last executing test programs: 46.151832034s ago: executing program 4 (id=5895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x2, 0x7}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0xff, 0xea, &(0x7f00000000c0)="ab577be6aa26a62b928cf5ca03ab54a3b416356117a9836c7f931ef6bc08cdf481f64b008091662d43eb277de579278308777cc4483f274c9fd49f8ac3cf3bb8c69c991149f6c4183b954c6cd68e3fd5408a86e997fd2fa5219c7b9987cbb01e6f88936bc318598b6c08f34cdc9e48c6b264cb7a8a8e472f07bc1026415242f4c29007ca382400170dbd421a8087f507104ea60e034f213bf356dc52007b881545863bcc6e553a32b116c2b5f253f37aff0eeabf7b4dc3e73934062f447d36a82b5fa0886a33ddb4a67ae88af5a7b50f04dff5f176a4546a3699b9802d1f59796750636ed787072daf0a", 0x9d, 0x4, 0x4, 0xd1fb, 0x4, 0x3, 0x5, 'syz1\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000280), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @empty, @multicast2, @local, 0x0, 0x1}}}, {{@arp={@remote, @multicast2, 0xffffff00, 0xffffffff, 0x10, 0x0, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0xfff8, 0xffff, 0xe, 0xc, 0xec, 'vlan0\x00', 'wlan1\x00', {}, {}, 0x0, 0x203}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @private=0xa010102, @private=0xa010101, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) (async) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r5, r3, 0x4, r3}, 0x7) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0xffe0, 0xffff}, {0x1, 0xffe0}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb8, 0x2, 0x7, 0x5, 0x2, 0x2, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0xb0, 0x1, 0x5, 0xff, 0x1, 0x7ff, 0x2, 0x7}}, {0x12, 0x2, [0x2, 0x6, 0x9, 0x2, 0x2, 0x59, 0x3]}}, {{0x1c, 0x1, {0x9, 0x0, 0x7, 0x0, 0x0, 0x8, 0x5000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x8, 0x1, 0x0, 0x80000001, 0x2, 0x4, 0x200, 0x7}}, {0x12, 0x2, [0x8, 0x3, 0x4f, 0xa1, 0x1, 0x2, 0x400]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4002c640}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}, @qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x8082) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012005783fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012005783fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x38}}, 0x0) r8 = accept$alg(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYRES8=r8], 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044004) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000b40)) (async) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000b40)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x7}}}, &(0x7f0000000d00)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e21, 0x3, @empty, 0x7}}}, &(0x7f0000000d00)=0x84) 46.047399132s ago: executing program 4 (id=5899): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) close(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2b, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4000040) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x14) 43.000779829s ago: executing program 4 (id=5905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newtaction={0x224, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x210, 0x1, [@m_ipt={0xe0, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x12c, 0x3, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x3d, 0x6, {0x5, 'mangle\x00', 0x8, 0xe3b, "49e095f88347b03690961638319a2bdf6c280a"}}]}, {0xc1, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5551fe5e22a68ccbe72dc6cef4f6eba13919d8b37efe0ce2e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x224}}, 0x40c1) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0x20}], 0x5, 0x0, 0x0, 0x10000000}, 0xb}], 0x2, 0x10, 0x0) 42.873907168s ago: executing program 4 (id=5908): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010003b0c00000000fcdbdf2500000100", @ANYRES32=0x0, @ANYBLOB="1082000000000000140012800b00010065727370616e000004000280"], 0x34}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=ANY=[@ANYBLOB="200000001000ff00809600", @ANYRES32=0x0, @ANYBLOB="1720000021200000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad915d564c90c20037c09fc80000000000", 0x11) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000085cca239be92c32a8a2fba021bf0055e724f11944d4a9d08e90b9979278304a72b4c15b880b3adcfe1cd994d0dc5144cd65d318fed8dba3e645484d404ab9630ec4702638aaedf9e3", @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x2100000000000000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r8, &(0x7f0000003b40)=[{{&(0x7f0000000380)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)}, {&(0x7f0000000540)=""/40, 0x28}, {&(0x7f0000000580)=""/163, 0xa3}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)=""/149, 0x95}, {&(0x7f0000000900)=""/205, 0xcd}], 0x7, &(0x7f0000001840)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000002840)=@qipcrtr, 0x80, &(0x7f0000003ac0)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/159, 0x9f}, {&(0x7f0000003980)=""/31, 0x1f}, {&(0x7f00000039c0)=""/24, 0x18}, {&(0x7f0000003a00)=""/43, 0x2b}, {&(0x7f0000003a40)=""/66, 0x42}], 0x6}, 0x8}], 0x2, 0x102, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000004", @ANYRES16=r9, @ANYBLOB="00012abd5000fcdbdf250100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 42.628310027s ago: executing program 4 (id=5911): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000008000000bca30000000000002403000020feffff620af0ff0000001f71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b00000000000000050000", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x10, 0xc}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x3, 0x9, 0x5}], 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@ifindex, r1, 0x2, 0x8, 0x0, @void, @value, @void, @void, r2}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex, r0, 0x11, 0x8, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) 42.565627956s ago: executing program 4 (id=5912): socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@multicast1, 0x0, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x3ff}, 0x0, 0x20000000}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r1) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x18}}, 0x0) 41.183172483s ago: executing program 0 (id=5927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="9dbaac999f699ddfb8d31cbfee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 40.830593604s ago: executing program 0 (id=5928): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8c4b815a5465c2b2, r0, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5}, {0x0, 0x9}, {0xa, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x14044800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) bind$xdp(r9, &(0x7f00000003c0)={0x2c, 0x1, r12, 0x20000002}, 0x10) socket(0x10, 0x3, 0x0) 40.478406527s ago: executing program 0 (id=5938): socketpair(0x22, 0x800, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000180)={&(0x7f0000000040)=0x101, 0x3, &(0x7f0000000080)=[{}], &(0x7f0000000140)}) r2 = socket$inet_sctp(0x2, 0x0, 0x84) sendto(r1, &(0x7f00000001c0)="34de3a8a6f08b9820461d4e544be5f6eed46d45ee50f068fc0617938459d8306985a7aab67486ae63bbdaccfe31d8ee98e5eb5cf73c52d91dee1ed10e02946e0eb270523e29747d2be5fc14721f3d8b76127c7ecb479d7bdc19296931defdfb990c1041a7d0c0cc5c714b4060eca4b25992032f561e1f748933ef1b93cb5c2774cf44ee998f2534ac5a00d33cb97e326065354dc8eb0f2d27a1660ffb67cc3082215b682a6ffe3efabab646ada4abbc32a570074a56fbf4395926d3f1f72c88881c6c4ec9a0391df35231ed6a6a59e58a4f79533d64e7d5225ed322d43f6036088", 0xe1, 0x40, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x2, 0x4, {0xa, 0x4e23, 0xffffffff, @mcast2, 0x1}}}, 0x80) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x40}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x1, 0x8008, 0x2000000, 0x0, r3}, &(0x7f0000000400)=0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x800, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x890) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r3, &(0x7f00000005c0)=0x4) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x13}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xc4}}, 0x8000) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000800)={0x1, 0xa}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = accept$inet(r1, 0x0, &(0x7f0000000880)) splice(r0, &(0x7f0000000840)=0x401, r9, &(0x7f00000008c0)=0x4b03, 0x40, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000900)={r6, 0x100000}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000980)={r4, 0xff}, &(0x7f00000009c0)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x120, 0x0, 0x350, 0x230, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000a00), {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x9, 0x2}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xff0000ff, 0xffffff00], 'pimreg0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x32, 0x7, 0x3, 0x10}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f19e4638aae2e4afed2227490408c938e70a3db82d255b41984dde584320"}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff, 0x1fffffe00, 0xffffffff, 0xff000000], 'veth0\x00', 'veth1_to_team\x00', {0x3619100239534144}, {0xff}, 0x3a, 0x4, 0x5, 0x53}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x1, 0x6, 0x1}, {0x6, 0x5}, {0x4f, 0x1c000000000000}, 0x25a}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x33}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], 'veth0_to_batadv\x00', 'dummy0\x00', {0xff}, {0xd7473b0ff07d4e74}, 0x32, 0x9, 0x1, 0x10}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x400}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffff00, 0xff], [0x0, 0xff000000, 0xff000000, 0xff000000], 'tunl0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x89, 0x2, 0x2, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001100)=@int=0x7, 0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001140)={r10, 0x10000}, &(0x7f0000001180)=0x8) ioctl$sock_ifreq(r2, 0x891e, &(0x7f00000011c0)={'dvmrp0\x00', @ifru_map={0x9bcf, 0xc, 0x3, 0x5b, 0x0, 0x7}}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001240), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r11, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x16, 0x9, @udp='udp:syz0\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001380)=0x0) sendmsg$nl_generic(r0, &(0x7f0000002700)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4001002}, 0xc, &(0x7f00000026c0)={&(0x7f00000013c0)={0x12e4, 0x3a, 0x2, 0x70bd2a, 0x25dfdbff, {0x15}, [@nested={0x30, 0x164, 0x0, 0x1, [@typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x3f, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x4, 0x6b}, @nested={0x4, 0x72}, @typed={0x8, 0x4b, 0x0, 0x0, @u32=0x9}]}, @nested={0x11a8, 0x5, 0x0, 0x1, [@typed={0x5e, 0x86, 0x0, 0x0, @binary="2afdfd30b37c4ae9f9562ced74eee21088c981e7c00b52d7189ea6423573b94e18e4e4d0d43b0363889009251823f9521a8227e2d535c33b7dd2eac9b4ae877d68791f971fd4d35ecd9bd56270e8075124507f8e0b351a2a8880"}, @nested={0x4, 0x141}, @nested={0x4, 0x31}, @nested={0x4, 0x12}, @generic="d4bc6cfc1dba2a6c65eb63c7c89b4ed19146e9abebd0b8a5b8904333b130480a9735a3f764d04931d430557d840f86026fb7787f8c0ae52b05e44a2ecfb02e54ee5035b822818e54c0ca7351d00fd291bcd289706f81166848fea3c8d4eab5545959925012c6c4dac64ced2c8070f0d5496f876a90a3577c064a52fe0274d0ca86ae25f903545cb986d9eb4120463a9d8063c87115700eaac287f74aee2be350f162eeba2287f87347c66931531635190fed8edcdfd49bf897ca5c46e1272f", @generic="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", @generic="f232c6a389eb131e8e710d0b8ba9ddc5b3e7496265859f64a5936540104155f34eebff526b79f34a8f1e45ada195ae99c22d940039eb94c368e6179c06fe7b5be838def9f3e6de4947ea7a3ff061aa55cdadc6e54cf77f9eca053b4a63088fa4e650188288e19c9d9665e400b4257a67f5c91807a1124dded8"]}, @nested={0xf8, 0x2, 0x0, 0x1, [@nested={0x4, 0xdc}, @nested={0x4, 0x7f}, @nested={0x4, 0x7a}, @typed={0x8, 0x112, 0x0, 0x0, @pid=r12}, @generic="8ad1be63285c6662bd505cb6f4995a4fc6ee7f05f36748338b6ceae4238998006c36feaef913a5e499e3a93592e4654cf0d7d07af08059c392631cae7422db140aa16fd17f6cf2d3420b360f450eb16785a8b92f296b9b6dbd68c891a4cc2b7eb0986f3a6703ad4962e96a62c003198d7da2b7030a047d6766241e207844547fd2a872a0ad3d8f13f8db978543c0d36e68de80089a9c64e305f14a16d4daf78b90f3c04bd5261b70fd297c29f9e6c332dd62860b53071a8eb8238ae198421e1a", @nested={0x4, 0x68}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0xa}, @nested={0x4, 0xec}, @nested={0x4, 0x9}, @typed={0x8, 0x5f, 0x0, 0x0, @fd=r0}]}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002740)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f0000002780)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f00000027c0)={'vxcan1\x00', 0xfffffffb}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x40, r14, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x6d}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8f20}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random='*W'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 40.337602152s ago: executing program 1 (id=5940): r0 = socket(0x26, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001400b59500000000000000000a00000057e71453692cfa0d96d3630a22444b235805419710691760d8da73720aa4384f08ec81805dd371a0782039ef8253f16b9568899aed57fadb1b4f070b26ab0e6753012e81e0f3f8e43af9b729a040f9395f9a6147f55b8367264b7d123fdb27cf3165cc2d13e74fd0d097faaf287431f2035101811fd1a5ada103764feb6d", @ANYRES32=0x0, @ANYBLOB="14000b00fe80000000000000000000000000000014000100ff0200000000000000000000000000010800090000000000"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="5f06e260df362131b7f835849c17490c57161274346d07cf4867c1c3f6731b8620a5055d68720b33cda4f62364feac81d7", 0x31}], 0x1}, 0x20000810) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000900)={0x1f, 0x5, 0x3}, 0x6) write$bt_hci(r2, 0x0, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r3, 0x100000000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0x20000000000003, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x16, &(0x7f00000023c0)}, 0x20081) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xffa7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x8, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0xba, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x8, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0x4df, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x33, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xa, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4008000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r8, 0x0, 0x32600) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @hci={0x1f, 0x0, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0xbed, 0x8}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x44040000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000048ccb000a00000000f90000", @ANYRESHEX=r1, @ANYBLOB="0200000000008e7deda282891881df149c4bc9f12beca0f56ededb6ea4b69425dd075eee750003abd72543edf5587537c19b5eb26bc43831805a051e68320f5aebd08a65895e7219537d66a411b20ee597249b3d9b64f7104d767c6f082c77dc8a2148aa7f8f8b11d98cd3e8783c4ecdd8f4f4622f789473608ce492c9b2bce6e21ff4a44ec7c51e6b795cd0ca7854bf2e9c974149db7410b818bd1353a5fef824d54f0ef2d3cafcce6516b382c2243d4ccc0bea96a40984a884b1124852859ebae0927f8cf2db4f15e48ef0c1ac959bca0000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES16=r1], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x54, 0x4, 0x5, 0xffffffff, 0x17, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x47, 0x2, 0x9cc4}}) 40.297992799s ago: executing program 2 (id=5941): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40004}}], 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)=0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r3, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40004}}], 0x1, 0x0) (async) 40.224694488s ago: executing program 0 (id=5942): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x3800c957}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.147641666s ago: executing program 2 (id=5943): r0 = socket$netlink(0x10, 0x3, 0x12) recvfrom(r0, &(0x7f0000000000)=""/255, 0xff, 0x2020, &(0x7f0000000100)=@phonet={0x23, 0x8, 0x55, 0x4}, 0x80) (async) sendmsg(r0, &(0x7f0000000900)={&(0x7f0000000180)=@nfc={0x27, 0x0, 0x1, 0x1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa1cdd52f5895c63a4f58cf808bd98caf2390280ad559b6609e3b46c5d240f4ab4fadf6b3619a7f1eca285fd6af1ea24fe37cfbc04a13dd4d8a25b6df42e9713e28f320ac724ec10ff932707bf63a4dbf1a75a20043293b29bd6", 0x5a}, {&(0x7f0000000280)="4dec0a8a34a82e4bb4163be0ed6d03930081101ea7dc5512725d846af4915d9f5dd67f4505da65385adc179d8ea12ee0f58de5c2d87249f733203ff7e9941406f501e25b61a12f219c5767a98c8bbc42574dd355063a3f2c45ca61a564b1dfff8195e207fc6dacfe86dd75f92436d2aa47275b581fc4d3204fc5e01bd34b56a9d5db0f460c196098", 0x88}, {&(0x7f0000000340)="d28baf50c53a14a872f38b0721a7572c83116975a9141a36d72ff3538a265e5632958cab1d7d30aa4ede2d7a32f0b82885acb912e96558adae2a7885710bd67ebce1d190658d8d80669ce95bacfc6c2b5892a5d3a13ac87e5e3ad4d1c78ce8d339ded5a1761a4a0a8f82192dc7aa19125fb1935e", 0x74}, {&(0x7f00000003c0)="1d6bdf8fedd4ced977f22fd29c28ee236b182950fbbca7db3a009ed0035ba78756c05b8787668cc065fca266d6a7ece326c3d69e1ce41b904703c3374642a2f59d0ea2399acfb96003a15a5b6107ab9e98d4f9393833606fe9ea98c04ac952e6a036363af58555497ee90f9e48978d1681b9e43c6af41f7fafbbf1a188ce10ed189b2a02d81446413d4d02b9e52105f2ece5305cc2e3bcb0a363d81ee49a024a46f1482e3853bc6dc59b95e10a1189bb4e9bf5304aa77e0ecf7ba7eb2b3f2cddfb0b4d2a00d467d99c6a259b1f88bbbce1", 0xd1}, {&(0x7f00000004c0)="9093595aadcb123e220771c2ea150a1babd8ed84298191c7c19ff1461ad1a757ed7555cdbeeb56cb77ab3a7445266cd50fb7230dbd08eba99b1bf8e3c3576e603d436f35e35aa69c2fc03738d766f89587146399c8dc869b3bf445cb868d90178b28a3609808580f5a043f00c5b5f6e06641d02b8fda2bcaf7a9e77ee64469c23ecc636cfbdaf552e3aff3b629cd7d2884ed4a9c50d7589c544b4a620447138b4c68e3dab4727a6c3da56e0d5b86934a75c5d1371d3e5c1f817d5cf6b0f00d73fa0b34863826e117c0da23e84d4e875f7e5e3a235a2fef9560", 0xd9}, {&(0x7f00000005c0)="9f4d2c885b7d1e1d12294c74e08ba76bc34a09a22fd085f307f4b17a96726687361bcf204b4f9a48f56fb67c44f463ca03ee61c172873ccd2d387b63035d1b1934dda1123d532f1a083aea0671d5ba281d49c5fae213d3ab00537802e9f5dbe5c22353e707ff6f4c9269c1fe930174a692eecff3d14819eef2c42c3601bc4eb89f744f544183818ef25a82593d76bdc42ac16162de1811779a76ddfa86754f498f48ce24a8105ae28b416e892a107a04e9c6d456970ca6da5e2bac917ad1d35fcf521d78e42cc9849ceea75bf7fbd2a02360cf9af1", 0xd5}], 0x6, &(0x7f0000000740)=[{0x48, 0x118, 0x9, "25b02e9055183ae075a2622473f904522aa842b36c37279282431e6c78bbbc4787bf92dece240ef2f0395eb322880cd58722"}, {0x38, 0x10f, 0x7fff, "25a88773964e5035aff9953a48a75f7e23601da8359291d795f8299b9e4ae750b0334a24a52e38df"}, {0x90, 0x10c, 0x4, "0cd965f9c0f5b59d1bf518fa9109c4137a0fa26121a327a83ea34115d2d7f0104e54bb6ed90cb7b705e0874fbd55eef3c860862aa2c6ba05024e3e727f38ceaa8ffb2c2f08aa10832243f82fbdd895d2194ed733e6cf62f04255a5c1e99470fc1ddddbcb1d18eb77eb0aa523f33e5b572611990742893504c7db51b10a"}, {0x78, 0x107, 0x3, "238ae3503cc7592db4785ac39439c0522e673455532a4e49c7138bf2febbe4f365aa6c4c49a2593e6e156874a61f68111de565f31222a288396f0caddc7a1efb668f4584a81627d01f61d48af18a7c0e818f053a7b7cfeafb8f2fc3867866d730b"}, {0x28, 0x101, 0x3, "b46a18cafe770fe975c132359f3792c883e052930f209bb8"}], 0x1b0}, 0x8000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000940)={0x0, 0xd9, "22d515a89d08f2c0319aa456b7ce7b6d344ad5eb1ac1444fb53ae8c2f7d0ff356806ab5a8cb3166fbccc4e5c4910e5fb8a9419b357da215bccfc62abdfe623daf22b4b81a7acb8c3e324dc4b18af82ac767e0b19ca862c2b4af85ab3f6344e613bc8989f6aa91f141c29280ed7b7ede37cc7590e00f21a8f175673d50cd3373029eda9a49cba9718ebbb9c4de1472661efd57cc64e8c2013c4ac751a817d93beae5f36c771f1f5a6b254387661170ca3c1864057493a879fba52adb33a61d3e8d2a32fc3104d30d469208d8e80c14de8ae7b3c2b9ea26299d9"}, &(0x7f0000000a40)=0xe1) (async) recvmmsg(r0, &(0x7f00000060c0)=[{{&(0x7f0000000a80)=@ax25={{0x3, @bcast}, [@bcast, @null, @bcast, @bcast, @null, @default, @remote, @netrom]}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000b00)=""/191, 0xbf}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/19, 0x13}, {&(0x7f0000001c00)=""/32, 0x20}], 0x4, &(0x7f0000001c80)=""/151, 0x97}, 0x6}, {{&(0x7f0000001d40)=@generic, 0x80, &(0x7f0000005040)=[{&(0x7f0000001dc0)=""/45, 0x2d}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/192, 0xc0}, {&(0x7f0000002ec0)=""/104, 0x68}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/210, 0xd2}], 0x7, &(0x7f00000050c0)=""/4096, 0x1000}, 0xffffffff}], 0x2, 0x10000, &(0x7f0000006140)={0x77359400}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000006180), &(0x7f00000061c0)=0x8) (async, rerun: 64) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000006200)={0x77359400}, 0x10) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000006240)={r2, 0x80000000}, &(0x7f0000006280)=0x8) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000062c0)={'security\x00', 0x10, "485930b9e73b0f2774f616e696c434de"}, &(0x7f0000006300)=0x34) (async) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000006340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006380)=0x14) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000006440)={'syztnl0\x00', &(0x7f00000063c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x81, 0x4, 0x50, @mcast1, @private2, 0x1, 0x40, 0x637d, 0x7e}}) (rerun: 64) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000006480)={r7, 0x1, 0x6, @broadcast}, 0x10) (async) connect$pptp(0xffffffffffffffff, &(0x7f00000064c0)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e) r8 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r8, &(0x7f0000006500)={0x18, 0x2, {0x3, @rand_addr=0x64010100}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000006580)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006680)={&(0x7f0000006540), 0xc, &(0x7f0000006640)={&(0x7f00000065c0)=@newtfilter={0x80, 0x2c, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x10, 0xb}, {0xfffd, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x38}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x40004) (async) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000066c0)={0xffffffffffffffff, r6, 0x25, 0x17, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000006700)=r10, 0x4) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000006800)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x1140}, 0xc, &(0x7f00000067c0)={&(0x7f0000006780)={0x30, 0x1401, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2cf2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000006840)={0x4, 0x6, "b43e41", 0x8, 0x5}) r11 = accept4$tipc(0xffffffffffffffff, &(0x7f0000006880)=@name, &(0x7f00000068c0)=0x10, 0x0) getsockname$tipc(r11, &(0x7f0000006900), &(0x7f0000006940)=0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000006980)={0x6, 'wg1\x00', {0x2}, 0x6ee}) (async) write(r3, &(0x7f00000069c0)="6ed840b7a00ccc94a834991e76a8044a95cc0a30ae7ba766e20db97d607d8bcc60321911dfc728e49e942f435cff15e05a379eb021b93fe34ef9800efdd7f9d733af10504559f79a5c426c7951b6e3c6ecc5a3a6bb16c3c70c59c02dce8e9991cd84de2614f0505c2007c6012e1101b4089973c45447e98c15e1ad544c48fd30349a90d91f4f66a4af9d45cd28ebf65384e8a7964072cf5181615ac8c516f346ea9aa32fb70c3dad6c4269", 0xab) (async) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000006a80)=0x2, 0x4) write$ppp(0xffffffffffffffff, &(0x7f0000006b40)="2e97f77166373adb251ef748833ab8588a39f8927e2c9445821cff0ea99d3fad2e487a32fa6a6a6a50211acc2a7308bb2088b16ab1c54693ab5ab7894ed1fa65b28b52764b94c8b3323e147c7cafdf7a91cc237aa285a9814f48e49bf13fb1a5f4c785c0bb9aa5b9145a36e26cea7fb6faba46d79a0369a88f49c70f0b845e022487084f74fc2babdbfb007b86c4dab8db8a77c95d21781b9a9a4cfedc24ec3411e57f05adb698bc0370819c2f815c9e0f1cfea15b7f3d4fa11a27bc3d8f07da18a9e7e37d76262189f743e3469e1562cb65a64f073f69", 0xd7) 40.090244261s ago: executing program 2 (id=5944): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6", 0x2}], 0x1}}, {{&(0x7f0000000240)={0x2, 0xce23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87b", 0x2}], 0x1}}], 0x2, 0x4c040) shutdown(r0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300c9edf7d01ec220650556e3cb4552a48ef92f612d2b11800e206183b96c382cba6969c341e14d79cb9f801a2e9ef62ec4d930d96b4e01a4c939b7e339254e463f27a6beee1932cca27b69770c95166ee3753aad2bceb62863f5f0016e362711f2c192597f150e93ef572d3f1021ba1e1ec2599053b659c50623ce34ffcea5c4fa3d4843fa8089329afafc1305d5231f4b27fb39ef38580e9e985d8387835f86ca6150416dd3c9c907", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4004008) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) splice(r2, 0x0, r3, 0x0, 0x200000000005, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1, 0x8, 0x1, 0x6, "04fc82dcb38cccccb4867fe81a4f563594acdb3f72a2f7d256203ed816666d9d4817cd000808e6e1978e3f05fdad98111748d2f456be5b164fb2a7ed5aa1a3b6b092e40d8fa6215702770d2cdcfaa9c7ac077f78339f3ee4b8842eac3d950adc2a2a8c17e0b19354eca49a097108646c657e90a7b1432c2e62dc55f73039196e"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02012abd7000e2dbdf25130000000e0001006e657464657673696d6b7edb070002006e65566ccdcff989609fe5628a6d300000080003000289060008000b00008dcd3e4900340003000000ddec5c88fd4664d54f57eb47479912c4d70b700b78ef03000400"/113], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf255c0000000c009900060000001101000008006b00e001000000000000627cce8799a0dded1dca0b1890c1825808ef3d26036f662f5e96343b66f9c2a0eb32dcc5f0e0d8b7e7702b5ecc402a03c42aaa63beea1d84902fd29cffddd875e34de98c0bee2c6113e3dd7f"], 0x28}, 0x1, 0x0, 0x0, 0x4c840}, 0x840) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x24, 0x1, 0x1c, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002280)={@loopback, 0x0}, &(0x7f00000022c0)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002300)={0xffffffffffffffff, 0x3, 0xfffffffffffffff9, 0xf5e}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002340)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="2d00000006200000", @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="8b5146885c4e1394461e2f7d52cc42ae083ccac70a961fa278a259", @ANYRES64=r9], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r3, r2, 0x1b, 0x8, 0x0, @void, @value=r2, @void, @void, r9}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8) 40.014617186s ago: executing program 1 (id=5945): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r1 = socket$kcm(0x2a, 0x2, 0x0) getpeername(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 39.945963901s ago: executing program 1 (id=5946): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm-aes-ce\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x80800) (rerun: 32) sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163437412ba8af23dde536a5bfd391eab1cd545458e5da85a7f09fe52eb6ff7ed2517a99beef553019db75adea3dbf33cbcfc50380f6bc37af56dc6b5d982ab29f0f9784f1201b81", 0x52}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x28044854}], 0x1, 0x40891) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000840), 0x4) (rerun: 64) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000007c0)) (async, rerun: 64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xa5, 0x7}, &(0x7f0000000140)=0x8) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c00028014000300200100000000000000000000000000021400020000000000000000000000ffffac1414bb"], 0x5c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, [0x7ff, 0xffffffffffffffff, 0xf, 0x80000000000000, 0x2, 0x4, 0xbdf5, 0x1, 0x2, 0x9, 0x0, 0xffffffffffff3810, 0x7, 0x768, 0x6]}, &(0x7f0000000540)=0x100) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000800)={0xfffffff8, 0x1, 0xd, 0x3}, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000180)=0x2, 0xfffffffffffffdcc) (async, rerun: 32) recvfrom(r5, &(0x7f00000006c0)=""/93, 0x5d, 0x1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @empty}, 0x4, 0x4, 0x1, 0x1}}, 0x80) (async) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/74, 0x4a}], 0x2}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x6}, 0x8) listen(r8, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r9, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r8}, 0x20) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0100004000000044000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 39.840416799s ago: executing program 1 (id=5947): unshare(0x20040600) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r5, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r3, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xb, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000d80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) 37.57328151s ago: executing program 3 (id=5954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@restrict={0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x1}, {0x3, 0x2}, {0x3, 0x1}]}]}, {0x0, [0x0]}}, &(0x7f0000000080)=""/148, 0x57, 0x94, 0x0, 0xffffffff}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x3ff, '\x00', r5, r6, 0xb6, 0x3}, 0x50) 37.323736579s ago: executing program 3 (id=5955): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 64) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)=0xcd, 0x4) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="37c4000041000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000356ffc)=0xffffff42, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x698, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x370, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x441, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0xfffffffe, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3d}, @multicast2, 0x0, 0xffffff00, 'syzkaller1\x00', 'netdevsim0\x00', {0xff}, {}, 0x4, 0x1, 0x8}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x0, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) socket$can_raw(0x1d, 0x3, 0x1) (async) unshare(0x28000600) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r6, &(0x7f0000000200)={0x2, @long}, 0x8) sendfile(0xffffffffffffffff, r5, &(0x7f00000003c0)=0x7fffffff, 0x5) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, 0x0, 0x0) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/147, 0x93, 0x101, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) socket$nl_generic(0x10, 0x3, 0x10) 37.282620389s ago: executing program 3 (id=5956): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r1 = socket$kcm(0x2a, 0x2, 0x0) getpeername(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 37.253871245s ago: executing program 3 (id=5957): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000019250000070000000400000000010000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRESHEX=r0], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x1, 0x871c}, 0x8) close(0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="de6ad248f837b874d68909775f9b804c8f2676fb0292b449a94cafe773ddabbeb3dc8a0a", @ANYRESOCT=r6, @ANYRES32=r10, @ANYRES32=0x0], 0x1c}}, 0x8001) write$nci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r11 = socket(0x1e, 0x4, 0x0) write$nci(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r9, @ANYRES16=r11], 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x0) 37.134626093s ago: executing program 0 (id=5958): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000200010000001800088014000780080005000000a291", @ANYRES64=r2], 0x40}}, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000000c0000ffbffffffffffe01"], &(0x7f0000001f80)=""/226, 0x18, 0x81, 0x2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 37.133850073s ago: executing program 2 (id=5959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7050000000000007910a800000000001d00000000000000950000000000000055e7d5d720f9ee2b3aa350e692e44d5f98e7e7e58bd3e88b1553396f381ae48a287f6710465f9319dec584f884dbbf3545cf615c475052771905b7f941db5e5df74f4acb0735ace6dc491acbd1de22049a87116c6cbe0e493686e1"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.132581468s ago: executing program 1 (id=5960): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYBLOB="0000400000000002280012000c00010076"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002121000000000000"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 37.060377581s ago: executing program 0 (id=5961): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) (async) unshare(0x2040400) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) (async) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r5, &(0x7f0000000540)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000600)=""/226, 0xe2}], 0x5, &(0x7f0000000480)=""/123, 0x7b}, 0x12003) 37.059880967s ago: executing program 3 (id=5962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00004a8e1a80100002800c00018008000f0001000000"], 0x3c}}, 0x0) 37.014208627s ago: executing program 2 (id=5963): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xbcb}, {&(0x7f0000002380)="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", 0x134}], 0x5}}], 0x1, 0x4000001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="005d6d8b6a35002bbd7000fddbdf2527000003db54bc87a3cafcc89d2080273c0200d67112f5fdce477cf7a5ab28af3033ec450ffe9b2e9c1a8e4340bbe11a2dd2108b4cd0fc82d2d08a9fb99a2e964d7524c13863cfe8dcebb786a2bf93c9ddc5759ca814838322f75081", @ANYRES32=r5, @ANYBLOB="0600360004000000"], 0x24}}, 0x400c0c4) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x2e0, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1e7a, 0x58}}}}, [@NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "3ac218cf7baa09332c0d7bd4d21f08e92a7cb8dd8de55bee8344a3b8ed3078bf42583b0f82aa51b214c28a9f9fa07be661b0a3eec7d8d01435faceee40fee270c709b8d77ac745760e0c84ad5c"}, @NL80211_ATTR_FRAME_MATCH={0x6b, 0x5b, "cf77a380a47a648316faaad2fa2df1ce4e357fa692d0fadd8296d44bf2b6e1f25d0bf446e9ec78303131ee664972c3794e4a74e1f32f96037fd6b2d7028f9d1c12e6ab0df1fc6a308ea7d815dbfe13076e868ad76aaf1c696502966fd249499217c3754314c283"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x67, 0x5b, "a48024e63eedbf75efbcc32a2719b3d4abd77aaee668272040f9642c1f3e634fdbf0760cecede80e52979164bb024b5c8e5d3667dc36d77093f06096fe68a281fb2959a3e081ac1322bda0d5307be4cda778c55b198bf627567776857820c31fc46502"}, @NL80211_ATTR_FRAME_MATCH={0xaa, 0x5b, "152d63b09630472531f3fdeaa71b14041a3cdc5988c9c936929a8f3ff1d6658ff5016abea2db0c9efc826ce155a5c6fc1814f4dd2903e51c069d3172f9dc33ca88dd529c2b388ed51a2054680c0147ccb07cb87bf02b05531db19f031ae91401abed36b4273423acf136d336224c388f2c32a125df7b589ee98391648bf89399f7102c400c14282b8ef56004852680615b9bf76dd896de4bc2dfd6210bc9f801225819782f4f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xd3, 0x5b, "42b5f6a1da3818862ac0bf8b62eab81e8b05985ffdeedd4c515fb9bff5e4f362f7709e44914c0461ff210bf29ee58bb01eb98268fef99e4230309e93bdbb300c36f7fcaa44a683f6bc22007d3c37852685674545ace79ee42209118b345077dc6253b9a7ebb3c282567bf411c588543cbb7a70a28d5a227e242287b09365a2425c7c2dc03856ce4b89a5f9b4ed6a7af35d93b914b76ed89257dfc5da1c1a75a205e398e2d1a8f21130e8bd2e37a9e47866c70c11a3b2d3c205aa90107eeb2c6183ea5df8bf35fb74129e86a1f224ba"}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x80) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20edca4b7a193660}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x180, 0x11, 0x800, 0x70bd26, 0x25dfdbff, {0x16}, [@generic="182a0e72addd9150959f6fff1cc034b9553a697284c3ebcb480a2603ce162b82902495d15b271e8000bd2fa01b04f073af736cd81f20a181f3090165353f8938dd0984ce61", @generic="c36b9c3909dfe12056110729692732c3e31aedc612edcdb560bbe6b55d2f37f65547c3b7d14f30c7d3b902535e8b978eb52c239d819c78b937abfab9ddb75ebb106911af1f6905aeff0feeb47904ecd4296b3a61f923aa6b90368a7294c50b837b30b46ce1bfb0b90c33d87419d71ffd2ab748", @nested={0xb4, 0x123, 0x0, 0x1, [@nested={0x4, 0xb0}, @generic="901f8253740608aa1db0fda55ade15d8d4a044b9dccbdb270502e32822bd05533142853d51c5886af64d1314db600020b896d0fc1095532fd6e273ce1746efa83a8d5eda3f153af3982f3517344757dbdb", @generic="e74eea27edd22e7d45a9215149ebd5b07812a00601a9244aa211e7c345ca2a0b6d236a85943820f4aee1b523ffef988a85533b416194339f5d62ffcbfce8ac", @nested={0x4, 0x155}, @generic="d00e77508f6bafbe91b9e40753af0c305d6964578314c101"]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) socket$nl_route(0x10, 0x3, 0x0) sendfile(r7, r7, 0x0, 0x10) 36.979923008s ago: executing program 3 (id=5964): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', r4, 0x700, 0x8, 0x200, 0xb773, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0x23, 0x3a, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010102, @multicast1, @multicast1, @private=0xa010100, @local]}, @timestamp_addr={0x44, 0x24, 0xac, 0x1, 0x6, [{@local, 0xfffffa2a}, {@private=0xa010101, 0x3}, {@private=0xa010100, 0x10000}, {@multicast2, 0x12c5}]}, @timestamp_prespec={0x44, 0x24, 0xea, 0x3, 0x7, [{@multicast1, 0x25}, {@local, 0xb}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x9e35}, {@broadcast, 0x1}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@delqdisc={0x24, 0x25, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff1}, {0x3, 0x15}, {0xffe0, 0x7ffe}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000600)={@local, @random="3747e76de379", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfd, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0x5}]}}}}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {}, 0x2}) 36.912611043s ago: executing program 2 (id=5965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) 36.712499344s ago: executing program 1 (id=5966): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r1 = socket$kcm(0x2a, 0x2, 0x0) getpeername(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 0s ago: executing program 32 (id=5961): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) (async) unshare(0x2040400) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0xf00) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) (async) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r5, &(0x7f0000000540)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/112, 0x70}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000600)=""/226, 0xe2}], 0x5, &(0x7f0000000480)=""/123, 0x7b}, 0x12003) kernel console output (not intermixed with test programs): iled to get link speed/duplex [ 448.016060][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 448.158197][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 448.226077][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 448.237371][T23457] tipc: Enabling of bearer rejected, failed to enable media [ 448.458428][T23479] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4587'. [ 448.806088][T20433] Bluetooth: hci0: command 0x0406 tx timeout [ 449.046126][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 449.218211][T23526] lo speed is unknown, defaulting to 1000 [ 449.258602][T23527] netlink: 'syz.3.4599': attribute type 12 has an invalid length. [ 452.203025][T23527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.289360][ T30] audit: type=1804 audit(1781927745.786:14): pid=23560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4605" name="/newroot/290/cgroup.controllers" dev="tmpfs" ino=1511 res=1 errno=0 [ 452.356038][ T30] audit: type=1800 audit(1781927745.786:15): pid=23560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4605" name="cgroup.controllers" dev="tmpfs" ino=1511 res=0 errno=0 [ 452.774034][T23557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 452.782426][T23563] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.793283][T23557] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 452.849803][T23557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.860914][T23557] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 452.880566][T23563] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.901891][T23557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 452.907975][ T9147] net_ratelimit: 41 callbacks suppressed [ 452.907991][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 452.926307][T23557] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 452.936637][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 452.958882][T23557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 452.965826][T23583] syzkaller0: entered promiscuous mode [ 452.974120][T23557] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 452.983644][T23583] syzkaller0: entered allmulticast mode [ 453.044327][T23563] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.090552][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 453.096091][T23557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 453.116035][T23557] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 453.129695][T23563] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.196175][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 453.228210][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 453.251921][T23592] __nla_validate_parse: 3 callbacks suppressed [ 453.251936][T23592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4613'. [ 453.282095][ T9158] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.321657][ T9147] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.341001][T23595] syzkaller1: entered allmulticast mode [ 453.356218][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 453.369298][ T9158] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.392325][ T9147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.429729][ T9150] bond4: (slave dummy0): failed to get link speed/duplex [ 453.466548][ T9150] bond4: (slave dummy0): failed to get link speed/duplex [ 453.588155][T23609] lo speed is unknown, defaulting to 1000 [ 453.596765][ T9150] bond4: (slave dummy0): failed to get link speed/duplex [ 453.606897][ T9150] bond4: (slave dummy0): failed to get link speed/duplex [ 453.672902][T23616] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4621'. [ 454.110217][T23641] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 454.141455][T23641] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 454.156483][T23641] netlink: 'syz.2.4628': attribute type 1 has an invalid length. [ 454.200989][T23641] bond4: entered promiscuous mode [ 454.206892][T23641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 454.332560][T23655] netlink: 'syz.2.4632': attribute type 1 has an invalid length. [ 454.341657][T23655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4632'. [ 454.431182][T23661] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4633'. [ 454.454702][T23663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4634'. [ 454.467119][T23663] x_tables: duplicate underflow at hook 2 [ 454.474255][T23663] netlink: 2864 bytes leftover after parsing attributes in process `syz.2.4634'. [ 454.685348][T23674] netlink: 'syz.3.4638': attribute type 11 has an invalid length. [ 454.693873][T23674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4638'. [ 454.819208][T23682] tipc: Started in network mode [ 454.824581][T23682] tipc: Node identity eac52087d941, cluster identity 4711 [ 454.833389][T23682] tipc: Enabled bearer , priority 0 [ 454.842478][T23682] syzkaller0: entered promiscuous mode [ 454.850886][T23682] syzkaller0: entered allmulticast mode [ 454.886561][T23682] tipc: Resetting bearer [ 454.978843][T23681] tipc: Resetting bearer [ 455.034352][T23681] tipc: Disabling bearer [ 455.172970][T23717] netlink: 'syz.2.4646': attribute type 12 has an invalid length. [ 455.242927][T23718] netlink: 'syz.0.4647': attribute type 1 has an invalid length. [ 455.270323][T23717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4646'. [ 455.361173][T23717] bond0: option primary_reselect: invalid value (8) [ 455.509048][T23732] netlink: 'syz.1.4652': attribute type 1 has an invalid length. [ 455.706933][T23749] macvtap0: entered promiscuous mode [ 455.721797][T23749] vlan0: entered promiscuous mode [ 455.744107][T23749] vlan0: left promiscuous mode [ 455.925697][T23759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.942388][T23759] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.001078][T23759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.011636][T23759] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.093391][T23759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.103770][T23759] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.161061][T23759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.171479][T23759] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.251849][ T9158] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.264182][ T9158] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.278543][ T9158] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.287391][ T9158] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.295698][T23772] netlink: 'syz.4.4660': attribute type 3 has an invalid length. [ 456.306808][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4659'. [ 456.320168][ T9159] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.330218][ T9159] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.353431][ T9147] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.364289][ T9147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.738532][T23800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4668'. [ 456.923322][T23808] bond5: Unable to set up delay as MII monitoring is disabled [ 456.952090][T23808] bond5 (unregistering): Released all slaves [ 457.470110][T23845] hsr0: entered promiscuous mode [ 457.554030][T23843] hsr0: left promiscuous mode [ 457.956136][ T9156] net_ratelimit: 64 callbacks suppressed [ 457.956166][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 457.996636][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 458.116069][ T9159] bond4: (slave dummy0): failed to get link speed/duplex [ 458.136107][ T9159] bond4: (slave dummy0): failed to get link speed/duplex [ 458.237151][ T9159] bond4: (slave dummy0): failed to get link speed/duplex [ 458.274743][T23893] lo speed is unknown, defaulting to 1000 [ 458.289626][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 458.339298][T23903] mac80211_hwsim hwsim69 syzkaller1: left promiscuous mode [ 458.362686][T23903] mac80211_hwsim hwsim69 syzkaller1: left allmulticast mode [ 458.406054][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 458.456097][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 458.511587][T23910] bond5 (unregistering): Released all slaves [ 458.541440][T23909] tipc: Enabling of bearer rejected, failed to enable media [ 458.566242][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 458.589449][T23915] netlink: 'syz.4.4702': attribute type 13 has an invalid length. [ 458.609835][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 458.633012][T23915] __nla_validate_parse: 3 callbacks suppressed [ 458.633041][T23915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4702'. [ 458.735589][T23910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4702'. [ 458.771463][T23910] netlink: 'syz.4.4702': attribute type 7 has an invalid length. [ 458.780435][T23910] netlink: 'syz.4.4702': attribute type 8 has an invalid length. [ 458.798723][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4702'. [ 458.893113][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4709'. [ 459.147483][T23939] batadv_slave_1: entered promiscuous mode [ 459.164536][T23938] batadv_slave_1: left promiscuous mode [ 459.283765][T23944] batadv_slave_1: entered promiscuous mode [ 459.343750][T23948] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4713'. [ 459.686850][T23952] veth17: entered allmulticast mode [ 459.888439][T23983] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.4725'. [ 459.910475][T23980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4723'. [ 459.962019][T23983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4725'. [ 460.044767][T23986] bond6: entered promiscuous mode [ 460.056098][T23986] bond6: entered allmulticast mode [ 460.063635][T23986] 8021q: adding VLAN 0 to HW filter on device bond6 [ 460.315172][T24006] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4730'. [ 460.329938][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4730'. [ 460.451503][T24013] lo speed is unknown, defaulting to 1000 [ 460.497532][T24016] netlink: 'syz.4.4734': attribute type 30 has an invalid length. [ 460.623077][T24022] netlink: 'syz.4.4735': attribute type 1 has an invalid length. [ 460.918408][T24033] netlink: 'syz.4.4737': attribute type 1 has an invalid length. [ 460.968266][T24029] lo speed is unknown, defaulting to 1000 [ 461.625815][T24059] syzkaller0: entered promiscuous mode [ 461.646591][T24059] syzkaller0: entered allmulticast mode [ 461.672085][T24059] tipc: Enabled bearer , priority 0 [ 461.688842][T24058] tipc: Resetting bearer [ 461.732869][T24058] tipc: Disabling bearer [ 462.026997][T24073] SET target dimension over the limit! [ 462.502937][T24107] netlink: 'syz.1.4758': attribute type 3 has an invalid length. [ 462.511969][T24107] netlink: 'syz.1.4758': attribute type 3 has an invalid length. [ 462.714367][T24120] bond0 (unregistering): Released all slaves [ 462.822630][T24132] netlink: 'syz.0.4766': attribute type 13 has an invalid length. [ 462.830674][T24132] netlink: 'syz.0.4766': attribute type 17 has an invalid length. [ 462.873411][T24130] IPVS: set_ctl: invalid protocol: 145 172.20.20.170:20004 [ 462.990749][T24135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.006636][ T9157] net_ratelimit: 68 callbacks suppressed [ 463.006719][ T9157] bond4: (slave dummy0): failed to get link speed/duplex [ 463.039914][ T9157] bond4: (slave dummy0): failed to get link speed/duplex [ 463.127328][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 463.216106][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 463.236902][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 463.327160][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 463.356667][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 463.382037][T24162] syz.1.4776: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 463.398442][T24162] CPU: 0 UID: 0 PID: 24162 Comm: syz.1.4776 Not tainted syzkaller #0 PREEMPT(full) [ 463.398465][T24162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.398475][T24162] Call Trace: [ 463.398501][T24162] [ 463.398561][T24162] dump_stack_lvl+0xe8/0x150 [ 463.398736][T24162] warn_alloc+0x249/0x340 [ 463.398780][T24162] ? __pfx_stack_trace_save+0x10/0x10 [ 463.398850][T24162] ? __pfx_warn_alloc+0x10/0x10 [ 463.398874][T24162] ? __kasan_kmalloc+0x93/0xb0 [ 463.398902][T24162] ? __kmalloc_cache_noprof+0x318/0x660 [ 463.398922][T24162] ? xskq_create+0x56/0x170 [ 463.399011][T24162] ? xsk_init_queue+0x8a/0xe0 [ 463.399027][T24162] ? xsk_setsockopt+0x52a/0x960 [ 463.399043][T24162] ? do_sock_setsockopt+0x17c/0x1b0 [ 463.399140][T24162] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 463.399162][T24162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.399197][T24162] __vmalloc_node_range_noprof+0x12c/0x1730 [ 463.399235][T24162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 463.399259][T24162] ? __kasan_kmalloc+0x93/0xb0 [ 463.399284][T24162] vmalloc_user_noprof+0xad/0xe0 [ 463.399304][T24162] ? xskq_create+0xbf/0x170 [ 463.399323][T24162] xskq_create+0xbf/0x170 [ 463.399351][T24162] xsk_init_queue+0x8a/0xe0 [ 463.399370][T24162] xsk_setsockopt+0x52a/0x960 [ 463.399389][T24162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 463.399407][T24162] ? __pfx_aa_sk_perm+0x10/0x10 [ 463.399488][T24162] ? lock_release+0x4b/0x3c0 [ 463.399522][T24162] ? aa_sock_opt_perm+0xff/0x1a0 [ 463.399545][T24162] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 463.399582][T24162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 463.399601][T24162] do_sock_setsockopt+0x17c/0x1b0 [ 463.399625][T24162] __x64_sys_setsockopt+0x13d/0x1b0 [ 463.399647][T24162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.399663][T24162] do_syscall_64+0x174/0x580 [ 463.399740][T24162] ? trace_irq_disable+0x3b/0x140 [ 463.399772][T24162] ? clear_bhb_loop+0x40/0x90 [ 463.399791][T24162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.399807][T24162] RIP: 0033:0x7fde5139ce59 [ 463.399851][T24162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.399894][T24162] RSP: 002b:00007fde522a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 463.399939][T24162] RAX: ffffffffffffffda RBX: 00007fde51615fa0 RCX: 00007fde5139ce59 [ 463.399952][T24162] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 463.399963][T24162] RBP: 00007fde51432e6f R08: 0000000000000004 R09: 0000000000000000 [ 463.399974][T24162] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.399985][T24162] R13: 00007fde51616038 R14: 00007fde51615fa0 R15: 00007ffe9e2dfc68 [ 463.400005][T24162] [ 463.400122][T24162] Mem-Info: [ 463.459421][T24163] netlink: 'syz.1.4776': attribute type 10 has an invalid length. [ 463.462989][T24162] active_anon:6243 inactive_anon:8 isolated_anon:0 [ 463.462989][T24162] active_file:2784 inactive_file:40348 isolated_file:0 [ 463.462989][T24162] unevictable:768 dirty:347 writeback:0 [ 463.462989][T24162] slab_reclaimable:14294 slab_unreclaimable:170061 [ 463.462989][T24162] mapped:29617 shmem:1421 pagetables:1566 [ 463.462989][T24162] sec_pagetables:0 bounce:0 [ 463.462989][T24162] kernel_misc_reclaimable:0 [ 463.462989][T24162] free:1215017 free_pcp:28790 free_cma:0 [ 463.463041][T24162] Node 0 active_anon:24972kB inactive_anon:32kB active_file:11136kB inactive_file:161188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118468kB dirty:1388kB writeback:0kB shmem:4148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17748kB pagetables:6132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 463.463090][T24162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 463.468427][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 463.472863][T24162] Node 0 DMA free:11212kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:48kB free_cma:0kB [ 463.472920][T24162] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 463.472956][T24162] Node 0 DMA32 free:1039256kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24972kB inactive_anon:32kB active_file:11136kB inactive_file:161188kB unevictable:1536kB writepending:1388kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:57300kB local_pcp:33904kB free_cma:0kB [ 463.473012][T24162] lowmem_reserve[]: 0 0 0 0 0 [ 463.473060][T24162] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 463.473111][T24162] lowmem_reserve[]: [ 463.492330][T24163] openvswitch: netlink: Message has 2 unknown bytes. [ 463.496051][T24162] 0 0 0 0 0 [ 463.496087][T24162] Node 1 Normal free:3809600kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57804kB local_pcp:31572kB free_cma:0kB [ 463.496140][T24162] lowmem_reserve[]: 0 0 0 0 0 [ 463.496173][T24162] Node 0 DMA: 1*4kB (U) 3*8kB (U) 1*16kB (U) 3*32kB (U) 1*64kB (U) 2*128kB (U) 0*256kB 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 11212kB [ 463.496307][T24162] Node 0 DMA32: 4000*4kB (UME) 4644*8kB (UME) 3489*16kB (UM) 578*32kB (UME) 400*64kB (UM) 643*128kB (UM) 526*256kB (UME) 269*512kB (UM) 235*1024kB (UME) 142*2048kB (UM) [ 463.503490][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 463.507822][T24162] 0*4096kB = 1039216kB [ 463.507841][T24162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 463.507929][T24162] Node 1 Normal: 4*4kB (UM) 6*8kB [ 463.523031][T24163] netlink: 'syz.1.4776': attribute type 10 has an invalid length. [ 463.526551][T24162] (UM) 10*16kB (UM) 9*32kB (UM) 13*64kB (UM) 8*128kB (UM) 8*256kB (UM) 6*512kB (UM) 7*1024kB (UM) 5*2048kB (U) 924*4096kB (UM) = 3809600kB [ 463.526692][T24162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.664171][T24165] __nla_validate_parse: 11 callbacks suppressed [ 463.664227][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 463.671248][T24162] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 463.671268][T24162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 463.671283][T24162] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 463.671298][T24162] 44550 total pagecache pages [ 463.671306][T24162] 1 pages in swap cache [ 463.671312][T24162] Free swap = 124992kB [ 463.671326][T24162] Total swap = 124996kB [ 463.671335][T24162] 2097051 pages RAM [ 463.671341][T24162] 0 pages HighMem/MovableOnly [ 463.671348][T24162] 427122 pages reserved [ 463.671355][T24162] 0 pages cma reserved [ 463.743023][T24166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4777'. [ 464.225471][T24172] lo speed is unknown, defaulting to 1000 [ 464.463454][T24192] xt_HMARK: spi-set and port-set can't be combined [ 464.487338][T24188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.560541][T24198] netlink: 'syz.4.4786': attribute type 8 has an invalid length. [ 464.870489][T24208] : entered promiscuous mode [ 465.160335][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4795'. [ 465.387115][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4795'. [ 465.412684][T24222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 465.464491][T24239] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 465.525711][T24239] tipc: Enabled bearer , priority 26 [ 465.540290][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4800'. [ 465.715142][T24255] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.738850][T24255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.793776][T24255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.802729][T24255] batadv_slave_1: left promiscuous mode [ 465.809447][T24255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.823253][T24255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 465.833848][T24255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.845589][T24255] veth1_vlan: left promiscuous mode [ 465.852449][T24255] veth0_vlan: left promiscuous mode [ 465.858516][T24255] veth0_vlan: entered promiscuous mode [ 465.866523][T24255] veth1_vlan: entered promiscuous mode [ 465.888554][ T9170] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.895669][ T9170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.904589][ T9170] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.911699][ T9170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.961414][ T9136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.994633][ T9136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.005413][T24266] lo speed is unknown, defaulting to 1000 [ 466.038631][ T9136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.055229][ T9136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.248368][T24288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4813'. [ 466.372628][T24296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4814'. [ 466.396076][T24296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4814'. [ 466.414800][T24296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4814'. [ 466.636286][ T8928] tipc: Node number set to 2931447877 [ 466.847874][T24318] ip_vti0: entered promiscuous mode [ 466.882489][T24320] tun0: tun_chr_ioctl cmd 1074025675 [ 466.888162][T24320] tun0: persist enabled [ 466.893192][T24320] tun0: tun_chr_ioctl cmd 1074025675 [ 466.898632][T24320] tun0: persist enabled [ 467.255571][T24329] vxcan1: entered allmulticast mode [ 467.522370][T24343] netlink: 'syz.1.4829': attribute type 1 has an invalid length. [ 467.552724][T24343] gretap0: entered allmulticast mode [ 467.574630][T24345] gretap0: entered allmulticast mode [ 467.857338][T24373] netlink: 'syz.3.4837': attribute type 10 has an invalid length. [ 467.935687][T24380] Cannot find del_set index 4 as target [ 468.046140][ T9170] net_ratelimit: 61 callbacks suppressed [ 468.046158][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 468.096012][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 468.306229][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 468.337232][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 468.436280][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 468.466304][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 468.577284][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 468.606303][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 468.697379][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 468.716879][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 469.120448][T24466] syzkaller0: refused to change device tx_queue_len [ 469.449498][T24491] __nla_validate_parse: 15 callbacks suppressed [ 469.449527][T24491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4866'. [ 469.705445][T24501] xt_CT: No such helper "syz0" [ 470.037664][T24520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4869'. [ 470.182733][T24534] netlink: 'syz.4.4872': attribute type 1 has an invalid length. [ 472.706100][T24534] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 473.054384][T24573] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4883'. [ 473.127801][ T9158] net_ratelimit: 41 callbacks suppressed [ 473.127824][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 473.177170][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 473.287902][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 473.317082][T24595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4891'. [ 473.344040][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 473.374105][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4891'. [ 473.416112][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 473.456942][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 473.498970][T24605] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.506343][T24605] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.596729][T24605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.609861][T24605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.686871][ T9147] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.702506][ T9147] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.728298][ T9147] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.742009][ T9147] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.793710][T24615] syzkaller0: entered promiscuous mode [ 473.799616][T24615] syzkaller0: entered allmulticast mode [ 473.817012][ T9158] bond4: (slave dummy0): failed to get link speed/duplex [ 473.835872][T24627] team0 (unregistering): Port device team_slave_0 removed [ 473.846569][T24627] team0 (unregistering): Port device team_slave_1 removed [ 473.926143][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 473.942471][T24633] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.973318][T24633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 473.984425][T24633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.001655][T24633] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 474.096371][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 474.121619][T24636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4903'. [ 474.158836][T24636] ip6tnl1: entered allmulticast mode [ 474.281917][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4905'. [ 474.326119][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4905'. [ 474.441881][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4907'. [ 474.445046][T18384] udevd[18384]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 474.453921][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4907'. [ 474.481517][T18384] udevd[18384]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 474.651129][T24671] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 474.663546][T24671] bond0 (unregistering): Released all slaves [ 474.690058][T24674] lo speed is unknown, defaulting to 1000 [ 474.757113][T24679] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4912'. [ 474.767096][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4912'. [ 474.833011][T24681] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 475.112665][T24688] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.4916'. [ 475.132032][T24690] rdma_rxe: rxe_newlink: failed to add lo [ 475.794353][T24736] lo: entered allmulticast mode [ 475.826531][T24733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4928'. [ 475.855168][T24743] netlink: 'syz.3.4930': attribute type 12 has an invalid length. [ 475.941524][T24742] lo: left allmulticast mode [ 476.531641][T24790] veth1_to_hsr: entered promiscuous mode [ 476.552601][T24790] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4940'. [ 476.567243][T24792] netlink: 'syz.2.4941': attribute type 1 has an invalid length. [ 476.673279][T24792] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 476.704205][T24797] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 476.913479][T24816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4945'. [ 477.117462][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4950'. [ 477.268665][T24834] veth11: entered allmulticast mode [ 477.282935][T24860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4951'. [ 477.324168][T24834] bond0: (slave veth11): Enslaving as an active interface with an up link [ 477.492271][T24860] ipvlan1: entered promiscuous mode [ 477.533100][T24860] ipvlan1: left promiscuous mode [ 477.639277][T24875] bond0 (unregistering): (slave veth11): Releasing backup interface [ 477.702729][T24875] bond0 (unregistering): Released all slaves [ 478.428313][ T9170] net_ratelimit: 51 callbacks suppressed [ 478.428331][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 478.443610][T24888] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 478.516210][T24888] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 478.533515][T24908] syzkaller0: entered promiscuous mode [ 478.536507][T24888] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 478.542825][T24908] syzkaller0: entered allmulticast mode [ 478.576431][ T9147] bond4: (slave dummy0): failed to get link speed/duplex [ 478.647635][T24923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4962'. [ 478.676801][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 478.697039][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 478.796140][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 478.826251][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 478.918635][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 478.966507][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 479.046869][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 479.062359][T24956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4972'. [ 479.099928][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 479.269169][T24980] netlink: 'syz.3.4977': attribute type 3 has an invalid length. [ 479.898922][T25023] __nla_validate_parse: 2 callbacks suppressed [ 479.898939][T25023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4985'. [ 479.925354][T25026] lo speed is unknown, defaulting to 1000 [ 479.965502][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4985'. [ 480.368849][T25053] ipip0: entered promiscuous mode [ 481.291720][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4999'. [ 481.492793][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5006'. [ 481.589428][T25126] ipt_REJECT: ECHOREPLY no longer supported. [ 481.962528][T25141] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5010'. [ 482.373281][T25174] hmó3)ó€: entered promiscuous mode [ 482.397551][T25176] netlink: 'syz.0.5016': attribute type 10 has an invalid length. [ 482.423312][T25176] team0: Device vxcan1 is of different type [ 482.485852][T25180] syzkaller1: entered promiscuous mode [ 482.501947][T25180] syzkaller1: entered allmulticast mode [ 482.621721][ T30] audit: type=1800 audit(1781927776.116:16): pid=25187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5020" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2235 res=0 errno=0 [ 482.759075][T25196] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 482.765242][T25188] can: request_module (can-proto-0) failed. [ 482.880249][T25198] lo: entered allmulticast mode [ 482.914777][T25201] netlink: 'syz.3.5017': attribute type 21 has an invalid length. [ 482.941550][T25201] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5017'. [ 482.954436][T25198] lo speed is unknown, defaulting to 1000 [ 482.983160][T25204] pimreg: entered allmulticast mode [ 483.018783][T25203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5024'. [ 483.047558][T25206] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5025'. [ 483.067379][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5017'. [ 483.422185][T25220] netlink: 'syz.2.5028': attribute type 1 has an invalid length. [ 483.480088][T25220] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.505540][ T30] audit: type=1800 audit(1781927776.996:17): pid=25222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5029" name="memory.events" dev="tmpfs" ino=2157 res=0 errno=0 [ 483.527336][T25224] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 483.538119][ T30] audit: type=1804 audit(1781927777.006:18): pid=25222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5029" name="/newroot/417/memory.events" dev="tmpfs" ino=2157 res=1 errno=0 [ 483.572569][T25220] bond6: entered promiscuous mode [ 483.577889][T25220] bond6: entered allmulticast mode [ 483.596627][T25197] lo: left allmulticast mode [ 483.606606][ T9140] net_ratelimit: 63 callbacks suppressed [ 483.606621][ T9140] bond4: (slave dummy0): failed to get link speed/duplex [ 483.736243][ T9140] bond4: (slave dummy0): failed to get link speed/duplex [ 483.766979][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 483.818123][T25236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5033'. [ 483.829104][T25227] netlink: 'syz.1.5027': attribute type 5 has an invalid length. [ 483.961243][T25227] geneve2: entered promiscuous mode [ 484.011770][T25227] geneve2: entered allmulticast mode [ 484.072021][ T9170] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 53288 - 0 [ 484.086499][ T9170] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 53288 - 0 [ 484.117043][T25245] tipc: Enabled bearer , priority 0 [ 484.137532][T25242] syzkaller0: entered promiscuous mode [ 484.161853][T25242] syzkaller0: entered allmulticast mode [ 484.204909][ T9170] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 53288 - 0 [ 484.227246][ T9170] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 53288 - 0 [ 484.273047][T25242] tipc: Resetting bearer [ 484.306044][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 484.341004][T25242] tipc: Resetting bearer [ 484.368340][T25242] tipc: Disabling bearer [ 484.371273][T25262] Bluetooth: MGMT ver 1.23 [ 484.417501][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 484.466256][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 484.536190][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 484.586029][ T9170] bond4: (slave dummy0): failed to get link speed/duplex [ 484.656060][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 484.707297][ T9140] bond4: (slave dummy0): failed to get link speed/duplex [ 484.952313][T25300] mac80211_hwsim hwsim69 syzkaller1: entered promiscuous mode [ 484.962081][T25300] mac80211_hwsim hwsim69 syzkaller1: entered allmulticast mode [ 485.150232][T25319] tipc: Enabled bearer , priority 0 [ 485.159096][T25319] syzkaller0: entered promiscuous mode [ 485.164946][T25319] syzkaller0: entered allmulticast mode [ 485.179015][T25319] tipc: Resetting bearer [ 485.189227][T25318] tipc: Resetting bearer [ 485.197357][T25318] tipc: Disabling bearer [ 485.594271][T25358] sit0: entered promiscuous mode [ 485.618943][T25358] netlink: 'syz.2.5068': attribute type 1 has an invalid length. [ 485.628915][T25358] __nla_validate_parse: 3 callbacks suppressed [ 485.628941][T25358] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5068'. [ 485.647389][T25347] lo speed is unknown, defaulting to 1000 [ 485.771748][T25366] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5070'. [ 485.816340][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5071'. [ 485.970691][T25379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5071'. [ 485.988193][T25379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5071'. [ 486.004412][T25379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5071'. [ 486.087918][ T30] audit: type=1800 audit(1781927779.586:19): pid=25390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5076" name="memory.events" dev="tmpfs" ino=2270 res=0 errno=0 [ 486.150575][ T30] audit: type=1804 audit(1781927779.606:20): pid=25390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5076" name="/newroot/435/memory.events" dev="tmpfs" ino=2270 res=1 errno=0 [ 486.338727][T25401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 486.364071][T25406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5082'. [ 486.400776][T25409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5083'. [ 486.409040][T25408] syzkaller0: entered promiscuous mode [ 486.421863][T25408] syzkaller0: entered allmulticast mode [ 486.472379][T25418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5085'. [ 486.789094][T25433] hmó3)ó€: entered promiscuous mode [ 486.886973][T25431] lo speed is unknown, defaulting to 1000 [ 486.893025][T25435] netlink: 'syz.3.5090': attribute type 13 has an invalid length. [ 486.913398][T25435] netlink: 'syz.3.5090': attribute type 17 has an invalid length. [ 487.233086][T25458] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 487.247973][T25457] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 487.269120][T25458] nbd: must specify an index to disconnect [ 487.290743][T25457] nbd: must specify an index to disconnect [ 487.316897][T25460] netlink: 'syz.1.5096': attribute type 21 has an invalid length. [ 487.534814][T25471] netlink: 'syz.4.5101': attribute type 1 has an invalid length. [ 487.549158][T25474] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 487.660977][T25490] netlink: 'syz.0.5104': attribute type 6 has an invalid length. [ 487.765210][T25494] netlink: 'syz.4.5103': attribute type 1 has an invalid length. [ 487.775452][T25488] team0: Port device team_slave_0 removed [ 487.942534][ T9150] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.971949][ T9150] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.013262][ T9150] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.025420][ T9150] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.265456][T25526] ip6gre3: entered promiscuous mode [ 488.271122][T25526] ip6gre3: entered allmulticast mode [ 488.525615][T25551] geneve2: entered promiscuous mode [ 488.538510][T25551] geneve2: entered allmulticast mode [ 488.620793][T25556] FAULT_INJECTION: forcing a failure. [ 488.620793][T25556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.637141][T25556] CPU: 1 UID: 0 PID: 25556 Comm: syz.4.5123 Not tainted syzkaller #0 PREEMPT(full) [ 488.637165][T25556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.637175][T25556] Call Trace: [ 488.637181][T25556] [ 488.637188][T25556] dump_stack_lvl+0xe8/0x150 [ 488.637210][T25556] should_fail_ex+0x40c/0x560 [ 488.637313][T25556] _copy_from_user+0x2d/0xb0 [ 488.637392][T25556] __sys_bpf+0x229/0x950 [ 488.637421][T25556] ? __pfx___sys_bpf+0x10/0x10 [ 488.637446][T25556] ? ksys_write+0x242/0x270 [ 488.637480][T25556] ? __pfx_ksys_write+0x10/0x10 [ 488.637501][T25556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.637518][T25556] __x64_sys_bpf+0x7c/0x90 [ 488.637535][T25556] do_syscall_64+0x174/0x580 [ 488.637554][T25556] ? clear_bhb_loop+0x40/0x90 [ 488.637567][T25556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.637578][T25556] RIP: 0033:0x7f903cf9ce59 [ 488.637591][T25556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.637604][T25556] RSP: 002b:00007f903dd76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.637620][T25556] RAX: ffffffffffffffda RBX: 00007f903d215fa0 RCX: 00007f903cf9ce59 [ 488.637632][T25556] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 488.637642][T25556] RBP: 00007f903dd76090 R08: 0000000000000000 R09: 0000000000000000 [ 488.637651][T25556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.637660][T25556] R13: 00007f903d216038 R14: 00007f903d215fa0 R15: 00007ffef0ae60a8 [ 488.637678][T25556] [ 488.826911][ T9129] net_ratelimit: 58 callbacks suppressed [ 488.826928][ T9129] bond4: (slave dummy0): failed to get link speed/duplex [ 488.880428][T25562] syzkaller0: entered promiscuous mode [ 488.894609][T25562] syzkaller0: entered allmulticast mode [ 488.937825][T25562] tipc: Enabled bearer , priority 0 [ 488.944615][T25570] nbd: must specify at least one socket [ 488.958814][T25562] tipc: Resetting bearer [ 488.979396][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 489.012085][T25585] netlink: 'syz.2.5132': attribute type 13 has an invalid length. [ 489.023176][T25557] tipc: Resetting bearer [ 489.039949][T25585] netlink: 'syz.2.5132': attribute type 17 has an invalid length. [ 489.057792][T25557] tipc: Disabling bearer [ 489.075896][T25585] 1ªî{X¹¦: left allmulticast mode [ 489.092831][T25585] sit0: left promiscuous mode [ 489.109235][T25585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.128720][T25585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.155089][T25585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.173887][T25585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.184236][T25585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 489.197285][T25585] veth1_vlan: left promiscuous mode [ 489.203776][T25585] veth0_vlan: left promiscuous mode [ 489.210383][T25585] veth0_vlan: entered promiscuous mode [ 489.214426][T25601] FAULT_INJECTION: forcing a failure. [ 489.214426][T25601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.218704][T25585] veth1_vlan: entered promiscuous mode [ 489.229248][T25601] CPU: 1 UID: 0 PID: 25601 Comm: syz.0.5138 Not tainted syzkaller #0 PREEMPT(full) [ 489.229269][T25601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.229277][T25601] Call Trace: [ 489.229291][T25601] [ 489.229298][T25601] dump_stack_lvl+0xe8/0x150 [ 489.229319][T25601] should_fail_ex+0x40c/0x560 [ 489.229339][T25601] _copy_from_user+0x2d/0xb0 [ 489.229359][T25601] bpf_obj_get_info_by_fd+0x45a/0x3350 [ 489.229381][T25601] ? rcu_is_watching+0x15/0xb0 [ 489.229398][T25601] ? aa_file_perm+0x18b/0x15f0 [ 489.229415][T25601] ? _parse_integer_limit+0x1ae/0x1f0 [ 489.229434][T25601] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 489.229455][T25601] ? kstrtouint+0x6e/0xe0 [ 489.229471][T25601] ? get_pid_task+0x20/0x1f0 [ 489.229514][T25601] ? rcu_is_watching+0x15/0xb0 [ 489.229529][T25601] ? get_pid_task+0x20/0x1f0 [ 489.229541][T25601] ? rcu_is_watching+0x15/0xb0 [ 489.229555][T25601] ? get_pid_task+0x20/0x1f0 [ 489.229568][T25601] ? lock_release+0x4b/0x3c0 [ 489.229588][T25601] ? __mutex_trylock_common+0x15f/0x270 [ 489.229615][T25601] ? lock_release+0x4b/0x3c0 [ 489.229633][T25601] ? __might_fault+0xaf/0x130 [ 489.229651][T25601] ? __might_fault+0xcb/0x130 [ 489.229668][T25601] ? bpf_lsm_bpf+0x9/0x20 [ 489.229688][T25601] ? security_bpf+0x7e/0x2d0 [ 489.229785][T25601] __sys_bpf+0x66e/0x950 [ 489.229805][T25601] ? __pfx___sys_bpf+0x10/0x10 [ 489.229830][T25601] ? ksys_write+0x242/0x270 [ 489.229850][T25601] ? __pfx_ksys_write+0x10/0x10 [ 489.229871][T25601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.229886][T25601] __x64_sys_bpf+0x7c/0x90 [ 489.229904][T25601] do_syscall_64+0x174/0x580 [ 489.229923][T25601] ? trace_irq_disable+0x3b/0x140 [ 489.229941][T25601] ? clear_bhb_loop+0x40/0x90 [ 489.229958][T25601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.229973][T25601] RIP: 0033:0x7f423fb9ce59 [ 489.229988][T25601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.230001][T25601] RSP: 002b:00007f4240a04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.230018][T25601] RAX: ffffffffffffffda RBX: 00007f423fe15fa0 RCX: 00007f423fb9ce59 [ 489.230028][T25601] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 489.230038][T25601] RBP: 00007f4240a04090 R08: 0000000000000000 R09: 0000000000000000 [ 489.230048][T25601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.230057][T25601] R13: 00007f423fe16038 R14: 00007f423fe15fa0 R15: 00007ffdd48a3c28 [ 489.230075][T25601] [ 489.497368][T25585] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 489.513519][T25588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.536377][T25590] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 489.554749][ T9150] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.561900][ T9150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.596954][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.604055][ T9150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.622559][ T9165] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.639530][ T9165] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661175][ T9165] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.682902][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 489.700431][ T9165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.721412][T25625] lo speed is unknown, defaulting to 1000 [ 489.791467][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 489.814049][T25630] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1550) ! [ 489.853511][T25633] netlink: 'syz.0.5147': attribute type 1 has an invalid length. [ 489.945521][T25643] FAULT_INJECTION: forcing a failure. [ 489.945521][T25643] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 489.958804][ T9165] bond4: (slave dummy0): failed to get link speed/duplex [ 489.967658][T25643] CPU: 1 UID: 0 PID: 25643 Comm: syz.1.5149 Not tainted syzkaller #0 PREEMPT(full) [ 489.967678][T25643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.967686][T25643] Call Trace: [ 489.967692][T25643] [ 489.967699][T25643] dump_stack_lvl+0xe8/0x150 [ 489.967720][T25643] should_fail_ex+0x40c/0x560 [ 489.967739][T25643] prepare_alloc_pages+0x230/0x650 [ 489.967764][T25643] __alloc_frozen_pages_noprof+0x12f/0x380 [ 489.967786][T25643] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 489.967808][T25643] ? __pfx_policy_nodemask+0x10/0x10 [ 489.967837][T25643] ? unwind_next_frame+0x8f/0x2550 [ 489.967882][T25643] alloc_pages_mpol+0x212/0x380 [ 489.967906][T25643] folio_alloc_mpol_noprof+0x39/0x160 [ 489.967927][T25643] shmem_alloc_and_add_folio+0x43e/0xf60 [ 489.967958][T25643] ? __pfx_filemap_get_entry+0x10/0x10 [ 489.967983][T25643] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 489.968002][T25643] ? shmem_allowable_huge_orders+0x628/0x6c0 [ 489.968021][T25643] shmem_get_folio_gfp+0x5b2/0x16c0 [ 489.968044][T25643] shmem_fault+0x179/0x390 [ 489.968065][T25643] __do_fault+0x138/0x2a0 [ 489.968086][T25643] do_pte_missing+0x6e1/0x3540 [ 489.968107][T25643] ? rcu_is_watching+0x15/0xb0 [ 489.968123][T25643] ? lock_release+0x4b/0x3c0 [ 489.968147][T25643] handle_mm_fault+0x1b36/0x3080 [ 489.968170][T25643] ? handle_mm_fault+0xec/0x3080 [ 489.968190][T25643] ? __pfx_handle_mm_fault+0x10/0x10 [ 489.968221][T25643] ? __pfx___mutex_trylock_common+0x10/0x10 [ 489.968241][T25643] ? lock_mm_and_find_vma+0xa7/0x340 [ 489.968262][T25643] do_user_addr_fault+0x744/0x1340 [ 489.968283][T25643] exc_page_fault+0x6a/0xc0 [ 489.968358][T25643] asm_exc_page_fault+0x26/0x30 [ 489.968373][T25643] RIP: 0010:__put_user_8+0xd/0x30 [ 489.968394][T25643] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 489.968407][T25643] RSP: 0018:ffffc9000621f9d8 EFLAGS: 00050202 [ 489.968422][T25643] RAX: ffffffffa02016dc RBX: 0000000000000000 RCX: 0000200000001680 [ 489.968433][T25643] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 489.968444][T25643] RBP: ffffc9000621fd10 R08: 0000000000000001 R09: 0000000000000000 [ 489.968453][T25643] R10: dffffc0000000000 R11: ffffed10037d8220 R12: 0000200000001680 [ 489.968465][T25643] R13: 00000000ffffffff R14: 0000000000000002 R15: 0000000000000000 [ 489.968479][T25643] ? 0xffffffffa02016dc [ 489.968495][T25643] bpf_obj_get_info_by_fd+0x2169/0x3350 [ 489.968516][T25643] ? rcu_is_watching+0x15/0xb0 [ 489.968537][T25643] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 489.968560][T25643] ? kstrtouint+0x6e/0xe0 [ 489.968585][T25643] ? get_pid_task+0x20/0x1f0 [ 489.968599][T25643] ? rcu_is_watching+0x15/0xb0 [ 489.968614][T25643] ? get_pid_task+0x20/0x1f0 [ 489.968628][T25643] ? rcu_is_watching+0x15/0xb0 [ 489.968642][T25643] ? get_pid_task+0x20/0x1f0 [ 489.968656][T25643] ? lock_release+0x4b/0x3c0 [ 489.968674][T25643] ? __mutex_trylock_common+0x15f/0x270 [ 489.968702][T25643] ? lock_release+0x4b/0x3c0 [ 489.968720][T25643] ? __might_fault+0xaf/0x130 [ 489.968738][T25643] ? __might_fault+0xcb/0x130 [ 489.968754][T25643] ? bpf_lsm_bpf+0x9/0x20 [ 489.968773][T25643] ? security_bpf+0x7e/0x2d0 [ 489.968794][T25643] __sys_bpf+0x66e/0x950 [ 489.968813][T25643] ? __pfx___sys_bpf+0x10/0x10 [ 489.968838][T25643] ? ksys_write+0x242/0x270 [ 489.968856][T25643] ? __pfx_ksys_write+0x10/0x10 [ 489.968876][T25643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.968892][T25643] __x64_sys_bpf+0x7c/0x90 [ 489.968910][T25643] do_syscall_64+0x174/0x580 [ 489.968935][T25643] ? trace_irq_disable+0x3b/0x140 [ 489.968953][T25643] ? clear_bhb_loop+0x40/0x90 [ 489.968969][T25643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.968982][T25643] RIP: 0033:0x7fde5139ce59 [ 489.968999][T25643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.969011][T25643] RSP: 002b:00007fde522a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.969027][T25643] RAX: ffffffffffffffda RBX: 00007fde51615fa0 RCX: 00007fde5139ce59 [ 489.969038][T25643] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 489.969048][T25643] RBP: 00007fde522a0090 R08: 0000000000000000 R09: 0000000000000000 [ 489.969058][T25643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.969067][T25643] R13: 00007fde51616038 R14: 00007fde51615fa0 R15: 00007ffe9e2dfc68 [ 489.969086][T25643] [ 490.484732][ T9150] bond4: (slave dummy0): failed to get link speed/duplex [ 490.516598][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 490.542919][T25652] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 490.636548][T25654] netlink: 'syz.4.5154': attribute type 3 has an invalid length. [ 490.737192][T25674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.740518][T25673] __nla_validate_parse: 27 callbacks suppressed [ 490.740534][T25673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5159'. [ 490.772756][T25676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5161'. [ 490.815454][T25676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5161'. [ 490.915044][T25687] lo: entered allmulticast mode [ 490.920799][T25686] lo: left allmulticast mode [ 490.927625][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5164'. [ 491.105672][T25696] ÿÿÿÿÿÿ: renamed from batadv_slave_1 (while UP) [ 491.202992][ T5724] IPVS: starting estimator thread 0... [ 491.318987][T25700] IPVS: using max 45 ests per chain, 108000 per kthread [ 491.579758][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5172'. [ 491.766919][T25724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5178'. [ 491.787293][ T5724] bridge0: entered promiscuous mode [ 491.794902][T25724] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5178'. [ 491.803764][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5176'. [ 491.883064][T25733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5179'. [ 491.918265][T25733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5179'. [ 491.935802][T25736] netlink: 'syz.0.5180': attribute type 1 has an invalid length. [ 491.962772][T25741] SET target dimension over the limit! [ 492.053223][T25746] netlink: 'syz.0.5185': attribute type 3 has an invalid length. [ 492.069456][T25746] netlink: 'syz.0.5185': attribute type 3 has an invalid length. [ 492.154520][T25757] syzkaller0: entered promiscuous mode [ 492.163560][T25757] syzkaller0: entered allmulticast mode [ 492.198944][T25766] bond5: Invalid ad_actor_system MAC address. [ 492.205041][T25766] bond5: option ad_actor_system: invalid value (7) [ 492.212837][T25766] bond5 (unregistering): Released all slaves [ 492.707553][T25820] 5nè‹Ò: entered promiscuous mode [ 493.611832][T25859] pim6reg1: entered promiscuous mode [ 493.617357][T25859] pim6reg1: entered allmulticast mode [ 493.898548][ T9156] net_ratelimit: 48 callbacks suppressed [ 493.898580][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 493.956061][ T9156] bond4: (slave dummy0): failed to get link speed/duplex [ 494.030161][ T9165] bond4: (slave dummy0): failed to get link speed/duplex [ 494.118980][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 494.155726][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 494.248063][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 494.286795][ T9165] bond4: (slave dummy0): failed to get link speed/duplex [ 494.321914][T25908] netlink: 'syz.4.5233': attribute type 1 has an invalid length. [ 494.356031][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 494.484552][T25908] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.507464][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 494.596576][T25913] bond5: (slave veth13): Enslaving as an active interface with a down link [ 494.733073][T25915] bond5: (slave veth15): Enslaving as an active interface with a down link [ 494.796398][T25933] tipc: Enabled bearer , priority 0 [ 494.827427][T25908] bond5: (slave bridge7): Enslaving as an active interface with a down link [ 494.980019][T25919] tipc: Disabling bearer [ 495.063845][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 495.586514][T25992] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 495.597118][T25992] nbd: socks must be embedded in a SOCK_ITEM attr [ 495.824879][T26008] __nla_validate_parse: 31 callbacks suppressed [ 495.824897][T26008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5258'. [ 495.841305][T26008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5258'. [ 495.850932][T26008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5258'. [ 495.903374][T26006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5259'. [ 495.962206][T26012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5260'. [ 496.002853][T26012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5260'. [ 496.020117][T26014] netlink: 'syz.3.5261': attribute type 58 has an invalid length. [ 496.036991][T26014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5261'. [ 496.249672][T26034] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5267'. [ 496.284698][T26034] ip6erspan0: entered allmulticast mode [ 496.300646][T26038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5268'. [ 496.324832][T26042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5270'. [ 496.384816][T26044] tipc: Enabled bearer , priority 0 [ 496.421833][T26044] syzkaller0: entered promiscuous mode [ 496.432554][T26044] syzkaller0: entered allmulticast mode [ 496.449058][T26044] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 496.480955][T26044] tipc: Resetting bearer [ 496.502816][T26043] tipc: Resetting bearer [ 496.532825][T26043] tipc: Disabling bearer [ 496.643653][T26068] lo speed is unknown, defaulting to 1000 [ 496.867312][T26085] bridge_slave_0 (unregistering): left allmulticast mode [ 496.884450][T26085] bridge_slave_0 (unregistering): left promiscuous mode [ 496.899073][T26085] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.902741][T26088] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 496.943902][T26090] macvtap2: entered allmulticast mode [ 496.954660][T26090] dummy0: entered allmulticast mode [ 496.963186][T26090] dummy0: left allmulticast mode [ 497.006858][T26092] team3: entered promiscuous mode [ 497.011885][T26092] team3: entered allmulticast mode [ 497.017288][T26092] 8021q: adding VLAN 0 to HW filter on device team3 [ 497.033890][T26092] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 497.044791][T26094] netlink: 'syz.4.5288': attribute type 4 has an invalid length. [ 497.051974][T26092] team4: entered promiscuous mode [ 497.057557][T26092] team4: entered allmulticast mode [ 497.062931][T26092] 8021q: adding VLAN 0 to HW filter on device team4 [ 497.088794][T26092] team5 (uninitialized): Failed to send options change via netlink (err -105) [ 497.102846][T26092] team5: entered promiscuous mode [ 497.107891][T26092] team5: entered allmulticast mode [ 497.113204][T26092] 8021q: adding VLAN 0 to HW filter on device team5 [ 497.131130][T26092] team6 (uninitialized): Failed to send options change via netlink (err -105) [ 497.146062][T26092] team6: entered promiscuous mode [ 497.151115][T26092] team6: entered allmulticast mode [ 497.156400][T26092] 8021q: adding VLAN 0 to HW filter on device team6 [ 497.240682][T26101] sctp: [Deprecated]: syz.0.5291 (pid 26101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.240682][T26101] Use struct sctp_sack_info instead [ 497.358202][T26114] vlan3: entered allmulticast mode [ 497.364491][T26114] bond0: entered allmulticast mode [ 497.391840][T26116] netlink: 'syz.0.5294': attribute type 6 has an invalid length. [ 497.565252][T26127] syzkaller1: entered promiscuous mode [ 497.574676][T26127] syzkaller1: entered allmulticast mode [ 497.632972][T26136] netlink: 'syz.4.5299': attribute type 13 has an invalid length. [ 497.700284][T26138] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 497.710303][T26138] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 497.788937][T26121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.798761][T26121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.875718][T26144] netlink: 'syz.2.5301': attribute type 1 has an invalid length. [ 497.888531][T26144] netlink: 'syz.2.5301': attribute type 1 has an invalid length. [ 497.896277][T26144] netlink: 'syz.2.5301': attribute type 8 has an invalid length. [ 497.908950][T26144] netlink: 'syz.2.5301': attribute type 2 has an invalid length. [ 497.961998][ T9145] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.977163][ T9145] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.998948][ T9145] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.019682][ T9145] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.037712][ T9145] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.051492][ T9145] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.063605][T26159] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 498.079283][ T9145] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.097165][ T9145] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.888408][T26228] geneve2: left promiscuous mode [ 498.893390][T26228] geneve2: left allmulticast mode [ 498.903025][ T9145] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 53288 - 0 [ 498.911505][ T9145] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 53288 - 0 [ 498.920573][ T9145] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 53288 - 0 [ 499.013829][ T9145] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 53288 - 0 [ 499.112063][T26248] ip6gre2: entered promiscuous mode [ 499.117296][T26248] ip6gre2: entered allmulticast mode [ 499.181158][ T9136] net_ratelimit: 46 callbacks suppressed [ 499.181176][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 499.433295][T26267] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 499.519859][T26267] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 499.550463][T26267] bond7: (slave lo): Enslaving as an active interface with an up link [ 499.558947][T26267] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 499.588564][ T9136] bond4: (slave dummy0): failed to get link speed/duplex [ 499.803565][ T9129] bond4: (slave dummy0): failed to get link speed/duplex [ 499.908206][ T9129] bond4: (slave dummy0): failed to get link speed/duplex [ 499.998286][T26283] netlink: 'syz.1.5329': attribute type 1 has an invalid length. [ 500.026613][ T9165] bond4: (slave dummy0): failed to get link speed/duplex [ 500.049219][T26281] IPVS: set_ctl: invalid protocol: 60 172.30.0.1:20000 [ 500.144215][T26292] bond6: Removing last arp target with arp_interval on [ 500.156131][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 500.544654][T26308] IPVS: Scheduler module ip_vs_sip not found [ 500.599909][T26311] vlan0: entered promiscuous mode [ 500.604967][T26311] bridge0: entered promiscuous mode [ 500.616496][ T9129] bond4: (slave dummy0): failed to get link speed/duplex [ 500.633088][T26311] bond7: option packets_per_slave: invalid value (1048582) [ 500.640323][T26311] bond7: option packets_per_slave: allowed values 0 - 65535 [ 500.648482][T26311] bond7 (unregistering): Released all slaves [ 500.846149][ T9145] bond4: (slave dummy0): failed to get link speed/duplex [ 500.972464][ T9165] bond4: (slave dummy0): failed to get link speed/duplex [ 501.011548][T26336] __nla_validate_parse: 29 callbacks suppressed [ 501.011564][T26336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5340'. [ 501.033605][T26335] macsec0: entered allmulticast mode [ 501.243655][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5348'. [ 501.304249][T26356] netlink: 'syz.3.5348': attribute type 1 has an invalid length. [ 501.703786][T26382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5356'. [ 501.738390][T26377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5354'. [ 501.820525][T26377] ip_vti0: left promiscuous mode [ 502.311033][T26377] veth1_to_hsr: left promiscuous mode [ 502.426716][T26377] mac80211_hwsim hwsim69 syzkaller1: left promiscuous mode [ 502.434585][T26377] mac80211_hwsim hwsim69 syzkaller1: left allmulticast mode [ 502.442522][T26377] bridge5: left promiscuous mode [ 502.447600][T26377] bridge5: left allmulticast mode [ 502.453202][T26377] geneve3: left promiscuous mode [ 502.482213][T26377] bridge13: left promiscuous mode [ 502.487302][T26377] bridge13: left allmulticast mode [ 502.509166][T26377] bond6: left promiscuous mode [ 502.514086][T26377] bond6: left allmulticast mode [ 502.523311][T26377] ip6tnl1: left allmulticast mode [ 502.533077][T26377] veth11: left allmulticast mode [ 502.545800][T26377] vlan0: left promiscuous mode [ 502.551067][T26377] bridge0: left promiscuous mode [ 502.558062][T11955] lo speed is unknown, defaulting to 1000 [ 502.574866][T11955] syz1: Port: 1 Link DOWN [ 502.593385][ T9150] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.615111][ T9150] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.623490][ T9150] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.631823][ T9150] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.640764][T10885] lo speed is unknown, defaulting to 1000 [ 502.649157][ T9150] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.657510][ T9150] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.692946][ T9150] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.701308][ T9150] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.703358][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5361'. [ 502.722760][T26415] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5363'. [ 502.731713][T26413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5361'. [ 502.738384][T26416] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5363'. [ 502.902122][T26429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5369'. [ 503.086377][T26445] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5372'. [ 503.274934][T26466] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 503.851718][T26497] sctp: [Deprecated]: syz.3.5386 (pid 26497) Use of int in maxseg socket option. [ 503.851718][T26497] Use struct sctp_assoc_value instead [ 503.990324][T26505] netlink: 'syz.0.5388': attribute type 1 has an invalid length. [ 504.028254][T26505] bond7: entered promiscuous mode [ 504.033487][T26505] bond7: entered allmulticast mode [ 504.039273][T26505] 8021q: adding VLAN 0 to HW filter on device bond7 [ 504.219781][T26513] macvlan0: entered promiscuous mode [ 504.225102][T26513] macvlan0: entered allmulticast mode [ 504.238592][T26513] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 504.255586][T26517] FAULT_INJECTION: forcing a failure. [ 504.255586][T26517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.295900][T26517] CPU: 0 UID: 0 PID: 26517 Comm: syz.4.5392 Not tainted syzkaller #0 PREEMPT(full) [ 504.295923][T26517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 504.295932][T26517] Call Trace: [ 504.295939][T26517] [ 504.295945][T26517] dump_stack_lvl+0xe8/0x150 [ 504.295967][T26517] should_fail_ex+0x40c/0x560 [ 504.295988][T26517] _copy_from_user+0x2d/0xb0 [ 504.296008][T26517] ___sys_sendmsg+0x1c6/0x360 [ 504.296031][T26517] ? rcu_is_watching+0x15/0xb0 [ 504.296046][T26517] ? get_pid_task+0x20/0x1f0 [ 504.296061][T26517] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.296083][T26517] ? rcu_is_watching+0x15/0xb0 [ 504.296109][T26517] ? __fget_files+0x2a/0x420 [ 504.296126][T26517] ? __fget_files+0x3a2/0x420 [ 504.296146][T26517] __x64_sys_sendmsg+0x1b1/0x290 [ 504.296168][T26517] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.296195][T26517] ? rcu_is_watching+0x15/0xb0 [ 504.296211][T26517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.296228][T26517] do_syscall_64+0x174/0x580 [ 504.296247][T26517] ? trace_irq_disable+0x3b/0x140 [ 504.296267][T26517] ? clear_bhb_loop+0x40/0x90 [ 504.296291][T26517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.296306][T26517] RIP: 0033:0x7f903cf9ce59 [ 504.296320][T26517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.296333][T26517] RSP: 002b:00007f903dd76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.296349][T26517] RAX: ffffffffffffffda RBX: 00007f903d215fa0 RCX: 00007f903cf9ce59 [ 504.296361][T26517] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 504.296371][T26517] RBP: 00007f903dd76090 R08: 0000000000000000 R09: 0000000000000000 [ 504.296380][T26517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.296388][T26517] R13: 00007f903d216038 R14: 00007f903d215fa0 R15: 00007ffef0ae60a8 [ 504.296406][T26517] [ 504.564820][T26519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 504.609069][T26525] bond7 (unregistering): Released all slaves [ 505.051560][T26550] can: request_module (can-proto-0) failed. [ 505.088056][T26550] netlink: 'syz.2.5399': attribute type 1 has an invalid length. [ 505.108767][T26545] bond5: entered promiscuous mode [ 505.314621][T26569] mac80211_hwsim hwsim69 syzkaller1: entered promiscuous mode [ 505.322089][T26569] mac80211_hwsim hwsim69 syzkaller1: entered allmulticast mode [ 505.368729][T26571] xt_l2tp: missing protocol rule (udp|l2tpip) [ 505.370003][T26558] gre3: entered promiscuous mode [ 505.386945][T26571] netlink: 'syz.0.5403': attribute type 1 has an invalid length. [ 505.395625][T26571] syzkaller0: entered promiscuous mode [ 505.401194][T26571] syzkaller0: entered allmulticast mode [ 505.410417][T26571] net_ratelimit: 9 callbacks suppressed [ 505.410426][T26571] TC_ACT_REPEAT abuse ? [ 505.501324][T26573] syzkaller0: entered promiscuous mode [ 505.508072][T26573] syzkaller0: entered allmulticast mode [ 505.985724][T26605] netlink: 'syz.1.5413': attribute type 4 has an invalid length. [ 506.114566][T26608] netlink: 'syz.3.5414': attribute type 12 has an invalid length. [ 506.251896][T26626] netlink: 'syz.1.5419': attribute type 1 has an invalid length. [ 506.259884][T26627] netlink: 'syz.1.5419': attribute type 1 has an invalid length. [ 506.269532][T26626] netlink: 'syz.1.5419': attribute type 4 has an invalid length. [ 506.279464][T26626] netlink: 'syz.1.5419': attribute type 4 has an invalid length. [ 506.365204][T26631] __nla_validate_parse: 15 callbacks suppressed [ 506.365219][T26631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5420'. [ 506.601792][T26636] syzkaller0: entered promiscuous mode [ 506.607769][T26636] syzkaller0: entered allmulticast mode [ 506.615437][T26636] tipc: Enabled bearer , priority 0 [ 506.623024][T26634] tipc: Resetting bearer [ 506.631963][T26634] tipc: Disabling bearer [ 506.749226][T26640] netlink: 'syz.2.5423': attribute type 1 has an invalid length. [ 506.757945][T26640] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5423'. [ 507.073048][T26657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.172483][T26665] netlink: 'syz.3.5431': attribute type 4 has an invalid length. [ 507.183478][T26665] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5431'. [ 507.211920][T26665] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5431'. [ 507.229892][T26665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5431'. [ 507.242446][T26671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5435'. [ 507.256448][T26671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5435'. [ 507.574784][T26685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5439'. [ 507.654350][T26692] FAULT_INJECTION: forcing a failure. [ 507.654350][T26692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.667672][T26692] CPU: 0 UID: 0 PID: 26692 Comm: syz.2.5441 Not tainted syzkaller #0 PREEMPT(full) [ 507.667694][T26692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.667703][T26692] Call Trace: [ 507.667710][T26692] [ 507.667717][T26692] dump_stack_lvl+0xe8/0x150 [ 507.667739][T26692] should_fail_ex+0x40c/0x560 [ 507.667758][T26692] _copy_from_iter+0x1d3/0x1660 [ 507.667846][T26692] ? rcu_is_watching+0x15/0xb0 [ 507.667866][T26692] ? __pfx__copy_from_iter+0x10/0x10 [ 507.667881][T26692] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 507.667906][T26692] ? netlink_sendmsg+0x650/0xb40 [ 507.667994][T26692] ? skb_put+0x112/0x210 [ 507.668044][T26692] netlink_sendmsg+0x6c0/0xb40 [ 507.668069][T26692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.668091][T26692] ? aa_sock_msg_perm+0xf1/0x1b0 [ 507.668108][T26692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.668126][T26692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.668148][T26692] ____sys_sendmsg+0x9b9/0xa20 [ 507.668172][T26692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.668193][T26692] ? lock_release+0x4b/0x3c0 [ 507.668215][T26692] ? import_iovec+0x73/0xa0 [ 507.668236][T26692] ___sys_sendmsg+0x2a5/0x360 [ 507.668255][T26692] ? rcu_is_watching+0x15/0xb0 [ 507.668271][T26692] ? get_pid_task+0x20/0x1f0 [ 507.668286][T26692] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.668309][T26692] ? rcu_is_watching+0x15/0xb0 [ 507.668335][T26692] ? __fget_files+0x2a/0x420 [ 507.668351][T26692] ? __fget_files+0x3a2/0x420 [ 507.668372][T26692] __x64_sys_sendmsg+0x1b1/0x290 [ 507.668394][T26692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.668421][T26692] ? rcu_is_watching+0x15/0xb0 [ 507.668437][T26692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.668454][T26692] do_syscall_64+0x174/0x580 [ 507.668473][T26692] ? trace_irq_disable+0x3b/0x140 [ 507.668493][T26692] ? clear_bhb_loop+0x40/0x90 [ 507.668510][T26692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.668526][T26692] RIP: 0033:0x7f6ac9b9ce59 [ 507.668544][T26692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.668557][T26692] RSP: 002b:00007f6acaa33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.668576][T26692] RAX: ffffffffffffffda RBX: 00007f6ac9e15fa0 RCX: 00007f6ac9b9ce59 [ 507.668588][T26692] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 507.668599][T26692] RBP: 00007f6acaa33090 R08: 0000000000000000 R09: 0000000000000000 [ 507.668609][T26692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.668619][T26692] R13: 00007f6ac9e16038 R14: 00007f6ac9e15fa0 R15: 00007ffc9f34be38 [ 507.668639][T26692] [ 508.151824][T26700] netlink: 'syz.1.5443': attribute type 11 has an invalid length. [ 508.159723][T26700] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.5443'. [ 508.295435][T26714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5446'. [ 508.420284][T26718] syzkaller0: entered promiscuous mode [ 508.425867][T26718] syzkaller0: entered allmulticast mode [ 509.008185][T26756] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 509.389613][T26777] syzkaller0: entered promiscuous mode [ 509.419099][T26777] syzkaller0: entered allmulticast mode [ 509.677678][T26778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.214666][T26799] gre2: entered allmulticast mode [ 510.386809][T26831] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 510.628694][T26852] bond4: (slave dummy0): Removing an active aggregator [ 510.641518][T26852] bond4: (slave dummy0): Releasing backup interface [ 510.757783][T26855] IPVS: set_ctl: invalid protocol: 0 172.20.20.11:21 [ 510.786424][T26858] Cannot find set identified by id 65534 to match [ 510.869763][T26862] bridge4: entered promiscuous mode [ 510.881137][T26874] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 510.888988][T26862] bridge4: entered allmulticast mode [ 510.898340][T26874] sock: sock_timestamping_bind_phc: sock not bind to device [ 510.950376][T26881] validate_nla: 1 callbacks suppressed [ 510.950417][T26881] netlink: 'syz.2.5488': attribute type 1 has an invalid length. [ 510.971192][T26881] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.984511][T26881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.992713][T26881] bond7: (slave batadv0): Enslaving as a backup interface with an up link [ 511.015182][T26888] netlink: 'syz.0.5490': attribute type 12 has an invalid length. [ 511.024486][T26888] netlink: 'syz.0.5490': attribute type 12 has an invalid length. [ 511.056603][ T9136] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 511.107297][T26903] netlink: 'syz.2.5494': attribute type 4 has an invalid length. [ 511.217476][ T9136] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 511.318458][T26920] syzkaller0: entered promiscuous mode [ 511.324258][T26920] syzkaller0: entered allmulticast mode [ 511.332028][T26920] tipc: Enabled bearer , priority 0 [ 511.404696][T26920] tipc: Resetting bearer [ 511.420665][T26919] tipc: Resetting bearer [ 511.434254][T26919] tipc: Disabling bearer [ 511.503850][T26936] nbd: couldn't find a device at index 3 [ 511.634934][T26947] sctp: [Deprecated]: syz.0.5508 (pid 26947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 511.634934][T26947] Use struct sctp_sack_info instead [ 511.638216][T26944] __nla_validate_parse: 11 callbacks suppressed [ 511.638231][T26944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5507'. [ 511.669274][T26944] nbd: must specify a size in bytes for the device [ 511.734896][T26952] netlink: 'syz.0.5510': attribute type 9 has an invalid length. [ 511.749943][T26952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5510'. [ 511.763709][T26952] macvlan0: entered promiscuous mode [ 511.812398][T26952] gretap0: entered promiscuous mode [ 511.826791][T26952] macvlan0: entered allmulticast mode [ 511.844498][T26952] gretap0: entered allmulticast mode [ 511.929776][T26964] syzkaller1: entered promiscuous mode [ 511.947702][T26964] syzkaller1: entered allmulticast mode [ 511.958472][T26964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5513'. [ 511.999367][T26967] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5514'. [ 512.143111][T26984] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.634375][T27013] netlink: 'syz.2.5529': attribute type 40 has an invalid length. [ 512.735641][T27024] syzkaller0: entered promiscuous mode [ 512.741661][T27024] syzkaller0: entered allmulticast mode [ 512.901210][T27037] syzkaller0: entered promiscuous mode [ 512.912532][T27037] syzkaller0: entered allmulticast mode [ 512.927919][T27039] macsec0: Caught tx_queue_len zero misconfig [ 513.002516][T27043] geneve4: entered promiscuous mode [ 513.050765][T27045] TC_ACT_REPEAT abuse ? [ 513.089098][T27053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5537'. [ 513.483904][T27083] bridge0: entered allmulticast mode [ 513.511050][T27085] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5549'. [ 513.554169][T27083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 513.737256][T27100] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5553'. [ 513.876734][T27117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5552'. [ 514.007408][T27123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5556'. [ 514.128143][ T30] audit: type=1800 audit(1781927807.576:21): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5557" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2195 res=0 errno=0 [ 514.130928][T27125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.447464][T27145] netlink: 'syz.1.5563': attribute type 4 has an invalid length. [ 514.607207][T27161] ip6gre2: entered promiscuous mode [ 514.612533][T27161] ip6gre2: entered allmulticast mode [ 514.698964][T27174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.708456][T27174] netlink: 'syz.3.5571': attribute type 3 has an invalid length. [ 514.762643][T27176] netlink: 'syz.3.5572': attribute type 1 has an invalid length. [ 514.780420][T27176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.083706][T27191] geneve3: entered promiscuous mode [ 515.089060][T27191] geneve3: entered allmulticast mode [ 515.095307][ T9129] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.103631][ T9129] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.112240][ T9129] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.141492][ T9129] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.249633][T27204] netlink: 'syz.3.5581': attribute type 1 has an invalid length. [ 515.399627][T27204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 515.434407][T27217] bond8: (slave geneve3): making interface the new active one [ 515.453688][T27217] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 515.475981][ T9150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.487904][ T9150] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.510706][ T9150] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.525349][ T9150] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.667235][T27234] syzkaller0: entered promiscuous mode [ 515.676399][T27234] syzkaller0: entered allmulticast mode [ 515.712635][T27236] lo speed is unknown, defaulting to 1000 [ 515.816788][T27240] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.871098][T27240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.881806][T27240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.894689][T27240] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 516.064276][T27250] syzkaller0: entered promiscuous mode [ 516.680949][T27276] __nla_validate_parse: 20 callbacks suppressed [ 516.680967][T27276] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5600'. [ 516.717044][T27274] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5599'. [ 516.728351][T27279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5602'. [ 516.771972][T27281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5601'. [ 516.804282][T27285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5604'. [ 516.904124][T27290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5604'. [ 516.958678][T27291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5605'. [ 517.151279][T27304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.228683][ T9150] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.270039][ T9145] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.278281][ T9145] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.286463][ T9145] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.474387][T27309] hmac(sha2: entered promiscuous mode [ 517.482102][T27322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5612'. [ 517.543654][T27324] x_tables: duplicate underflow at hook 2 [ 517.790682][T27338] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5616'. [ 517.800444][T27338] openvswitch: netlink: Flow actions attr not present in new flow. [ 517.806331][T27335] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5618'. [ 517.914114][T27350] openvswitch: netlink: Message has 2 unknown bytes. [ 518.026011][T27363] sctp: [Deprecated]: syz.2.5626 (pid 27363) Use of int in max_burst socket option deprecated. [ 518.026011][T27363] Use struct sctp_assoc_value instead [ 518.044252][T27363] syzkaller0: entered promiscuous mode [ 518.049744][T27363] syzkaller0: entered allmulticast mode [ 518.058317][T27363] tipc: Enabled bearer , priority 0 [ 518.069214][T27362] tipc: Resetting bearer [ 518.131478][T27362] tipc: Disabling bearer [ 518.576686][T27383] mac80211_hwsim hwsim69 syzkaller1: left promiscuous mode [ 518.586410][T27383] mac80211_hwsim hwsim69 syzkaller1: left allmulticast mode [ 518.806735][ T5622] block nbd5: Receive control failed (result -32) [ 518.813771][T20433] block nbd5: Receive control failed (result -32) [ 519.125324][T27428] pim6reg1: entered promiscuous mode [ 519.133920][T27428] pim6reg1: entered allmulticast mode [ 519.440380][T27453] syzkaller0: entered promiscuous mode [ 519.461996][T27453] syzkaller0: entered allmulticast mode [ 519.488117][T27453] netlink: 'syz.2.5655': attribute type 1 has an invalid length. [ 519.497937][T27453] netlink: 'syz.2.5655': attribute type 2 has an invalid length. [ 519.652973][T27480] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 519.838967][T27500] 8021q: adding VLAN 0 to HW filter on device bond9 [ 519.862661][T27503] team1: entered promiscuous mode [ 519.870094][T27503] team1: entered allmulticast mode [ 519.875456][T27503] 8021q: adding VLAN 0 to HW filter on device team1 [ 519.924385][T27505] netlink: 'syz.2.5672': attribute type 29 has an invalid length. [ 520.042733][T27517] lo speed is unknown, defaulting to 1000 [ 520.087400][T27519] netlink: 'syz.3.5677': attribute type 1 has an invalid length. [ 520.112945][T27519] netlink: 'syz.3.5677': attribute type 1 has an invalid length. [ 520.140148][T27519] netlink: 'syz.3.5677': attribute type 8 has an invalid length. [ 520.439630][T27532] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 520.510924][T27532] bond6 (unregistering): Released all slaves [ 520.716640][T27544] netlink: 'syz.2.5683': attribute type 46 has an invalid length. [ 520.874295][T27556] openvswitch: netlink: IP tunnel dst address not specified [ 520.889874][T27558] syzkaller1: entered promiscuous mode [ 520.895495][T27558] syzkaller1: entered allmulticast mode [ 520.943715][T27560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.411233][T27594] syzkaller1: entered promiscuous mode [ 521.416881][T27594] syzkaller1: entered allmulticast mode [ 521.813079][T27626] syzkaller0: entered promiscuous mode [ 521.818580][T27626] syzkaller0: entered allmulticast mode [ 522.033211][T27636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 522.271138][T27653] sctp: [Deprecated]: syz.0.5712 (pid 27653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.271138][T27653] Use struct sctp_sack_info instead [ 522.417435][T27662] netlink: 'syz.0.5714': attribute type 4 has an invalid length. [ 522.428454][T27662] netlink: 'syz.0.5714': attribute type 4 has an invalid length. [ 522.439768][T10892] lo speed is unknown, defaulting to 1000 [ 522.443666][T27662] netlink: 'syz.0.5714': attribute type 4 has an invalid length. [ 522.445556][T10892] syz1: Port: 1 Link ACTIVE [ 522.445610][T10892] lo speed is unknown, defaulting to 1000 [ 522.469345][ T807] lo speed is unknown, defaulting to 1000 [ 522.478060][ T807] syz1: Port: 1 Link DOWN [ 522.482438][ T807] lo speed is unknown, defaulting to 1000 [ 522.519169][T27671] __nla_validate_parse: 23 callbacks suppressed [ 522.519187][T27671] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5717'. [ 522.713846][T27685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5718'. [ 522.714827][T27684] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5720'. [ 522.831325][T27671] macsec0: left allmulticast mode [ 523.014519][T27671] ip6gre2: left promiscuous mode [ 523.021398][T27671] ip6gre2: left allmulticast mode [ 523.035833][T27671] team1: left promiscuous mode [ 523.046524][T27671] team1: left allmulticast mode [ 523.078287][T27675] 8021q: adding VLAN 0 to HW filter on device bond8 [ 523.093170][T27677] bond8: (slave veth15): Enslaving as an active interface with a down link [ 523.103156][T27684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5720'. [ 523.112311][T27689] bridge2: entered allmulticast mode [ 523.119358][T27698] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5722'. [ 523.199153][T27683] bridge2: left allmulticast mode [ 523.207376][T27702] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5724'. [ 523.247211][T27706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5726'. [ 523.267681][T27706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 523.297084][T27706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 523.398623][T27715] syzkaller0: entered promiscuous mode [ 523.404127][T27715] syzkaller0: entered allmulticast mode [ 524.451711][T27748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.496540][T27752] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20002 [ 524.701227][T27770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5744'. [ 524.792577][T27785] validate_nla: 2 callbacks suppressed [ 524.792594][T27785] netlink: 'syz.3.5748': attribute type 12 has an invalid length. [ 524.960980][T27800] syzkaller1: entered promiscuous mode [ 524.966476][T27800] syzkaller1: entered allmulticast mode [ 525.585802][T27818] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.586498][T27819] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.019600][T27835] : entered promiscuous mode [ 526.269347][T27861] netlink: 'syz.2.5771': attribute type 25 has an invalid length. [ 526.491759][T27868] syzkaller0: entered promiscuous mode [ 526.501331][T27868] syzkaller0: entered allmulticast mode [ 526.547211][T27870] syzkaller0: entered promiscuous mode [ 526.552815][T27870] syzkaller0: entered allmulticast mode [ 526.561610][T27870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.569806][T27870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.381048][ T9160] vlan4: left allmulticast mode [ 537.386233][ T9160] geneve0: left allmulticast mode [ 537.391515][ T9160] vlan4: left promiscuous mode [ 537.397031][ T9160] geneve0: left promiscuous mode [ 537.402332][ T9160] bridge0: port 1(vlan4) entered disabled state [ 537.412931][ T9160] bridge_slave_1: left allmulticast mode [ 537.419871][ T9160] bridge_slave_1: left promiscuous mode [ 537.425563][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.448117][ T9160] tipc: Resetting bearer [ 537.495276][ T9160] tipc: Disabling bearer [ 537.541286][ T9160] erspan0 (unregistering): left promiscuous mode [ 537.555039][ T9160] gretap0 (unregistering): left promiscuous mode [ 537.641276][ T9160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.651222][ T9160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.670507][ T9160] bond0 (unregistering): (slave »»»»»»): Releasing backup interface [ 537.679613][ T9160] bond0 (unregistering): Released all slaves [ 537.690093][ T9160] bond1 (unregistering): Released all slaves [ 537.702734][ T9160] bond2 (unregistering): Released all slaves [ 537.714704][ T9160] bond3 (unregistering): Released all slaves [ 537.730163][ T9160] bond4 (unregistering): Released all slaves [ 537.792900][ T9160] tipc: Disabling bearer [ 537.798414][ T9160] tipc: Left network mode [ 537.814495][ T9160] IPVS: stopping backup sync thread 15574 ... [ 538.259137][ T9160] hsr_slave_0: left promiscuous mode [ 538.264980][ T9160] hsr_slave_1: left promiscuous mode [ 538.270687][ T9160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.278061][ T9160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.286096][ T9160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.293471][ T9160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.310391][ T9160] veth1_macvtap: left promiscuous mode [ 538.316348][ T9160] veth0_macvtap: left promiscuous mode [ 538.321859][ T9160] veth0_vlan: left promiscuous mode [ 538.393298][ T9160] team0 (unregistering): Port device team_slave_1 removed [ 538.403633][ T9160] team0 (unregistering): Port device team_slave_0 removed [ 538.751674][ T9160] IPVS: stop unused estimator thread 0... [ 546.126971][T27894] __nla_validate_parse: 20 callbacks suppressed [ 546.126988][T27894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5782'. [ 546.170442][T27894] mac80211_hwsim hwsim69 syzkaller1: entered promiscuous mode [ 546.185755][T27894] mac80211_hwsim hwsim69 syzkaller1: entered allmulticast mode [ 546.229861][T27900] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 546.247114][ T9160] bond7: (slave batadv0): link status up again after 0 ms [ 546.253465][T27904] vxcan4: entered allmulticast mode [ 546.287698][ T9150] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.294844][ T9150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.335568][T27911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5788'. [ 546.356016][ T9160] bond7: (slave batadv0): link status up again after 0 ms [ 546.473407][ T9136] bond7: (slave batadv0): link status up again after 0 ms [ 546.481251][ T9136] bond7: (slave batadv0): failed to get link speed/duplex [ 546.490526][T27920] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5790'. [ 546.572824][ T9136] bond7: (slave batadv0): failed to get link speed/duplex [ 546.593382][T27930] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.5792'. [ 546.650958][T27935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5793'. [ 546.669027][T27935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5793'. [ 546.688036][T27935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5793'. [ 546.697340][T27935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5793'. [ 546.748887][ T9160] bond7: (slave batadv0): failed to get link speed/duplex [ 546.774440][T27941] lo speed is unknown, defaulting to 1000 [ 546.906026][ T9136] bond7: (slave batadv0): failed to get link speed/duplex [ 546.962760][T27962] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5799'. [ 546.972326][T27942] lo speed is unknown, defaulting to 1000 [ 547.026387][ T9136] bond7: (slave batadv0): failed to get link speed/duplex [ 547.076708][T27964] netlink: 'syz.2.5800': attribute type 1 has an invalid length. [ 547.087524][T27964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5800'. [ 547.121243][ T9150] bond7: (slave batadv0): failed to get link speed/duplex [ 547.537697][T27997] lo speed is unknown, defaulting to 1000 [ 547.756661][T28014] tipc: Enabling of bearer rejected, failed to enable media [ 547.934183][T28022] syzkaller0: entered promiscuous mode [ 547.940661][T28022] syzkaller0: entered allmulticast mode [ 547.966394][T27999] tipc: Enabled bearer , priority 0 [ 548.033892][T27998] tipc: Resetting bearer [ 548.050497][T27998] tipc: Disabling bearer [ 548.286434][T28036] vlan1: entered promiscuous mode [ 548.306184][T28036] gretap0: entered promiscuous mode [ 548.590152][T28062] netlink: 'syz.0.5823': attribute type 1 has an invalid length. [ 548.598082][T28062] netlink: 'syz.0.5823': attribute type 2 has an invalid length. [ 548.607543][T28062] xt_hashlimit: size too large, truncated to 1048576 [ 548.704240][T28060] syzkaller0: entered promiscuous mode [ 548.709739][T28060] syzkaller0: entered allmulticast mode [ 548.979173][T28077] netlink: 'syz.0.5827': attribute type 89 has an invalid length. [ 549.003169][T28077] netlink: 'syz.0.5827': attribute type 1 has an invalid length. [ 549.503465][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 549.515237][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 549.522861][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 549.532142][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 549.539997][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 549.601790][T20433] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 549.609173][T20433] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 549.617877][T20433] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 549.625629][T20433] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 549.636152][T20433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.103388][T28111] lo speed is unknown, defaulting to 1000 [ 550.328530][T28114] lo speed is unknown, defaulting to 1000 [ 550.696095][ T9160] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.705719][ T9160] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.769601][ T9160] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.790407][ T9160] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.821264][ T9160] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.829619][ T9160] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.838049][ T9160] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.846385][ T9160] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.904378][T28171] syzkaller0: entered promiscuous mode [ 550.909864][T28171] syzkaller0: entered allmulticast mode [ 550.915540][T28173] netlink: 'syz.2.5852': attribute type 1 has an invalid length. [ 550.937025][ T9136] bridge0: left allmulticast mode [ 550.942166][ T9136] pimreg: left allmulticast mode [ 550.981959][ T9136] gretap0 (unregistering): left allmulticast mode [ 550.994136][ T9136] gretap0 (unregistering): left promiscuous mode [ 551.010535][ T9136] bond2 (unregistering): (slave gretap1): Releasing active interface [ 551.050528][ T9136] team0: Port device bridge5 removed [ 551.082171][ T9136] bond1 (unregistering): Released all slaves [ 551.092193][ T9136] bond2 (unregistering): Released all slaves [ 551.114261][ T9136] bond3 (unregistering): (slave veth3): Releasing backup interface [ 551.128808][ T9136] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 551.138820][ T9136] bond3 (unregistering): Released all slaves [ 551.148408][ T9136] bond4 (unregistering): (slave veth5): Releasing backup interface [ 551.156832][ T9136] bond4 (unregistering): Released all slaves [ 551.165711][ T9136] bond5 (unregistering): Released all slaves [ 551.175561][ T9136] bond6 (unregistering): Released all slaves [ 551.184374][ T9136] bond0 (unregistering): Released all slaves [ 551.193193][ T9136] bond7 (unregistering): Released all slaves [ 551.202612][ T9136] bond8 (unregistering): (slave veth15): Releasing active interface [ 551.221274][ T9136] bond8 (unregistering): Released all slaves [ 551.365517][T28173] bond8: entered promiscuous mode [ 551.370835][T28173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 551.413182][T28175] 8021q: adding VLAN 0 to HW filter on device bond8 [ 551.430819][T28175] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 551.442973][T28175] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 551.455244][T28175] bond8: (slave ip6gre2): making interface the new active one [ 551.463286][T28175] ip6gre2: entered promiscuous mode [ 551.469913][T28175] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 551.486835][ T9136] : left promiscuous mode [ 551.528185][ T9160] net_ratelimit: 18 callbacks suppressed [ 551.528201][ T9160] bond7: (slave batadv0): failed to get link speed/duplex [ 551.696202][ T50] Bluetooth: hci4: command tx timeout [ 551.820494][T28114] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.828260][T28114] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.835612][T28114] bridge_slave_0: entered allmulticast mode [ 551.842469][T28114] bridge_slave_0: entered promiscuous mode [ 551.863453][T28114] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.870602][T28114] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.877771][T28114] bridge_slave_1: entered allmulticast mode [ 551.884681][T28114] bridge_slave_1: entered promiscuous mode [ 551.907027][T28114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.916612][ T9165] bond7: (slave batadv0): failed to get link speed/duplex [ 551.940964][T28114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.998350][T28114] team0: Port device team_slave_0 added [ 552.004926][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 552.015181][T28114] team0: Port device team_slave_1 added [ 552.048696][T28114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.055659][T28114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.117650][T28114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.129413][T28114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.136358][T28114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.162232][T28114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.211418][T28114] hsr_slave_0: entered promiscuous mode [ 552.217809][T28114] hsr_slave_1: entered promiscuous mode [ 552.223809][T28114] debugfs: 'hsr0' already exists in 'hsr' [ 552.229532][T28114] Cannot create hsr debugfs directory [ 552.305174][ T9150] bond7: (slave batadv0): failed to get link speed/duplex [ 552.314936][ T9136] 5nè‹Ò: left promiscuous mode [ 552.357469][ T9136] tipc: Disabling bearer [ 552.363325][ T9136] tipc: Left network mode [ 552.426105][ T9160] bond7: (slave batadv0): failed to get link speed/duplex [ 552.566270][ T9160] bond7: (slave batadv0): failed to get link speed/duplex [ 552.630262][T28223] syzkaller1: entered promiscuous mode [ 552.635725][T28223] syzkaller1: entered allmulticast mode [ 552.782582][T28224] syzkaller1: left promiscuous mode [ 552.788272][T28224] syzkaller1: left allmulticast mode [ 552.892285][ T9160] bond7: (slave batadv0): failed to get link speed/duplex [ 553.006232][ T9160] bond7: (slave batadv0): failed to get link speed/duplex [ 553.116181][ T9150] bond7: (slave batadv0): failed to get link speed/duplex [ 553.246008][ T9165] bond7: (slave batadv0): failed to get link speed/duplex [ 553.356094][ T9160] bond7: (slave batadv0): failed to get link speed/duplex [ 553.513270][ T9136] hsr_slave_0: left promiscuous mode [ 553.518969][ T9136] hsr_slave_1: left promiscuous mode [ 553.630594][ T9150] smc: removing ib device syz1 [ 553.644574][ T9150] smbdirect: ib_dev[syz1] removed [ 553.807513][ T50] Bluetooth: hci4: command tx timeout [ 554.333924][T28178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.334363][ T9136] IPVS: stop unused estimator thread 0... [ 554.358589][T28221] netlink: 'syz.3.5856': attribute type 1 has an invalid length. [ 554.389699][T28221] netlink: 'syz.3.5856': attribute type 1 has an invalid length. [ 554.402432][T28114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.453560][T28114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.478499][T28114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.504276][T28114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.525347][T28228] tipc: Enabled bearer , priority 0 [ 554.539425][T28114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.555736][T28114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.575983][T28114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.603677][T28114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 554.627153][T28241] syzkaller0: entered promiscuous mode [ 554.644863][T28241] syzkaller0: entered allmulticast mode [ 554.688811][T28241] tipc: Resetting bearer [ 554.719357][T28255] netlink: 'syz.3.5862': attribute type 2 has an invalid length. [ 554.744798][T28226] tipc: Resetting bearer [ 554.755882][T28226] tipc: Disabling bearer [ 554.795345][T28231] sctp: [Deprecated]: syz.2.5858 (pid 28231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.795345][T28231] Use struct sctp_sack_info instead [ 554.917740][T28114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.989884][T28114] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.013365][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.020481][ T9165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.101478][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.108587][ T9136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.129109][T28283] __nla_validate_parse: 16 callbacks suppressed [ 555.129125][T28283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5867'. [ 555.188154][T28283] 8021q: adding VLAN 0 to HW filter on device bond10 [ 555.238989][T28282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5868'. [ 555.299207][T28283] macvlan4: entered promiscuous mode [ 555.314627][T28283] macvlan4: entered allmulticast mode [ 555.321014][T28283] bond10: entered promiscuous mode [ 555.345727][T28283] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 555.376259][T28283] bond10: left promiscuous mode [ 555.832751][T28114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.856577][ T50] Bluetooth: hci4: command tx timeout [ 555.926699][T28114] veth0_vlan: entered promiscuous mode [ 555.959939][T28114] veth1_vlan: entered promiscuous mode [ 555.989854][T28355] netlink: 'syz.3.5875': attribute type 5 has an invalid length. [ 556.003494][T28114] veth0_macvtap: entered promiscuous mode [ 556.024991][T28114] veth1_macvtap: entered promiscuous mode [ 556.051232][T28114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.087286][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5878'. [ 556.088364][T28114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.168986][ T9150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.204585][ T9150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.231952][ T9150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.305178][ T9150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.355668][T28377] netlink: 452 bytes leftover after parsing attributes in process `syz.4.5882'. [ 556.368150][T28375] netlink: 'syz.1.5881': attribute type 1 has an invalid length. [ 556.401641][T28377] batadv_slave_0: Caught tx_queue_len zero misconfig [ 556.423369][T28375] gretap0: entered allmulticast mode [ 556.451276][T28375] bond6: (slave gretap0): making interface the new active one [ 556.470770][T28375] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 556.482668][T28388] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 556.542489][ T9150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.575852][ T9150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.636207][ T9165] net_ratelimit: 12 callbacks suppressed [ 556.636225][ T9165] bond7: (slave batadv0): failed to get link speed/duplex [ 556.720657][ T9160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.745207][ T9160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.797332][ T9146] bond7: (slave batadv0): failed to get link speed/duplex [ 556.913574][T28409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5887'. [ 556.926270][ T9136] bond7: (slave batadv0): failed to get link speed/duplex [ 557.068079][ T9146] bond7: (slave batadv0): failed to get link speed/duplex [ 557.196016][ T9146] bond7: (slave batadv0): failed to get link speed/duplex [ 557.225262][T28405] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 557.306219][ T9140] bond7: (slave batadv0): failed to get link speed/duplex [ 557.435968][ T9140] bond7: (slave batadv0): failed to get link speed/duplex [ 557.452385][T20433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.460535][T20433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.468361][T20433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.477363][T20433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.485305][T20433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.557858][ T9136] bond7: (slave batadv0): failed to get link speed/duplex [ 557.926921][T20433] Bluetooth: hci4: command tx timeout [ 558.307450][ T9150] bond7: (slave batadv0): failed to get link speed/duplex [ 558.426773][ T9146] bond7: (slave batadv0): failed to get link speed/duplex [ 558.633033][T28432] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.640254][T28432] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.647658][T28432] bridge_slave_0: entered allmulticast mode [ 558.655055][T28432] bridge_slave_0: entered promiscuous mode [ 558.662737][T28432] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.670293][T28432] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.677626][T28432] bridge_slave_1: entered allmulticast mode [ 558.684424][T28432] bridge_slave_1: entered promiscuous mode [ 558.707739][T28432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.719001][T28432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.745669][T28432] team0: Port device team_slave_0 added [ 558.753862][T28432] team0: Port device team_slave_1 added [ 558.774538][T28432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.781688][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.808027][T28432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.819958][T28432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.827064][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.854017][T28432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.890727][T28432] hsr_slave_0: entered promiscuous mode [ 558.897030][T28432] hsr_slave_1: entered promiscuous mode [ 558.903058][T28432] debugfs: 'hsr0' already exists in 'hsr' [ 558.909210][T28432] Cannot create hsr debugfs directory [ 558.985482][T28432] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.028777][T28432] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.069923][T28432] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.119411][T28432] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.526041][T20433] Bluetooth: hci1: command tx timeout [ 559.896738][T28419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 559.915049][T28432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 559.946129][T28456] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5895'. [ 559.966066][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.973848][T28457] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5895'. [ 559.988186][T28432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 560.001267][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 560.023817][T28432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 560.048942][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 560.065479][T28432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 560.088314][T28432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 560.202597][T28479] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.209973][T28479] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.225668][ T9150] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 560.280501][T28479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.292424][T28479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.339621][ T9150] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.355640][ T9150] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.367636][ T9150] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.378411][ T9150] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.380698][T28487] netlink: 'syz.0.5902': attribute type 10 has an invalid length. [ 561.606026][T20433] Bluetooth: hci1: command tx timeout [ 563.064796][T28464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.240287][T28509] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.250347][T28509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.261293][T28509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.271540][T28509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.283116][T28509] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.295306][T28513] xt_hashlimit: overflow, rate too high: 0 [ 563.304607][T28509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.313642][T28509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.313717][T28513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5907'. [ 563.345812][T28432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.356745][T28518] netlink: 'syz.4.5908': attribute type 1 has an invalid length. [ 563.369921][T28518] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5908'. [ 563.385421][T28432] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.398620][T28511] netlink: 'syz.4.5908': attribute type 10 has an invalid length. [ 563.407167][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.414244][ T9165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.427749][ T9146] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.434842][ T9146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.726404][T20433] Bluetooth: hci1: command tx timeout [ 563.784609][T28553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5916'. [ 563.892900][T28432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.919551][T28432] veth0_vlan: entered promiscuous mode [ 563.928217][T28432] veth1_vlan: entered promiscuous mode [ 563.972265][T28432] veth0_macvtap: entered promiscuous mode [ 563.980295][T28432] veth1_macvtap: entered promiscuous mode [ 563.992779][T28432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.003718][T28432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.014452][ T9146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.023328][ T9146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.032458][ T9146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.041169][ T9146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.210627][T20433] block nbd6: Receive control failed (result -32) [ 564.217393][ T50] block nbd6: Receive control failed (result -32) [ 564.242598][ T9150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.264092][ T9150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.288935][ T9165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.301109][ T9165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.342339][T28569] bond9: option resend_igmp: invalid value (18446744072837136639) [ 564.350415][T28569] bond9: option resend_igmp: allowed values 0 - 255 [ 564.358551][T28569] bond9 (unregistering): Released all slaves [ 564.379590][T28572] gtp0: entered promiscuous mode [ 564.386381][T28572] gtp0: entered allmulticast mode [ 564.393112][T28572] team0: Device gtp0 is of different type [ 565.355577][T28601] syzkaller0: entered promiscuous mode [ 565.361604][T28601] syzkaller0: entered allmulticast mode [ 565.400182][T28608] syzkaller0: entered promiscuous mode [ 565.405703][T28608] syzkaller0: entered allmulticast mode [ 565.570804][T28627] ip6gre1: entered promiscuous mode [ 565.576647][T28627] ip6gre1: entered allmulticast mode [ 565.672312][T28630] netlink: 'syz.1.5937': attribute type 1 has an invalid length. [ 565.703066][T28630] 8021q: adding VLAN 0 to HW filter on device bond7 [ 565.718900][T28630] vlan3: entered allmulticast mode [ 565.724372][T28630] bond7: entered allmulticast mode [ 565.741652][T28630] bond7: (slave geneve4): making interface the new active one [ 565.749441][T28630] geneve4: entered allmulticast mode [ 565.756391][T28630] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 565.765255][ T9150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.778624][ T50] Bluetooth: hci1: command tx timeout [ 565.809397][ T9150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.836712][ T9150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.860632][ T9150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.906991][T28642] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 566.013109][T28640] Cannot find del_set index 0 as target [ 566.692215][T20433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.699709][T20433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.708558][T20433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.717488][T20433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.726898][T20433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.205340][T28680] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.213191][T28680] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.220556][T28680] bridge_slave_0: entered allmulticast mode [ 567.227651][T28680] bridge_slave_0: entered promiscuous mode [ 567.235332][T28680] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.242692][T28680] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.251030][T28680] bridge_slave_1: entered allmulticast mode [ 567.258031][T28680] bridge_slave_1: entered promiscuous mode [ 567.281215][T28680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.292684][T28680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.317340][T28680] team0: Port device team_slave_0 added [ 567.325638][T28680] team0: Port device team_slave_1 added [ 567.345851][T28680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.353761][T28680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.380099][T28680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.392575][T28680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.399884][T28680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.426632][T28680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.464787][T28680] hsr_slave_0: entered promiscuous mode [ 567.471190][T28680] hsr_slave_1: entered promiscuous mode [ 567.477307][T28680] debugfs: 'hsr0' already exists in 'hsr' [ 567.483044][T28680] Cannot create hsr debugfs directory [ 567.547925][T28701] ipvlan1: entered promiscuous mode [ 567.553753][T28701] ipvlan1: left promiscuous mode [ 568.381289][T28707] __nla_validate_parse: 8 callbacks suppressed [ 568.381308][T28707] netlink: 207 bytes leftover after parsing attributes in process `syz.3.5952'. [ 568.397518][T28707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5952'. [ 568.407390][T28707] netlink: 'syz.3.5952': attribute type 2 has an invalid length. [ 568.415131][T28707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5952'. [ 568.528458][T28709] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5953'. [ 568.806658][T20433] Bluetooth: hci5: command tx timeout [ 568.924003][T28652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.938648][T28680] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 568.973702][T28680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.002374][T28680] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 569.037398][T28680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.049869][T28680] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 569.075059][T28680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.077307][T28741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5962'. [ 569.088965][T28680] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 569.101669][T28680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.110288][T28739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5960'. [ 573.524198][T20433] Bluetooth: hci5: command tx timeout [ 574.395892][ C0] sched: DL replenish lagged too much [ 576.935315][T20433] Bluetooth: hci5: command tx timeout [ 580.248757][ T50] Bluetooth: hci5: command tx timeout [ 674.715849][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 674.722822][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28754/1:b..l [ 674.730831][ C0] rcu: (detected by 0, t=10503 jiffies, g=116701, q=3775 ncpus=2) [ 674.738741][ C0] task:syz.2.5965 state:R running task stack:26712 pid:28754 tgid:28753 ppid:17694 task_flags:0x400140 flags:0x00080002 [ 674.752243][ C0] Call Trace: [ 674.755537][ C0] [ 674.758477][ C0] __schedule+0x17d9/0x56c0 [ 674.763010][ C0] ? __pfx___bpf_strtoull+0x10/0x10 [ 674.768223][ C0] ? __pfx___schedule+0x10/0x10 [ 674.773086][ C0] ? rcu_is_watching+0x15/0xb0 [ 674.777858][ C0] preempt_schedule_irq+0x4d/0xa0 [ 674.782896][ C0] irqentry_exit+0x14f/0x8f0 [ 674.787495][ C0] ? trace_irq_disable+0x3b/0x140 [ 674.792537][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.798523][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x17/0x90 [ 674.804898][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 18 48 74 11 65 8b 0d 39 48 74 11 <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 17 00 00 [ 674.824516][ C0] RSP: 0018:ffffc90003d97ac0 EFLAGS: 00000246 [ 674.830596][ C0] RAX: ffffffff89785691 RBX: 000000000000000e RCX: 0000000080000000 [ 674.838578][ C0] RDX: ffff88802d0b1f00 RSI: 000000000000000e RDI: 000000000000000e [ 674.846557][ C0] RBP: 000000000000000e R08: ffff88802d0b1f00 R09: 0000000000000002 [ 674.854545][ C0] R10: 0000000000000010 R11: 0000000000000002 R12: dffffc0000000000 [ 674.862523][ C0] R13: 1ffff920007b2f84 R14: ffffc90003d97c22 R15: 000000000000000e [ 674.870512][ C0] ? bpf_flow_dissect+0x3d1/0x730 [ 674.875676][ C0] bpf_flow_dissect+0x3d1/0x730 [ 674.880544][ C0] bpf_prog_test_run_flow_dissector+0x3a4/0x610 [ 674.886868][ C0] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 674.893651][ C0] ? rcu_is_watching+0x15/0xb0 [ 674.898454][ C0] ? __fget_files+0x2a/0x420 [ 674.903061][ C0] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 674.909837][ C0] bpf_prog_test_run+0x2c5/0x340 [ 674.914820][ C0] __sys_bpf+0x643/0x950 [ 674.919166][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 674.923951][ C0] ? rcu_is_watching+0x15/0xb0 [ 674.928727][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.934891][ C0] __x64_sys_bpf+0x7c/0x90 [ 674.939319][ C0] do_syscall_64+0x174/0x580 [ 674.943950][ C0] ? trace_irq_disable+0x3b/0x140 [ 674.949079][ C0] ? clear_bhb_loop+0x40/0x90 [ 674.953802][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.959709][ C0] RIP: 0033:0x7f6ac9b9ce59 [ 674.964139][ C0] RSP: 002b:00007f6acaa33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 674.972571][ C0] RAX: ffffffffffffffda RBX: 00007f6ac9e15fa0 RCX: 00007f6ac9b9ce59 [ 674.980564][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 674.988546][ C0] RBP: 00007f6ac9c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 674.996525][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.004600][ C0] R13: 00007f6ac9e16038 R14: 00007f6ac9e15fa0 R15: 00007ffc9f34be38 [ 675.012595][ C0] [ 675.015720][ C0] rcu: rcu_preempt kthread starved for 3623 jiffies! g116701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 675.026920][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 675.036897][ C0] rcu: RCU grace-period kthread stack dump: [ 675.042799][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 675.056335][ C0] Call Trace: [ 675.059636][ C0] [ 675.062573][ C0] __schedule+0x17d9/0x56c0 [ 675.067099][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.071911][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.076701][ C0] ? __pfx___schedule+0x10/0x10 [ 675.081577][ C0] ? schedule+0x90/0x360 [ 675.085856][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.090633][ C0] ? lock_release+0x4b/0x3c0 [ 675.095246][ C0] schedule+0x164/0x360 [ 675.099412][ C0] schedule_timeout+0x152/0x2c0 [ 675.104352][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 675.109744][ C0] ? __pfx_process_timeout+0x10/0x10 [ 675.115045][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 675.120868][ C0] ? prepare_to_swait_event+0x322/0x350 [ 675.126428][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 675.131311][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 675.137477][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 675.142779][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 675.147992][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 675.152601][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 675.157811][ C0] ? __kthread_parkme+0x71/0x1f0 [ 675.162765][ C0] ? __kthread_parkme+0x196/0x1f0 [ 675.167814][ C0] kthread+0x388/0x470 [ 675.171894][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 675.177100][ C0] ? __pfx_kthread+0x10/0x10 [ 675.181689][ C0] ret_from_fork+0x514/0xb70 [ 675.186315][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 675.191454][ C0] ? __switch_to+0xc89/0x1420 [ 675.196145][ C0] ? __pfx_kthread+0x10/0x10 [ 675.200741][ C0] ret_from_fork_asm+0x1a/0x30 [ 675.205528][ C0] [ 675.209505][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 675.215844][ C0] CPU: 0 UID: 0 PID: 9165 Comm: kworker/u8:53 Not tainted syzkaller #0 PREEMPT(full) [ 675.225400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.235463][ C0] Workqueue: bat_events batadv_tt_purge [ 675.241242][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x70 [ 675.247411][ C0] Code: f8 16 00 00 83 fa 02 75 21 48 8b 91 00 17 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 675.267032][ C0] RSP: 0018:ffffc90000007090 EFLAGS: 00000246 [ 675.273132][ C0] RAX: ffffffff8a553f99 RBX: ffff88807d7eba00 RCX: ffff88807c5f9f00 [ 675.281109][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 675.289086][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 675.297070][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: dffffc0000000000 [ 675.305048][ C0] R13: ffff88807d7eba20 R14: ffffffff8a553ead R15: ffff888029630000 [ 675.313026][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 675.321966][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.328545][ C0] CR2: 000055556e7d44e8 CR3: 000000000e746000 CR4: 00000000003526f0 [ 675.336507][ C0] Call Trace: [ 675.339773][ C0] [ 675.342628][ C0] ip6_mtu+0x169/0x490 [ 675.346785][ C0] ip6_finish_output+0x134/0x480 [ 675.351736][ C0] ? ip6_output+0x11e/0x540 [ 675.356231][ C0] ip6_output+0x337/0x540 [ 675.360545][ C0] synproxy_send_tcp_ipv6+0x549/0x700 [ 675.366060][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 675.371969][ C0] ? synproxy_send_client_synack_ipv6+0x357/0xcd0 [ 675.378394][ C0] synproxy_send_client_synack_ipv6+0x83f/0xcd0 [ 675.384631][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 675.391380][ C0] ? synproxy_pernet+0x45/0x270 [ 675.396340][ C0] nft_synproxy_eval_v6+0x37b/0x530 [ 675.401530][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 675.407236][ C0] ? nf_ip_checksum+0x13c/0x510 [ 675.412155][ C0] nft_synproxy_do_eval+0x3d1/0x550 [ 675.417349][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 675.423081][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.427866][ C0] nft_do_chain+0x48d/0x1b10 [ 675.432817][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 675.437766][ C0] ? trace_irq_enable+0x3b/0x140 [ 675.442708][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 675.447738][ C0] nft_do_chain_inet+0x360/0x4b0 [ 675.452720][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 675.458182][ C0] ? nf_nat_ipv6_local_in+0x157/0x660 [ 675.463651][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 675.469376][ C0] ? NF_HOOK+0x9e/0x3c0 [ 675.473861][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.478631][ C0] ? lock_acquire+0x5f/0x350 [ 675.484176][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 675.490150][ C0] nf_hook_slow+0xc5/0x220 [ 675.494832][ C0] NF_HOOK+0x21f/0x3c0 [ 675.498895][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 675.504277][ C0] ? NF_HOOK+0x9e/0x3c0 [ 675.509117][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 675.513695][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.518458][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 675.523846][ C0] ? rcu_is_watching+0x15/0xb0 [ 675.528630][ C0] ip6_input+0x16a/0x270 [ 675.532891][ C0] ? ip6_input+0x23/0x270 [ 675.537359][ C0] NF_HOOK+0x336/0x3c0 [ 675.541448][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 675.546636][ C0] ? NF_HOOK+0x9e/0x3c0 [ 675.550784][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 675.555385][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 675.560574][ C0] process_backlog+0x774/0x1860 [ 675.565485][ C0] ? process_backlog+0x3c3/0x1860 [ 675.570509][ C0] __napi_poll+0xaa/0x330 [ 675.574825][ C0] net_rx_action+0x61d/0xf50 [ 675.579413][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 675.584537][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 675.589725][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 675.595008][ C0] handle_softirqs+0x225/0x840 [ 675.599789][ C0] ? do_softirq+0x76/0xd0 [ 675.604105][ C0] ? batadv_tt_purge+0x4ae/0xa10 [ 675.609029][ C0] do_softirq+0x76/0xd0 [ 675.613171][ C0] [ 675.616087][ C0] [ 675.619003][ C0] __local_bh_enable_ip+0xf8/0x130 [ 675.624100][ C0] batadv_tt_purge+0x4ae/0xa10 [ 675.628864][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 675.634582][ C0] process_scheduled_works+0xa8e/0x14e0 [ 675.642195][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 675.648200][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 675.653237][ C0] ? assign_work+0x3cf/0x5d0 [ 675.657819][ C0] worker_thread+0xa47/0xfb0 [ 675.662425][ C0] ? __kthread_parkme+0x71/0x1f0 [ 675.667374][ C0] kthread+0x388/0x470 [ 675.671452][ C0] ? __pfx_worker_thread+0x10/0x10 [ 675.676560][ C0] ? __pfx_kthread+0x10/0x10 [ 675.681163][ C0] ret_from_fork+0x514/0xb70 [ 675.685747][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 675.690932][ C0] ? __switch_to+0xc89/0x1420 [ 675.695603][ C0] ? __pfx_kthread+0x10/0x10 [ 675.700199][ C0] ret_from_fork_asm+0x1a/0x30 [ 675.704978][ C0]