last executing test programs: 44.787427952s ago: executing program 4 (id=359): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2a, 0x2, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x80007, 0xc) (async) splice(r1, 0x0, r0, 0x0, 0x80007, 0xc) r8 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x7}, 0x4) (async) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x7}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) (async) write(r9, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 41.931887746s ago: executing program 0 (id=393): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ipvlan0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) sendto(r0, 0x0, 0x300, 0x68ec, &(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x8}, 0x80) 41.77532474s ago: executing program 0 (id=396): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a140200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a77007a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000002a235fb000000a20000208000c400400008914"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) socket(0x10, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x37, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97a9", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) sendmmsg(r4, &(0x7f0000000b40)=[{{&(0x7f00000002c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)="d98fe2ed4204b918b4ed8c3d4d7b762c64c435bbaf1514a11be0394759022da746ef5ec5dd9e09db0c5b789ef1", 0x2d}, {&(0x7f0000000440)="e357278dc9ed79bb5b14de9d71693678f005c772a9fc9f8057d142b841", 0x1d}, {&(0x7f0000000480)="cfea04809ca6ad18a9994d39061091f2cb1bee0518596dd67cebdddbe8dffd7eca6014d1edaddacf2c2fd26f8c031ea9af3ef9e7dd1a53fff0cbe45163ac6be652507805e27d85e682a25e6c05129d6a5baf8d114628541bd2d11b84673fbf0f2778c352041ee82aa4b58812cd755fdf7e7e4df29e4130dbbf2ecca696d6b9a9f7ebee0ac59edde27cd0c956e69f06a462", 0x91}], 0x3, &(0x7f0000000780)=[{0xb0, 0x107, 0x8, "155b331c417308080644e3446f4e5830fb27fa5f1dcda305e4335c003810b86329670c93c63381f657a88577815b2c5926453d6c9cd92004d725b3a4807734985eb1f6eeadb70a0dfa951a5256f8c278a523d7eb7c372b1e66c593b66180372b16c3feceb7d706dfac986e123ecd37b9ac80a45ee454e94c55dacc25ee63b2af6f38035e78882816c5e987091bec69da08e917caf330e0a4460f"}, {0x58, 0xff, 0x5, "7ca2db5274aa80fb842d4060f1da50f551f6ced8471c06018843e5528fef0d4a4575a96720d9c8440dad82a58aa1586b68a4f2fddfea6c3a91a43cfd2ff29cfd22b8"}, {0xc8, 0x108, 0x15, "99d84384b07d2f1c2bb46bc9addde231201bf341594f51d21db2e872cc3254605436e8e9859fa64c19ed0d7f988fa9a8f9d5fc0db30a3a677e565d72bb70d868d982a651f3fc52720ba02e05e0fc996e70f5e548e4925878cc5a750eab3e0525f2a98375b10f778a699c97bf7c5d874df3719c75b77d93a3880969a14e7b59ef52e0bbf9dcc0f86185fa508b49ade51044da1a9469feed70bb056c4865e056b6276223562732f2d24400a70dd444f8ec403f57bc1d595fa1"}], 0x1d0}}, {{&(0x7f0000000980)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="c57ef3f1c0c55575ee9d7cf1f0b5543b8e5477455a0bfb505dcf173e9cc5a620f68d7f2454026c3d5652cccd0b1a3ea91da85aa6df3195e4ffd3a300ef934203aaab5490300912de26023563b2be892070db4a483ee1ae2c3a6aae6a23a4393650b28b427bd81888ec086dca4a02a200dbf4f86f282746c89b4ee3e5fa964afdf4497519cf54c88c6cf0d1dfcf42d4f614a5e7a1fbf0a5d39ebfb103dffbadd703a9c0993942341c8c7eb7535acfd9eaf0ef7885", 0xb4}], 0x1, &(0x7f0000000b00)}}], 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000f80)}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x585c, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ldst={0x0, 0x2, 0x6, 0x0, 0xa, 0x40, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x109}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000cc0)='GPL\x00', 0x9, 0x8a, &(0x7f0000000d00)=""/138, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x135ec, 0xffffffffffffffff, 0x5, &(0x7f0000000e00)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x4, 0x5, 0x9, 0x5}, {0x0, 0x2, 0x3, 0xc}, {0x3, 0x3, 0xe}, {0x1, 0x2, 0x5, 0x6}, {0x5, 0x2, 0x7, 0x2}], 0x10, 0x8}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r8}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180), 0x8) 41.62894371s ago: executing program 4 (id=398): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x10140) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000240)=r2, 0x4) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x201}, 0x3e8) 41.529270739s ago: executing program 4 (id=400): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xc000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x1ffc8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x2a7}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xa}]}}]}, 0x40}}, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 41.528798507s ago: executing program 1 (id=401): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0xfffffffffffffe10, 0x0}}, 0x10) 41.384786044s ago: executing program 0 (id=403): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000009010200000000000000000500000200000480000001"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20002005) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xa62c, 0x0, 0xffffffffffffffff, 0x9d}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000b80)="c0ff07000035b921000000000000", 0x0, 0xe02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 41.313306089s ago: executing program 1 (id=404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000140)="9cb9f7d812b13ef44635943922e0", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) (async) r4 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x8}, {0x6, 0xfc}]}) (async, rerun: 32) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$PPPIOCSDEBUG(r6, 0x40047440, &(0x7f0000000280)=0x8000fff) (async) write$ppp(r5, &(0x7f0000000640)="00f3c210226eb1", 0x7) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) (async, rerun: 32) listen(r8, 0x50) (async, rerun: 32) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async, rerun: 64) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) (async, rerun: 64) listen(r9, 0x50) listen(r9, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfffc}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) 41.305646482s ago: executing program 3 (id=405): syz_emit_ethernet(0xce, &(0x7f0000000780)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2a, 0x0, {0x29, 0x4, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2d, 0x2, [{0x0, 0x10, "075624f507536e0769bee4e63024"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x47, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x1, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x10, "ccf0294e2a3bdb4aa40b249e8e0c"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x9]}]}}}}}}}, 0x0) 41.241424277s ago: executing program 3 (id=406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000035000100fcff070004000000020000000800018004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff19}, [@alu={0x7, 0x0, 0x1, 0xa, 0x8, 0xb9d3923e4e2de454, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x4, 0x6, 0x6, 0x20}, @map_fd={0x18, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4}, @map_fd={0x18, 0xa}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0xdc, &(0x7f0000000180)=""/220, 0x0, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0xfffffe01}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000400)='./file0\x00', r2}, 0x18) close(0x3) r3 = socket$inet(0x2b, 0x801, 0x0) connect$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x16}, 0x8) close(0x3) 41.113984114s ago: executing program 0 (id=407): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(0xffffffffffffffff, 0x111, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x112, 0xe, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0xbc}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 41.082002321s ago: executing program 2 (id=408): r0 = socket(0x2a, 0x6, 0xde97) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3000830}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)={0x218, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbe8a}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x62, 0x3, "06a4f69546c51a7a138956fe21e3b63625964c3469c9a632357d97a18b3415146a0767e404ddcc576530e9acda83782a357b9a5b8e8c7ab36cfeaabd32caace723618d423432f198e15c9810b181679a8e087b357c3f1dd741cb2c2f99a3"}, @TIPC_NLA_NODE_ID={0xb, 0x3, "e78b20602055bb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe6c5}, @TIPC_NLA_NODE_ID={0xc9, 0x3, "bbeb08c7cf4e5bf90b495c1d3f16bd8f9f73a14dd2bebd3bd81b48383d7048a3d770ad5a8d4821b8b6a4afc3002cb329a3d30d65b397a37d2f699f70abab62c646107616e2a99f5614cb4b06b732fd0e7280ac9f7a297412ff30fa8d0f5ea769ea21a4da7ca8272baaf36b4ba9d3360ddb33cf6c82d6a0d69e637226e47b5a0e933f85292afd1f7e020a7a38f4bd527a9a1b83730df884709727a16f16bf179f7550c28e367c9c98169ad5f8f72a393f20cc386ece1ea0a07d067d9cbd9532a443e2832e18"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x8801}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000020000002d05504d33a24fe89f94d0095596f3121a194eaad29f91223b636df4f8100f142818bee8bba517974da5558b2e391f17e669360f98ae72b14c9ed2e000ff2629599ff7ac4fa3fc8de2b207ea2021aa0e038ab281ec7b66e4e25c0475fa2214186b86ecb98f71d70e8ea1a", @ANYRES32=r9, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000fcfffffffdffffff00"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000810000010000000007000000b7070000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x9, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xff1, &(0x7f0000002e00)=""/4081, 0x0, 0x44, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3ea70af41dfa1693c62d3510de33400"/32, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r12, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd700000000001010000001c000180060001000200000008000300ac1414370800060003000000"], 0x30}, 0x1, 0xff07}, 0x2000000) 41.063793982s ago: executing program 4 (id=409): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0x18c, 0x203, 0x4803, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x4d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0xffff, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {0xffff}, {}, {}, {0x2, 0xb8}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {0x3, 0x0, 0x0, 0x1}, {}, {0x2000}]}}, @common=@mh={{0x28}, {"e4bd"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 40.843321467s ago: executing program 0 (id=410): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340919128f5db36125c506203ad5c52a0611d0b97b6a01b300cac5718fc85b5ca56cabc6f6b8ff54fcdc7765c0a7c05ed66748ded1a4b362f5357262df3dafd299917bd0bb81c342fae79567abd0d5838ed75d31555b39a3d57decfb1cfa24e4bb22affbf095", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000978e6a2ae5e62d0e93f7fc62c2f5ca2abfe782ef25bc05ce18fa07bdd256c69512ebc0", @ANYRES16=r5, @ANYBLOB="040026bd7000fddbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x20008894) bind$inet(r7, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000800)=""/21, 0x15}], 0x2}}], 0x2, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b5c6e56", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYRES8=r6], 0xa8}, 0x1, 0x0, 0x0, 0x20000047}, 0x4000800) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 40.8420892s ago: executing program 3 (id=411): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (fail_nth: 8) 40.70487198s ago: executing program 4 (id=412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYRES8=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe00000020000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000"], 0x110) 40.6344703s ago: executing program 2 (id=413): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x22, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 40.481166453s ago: executing program 2 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f0000000140)=@ethtool_eeprom={0xc, 0x8, 0x201, 0x8a, "3f23beb9a5d895ea90516b34a52eefc343c111bab14b139b0928d5134ff4a782ff7a14e4f8e3938dfd5d94b065932eb6995f6cc4dc4f4502437aa4ccf71da4277d0ef6578e3d4008a4c23d001e7d66f563492979f589f612630bc6d02cc2935f8a554f84283005de2fe467db18ef0df2ea696096f5702f11cac247e48394cb5056bacdd0d7374e93e814"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000160a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a310000000008000740000000020c00054000000000000000040900020073797a32000000000900020073797a32000000002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {0x0, 0xe}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x5, 0x0, 0x0, {{0xf700}, {0x4, 0x5, 0x7, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 39.911934534s ago: executing program 1 (id=415): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000000c0)) (async) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x458}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x458}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)={0x4cc, r10, 0x4, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x48c, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x200}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b8cc96f6d25beebdb6d0ecd82e5b98433972572ee31e6c673083d9a37d65a8f5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e3682a87279b31bc13aa6c861accb5eb33f8e980154a63dfb243aed77e9d9b61"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @remote, 0x4f}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x108d}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2cf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x1fdb58a1e196fc8}, 0x40) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)={0x4cc, r10, 0x4, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x48c, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x200}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b8cc96f6d25beebdb6d0ecd82e5b98433972572ee31e6c673083d9a37d65a8f5"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e3682a87279b31bc13aa6c861accb5eb33f8e980154a63dfb243aed77e9d9b61"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @remote, 0x4f}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x108d}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2cf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x4}]}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x1fdb58a1e196fc8}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2006}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x17, 0x9, 0x70bd25, 0x25dfdc01, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 39.890368969s ago: executing program 3 (id=416): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0xffff, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4042849}, 0x20000000) (async) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async, rerun: 32) close(r7) (async, rerun: 64) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 64) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) close(r0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0xb, 0x6, 0x4237b322f54c2a4e, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}, @IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp0\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x800}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x67}, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvlan1\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) (async) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89, 0x48006}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 39.72423274s ago: executing program 4 (id=417): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40805880}, 0xc, &(0x7f0000001840)={&(0x7f00000006c0)={0x115c, 0x13, 0x420, 0x70bd2c, 0x25dfdbfc, {0x26, 0xe, 0xf3, 0x4, {0x4e23, 0x4e21, [0x10001, 0x0, 0x7, 0xc], [0x3d000000, 0x1, 0x4], 0x0, [0x0, 0xfffffffa]}, 0xb, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "961af0ae"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "0d4af96df26063b0d025f84c7b7e60e5a0a006395452342d31ad7394968a118c1463a85e6ea298f3b878a2c01175b6df070e2e6ede999e1abe800d2a482d16e63609"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "2b5d59e9aa8b5d882d0e77691316e86c7e9a0138af873b3eca8d07c388513143d1de1bcdc5027f1a39f8c69fad98ee7eb423b1f1518160b146bd2cc8ede53e9837f3bd1eab7f0d393230ba7d217d19e04a43ff87d75ba6a864daa26353f50ceeab8f051a90df5116059702491e52a8b4a7c225eeb276e58552ef16dc6bd98e0869007a52a46461e5c1ce335d5107913cb0c581bc0c3de7eb59e601a61ac847a5e41fa3ecee9a6d2e8c36f958222d713404591acc5a6eb0"}]}, 0x115c}, 0x1, 0x0, 0x0, 0x8c4}, 0x20004010) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r1], 0x40}}, 0x0) 39.688173508s ago: executing program 2 (id=418): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4d, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x13, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x13, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x3b000000}, '\x00\x00\x00'}}}}}}}, 0x0) 39.58074879s ago: executing program 2 (id=419): r0 = socket$kcm(0x2, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (fail_nth: 51) 39.499472523s ago: executing program 3 (id=420): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1304000, 0x1000}, 0x20) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) (fail_nth: 35) read$alg(r0, &(0x7f0000000000)=""/13, 0xd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) 39.442649587s ago: executing program 1 (id=421): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x7c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x98, 0x168, 0xfeffffff, 0x98, 0x98, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "83b0"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0xc40, @port=0x4e28}}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250100000008000300050000000800020006000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40050) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "c3337f35c92a8052a7109157aa0323d8d17b6f1d91d73a280e65bdd7ffb98859", 0x2, 0x10001, 0x4, 0x101}, 0x3c) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @rand_addr=0x64010101, 0xffffffffffffffff, "151d4e6e1d96ed15eb3e8e9683a419f41643e8642f7ac53b815a5fcf15a77fb3", 0x628, 0x9ede, 0x400, 0x1}, 0x3c) syz_emit_ethernet(0x150, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x37, 0x4, 0x0, 0x5, 0x142, 0x66, 0x0, 0x8, 0x2, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x1c, 0x63, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe1}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x1}, {@multicast1, 0x5}]}, @lsrr={0x83, 0x1f, 0xa4, [@local, @private=0xa010101, @private=0xa010100, @empty, @remote, @rand_addr=0x64010100, @local]}, @timestamp_addr={0x44, 0x44, 0xb7, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast1, 0x80}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x4}, {@broadcast, 0x7fff}, {@rand_addr=0x64010100, 0x57be}, {@empty, 0x1660}, {@dev={0xac, 0x14, 0x14, 0x24}}]}, @rr={0x7, 0xb, 0x85, [@broadcast, @local]}, @end, @timestamp={0x44, 0x24, 0x52, 0x0, 0xf, [0x3, 0x7f, 0x2, 0x8, 0xd, 0x7, 0x9, 0x7d]}, @timestamp={0x44, 0x18, 0xfa, 0x0, 0x9, [0x2, 0x200, 0x5, 0x2, 0xffffffff]}]}}, {0x16, 0x6, 0x0, @empty, "a81cf10f92eb71c479e8be425f6e7b2d49a4f5927d637b43f55910595e7a673a25a946492ad23e8d99df45039a85724380b810abfb0d92c1c85ff699f531ecfb87b29376c4c71dba084820c46b2218cfeee0cd3d6a09df68ed0d08b75225"}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x21, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 38.786852911s ago: executing program 2 (id=422): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f04a976bc4b4c9e3e260cbfad990444140b01e000000100000000e00000010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063060000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff00"], 0x0, 0xa}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r8) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f00000035c0)={0x0, 0xfffffffffffffe51, &(0x7f0000003580)={&(0x7f0000000580)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x24048041) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x48, r10, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:dhcpd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc041}, 0xbfe8e53a5fc9e779) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r7, 0x0, 0x0, 0x80000) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 38.609688738s ago: executing program 1 (id=423): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000840)="1db6ed74c7", 0x5}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/227, 0xe3, 0x40010120, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 38.583679214s ago: executing program 1 (id=424): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x8000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x204000) recvmsg(r0, &(0x7f0000000080)={0x0, 0x63, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4096}]}, 0x40000000) close(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8000, @empty, 0xa0e}}, 0x5, 0x7, 0x6, 0x7, 0xb}, &(0x7f0000000380)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x6, 0x2}, 0x90) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 38.539270511s ago: executing program 3 (id=425): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (fail_nth: 16) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x10008095, 0x0, 0x0) 38.229030203s ago: executing program 0 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0xc1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8000000003c) sendmsg(r4, 0x0, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000180)=0x1, 0x2) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x1300, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 0s ago: executing program 32 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0xc1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8000000003c) sendmsg(r4, 0x0, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000180)=0x1, 0x2) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x1300, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 72.330378][ T5612] cgroup: Unknown subsys name 'net' [ 72.427059][ T5612] cgroup: Unknown subsys name 'cpuset' [ 72.435475][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.741224][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.879371][ T4944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.888712][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.897720][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.906395][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.906581][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.915402][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.921353][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.929150][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.936228][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.946077][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.950647][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.957778][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.963867][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.970799][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.981454][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.985802][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.998927][ T5641] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.000788][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.007741][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.014528][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.021770][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.027707][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.044929][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.066661][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.077254][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.631152][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.638504][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.645751][ T5628] bridge_slave_0: entered allmulticast mode [ 77.652703][ T5628] bridge_slave_0: entered promiscuous mode [ 77.693801][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.701100][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.709155][ T5628] bridge_slave_1: entered allmulticast mode [ 77.716387][ T5628] bridge_slave_1: entered promiscuous mode [ 77.793868][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.801313][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.808493][ T5626] bridge_slave_0: entered allmulticast mode [ 77.815415][ T5626] bridge_slave_0: entered promiscuous mode [ 77.847535][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.854961][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.862071][ T5626] bridge_slave_1: entered allmulticast mode [ 77.869133][ T5626] bridge_slave_1: entered promiscuous mode [ 77.884025][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.921569][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.008400][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.017863][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.025147][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.032311][ T5625] bridge_slave_0: entered allmulticast mode [ 78.039301][ T5625] bridge_slave_0: entered promiscuous mode [ 78.048380][ T5628] team0: Port device team_slave_0 added [ 78.073161][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.082468][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.090057][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.097894][ T5643] Bluetooth: hci2: command tx timeout [ 78.097994][ T5625] bridge_slave_1: entered allmulticast mode [ 78.103859][ T49] Bluetooth: hci1: command tx timeout [ 78.109529][ T5634] Bluetooth: hci4: command tx timeout [ 78.115278][ T49] Bluetooth: hci0: command tx timeout [ 78.121202][ T5643] Bluetooth: hci3: command tx timeout [ 78.128105][ T5625] bridge_slave_1: entered promiscuous mode [ 78.156619][ T5628] team0: Port device team_slave_1 added [ 78.162374][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.169612][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.177172][ T5627] bridge_slave_0: entered allmulticast mode [ 78.184009][ T5627] bridge_slave_0: entered promiscuous mode [ 78.193352][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.200567][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.207765][ T5624] bridge_slave_0: entered allmulticast mode [ 78.215012][ T5624] bridge_slave_0: entered promiscuous mode [ 78.251021][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.258381][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.265622][ T5627] bridge_slave_1: entered allmulticast mode [ 78.272476][ T5627] bridge_slave_1: entered promiscuous mode [ 78.279440][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.286722][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.293853][ T5624] bridge_slave_1: entered allmulticast mode [ 78.300955][ T5624] bridge_slave_1: entered promiscuous mode [ 78.317533][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.329611][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.365572][ T5626] team0: Port device team_slave_0 added [ 78.380453][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.387645][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.413858][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.446096][ T5626] team0: Port device team_slave_1 added [ 78.461098][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.468148][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.494107][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.508210][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.519829][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.544734][ T5625] team0: Port device team_slave_0 added [ 78.561790][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.572582][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.592251][ T5625] team0: Port device team_slave_1 added [ 78.628976][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.636490][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.663074][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.711694][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.718950][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.745570][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.766728][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.773757][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.799898][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.812805][ T5627] team0: Port device team_slave_0 added [ 78.820825][ T5627] team0: Port device team_slave_1 added [ 78.828071][ T5624] team0: Port device team_slave_0 added [ 78.845292][ T5628] hsr_slave_0: entered promiscuous mode [ 78.851553][ T5628] hsr_slave_1: entered promiscuous mode [ 78.858854][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.866150][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.892126][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.913948][ T5624] team0: Port device team_slave_1 added [ 78.952823][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.959873][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.986240][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.998745][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.005719][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.031648][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.043291][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.051260][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.077604][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.091079][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.098078][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.123990][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.244967][ T5626] hsr_slave_0: entered promiscuous mode [ 79.251604][ T5626] hsr_slave_1: entered promiscuous mode [ 79.257943][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 79.263734][ T5626] Cannot create hsr debugfs directory [ 79.282401][ T5627] hsr_slave_0: entered promiscuous mode [ 79.288842][ T5627] hsr_slave_1: entered promiscuous mode [ 79.295102][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 79.300847][ T5627] Cannot create hsr debugfs directory [ 79.319237][ T5625] hsr_slave_0: entered promiscuous mode [ 79.325510][ T5625] hsr_slave_1: entered promiscuous mode [ 79.331478][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 79.337412][ T5625] Cannot create hsr debugfs directory [ 79.360506][ T5624] hsr_slave_0: entered promiscuous mode [ 79.366728][ T5624] hsr_slave_1: entered promiscuous mode [ 79.372698][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 79.378727][ T5624] Cannot create hsr debugfs directory [ 79.858446][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.871939][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.880830][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.890841][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.898728][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.908517][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.916387][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.926117][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.998728][ T5625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.008185][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.033160][ T5625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.042378][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.050664][ T5625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.060398][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.078570][ T5625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.089174][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.166498][ T5624] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.174747][ T5643] Bluetooth: hci3: command tx timeout [ 80.175412][ T5632] Bluetooth: hci0: command tx timeout [ 80.180390][ T49] Bluetooth: hci2: command tx timeout [ 80.186038][ T5641] Bluetooth: hci1: command tx timeout [ 80.197191][ T5634] Bluetooth: hci4: command tx timeout [ 80.199184][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.215797][ T5624] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.225394][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.233113][ T5624] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.242326][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.257485][ T5624] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.268628][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.335963][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.360098][ T5626] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.370999][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.380568][ T5626] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.389773][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.406678][ T5626] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.416054][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.439471][ T5626] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.449174][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.469513][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.508094][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.515561][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.559371][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.569755][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.576941][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.591634][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.601556][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.609348][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.618779][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.627102][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.637652][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.645677][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.656154][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.727821][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.760326][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.767508][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.790269][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.797377][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.921567][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.987671][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.026653][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.043556][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.063887][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.071071][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.111266][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.118448][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.131182][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.170865][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.180956][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.188568][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.219098][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.226286][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.280452][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.287663][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.313528][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.320651][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.346457][ T5624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.359128][ T5624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.555521][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.735427][ T5628] veth0_vlan: entered promiscuous mode [ 81.786667][ T5628] veth1_vlan: entered promiscuous mode [ 81.917469][ T5628] veth0_macvtap: entered promiscuous mode [ 81.960035][ T5628] veth1_macvtap: entered promiscuous mode [ 82.038092][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.063068][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.107528][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.141378][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.166775][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.179155][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.192251][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.255901][ T5634] Bluetooth: hci2: command tx timeout [ 82.261761][ T5641] Bluetooth: hci3: command tx timeout [ 82.270608][ T5632] Bluetooth: hci4: command tx timeout [ 82.271499][ T5643] Bluetooth: hci0: command tx timeout [ 82.289894][ T49] Bluetooth: hci1: command tx timeout [ 82.375137][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.441575][ T5625] veth0_vlan: entered promiscuous mode [ 82.540403][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.554867][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.569691][ T5625] veth1_vlan: entered promiscuous mode [ 82.609031][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.634955][ T5792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.647065][ T5792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.717131][ T5625] veth0_macvtap: entered promiscuous mode [ 82.755260][ T5625] veth1_macvtap: entered promiscuous mode [ 82.801488][ T5628] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.829218][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.841862][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.880231][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.901760][ T5627] veth0_vlan: entered promiscuous mode [ 82.933462][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949117][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.967814][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.983267][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.999223][ T5627] veth1_vlan: entered promiscuous mode [ 83.126431][ T5830] Bluetooth: MGMT ver 1.23 [ 83.174772][ T5624] veth0_vlan: entered promiscuous mode [ 83.187074][ T5626] veth0_vlan: entered promiscuous mode [ 83.220341][ T5627] veth0_macvtap: entered promiscuous mode [ 83.251173][ T5624] veth1_vlan: entered promiscuous mode [ 83.263717][ T5627] veth1_macvtap: entered promiscuous mode [ 83.271580][ T5626] veth1_vlan: entered promiscuous mode [ 83.283387][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.305946][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.383723][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.403069][ T5624] veth0_macvtap: entered promiscuous mode [ 83.413409][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.416883][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.467400][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.477904][ T5624] veth1_macvtap: entered promiscuous mode [ 83.507941][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.524732][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.540633][ T5626] veth0_macvtap: entered promiscuous mode [ 83.562464][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.570665][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.606554][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.631665][ T5626] veth1_macvtap: entered promiscuous mode [ 83.654236][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.708453][ T5792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.726102][ T5792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.789409][ T5792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.803643][ T5792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.848508][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.865885][ T5843] IPVS: Scheduler module ip_vs_sip not found [ 83.898085][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.940486][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.968200][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.022537][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.033901][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.050500][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.059407][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.072590][ T5852] warning: `syz.0.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.097358][ T5850] sctp: [Deprecated]: syz.1.10 (pid 5850) Use of int in max_burst socket option. [ 84.097358][ T5850] Use struct sctp_assoc_value instead [ 84.121077][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.141781][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.160963][ T5855] netlink: 29 bytes leftover after parsing attributes in process `syz.0.11'. [ 84.245637][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.276346][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.333692][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.342033][ T5643] Bluetooth: hci3: command tx timeout [ 84.348985][ T5643] Bluetooth: hci2: command tx timeout [ 84.354528][ T49] Bluetooth: hci4: command tx timeout [ 84.355146][ T5641] Bluetooth: hci0: command tx timeout [ 84.360424][ T5643] Bluetooth: hci1: command tx timeout [ 84.373942][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.478542][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.492753][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.593755][ T5792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.621091][ T5792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.737122][ T5860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.840373][ T5850] batadv1: entered promiscuous mode [ 84.851950][ T5850] batadv1: entered allmulticast mode [ 84.863229][ T5864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.960108][ T5867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.970930][ T5860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.072485][ T5867] bridge0: port 3(syz_tun) entered blocking state [ 85.075177][ T5871] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14'. [ 85.083094][ T5867] bridge0: port 3(syz_tun) entered disabled state [ 85.094818][ T5867] syz_tun: entered allmulticast mode [ 85.103019][ T5867] syz_tun: entered promiscuous mode [ 85.113046][ T5867] bridge0: port 3(syz_tun) entered blocking state [ 85.119971][ T5867] bridge0: port 3(syz_tun) entered forwarding state [ 85.252633][ T5871] netlink: 200 bytes leftover after parsing attributes in process `syz.0.14'. [ 85.533673][ T5881] Bluetooth: MGMT ver 1.23 [ 85.541542][ T5881] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 85.782732][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 86.477225][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 86.603771][ T10] cfg80211: failed to load regulatory.db [ 87.156843][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17'. [ 87.181383][ T5891] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 87.190825][ T29] audit: type=1800 audit(1781156266.675:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.18" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 87.217560][ T5891] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 87.227724][ T5891] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 87.272742][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 87.515561][ T5909] smc: net device wlan0 applied user defined pnetid SYZ0 [ 87.782688][ T5922] sctp: [Deprecated]: syz.2.27 (pid 5922) Use of int in max_burst socket option. [ 87.782688][ T5922] Use struct sctp_assoc_value instead [ 87.926650][ T5931] netlink: 64 bytes leftover after parsing attributes in process `syz.4.30'. [ 87.974561][ T5931] openvswitch: netlink: Flow key attr not present in new flow. [ 88.032604][ T5931] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 88.135339][ T5940] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 88.189854][ T5940] netlink: zone id is out of range [ 88.204262][ T5940] netlink: zone id is out of range [ 88.232805][ T5940] netlink: zone id is out of range [ 88.253339][ T5940] netlink: zone id is out of range [ 88.280943][ T5940] netlink: zone id is out of range [ 88.311110][ T5940] netlink: zone id is out of range [ 88.325402][ T5943] Zero length message leads to an empty skb [ 88.325841][ T809] IPVS: starting estimator thread 0... [ 88.339136][ T5940] netlink: zone id is out of range [ 88.361879][ T5940] netlink: zone id is out of range [ 88.468055][ T5944] IPVS: using max 39 ests per chain, 93600 per kthread [ 88.618245][ T5922] batadv1: entered promiscuous mode [ 88.624615][ T5922] batadv1: entered allmulticast mode [ 88.664730][ T5949] FAULT_INJECTION: forcing a failure. [ 88.664730][ T5949] name failslab, interval 1, probability 0, space 0, times 1 [ 88.704607][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.4.35 Not tainted syzkaller #0 PREEMPT(full) [ 88.704632][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.704650][ T5949] Call Trace: [ 88.704661][ T5949] [ 88.704669][ T5949] dump_stack_lvl+0xe8/0x150 [ 88.704702][ T5949] should_fail_ex+0x412/0x560 [ 88.704726][ T5949] should_failslab+0xa8/0x100 [ 88.704747][ T5949] __kmalloc_cache_noprof+0x88/0x660 [ 88.704770][ T5949] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 88.704796][ T5949] ? sctp_add_bind_addr+0x8c/0x370 [ 88.704826][ T5949] sctp_add_bind_addr+0x8c/0x370 [ 88.704855][ T5949] sctp_copy_local_addr_list+0x314/0x4f0 [ 88.704883][ T5949] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 88.704909][ T5949] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 88.704935][ T5949] ? sctp_v6_is_any+0x64/0x80 [ 88.704954][ T5949] ? sctp_copy_one_addr+0x93/0x360 [ 88.704982][ T5949] sctp_bind_addr_copy+0xb3/0x3c0 [ 88.705008][ T5949] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 88.705035][ T5949] sctp_connect_new_asoc+0x2ff/0x6b0 [ 88.705059][ T5949] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 88.705086][ T5949] ? __local_bh_enable_ip+0xd0/0x130 [ 88.705103][ T5949] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 88.705126][ T5949] ? security_sctp_bind_connect+0x7e/0x2c0 [ 88.705151][ T5949] sctp_sendmsg+0x1576/0x2c50 [ 88.705186][ T5949] ? __pfx_sctp_sendmsg+0x10/0x10 [ 88.705210][ T5949] ? aa_sk_perm+0x6d5/0x900 [ 88.705241][ T5949] ? __pfx_aa_sk_perm+0x10/0x10 [ 88.705268][ T5949] ? sock_rps_record_flow+0x19/0x350 [ 88.705296][ T5949] ? inet_sendmsg+0x2f4/0x370 [ 88.705324][ T5949] ____sys_sendmsg+0x80a/0x9f0 [ 88.705354][ T5949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.705383][ T5949] ? import_iovec+0x73/0xa0 [ 88.705410][ T5949] ___sys_sendmsg+0x2a5/0x360 [ 88.705434][ T5949] ? __lock_acquire+0x6b5/0x2cf0 [ 88.705458][ T5949] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.705514][ T5949] ? __fget_files+0x2a/0x420 [ 88.705534][ T5949] ? __fget_files+0x3a0/0x420 [ 88.705566][ T5949] __x64_sys_sendmsg+0x1bd/0x2a0 [ 88.705589][ T5949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.705618][ T5949] ? __pfx_ksys_write+0x10/0x10 [ 88.705652][ T5949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.705672][ T5949] do_syscall_64+0x174/0x580 [ 88.705691][ T5949] ? trace_irq_disable+0x3b/0x140 [ 88.705715][ T5949] ? clear_bhb_loop+0x40/0x90 [ 88.705737][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.705754][ T5949] RIP: 0033:0x7fb2af19ce59 [ 88.705780][ T5949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.705793][ T5949] RSP: 002b:00007fb2b0061028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.705812][ T5949] RAX: ffffffffffffffda RBX: 00007fb2af415fa0 RCX: 00007fb2af19ce59 [ 88.705825][ T5949] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000004 [ 88.705836][ T5949] RBP: 00007fb2b0061090 R08: 0000000000000000 R09: 0000000000000000 [ 88.705847][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.705857][ T5949] R13: 00007fb2af416038 R14: 00007fb2af415fa0 R15: 00007ffe21c8b588 [ 88.705887][ T5949] [ 89.222628][ T5951] syz.4.37 uses obsolete (PF_INET,SOCK_PACKET) [ 89.304618][ T5957] FAULT_INJECTION: forcing a failure. [ 89.304618][ T5957] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.318915][ T5957] CPU: 1 UID: 0 PID: 5957 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(full) [ 89.318938][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.318948][ T5957] Call Trace: [ 89.318955][ T5957] [ 89.318963][ T5957] dump_stack_lvl+0xe8/0x150 [ 89.318989][ T5957] should_fail_ex+0x412/0x560 [ 89.319012][ T5957] _copy_from_user+0x2d/0xb0 [ 89.319034][ T5957] memdup_user+0x5e/0xd0 [ 89.319053][ T5957] sctp_getsockopt_connectx3+0x1f7/0x360 [ 89.319079][ T5957] ? lock_sock_nested+0x6a/0x100 [ 89.319104][ T5957] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 89.319133][ T5957] ? sctp_getsockopt+0x12f/0xb90 [ 89.319154][ T5957] ? __local_bh_enable_ip+0xd0/0x130 [ 89.319175][ T5957] sctp_getsockopt+0x984/0xb90 [ 89.319194][ T5957] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 89.319218][ T5957] do_sock_getsockopt+0x51d/0x7e0 [ 89.319242][ T5957] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 89.319277][ T5957] ? __fget_files+0x3a0/0x420 [ 89.319298][ T5957] ? __fget_files+0x2a/0x420 [ 89.319323][ T5957] __x64_sys_getsockopt+0x1a4/0x240 [ 89.319348][ T5957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.319367][ T5957] do_syscall_64+0x174/0x580 [ 89.319396][ T5957] ? trace_irq_disable+0x3b/0x140 [ 89.319420][ T5957] ? clear_bhb_loop+0x40/0x90 [ 89.319441][ T5957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.319458][ T5957] RIP: 0033:0x7f8e8e39ce59 [ 89.319474][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.319488][ T5957] RSP: 002b:00007f8e8f223028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 89.319506][ T5957] RAX: ffffffffffffffda RBX: 00007f8e8e615fa0 RCX: 00007f8e8e39ce59 [ 89.319518][ T5957] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 89.319527][ T5957] RBP: 00007f8e8f223090 R08: 0000200000000100 R09: 0000000000000000 [ 89.319538][ T5957] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 89.319548][ T5957] R13: 00007f8e8e616038 R14: 00007f8e8e615fa0 R15: 00007ffc15840298 [ 89.319574][ T5957] [ 89.911066][ T5978] FAULT_INJECTION: forcing a failure. [ 89.911066][ T5978] name failslab, interval 1, probability 0, space 0, times 0 [ 89.947797][ T5978] CPU: 1 UID: 0 PID: 5978 Comm: syz.2.44 Not tainted syzkaller #0 PREEMPT(full) [ 89.947820][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.947830][ T5978] Call Trace: [ 89.947837][ T5978] [ 89.947845][ T5978] dump_stack_lvl+0xe8/0x150 [ 89.947872][ T5978] should_fail_ex+0x412/0x560 [ 89.947895][ T5978] should_failslab+0xa8/0x100 [ 89.947915][ T5978] __kmalloc_cache_noprof+0x88/0x660 [ 89.947938][ T5978] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 89.947962][ T5978] ? sctp_v6_cmp_addr+0x15/0xd0 [ 89.947977][ T5978] ? sctp_add_bind_addr+0x8c/0x370 [ 89.948005][ T5978] sctp_add_bind_addr+0x8c/0x370 [ 89.948034][ T5978] sctp_copy_local_addr_list+0x314/0x4f0 [ 89.948063][ T5978] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 89.948087][ T5978] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 89.948115][ T5978] ? sctp_v6_is_any+0x64/0x80 [ 89.948133][ T5978] ? sctp_copy_one_addr+0x93/0x360 [ 89.948160][ T5978] sctp_bind_addr_copy+0xb3/0x3c0 [ 89.948185][ T5978] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 89.948211][ T5978] sctp_connect_new_asoc+0x2ff/0x6b0 [ 89.948235][ T5978] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 89.948256][ T5978] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 89.948276][ T5978] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 89.948294][ T5978] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 89.948314][ T5978] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 89.948345][ T5978] ? security_sctp_bind_connect+0x7e/0x2c0 [ 89.948369][ T5978] sctp_sendmsg+0x1576/0x2c50 [ 89.948404][ T5978] ? __pfx_sctp_sendmsg+0x10/0x10 [ 89.948427][ T5978] ? aa_sk_perm+0x6d5/0x900 [ 89.948449][ T5978] ? __might_fault+0xaf/0x130 [ 89.948477][ T5978] ? __pfx_aa_sk_perm+0x10/0x10 [ 89.948504][ T5978] ? sock_rps_record_flow+0x19/0x350 [ 89.948532][ T5978] ? inet_sendmsg+0x2f4/0x370 [ 89.948553][ T5978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 89.948578][ T5978] ____sys_sendmsg+0x80a/0x9f0 [ 89.948608][ T5978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.948637][ T5978] ? import_iovec+0x73/0xa0 [ 89.948661][ T5978] ___sys_sendmsg+0x2a5/0x360 [ 89.948679][ T5978] ? __lock_acquire+0x6b5/0x2cf0 [ 89.948702][ T5978] ? __pfx____sys_sendmsg+0x10/0x10 [ 89.948753][ T5978] ? __fget_files+0x2a/0x420 [ 89.948774][ T5978] ? __fget_files+0x3a0/0x420 [ 89.948801][ T5978] __x64_sys_sendmsg+0x1bd/0x2a0 [ 89.948824][ T5978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.948852][ T5978] ? __pfx_ksys_write+0x10/0x10 [ 89.948885][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.948903][ T5978] do_syscall_64+0x174/0x580 [ 89.948921][ T5978] ? trace_irq_disable+0x3b/0x140 [ 89.948945][ T5978] ? clear_bhb_loop+0x40/0x90 [ 89.948965][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.948982][ T5978] RIP: 0033:0x7f95afd9ce59 [ 89.948999][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.949013][ T5978] RSP: 002b:00007f95b0c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.949032][ T5978] RAX: ffffffffffffffda RBX: 00007f95b0015fa0 RCX: 00007f95afd9ce59 [ 89.949044][ T5978] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 89.949055][ T5978] RBP: 00007f95b0c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 89.949066][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.949076][ T5978] R13: 00007f95b0016038 R14: 00007f95b0015fa0 R15: 00007ffd5e6f3428 [ 89.949106][ T5978] [ 90.595816][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 90.605634][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 90.643784][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'. [ 90.717619][ T5998] netlink: 'syz.3.53': attribute type 11 has an invalid length. [ 90.725612][ T5998] netlink: 140 bytes leftover after parsing attributes in process `syz.3.53'. [ 90.900409][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 90.961190][ T6013] net_ratelimit: 338 callbacks suppressed [ 90.961210][ T6013] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 90.966626][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 91.025431][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 91.132133][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 91.132133][ T5792] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.169069][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 91.202133][ T5792] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.234028][ T5792] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.268994][ T5792] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.489962][ T6036] FAULT_INJECTION: forcing a failure. [ 91.489962][ T6036] name failslab, interval 1, probability 0, space 0, times 0 [ 91.520159][ T6036] CPU: 1 UID: 0 PID: 6036 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 91.520184][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.520195][ T6036] Call Trace: [ 91.520201][ T6036] [ 91.520216][ T6036] dump_stack_lvl+0xe8/0x150 [ 91.520242][ T6036] should_fail_ex+0x412/0x560 [ 91.520266][ T6036] should_failslab+0xa8/0x100 [ 91.520286][ T6036] __kmalloc_cache_noprof+0x88/0x660 [ 91.520310][ T6036] ? netlink_lookup+0x30/0x200 [ 91.520328][ T6036] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 91.520353][ T6036] ? genl_start+0x1c9/0x6c0 [ 91.520381][ T6036] genl_start+0x1c9/0x6c0 [ 91.520404][ T6036] ? netlink_lookup+0x30/0x200 [ 91.520426][ T6036] __netlink_dump_start+0x469/0x7e0 [ 91.520455][ T6036] genl_family_rcv_msg_dumpit+0x213/0x310 [ 91.520482][ T6036] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 91.520511][ T6036] ? __pfx_genl_start+0x10/0x10 [ 91.520531][ T6036] ? __pfx_genl_dumpit+0x10/0x10 [ 91.520552][ T6036] ? __pfx_genl_done+0x10/0x10 [ 91.520579][ T6036] ? bpf_lsm_capable+0x9/0x20 [ 91.520596][ T6036] ? security_capable+0x7e/0x2c0 [ 91.520626][ T6036] genl_rcv_msg+0x5e8/0x7a0 [ 91.520656][ T6036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.520679][ T6036] ? __pfx_batadv_bla_claim_dump+0x10/0x10 [ 91.520703][ T6036] ? __pfx_ref_tracker_free+0x10/0x10 [ 91.520720][ T6036] ? __asan_memcpy+0x40/0x70 [ 91.520741][ T6036] ? __skb_clone+0x63/0x7a0 [ 91.520768][ T6036] netlink_rcv_skb+0x232/0x4b0 [ 91.520789][ T6036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.520813][ T6036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 91.520848][ T6036] ? down_read+0x270/0x2e0 [ 91.520867][ T6036] ? genl_rcv+0xd/0x40 [ 91.520892][ T6036] genl_rcv+0x28/0x40 [ 91.520914][ T6036] netlink_unicast+0x75c/0x8e0 [ 91.520944][ T6036] netlink_sendmsg+0x813/0xb40 [ 91.520974][ T6036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.520998][ T6036] ? aa_sock_msg_perm+0xf1/0x1b0 [ 91.521024][ T6036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 91.521050][ T6036] ____sys_sendmsg+0x972/0x9f0 [ 91.521070][ T6036] ? __might_fault+0xaf/0x130 [ 91.521099][ T6036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.521128][ T6036] ? import_iovec+0x73/0xa0 [ 91.521152][ T6036] ___sys_sendmsg+0x2a5/0x360 [ 91.521171][ T6036] ? __lock_acquire+0x6b5/0x2cf0 [ 91.521195][ T6036] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.521258][ T6036] ? __fget_files+0x2a/0x420 [ 91.521278][ T6036] ? __fget_files+0x3a0/0x420 [ 91.521309][ T6036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 91.521332][ T6036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.521362][ T6036] ? __pfx_ksys_write+0x10/0x10 [ 91.521395][ T6036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.521415][ T6036] do_syscall_64+0x174/0x580 [ 91.521433][ T6036] ? trace_irq_disable+0x3b/0x140 [ 91.521460][ T6036] ? clear_bhb_loop+0x40/0x90 [ 91.521483][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.521500][ T6036] RIP: 0033:0x7f0b6fd9ce59 [ 91.521517][ T6036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.521531][ T6036] RSP: 002b:00007f0b70bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.521550][ T6036] RAX: ffffffffffffffda RBX: 00007f0b70015fa0 RCX: 00007f0b6fd9ce59 [ 91.521563][ T6036] RDX: 00000000000000c0 RSI: 0000200000004340 RDI: 0000000000000003 [ 91.521574][ T6036] RBP: 00007f0b70bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 91.521584][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.521595][ T6036] R13: 00007f0b70016038 R14: 00007f0b70015fa0 R15: 00007ffc1da43c38 [ 91.521625][ T6036] [ 91.541275][ T6039] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 91.656846][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 91.942802][ T6051] netlink: 'syz.1.67': attribute type 9 has an invalid length. [ 91.958454][ T6051] netlink: 'syz.1.67': attribute type 6 has an invalid length. [ 92.124581][ T6056] Bluetooth: MGMT ver 1.23 [ 92.320985][ T6059] IPVS: Scheduler module ip_vs_sip not found [ 92.404910][ T6065] bridge_slave_0: left allmulticast mode [ 92.424394][ T6065] bridge_slave_0: left promiscuous mode [ 92.475740][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.501608][ T6065] bridge_slave_1: left allmulticast mode [ 92.516328][ T6065] bridge_slave_1: left promiscuous mode [ 92.538174][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.590764][ T6065] bond0: (slave bond_slave_0): Releasing backup interface [ 92.616294][ T6065] bond0: (slave bond_slave_1): Releasing backup interface [ 92.639466][ T6065] team0: Port device team_slave_0 removed [ 92.650540][ T6065] team0: Port device team_slave_1 removed [ 92.659135][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.666648][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.677439][ T6065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.685545][ T6065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.698781][ T6065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.889639][ T6087] netlink: 'syz.3.80': attribute type 12 has an invalid length. [ 92.907065][ T6087] netlink: 'syz.3.80': attribute type 29 has an invalid length. [ 92.921258][ T6087] netlink: 'syz.3.80': attribute type 3 has an invalid length. [ 92.931889][ T6087] netlink: 'syz.3.80': attribute type 2 has an invalid length. [ 93.296741][ T6099] IPVS: Scheduler module ip_vs_sip not found [ 93.708531][ T6105] IPVS: Scheduler module ip_vs_sip not found [ 93.924367][ T6120] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 94.209467][ T6137] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 94.792815][ T6149] bond0: (slave bond_slave_1): Releasing backup interface [ 94.971579][ T6150] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 94.985605][ T6150] bond1 (unregistering): Released all slaves [ 95.197054][ T6161] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 95.403213][ T6166] vlan0: entered allmulticast mode [ 95.419966][ T6166] veth0_vlan: entered allmulticast mode [ 95.459653][ T6169] vlan0: left allmulticast mode [ 95.486805][ T6169] veth0_vlan: left allmulticast mode [ 95.530965][ T6170] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 95.805972][ T6186] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 96.370444][ T6201] __nla_validate_parse: 12 callbacks suppressed [ 96.370464][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'. [ 96.473048][ T6205] FAULT_INJECTION: forcing a failure. [ 96.473048][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 96.489509][ T6205] CPU: 0 UID: 0 PID: 6205 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT(full) [ 96.489537][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 96.489547][ T6205] Call Trace: [ 96.489553][ T6205] [ 96.489560][ T6205] dump_stack_lvl+0xe8/0x150 [ 96.489585][ T6205] should_fail_ex+0x412/0x560 [ 96.489607][ T6205] should_failslab+0xa8/0x100 [ 96.489627][ T6205] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 96.489649][ T6205] ? __alloc_skb+0x186/0x7d0 [ 96.489665][ T6205] ? __alloc_skb+0x1d0/0x7d0 [ 96.489678][ T6205] ? __local_bh_enable_ip+0xd0/0x130 [ 96.489700][ T6205] __alloc_skb+0x1d0/0x7d0 [ 96.489728][ T6205] netlink_sendmsg+0x5d4/0xb40 [ 96.489756][ T6205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.489779][ T6205] ? aa_sock_msg_perm+0xf1/0x1b0 [ 96.489805][ T6205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.489831][ T6205] ____sys_sendmsg+0x972/0x9f0 [ 96.489850][ T6205] ? __might_fault+0xaf/0x130 [ 96.489878][ T6205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.489906][ T6205] ? import_iovec+0x73/0xa0 [ 96.489929][ T6205] ___sys_sendmsg+0x2a5/0x360 [ 96.489948][ T6205] ? __lock_acquire+0x6b5/0x2cf0 [ 96.489970][ T6205] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.490022][ T6205] ? __fget_files+0x2a/0x420 [ 96.490042][ T6205] ? __fget_files+0x3a0/0x420 [ 96.490072][ T6205] __x64_sys_sendmsg+0x1bd/0x2a0 [ 96.490094][ T6205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.490123][ T6205] ? __pfx_ksys_write+0x10/0x10 [ 96.490155][ T6205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.490174][ T6205] do_syscall_64+0x174/0x580 [ 96.490192][ T6205] ? trace_irq_disable+0x3b/0x140 [ 96.490216][ T6205] ? clear_bhb_loop+0x40/0x90 [ 96.490238][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.490255][ T6205] RIP: 0033:0x7f95afd9ce59 [ 96.490272][ T6205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.490286][ T6205] RSP: 002b:00007f95b0c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.490304][ T6205] RAX: ffffffffffffffda RBX: 00007f95b0015fa0 RCX: 00007f95afd9ce59 [ 96.490316][ T6205] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 96.490327][ T6205] RBP: 00007f95b0c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 96.490337][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.490347][ T6205] R13: 00007f95b0016038 R14: 00007f95b0015fa0 R15: 00007ffd5e6f3428 [ 96.490375][ T6205] [ 96.841970][ T6210] netlink: 'syz.1.113': attribute type 13 has an invalid length. [ 97.009562][ T6210] netlink: 'syz.1.113': attribute type 17 has an invalid length. [ 97.270430][ T6215] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 97.396687][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.405082][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.412998][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.420924][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.428827][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.436722][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.444639][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.452499][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.460413][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.468300][ T6224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 97.495282][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 97.870326][ T6210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.881991][ T6210] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.897600][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.991123][ T6210] veth1_vlan: left promiscuous mode [ 97.998118][ T6210] veth0_vlan: left promiscuous mode [ 98.006720][ T6210] veth0_vlan: entered promiscuous mode [ 98.020261][ T6210] veth1_vlan: entered promiscuous mode [ 98.040030][ T6210] veth1_macvtap: left promiscuous mode [ 98.052270][ T6210] veth0_macvtap: left promiscuous mode [ 98.060717][ T6210] veth0_macvtap: entered promiscuous mode [ 98.078424][ T6210] veth1_macvtap: entered promiscuous mode [ 98.093122][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.111163][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.127956][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.141557][ T6210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.171595][ T6210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.591806][ T6261] FAULT_INJECTION: forcing a failure. [ 98.591806][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 98.668197][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.3.129 Not tainted syzkaller #0 PREEMPT(full) [ 98.668222][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.668232][ T6261] Call Trace: [ 98.668239][ T6261] [ 98.668247][ T6261] dump_stack_lvl+0xe8/0x150 [ 98.668272][ T6261] should_fail_ex+0x412/0x560 [ 98.668297][ T6261] should_failslab+0xa8/0x100 [ 98.668314][ T6261] ? skb_clone+0x212/0x3a0 [ 98.668334][ T6261] kmem_cache_alloc_noprof+0x87/0x650 [ 98.668358][ T6261] ? __netlink_lookup+0xc6/0x8b0 [ 98.668385][ T6261] skb_clone+0x212/0x3a0 [ 98.668409][ T6261] __netlink_deliver_tap+0x404/0x850 [ 98.668444][ T6261] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.668466][ T6261] netlink_deliver_tap+0x19c/0x1b0 [ 98.668488][ T6261] netlink_unicast+0x730/0x8e0 [ 98.668517][ T6261] netlink_sendmsg+0x813/0xb40 [ 98.668546][ T6261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.668570][ T6261] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.668596][ T6261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 98.668623][ T6261] ____sys_sendmsg+0x972/0x9f0 [ 98.668643][ T6261] ? __might_fault+0xaf/0x130 [ 98.668671][ T6261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.668700][ T6261] ? import_iovec+0x73/0xa0 [ 98.668724][ T6261] ___sys_sendmsg+0x2a5/0x360 [ 98.668743][ T6261] ? __lock_acquire+0x6b5/0x2cf0 [ 98.668766][ T6261] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.668820][ T6261] ? __fget_files+0x2a/0x420 [ 98.668840][ T6261] ? __fget_files+0x3a0/0x420 [ 98.668870][ T6261] __x64_sys_sendmsg+0x1bd/0x2a0 [ 98.668893][ T6261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.668923][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 98.668956][ T6261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.668976][ T6261] do_syscall_64+0x174/0x580 [ 98.668994][ T6261] ? trace_irq_disable+0x3b/0x140 [ 98.669019][ T6261] ? clear_bhb_loop+0x40/0x90 [ 98.669047][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.669064][ T6261] RIP: 0033:0x7f8e8e39ce59 [ 98.669081][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.669095][ T6261] RSP: 002b:00007f8e8f223028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.669114][ T6261] RAX: ffffffffffffffda RBX: 00007f8e8e615fa0 RCX: 00007f8e8e39ce59 [ 98.669126][ T6261] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 98.669137][ T6261] RBP: 00007f8e8f223090 R08: 0000000000000000 R09: 0000000000000000 [ 98.669148][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.669158][ T6261] R13: 00007f8e8e616038 R14: 00007f8e8e615fa0 R15: 00007ffc15840298 [ 98.669188][ T6261] [ 99.095011][ T6259] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 99.430157][ T6291] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 99.466821][ T6288] IPVS: Scheduler module ip_vs_sip not found [ 99.526162][ T6291] bond1: (slave bridge1): making interface the new active one [ 99.535034][ T6291] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 99.936279][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 100.383184][ T6347] Illegal XDP return value 4294967274 on prog (id 39) dev N/A, expect packet loss! [ 100.396412][ T6338] IPVS: Scheduler module ip_vs_sip not found [ 101.084714][ T6375] xt_SECMARK: invalid mode: 4 [ 101.311320][ T6382] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 101.363466][ T6393] sctp: [Deprecated]: syz.0.169 (pid 6393) Use of int in max_burst socket option. [ 101.363466][ T6393] Use struct sctp_assoc_value instead [ 101.421139][ T6390] IPVS: Scheduler module ip_vs_sip not found [ 101.462646][ T6397] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 101.595192][ T6393] batadv1: entered promiscuous mode [ 101.618138][ T6393] batadv1: entered allmulticast mode [ 102.594265][ T6239] net_ratelimit: 14 callbacks suppressed [ 102.594284][ T6239] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 103.114232][ T13] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 103.635445][ T6239] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 104.154250][ T61] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 104.730505][ T6410] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 104.800795][ T6413] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.173'. [ 105.048334][ T6413] netlink: 12712 bytes leftover after parsing attributes in process `syz.3.173'. [ 105.204024][ T6423] netlink: 'syz.1.177': attribute type 6 has an invalid length. [ 105.247041][ T6424] block nbd0: server does not support multiple connections per device. [ 105.270212][ T6424] block nbd0: shutting down sockets [ 105.462717][ T6434] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 105.575624][ T6438] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 105.851200][ T6443] IPVS: Scheduler module ip_vs_sip not found [ 106.423686][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 106.527327][ T9] IPVS: starting estimator thread 0... [ 106.534194][ T6473] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 106.624251][ T6476] IPVS: using max 31 ests per chain, 74400 per kthread [ 106.695900][ T6475] block nbd0: server does not support multiple connections per device. [ 106.713016][ T6475] block nbd0: shutting down sockets [ 106.757520][ T6481] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 107.100798][ T6502] tipc: Started in network mode [ 107.123602][ T6502] tipc: Node identity 2a3deb39539d, cluster identity 4711 [ 107.133984][ T6502] tipc: Enabled bearer , priority 0 [ 107.156720][ T6502] tipc: Resetting bearer [ 107.210788][ T6501] tipc: Disabling bearer [ 107.471529][ T6526] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 107.504425][ T6528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.810071][ T6538] syz_tun: entered allmulticast mode [ 107.922880][ T6534] syz_tun: left allmulticast mode [ 108.690538][ T6573] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 108.762065][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 108.818327][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.826033][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.063871][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 109.076557][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 109.143758][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.154248][ T6583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 109.187302][ T6569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.524927][ T6573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.620055][ T6580] macvlan2: entered promiscuous mode [ 109.636369][ T6580] macvlan2: entered allmulticast mode [ 109.655170][ T6580] bond2: entered allmulticast mode [ 109.666578][ T6580] bond2: entered promiscuous mode [ 109.689919][ T6580] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.733970][ T6580] team0: Port device macvlan2 added [ 109.837301][ T6582] bond2: (slave ip6gretap1): making interface the new active one [ 109.859070][ T6626] netlink: 96 bytes leftover after parsing attributes in process `syz.0.227'. [ 109.891315][ T6582] ip6gretap1: entered promiscuous mode [ 109.900667][ T6582] ip6gretap1: entered allmulticast mode [ 109.914244][ T6582] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 109.930022][ T6239] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.990454][ T6239] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.021545][ T6239] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.041560][ T6239] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.263757][ T6691] netlink: 120 bytes leftover after parsing attributes in process `syz.3.232'. [ 131.311621][ T6691] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 131.338143][ T6691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.232'. [ 131.368689][ T6700] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.235'. [ 131.822442][ T6728] FAULT_INJECTION: forcing a failure. [ 131.822442][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 131.835626][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.0.243 Not tainted syzkaller #0 PREEMPT(full) [ 131.835648][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.835654][ T6728] Call Trace: [ 131.835659][ T6728] [ 131.835664][ T6728] dump_stack_lvl+0xe8/0x150 [ 131.835687][ T6728] should_fail_ex+0x412/0x560 [ 131.835701][ T6728] should_failslab+0xa8/0x100 [ 131.835713][ T6728] __kmalloc_cache_noprof+0x88/0x660 [ 131.835727][ T6728] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 131.835743][ T6728] ? sctp_add_bind_addr+0x8c/0x370 [ 131.835760][ T6728] sctp_add_bind_addr+0x8c/0x370 [ 131.835777][ T6728] sctp_copy_local_addr_list+0x314/0x4f0 [ 131.835793][ T6728] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 131.835808][ T6728] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 131.835824][ T6728] ? sctp_v4_is_any+0x35/0x60 [ 131.835833][ T6728] ? sctp_copy_one_addr+0x93/0x360 [ 131.835849][ T6728] sctp_bind_addr_copy+0xb3/0x3c0 [ 131.835864][ T6728] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 131.835879][ T6728] sctp_connect_new_asoc+0x2ff/0x6b0 [ 131.835892][ T6728] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.835907][ T6728] ? __local_bh_enable_ip+0xd0/0x130 [ 131.835917][ T6728] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 131.835931][ T6728] ? security_sctp_bind_connect+0x7e/0x2c0 [ 131.835945][ T6728] sctp_sendmsg+0x1576/0x2c50 [ 131.835955][ T6728] ? unwind_next_frame+0xa6/0x2550 [ 131.835979][ T6728] ? __pfx_sctp_sendmsg+0x10/0x10 [ 131.835992][ T6728] ? aa_sk_perm+0x6d5/0x900 [ 131.836010][ T6728] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.836025][ T6728] ? sock_rps_record_flow+0x19/0x350 [ 131.836041][ T6728] ? inet_sendmsg+0x2f4/0x370 [ 131.836060][ T6728] ____sys_sendmsg+0x80a/0x9f0 [ 131.836076][ T6728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.836092][ T6728] ? import_iovec+0x73/0xa0 [ 131.836106][ T6728] ___sys_sendmsg+0x2a5/0x360 [ 131.836116][ T6728] ? __lock_acquire+0x6b5/0x2cf0 [ 131.836129][ T6728] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.836158][ T6728] ? __fget_files+0x2a/0x420 [ 131.836170][ T6728] ? __fget_files+0x3a0/0x420 [ 131.836187][ T6728] __x64_sys_sendmsg+0x1bd/0x2a0 [ 131.836199][ T6728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.836215][ T6728] ? __pfx_ksys_write+0x10/0x10 [ 131.836234][ T6728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.836244][ T6728] do_syscall_64+0x174/0x580 [ 131.836255][ T6728] ? trace_irq_disable+0x3b/0x140 [ 131.836270][ T6728] ? clear_bhb_loop+0x40/0x90 [ 131.836282][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.836292][ T6728] RIP: 0033:0x7f0b6fd9ce59 [ 131.836307][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.836318][ T6728] RSP: 002b:00007f0b70bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.836331][ T6728] RAX: ffffffffffffffda RBX: 00007f0b70015fa0 RCX: 00007f0b6fd9ce59 [ 131.836338][ T6728] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000038 [ 131.836344][ T6728] RBP: 00007f0b70bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 131.836350][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.836356][ T6728] R13: 00007f0b70016038 R14: 00007f0b70015fa0 R15: 00007ffc1da43c38 [ 131.836371][ T6728] [ 132.504995][ T6744] hsr_slave_1: entered allmulticast mode [ 132.564707][ T6741] hsr_slave_1: left allmulticast mode [ 132.578577][ T6723] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 132.632993][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 132.666370][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.677366][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.763549][ T6759] FAULT_INJECTION: forcing a failure. [ 132.763549][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 132.812084][ T6753] syz.1.252 (6753) used greatest stack depth: 17408 bytes left [ 132.830435][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.4.251 Not tainted syzkaller #0 PREEMPT(full) [ 132.830459][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.830470][ T6759] Call Trace: [ 132.830477][ T6759] [ 132.830485][ T6759] dump_stack_lvl+0xe8/0x150 [ 132.830519][ T6759] should_fail_ex+0x412/0x560 [ 132.830543][ T6759] should_failslab+0xa8/0x100 [ 132.830563][ T6759] __kmalloc_cache_noprof+0x88/0x660 [ 132.830587][ T6759] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 132.830612][ T6759] ? sctp_add_bind_addr+0x8c/0x370 [ 132.830642][ T6759] sctp_add_bind_addr+0x8c/0x370 [ 132.830671][ T6759] sctp_copy_local_addr_list+0x314/0x4f0 [ 132.830697][ T6759] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 132.830722][ T6759] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 132.830752][ T6759] ? sctp_v4_is_any+0x35/0x60 [ 132.830767][ T6759] ? sctp_copy_one_addr+0x93/0x360 [ 132.830795][ T6759] sctp_bind_addr_copy+0xb3/0x3c0 [ 132.830821][ T6759] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 132.830847][ T6759] sctp_connect_new_asoc+0x2ff/0x6b0 [ 132.830871][ T6759] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 132.830898][ T6759] ? __local_bh_enable_ip+0xd0/0x130 [ 132.830915][ T6759] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 132.830939][ T6759] ? security_sctp_bind_connect+0x7e/0x2c0 [ 132.830964][ T6759] sctp_sendmsg+0x1576/0x2c50 [ 132.830982][ T6759] ? unwind_next_frame+0xa6/0x2550 [ 132.831016][ T6759] ? __pfx_sctp_sendmsg+0x10/0x10 [ 132.831038][ T6759] ? aa_sk_perm+0x6d5/0x900 [ 132.831069][ T6759] ? __pfx_aa_sk_perm+0x10/0x10 [ 132.831095][ T6759] ? sock_rps_record_flow+0x19/0x350 [ 132.831122][ T6759] ? inet_sendmsg+0x2f4/0x370 [ 132.831150][ T6759] ____sys_sendmsg+0x80a/0x9f0 [ 132.831180][ T6759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.831209][ T6759] ? import_iovec+0x73/0xa0 [ 132.831233][ T6759] ___sys_sendmsg+0x2a5/0x360 [ 132.831252][ T6759] ? __lock_acquire+0x6b5/0x2cf0 [ 132.831275][ T6759] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.831331][ T6759] ? __fget_files+0x2a/0x420 [ 132.831351][ T6759] ? __fget_files+0x3a0/0x420 [ 132.831382][ T6759] __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.831405][ T6759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.831434][ T6759] ? __pfx_ksys_write+0x10/0x10 [ 132.831471][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.831491][ T6759] do_syscall_64+0x174/0x580 [ 132.831515][ T6759] ? trace_irq_disable+0x3b/0x140 [ 132.831540][ T6759] ? clear_bhb_loop+0x40/0x90 [ 132.831561][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.831579][ T6759] RIP: 0033:0x7fb2af19ce59 [ 132.831596][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.831609][ T6759] RSP: 002b:00007fb2b0061028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.831629][ T6759] RAX: ffffffffffffffda RBX: 00007fb2af415fa0 RCX: 00007fb2af19ce59 [ 132.831641][ T6759] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000e [ 132.831652][ T6759] RBP: 00007fb2b0061090 R08: 0000000000000000 R09: 0000000000000000 [ 132.831662][ T6759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.831672][ T6759] R13: 00007fb2af416038 R14: 00007fb2af415fa0 R15: 00007ffe21c8b588 [ 132.831702][ T6759] [ 133.305974][ T6770] syzkaller0: entered promiscuous mode [ 133.344559][ T6770] syzkaller0: entered allmulticast mode [ 133.433925][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 133.467329][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.261'. [ 133.481597][ T6775] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 133.494676][ T6781] Cannot find set identified by id 65534 to match [ 133.503039][ T9] IPVS: starting estimator thread 0... [ 133.624537][ T6782] IPVS: using max 28 ests per chain, 67200 per kthread [ 133.779125][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 133.808327][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 134.053321][ T6809] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 134.107262][ T6814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.141933][ T6819] netlink: 'syz.3.273': attribute type 5 has an invalid length. [ 134.156196][ T6819] netlink: 'syz.3.273': attribute type 5 has an invalid length. [ 134.224185][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 134.227633][ T6825] openvswitch: netlink: IPv4 tun info is not correct [ 134.256180][ T6827] FAULT_INJECTION: forcing a failure. [ 134.256180][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 134.281046][ T6827] CPU: 1 UID: 0 PID: 6827 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(full) [ 134.281070][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.281081][ T6827] Call Trace: [ 134.281088][ T6827] [ 134.281096][ T6827] dump_stack_lvl+0xe8/0x150 [ 134.281121][ T6827] should_fail_ex+0x412/0x560 [ 134.281146][ T6827] should_failslab+0xa8/0x100 [ 134.281167][ T6827] __kmalloc_cache_noprof+0x88/0x660 [ 134.281192][ T6827] ? sctp_add_bind_addr+0x8c/0x370 [ 134.281216][ T6827] ? __pfx_sctp_get_port_local+0x10/0x10 [ 134.281241][ T6827] sctp_add_bind_addr+0x8c/0x370 [ 134.281264][ T6827] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 134.281288][ T6827] sctp_do_bind+0x5b2/0x9d0 [ 134.281319][ T6827] sctp_connect_new_asoc+0x270/0x6b0 [ 134.281342][ T6827] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 134.281370][ T6827] ? sctp_inet6_send_verify+0x23a/0x300 [ 134.281394][ T6827] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 134.281418][ T6827] __sctp_connect+0x5cb/0xdc0 [ 134.281449][ T6827] ? __pfx___sctp_connect+0x10/0x10 [ 134.281468][ T6827] ? security_sctp_bind_connect+0x7e/0x2c0 [ 134.281494][ T6827] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 134.281521][ T6827] sctp_getsockopt_connectx3+0x227/0x360 [ 134.281544][ T6827] ? lock_sock_nested+0x6a/0x100 [ 134.281570][ T6827] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 134.281600][ T6827] ? sctp_getsockopt+0x12f/0xb90 [ 134.281621][ T6827] ? __local_bh_enable_ip+0xd0/0x130 [ 134.281645][ T6827] sctp_getsockopt+0x984/0xb90 [ 134.281665][ T6827] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 134.281689][ T6827] do_sock_getsockopt+0x51d/0x7e0 [ 134.281714][ T6827] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 134.281749][ T6827] ? __fget_files+0x3a0/0x420 [ 134.281776][ T6827] ? __fget_files+0x2a/0x420 [ 134.281804][ T6827] __x64_sys_getsockopt+0x1a4/0x240 [ 134.281830][ T6827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.281849][ T6827] do_syscall_64+0x174/0x580 [ 134.281867][ T6827] ? trace_irq_disable+0x3b/0x140 [ 134.281891][ T6827] ? clear_bhb_loop+0x40/0x90 [ 134.281913][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.281930][ T6827] RIP: 0033:0x7f8e8e39ce59 [ 134.281947][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.281961][ T6827] RSP: 002b:00007f8e8f223028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 134.281980][ T6827] RAX: ffffffffffffffda RBX: 00007f8e8e615fa0 RCX: 00007f8e8e39ce59 [ 134.281992][ T6827] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 134.282003][ T6827] RBP: 00007f8e8f223090 R08: 0000200000000100 R09: 0000000000000000 [ 134.282014][ T6827] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 134.282024][ T6827] R13: 00007f8e8e616038 R14: 00007f8e8e615fa0 R15: 00007ffc15840298 [ 134.282055][ T6827] [ 134.845779][ T6849] FAULT_INJECTION: forcing a failure. [ 134.845779][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 134.862040][ T6849] CPU: 1 UID: 0 PID: 6849 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 134.862061][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.862071][ T6849] Call Trace: [ 134.862078][ T6849] [ 134.862085][ T6849] dump_stack_lvl+0xe8/0x150 [ 134.862109][ T6849] should_fail_ex+0x412/0x560 [ 134.862131][ T6849] should_failslab+0xa8/0x100 [ 134.862150][ T6849] __kmalloc_cache_noprof+0x88/0x660 [ 134.862174][ T6849] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 134.862198][ T6849] ? sctp_add_bind_addr+0x8c/0x370 [ 134.862235][ T6849] sctp_add_bind_addr+0x8c/0x370 [ 134.862262][ T6849] sctp_copy_local_addr_list+0x314/0x4f0 [ 134.862287][ T6849] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 134.862311][ T6849] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 134.862337][ T6849] ? sctp_v6_is_any+0x64/0x80 [ 134.862356][ T6849] ? sctp_copy_one_addr+0x93/0x360 [ 134.862383][ T6849] sctp_bind_addr_copy+0xb3/0x3c0 [ 134.862408][ T6849] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 134.862434][ T6849] sctp_connect_new_asoc+0x2ff/0x6b0 [ 134.862457][ T6849] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 134.862477][ T6849] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 134.862497][ T6849] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 134.862516][ T6849] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 134.862536][ T6849] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 134.862560][ T6849] ? security_sctp_bind_connect+0x7e/0x2c0 [ 134.862584][ T6849] sctp_sendmsg+0x1576/0x2c50 [ 134.862616][ T6849] ? __pfx_sctp_sendmsg+0x10/0x10 [ 134.862640][ T6849] ? aa_sk_perm+0x6d5/0x900 [ 134.862662][ T6849] ? __might_fault+0xaf/0x130 [ 134.862689][ T6849] ? __pfx_aa_sk_perm+0x10/0x10 [ 134.862715][ T6849] ? sock_rps_record_flow+0x19/0x350 [ 134.862744][ T6849] ? inet_sendmsg+0x2f4/0x370 [ 134.862765][ T6849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.862789][ T6849] ____sys_sendmsg+0x80a/0x9f0 [ 134.862818][ T6849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.862845][ T6849] ? import_iovec+0x73/0xa0 [ 134.862868][ T6849] ___sys_sendmsg+0x2a5/0x360 [ 134.862885][ T6849] ? __lock_acquire+0x6b5/0x2cf0 [ 134.862907][ T6849] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.862960][ T6849] ? __fget_files+0x2a/0x420 [ 134.862980][ T6849] ? __fget_files+0x3a0/0x420 [ 134.863010][ T6849] __x64_sys_sendmsg+0x1bd/0x2a0 [ 134.863032][ T6849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.863061][ T6849] ? __pfx_ksys_write+0x10/0x10 [ 134.863093][ T6849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.863111][ T6849] do_syscall_64+0x174/0x580 [ 134.863129][ T6849] ? trace_irq_disable+0x3b/0x140 [ 134.863153][ T6849] ? clear_bhb_loop+0x40/0x90 [ 134.863174][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.863191][ T6849] RIP: 0033:0x7fd4f939ce59 [ 134.863208][ T6849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.863230][ T6849] RSP: 002b:00007fd4fa1d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.863249][ T6849] RAX: ffffffffffffffda RBX: 00007fd4f9615fa0 RCX: 00007fd4f939ce59 [ 134.863261][ T6849] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 134.863271][ T6849] RBP: 00007fd4fa1d0090 R08: 0000000000000000 R09: 0000000000000000 [ 134.863282][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.863291][ T6849] R13: 00007fd4f9616038 R14: 00007fd4f9615fa0 R15: 00007ffc36cba478 [ 134.863321][ T6849] [ 135.738717][ T6878] IPVS: set_ctl: invalid protocol: 44 172.20.20.53:20001 [ 136.024852][ T6892] FAULT_INJECTION: forcing a failure. [ 136.024852][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.057495][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 136.057519][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.057530][ T6892] Call Trace: [ 136.057537][ T6892] [ 136.057545][ T6892] dump_stack_lvl+0xe8/0x150 [ 136.057570][ T6892] should_fail_ex+0x412/0x560 [ 136.057598][ T6892] _copy_from_iter+0x1d3/0x1670 [ 136.057627][ T6892] ? alloc_pages_mpol+0x3c0/0x490 [ 136.057647][ T6892] ? __pfx__copy_from_iter+0x10/0x10 [ 136.057666][ T6892] ? alloc_pages_noprof+0x13b/0x2a0 [ 136.057686][ T6892] ? skb_page_frag_refill+0x119/0x460 [ 136.057723][ T6892] kcm_sendmsg+0xe4e/0x29f0 [ 136.057785][ T6892] ? __pfx_kcm_sendmsg+0x10/0x10 [ 136.057807][ T6892] ? aa_sock_msg_perm+0xf1/0x1b0 [ 136.057834][ T6892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.057859][ T6892] ? __pfx_kcm_sendmsg+0x10/0x10 [ 136.057877][ T6892] sock_write_iter+0x49b/0x4f0 [ 136.057902][ T6892] ? __pfx_sock_write_iter+0x10/0x10 [ 136.057934][ T6892] ? bpf_lsm_file_permission+0x9/0x20 [ 136.057958][ T6892] ? security_file_permission+0x75/0x260 [ 136.057988][ T6892] vfs_write+0x61d/0xb90 [ 136.058022][ T6892] ? __pfx_vfs_write+0x10/0x10 [ 136.058056][ T6892] ? __fget_files+0x2a/0x420 [ 136.058086][ T6892] ksys_write+0x150/0x270 [ 136.058112][ T6892] ? __pfx_ksys_write+0x10/0x10 [ 136.058144][ T6892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.058164][ T6892] do_syscall_64+0x174/0x580 [ 136.058182][ T6892] ? trace_irq_disable+0x3b/0x140 [ 136.058207][ T6892] ? clear_bhb_loop+0x40/0x90 [ 136.058229][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.058246][ T6892] RIP: 0033:0x7f0b6fd9ce59 [ 136.058263][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.058276][ T6892] RSP: 002b:00007f0b70bbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.058295][ T6892] RAX: ffffffffffffffda RBX: 00007f0b70015fa0 RCX: 00007f0b6fd9ce59 [ 136.058308][ T6892] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 136.058319][ T6892] RBP: 00007f0b70bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 136.058330][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.058340][ T6892] R13: 00007f0b70016038 R14: 00007f0b70015fa0 R15: 00007ffc1da43c38 [ 136.058371][ T6892] [ 136.308401][ T6896] netlink: 284 bytes leftover after parsing attributes in process `syz.1.302'. [ 136.444609][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 136.457671][ T6898] netlink: 196 bytes leftover after parsing attributes in process `syz.1.303'. [ 136.688132][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 136.725083][ T6910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.307'. [ 136.890937][ T6927] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.905342][ T6918] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 137.387573][ T6955] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 137.410447][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.323'. [ 137.432081][ T6956] netlink: 'syz.4.323': attribute type 13 has an invalid length. [ 137.440131][ T6956] netlink: 'syz.4.323': attribute type 17 has an invalid length. [ 137.621319][ T6956] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 137.656007][ T6955] bond1: (slave gretap1): making interface the new active one [ 137.689520][ T6955] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 137.724572][ T6965] macvlan2: entered promiscuous mode [ 137.739997][ T6965] macvlan2: entered allmulticast mode [ 137.748224][ T6965] bond1: entered promiscuous mode [ 137.753355][ T6965] gretap1: entered promiscuous mode [ 137.761682][ T6965] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 137.770101][ T6965] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 137.788384][ T6965] bond1: left promiscuous mode [ 137.793857][ T6965] gretap1: left promiscuous mode [ 137.823381][ T6970] geneve2: entered promiscuous mode [ 137.829187][ T6970] geneve2: entered allmulticast mode [ 137.860048][ T143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 137.887543][ T143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 137.914237][ T143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 137.946486][ T143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 138.062213][ T6984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.173901][ T6995] netlink: 'syz.2.337': attribute type 29 has an invalid length. [ 138.215938][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 138.232462][ T7001] netlink: 'syz.4.339': attribute type 16 has an invalid length. [ 138.244543][ T7001] netlink: 'syz.4.339': attribute type 17 has an invalid length. [ 138.354540][ T6997] netlink: 48 bytes leftover after parsing attributes in process `syz.3.338'. [ 138.476768][ T7009] FAULT_INJECTION: forcing a failure. [ 138.476768][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 138.491057][ T7009] CPU: 0 UID: 0 PID: 7009 Comm: syz.4.341 Not tainted syzkaller #0 PREEMPT(full) [ 138.491090][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.491100][ T7009] Call Trace: [ 138.491107][ T7009] [ 138.491114][ T7009] dump_stack_lvl+0xe8/0x150 [ 138.491140][ T7009] should_fail_ex+0x412/0x560 [ 138.491163][ T7009] should_failslab+0xa8/0x100 [ 138.491179][ T7009] ? skb_clone+0x212/0x3a0 [ 138.491197][ T7009] kmem_cache_alloc_noprof+0x87/0x650 [ 138.491219][ T7009] ? __netlink_lookup+0xc6/0x8b0 [ 138.491243][ T7009] skb_clone+0x212/0x3a0 [ 138.491265][ T7009] __netlink_deliver_tap+0x404/0x850 [ 138.491293][ T7009] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.491314][ T7009] netlink_deliver_tap+0x19c/0x1b0 [ 138.491333][ T7009] netlink_unicast+0x730/0x8e0 [ 138.491360][ T7009] netlink_sendmsg+0x813/0xb40 [ 138.491388][ T7009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.491410][ T7009] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.491435][ T7009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.491459][ T7009] ____sys_sendmsg+0x972/0x9f0 [ 138.491479][ T7009] ? __might_fault+0xaf/0x130 [ 138.491507][ T7009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.491534][ T7009] ? import_iovec+0x73/0xa0 [ 138.491557][ T7009] ___sys_sendmsg+0x2a5/0x360 [ 138.491574][ T7009] ? __lock_acquire+0x6b5/0x2cf0 [ 138.491595][ T7009] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.491645][ T7009] ? __fget_files+0x2a/0x420 [ 138.491665][ T7009] ? __fget_files+0x3a0/0x420 [ 138.491695][ T7009] __x64_sys_sendmsg+0x1bd/0x2a0 [ 138.491717][ T7009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.491746][ T7009] ? __pfx_ksys_write+0x10/0x10 [ 138.491777][ T7009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.491797][ T7009] do_syscall_64+0x174/0x580 [ 138.491816][ T7009] ? trace_irq_disable+0x3b/0x140 [ 138.491839][ T7009] ? clear_bhb_loop+0x40/0x90 [ 138.491859][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.491875][ T7009] RIP: 0033:0x7fb2af19ce59 [ 138.491891][ T7009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.491905][ T7009] RSP: 002b:00007fb2b0061028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.491923][ T7009] RAX: ffffffffffffffda RBX: 00007fb2af415fa0 RCX: 00007fb2af19ce59 [ 138.491936][ T7009] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 138.491946][ T7009] RBP: 00007fb2b0061090 R08: 0000000000000000 R09: 0000000000000000 [ 138.491957][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.491967][ T7009] R13: 00007fb2af416038 R14: 00007fb2af415fa0 R15: 00007ffe21c8b588 [ 138.491996][ T7009] [ 139.062924][ T7032] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 139.296040][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'. [ 139.332086][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 139.412837][ T7047] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.649280][ T7062] ip6gre1: entered promiscuous mode [ 139.654910][ T7062] ip6gre1: entered allmulticast mode [ 139.667129][ T143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.699019][ T7062] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.711056][ T78] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.722084][ T143] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.906626][ T5744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.137599][ T7094] FAULT_INJECTION: forcing a failure. [ 140.137599][ T7094] name failslab, interval 1, probability 0, space 0, times 0 [ 140.169327][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.0.372 Not tainted syzkaller #0 PREEMPT(full) [ 140.169353][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 140.169363][ T7094] Call Trace: [ 140.169370][ T7094] [ 140.169378][ T7094] dump_stack_lvl+0xe8/0x150 [ 140.169403][ T7094] should_fail_ex+0x412/0x560 [ 140.169428][ T7094] should_failslab+0xa8/0x100 [ 140.169447][ T7094] __kmalloc_noprof+0xe8/0x760 [ 140.169472][ T7094] ? sk_prot_alloc+0xe7/0x210 [ 140.169495][ T7094] sk_prot_alloc+0xe7/0x210 [ 140.169512][ T7094] ? sk_alloc+0x27/0x390 [ 140.169532][ T7094] sk_alloc+0x3a/0x390 [ 140.169554][ T7094] bpf_prog_test_run_skb+0x415/0x2260 [ 140.169574][ T7094] ? bpf_prog_test_run_skb+0x1a1/0x2260 [ 140.169612][ T7094] ? __fget_files+0x3a0/0x420 [ 140.169631][ T7094] ? __fget_files+0x2a/0x420 [ 140.169657][ T7094] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 140.169678][ T7094] bpf_prog_test_run+0x2c7/0x340 [ 140.169699][ T7094] __sys_bpf+0x643/0x950 [ 140.169726][ T7094] ? __pfx___sys_bpf+0x10/0x10 [ 140.169765][ T7094] ? ksys_write+0x242/0x270 [ 140.169792][ T7094] ? __pfx_ksys_write+0x10/0x10 [ 140.169819][ T7094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.169838][ T7094] __x64_sys_bpf+0x7c/0x90 [ 140.169862][ T7094] do_syscall_64+0x174/0x580 [ 140.169880][ T7094] ? trace_irq_disable+0x3b/0x140 [ 140.169904][ T7094] ? clear_bhb_loop+0x40/0x90 [ 140.169924][ T7094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.169940][ T7094] RIP: 0033:0x7f0b6fd9ce59 [ 140.169964][ T7094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.169979][ T7094] RSP: 002b:00007f0b70bbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.169996][ T7094] RAX: ffffffffffffffda RBX: 00007f0b70015fa0 RCX: 00007f0b6fd9ce59 [ 140.170008][ T7094] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 140.170018][ T7094] RBP: 00007f0b70bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 140.170029][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.170039][ T7094] R13: 00007f0b70016038 R14: 00007f0b70015fa0 R15: 00007ffc1da43c38 [ 140.170067][ T7094] [ 140.188772][ T7097] syzkaller0: entered promiscuous mode [ 140.414302][ T5744] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.434280][ T7097] syzkaller0: entered allmulticast mode [ 141.196576][ T7122] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 141.341471][ T7139] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 141.350143][ T78] IPVS: starting estimator thread 0... [ 141.464161][ T7140] IPVS: using max 29 ests per chain, 69600 per kthread [ 141.506148][ T7145] FAULT_INJECTION: forcing a failure. [ 141.506148][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 141.540904][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(full) [ 141.540929][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.540942][ T7145] Call Trace: [ 141.540949][ T7145] [ 141.540957][ T7145] dump_stack_lvl+0xe8/0x150 [ 141.540983][ T7145] should_fail_ex+0x412/0x560 [ 141.541007][ T7145] should_failslab+0xa8/0x100 [ 141.541028][ T7145] __kmalloc_noprof+0xe8/0x760 [ 141.541050][ T7145] ? __kasan_kmalloc+0x93/0xb0 [ 141.541075][ T7145] ? nla_strdup+0x9d/0x140 [ 141.541094][ T7145] ? __kmalloc_cache_noprof+0x31c/0x660 [ 141.541121][ T7145] nla_strdup+0x9d/0x140 [ 141.541143][ T7145] nf_tables_newchain+0x1a9a/0x2890 [ 141.541185][ T7145] ? __pfx_nf_tables_newchain+0x10/0x10 [ 141.541238][ T7145] ? nfnl_pernet+0x23/0x240 [ 141.541255][ T7145] ? nfnl_pernet+0x23/0x240 [ 141.541279][ T7145] ? __nla_parse+0x40/0x60 [ 141.541303][ T7145] nfnetlink_rcv+0x123e/0x27b0 [ 141.541360][ T7145] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 141.541393][ T7145] ? ref_tracker_free+0x693/0x840 [ 141.541442][ T7145] ? __netlink_deliver_tap+0x807/0x850 [ 141.541472][ T7145] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.541491][ T7145] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.541516][ T7145] netlink_unicast+0x75c/0x8e0 [ 141.541544][ T7145] netlink_sendmsg+0x813/0xb40 [ 141.541574][ T7145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.541597][ T7145] ? aa_sock_msg_perm+0xf1/0x1b0 [ 141.541624][ T7145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.541650][ T7145] ____sys_sendmsg+0x972/0x9f0 [ 141.541670][ T7145] ? __might_fault+0xaf/0x130 [ 141.541699][ T7145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.541729][ T7145] ? import_iovec+0x73/0xa0 [ 141.541753][ T7145] ___sys_sendmsg+0x2a5/0x360 [ 141.541771][ T7145] ? __lock_acquire+0x6b5/0x2cf0 [ 141.541795][ T7145] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.541849][ T7145] ? __fget_files+0x2a/0x420 [ 141.541870][ T7145] ? __fget_files+0x3a0/0x420 [ 141.541900][ T7145] __x64_sys_sendmsg+0x1bd/0x2a0 [ 141.541924][ T7145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.541954][ T7145] ? __pfx_ksys_write+0x10/0x10 [ 141.541987][ T7145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.542007][ T7145] do_syscall_64+0x174/0x580 [ 141.542025][ T7145] ? trace_irq_disable+0x3b/0x140 [ 141.542049][ T7145] ? clear_bhb_loop+0x40/0x90 [ 141.542070][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.542086][ T7145] RIP: 0033:0x7f0b6fd9ce59 [ 141.542104][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.542118][ T7145] RSP: 002b:00007f0b70bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.542137][ T7145] RAX: ffffffffffffffda RBX: 00007f0b70015fa0 RCX: 00007f0b6fd9ce59 [ 141.542149][ T7145] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 141.542160][ T7145] RBP: 00007f0b70bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 141.542171][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.542181][ T7145] R13: 00007f0b70016038 R14: 00007f0b70015fa0 R15: 00007ffc1da43c38 [ 141.542212][ T7145] [ 142.107095][ T7154] netlink: 'syz.2.390': attribute type 1 has an invalid length. [ 142.199336][ T7154] bond1: entered promiscuous mode [ 142.205881][ T7154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.477687][ T7173] __nla_validate_parse: 3 callbacks suppressed [ 142.477704][ T7173] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.396'. [ 142.604373][ T7173] netlink: Unknown conntrack attr (type=2304, max=9) [ 142.745630][ T7187] netlink: 'syz.4.400': attribute type 1 has an invalid length. [ 142.951686][ T7207] netlink: 'syz.3.406': attribute type 1 has an invalid length. [ 142.978773][ T7207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 143.272944][ T7212] xt_bpf: check failed: parse error [ 143.780459][ T7217] FAULT_INJECTION: forcing a failure. [ 143.780459][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 143.793742][ T7217] CPU: 1 UID: 0 PID: 7217 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) [ 143.793766][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.793776][ T7217] Call Trace: [ 143.793783][ T7217] [ 143.793791][ T7217] dump_stack_lvl+0xe8/0x150 [ 143.793817][ T7217] should_fail_ex+0x412/0x560 [ 143.793841][ T7217] should_failslab+0xa8/0x100 [ 143.793861][ T7217] __kmalloc_noprof+0xe8/0x760 [ 143.793885][ T7217] ? tun_set_link_ksettings+0x29/0x40 [ 143.793910][ T7217] ? ethnl_default_notify+0x1b0/0xb10 [ 143.793938][ T7217] ethnl_default_notify+0x1b0/0xb10 [ 143.793966][ T7217] ? __pfx_ethnl_set_linkmodes+0x10/0x10 [ 143.793991][ T7217] ? __pfx_ethnl_default_notify+0x10/0x10 [ 143.794012][ T7217] ? rcu_is_watching+0x15/0xb0 [ 143.794045][ T7217] ? mutex_is_locked+0x17/0x50 [ 143.794068][ T7217] ? rtnl_is_locked+0x15/0x20 [ 143.794086][ T7217] ? ethnl_notify+0x1a3/0x300 [ 143.794111][ T7217] ethnl_default_set_doit+0x90c/0xd70 [ 143.794144][ T7217] genl_family_rcv_msg_doit+0x22a/0x330 [ 143.794177][ T7217] ? __asan_memcpy+0x40/0x70 [ 143.794203][ T7217] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 143.794239][ T7217] ? bpf_lsm_capable+0x9/0x20 [ 143.794256][ T7217] ? security_capable+0x7e/0x2c0 [ 143.794286][ T7217] genl_rcv_msg+0x61c/0x7a0 [ 143.794316][ T7217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.794338][ T7217] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 143.794362][ T7217] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.794380][ T7217] ? __asan_memcpy+0x40/0x70 [ 143.794400][ T7217] ? __skb_clone+0x63/0x7a0 [ 143.794428][ T7217] netlink_rcv_skb+0x232/0x4b0 [ 143.794449][ T7217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.794474][ T7217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.794510][ T7217] ? down_read+0x270/0x2e0 [ 143.794529][ T7217] ? genl_rcv+0xd/0x40 [ 143.794553][ T7217] genl_rcv+0x28/0x40 [ 143.794574][ T7217] netlink_unicast+0x75c/0x8e0 [ 143.794604][ T7217] netlink_sendmsg+0x813/0xb40 [ 143.794633][ T7217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.794657][ T7217] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.794684][ T7217] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.794709][ T7217] ____sys_sendmsg+0x972/0x9f0 [ 143.794729][ T7217] ? __might_fault+0xaf/0x130 [ 143.794758][ T7217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.794787][ T7217] ? import_iovec+0x73/0xa0 [ 143.794810][ T7217] ___sys_sendmsg+0x2a5/0x360 [ 143.794829][ T7217] ? __lock_acquire+0x6b5/0x2cf0 [ 143.794852][ T7217] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.794907][ T7217] ? __fget_files+0x2a/0x420 [ 143.794928][ T7217] ? __fget_files+0x3a0/0x420 [ 143.794958][ T7217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 143.794981][ T7217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.795011][ T7217] ? __pfx_ksys_write+0x10/0x10 [ 143.795044][ T7217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.795063][ T7217] do_syscall_64+0x174/0x580 [ 143.795081][ T7217] ? trace_irq_disable+0x3b/0x140 [ 143.795105][ T7217] ? clear_bhb_loop+0x40/0x90 [ 143.795127][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.795145][ T7217] RIP: 0033:0x7f8e8e39ce59 [ 143.795161][ T7217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.795181][ T7217] RSP: 002b:00007f8e8f223028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.795198][ T7217] RAX: ffffffffffffffda RBX: 00007f8e8e615fa0 RCX: 00007f8e8e39ce59 [ 143.795211][ T7217] RDX: 0000000020008000 RSI: 0000200000000480 RDI: 0000000000000004 [ 143.795222][ T7217] RBP: 00007f8e8f223090 R08: 0000000000000000 R09: 0000000000000000 [ 143.795232][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.795242][ T7217] R13: 00007f8e8e616038 R14: 00007f8e8e615fa0 R15: 00007ffc15840298 [ 143.795272][ T7217] [ 144.158930][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.193017][ T5643] Bluetooth: hci4: command tx timeout [ 144.764784][ T7244] FAULT_INJECTION: forcing a failure. [ 144.764784][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.796921][ T7245] FAULT_INJECTION: forcing a failure. [ 144.796921][ T7245] name failslab, interval 1, probability 0, space 0, times 0 [ 144.817535][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT(full) [ 144.817560][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.817570][ T7244] Call Trace: [ 144.817577][ T7244] [ 144.817585][ T7244] dump_stack_lvl+0xe8/0x150 [ 144.817610][ T7244] should_fail_ex+0x412/0x560 [ 144.817632][ T7244] _copy_from_user+0x2d/0xb0 [ 144.817654][ T7244] ___sys_recvmsg+0x175/0x590 [ 144.817680][ T7244] ? __pfx____sys_recvmsg+0x10/0x10 [ 144.817703][ T7244] ? __fget_files+0x2a/0x420 [ 144.817752][ T7244] do_recvmmsg+0x334/0x800 [ 144.817780][ T7244] ? __pfx_do_recvmmsg+0x10/0x10 [ 144.817811][ T7244] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.817848][ T7244] __x64_sys_recvmmsg+0x198/0x250 [ 144.817871][ T7244] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 144.817900][ T7244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.817919][ T7244] do_syscall_64+0x174/0x580 [ 144.817937][ T7244] ? trace_irq_disable+0x3b/0x140 [ 144.817962][ T7244] ? clear_bhb_loop+0x40/0x90 [ 144.817984][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.818009][ T7244] RIP: 0033:0x7f8e8e39ce59 [ 144.818026][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.818040][ T7244] RSP: 002b:00007f8e8f223028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 144.818059][ T7244] RAX: ffffffffffffffda RBX: 00007f8e8e615fa0 RCX: 00007f8e8e39ce59 [ 144.818072][ T7244] RDX: 0000000004000210 RSI: 0000200000001740 RDI: 0000000000000003 [ 144.818083][ T7244] RBP: 00007f8e8f223090 R08: 0000000000000000 R09: 0000000000000000 [ 144.818094][ T7244] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 144.818104][ T7244] R13: 00007f8e8e616038 R14: 00007f8e8e615fa0 R15: 00007ffc15840298 [ 144.818132][ T7244] [ 144.821044][ T7245] CPU: 1 UID: 0 PID: 7245 Comm: syz.2.419 Not tainted syzkaller #0 PREEMPT(full) [ 144.821067][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.821077][ T7245] Call Trace: [ 144.821084][ T7245] [ 144.821092][ T7245] dump_stack_lvl+0xe8/0x150 [ 144.821116][ T7245] should_fail_ex+0x412/0x560 [ 144.821139][ T7245] should_failslab+0xa8/0x100 [ 144.821159][ T7245] __kmalloc_cache_noprof+0x88/0x660 [ 144.821183][ T7245] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 144.821208][ T7245] ? sctp_add_bind_addr+0x8c/0x370 [ 144.821237][ T7245] sctp_add_bind_addr+0x8c/0x370 [ 144.821267][ T7245] sctp_copy_local_addr_list+0x314/0x4f0 [ 144.821295][ T7245] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 144.821320][ T7245] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 144.821352][ T7245] ? sctp_v4_is_any+0x35/0x60 [ 144.821368][ T7245] ? sctp_copy_one_addr+0x93/0x360 [ 144.821396][ T7245] sctp_bind_addr_copy+0xb3/0x3c0 [ 144.821422][ T7245] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 144.821448][ T7245] sctp_connect_new_asoc+0x2ff/0x6b0 [ 144.821472][ T7245] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 144.821498][ T7245] ? __local_bh_enable_ip+0xd0/0x130 [ 144.821516][ T7245] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 144.821540][ T7245] ? security_sctp_bind_connect+0x7e/0x2c0 [ 144.821565][ T7245] sctp_sendmsg+0x1576/0x2c50 [ 144.821582][ T7245] ? unwind_next_frame+0xa6/0x2550 [ 144.821618][ T7245] ? __pfx_sctp_sendmsg+0x10/0x10 [ 144.821641][ T7245] ? aa_sk_perm+0x6d5/0x900 [ 144.821672][ T7245] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.821698][ T7245] ? sock_rps_record_flow+0x19/0x350 [ 144.821726][ T7245] ? inet_sendmsg+0x2f4/0x370 [ 144.821754][ T7245] ____sys_sendmsg+0x80a/0x9f0 [ 144.821784][ T7245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.821813][ T7245] ? import_iovec+0x73/0xa0 [ 144.821837][ T7245] ___sys_sendmsg+0x2a5/0x360 [ 144.821855][ T7245] ? __lock_acquire+0x6b5/0x2cf0 [ 144.821878][ T7245] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.821933][ T7245] ? __fget_files+0x2a/0x420 [ 144.821953][ T7245] ? __fget_files+0x3a0/0x420 [ 144.821984][ T7245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 144.822013][ T7245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.822043][ T7245] ? __pfx_ksys_write+0x10/0x10 [ 144.822076][ T7245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.822096][ T7245] do_syscall_64+0x174/0x580 [ 144.822115][ T7245] ? trace_irq_disable+0x3b/0x140 [ 144.822139][ T7245] ? clear_bhb_loop+0x40/0x90 [ 144.822161][ T7245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.822178][ T7245] RIP: 0033:0x7f95afd9ce59 [ 144.822194][ T7245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.822208][ T7245] RSP: 002b:00007f95b0c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.822227][ T7245] RAX: ffffffffffffffda RBX: 00007f95b0015fa0 RCX: 00007f95afd9ce59 [ 144.822240][ T7245] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000003 [ 144.822251][ T7245] RBP: 00007f95b0c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 144.822261][ T7245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.822271][ T7245] R13: 00007f95b0016038 R14: 00007f95b0015fa0 R15: 00007ffd5e6f3428 [ 144.822301][ T7245] [ 145.331470][ T7248] xt_TCPMSS: Only works on TCP SYN packets [ 145.436073][ T7248] hsr_slave_1: entered allmulticast mode [ 145.445747][ T7246] hsr_slave_1: left allmulticast mode [ 145.731038][ T7262] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 150.684076][ C1] sched: DL replenish lagged too much [ 152.497373][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.854267][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.322590][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.343691][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.856304][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.385993][ T5630] Bluetooth: hci0: command tx timeout [ 204.391440][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 204.665790][ T4944] Bluetooth: hci1: command 0x0406 tx timeout [ 204.671839][ T4944] Bluetooth: hci3: command tx timeout [ 257.108491][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.127143][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.472710][ T4944] Bluetooth: hci4: command 0x0406 tx timeout [ 270.905955][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 291.854083][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 291.861071][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7253/1:b..l [ 291.869333][ C1] rcu: (detected by 1, t=10503 jiffies, g=21021, q=1082977 ncpus=2) [ 291.877414][ C1] task:syz.2.422 state:R running task stack:25464 pid:7253 tgid:7250 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 291.891658][ C1] Call Trace: [ 291.894956][ C1] [ 291.897893][ C1] __schedule+0x1821/0x5740 [ 291.902411][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 291.907809][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 291.912763][ C1] ? __pfx___schedule+0x10/0x10 [ 291.917621][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 291.922575][ C1] preempt_schedule_irq+0x4d/0xa0 [ 291.927602][ C1] irqentry_exit+0x14f/0x8b0 [ 291.932196][ C1] ? trace_irq_disable+0x3b/0x140 [ 291.937237][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.943223][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 291.948512][ C1] Code: ff ff ff e8 31 8f 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b fa 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 96 92 [ 291.968132][ C1] RSP: 0018:ffffc9000ccc6f18 EFLAGS: 00000286 [ 291.974468][ C1] RAX: 6e32efce0d8fb700 RBX: 0000000000000000 RCX: 0000000000000046 [ 291.982444][ C1] RDX: 00000000dc91e4e3 RSI: ffffffff8e224255 RDI: ffffffff8c28a560 [ 291.990418][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 291.998394][ C1] R10: ffffc9000ccc7078 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 292.006368][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 292.014347][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.019472][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 292.025673][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.030804][ C1] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 292.035833][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.040950][ C1] unwind_next_frame+0xc3/0x2550 [ 292.045893][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.051022][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.056138][ C1] ? __sys_sendmmsg+0x27c/0x4e0 [ 292.060998][ C1] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 292.066037][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 292.072380][ C1] arch_stack_walk+0x11b/0x150 [ 292.077157][ C1] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 292.082194][ C1] stack_trace_save+0xa9/0x100 [ 292.086967][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 292.092378][ C1] save_stack+0x122/0x230 [ 292.096718][ C1] ? count_memcg_event_mm+0x21/0x260 [ 292.102012][ C1] ? __pfx_save_stack+0x10/0x10 [ 292.106868][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 292.111808][ C1] ? post_alloc_hook+0x22d/0x280 [ 292.116753][ C1] ? get_page_from_freelist+0x2593/0x2610 [ 292.122473][ C1] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 292.128461][ C1] ? alloc_pages_mpol+0x235/0x490 [ 292.133485][ C1] ? alloc_pages_noprof+0xac/0x2a0 [ 292.138656][ C1] ? af_alg_sendmsg+0x1446/0x2650 [ 292.143681][ C1] ? ____sys_sendmsg+0x972/0x9f0 [ 292.148621][ C1] ? ___sys_sendmsg+0x2a5/0x360 [ 292.153471][ C1] ? __sys_sendmmsg+0x27c/0x4e0 [ 292.158324][ C1] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 292.163370][ C1] __set_page_owner+0x8d/0x4c0 [ 292.168146][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 292.173535][ C1] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 292.179614][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 292.184816][ C1] ? bad_range+0x8b/0x2c0 [ 292.189157][ C1] post_alloc_hook+0x22d/0x280 [ 292.193932][ C1] get_page_from_freelist+0x2593/0x2610 [ 292.199513][ C1] ? fs_reclaim_acquire+0x7c/0x100 [ 292.204662][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 292.210482][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 292.216825][ C1] ? __pfx_policy_nodemask+0x10/0x10 [ 292.222115][ C1] ? trace_kmalloc+0x2a/0xf0 [ 292.226715][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 292.232019][ C1] alloc_pages_mpol+0x235/0x490 [ 292.236880][ C1] alloc_pages_noprof+0xac/0x2a0 [ 292.241826][ C1] af_alg_sendmsg+0x1446/0x2650 [ 292.246702][ C1] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 292.251902][ C1] ? __pfx_woken_wake_function+0x10/0x10 [ 292.257557][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.262504][ C1] ? skcipher_sendmsg+0x26/0xf0 [ 292.267361][ C1] ____sys_sendmsg+0x972/0x9f0 [ 292.272131][ C1] ? __might_fault+0xaf/0x130 [ 292.276820][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.282116][ C1] ? import_iovec+0x73/0xa0 [ 292.286630][ C1] ___sys_sendmsg+0x2a5/0x360 [ 292.291320][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 292.296268][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.301477][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 292.306795][ C1] ? __fget_files+0x2a/0x420 [ 292.311391][ C1] ? __fget_files+0x3a0/0x420 [ 292.316087][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 292.320776][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 292.325980][ C1] ? do_futex+0x333/0x420 [ 292.330324][ C1] ? fd_install+0x94/0x3d0 [ 292.334763][ C1] ? rcu_is_watching+0x15/0xb0 [ 292.339540][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 292.344400][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.350469][ C1] do_syscall_64+0x174/0x580 [ 292.355066][ C1] ? trace_irq_disable+0x3b/0x140 [ 292.360107][ C1] ? clear_bhb_loop+0x40/0x90 [ 292.364791][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.370686][ C1] RIP: 0033:0x7f95afd9ce59 [ 292.375538][ C1] RSP: 002b:00007f95b0c49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.383954][ C1] RAX: ffffffffffffffda RBX: 00007f95b0016090 RCX: 00007f95afd9ce59 [ 292.391926][ C1] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000b [ 292.399915][ C1] RBP: 00007f95afe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 292.407888][ C1] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000000 [ 292.415857][ C1] R13: 00007f95b0016128 R14: 00007f95b0016090 R15: 00007ffd5e6f3428 [ 292.423850][ C1] [ 292.426870][ C1] rcu: rcu_preempt kthread starved for 817 jiffies! g21021 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 292.437891][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 292.447858][ C1] rcu: RCU grace-period kthread stack dump: [ 292.453741][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 292.467234][ C1] Call Trace: [ 292.470518][ C1] [ 292.473454][ C1] __schedule+0x1821/0x5740 [ 292.477962][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 292.482935][ C1] ? __pfx___schedule+0x10/0x10 [ 292.487799][ C1] ? schedule+0x90/0x360 [ 292.492051][ C1] schedule+0x164/0x360 [ 292.496220][ C1] schedule_timeout+0x158/0x2c0 [ 292.501090][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 292.506484][ C1] ? __pfx_process_timeout+0x10/0x10 [ 292.511780][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 292.517589][ C1] ? prepare_to_swait_event+0x340/0x370 [ 292.523153][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 292.528025][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 292.534196][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 292.539484][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 292.544701][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 292.549297][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 292.554498][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 292.560310][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 292.565254][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 292.570287][ C1] kthread+0x389/0x470 [ 292.574362][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 292.579565][ C1] ? __pfx_kthread+0x10/0x10 [ 292.584171][ C1] ret_from_fork+0x514/0xb70 [ 292.588769][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 292.593885][ C1] ? __switch_to+0xc79/0x1410 [ 292.598576][ C1] ? __pfx_kthread+0x10/0x10 [ 292.603176][ C1] ret_from_fork_asm+0x1a/0x30 [ 292.607960][ C1] [ 292.610978][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 292.617315][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 292.626597][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.636655][ C1] Workqueue: bat_events batadv_tt_purge [ 292.642220][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 292.647513][ C1] Code: ff ff ff e8 31 8f 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 0b fa 97 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 98 96 92 [ 292.667119][ C1] RSP: 0018:ffffc90000a07938 EFLAGS: 00000282 [ 292.673193][ C1] RAX: 4290ab34a1d0cc00 RBX: 0000000000000000 RCX: 0000000080000101 [ 292.681166][ C1] RDX: 000000007f45ee1d RSI: ffffffff8e224255 RDI: ffffffff8c28a560 [ 292.689141][ C1] RBP: ffffffff8176e256 R08: ffffffff8176e256 R09: ffffffff8e95cc20 [ 292.697120][ C1] R10: ffffc90000a07a98 R11: ffffffff81b0e0e0 R12: 0000000000000002 [ 292.705093][ C1] R13: ffffffff8e95cc20 R14: 0000000000000000 R15: 0000000000000246 [ 292.713075][ C1] FS: 0000000000000000(0000) GS:ffff888125386000(0000) knlGS:0000000000000000 [ 292.721999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.728586][ C1] CR2: 0000200000051000 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 292.736583][ C1] Call Trace: [ 292.739866][ C1] [ 292.742708][ C1] ? kasan_save_track+0x3e/0x80 [ 292.747571][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.752686][ C1] unwind_next_frame+0xc3/0x2550 [ 292.757628][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.762749][ C1] ? unwind_next_frame+0xa6/0x2550 [ 292.767867][ C1] ? stack_trace_save+0xa9/0x100 [ 292.772815][ C1] ? kasan_save_track+0x3e/0x80 [ 292.777673][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 292.783839][ C1] arch_stack_walk+0x11b/0x150 [ 292.788612][ C1] ? kasan_save_track+0x3e/0x80 [ 292.793471][ C1] ? dst_alloc+0x105/0x170 [ 292.797896][ C1] stack_trace_save+0xa9/0x100 [ 292.802669][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 292.808052][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 292.812998][ C1] kasan_save_track+0x3e/0x80 [ 292.817685][ C1] ? kasan_save_track+0x3e/0x80 [ 292.822597][ C1] __kasan_slab_alloc+0x6c/0x80 [ 292.827459][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 292.832922][ C1] ? dst_alloc+0x105/0x170 [ 292.837343][ C1] ? __pfx_find_exception+0x10/0x10 [ 292.842549][ C1] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 292.848192][ C1] dst_alloc+0x105/0x170 [ 292.852445][ C1] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 292.858532][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 292.864176][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 292.869748][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 292.875825][ C1] ? lock_acquire+0x106/0x350 [ 292.880532][ C1] ip_route_output_flow+0x2a/0x150 [ 292.885648][ C1] ? ip_route_me_harder+0x730/0xf90 [ 292.890855][ C1] ip_route_me_harder+0x742/0xf90 [ 292.895895][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 292.901465][ C1] ? __cookie_v4_init_sequence+0x25d/0x500 [ 292.907284][ C1] synproxy_send_tcp+0x34c/0x670 [ 292.912237][ C1] synproxy_send_client_synack+0x8c1/0xe30 [ 292.918068][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 292.924416][ C1] ? nft_jhash_init+0x528/0x670 [ 292.929269][ C1] ? synproxy_pernet+0x45/0x270 [ 292.934133][ C1] nft_synproxy_eval_v4+0x34a/0x4e0 [ 292.939347][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 292.945075][ C1] ? nf_ip_checksum+0x13c/0x510 [ 292.949940][ C1] nft_synproxy_do_eval+0x305/0x580 [ 292.955158][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 292.960886][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 292.965835][ C1] ? arch_stack_walk+0x11b/0x150 [ 292.970785][ C1] nft_do_chain+0x48d/0x1ae0 [ 292.975648][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 292.981034][ C1] ? stack_depot_save_flags+0x33/0x810 [ 292.986500][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 292.991543][ C1] ? ipt_do_table+0x2b2/0x1630 [ 292.996321][ C1] ? nf_nat_inet_fn+0x64a/0xbc0 [ 293.001187][ C1] nft_do_chain_inet+0x360/0x4b0 [ 293.006135][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 293.011600][ C1] ? ipt_do_table+0x2b2/0x1630 [ 293.016374][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 293.021759][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 293.027234][ C1] nf_hook_slow+0xc5/0x220 [ 293.031665][ C1] NF_HOOK+0x21f/0x3c0 [ 293.035742][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 293.041725][ C1] ? NF_HOOK+0x9e/0x3c0 [ 293.045884][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 293.050472][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 293.055765][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 293.061754][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 293.066787][ C1] NF_HOOK+0x336/0x3c0 [ 293.070863][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 293.075980][ C1] ? NF_HOOK+0x9e/0x3c0 [ 293.080146][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 293.084740][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 293.089862][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 293.094370][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 293.098878][ C1] ? process_backlog+0x3eb/0x1950 [ 293.103909][ C1] process_backlog+0xaa3/0x1950 [ 293.108787][ C1] __napi_poll+0xae/0x340 [ 293.113126][ C1] ? skb_defer_free_flush+0x233/0x260 [ 293.118510][ C1] net_rx_action+0x627/0xf70 [ 293.123125][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 293.128265][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 293.133223][ C1] handle_softirqs+0x22a/0x840 [ 293.138020][ C1] ? do_softirq+0x76/0xd0 [ 293.142354][ C1] ? batadv_tt_purge+0x4d1/0x9e0 [ 293.147302][ C1] do_softirq+0x76/0xd0 [ 293.151459][ C1] [ 293.154387][ C1] [ 293.157319][ C1] __local_bh_enable_ip+0xf8/0x130 [ 293.162431][ C1] batadv_tt_purge+0x4d1/0x9e0 [ 293.167220][ C1] ? process_scheduled_works+0xa70/0x1860 [ 293.173204][ C1] process_scheduled_works+0xb5d/0x1860 [ 293.178781][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.184772][ C1] ? assign_work+0x3d5/0x5e0 [ 293.189374][ C1] worker_thread+0xa53/0xfc0 [ 293.193993][ C1] kthread+0x389/0x470 [ 293.198074][ C1] ? __pfx_worker_thread+0x10/0x10 [ 293.203185][ C1] ? __pfx_kthread+0x10/0x10 [ 293.207783][ C1] ret_from_fork+0x514/0xb70 [ 293.212380][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 293.217495][ C1] ? __switch_to+0xc79/0x1410 [ 293.222184][ C1] ? __pfx_kthread+0x10/0x10 [ 293.226780][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.231565][ C1]