9b1bd97784456eeb2a346b0f6dd65772ad9d9dc5d0972fd3103c61aad240f622790e14318dc947243069429718c5492d0c6eb2a302c6d354ad1eddb42f18ca089366bc08a927db1c9f8c4963f02f6abd0db09e2363d3a6188bed30d7d59eed7a3ee96198b6892bd539db203eb98fee6df95059c52bd5fc74fe78564f32a8e90bb5f912669e6cd4e6ad4dd05679ad9dc42e2edee32ec0e779cc706213283dde4e50a72ddb68df86931935e40c5d5d058aecba39a5233cc23c4964520201718dbaaa836789394a58a29b0704ad47653316407ccd9ac492e23665ac711b1c99eb8b68e8d31f822d457146aaff3caaeec2cfadaf98ff42ba66da3d31611e8c320ee3bb64b595e77077efd6b1de3486b763b15b7725dfc6567ff701f402eb1c4abb13397b2d52b8f7e7b0b590e74659584eb676e29f8dfb811346275d73f4832796806f29ab84a9a071448f674ddd5d4c44d46c84761f5a9aa4c916c3a103718b31f943f3606b0ac1b4b61a99b120ba34c97a301a15d22d8240a92d95b43f186e51cec821ac1a474e79dc9e933a74b1d8a224a8c77ca9025b18a2434b94ad8550eb6fcd403df8670f345e11d187b3bfca2976dedc9569abb08d59a3ce6a1d98df7cac4aaf953a1a96644d0c5ba68ab14349c2f9090f11d2711f96142afd221000b7c8553e93a0399ee1685367c131e2feaecd40c37d0768230ffcf2b51fc05c99314a97e2f2294e652fd13b723abe91fc0f8021f176691629f6d968928b919ccee00091dc41bee6ff9972621130c03c4bebceb5f4184828c5623e58f2bb6d83338c3c8cf4bb13174a1c7b3a8cd611da99a41903a5909bfa6e7e8e51ddf38a7ff559dff0460c0a54c985df0d71c30ee9c8fdef96d1c930f23aa4d4e28c349361b0573278445b939b74b68112702ccd04519b5e3d8ad4bed12aa326eb7c47698d7bd1458b64c015d0ed67a82e9cbf84cce00de9106b6391cc1d17c04b42b96d52ad44586040654be2d795b724c40d13ad874d660c9464b100171b62c552aae9239a4effbc0b6f9d7eb757cce3f48166dfadc4e5e73421c2611108add8b58af97fc14d0f647eaee5e6feb62932e6b16d1d52242e04c198156600a179459d743c201fa6aa03897abfb36ecc91d06d3fc306dfd5308d6f770651d9260f2ee33c5d5a17c754a789139a657e46a8e9583f665c460329ec15e40ddd7e1449ac9bab5253d98d5f8dc93b880c724e453020128a41d3a6b5572625d260d4b087d3005cdf49a4ec275ab4348238e9fb5a65c9c29debb066ce2517d25724bebaedde9664aff49ae1fa77d90f8e5f526f328e3959a4a5c2504dca01741ab085b67e7bcfa031100ed941ec80c67e5380c3225a0c7373921c177462761282ce3370b34ce9031571ff460597a8beac0f89e3b9f5ffc75cb1d5cef7b738b471f89759ab0878a206b7bb1d9226152c98c1a57f1a8f60693ab399381bdbf9d84a96644869e79d045a4c8a0e6ecd99fba2bbca5dadd4ec18258f79d29fb312ab5d20c304e0bcdd9f4fc3ce983a7f210fa0a533317966e0152f5c08d5182824807bbd757b496e09188bff8d809b0cde3f22730d5f5fcbe75a3d4e5369af41042251a2034bb6d7cbc1af4921e44881a8d50cc20a4712a913c0992b3563922b630c6d479b28445d212745c177fce3b2e02af9914129e57aa4a83f4998b3e5a0187509fccdd0b10081c3c99a0fa24083d61bd8d43654b3e04ede99fa0dfe6023b5c1c8a8f855a5ae9e9fe523e94e9fc8ce19bdf784b4832369b607670d4d73807c679fc6a2a0cf264d6954d8931b4a5c874e856f503f8847c7fd7ef6c5942e0d99b6f8a5e965ca6d38cdbbe7f7f1a86c4135cb123c2b7d2df4a0a1e189f01b03325b0bb9c73d13007fc54bcfde799eab12b01a04888fe8e54e346efd98a48f6e90e360c1add11a2ef1e984e099083986c71a776a73aeae201f7625ee13bb856ca4e3a523147694ed40137a5cf50d7d38cbb3d5b07e952c14079ec87f2e6271a808bf36d5f80975f5e5712aa0e29a0b1b3f0d71eb9e44019c9c87738bc491d909a6ee0877b58ad68116070c18c6f841bedb90817c4b1310e1130c05ad40b50966b9b88cad94ce37c44d2e283ed635592458380aa29452bb7f712c8b958ab773a7ab154e6cb26293298819aaa25907c55c8ffab6e235e53f088fe21f1738d0e55bc0a20f0b15cebb57e7f91d8dd00780bec4081a79690bcfc6e0ac6fc80f7c641e8ec4040e92ef6866210a2291278f87c3b1de6a85ad812312d7dc87118ec630c75f94a8b16e2398619744fc1a0b2acaa49b39b51630c8508a882c9d2e18b4d4336f11b0ebb2ed964b2479b2bffc82892f58479f7f70b25b70f575a2f43f94b08fd428d498c56f51f9a35752871758d192a7a9546a176170561b04cd23860ab23fabbacae756e7a21ab52887011c6faea748d95105c71556bddb53555f72663945d12d3284c7f1eaeca2c25537918946a24bb68a86f4a7674b84d6496d927860bc20c58fa5dae8bfdca6b6fdf3827e7a53d294b68f96a7ed47d1c75343564ea7ddc199e784c2f6e5c0cc597c1ec98964cb77a986355fd9befa2671f31b7c402b36809cb102cf1eba5e66c5c049169f4522383ccb88c32612d21c38712feeab1ff42b41a51d367cb7607c2ca51a3cd922b815d50408e0e66b506f064bb1be2928545b83df9e7c0b3599584404951fc11115693a23ed07200b8aebc65b4ca00785bb8a640166ac93b2db464145716dce4fd34ffe3d6d28be44903e1244fb3b96b77286187b023b3180623fafe5562bcf91894a13154e960507c180db069acca1cc438aee0c657c5bf2a6d155a04a5cefaf04f9a6edb129e405f27b7b41739a13214f51829c72806aad4cbcaf872bf7ad83afc992a12df9dc854c642a32c2856b781141db1c7c1a7d38f34eddd01a3b97fd736e43062297e3d808dcc206ccd3c2f01e83f4571af3979e0c185eb0d950c564837e8b4f55658a9e2b8ae26b5af09a46e04776a98dfb564faaebc6daca37a3f79ffed233eaf2757537529b43edeb1234f36a14e019c7ac4e53597c841bc93ee7fc5c660d48aa3bc21635b81c041173df9fe97d38c6cc7f863c951e6782cc27cb4799e4f9bee7cfb68aa7dd52c4479e959f67f8af9b80b11fdbe52a2c4015f64b42ac3b2ebbca9bbc189edcce0e1b0ff3009afb0ec82c3c403c4b438b031d55d1249b2a5d7d27d7dcf82c7449dfef0d7f832dde4fb3107bedb959de0258cc6ba5c8f8a5ecb3e400c0b85189d30d36b9dd2f5a848a08059bf73a64eb3b5f223402c0fa92d0d381612b1446a42d528074edcea0a0d7de1482c08acb2209a8461a653bd50e7b5bc26ad322d251bc4341b1819558fe311a3e156734e278e5fdc97aee1974fdf64035d8ae21724f1a3108df81b939e66706d1d8463180ceaa0d674fddac9ce05a4ff3869664d54c87f05be47568991d78cc67549a28ec05f132a356a617dcb4f5fbfcef41a275064e462ddc2be6894ef2302b9f3032b75ce79fad6a56bb746bf19081fc017ee220ebda794e5a96c68bc9aab70025045ca371edcf2c256c3aced805f827b72bf296802b0aa3015b88ac90fa10eaa3233961f5b7ae2ed0bf716b3b6861651c1bcbaec93dff73de3be163a827e56463005836effedcc83317426fc3200d1d6d78157b85f7f0ee779daef7085d3f74180c69f6ee8a423f89d7759e5201b22a853bf60c9593bb6759c6ce61810bc66fb79fd2698da3f0c5514b37fa2c2af6c361cb5f253b7b59418c3ff4916a00bd6edbfcff526955c8f652e00c30090eeaa9d11303979b7dd0576e5190e3fb5dd79182beb38615e8c5c077e3f3d862de56f580151b4750f1ccea36ed8e7642f1523c9a3d794fc075ea157c1ac8cd29e4a590d682cdfb3ac2a1d25db0d05485c93cc04f5aeb663ca509614ab70cd3d463e689166acc78b78351aecc1ed97385a4758e644c4a6a195c52d5eaab40825b88c9d7754af09c364d5633ce48b820f6cc197130f135e7eeef343ac68a67001f72c3a18d01ed2634fb0ecfc8ce025137ef5c4d49a8cba07ea35dc21312c80c7430251c7c3470b3c6dd87b1b2a7b5b541627d9fd3df0a0865620f6130426cab15650c87180919a576c45dcdf4bbdfc1f221c6edfdc6a69a745daf5c0286d2d564eb71d87312912ca4f9caa6c4f390e40e2d91bb34ac351d3fd188459333601c3fcdb8aab465106fd9579a4765c0e234f2a0f3be3a728df1352a6cbb03bbdb84b678c9f06e0c7c9370d9456bdea5f13fc3fbccfbd26751680892128f8efaa12aa4894fd33524a7736698897ed9d3c475a03bc870a20260cdab5ada07b698c3cf6f7283c730d95288a047388ecc73ea32b27717fa0a2c97e82bd3a7acff42b4a9b188b82ae0232211c2682d8ed19d1630aad672e8b5e9a55f040417242c038cea57201713794c4f5bdb89465f2dabbf58f6851ad84fb596767b74fc68712402f12da2c799abaf7dc33654d5ed9d11b614c30ad97f97703ff9a4438c80e5471b92e20f3f246603323c92754c26f9b17ddb22a46f89d4ed198fa6f729448e3a81e2e5c05816e72ab8daa0eb48e20c5194f128062d604a96deae13ca2cfb929dcb0e5ff96455899997c96c9e6bf8eb084d458563d795fd5d5ed5e949df985bdae60a4eae95ae0ee5feece5d8f980e11feeac787c1ad291f8babd5c2c590162cdbc2753f7315895cd49b1bf784510e5451f06c0c1bf2df4aa2922fe9a5ca499953104276817fe8cc827d2baddb6056dcfa74a62fe490785db995eb6cbc97835de60ea94915f994372525ce265a2e3430577028edcae8b6fb3a658a82e5f310a6e2e0ad1b05c80133041dcb3c1b8bab1294509bd3724088ae1976cb26a9fa", 0x1000}, {&(0x7f0000002780)="1d58786ac567174a674f4a313555ef79853823e4c88cd31a3b0dfe0375f39b1bde20b57c0dbce5590e05d3eb8dbfc43ffd35563603bf5f1331e3cb04c793468fcba5", 0x42}, {&(0x7f0000002800)="579643c4562719811a7625fbd3026d7522c20240c170bfa7e7fbdddb221074c4ab88e7a03cfb3f0949beccef437d059da5a43f32ece7e1e8cb4513c2e6a3126df47a2588414f673bec24502aec847b56bcb13be8edc2c2358ccb0c9c58f9ac21d2a714d99fc34063b5a9ac504fff453ea55de302074cd5d35000eea4bc3b2d18e3c2d4effe7404a934bfa4401266d02019bb4300db7cc6d697c06d4e68512a3df54b23c46afe0ad2bb4e4a0e071f9ba66bcbb187db06b7ea80d75d306827562043bad0359c4efe961398e34dcabfa7f524026c3b", 0xd4}, {&(0x7f0000002900)="74f68dbd1ff73a951b5c50c8d7f3a164f64fae91aa4672620008154dc0c5559a72a000f351d762cfd0bdb73c46973129dd99aea7dcfb52fa414c5b96dd088fef28d68c30531bc6f4b4d655e5cb6716322e42fed99005690812127d20e20faf9088edf1ddfa4c48fe74105031ea41a07601aee5942542487a1616616407c5e31e2064c8d4362983cad3ef562dd2b1d48151e5109f65f395730bf7a895726e3dbdc620640a503a3959262d044cb25f96e5e4e54eebb62b7ee956376e6ea9", 0xbd}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000001200)="187b577ac4ca5ba15aa1e8aeb9b4e65118a8796fa0e47591689021d0eb6650936685209289a70ecbcddad95e5aec", 0x2e}, {&(0x7f00000039c0)="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", 0x1000}, {&(0x7f00000049c0)="20a167a2a6e17557f757cd19bc4bd1b629275418de12e9c66fd6cb4d93edad161e4cfb9453d977168b081b06dbea2b8941e8f1b24f6963e9e9751d9284e5417ccef5c9862284b51438ad7cc6b80a9cc1fa1701c5fde494c95a74775150eaee947eab78b6c3e03d0e856e878b6356f3fd06e029d4451272ce1390ae21123f32d5e2218c7d09260f7df6d46ada7615f14df4a33d76b383db507da4e5311fde3c06b8cd20a05b8299aa1243223349995a0def638c22af00b58fc7fb64e1cc422d6575d879b7a6a437cb48d23fe5fab891138043a880dd1b53a693bee8dd03b2179a78fb07a198db16f56eecb1cbc7332b605668f307d3c927fd8e73c75ca1961b", 0xff}], 0x8, &(0x7f0000001280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000050}, {0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f0000004b40)="3230e97e0b49ea87a2c0422f7e53f22ba1ea7222d3f248d691ef07b80bf1d6cfa5cfcab49121f452d6ba2eabf4d7beb9e1888190c19d34dd7ffc83eb182571258f7cd28097d95c01bbcd72b6e766298d1b53d81864f1d9a3406cefd9b2919bb454d219a1accaa52b9a", 0x69}], 0x1, &(0x7f0000004c00)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x30, 0x20008001}], 0x5, 0x801) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="562f557aeaa0369ff5222e98fc977db24ea7df17635b8c543244641f251ed79f7024d752e96534ba9affed9def3f9540a9edf47472f2a850265d1ae0710d8a767761d1ecdb89fb15908b796d7078d9bdc5b40fded33531f11d3171028671287baff92f71ea5cdf1a64d5b107a498a285cfe7c54557467f6180c5ff9b856f92b844c9d1eb7c4b27cecaf17353d87b", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b043107"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000006c0)="405dfd1ca26de99df1ec83dbc5a21869973ac384e658e4f3642352e532b1436b93c0876343baaf25e99b70d7c35ebd16732295c2cddf5f006c895cd67fcfa76669f137c483d9dcc11ce00c12af9f1317d721df93ad3f0e257b52649f6f2368e64fb1fc4688a7ac0c74cf3c259f48c6ebbf3040ae92feb71ad078468acfd4292a092a16e18d72dacbc4493790c6c3efd842c35cd8f43988ba5816d764b1c47f5e68a87e55a8102e1318df2953cf49811ae6a88e34a563379813b1bda758d20adcef5fdf9d121dfeddb3e2d964bfceedbce3cbe80ab2b533a069bbd1d2fa484680151beb5a", &(0x7f00000007c0)=""/195, &(0x7f0000000180)="98cc30cc4a54945b5f935c19e38ed043d7", &(0x7f00000008c0)="0b03a677db143d81cfc167bd814da30bf5f5393fd31a6615d81d57b75d86bc98a59cc5895ed0bad94a269fb7f567b2be130b3f232de090ad98d6cccd28507fcf65cab89bc56e18b4ee5265c875cb49fb3be975b86934e1fd86cca8778b32acfceb584cfec43f27e04472813bc2bcb592bab4ef592398e9f9c190757b8ead0529fe4e7e0499ab0acb87f0b00ab52991d77765", 0x4, r3, 0x4}, 0x38) (async) recvmmsg$unix(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d000100000007000000250000000d0016000c0014000000001f000006060400180000008cdb25", 0x39}, {&(0x7f0000000980)="d40841033b1b322e37fe5047875e6c85b3091bc691b05f229e662143d8093a7134163c9abeceab427694499f27f5dd3559d1186078d2dfcd9a00af364f7c586aa8e1330a7d68b0b77c85f3424fd0f6ad50ed43a276f13da45bf26d"}], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x65, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x299a, 0x1}}}}]}, 0x58}}, 0x4000) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=@newtfilter={0x2ec, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0xfff2}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c0, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x6, 0x0, 0x9, 0x401, 0x1000, 0xca3, 0xd5}}, @TCA_U32_ACT={0x2a8, 0x7, [@m_ctinfo={0xc8, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x6, 0xffffffffffffffff, 0x3, 0x7fff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf86}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xb41}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}]}, {0x53, 0x6, "b68a7f96279c889cd3f7901a69175eda9d947d5db1bb6bf67f9a9ae39d779b00b173eea665301ac4cb413e71382b46bb42c3eac79e5a479d8f2bde99efd4cbf7513fb67c6f5748a108ca708ffac44f"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0x98, 0x1a, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="baf28c0379a4"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x31, 0x6, "4f5cdc62ddb48155d422d3d72d36fb9aaaeaeee079d5eb712212b5bb56c611084ed21fa46a7a4e5ce43bcef822"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x144, 0xe, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x869, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x101, 0x0, 0x0, 0x10007}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7f, 0x8, 0xb, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xcd2, 0x10000000, 0xe766, 0x6}}]}, {0xc3, 0x6, "df0e5c17b142f01f54273769c29272888753033d4220f460bf2a67850a3aab23baa463a63074984b6a521521b0198df7a6431ffeae45db7d5d91fe9a9ae7955ce8e943825e16e97000acf6517a420dab3a44efde2512f4c28510588c561d8d93cfd3e4ef83f6381e038e119936c5d6e37b7d3035f59f1b88c9cd9c80cae87c7526af72a5c651361ee3fc5c7a840c40352490ba8759753fab49ec2d4d122296939e22b24c2ccdf884c447e3c4b2257c4ffb71f7f2be2ec5f4342edb52659352"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x81}, 0x800) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000000000), 0x4) 922.52129ms ago: executing program 4 (id=5867): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r1}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="16cb487743757fac787478549b8b528bcfae3702743fba765dcee076127afafccb3bb4b012fbabcedf1d97381edc5b71d72eee3b1a817bc9e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@restrict={0x10, 0x0, 0x0, 0xb, 0x2}, @fwd={0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @union={0x6, 0x1, 0x0, 0x5, 0x0, 0x9, [{0x5, 0x3, 0x800}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000400)=""/185, 0x5c, 0xb9, 0x1, 0x9}, 0x28) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ef1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000007000000850000005e0000009500000000002200ce08b200000000006dc77d2ac94403e569eb508f5a4cf6e491fd623aa5247e9163db0a732cc939c42bd8de054956e7d0316916a84f77c70c69293c5525725e9d6600e20084"], &(0x7f00000001c0)='syzkaller\x00', 0x401, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x52, '\x00', 0x0, 0x1a, r3, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3779, r2, 0x5, &(0x7f0000000640)=[r4, r2, r6], &(0x7f0000000680)=[{0x2, 0x1, 0x2, 0xb}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x5}, {0x3, 0x3, 0x6, 0x9}, {0x2, 0x3, 0x5, 0xc}], 0x10, 0x9}, 0x94) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfffffef8, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xb1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2005c040}, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="71e29a66720287555bafbd4f800110fa7d107268163547e32310b4d2b94713a7c66ab75ffd857d043f04c6486e4e55babbda64dd83039a661b26cce129de3b00dd81f95051e79651d12cadd864877d7b7eac1f3c74e9636348dad9adcc6723dce277099543bbb03b2e52b9a02cc21caec22d21d9e810ca1a0022268245597277ab1c765a33deef84a670bb4a7272b3e80de92b850be1b5ca93ca71c4dcae3f8705079b5368e983555c3a795195f2189080e4c0e26cc4136e2dd0d0be6dabcff41bc2bc24e5b9f9feb1fa15acb142249fd31f1b883455145f38a013cbcfb5ecc5a02902963e5fce3b3c7b5445031e12ceb36a098c9e72"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) (async) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) writev(r9, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) 270.366093ms ago: executing program 4 (id=5868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="e93b297d69bd09c9fc5333577ddfd52e36a2100ed88c99d6", 0x18}, 0x1, 0x0, 0x0, 0x20040880}, 0x2000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[], 0xa4}}, 0x0) 44.623279ms ago: executing program 4 (id=5869): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'batadv0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x77bf}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x2, 0x0, 0xd, 0xff, 0xa4e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x7, 0x3, 0x80, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xad}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 34.695653ms ago: executing program 1 (id=5870): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000040)="b8b2cc1e00c1dba49d23bb66cb3a66bb0280000788fb", 0x16}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='udp_fail_queue_rcv_skb\x00', r3, 0x0, 0x6}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 0s ago: executing program 0 (id=5871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xe13e) kernel console output (not intermixed with test programs): nvalid length. [ 570.839210][T22825] netlink: 'syz.4.4282': attribute type 12 has an invalid length. [ 570.880461][T22825] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4282'. [ 570.893546][T22825] Cannot find add_set index 2 as target [ 571.078093][T22836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.085543][T22836] IPv6: NLM_F_CREATE should be set when creating new route [ 571.092806][T22836] IPv6: NLM_F_CREATE should be set when creating new route [ 571.112310][T22811] team0 (unregistering): Port device team_slave_1 removed [ 571.268176][T18797] lo speed is unknown, defaulting to 1000 [ 571.274002][T18797] syz2: Port: 1 Link ACTIVE [ 571.286700][ T6644] lo speed is unknown, defaulting to 1000 [ 571.362407][T22839] bond2: option ad_select: invalid value (254) [ 571.376721][T22839] bond2 (unregistering): Released all slaves [ 571.427818][T22821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4284'. [ 571.534035][T22848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4290'. [ 571.653397][T22852] netlink: 'syz.4.4292': attribute type 1 has an invalid length. [ 571.668141][T22847] lo speed is unknown, defaulting to 1000 [ 571.685104][T22852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.962067][T22862] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4293'. [ 572.053637][T22866] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4295'. [ 572.337062][T22848] lo speed is unknown, defaulting to 1000 [ 572.459606][T22870] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 572.745680][T22885] sctp: [Deprecated]: syz.4.4301 (pid 22885) Use of int in max_burst socket option. [ 572.745680][T22885] Use struct sctp_assoc_value instead [ 572.880825][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'. [ 572.982834][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4302'. [ 573.300333][T22901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.403513][T22901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.492501][T22901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.869280][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4314'. [ 573.884372][T22929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4313'. [ 573.896415][T12794] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.926159][T12794] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.946379][T12794] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.963327][T12794] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.489541][T22950] geneve2: entered promiscuous mode [ 574.581033][T22953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'. [ 574.638354][T22948] lo speed is unknown, defaulting to 1000 [ 575.604539][T22981] netlink: 'syz.3.4328': attribute type 17 has an invalid length. [ 575.633920][T22977] bond5: option mode: invalid value (115) [ 575.643015][T22977] bond5 (unregistering): Released all slaves [ 575.915893][T22990] __nla_validate_parse: 2 callbacks suppressed [ 575.915918][T22990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4335'. [ 575.993051][T23001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4333'. [ 576.115056][T23009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 576.288535][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4341'. [ 576.390761][T23016] lo speed is unknown, defaulting to 1000 [ 577.387801][T23065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4350'. [ 577.692033][T23074] lo: entered allmulticast mode [ 577.826547][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4354'. [ 577.850382][T23076] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4356'. [ 577.910552][T23084] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 578.055358][ T30] audit: type=1804 audit(1762628797.014:8): pid=23091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4360" name="/newroot/277/cgroup.controllers" dev="tmpfs" ino=1444 res=1 errno=0 [ 578.085317][ T30] audit: type=1800 audit(1762628797.014:9): pid=23091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4360" name="cgroup.controllers" dev="tmpfs" ino=1444 res=0 errno=0 [ 578.302719][T23097] lo speed is unknown, defaulting to 1000 [ 578.333909][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4362'. [ 578.996164][T23117] block nbd1: Unsupported socket: should be TCP or UNIX. [ 579.077972][T23123] netlink: 'syz.1.4367': attribute type 11 has an invalid length. [ 579.128188][T23117] lo speed is unknown, defaulting to 1000 [ 579.890462][T23155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4377'. [ 579.943342][T23160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4378'. [ 579.999946][T23155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.163804][T23167] netlink: 'syz.4.4379': attribute type 3 has an invalid length. [ 580.172581][T23167] netlink: 'syz.4.4379': attribute type 1 has an invalid length. [ 580.198589][T23162] bond5 (unregistering): Released all slaves [ 580.238077][T23160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.468796][T23174] openvswitch: netlink: Unknown nsh attribute 0 [ 580.484001][T23174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.489035][T23161] lo speed is unknown, defaulting to 1000 [ 580.556790][T23177] tipc: Enabled bearer , priority 0 [ 580.581205][T23177] syzkaller0: entered promiscuous mode [ 580.597105][T23177] syzkaller0: entered allmulticast mode [ 580.658286][T23177] tipc: Resetting bearer [ 580.669451][T23176] tipc: Resetting bearer [ 580.688644][T23176] tipc: Disabling bearer [ 581.223068][T23194] wg1: left promiscuous mode [ 581.228594][T23194] wg1: left allmulticast mode [ 581.261856][ T984] lo speed is unknown, defaulting to 1000 [ 581.269365][ T984] syz2: Port: 1 Link DOWN [ 581.276519][ T984] lo speed is unknown, defaulting to 1000 [ 581.374030][T23196] lo speed is unknown, defaulting to 1000 [ 581.395143][T23197] ip6t_REJECT: ECHOREPLY is not supported [ 581.416792][T23197] __nla_validate_parse: 3 callbacks suppressed [ 581.416820][T23197] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4388'. [ 581.447918][ T6644] lo speed is unknown, defaulting to 1000 [ 581.453739][ T6644] syz2: Port: 1 Link ACTIVE [ 581.691053][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4391'. [ 581.710805][ T6646] lo speed is unknown, defaulting to 1000 [ 582.522837][T23237] netlink: 'syz.1.4400': attribute type 16 has an invalid length. [ 582.596483][T23237] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4400'. [ 583.322132][T23271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4411'. [ 583.346982][T23272] netlink: 'syz.1.4410': attribute type 1 has an invalid length. [ 583.399838][T23275] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 583.421748][T23272] bond6: entered promiscuous mode [ 583.428199][T23272] bond6: entered allmulticast mode [ 583.434476][T23271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 583.472332][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4410'. [ 583.472632][T23271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4411'. [ 583.494557][T23273] lo speed is unknown, defaulting to 1000 [ 583.518008][T23271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 583.548954][T23272] bond6: left promiscuous mode [ 583.553807][T23272] bond6: left allmulticast mode [ 583.579545][T23280] netlink: 'syz.1.4410': attribute type 13 has an invalid length. [ 583.596547][T23272] 8021q: adding VLAN 0 to HW filter on device bond6 [ 583.611648][T23280] netlink: 'syz.1.4410': attribute type 17 has an invalid length. [ 583.639988][T23280] lo: left allmulticast mode [ 583.858282][T23280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.280424][T23302] netlink: 'syz.0.4416': attribute type 1 has an invalid length. [ 584.321534][T23300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.620683][T23318] syzkaller1: entered promiscuous mode [ 584.639051][T23318] syzkaller1: entered allmulticast mode [ 585.069000][T23334] Bluetooth: MGMT ver 1.23 [ 585.202937][T23336] netlink: 'syz.1.4425': attribute type 4 has an invalid length. [ 585.216375][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'. [ 585.267578][T23340] netlink: 'syz.0.4427': attribute type 83 has an invalid length. [ 586.060550][ T30] audit: type=1800 audit(1762628805.014:10): pid=23361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4433" name="memory.events" dev="tmpfs" ino=1417 res=0 errno=0 [ 586.092926][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4440'. [ 586.190568][T23379] lo speed is unknown, defaulting to 1000 [ 586.262360][T23385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4441'. [ 586.776170][T23401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4445'. [ 586.888730][T23410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.934130][T23416] netlink: 'syz.0.4448': attribute type 17 has an invalid length. [ 586.997529][T23420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4448'. [ 587.194531][T23428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4449'. [ 587.352844][T23428] veth1: entered promiscuous mode [ 587.588295][T23440] lo speed is unknown, defaulting to 1000 [ 587.971972][T23456] lo speed is unknown, defaulting to 1000 [ 588.355440][T23462] lo speed is unknown, defaulting to 1000 [ 588.769799][ T30] audit: type=1800 audit(1762628807.734:11): pid=23484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4463" name="memory.events" dev="tmpfs" ino=1726 res=0 errno=0 [ 588.827400][ T30] audit: type=1804 audit(1762628807.734:12): pid=23484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4463" name="/newroot/334/memory.events" dev="tmpfs" ino=1726 res=1 errno=0 [ 588.929809][T23474] lo speed is unknown, defaulting to 1000 [ 589.137797][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4466'. [ 589.144482][T23500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4467'. [ 589.172801][T23497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4466'. [ 589.184017][T23500] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 589.189444][T23497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4466'. [ 589.226802][T23500] team1: entered promiscuous mode [ 589.232204][T23500] team1: entered allmulticast mode [ 589.692208][T23516] x_tables: duplicate underflow at hook 4 [ 589.707547][T23511] x_tables: duplicate underflow at hook 2 [ 589.726832][T23516] syz_tun: entered allmulticast mode [ 589.778386][T23516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4471'. [ 589.807213][T23516] syz_tun (unregistering): left allmulticast mode [ 590.131061][T23528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4473'. [ 590.413081][T23536] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4476'. [ 590.494386][T23534] netlink: 'syz.0.4475': attribute type 13 has an invalid length. [ 590.525816][T23534] netlink: 'syz.0.4475': attribute type 17 has an invalid length. [ 590.717583][T23546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.745570][T23534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.818079][T23548] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 590.854504][T23537] lo speed is unknown, defaulting to 1000 [ 590.861659][T23549] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 592.050836][T23589] __nla_validate_parse: 4 callbacks suppressed [ 592.050855][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4489'. [ 592.069648][T23588] netlink: 'syz.1.4489': attribute type 4 has an invalid length. [ 592.095895][T23589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4489'. [ 592.452581][T23606] netlink: 'syz.1.4493': attribute type 2 has an invalid length. [ 592.473248][T23606] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4493'. [ 592.526989][T23607] netlink: 'syz.1.4493': attribute type 8 has an invalid length. [ 592.555379][T23607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.598497][T23602] lo speed is unknown, defaulting to 1000 [ 592.886279][T23624] netlink: 548 bytes leftover after parsing attributes in process `syz.2.4498'. [ 592.928965][T23625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 592.972407][T23625] macvtap1: entered promiscuous mode [ 592.992666][T23625] bond0: entered promiscuous mode [ 593.032926][T23625] bond_slave_0: entered promiscuous mode [ 593.052383][T23625] bond_slave_1: entered promiscuous mode [ 593.074331][T23625] macvtap1: entered allmulticast mode [ 593.094551][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4497'. [ 593.107689][T23625] bond0: entered allmulticast mode [ 593.121941][T23625] bond_slave_0: entered allmulticast mode [ 593.153223][T23625] bond_slave_1: entered allmulticast mode [ 593.172352][T23625] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 593.207244][T23630] bond0: left allmulticast mode [ 593.226174][T23630] bond_slave_0: left allmulticast mode [ 593.231971][T23630] bond_slave_1: left allmulticast mode [ 593.237665][T23630] bond0: left promiscuous mode [ 593.242964][T23630] bond_slave_0: left promiscuous mode [ 593.251187][T23630] bond_slave_1: left promiscuous mode [ 593.380987][T23628] lo speed is unknown, defaulting to 1000 [ 593.447702][T23640] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 593.479375][T23640] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 595.470539][T23675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'. [ 595.718012][T23675] lo speed is unknown, defaulting to 1000 [ 595.954316][T23690] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 596.581369][T23714] netlink: 'syz.2.4520': attribute type 83 has an invalid length. [ 596.790131][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4524'. [ 597.590261][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4529'. [ 597.982316][T23758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4532'. [ 598.119696][T23765] lo speed is unknown, defaulting to 1000 [ 598.126518][T23765] lo speed is unknown, defaulting to 1000 [ 598.133568][T23765] lo speed is unknown, defaulting to 1000 [ 598.149942][T23767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4535'. [ 598.159426][T23765] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 598.195080][T23765] lo speed is unknown, defaulting to 1000 [ 598.203359][T23765] lo speed is unknown, defaulting to 1000 [ 598.218684][T23765] lo speed is unknown, defaulting to 1000 [ 598.228189][T23765] lo speed is unknown, defaulting to 1000 [ 598.242123][T23765] lo speed is unknown, defaulting to 1000 [ 598.258472][T23765] lo speed is unknown, defaulting to 1000 [ 598.272651][T23765] lo speed is unknown, defaulting to 1000 [ 598.341543][T23765] lo speed is unknown, defaulting to 1000 [ 598.371304][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4538'. [ 598.387041][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4538'. [ 598.429021][T23775] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.472075][T23778] tipc: Enabled bearer , priority 0 [ 598.490572][T23778] syzkaller0: entered promiscuous mode [ 598.497750][T23778] syzkaller0: entered allmulticast mode [ 598.548218][T23775] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.640639][T23784] netlink: 'syz.1.4542': attribute type 13 has an invalid length. [ 598.642948][T23775] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.651473][T23784] netlink: 'syz.1.4542': attribute type 17 has an invalid length. [ 598.706166][T23784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 598.722636][ T6644] lo speed is unknown, defaulting to 1000 [ 598.731246][ T6644] syz1: Port: 1 Link ACTIVE [ 598.766267][T23775] bond0: (slave netdevsim0): Releasing backup interface [ 598.798145][T23775] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.931062][T23794] IPVS: persistence engine module ip_vs_pe_@ not found [ 598.998684][T11060] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.059848][T12794] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.104211][T12794] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.139322][T12794] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 599.287714][T23807] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4550'. [ 599.374306][T23813] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4550'. [ 599.661557][T23818] netlink: 'syz.3.4553': attribute type 63 has an invalid length. [ 599.695629][T23818] netlink: 'syz.3.4553': attribute type 63 has an invalid length. [ 599.734551][T23818] netlink: 'syz.3.4553': attribute type 10 has an invalid length. [ 599.773763][T23818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4553'. [ 599.804200][T23818] dummy0: entered promiscuous mode [ 599.830828][T23818] bond0: (slave dummy0): Releasing backup interface [ 599.843193][T23818] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 600.337038][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4560'. [ 600.528168][T23863] tipc: Enabled bearer , priority 0 [ 600.538371][T23863] syzkaller0: entered promiscuous mode [ 600.544010][T23863] syzkaller0: entered allmulticast mode [ 600.594223][T23863] tipc: Resetting bearer [ 600.605540][T23862] tipc: Resetting bearer [ 600.656549][T23862] tipc: Disabling bearer [ 600.842241][T23877] tipc: New replicast peer: 255.255.255.255 [ 600.851180][T23877] tipc: Enabled bearer , priority 10 [ 600.871977][T23874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4571'. [ 600.904166][T23874] lo speed is unknown, defaulting to 1000 [ 601.023745][T23881] x_tables: duplicate underflow at hook 4 [ 601.046447][T23881] dvmrp0: entered allmulticast mode [ 601.242017][T23874] lo speed is unknown, defaulting to 1000 [ 601.287572][T23881] dvmrp0: left allmulticast mode [ 601.374177][T23888] lo speed is unknown, defaulting to 1000 [ 602.189931][T23888] lo speed is unknown, defaulting to 1000 [ 602.298614][T23905] lo speed is unknown, defaulting to 1000 [ 603.189261][T23905] lo speed is unknown, defaulting to 1000 [ 604.180334][T23947] lo speed is unknown, defaulting to 1000 [ 604.265390][T23949] sctp: [Deprecated]: syz.1.4591 (pid 23949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.265390][T23949] Use struct sctp_sack_info instead [ 604.347325][T23955] netlink: 'syz.3.4593': attribute type 13 has an invalid length. [ 604.372639][T23955] netlink: 'syz.3.4593': attribute type 13 has an invalid length. [ 604.439710][T23960] __nla_validate_parse: 4 callbacks suppressed [ 604.439733][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'. [ 604.491190][T23965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'. [ 604.509388][T23960] macvtap2: entered promiscuous mode [ 604.516552][T23960] bond0: entered promiscuous mode [ 604.521647][T23960] bond_slave_0: entered promiscuous mode [ 604.528649][T23960] bond_slave_1: entered promiscuous mode [ 604.536283][T23960] macvtap2: entered allmulticast mode [ 604.543118][T23960] bond0: entered allmulticast mode [ 604.549041][T23960] bond_slave_0: entered allmulticast mode [ 604.556143][T23960] bond_slave_1: entered allmulticast mode [ 604.563570][T23960] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 604.629343][T23947] lo speed is unknown, defaulting to 1000 [ 604.638746][T23951] "syz.1.4591" (23951) uses obsolete ecb(arc4) skcipher [ 604.647772][T23965] bond0: left allmulticast mode [ 604.652798][T23965] bond_slave_0: left allmulticast mode [ 604.659742][T23965] bond_slave_1: left allmulticast mode [ 604.669249][T23965] bond0: left promiscuous mode [ 604.675600][T23965] bond_slave_0: left promiscuous mode [ 604.681280][T23965] bond_slave_1: left promiscuous mode [ 604.690731][T23969] sock: sock_timestamping_bind_phc: sock not bind to device [ 604.884974][T23974] netlink: ct family unspecified [ 604.890073][T23974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.895087][T23978] sit0: Caught tx_queue_len zero misconfig [ 605.333325][T24005] netlink: 'syz.4.4606': attribute type 9 has an invalid length. [ 605.667340][T24016] netlink: 'syz.4.4609': attribute type 9 has an invalid length. [ 605.790948][T24019] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4611'. [ 605.820463][T24019] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 606.034117][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4612'. [ 606.064191][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4612'. [ 606.077378][T24023] nbd: socks must be embedded in a SOCK_ITEM attr [ 606.110342][T24024] pimreg: entered allmulticast mode [ 606.133296][T24023] pimreg: left allmulticast mode [ 606.184146][T24024] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4612'. [ 606.197742][T24026] x_tables: duplicate underflow at hook 4 [ 606.204190][T24026] syz_tun: entered allmulticast mode [ 606.255920][T24026] syz_tun: left allmulticast mode [ 606.410556][T24032] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 606.538940][T24036] openvswitch: netlink: IP tunnel dst address not specified [ 606.700800][T24045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4619'. [ 606.732410][T24041] syzkaller0: entered promiscuous mode [ 606.738233][T24041] syzkaller0: entered allmulticast mode [ 606.745574][T24044] hsr0: entered allmulticast mode [ 606.750927][T24044] hsr_slave_0: entered allmulticast mode [ 606.760432][T24044] hsr_slave_1: entered allmulticast mode [ 606.776169][T24058] hsr_slave_0: left promiscuous mode [ 606.782766][T24058] hsr_slave_1: left promiscuous mode [ 606.785639][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4621'. [ 606.811446][T24058] hsr0 (unregistering): left allmulticast mode [ 606.815713][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4621'. [ 606.828301][T24051] netlink: 'syz.2.4621': attribute type 6 has an invalid length. [ 606.840995][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4620'. [ 608.746221][T24051] netlink: 'syz.2.4621': attribute type 6 has an invalid length. [ 608.775493][T12806] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.785384][T12806] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.807532][T12806] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.824755][T12806] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.961376][T24071] unsupported nlmsg_type 40 [ 609.052342][T24071] veth0: Caught tx_queue_len zero misconfig [ 609.179842][T24075] syzkaller0: entered promiscuous mode [ 609.204848][T24075] syzkaller0: entered allmulticast mode [ 609.255582][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 609.458563][T24098] __nla_validate_parse: 5 callbacks suppressed [ 609.458585][T24098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4635'. [ 609.597038][T24103] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 611.431243][T24091] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 611.493773][T24094] macvtap3: entered allmulticast mode [ 611.525342][T24094] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 611.546539][T24094] mac80211_hwsim hwsim33 wlan0: left allmulticast mode [ 611.583909][T24105] gretap1: entered allmulticast mode [ 611.619626][T24108] syzkaller0: entered allmulticast mode [ 611.943054][T24123] netlink: 'syz.2.4641': attribute type 10 has an invalid length. [ 611.993533][T24122] openvswitch: netlink: Message has -2 unknown bytes. [ 612.101171][T24131] pimreg: entered allmulticast mode [ 612.159579][T24134] netlink: 'syz.0.4646': attribute type 14 has an invalid length. [ 612.513489][ T5842] Bluetooth: hci3: link tx timeout [ 612.521009][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 612.533207][ T5842] Bluetooth: hci3: link tx timeout [ 612.539374][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 612.551063][ T5842] Bluetooth: hci3: link tx timeout [ 612.556991][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 612.773510][T24168] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4655'. [ 613.096569][T24185] lo speed is unknown, defaulting to 1000 [ 613.156266][T24182] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4659'. [ 613.167758][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'. [ 613.262667][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4662'. [ 613.374218][T24197] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 613.396195][ T984] IPVS: starting estimator thread 0... [ 613.433900][T24194] bond7: entered promiscuous mode [ 613.444157][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4664'. [ 613.460164][T24194] bridge3: entered promiscuous mode [ 613.466578][T24194] bond7: entered allmulticast mode [ 613.475861][T24194] bridge3: entered allmulticast mode [ 613.495374][T24185] lo speed is unknown, defaulting to 1000 [ 613.496566][T24200] IPVS: using max 26 ests per chain, 62400 per kthread [ 613.708318][ T30] audit: type=1800 audit(1762628832.674:13): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4668" name=20 dev="tmpfs" ino=1934 res=0 errno=0 [ 613.782429][ T30] audit: type=1804 audit(1762628832.674:14): pid=24211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4668" name=20 dev="tmpfs" ino=1934 res=1 errno=0 [ 613.990948][ T30] audit: type=1800 audit(1762628832.954:15): pid=24222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4671" name="memory.events" dev="tmpfs" ino=1745 res=0 errno=0 [ 614.096572][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4673'. [ 614.136743][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 614.472767][T24236] netlink: 'syz.4.4675': attribute type 10 has an invalid length. [ 614.502206][T24236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4675'. [ 614.536040][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 614.591832][T24239] syzkaller1: entered promiscuous mode [ 614.600384][T24241] netlink: 'syz.3.4677': attribute type 1 has an invalid length. [ 614.609115][T24239] syzkaller1: entered allmulticast mode [ 614.749200][T24239] syzkaller1: left promiscuous mode [ 614.761571][T24239] syzkaller1: left allmulticast mode [ 614.782690][T24241] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.133725][T24262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4683'. [ 615.154194][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4683'. [ 615.239493][T24270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4682'. [ 615.355464][T24273] x_tables: duplicate underflow at hook 1 [ 615.419910][T24275] tipc: Enabling of bearer rejected, failed to enable media [ 615.448597][T24277] lo speed is unknown, defaulting to 1000 [ 615.667122][T24280] xt_CT: No such helper "netbios-ns" [ 617.561566][T24313] netlink: 'syz.1.4694': attribute type 1 has an invalid length. [ 617.650353][T24313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4694'. [ 617.700503][T24277] lo speed is unknown, defaulting to 1000 [ 617.712356][T24302] lo speed is unknown, defaulting to 1000 [ 618.430036][T24323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4696'. [ 620.540940][T24334] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4699'. [ 620.672471][T24302] lo speed is unknown, defaulting to 1000 [ 620.672844][T24334] netlink: 'syz.1.4699': attribute type 1 has an invalid length. [ 620.853266][T24334] netlink: 'syz.1.4699': attribute type 3 has an invalid length. [ 620.991258][T24334] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4699'. [ 622.488621][T24341] tipc: New replicast peer: 0.0.0.0 [ 622.519248][T24341] tipc: Enabled bearer , priority 10 [ 623.074293][T24343] syzkaller0: entered promiscuous mode [ 623.153765][T24343] syzkaller0: entered allmulticast mode [ 623.388921][T24350] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0002 [ 623.523534][T18797] tipc: Node number set to 1140847289 [ 623.742129][T24363] IPVS: set_ctl: invalid protocol: 50 172.30.1.3:20002 [ 623.810149][T24359] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.4703'. [ 626.173556][T24382] bridge_slave_0: left allmulticast mode [ 626.199941][T24382] bridge_slave_0: left promiscuous mode [ 626.217374][T24382] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.267464][T24382] bridge_slave_1: left allmulticast mode [ 626.293401][T24382] bridge_slave_1: left promiscuous mode [ 626.334917][T24382] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.379690][T24382] bond0: (slave bond_slave_0): Releasing backup interface [ 626.415575][T24382] bond_slave_0: left promiscuous mode [ 626.446095][T24382] bond0: (slave bond_slave_1): Releasing backup interface [ 626.476889][T24382] bond_slave_1: left promiscuous mode [ 626.483480][T24382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.521360][T24382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.541463][T24382] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 626.573703][T24401] bridge: RTM_NEWNEIGH with invalid ether address [ 626.637272][T24394] lo speed is unknown, defaulting to 1000 [ 627.056463][T24409] 8021q: adding VLAN 0 to HW filter on device bond8 [ 627.246072][T24414] syzkaller0: entered promiscuous mode [ 627.251867][T24414] syzkaller0: entered allmulticast mode [ 627.263617][T24394] lo speed is unknown, defaulting to 1000 [ 629.902787][T24457] sctp: [Deprecated]: syz.1.4728 (pid 24457) Use of int in max_burst socket option. [ 629.902787][T24457] Use struct sctp_assoc_value instead [ 629.926276][T24462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'. [ 629.936757][T24457] ip6gre0: mtu less than device minimum [ 630.222271][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4731'. [ 630.255612][T24475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4730'. [ 630.291819][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4731'. [ 630.325567][T24468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4730'. [ 630.644149][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4735'. [ 630.693596][T24497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4738'. [ 630.734226][T24497] netlink: 'syz.2.4738': attribute type 1 has an invalid length. [ 630.857361][T24497] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 631.067129][T24518] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4743'. [ 631.113567][T24519] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4741'. [ 631.440324][T24537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4747'. [ 631.667382][T24553] tipc: Enabling of bearer rejected, failed to enable media [ 631.730367][T24550] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 631.744668][T24550] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 639.545715][T24564] netlink: 'syz.3.4757': attribute type 4 has an invalid length. [ 639.584553][T24565] bond12: Removing last arp target with arp_interval on [ 639.624966][T24576] netlink: 'syz.1.4759': attribute type 1 has an invalid length. [ 639.643333][T24565] bond12: entered promiscuous mode [ 639.660249][T24565] bond12: entered allmulticast mode [ 639.669498][T24565] 8021q: adding VLAN 0 to HW filter on device bond12 [ 639.921065][T24591] xt_ecn: cannot match TCP bits for non-tcp packets [ 640.163129][T24606] lo speed is unknown, defaulting to 1000 [ 640.528506][T24606] lo speed is unknown, defaulting to 1000 [ 640.623609][T24612] lo speed is unknown, defaulting to 1000 [ 640.672234][T24609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.264468][T24635] __nla_validate_parse: 1 callbacks suppressed [ 641.264491][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4774'. [ 641.372452][T24633] syzkaller0: entered promiscuous mode [ 641.379659][T24640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4775'. [ 641.384831][T24633] syzkaller0: entered allmulticast mode [ 641.561851][T24635] 8021q: adding VLAN 0 to HW filter on device bond13 [ 641.594343][T24637] erspan0: entered allmulticast mode [ 641.679583][T24637] bond3: (slave erspan0): Releasing active interface [ 641.690144][T24637] ip6gretap1: entered promiscuous mode [ 641.712441][T24637] bond13: (slave erspan0): Enslaving as an active interface with an up link [ 641.797027][T24612] lo speed is unknown, defaulting to 1000 [ 641.839980][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4779'. [ 641.942274][T24663] can: request_module (can-proto-4) failed. [ 644.111261][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4787'. [ 644.138151][T24680] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4784'. [ 645.031128][T24722] Can't find ip_set type hash:n [ 645.189974][T24729] lo speed is unknown, defaulting to 1000 [ 645.213287][T24730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 645.305013][T24732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4794'. [ 645.462066][T24729] lo speed is unknown, defaulting to 1000 [ 645.564322][T24737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.660754][T24740] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4798'. [ 645.885497][T24745] netlink: 'syz.0.4799': attribute type 2 has an invalid length. [ 646.298494][T24755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4803'. [ 646.467514][T24762] pim6reg1: entered promiscuous mode [ 646.513902][T24762] pim6reg1: entered allmulticast mode [ 646.819127][T24765] batadv_slave_0: entered promiscuous mode [ 646.841859][T24764] batadv_slave_0: left promiscuous mode [ 646.936627][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 647.017867][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4812'. [ 647.041445][T24786] xt_CT: No such helper "netbios-ns" [ 647.082274][T24793] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4811'. [ 647.095810][T24791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4812'. [ 647.143790][T24794] netlink: 59344 bytes leftover after parsing attributes in process `syz.3.4812'. [ 647.158534][T24791] macvtap1: entered promiscuous mode [ 647.171895][T24791] macvtap1: entered allmulticast mode [ 647.191952][T24791] dummy0: entered allmulticast mode [ 647.313704][T24801] netlink: 'syz.2.4815': attribute type 15 has an invalid length. [ 647.351206][T24805] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 647.367699][T24802] ip6tnl0: Caught tx_queue_len zero misconfig [ 647.443229][T24805] 8021q: adding VLAN 0 to HW filter on device bond9 [ 647.522572][T24816] veth7: entered promiscuous mode [ 647.547708][T24816] bond9: (slave veth7): Enslaving as an active interface with a down link [ 647.557318][T24810] lo speed is unknown, defaulting to 1000 [ 647.778899][T24810] lo speed is unknown, defaulting to 1000 [ 647.830372][T24834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4822'. [ 647.840288][T24834] tc_dump_action: action bad kind [ 648.998580][T24890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4834'. [ 649.050810][T24892] netlink: 'syz.0.4835': attribute type 18 has an invalid length. [ 649.208014][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4837'. [ 649.235817][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4837'. [ 649.259301][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4837'. [ 649.495127][ T30] audit: type=1800 audit(1762628868.454:16): pid=24913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4841" name="memory.events" dev="tmpfs" ino=1820 res=0 errno=0 [ 650.558550][T24924] netlink: 'syz.0.4845': attribute type 39 has an invalid length. [ 650.610162][T24926] netlink: 'syz.0.4845': attribute type 5 has an invalid length. [ 651.343362][T24941] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 32 [ 651.380724][T24940] tipc: Enabled bearer , priority 0 [ 651.391505][T24940] syzkaller0: entered promiscuous mode [ 651.406951][T24940] syzkaller0: entered allmulticast mode [ 651.482852][T24940] tipc: Resetting bearer [ 651.543521][T24939] tipc: Resetting bearer [ 651.616174][T24939] tipc: Disabling bearer [ 651.628419][T24944] netlink: 'syz.2.4851': attribute type 30 has an invalid length. [ 651.807812][T24954] __nla_validate_parse: 5 callbacks suppressed [ 651.807835][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4854'. [ 652.022832][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 652.181398][T24959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4856'. [ 652.191419][T24959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4856'. [ 652.399311][T24981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4862'. [ 652.497336][ T6646] lo speed is unknown, defaulting to 1000 [ 652.503324][ T6646] syz1: Port: 1 Link DOWN [ 652.562636][T24956] lo speed is unknown, defaulting to 1000 [ 652.883802][T24993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4864'. [ 653.136386][T24956] lo speed is unknown, defaulting to 1000 [ 655.896050][T25013] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4869'. [ 656.400070][T25038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4874'. [ 656.411906][T25042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4876'. [ 656.577691][T25050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4878'. [ 656.629028][T25050] vlan2: entered allmulticast mode [ 656.639454][T25050] bridge4: port 1(vlan2) entered blocking state [ 656.647141][T25050] bridge4: port 1(vlan2) entered disabled state [ 656.657130][T25050] vlan2: entered promiscuous mode [ 656.882645][T25056] lo speed is unknown, defaulting to 1000 [ 657.020182][T25060] __nla_validate_parse: 1 callbacks suppressed [ 657.020211][T25060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'. [ 657.284478][T25056] lo speed is unknown, defaulting to 1000 [ 657.625838][T25080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4888'. [ 657.715289][ T984] hid-generic 0005:0458:5508.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 657.783296][T25078] syzkaller1: entered promiscuous mode [ 657.796890][T25078] syzkaller1: entered allmulticast mode [ 658.008039][T25098] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 658.445302][T25101] lo speed is unknown, defaulting to 1000 [ 658.568879][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4896'. [ 659.076035][T25125] openvswitch: netlink: Message has 4 unknown bytes. [ 659.103782][T25125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.149070][T25125] netlink: 'syz.0.4900': attribute type 11 has an invalid length. [ 659.224157][ T984] IPVS: starting estimator thread 0... [ 659.255855][T25101] lo speed is unknown, defaulting to 1000 [ 659.307645][T25132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4903'. [ 659.331299][T25133] IPVS: using max 25 ests per chain, 60000 per kthread [ 659.941499][T25163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4911'. [ 660.003054][T25163] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 660.044238][T25164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4911'. [ 660.450498][T25182] vxcan1: left promiscuous mode [ 660.477167][T25182] bond3: left promiscuous mode [ 660.483234][T25182] bridge1: left promiscuous mode [ 660.500635][T25182] macsec0: left promiscuous mode [ 660.513066][T25182] veth1: left promiscuous mode [ 660.528008][T25182] macvtap1: left promiscuous mode [ 660.722866][T25199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4920'. [ 660.746688][T25201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4923'. [ 660.809219][T25193] netlink: 'syz.2.4920': attribute type 5 has an invalid length. [ 660.824470][T25193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4920'. [ 660.907701][T25211] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 661.019204][T25216] netlink: 'syz.4.4924': attribute type 11 has an invalid length. [ 661.031532][T25216] netlink: 'syz.4.4924': attribute type 11 has an invalid length. [ 661.040175][T25216] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4924'. [ 661.324327][T25208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.881453][T25262] netlink: 'syz.4.4937': attribute type 12 has an invalid length. [ 661.971661][T25265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.132522][T25273] lo speed is unknown, defaulting to 1000 [ 662.369990][T25296] __nla_validate_parse: 61 callbacks suppressed [ 662.370011][T25296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4942'. [ 662.437394][T25296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4942'. [ 662.591427][ T6644] lo speed is unknown, defaulting to 1000 [ 662.597456][T12806] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.607279][T12806] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.616749][ T6644] syz2: Port: 1 Link DOWN [ 662.625651][ T6644] lo speed is unknown, defaulting to 1000 [ 662.631936][T12806] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.645079][T25306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4942'. [ 662.654376][T12806] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.674875][T25306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4942'. [ 662.726229][T25285] lo speed is unknown, defaulting to 1000 [ 662.732626][T25273] lo speed is unknown, defaulting to 1000 [ 663.257646][T25305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4946'. [ 663.334147][T25302] lo speed is unknown, defaulting to 1000 [ 663.460861][T25326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.473727][T25326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.487222][T25326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.499961][T25326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.681236][T25285] lo speed is unknown, defaulting to 1000 [ 663.722122][T25302] lo speed is unknown, defaulting to 1000 [ 663.754516][T25305] lo speed is unknown, defaulting to 1000 [ 664.122263][T25331] tipc: Enabled bearer , priority 0 [ 664.146182][T25333] syzkaller0: entered promiscuous mode [ 664.162174][T25333] syzkaller0: entered allmulticast mode [ 664.268734][T25331] tipc: Resetting bearer [ 664.333155][T25330] tipc: Resetting bearer [ 664.426364][T25330] tipc: Disabling bearer [ 664.645950][T25305] lo speed is unknown, defaulting to 1000 [ 665.113840][T25345] delete_channel: no stack [ 665.503382][T25386] tipc: Enabled bearer , priority 10 [ 665.719538][T25391] lo speed is unknown, defaulting to 1000 [ 665.726620][T25393] Cannot find del_set index 2 as target [ 665.906143][T25401] macvtap1: entered promiscuous mode [ 665.923682][T25401] veth1_to_hsr: entered promiscuous mode [ 665.938814][T25401] macvtap1: entered allmulticast mode [ 665.944478][T25401] veth1_to_hsr: entered allmulticast mode [ 666.582937][T25391] lo speed is unknown, defaulting to 1000 [ 666.725364][T25443] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4982'. [ 666.835665][T25448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4983'. [ 666.887064][T25453] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4984'. [ 667.394318][T25439] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 667.550113][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4989'. [ 667.559258][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4989'. [ 667.618976][ T984] IPVS: starting estimator thread 0... [ 667.650596][T25475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4988'. [ 667.735545][T25476] IPVS: using max 28 ests per chain, 67200 per kthread [ 668.308754][T25496] syzkaller0: entered promiscuous mode [ 668.314321][T25496] syzkaller0: entered allmulticast mode [ 668.618673][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 670.432044][T25523] lo: entered promiscuous mode [ 670.442383][T25523] tunl0: entered promiscuous mode [ 670.449128][T25523] gre0: entered promiscuous mode [ 670.462239][T25523] gretap0: entered promiscuous mode [ 670.470830][T25523] erspan0: entered promiscuous mode [ 670.478463][T25523] ip_vti0: entered promiscuous mode [ 670.485109][T25523] ip6_vti0: entered promiscuous mode [ 670.491961][T25523] sit0: entered promiscuous mode [ 670.503042][T25523] ip6tnl0: entered promiscuous mode [ 670.521720][T25523] ip6gre0: entered promiscuous mode [ 670.531483][T25523] syz_tun: entered promiscuous mode [ 670.542904][T25523] ip6gretap0: entered promiscuous mode [ 670.551939][T25523] bridge0: entered promiscuous mode [ 670.566935][T25523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.575687][T25523] nlmon0: entered promiscuous mode [ 670.582593][T25523] caif0: entered promiscuous mode [ 670.589095][T25523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.636010][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'. [ 670.652421][T25544] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5010'. [ 670.663847][T25544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5010'. [ 670.673446][T25544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5010'. [ 670.716911][ T6644] lo speed is unknown, defaulting to 1000 [ 670.754771][ T6644] syz1: Port: 1 Link ACTIVE [ 670.949655][T25559] veth0_to_team: Caught tx_queue_len zero misconfig [ 670.959321][T25559] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 670.995595][T25559] tipc: Enabling of bearer rejected, already enabled [ 671.028934][T25567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5016'. [ 671.076066][T25567] chnl_net:caif_netlink_parms(): no params data found [ 671.220235][T25580] sock: sock_timestamping_bind_phc: sock not bind to device [ 671.254520][T25565] netlink: 'syz.0.5013': attribute type 3 has an invalid length. [ 671.262991][T25565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5013'. [ 671.595249][T25587] lo speed is unknown, defaulting to 1000 [ 671.889451][T25587] lo speed is unknown, defaulting to 1000 [ 671.917064][T25599] netlink: 'syz.0.5024': attribute type 10 has an invalid length. [ 671.937261][T25599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5024'. [ 671.968175][T25599] bond0: (slave dummy0): Releasing backup interface [ 672.010814][T25599] bridge1: port 1(vlan2) entered disabled state [ 672.035988][T25599] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 672.469730][T25619] tipc: Enabling of bearer rejected, failed to enable media [ 672.735967][T25628] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 672.970481][T25635] netlink: 'syz.1.5033': attribute type 13 has an invalid length. [ 673.311902][T25635] veth1_to_hsr: left allmulticast mode [ 673.365466][T25635] veth1_to_hsr: left promiscuous mode [ 673.409274][ T984] lo speed is unknown, defaulting to 1000 [ 673.425253][ T984] syz1: Port: 1 Link DOWN [ 673.732132][T25661] __nla_validate_parse: 3 callbacks suppressed [ 673.732153][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5038'. [ 674.088657][T25678] lo speed is unknown, defaulting to 1000 [ 674.378438][T25687] syzkaller0: entered promiscuous mode [ 674.384295][T25687] syzkaller0: entered allmulticast mode [ 674.442109][T25678] lo speed is unknown, defaulting to 1000 [ 674.580991][T25695] block nbd1: Unsupported socket: should be TCP or UNIX. [ 676.905541][T25716] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5052'. [ 676.920605][T25716] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5052'. [ 676.967801][T25693] lo speed is unknown, defaulting to 1000 [ 677.159924][T25707] lo speed is unknown, defaulting to 1000 [ 677.307451][T25715] lo speed is unknown, defaulting to 1000 [ 677.453585][T25718] lo speed is unknown, defaulting to 1000 [ 677.603796][T25718] lo speed is unknown, defaulting to 1000 [ 677.627482][T25693] lo speed is unknown, defaulting to 1000 [ 677.700067][T25707] lo speed is unknown, defaulting to 1000 [ 677.763155][T25715] lo speed is unknown, defaulting to 1000 [ 678.429165][T25724] netlink: 'syz.2.5055': attribute type 1 has an invalid length. [ 678.633164][T25725] bond15: entered promiscuous mode [ 678.642940][T25725] bond15: entered allmulticast mode [ 678.656885][T25725] 8021q: adding VLAN 0 to HW filter on device bond15 [ 678.937660][T25740] netlink: 200 bytes leftover after parsing attributes in process `syz.2.5058'. [ 679.218752][T25755] syzkaller0: create flow: hash 1198349049 index 1 [ 679.239057][T25757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5064'. [ 679.267473][T25751] bridge1: entered allmulticast mode [ 679.504083][T12806] syzkaller0: tun_net_xmit 76 [ 679.509910][T12806] syzkaller0: tun_net_xmit 48 [ 679.522228][T25767] vlan1: entered promiscuous mode [ 679.528042][ T6644] syzkaller0: tun_net_xmit 76 [ 679.528082][T25767] vlan1: entered allmulticast mode [ 679.538560][T25767] hsr_slave_1: entered allmulticast mode [ 679.546064][T25749] syzkaller0: delete flow: hash 1198349049 index 1 [ 681.767926][T25796] wg1 speed is unknown, defaulting to 1000 [ 681.773953][T25796] wg1 speed is unknown, defaulting to 1000 [ 681.784326][T25796] wg1 speed is unknown, defaulting to 1000 [ 681.812037][T25796] infiniband sxz0: RDMA CMA: cma_listen_on_dev, error -98 [ 681.852614][T25796] wg1 speed is unknown, defaulting to 1000 [ 681.861541][T25796] wg1 speed is unknown, defaulting to 1000 [ 681.890932][T25796] wg1 speed is unknown, defaulting to 1000 [ 681.937970][T25803] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5079'. [ 681.983401][T25796] wg1 speed is unknown, defaulting to 1000 [ 682.017584][T25812] xt_TCPMSS: Only works on TCP SYN packets [ 682.136021][T25796] wg1 speed is unknown, defaulting to 1000 [ 682.164310][T25796] wg1 speed is unknown, defaulting to 1000 [ 682.173551][T25796] wg1 speed is unknown, defaulting to 1000 [ 682.183121][T25796] wg1 speed is unknown, defaulting to 1000 [ 682.311026][T25820] bond5: option mode: unable to set because the bond device has slaves [ 682.336309][T25820] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 682.706460][T25830] xt_l2tp: wrong L2TP version: 1 [ 683.007034][T25839] bond0: (slave bond_slave_0): Releasing backup interface [ 683.039556][T25839] bond0: (slave bond_slave_1): Releasing backup interface [ 683.076503][T25839] vlan2: left promiscuous mode [ 683.082109][T25839] bridge1: port 1(vlan2) entered disabled state [ 683.111246][T25839] batman_adv: batadv0: Removing interface: ip6gretap1 [ 683.123777][T25839] bond4: (slave bond5): Releasing backup interface [ 683.145343][T25839] bond5: left promiscuous mode [ 683.327739][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'. [ 683.350941][T25856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5094'. [ 683.531728][T25864] netlink: 'syz.3.5099': attribute type 3 has an invalid length. [ 683.621279][T25872] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5098'. [ 684.578493][T25934] netlink: 'syz.1.5119': attribute type 1 has an invalid length. [ 684.617047][T25930] netlink: 'syz.3.5116': attribute type 58 has an invalid length. [ 684.636953][T25935] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5119'. [ 684.648458][T25930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5116'. [ 684.653400][T25934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5119'. [ 684.680654][T25938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 684.709221][T25938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 685.039679][T25947] lo speed is unknown, defaulting to 1000 [ 685.067212][T25951] syzkaller1: entered promiscuous mode [ 685.072770][T25951] syzkaller1: entered allmulticast mode [ 685.568534][T25988] netlink: 324 bytes leftover after parsing attributes in process `syz.0.5130'. [ 685.792862][T25947] lo speed is unknown, defaulting to 1000 [ 685.802867][T25947] wg1 speed is unknown, defaulting to 1000 [ 685.855778][T25994] block nbd1: server does not support multiple connections per device. [ 685.867528][T25994] block nbd1: shutting down sockets [ 685.909501][T26006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5135'. [ 685.921013][T26006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5135'. [ 685.932853][T26006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5135'. [ 686.026701][T26009] netlink: 'syz.3.5136': attribute type 7 has an invalid length. [ 686.157573][T26018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5138'. [ 686.290150][T26016] lo speed is unknown, defaulting to 1000 [ 686.619041][T26011] lo speed is unknown, defaulting to 1000 [ 686.632356][T26016] lo speed is unknown, defaulting to 1000 [ 686.681146][T26016] wg1 speed is unknown, defaulting to 1000 [ 687.223562][T26055] x_tables: duplicate underflow at hook 3 [ 687.224486][T26011] lo speed is unknown, defaulting to 1000 [ 687.283179][T26011] wg1 speed is unknown, defaulting to 1000 [ 688.008706][T26081] netlink: 'syz.2.5153': attribute type 9 has an invalid length. [ 688.086058][T26066] lo speed is unknown, defaulting to 1000 [ 688.701668][T26066] lo speed is unknown, defaulting to 1000 [ 688.720094][T26093] lo speed is unknown, defaulting to 1000 [ 688.739771][T26066] wg1 speed is unknown, defaulting to 1000 [ 689.317710][T26096] lo speed is unknown, defaulting to 1000 [ 689.413159][T26119] netlink: 'syz.3.5163': attribute type 8 has an invalid length. [ 689.619131][T26129] vlan3: entered promiscuous mode [ 689.624258][T26129] team0: entered promiscuous mode [ 689.630823][T26129] geneve0: entered promiscuous mode [ 689.653741][T26095] lo speed is unknown, defaulting to 1000 [ 689.830864][T26095] lo speed is unknown, defaulting to 1000 [ 689.839694][T26093] lo speed is unknown, defaulting to 1000 [ 689.840167][T26124] lo speed is unknown, defaulting to 1000 [ 689.848366][T26096] lo speed is unknown, defaulting to 1000 [ 689.859477][T26095] wg1 speed is unknown, defaulting to 1000 [ 689.914262][T26093] wg1 speed is unknown, defaulting to 1000 [ 689.957431][T26096] wg1 speed is unknown, defaulting to 1000 [ 690.335947][T26124] lo speed is unknown, defaulting to 1000 [ 690.348387][T26124] wg1 speed is unknown, defaulting to 1000 [ 690.639499][T26136] pimreg: entered allmulticast mode [ 691.236087][T26150] __nla_validate_parse: 7 callbacks suppressed [ 691.236108][T26150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5172'. [ 691.683395][T26174] lo speed is unknown, defaulting to 1000 [ 691.841353][T26174] lo speed is unknown, defaulting to 1000 [ 691.848961][T26174] wg1 speed is unknown, defaulting to 1000 [ 692.179999][T26184] syzkaller1: entered promiscuous mode [ 692.186177][T26184] syzkaller1: entered allmulticast mode [ 692.316970][T26184] dummy0: left promiscuous mode [ 692.929681][T26184] ip6gre1: left promiscuous mode [ 692.937044][T26184] gretap1: left promiscuous mode [ 692.960415][T26184] geneve0: left promiscuous mode [ 692.976126][T26184] mac80211_hwsim hwsim26 wlan1: left promiscuous mode [ 692.983679][T26184] macvtap1: left promiscuous mode [ 692.996942][T26184] bond4: left promiscuous mode [ 693.027131][T26184] geneve2: left promiscuous mode [ 693.153891][T26184] syzkaller1: left promiscuous mode [ 693.244895][T12807] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.253342][T12807] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.273767][T12807] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.287302][T26211] xt_HMARK: spi-set and port-set can't be combined [ 693.294857][T12807] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.312537][T12807] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.328302][T12807] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.374204][T12807] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.383060][T12807] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.388900][T26251] lo speed is unknown, defaulting to 1000 [ 694.399037][T26254] syzkaller0: entered promiscuous mode [ 694.405266][T26254] syzkaller0: entered allmulticast mode [ 694.781699][T26266] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5201'. [ 694.866993][T26251] lo speed is unknown, defaulting to 1000 [ 694.879134][T26251] wg1 speed is unknown, defaulting to 1000 [ 694.907378][T26273] netlink: zone id is out of range [ 694.912577][T26273] netlink: zone id is out of range [ 694.918420][T26273] netlink: zone id is out of range [ 694.923583][T26273] netlink: zone id is out of range [ 694.929375][T26273] netlink: zone id is out of range [ 694.935025][T26273] netlink: zone id is out of range [ 694.940343][T26273] netlink: zone id is out of range [ 694.945580][T26273] netlink: zone id is out of range [ 694.950806][T26273] netlink: zone id is out of range [ 694.957413][T26273] netlink: zone id is out of range [ 695.126168][T26277] netlink: 'syz.3.5204': attribute type 4 has an invalid length. [ 695.139377][T26281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5205'. [ 695.199103][T26279] 8021q: adding VLAN 0 to HW filter on device bond7 [ 695.208279][T26279] bond0: (slave bond7): Enslaving as an active interface with an up link [ 695.328995][T26285] netlink: 'syz.4.5206': attribute type 10 has an invalid length. [ 695.399746][T26281] bond0 (unregistering): (slave bond7): Releasing backup interface [ 695.416633][T26281] bond0 (unregistering): Released all slaves [ 695.454437][T26285] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.463768][T26285] bond0: (slave team0): Enslaving as an active interface with an up link [ 695.481780][T26284] lo speed is unknown, defaulting to 1000 [ 695.567133][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5207'. [ 695.624384][T26289] bond0: option broadcast_neighbor: invalid value (5) [ 695.652094][T26289] bond0 (unregistering): Released all slaves [ 695.797893][T26284] lo speed is unknown, defaulting to 1000 [ 695.805796][T26284] wg1 speed is unknown, defaulting to 1000 [ 695.849015][T26299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5210'. [ 696.039385][T26304] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 696.049320][T26304] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 696.058605][T26304] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 696.094249][T26307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5212'. [ 696.152632][T26308] wg1: entered promiscuous mode [ 696.164126][T26308] wg1: entered allmulticast mode [ 696.174098][ T9637] wg1 speed is unknown, defaulting to 1000 [ 696.180288][ T9637] sxz0: Port: 1 Link ACTIVE [ 696.191177][T26310] tipc: Enabled bearer , priority 0 [ 696.202785][T26310] syzkaller0: entered promiscuous mode [ 696.208899][T26310] syzkaller0: entered allmulticast mode [ 696.247466][T26311] tipc: Resetting bearer [ 696.259624][T26309] tipc: Resetting bearer [ 696.281702][T26309] tipc: Disabling bearer [ 696.525969][T26317] IPVS: set_ctl: invalid protocol: 60 172.20.20.21:20001 [ 697.275156][T26357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5226'. [ 697.654188][T26366] lo speed is unknown, defaulting to 1000 [ 697.834146][T26369] netlink: 'syz.0.5229': attribute type 29 has an invalid length. [ 697.846553][T26369] netlink: 'syz.0.5229': attribute type 29 has an invalid length. [ 697.855747][T26370] netlink: 'syz.0.5229': attribute type 29 has an invalid length. [ 697.864260][T26370] netlink: 596 bytes leftover after parsing attributes in process `syz.0.5229'. [ 697.992002][T26376] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20002 [ 698.308588][T26392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5235'. [ 698.546143][T26398] pimreg: entered allmulticast mode [ 698.555429][T26398] pimreg: left allmulticast mode [ 698.869030][T26366] lo speed is unknown, defaulting to 1000 [ 698.985546][T26366] wg1 speed is unknown, defaulting to 1000 [ 699.058115][T26417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5241'. [ 699.093485][T26417] netdevsim0: renamed from gre0 (while UP) [ 699.117192][T26417] netdevsim0: entered promiscuous mode [ 699.332294][T26425] netlink: 'syz.2.5228': attribute type 6 has an invalid length. [ 699.591935][T26426] tipc: Enabled bearer , priority 0 [ 699.612343][T26428] syzkaller0: entered promiscuous mode [ 699.619037][T26428] syzkaller0: entered allmulticast mode [ 699.760475][T26422] tipc: Resetting bearer [ 699.823359][T26422] tipc: Disabling bearer [ 700.425769][T26468] nbd: must specify at least one socket [ 700.918910][T26499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5258'. [ 700.928253][T26499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5258'. [ 700.963025][T26491] tipc: Enabled bearer , priority 0 [ 700.996052][T26491] syzkaller0: entered promiscuous mode [ 701.001768][T26491] syzkaller0: entered allmulticast mode [ 701.429775][T26522] netlink: 'syz.1.5261': attribute type 15 has an invalid length. [ 701.521520][T26526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5266'. [ 701.572128][T26527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 701.579442][T26527] IPv6: NLM_F_CREATE should be set when creating new route [ 701.587001][T26527] IPv6: NLM_F_CREATE should be set when creating new route [ 701.769637][T26490] tipc: Resetting bearer [ 701.902237][T26490] tipc: Disabling bearer [ 701.955282][ T9637] tipc: Node number set to 689992412 [ 702.291650][T26549] netlink: 'syz.0.5273': attribute type 4 has an invalid length. [ 702.418686][T26556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5274'. [ 702.554240][T26556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 702.562386][T26559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5276'. [ 702.568702][T26556] bond0: (slave bond3): Enslaving as an active interface with an up link [ 703.239122][T26585] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5284'. [ 703.308421][T26585] vlan2: entered allmulticast mode [ 703.313638][T26585] gretap0: entered allmulticast mode [ 703.324524][T26588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5285'. [ 703.667119][T26607] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 703.944134][T26619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5295'. [ 704.077747][T26622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5296'. [ 704.451999][T26634] IPv6: sit1: Disabled Multicast RS [ 704.527320][T26635] lo speed is unknown, defaulting to 1000 [ 704.557768][T26639] net_ratelimit: 2 callbacks suppressed [ 704.557790][T26639] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 704.645627][T26644] netlink: 'syz.3.5304': attribute type 1 has an invalid length. [ 704.661216][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5304'. [ 704.743191][T26641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5303'. [ 705.052276][T26661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5309'. [ 705.081868][T26661] bridge_slave_0: entered allmulticast mode [ 705.099276][T26661] tipc: Enabling of bearer rejected, already enabled [ 705.212752][T26661] tipc: Resetting bearer [ 705.235590][T26663] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5310'. [ 705.297365][T26667] lo speed is unknown, defaulting to 1000 [ 705.320919][T26635] lo speed is unknown, defaulting to 1000 [ 705.357776][T26635] wg1 speed is unknown, defaulting to 1000 [ 705.403790][T26675] sctp: [Deprecated]: syz.3.5312 (pid 26675) Use of int in maxseg socket option. [ 705.403790][T26675] Use struct sctp_assoc_value instead [ 705.481408][T26677] bond16: Removing last arp target with arp_interval on [ 705.823936][T26667] lo speed is unknown, defaulting to 1000 [ 705.832447][T26667] wg1 speed is unknown, defaulting to 1000 [ 706.113657][T26702] netlink: 'syz.1.5317': attribute type 12 has an invalid length. [ 706.341998][T26719] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 706.386740][T26720] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 706.748058][T26719] lo speed is unknown, defaulting to 1000 [ 707.366868][T26719] lo speed is unknown, defaulting to 1000 [ 707.366869][T26720] lo speed is unknown, defaulting to 1000 [ 707.368867][T26719] wg1 speed is unknown, defaulting to 1000 [ 707.469702][T26765] SET target dimension over the limit! [ 707.802036][T26784] netlink: 'syz.4.5339': attribute type 11 has an invalid length. [ 707.923511][T26755] lo speed is unknown, defaulting to 1000 [ 708.182353][T26720] lo speed is unknown, defaulting to 1000 [ 708.197952][T26720] wg1 speed is unknown, defaulting to 1000 [ 708.206922][T26755] lo speed is unknown, defaulting to 1000 [ 708.247282][T26755] wg1 speed is unknown, defaulting to 1000 [ 708.595732][T26798] __nla_validate_parse: 6 callbacks suppressed [ 708.595752][T26798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 708.605488][T26800] FAULT_INJECTION: forcing a failure. [ 708.605488][T26800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.633579][T26798] : entered promiscuous mode [ 708.648293][T26798] netlink: 'syz.3.5342': attribute type 1 has an invalid length. [ 708.658636][T26800] CPU: 0 UID: 0 PID: 26800 Comm: syz.1.5343 Not tainted syzkaller #0 PREEMPT(full) [ 708.658664][T26800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 708.658675][T26800] Call Trace: [ 708.658683][T26800] [ 708.658691][T26800] dump_stack_lvl+0x189/0x250 [ 708.658726][T26800] ? __pfx____ratelimit+0x10/0x10 [ 708.658757][T26800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 708.658785][T26800] ? __pfx__printk+0x10/0x10 [ 708.658807][T26800] ? __might_fault+0xb0/0x130 [ 708.658848][T26800] should_fail_ex+0x414/0x560 [ 708.658886][T26800] _copy_from_user+0x2d/0xb0 [ 708.658914][T26800] ___sys_recvmsg+0x12e/0x510 [ 708.658945][T26800] ? __pfx____sys_recvmsg+0x10/0x10 [ 708.658997][T26800] ? __fget_files+0x3a0/0x420 [ 708.659029][T26800] do_recvmmsg+0x307/0x770 [ 708.659064][T26800] ? __pfx_do_recvmmsg+0x10/0x10 [ 708.659101][T26800] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 708.659142][T26800] __x64_sys_recvmmsg+0x190/0x240 [ 708.659171][T26800] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 708.659202][T26800] ? do_syscall_64+0xbe/0xfa0 [ 708.659236][T26800] do_syscall_64+0xfa/0xfa0 [ 708.659265][T26800] ? lockdep_hardirqs_on+0x9c/0x150 [ 708.659295][T26800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.659316][T26800] ? clear_bhb_loop+0x60/0xb0 [ 708.659342][T26800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.659372][T26800] RIP: 0033:0x7fa6a6d8f6c9 [ 708.659391][T26800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.659409][T26800] RSP: 002b:00007fa6a7ca0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 708.659432][T26800] RAX: ffffffffffffffda RBX: 00007fa6a6fe5fa0 RCX: 00007fa6a6d8f6c9 [ 708.659447][T26800] RDX: 0000000000000003 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 708.659459][T26800] RBP: 00007fa6a7ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 708.659472][T26800] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 708.659484][T26800] R13: 00007fa6a6fe6038 R14: 00007fa6a6fe5fa0 R15: 00007ffc50aa5ce8 [ 708.659519][T26800] [ 708.940824][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5342'. [ 708.978304][T26798] bond7: entered promiscuous mode [ 708.983876][T26798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 709.025803][T26798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5342'. [ 709.031163][T26802] 8021q: adding VLAN 0 to HW filter on device bond7 [ 709.042116][T26811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5344'. [ 709.043001][T26802] bond7: (slave gre0): The slave device specified does not support setting the MAC address [ 709.063651][T26802] bond7: (slave gre0): Setting fail_over_mac to active for active-backup mode [ 709.074264][T26802] bond7: (slave gre0): Opening slave failed [ 709.089170][T26803] netlink: 'syz.4.5344': attribute type 2 has an invalid length. [ 709.099346][T26805] netlink: 'syz.1.5345': attribute type 15 has an invalid length. [ 709.111809][T26805] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5345'. [ 709.130920][T26811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5344'. [ 709.176889][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5344'. [ 709.614087][T26818] nbd: must specify at least one socket [ 710.084128][T26845] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5355'. [ 710.131122][T26848] netlink: 'syz.1.5357': attribute type 13 has an invalid length. [ 710.142440][T26848] netlink: 'syz.1.5357': attribute type 17 has an invalid length. [ 710.156289][T26848] lo: left promiscuous mode [ 710.170366][T26848] tunl0: left promiscuous mode [ 710.176977][T26848] gre0: left promiscuous mode [ 710.184263][T26848] gretap0: left promiscuous mode [ 710.200404][T26848] erspan0: left promiscuous mode [ 710.212671][T26848] ip_vti0: left promiscuous mode [ 710.221268][T26848] ip6_vti0: left promiscuous mode [ 710.228859][T26848] sit0: left promiscuous mode [ 710.252712][T26848] ip6tnl0: left promiscuous mode [ 710.269429][T26848] ip6gre0: left promiscuous mode [ 710.277965][T26848] syz_tun: left promiscuous mode [ 710.283989][T26857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5360'. [ 710.288206][T26848] ip6gretap0: left promiscuous mode [ 710.305953][T26848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.313801][T26848] nlmon0: left promiscuous mode [ 710.321094][T26848] caif0: left promiscuous mode [ 710.327220][T26848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.343540][ T9637] lo speed is unknown, defaulting to 1000 [ 710.346376][T12806] bond0: (slave wlan1): link status definitely down, disabling slave [ 710.350050][ T9637] syz1: Port: 1 Link ACTIVE [ 710.365394][T12806] bond0: now running without any active interface! [ 710.429134][T26851] lo speed is unknown, defaulting to 1000 [ 710.531975][T26866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5362'. [ 710.571251][T26869] netlink: 'syz.2.5363': attribute type 1 has an invalid length. [ 710.860259][T26881] vlan2: entered allmulticast mode [ 710.872563][T26881] bridge0: port 3(vlan2) entered blocking state [ 710.891928][T26881] bridge0: port 3(vlan2) entered disabled state [ 710.926762][T26881] vlan2: entered promiscuous mode [ 710.959441][T26851] lo speed is unknown, defaulting to 1000 [ 710.977263][T26851] wg1 speed is unknown, defaulting to 1000 [ 711.147008][T26893] macvtap2: entered promiscuous mode [ 711.152566][T26893] syz_tun: entered promiscuous mode [ 711.158908][T26893] macvtap2: entered allmulticast mode [ 711.164429][T26893] syz_tun: entered allmulticast mode [ 711.210019][T26897] syz_tun: left allmulticast mode [ 711.222361][T26897] syz_tun: left promiscuous mode [ 711.361819][T26905] netlink: 'syz.0.5370': attribute type 11 has an invalid length. [ 711.380558][T26896] syzkaller0: entered promiscuous mode [ 711.400050][T26896] syzkaller0: entered allmulticast mode [ 711.815993][T26913] ip6gretap0: entered promiscuous mode [ 711.838299][T26913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.863082][T26913] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 711.889383][ T6629] lo speed is unknown, defaulting to 1000 [ 711.895702][ T6629] syz2: Port: 1 Link ACTIVE [ 711.905487][ T9638] lo speed is unknown, defaulting to 1000 [ 711.920495][T26922] netlink: 'syz.0.5376': attribute type 16 has an invalid length. [ 711.928591][T26922] netlink: 'syz.0.5376': attribute type 17 has an invalid length. [ 712.161274][T26929] syzkaller1: entered promiscuous mode [ 712.188775][T26929] syzkaller1: entered allmulticast mode [ 712.326753][T26939] netlink: 'syz.1.5381': attribute type 1 has an invalid length. [ 712.468204][T26948] 1ªX¹¦À: renamed from 60ªX¹¦À [ 712.493648][T26948] 1ªX¹¦À: entered allmulticast mode [ 712.511118][T26948] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 712.978561][T26978] FAULT_INJECTION: forcing a failure. [ 712.978561][T26978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.016469][T26970] bond17 (unregistering): Released all slaves [ 713.041575][T26978] CPU: 0 UID: 0 PID: 26978 Comm: syz.0.5390 Not tainted syzkaller #0 PREEMPT(full) [ 713.041607][T26978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 713.041619][T26978] Call Trace: [ 713.041627][T26978] [ 713.041635][T26978] dump_stack_lvl+0x189/0x250 [ 713.041669][T26978] ? __pfx____ratelimit+0x10/0x10 [ 713.041700][T26978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.041729][T26978] ? __pfx__printk+0x10/0x10 [ 713.041750][T26978] ? __might_fault+0xb0/0x130 [ 713.041793][T26978] should_fail_ex+0x414/0x560 [ 713.041831][T26978] _copy_to_iter+0x404/0x1790 [ 713.041859][T26978] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 713.041902][T26978] ? __pfx__copy_to_iter+0x10/0x10 [ 713.041923][T26978] ? __skb_try_recv_from_queue+0x58f/0x730 [ 713.041956][T26978] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 713.041990][T26978] __skb_datagram_iter+0xf8/0x990 [ 713.042016][T26978] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 713.042053][T26978] skb_copy_datagram_iter+0xc5/0x230 [ 713.042098][T26978] netlink_recvmsg+0x2ab/0xa30 [ 713.042138][T26978] ? __pfx_netlink_recvmsg+0x10/0x10 [ 713.042158][T26978] ? __lock_acquire+0xab9/0xd20 [ 713.042184][T26978] ? aa_sock_msg_perm+0xf1/0x1d0 [ 713.042217][T26978] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 713.042240][T26978] ? __pfx_netlink_recvmsg+0x10/0x10 [ 713.042265][T26978] sock_recvmsg_nosec+0x186/0x1c0 [ 713.042298][T26978] ____sys_recvmsg+0x3aa/0x460 [ 713.042332][T26978] ? __pfx_____sys_recvmsg+0x10/0x10 [ 713.042375][T26978] ? import_iovec+0x74/0xa0 [ 713.042407][T26978] ___sys_recvmsg+0x1b5/0x510 [ 713.042437][T26978] ? __pfx____sys_recvmsg+0x10/0x10 [ 713.042498][T26978] ? __might_fault+0xb0/0x130 [ 713.042532][T26978] do_recvmmsg+0x307/0x770 [ 713.042568][T26978] ? __pfx_do_recvmmsg+0x10/0x10 [ 713.042607][T26978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 713.042648][T26978] __x64_sys_recvmmsg+0x190/0x240 [ 713.042677][T26978] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 713.042707][T26978] ? do_syscall_64+0xbe/0xfa0 [ 713.042743][T26978] do_syscall_64+0xfa/0xfa0 [ 713.042773][T26978] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.042804][T26978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.042824][T26978] ? clear_bhb_loop+0x60/0xb0 [ 713.042850][T26978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.042870][T26978] RIP: 0033:0x7fccc0d8f6c9 [ 713.042890][T26978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.042907][T26978] RSP: 002b:00007fccc1b84038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 713.042929][T26978] RAX: ffffffffffffffda RBX: 00007fccc0fe5fa0 RCX: 00007fccc0d8f6c9 [ 713.042944][T26978] RDX: 0000000000000003 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 713.042957][T26978] RBP: 00007fccc1b84090 R08: 0000000000000000 R09: 0000000000000000 [ 713.042969][T26978] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 713.042982][T26978] R13: 00007fccc0fe6038 R14: 00007fccc0fe5fa0 R15: 00007ffc626735c8 [ 713.043018][T26978] [ 713.420338][T26964] xt_connbytes: Forcing CT accounting to be enabled [ 713.542913][T26959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.692726][T26982] bond5: (slave macvlan3): Releasing backup interface [ 713.700544][T26982] bond5: (slave macvlan3): the permanent HWaddr of slave - 72:04:68:a9:7c:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 713.771800][T26982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.791702][T26982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.803345][T26982] bond0 (unregistering): Released all slaves [ 713.872406][T26987] gtp0: entered promiscuous mode [ 713.901478][T26987] gtp0: entered allmulticast mode [ 713.924822][T26995] netlink: 'syz.0.5392': attribute type 5 has an invalid length. [ 713.947084][T26993] syzkaller0: entered promiscuous mode [ 713.952942][T26993] syzkaller0: entered allmulticast mode [ 713.977908][T26985] syzkaller0: mtu less than device minimum [ 713.986469][T26973] lo speed is unknown, defaulting to 1000 [ 714.316618][T27019] Cannot find set identified by id 1 to match [ 714.366913][T27018] gtp0: entered promiscuous mode [ 714.381869][T27018] gtp0: entered allmulticast mode [ 714.541864][T27024] vlan2: entered promiscuous mode [ 714.548153][T27024] vlan2: entered allmulticast mode [ 714.553459][T27024] hsr_slave_1: entered allmulticast mode [ 714.569124][T27027] syz_tun: entered promiscuous mode [ 714.574706][T27027] syz_tun: entered allmulticast mode [ 714.633029][T26973] lo speed is unknown, defaulting to 1000 [ 714.664191][T27032] __nla_validate_parse: 9 callbacks suppressed [ 714.664211][T27032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5402'. [ 714.723537][T26973] wg1 speed is unknown, defaulting to 1000 [ 714.740298][T27032] [†’Ì: entered promiscuous mode [ 714.756118][T27032] dvmrp1: left allmulticast mode [ 714.817824][T27041] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 714.916594][T27042] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 714.936615][T27042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 714.950718][T27042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 715.218357][T27060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5407'. [ 715.587953][T27068] bond0: entered promiscuous mode [ 715.593361][T27068] bond0: entered allmulticast mode [ 715.601879][T27068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.839253][T27068] bond0 (unregistering): Released all slaves [ 715.996194][T27089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5413'. [ 716.154309][T27096] tipc: Enabled bearer , priority 0 [ 716.158749][T27094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5414'. [ 716.169043][T27096] syzkaller0: entered promiscuous mode [ 716.177115][T27096] syzkaller0: entered allmulticast mode [ 716.212633][T27096] tipc: Resetting bearer [ 716.238832][T27095] tipc: Resetting bearer [ 716.293782][T27095] tipc: Disabling bearer [ 716.333487][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.360313][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.430328][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.482587][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.504426][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.521127][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.557910][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.577102][T27114] FAULT_INJECTION: forcing a failure. [ 716.577102][T27114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.591450][T27114] CPU: 1 UID: 0 PID: 27114 Comm: syz.1.5422 Not tainted syzkaller #0 PREEMPT(full) [ 716.591480][T27114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 716.591493][T27114] Call Trace: [ 716.591501][T27114] [ 716.591510][T27114] dump_stack_lvl+0x189/0x250 [ 716.591543][T27114] ? __pfx____ratelimit+0x10/0x10 [ 716.591574][T27114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.591602][T27114] ? __pfx__printk+0x10/0x10 [ 716.591624][T27114] ? __might_fault+0xb0/0x130 [ 716.591667][T27114] should_fail_ex+0x414/0x560 [ 716.591704][T27114] _copy_to_iter+0x404/0x1790 [ 716.591731][T27114] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 716.591772][T27114] ? __pfx__copy_to_iter+0x10/0x10 [ 716.591792][T27114] ? __skb_try_recv_from_queue+0x58f/0x730 [ 716.591825][T27114] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 716.591858][T27114] __skb_datagram_iter+0xf8/0x990 [ 716.591885][T27114] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 716.591920][T27114] skb_copy_datagram_iter+0xc5/0x230 [ 716.591952][T27114] netlink_recvmsg+0x2ab/0xa30 [ 716.591985][T27114] ? __pfx_netlink_recvmsg+0x10/0x10 [ 716.592004][T27114] ? __lock_acquire+0xab9/0xd20 [ 716.592030][T27114] ? aa_sock_msg_perm+0xf1/0x1d0 [ 716.592063][T27114] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 716.592085][T27114] ? __pfx_netlink_recvmsg+0x10/0x10 [ 716.592114][T27114] sock_recvmsg_nosec+0x186/0x1c0 [ 716.592147][T27114] ____sys_recvmsg+0x3aa/0x460 [ 716.592186][T27114] ? __pfx_____sys_recvmsg+0x10/0x10 [ 716.592229][T27114] ? import_iovec+0x74/0xa0 [ 716.592259][T27114] ___sys_recvmsg+0x1b5/0x510 [ 716.592289][T27114] ? __pfx____sys_recvmsg+0x10/0x10 [ 716.592350][T27114] ? __might_fault+0xb0/0x130 [ 716.592383][T27114] do_recvmmsg+0x307/0x770 [ 716.592417][T27114] ? __pfx_do_recvmmsg+0x10/0x10 [ 716.592455][T27114] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 716.592497][T27114] __x64_sys_recvmmsg+0x190/0x240 [ 716.592526][T27114] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 716.592557][T27114] ? do_syscall_64+0xbe/0xfa0 [ 716.592592][T27114] do_syscall_64+0xfa/0xfa0 [ 716.592620][T27114] ? lockdep_hardirqs_on+0x9c/0x150 [ 716.592651][T27114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.592672][T27114] ? clear_bhb_loop+0x60/0xb0 [ 716.592698][T27114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.592717][T27114] RIP: 0033:0x7fa6a6d8f6c9 [ 716.592736][T27114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.592754][T27114] RSP: 002b:00007fa6a7ca0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 716.592776][T27114] RAX: ffffffffffffffda RBX: 00007fa6a6fe5fa0 RCX: 00007fa6a6d8f6c9 [ 716.592792][T27114] RDX: 0000000000000003 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 716.592805][T27114] RBP: 00007fa6a7ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 716.592818][T27114] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 716.592831][T27114] R13: 00007fa6a6fe6038 R14: 00007fa6a6fe5fa0 R15: 00007ffc50aa5ce8 [ 716.592866][T27114] [ 716.897999][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.913839][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.929585][T27104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.416480][T27144] syzkaller1: entered promiscuous mode [ 717.422032][T27144] syzkaller1: entered allmulticast mode [ 717.537816][T27153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5430'. [ 717.740564][T27155] lo speed is unknown, defaulting to 1000 [ 717.949202][T27177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5436'. [ 718.171568][T27186] tunl0: Caught tx_queue_len zero misconfig [ 718.254359][T27194] xt_hashlimit: size too large, truncated to 1048576 [ 718.357739][T27197] netlink: 'syz.0.5441': attribute type 12 has an invalid length. [ 718.463979][T27155] lo speed is unknown, defaulting to 1000 [ 718.485474][T27155] wg1 speed is unknown, defaulting to 1000 [ 719.275801][T27209] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5445'. [ 719.515650][T27219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5448'. [ 719.542933][T27222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5449'. [ 719.595505][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5449'. [ 719.606338][T27226] netlink: 'syz.0.5450': attribute type 10 has an invalid length. [ 719.673661][T27232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5448'. [ 719.738499][T27235] netlink: 'syz.0.5450': attribute type 10 has an invalid length. [ 719.747130][T27235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5450'. [ 719.862376][T27235] batadv0: entered promiscuous mode [ 719.997640][T27219] tipc: Resetting bearer [ 720.068001][T27219] syzkaller0: left promiscuous mode [ 720.508668][T27259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5459'. [ 720.635368][T27270] C: renamed from team_slave_0 [ 720.677885][T27270] netlink: 'syz.2.5458': attribute type 4 has an invalid length. [ 720.700979][T27270] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5458'. [ 720.802773][T27279] lo speed is unknown, defaulting to 1000 [ 720.980870][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5464'. [ 721.197173][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5468'. [ 721.314391][T27279] lo speed is unknown, defaulting to 1000 [ 721.314768][T27298] lo speed is unknown, defaulting to 1000 [ 721.340651][T27279] wg1 speed is unknown, defaulting to 1000 [ 721.397347][T27300] netlink: 'syz.2.5470': attribute type 5 has an invalid length. [ 721.566016][T27306] netlink: 'syz.2.5471': attribute type 1 has an invalid length. [ 721.613571][T27306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5471'. [ 721.627177][T27306] netlink: 'syz.2.5471': attribute type 1 has an invalid length. [ 721.857586][T27298] lo speed is unknown, defaulting to 1000 [ 721.868990][T27298] wg1 speed is unknown, defaulting to 1000 [ 722.610684][T27344] netlink: 'syz.2.5481': attribute type 13 has an invalid length. [ 722.630940][T27344] netlink: 'syz.2.5481': attribute type 17 has an invalid length. [ 722.756614][T27344] erspan0: left allmulticast mode [ 722.785992][T27344] tipc: Resetting bearer [ 722.793387][T27344] tipc: Resetting bearer [ 722.813527][T27344] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.827067][T27344] 1ªX¹¦À: left allmulticast mode [ 722.832179][T27344] net_ratelimit: 26 callbacks suppressed [ 722.832192][T27344] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 722.902745][T27352] lo speed is unknown, defaulting to 1000 [ 723.297642][T27352] lo speed is unknown, defaulting to 1000 [ 723.332467][T27352] wg1 speed is unknown, defaulting to 1000 [ 723.613355][T27385] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5487'. [ 723.911471][T27399] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 723.931601][T27405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5490'. [ 725.001612][T27426] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5497'. [ 725.208372][T27439] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5501'. [ 725.296437][T27443] netlink: 'syz.4.5502': attribute type 10 has an invalid length. [ 725.305343][T27443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5502'. [ 725.414134][T27450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5503'. [ 725.427589][T27451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5504'. [ 725.438428][T27448] batadv1: entered promiscuous mode [ 725.444796][T27451] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 725.446632][T27448] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 725.452910][T27451] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 726.272049][T27500] netlink: 'syz.0.5519': attribute type 10 has an invalid length. [ 726.293039][T27500] netlink: 'syz.0.5519': attribute type 10 has an invalid length. [ 726.403186][T27504] lo speed is unknown, defaulting to 1000 [ 726.508803][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5523'. [ 727.125601][T27504] lo speed is unknown, defaulting to 1000 [ 727.158622][T27504] wg1 speed is unknown, defaulting to 1000 [ 727.317201][T27543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5530'. [ 727.646135][T27554] netlink: 'syz.0.5533': attribute type 1 has an invalid length. [ 727.677124][T27554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.842640][T27554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.896046][T27554] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 727.970815][T27554] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 728.062295][T27562] veth9: entered promiscuous mode [ 728.078637][T27562] bond0: (slave veth9): Enslaving as an active interface with a down link [ 728.389461][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5541'. [ 728.467209][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5544'. [ 728.477997][T27598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5543'. [ 728.527163][T27599] veth5: entered promiscuous mode [ 728.917777][T27614] lo speed is unknown, defaulting to 1000 [ 729.200667][T27635] netlink: 'syz.4.5553': attribute type 10 has an invalid length. [ 729.373760][T27614] lo speed is unknown, defaulting to 1000 [ 729.379943][T27623] lo speed is unknown, defaulting to 1000 [ 729.388187][T27614] wg1 speed is unknown, defaulting to 1000 [ 729.847207][T27649] vlan2: entered promiscuous mode [ 729.852421][T27649] hsr0: entered promiscuous mode [ 729.858606][T27649] vlan2: entered allmulticast mode [ 729.864148][T27649] hsr0: entered allmulticast mode [ 729.870095][T27649] hsr_slave_0: entered allmulticast mode [ 729.879994][T27623] lo speed is unknown, defaulting to 1000 [ 730.047010][T27623] wg1 speed is unknown, defaulting to 1000 [ 730.228366][T27673] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.265957][T27660] __nla_validate_parse: 4 callbacks suppressed [ 730.265989][T27660] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5560'. [ 730.501262][T27673] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.615274][T27673] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.732507][T27693] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5568'. [ 730.742082][T27693] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 730.838720][T27673] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.999504][T12806] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.040037][T12795] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.082092][T12795] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.117534][T12795] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.243258][T27715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5574'. [ 731.263547][T27715] block nbd1: Unsupported socket: should be TCP or UNIX. [ 731.274074][T27719] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5576'. [ 731.285245][T27720] bridge: RTM_NEWNEIGH with invalid ether address [ 731.306095][T27715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5574'. [ 731.396634][T27719] sctp: [Deprecated]: syz.1.5576 (pid 27719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 731.396634][T27719] Use struct sctp_sack_info instead [ 731.441051][T27725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5578'. [ 731.456647][T27726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5579'. [ 731.545740][T27729] syzkaller1: entered promiscuous mode [ 731.551552][T27729] syzkaller1: entered allmulticast mode [ 732.087773][T27751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5586'. [ 732.316394][T27758] pim6reg1: entered promiscuous mode [ 732.331334][T27758] pim6reg1: entered allmulticast mode [ 732.573498][T27760] lo speed is unknown, defaulting to 1000 [ 732.899696][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 733.164543][T27774] lo speed is unknown, defaulting to 1000 [ 733.191260][T27760] lo speed is unknown, defaulting to 1000 [ 733.237439][T27760] wg1 speed is unknown, defaulting to 1000 [ 733.263187][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5597'. [ 733.345395][T27780] nbd2: detected capacity change from 0 to 63 [ 733.352035][T27788] block nbd2: NBD_DISCONNECT [ 733.368761][T27788] block nbd2: Disconnected due to user request. [ 733.435324][T27788] block nbd2: shutting down sockets [ 733.483596][T27790] bond0: entered promiscuous mode [ 733.565269][T27790] bond0: entered allmulticast mode [ 733.571049][T27790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.791341][T27774] lo speed is unknown, defaulting to 1000 [ 733.877909][T27774] wg1 speed is unknown, defaulting to 1000 [ 734.161096][T27830] netlink: 'syz.2.5608': attribute type 13 has an invalid length. [ 734.714079][T27864] netlink: 'syz.3.5617': attribute type 2 has an invalid length. [ 734.929890][T27874] netlink: 'syz.4.5620': attribute type 8 has an invalid length. [ 735.205468][T27872] lo speed is unknown, defaulting to 1000 [ 735.250180][T27883] netlink: 'syz.3.5623': attribute type 10 has an invalid length. [ 735.464316][T27892] netlink: 'syz.0.5625': attribute type 10 has an invalid length. [ 735.490239][T27892] __nla_validate_parse: 8 callbacks suppressed [ 735.490257][T27892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5625'. [ 735.604162][T27903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5626'. [ 735.642957][T27903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5626'. [ 736.070529][T27914] bond8: option arp_interval: invalid value (18446744073709551615) [ 736.083033][T27914] bond8: option arp_interval: allowed values 0 - 2147483647 [ 736.095383][T27914] bond8 (unregistering): Released all slaves [ 736.129860][T27874] lo speed is unknown, defaulting to 1000 [ 736.285936][T27928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.529223][T27939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5639'. [ 738.635343][T27874] lo speed is unknown, defaulting to 1000 [ 738.656373][T27872] lo speed is unknown, defaulting to 1000 [ 738.709017][T27874] wg1 speed is unknown, defaulting to 1000 [ 738.753756][T27949] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5643'. [ 738.775973][T27872] wg1 speed is unknown, defaulting to 1000 [ 738.781309][T27952] netlink: 'syz.0.5644': attribute type 1 has an invalid length. [ 738.871238][T27952] 8021q: adding VLAN 0 to HW filter on device bond8 [ 738.911701][T27949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5643'. [ 738.920136][T27953] bond8: (slave geneve3): making interface the new active one [ 738.930654][T27953] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 738.981053][T12794] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.991561][T12794] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.001878][T27956] lo speed is unknown, defaulting to 1000 [ 739.141173][T12794] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.170966][T12794] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.349837][T27976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5650'. [ 739.419950][T27954] lo speed is unknown, defaulting to 1000 [ 739.437624][T27978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5651'. [ 739.447977][T27978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5651'. [ 739.460070][T27978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5651'. [ 739.648838][T27964] lo speed is unknown, defaulting to 1000 [ 739.800757][T27964] lo speed is unknown, defaulting to 1000 [ 739.813020][T27964] wg1 speed is unknown, defaulting to 1000 [ 739.813233][T27980] lo speed is unknown, defaulting to 1000 [ 739.842203][T27956] lo speed is unknown, defaulting to 1000 [ 739.881408][T27956] wg1 speed is unknown, defaulting to 1000 [ 739.890628][T27954] lo speed is unknown, defaulting to 1000 [ 740.005082][T27954] wg1 speed is unknown, defaulting to 1000 [ 740.280068][T27975] lo speed is unknown, defaulting to 1000 [ 740.701716][T27975] lo speed is unknown, defaulting to 1000 [ 740.712618][T27980] lo speed is unknown, defaulting to 1000 [ 740.767625][T27975] wg1 speed is unknown, defaulting to 1000 [ 740.852626][T27980] wg1 speed is unknown, defaulting to 1000 [ 741.659703][T27999] lo speed is unknown, defaulting to 1000 [ 742.399727][T28017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5661'. [ 742.410244][T27999] lo speed is unknown, defaulting to 1000 [ 742.419949][T27999] wg1 speed is unknown, defaulting to 1000 [ 743.024133][T28040] netlink: 'syz.2.5666': attribute type 1 has an invalid length. [ 743.389754][T28047] bond17: (slave bridge9): making interface the new active one [ 743.431557][T28047] bond17: (slave bridge9): Enslaving as an active interface with an up link [ 743.489075][T28060] sch_tbf: burst 0 is lower than device tunl0 mtu (65485) ! [ 743.530615][T28062] netlink: 'syz.3.5672': attribute type 39 has an invalid length. [ 743.737064][T28072] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5674'. [ 744.044483][T28086] lo speed is unknown, defaulting to 1000 [ 744.560893][T28086] lo speed is unknown, defaulting to 1000 [ 744.568691][T28104] tipc: Enabled bearer , priority 0 [ 744.579978][T28086] wg1 speed is unknown, defaulting to 1000 [ 744.603665][T28103] tipc: Disabling bearer [ 744.829009][T28108] Cannot find add_set index 0 as target [ 745.044317][T28116] xt_nat: multiple ranges no longer supported [ 745.146295][T28116] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 745.160902][T28116] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5688'. [ 745.169627][T28130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.521336][T28146] lo speed is unknown, defaulting to 1000 [ 745.585401][T28150] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.5697'. [ 746.062403][T28146] lo speed is unknown, defaulting to 1000 [ 746.071109][T28146] wg1 speed is unknown, defaulting to 1000 [ 746.407040][T28177] netdevsim0: left promiscuous mode [ 746.463027][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5700'. [ 746.581628][T28177] tipc: Resetting bearer [ 746.638416][T28177] vxcan1: left allmulticast mode [ 746.647783][T28177] wg1: left promiscuous mode [ 746.652687][T28177] wg1: left allmulticast mode [ 746.662949][T28177] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 746.672641][T28177] bond3: left allmulticast mode [ 746.678427][T28177] bridge1: left allmulticast mode [ 746.703049][T28177] macsec0: left allmulticast mode [ 746.719033][T28177] macvtap1: left allmulticast mode [ 746.741144][T28177] veth5: left promiscuous mode [ 746.785654][T28189] hsr_slave_0: left promiscuous mode [ 746.794783][T28189] hsr_slave_1: left promiscuous mode [ 746.924700][ T6629] wg1 speed is unknown, defaulting to 1000 [ 746.930596][ T6629] sxz0: Port: 1 Link DOWN [ 746.935165][T12795] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.943796][T12807] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.962522][T12807] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.992031][T12807] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.039617][T28195] lo speed is unknown, defaulting to 1000 [ 747.318383][T28195] lo speed is unknown, defaulting to 1000 [ 747.346920][T28195] wg1 speed is unknown, defaulting to 1000 [ 747.574141][T28216] batadv2: entered promiscuous mode [ 747.580444][T28216] batadv2: entered allmulticast mode [ 747.780267][T28232] bond0: entered promiscuous mode [ 747.806603][T28232] bond0: left promiscuous mode [ 747.911575][T28236] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 748.128023][T28235] lo speed is unknown, defaulting to 1000 [ 748.372328][T28246] tipc: Resetting bearer [ 748.425668][T28246] tipc: Resetting bearer [ 748.475610][T28246] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 748.711715][T28250] xt_hashlimit: size too large, truncated to 1048576 [ 748.814046][T28253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5719'. [ 748.855805][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5719'. [ 749.066654][T28235] lo speed is unknown, defaulting to 1000 [ 749.069402][T28243] lo speed is unknown, defaulting to 1000 [ 749.090571][T28235] wg1 speed is unknown, defaulting to 1000 [ 749.261374][T28262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5720'. [ 749.271460][T28262] bridge_slave_0: default FDB implementation only supports local addresses [ 749.292153][T28267] pim6reg99999999: entered allmulticast mode [ 749.407282][T28267] netlink: 'syz.2.5722': attribute type 15 has an invalid length. [ 749.510887][T28270] syz_tun: entered allmulticast mode [ 749.543429][T28273] pim6reg1: entered promiscuous mode [ 749.552444][T28273] pim6reg1: entered allmulticast mode [ 749.591378][T28243] lo speed is unknown, defaulting to 1000 [ 749.631609][T28270] lo speed is unknown, defaulting to 1000 [ 749.640015][T28243] wg1 speed is unknown, defaulting to 1000 [ 749.885870][T28284] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.066380][T28284] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.127917][T28270] lo speed is unknown, defaulting to 1000 [ 750.157625][T28284] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.182172][T28270] wg1 speed is unknown, defaulting to 1000 [ 750.276117][T28284] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.398595][T28269] syz_tun: left allmulticast mode [ 750.478404][T28298] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 750.516441][T28302] sctp: [Deprecated]: syz.0.5731 (pid 28302) Use of int in max_burst socket option. [ 750.516441][T28302] Use struct sctp_assoc_value instead [ 750.525627][T28298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5730'. [ 750.560992][T28298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5730'. [ 750.582186][T28298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5730'. [ 750.594791][T28298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5730'. [ 750.644869][T12794] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.689411][T12807] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.830057][T11060] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 750.848020][T11060] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.120889][T28314] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5735'. [ 751.422194][T28323] lo speed is unknown, defaulting to 1000 [ 751.444154][T28326] tipc: Enabled bearer , priority 0 [ 751.695704][T28326] syzkaller0: entered promiscuous mode [ 751.701485][T28326] syzkaller0: entered allmulticast mode [ 751.855557][T28326] tipc: Resetting bearer [ 751.951773][T28325] tipc: Resetting bearer [ 751.991665][T28325] tipc: Disabling bearer [ 752.653319][T28338] lo speed is unknown, defaulting to 1000 [ 752.660035][T28323] lo speed is unknown, defaulting to 1000 [ 752.706903][T28323] wg1 speed is unknown, defaulting to 1000 [ 753.182648][T28392] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5755'. [ 753.279286][T28385] lo speed is unknown, defaulting to 1000 [ 753.645396][T28385] lo speed is unknown, defaulting to 1000 [ 753.653229][T28338] lo speed is unknown, defaulting to 1000 [ 753.687014][T28338] wg1 speed is unknown, defaulting to 1000 [ 753.738834][T28385] wg1 speed is unknown, defaulting to 1000 [ 753.809836][T28403] netlink: 'syz.3.5758': attribute type 10 has an invalid length. [ 754.486817][T28421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5765'. [ 754.525153][T28421] xt_TCPMSS: Only works on TCP SYN packets [ 754.871240][T28428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5768'. [ 754.914504][T28426] lo speed is unknown, defaulting to 1000 [ 755.031766][T28434] veth1_to_hsr: entered promiscuous mode [ 755.063356][T28434] veth1_to_hsr: entered allmulticast mode [ 755.186079][T28438] ip6gre1: entered promiscuous mode [ 755.222878][T28426] lo speed is unknown, defaulting to 1000 [ 755.234924][T28426] wg1 speed is unknown, defaulting to 1000 [ 755.388998][T28445] netlink: 344 bytes leftover after parsing attributes in process `syz.0.5773'. [ 755.687200][T28459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5776'. [ 755.832229][T28463] syz.1.5778: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 755.884749][T28463] CPU: 0 UID: 0 PID: 28463 Comm: syz.1.5778 Not tainted syzkaller #0 PREEMPT(full) [ 755.884785][T28463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 755.884799][T28463] Call Trace: [ 755.884808][T28463] [ 755.884819][T28463] dump_stack_lvl+0x189/0x250 [ 755.884861][T28463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.884892][T28463] ? __pfx__printk+0x10/0x10 [ 755.884915][T28463] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 755.884945][T28463] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 755.884978][T28463] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 755.885011][T28463] warn_alloc+0x214/0x310 [ 755.885050][T28463] ? __pfx_warn_alloc+0x10/0x10 [ 755.885093][T28463] ? __get_vm_area_node+0x28f/0x300 [ 755.885124][T28463] ? xskq_create+0xbf/0x170 [ 755.885159][T28463] __vmalloc_node_range_noprof+0x690/0x12d0 [ 755.885230][T28463] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 755.885266][T28463] ? __kasan_kmalloc+0x93/0xb0 [ 755.885306][T28463] vmalloc_user_noprof+0xad/0xf0 [ 755.885338][T28463] ? xskq_create+0xbf/0x170 [ 755.885369][T28463] xskq_create+0xbf/0x170 [ 755.885404][T28463] xsk_init_queue+0xb0/0x110 [ 755.885437][T28463] xsk_setsockopt+0x57b/0x8d0 [ 755.885468][T28463] ? __pfx_xsk_setsockopt+0x10/0x10 [ 755.885500][T28463] ? __pfx_aa_sk_perm+0x10/0x10 [ 755.885533][T28463] ? aa_sock_opt_perm+0xff/0x1b0 [ 755.885569][T28463] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 755.885589][T28463] ? __pfx_xsk_setsockopt+0x10/0x10 [ 755.885627][T28463] do_sock_setsockopt+0x17c/0x1b0 [ 755.885657][T28463] __x64_sys_setsockopt+0x13f/0x1b0 [ 755.885688][T28463] do_syscall_64+0xfa/0xfa0 [ 755.885718][T28463] ? lockdep_hardirqs_on+0x9c/0x150 [ 755.885749][T28463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.885769][T28463] ? clear_bhb_loop+0x60/0xb0 [ 755.885797][T28463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.885817][T28463] RIP: 0033:0x7fa6a6d8f6c9 [ 755.885837][T28463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.885856][T28463] RSP: 002b:00007fa6a7ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 755.885879][T28463] RAX: ffffffffffffffda RBX: 00007fa6a6fe5fa0 RCX: 00007fa6a6d8f6c9 [ 755.885894][T28463] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 755.885908][T28463] RBP: 00007fa6a6e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 755.885921][T28463] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 755.885935][T28463] R13: 00007fa6a6fe6038 R14: 00007fa6a6fe5fa0 R15: 00007ffc50aa5ce8 [ 755.885973][T28463] [ 755.886010][T28463] Mem-Info: [ 756.192904][T28463] active_anon:10596 inactive_anon:0 isolated_anon:0 [ 756.192904][T28463] active_file:3666 inactive_file:40156 isolated_file:0 [ 756.192904][T28463] unevictable:768 dirty:160 writeback:0 [ 756.192904][T28463] slab_reclaimable:13352 slab_unreclaimable:276242 [ 756.192904][T28463] mapped:33888 shmem:4230 pagetables:1322 [ 756.192904][T28463] sec_pagetables:0 bounce:0 [ 756.192904][T28463] kernel_misc_reclaimable:0 [ 756.192904][T28463] free:1142055 free_pcp:12056 free_cma:0 [ 756.279475][T28463] Node 0 active_anon:42684kB inactive_anon:0kB active_file:14664kB inactive_file:160420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133852kB dirty:640kB writeback:0kB shmem:15384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16032kB pagetables:5040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 756.316006][T28463] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 756.347359][T28463] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.378493][T28463] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 756.384332][T28463] Node 0 DMA32 free:699292kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42984kB inactive_anon:0kB active_file:14664kB inactive_file:160420kB unevictable:1536kB writepending:640kB zspages:0kB present:3129332kB managed:2565132kB mlocked:0kB bounce:0kB free_pcp:32932kB local_pcp:22496kB free_cma:0kB [ 756.469455][T28463] lowmem_reserve[]: 0 0 0 0 0 [ 756.474269][T28463] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.533796][T28463] lowmem_reserve[]: 0 0 0 0 0 [ 756.539963][T28463] Node 1 Normal free:3857264kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15656kB local_pcp:8164kB free_cma:0kB [ 756.582340][T28463] lowmem_reserve[]: 0 0 0 0 0 [ 756.587911][T28463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 756.601708][T28463] Node 0 DMA32: 1100*4kB (UME) 267*8kB (UE) 350*16kB (UME) 1990*32kB (UM) 462*64kB (UME) 297*128kB (UME) 455*256kB (UM) 342*512kB (UM) 191*1024kB (UME) 7*2048kB (UME) 13*4096kB (UM) = 698152kB [ 756.622411][T28463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 756.636356][T28463] Node 1 Normal: 178*4kB (U) 61*8kB (UME) 50*16kB (UME) 95*32kB (UME) 35*64kB (UME) 8*128kB (UM) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 938*4096kB (M) = 3857264kB [ 756.646461][T28486] syzkaller1: entered promiscuous mode [ 756.673532][T28463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.674621][T28486] syzkaller1: entered allmulticast mode [ 756.698889][T28463] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.718639][T28463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.744179][T28463] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.775347][T28463] 46599 total pagecache pages [ 756.786275][T28463] 0 pages in swap cache [ 756.796436][T28463] Free swap = 124996kB [ 756.807383][T28463] Total swap = 124996kB [ 756.818590][T28463] 2097051 pages RAM [ 756.828449][T28463] 0 pages HighMem/MovableOnly [ 756.840975][T28463] 424126 pages reserved [ 756.852504][T28463] 0 pages cma reserved [ 756.960232][T28492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5784'. [ 757.011687][T28492] bond8: option ad_actor_sys_prio: invalid value (0) [ 757.020071][T28492] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 757.049804][T28492] bond8 (unregistering): Released all slaves [ 757.409425][T28505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5787'. [ 757.419686][T28505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5787'. [ 757.432398][T28505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5787'. [ 757.454703][T28505] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5787'. [ 757.488230][T28505] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5787'. [ 757.986483][T28533] IPVS: Error connecting to the multicast addr [ 758.221627][T28539] lo speed is unknown, defaulting to 1000 [ 758.693810][T28539] lo speed is unknown, defaulting to 1000 [ 758.721843][T28539] wg1 speed is unknown, defaulting to 1000 [ 759.968398][T28586] sch_tbf: burst 2 is lower than device lo mtu (61420) ! [ 760.050753][T28587] sch_tbf: burst 2 is lower than device lo mtu (61420) ! [ 761.029357][T28631] __nla_validate_parse: 6 callbacks suppressed [ 761.029378][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5815'. [ 761.182165][T28633] netlink: 'syz.1.5816': attribute type 1 has an invalid length. [ 761.260879][T28633] 8021q: adding VLAN 0 to HW filter on device bond10 [ 761.387868][T28636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5816'. [ 761.428200][T28635] veth9: entered promiscuous mode [ 761.457635][T28635] bond10: (slave veth9): Enslaving as an active interface with a down link [ 761.512575][T28633] erspan0: entered allmulticast mode [ 761.546270][T28633] bond10: (slave erspan0): making interface the new active one [ 761.569840][T28633] erspan0: entered promiscuous mode [ 761.581052][T28633] bond10: (slave erspan0): Enslaving as an active interface with an up link [ 761.749054][T28644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5819'. [ 761.759266][T28644] erspan0: Device is already in use. [ 761.978360][T28652] lo speed is unknown, defaulting to 1000 [ 761.979760][T28655] syzkaller0: entered promiscuous mode [ 762.034411][T28655] syzkaller0: entered allmulticast mode [ 762.205769][T28668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5825'. [ 762.549762][T28652] lo speed is unknown, defaulting to 1000 [ 762.557679][T28682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5828'. [ 762.568776][T28652] wg1 speed is unknown, defaulting to 1000 [ 762.573333][T28684] netlink: 'syz.1.5829': attribute type 1 has an invalid length. [ 762.584796][T28684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5829'. [ 762.640701][T28682] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 762.653897][T28682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5828'. [ 762.681449][T12794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 762.693575][T12794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 762.712098][T28682] bond5 (unregistering): (slave geneve2): Releasing backup interface [ 762.737184][T28682] bond5 (unregistering): Released all slaves [ 762.772057][T28686] batadv2: entered promiscuous mode [ 762.780116][T28686] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 762.801160][T12794] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 762.868862][T12794] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 762.988194][T28695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5833'. [ 763.149658][T28696] tipc: Enabled bearer , priority 0 [ 763.485467][T28698] syzkaller0: entered promiscuous mode [ 763.491091][T28698] syzkaller0: entered allmulticast mode [ 763.498567][T28698] tipc: Resetting bearer [ 763.520272][T28700] batadv2: entered promiscuous mode [ 763.707763][T11058] tipc: Resetting bearer [ 763.749563][T28689] tipc: Resetting bearer [ 765.933226][T28689] tipc: Disabling bearer [ 765.943787][T28709] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 766.023902][T28736] pimreg3: entered allmulticast mode [ 766.309536][T28751] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 766.449428][ T5842] Bluetooth: hci3: link tx timeout [ 766.455742][ T5842] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 766.480291][T28764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5848'. [ 766.500811][ T5149] Bluetooth: hci3: link tx timeout [ 766.506996][ T5149] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 766.533282][T28766] SET target dimension over the limit! [ 766.739967][T28753] netlink: 'syz.4.5848': attribute type 21 has an invalid length. [ 766.748988][T28753] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5848'. [ 766.760117][T28753] netlink: 'syz.4.5848': attribute type 5 has an invalid length. [ 766.774360][T28753] netlink: 'syz.4.5848': attribute type 6 has an invalid length. [ 766.782695][T28753] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5848'. [ 766.843162][T28771] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5852'. [ 766.866964][T28771] netlink: 'syz.2.5852': attribute type 9 has an invalid length. [ 766.880698][T28771] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5852'. [ 766.891430][T28771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5852'. [ 767.007207][T28780] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5855'. [ 767.119625][T28787] netlink: 'syz.1.5857': attribute type 1 has an invalid length. [ 767.143221][T28787] netlink: 'syz.1.5857': attribute type 3 has an invalid length. [ 767.177134][T28787] netlink: 'syz.1.5857': attribute type 2 has an invalid length. [ 767.232916][T28787] netlink: 'syz.1.5857': attribute type 3 has an invalid length. [ 767.242471][T28787] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5857'. [ 767.587008][T28815] ip6t_REJECT: ECHOREPLY is not supported [ 767.592952][T28815] ip6t_REJECT: ECHOREPLY is not supported [ 767.618278][T28811] lo speed is unknown, defaulting to 1000 [ 768.098170][T21431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 768.119076][T21431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 768.138857][T21431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 768.149759][T21431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 768.158428][T21431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 768.264245][T28811] lo speed is unknown, defaulting to 1000 [ 768.272346][T28823] lo speed is unknown, defaulting to 1000 [ 768.289316][T28811] wg1 speed is unknown, defaulting to 1000 [ 768.535061][ T5149] Bluetooth: hci3: command 0x0405 tx timeout [ 768.573622][ T5842] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 768.585600][ T5842] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 768.594054][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 768.603547][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 768.613650][ T5842] Workqueue: hci3 hci_cmd_sync_work [ 768.618901][ T5842] RIP: 0010:klist_remove+0x14a/0x340 [ 768.624227][ T5842] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 6e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a 6e e8 f6 49 8b 44 24 58 48 89 44 24 08 [ 768.643894][ T5842] RSP: 0018:ffffc900046ef6a0 EFLAGS: 00010202 [ 768.649985][ T5842] RAX: 000000000000000b RBX: ffff888078af3c80 RCX: 0000000000000000 [ 768.657966][ T5842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 768.665948][ T5842] RBP: ffffc900046ef7a0 R08: ffffffff8f639383 R09: 1ffffffff1ec7270 [ 768.673927][ T5842] R10: dffffc0000000000 R11: fffffbfff1ec7271 R12: 0000000000000000 [ 768.681910][ T5842] R13: 1ffff1100b026d8c R14: ffff888058136c60 R15: dffffc0000000000 [ 768.689894][ T5842] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 768.698831][ T5842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.705428][ T5842] CR2: 000000110c30e2d5 CR3: 000000002b4c8000 CR4: 00000000003526f0 [ 768.713423][ T5842] Call Trace: [ 768.716741][ T5842] [ 768.719682][ T5842] ? __pfx_klist_remove+0x10/0x10 [ 768.724801][ T5842] ? __pfx_kobject_move+0x10/0x10 [ 768.729856][ T5842] ? do_raw_spin_unlock+0x122/0x240 [ 768.735074][ T5842] ? get_device_parent+0x366/0x3a0 [ 768.740215][ T5842] device_move+0x193/0x700 [ 768.744649][ T5842] hci_conn_del_sysfs+0xb8/0x170 [ 768.749597][ T5842] hci_conn_del+0xc33/0x11b0 [ 768.754208][ T5842] ? hci_abort_conn_sync+0x24e/0xe30 [ 768.759497][ T5842] hci_abort_conn_sync+0x658/0xe30 [ 768.764618][ T5842] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 768.770261][ T5842] ? hci_conn_valid+0x21/0x230 [ 768.775052][ T5842] ? hci_conn_valid+0x21/0x230 [ 768.779824][ T5842] ? hci_conn_valid+0x21/0x230 [ 768.784612][ T5842] ? hci_conn_valid+0x211/0x230 [ 768.789477][ T5842] ? __pfx_abort_conn_sync+0x10/0x10 [ 768.794778][ T5842] hci_cmd_sync_work+0x213/0x3a0 [ 768.799734][ T5842] ? process_scheduled_works+0x9ef/0x17b0 [ 768.805464][ T5842] process_scheduled_works+0xae1/0x17b0 [ 768.811034][ T5842] ? __pfx_process_scheduled_works+0x10/0x10 [ 768.817029][ T5842] worker_thread+0x8a0/0xda0 [ 768.821652][ T5842] kthread+0x711/0x8a0 [ 768.825739][ T5842] ? __pfx_worker_thread+0x10/0x10 [ 768.830863][ T5842] ? __pfx_kthread+0x10/0x10 [ 768.835488][ T5842] ? _raw_spin_unlock_irq+0x23/0x50 [ 768.840707][ T5842] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.845935][ T5842] ? __pfx_kthread+0x10/0x10 [ 768.850542][ T5842] ret_from_fork+0x4bc/0x870 [ 768.855153][ T5842] ? __pfx_ret_from_fork+0x10/0x10 [ 768.860277][ T5842] ? __switch_to_asm+0x39/0x70 [ 768.865055][ T5842] ? __switch_to_asm+0x33/0x70 [ 768.869826][ T5842] ? __pfx_kthread+0x10/0x10 [ 768.874457][ T5842] ret_from_fork_asm+0x1a/0x30 [ 768.879242][ T5842] [ 768.882282][ T5842] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 768.887656][ T5842] ---[ end trace 0000000000000000 ]--- [ 768.893847][ T5842] RIP: 0010:klist_remove+0x14a/0x340 [ 768.899972][ T5842] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 79 6e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 5a 6e e8 f6 49 8b 44 24 58 48 89 44 24 08 [ 768.921153][ T5842] RSP: 0018:ffffc900046ef6a0 EFLAGS: 00010202 [ 768.928546][ T5842] RAX: 000000000000000b RBX: ffff888078af3c80 RCX: 0000000000000000 [ 768.937446][ T5842] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 768.946046][ T5842] RBP: ffffc900046ef7a0 R08: ffffffff8f639383 R09: 1ffffffff1ec7270 [ 768.954071][ T5842] R10: dffffc0000000000 R11: fffffbfff1ec7271 R12: 0000000000000000 [ 768.962676][ T5842] R13: 1ffff1100b026d8c R14: ffff888058136c60 R15: dffffc0000000000 [ 768.971273][ T5842] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 768.980867][ T5842] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.988065][ T5842] CR2: 000000110c30e2d5 CR3: 000000002b4c8000 CR4: 00000000003526f0 [ 768.996723][ T5842] Kernel panic - not syncing: Fatal exception [ 769.003134][ T5842] Kernel Offset: disabled [ 769.007473][ T5842] Rebooting in 86400 seconds..