last executing test programs: 1m56.912769257s ago: executing program 2 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x1004c840) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000500050002000000050004"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbf}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000500)=0x12, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 2) 1m56.230341491s ago: executing program 2 (id=1813): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000640)='syz_tun\x00', 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x2) syz_emit_ethernet(0x7e, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2b, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@dev}, {@empty}, {@dev}, {@broadcast}]}, @generic={0x89, 0x9, "37ff2ce8b7da7b"}]}}}}}}}, 0x0) 1m54.776815292s ago: executing program 2 (id=1817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x258}}, 0x0) (fail_nth: 19) 1m54.044858665s ago: executing program 2 (id=1819): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150041000400000000000000fc000000006ba4a82e1d1a37ed20c9a956620000000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000030000000000000000000000000000000000000000000000000000000000000009"], 0xb8}}, 0x4000040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000011700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1m50.854801757s ago: executing program 2 (id=1823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000b40)=ANY=[@ANYBLOB="840000000307010400000000000000000300000a0c000340000000010000000108000540000000030900010073797a30000000002c000780080002400000000d0800024000000007080001400000000f080002400000006308000140004d002a0c00034000000000000000070c000340000000000000d8470c00034000000000000008007d32413dc4fb0c20685cf66475908f617aac800026b3d4b73a5ff188b7ec925c5213ab347c36179822e0aafcbb98d4e33fb54f4b7fa355fa3698f6e4ea65c756f7f5914fa82c2184b4587dd0b09fd1b03c23532d192e6757efb53b7e6d2172bad7b731d80b3f367ec1dbba26fcf5cddb917821053f115662a30acf6af9b7d9d3f73e4caf4228068ae67eb118959886bb24139ff35d3047bf0950f59d98df8e793092a7763cee0d16fa30f14d87b9197e767ad5bc8a77c29ee2514d3b44a610616cd6fd5eac981bc310bec348e1824df4f932a4c00e"], 0x84}, 0x1, 0x0, 0x0, 0x20040040}, 0x4044080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000940)='GPL\x00'}, 0x94) unshare(0x68000600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000220000000000000080000006b1189000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) shutdown(r1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x1c}, @remote, @loopback, 0x10000006, 0x833, 0x4, 0x100, 0x4000000010000009, 0xa90204}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect(r4, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x2711, @host, 0x1}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000a40)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f0000000a80)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write(r7, &(0x7f0000000ac0)="94", 0x1) tee(r6, r10, 0x8f5, 0x100000000000000) write$cgroup_type(r10, &(0x7f0000000b00), 0x9) write(r8, 0x0, 0x0) 1m50.796363671s ago: executing program 0 (id=1824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x52, 0x1, 0x70bd26, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404e050}, 0x4000084) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000000900010073797a30000000004c000000120a01040000000000000000020000000900010073797a30000000000900020073797a300000000008000300000000031800048009000100736e6d70040000000500030011"], 0x94}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x24040015) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x40}, 0x50) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r6}, 0xc) sendto$inet(r1, &(0x7f0000000280)="b9e9ebae64f8897598c9fa5c95455509635f6f0c46ebafa552f3b52e193a1f4a237ef28e3de9b75340056f53138bb2f2c04f935c03ed8b1514822aca48878c11cc4f60cb576b1e06fed0af8cd49068e13d13d80456277a6ab1c77833e0183244d183ce69e92a4ae1e2230682494e7f3cedb8a1633aab10b5d14d748c3617e7b30dfa551b5db7dd4ed6ac2c538a716dbe101b13572cd003def8b7ba44b259ab69c1d350601afe7a0bd1e8e3e901f5d2681c31a8da9639", 0xb6, 0x4080, &(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000680), 0x4) sendto$inet(r0, &(0x7f0000000440)='w', 0x1, 0x4000801, 0x0, 0x0) 1m50.565931631s ago: executing program 4 (id=1826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x1, 0x84, 0x0, @private=0xa010102, @empty}}}}}}, 0x26) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendto$inet(r2, 0x0, 0x0, 0x4001800, &(0x7f0000000780)={0x2, 0x1225, @loopback}, 0x10) 1m49.976979572s ago: executing program 0 (id=1829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000440), 0xa7c, r0}, 0x38) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) unshare(0x22020600) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x7c, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x93}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000540)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1m49.625670325s ago: executing program 4 (id=1830): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x0, 0x0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000140)=[{0xa4, 0x7f, 0x86, 0xfffff014}, {0x6, 0xfd, 0x0, 0xdfffffff}]}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000018140100020000000300000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000580)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="54020080", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf2515000000050029000000000008002a000700000008002c00d8fcffff08002a00010000003a002a00070000000c00060000000000000000000c002b800800010001000000"], 0x54}, 0x1, 0x0, 0x0, 0x4048082}, 0x4) 1m49.240618658s ago: executing program 0 (id=1832): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000008, 0x32, 0xffffffffffffffff, 0xc7123000) r0 = socket(0x39, 0x803, 0x5e47) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x3) ioctl$TUNSETLINK(r2, 0x400454cd, 0x103) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000340)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000380)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000003c0)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000400)={0x2c, 0x0, r1, 0x1, 0xffffffff}, 0x10) epoll_create(0x61) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000043b6ea1d2611321d7640760af49868a8ba8c0b0e183b7070e53909058176ea52132182fe1c6edd05003d3d99232a828fada69ef8dcff27e42e81e7c7e7b2d90c99a6a7d88e80bfcc2d277e6b26c49b646fd6e6c84c0b986a9a8f0b316f2346f6f4e012caab2640c423dcdc93657c5e84c21e1526ccaf278efa60428c8c0da32aa82d8087d7f440cd7e109ad4282e2f6139107c162b70eac2add08054fd8c63eb68eacad1a73452ac77c348dfdbb97d260c0039d0ac8c5ccba90000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bind$alg(0xffffffffffffffff, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r8 = socket(0x1f, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a00)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x5}, {0xffff, 0xd}, {0xffe0, 0x9}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x37, 0xf, 0xc, 0x2, 0x5, 0x3ff, 0x2}}, {0x8, 0x2, [0x40, 0x7f]}}, {{0x1c, 0x1, {0x1b, 0xe, 0x5, 0x9, 0x2, 0x5, 0x0, 0x1}}, {0xc, 0x2, [0x5, 0x4, 0x8001, 0x381]}}, {{0x1c, 0x1, {0x4f, 0x1, 0x2, 0x1, 0x1, 0x3, 0x0, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x10, 0xc0, 0x9, 0x9, 0x2, 0x0, 0x3, 0x4}}, {0xc, 0x2, [0x4, 0x8, 0x9, 0x9]}}, {{0x1c, 0x1, {0x1, 0x7, 0x40, 0x5, 0x0, 0xb6, 0x9f0, 0x4}}, {0xc, 0x2, [0x7, 0x3, 0x7c, 0x551c]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}, @TCA_RATE={0x6, 0x5, {0x1, 0x3d}}]}, 0xf8}}, 0x4000004) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000001c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7a, 0x7, 0x78}, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0xffffffffffffffff, 0x4}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c40)=ANY=[@ANYRES16, @ANYRES8=r3, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00050000000500010004"], 0x4c}}, 0x0) 1m48.863692155s ago: executing program 3 (id=1833): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=0xffffffffffffffff, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x48) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000d40)={'gretap0\x00', &(0x7f00000009c0)={'tunl0\x00', r3, 0x40, 0x8, 0x37e, 0xfffffff9, {{0x16, 0x4, 0x0, 0x7, 0x58, 0x66, 0x0, 0xa0, 0x4, 0x0, @rand_addr=0x64010103, @empty, {[@cipso={0x86, 0x24, 0x3, [{0x2, 0xffffffffffffffc6, "188448"}, {0x7, 0xa, "352785b1964df7aa"}, {0x0, 0xf, "433da22044ad612220cecbc7d9"}]}, @lsrr={0x83, 0x1f, 0xa2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @local]}]}}}}}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001d00010000f9ffffffffffffff00806e0800000000000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="0ef7c2914838fe69250130280ae45708000615000000000000802c7fa0012e107ef05b6131a75c163c2112a141580bb6f5702348a43254f375c045fea8e3c343962e3fe125e0962b0909165b6cf2f518bd145158483f67bac22a9ac9d9dfb2a641c4eed4632773a5cee34a34b7590f192ffb652095e7d534774d3cbb526eda861bb27a59fff4cba86f08ead138c53642f3d5a49ddfaa442ee8888f71fc20678ae0418d589f744b", @ANYRES32=r3, @ANYRESDEC=r4, @ANYRES32=r2, @ANYBLOB="adc064abb6fd0ba946c9f6f4c8090a7b624c945050eb7f01ed9980d9f62e61d3bc192bb62a0b672c2724061ad6080011e8855792"], 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x40040) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3800000054000104000000008000000007000012fa77d6ce82c8ec83ffa0b2d43ab801359f603fa0e999c313fda98070fe0df36558a77cdf37a8f0", @ANYRESOCT=r1, @ANYBLOB="20000100", @ANYRES32=r3, @ANYRESHEX=r6], 0x38}}, 0x2000c0c5) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r9], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r10, 0x0, 0xe, 0x0, &(0x7f0000000980)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000013000500"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="4fbefee0f0be7d623a658ad29018be7371d091c7660f55e1afa1b2db8a0647b3d9f353cb8185"], 0x28}}, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x0, 0x3}, 0x10) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f0000000280)=0x100000001, 0x4) 1m48.631029039s ago: executing program 1 (id=1834): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x100a, &(0x7f0000000200)=""/4106, 0x41100, 0xc}, 0x94) (fail_nth: 16) 1m48.587206663s ago: executing program 4 (id=1835): sendto(0xffffffffffffffff, &(0x7f0000000940)="120000004300", 0x6, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380100001000330624c47000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000900000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x2, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x4}}, 0xe8) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10) writev(r4, &(0x7f0000000540)=[{&(0x7f00000005c0)="0755fe40562e7b85a47c51b34e4915372959c1a9f717f06fee80bde358ee3bdf1b0e81cb69cbf815b2ee947c2e6291d3574dbc06b014c07529da84c4d406cf55c135ddaa91f1dddf2781fce0565965962e6cdd373c6e257b6d53cbbbe6f8b41b", 0x60}, {&(0x7f0000000640)="8ff0824507bc28815eeab1ba9383e8c1eb66bd2fde4f5b6778bc", 0x1a}, {&(0x7f0000000680)="cb1fe10bbf9cf65b0c6a9624da7cd91b0f212385b912b868df950c40f4eae52a2e5cf6a9310e910db330724631a344f0ba7c597f68022e7d0acfa5e547e3c818b46bea61c41f3d3c94e4fe8bce6f1b32c30612be1e74833c1987badba90441ef", 0x60}, {&(0x7f0000000700)="f5efb193bdf56cce7656d145dbca735a812ddd96a6ec659def17c444297c21aa20b0", 0x22}, {&(0x7f0000000740)="9d2e5d58e01cf60c19e447bca57cf505174a6adc3775f2ee91afb29617efb5b58b8fcc53c74dbe328cc3871b56636a6e08a823e6383ef9351db0a69d3e844b5ebd927c6fed8e8fd03897e78eff8effb05cf8ad099da2e8c6dd955e373d8a45ac449f4409bc8f02b804caa8b3920d71d5438cb5c65e222b289d2eb9524d", 0x7d}, {&(0x7f0000000980)="7682db7487515f24f2867f7f8d3cab0a012181e25f96bf13b066debca5d2e8e1cda80fd02a9659a0a9bed3400e7650b3c3926e629be7411bb130db806091ca3a65987705902fe5283ad0714909180aec995ea25430fd6f175773a2766bc1eef0f559ec2d47b8c3492e51cfe71cbdac00aa031a00289354df1d03d48b1fe62fdc6acdb8677f0f8089c8ca9dd39daf829d308c90cfabdb25781077e448a31ecfa7b455c2c9c58321eda1709b792a1e7310a30b8dee972637d73ebc7a13a42daeabfb53", 0xc2}, {&(0x7f0000000a80)="332d02829cf8f86f1dc78595127e8a2224c3d809e429f0f683765a3569670edc5cde6a3da216990afe74e0653b41fdbabfc0b7438aaa1535f16038ed6488f78c5ff37977b06f36f71e196bee1474cc873bb6bd09f5b3db15654858aa7a6e96bd0c013a619ee0b3709b4a78645f45b52e4c780d758d406c8972bc0bc6d4c3e94460f69d0b2e4f7da234ec258f5a49627efc3a8b501e3da2930fad57ef7f5aa21f803a67d437d92104e2b3a2240e4e8e0c7c01bc38ce1a1f4dc32fa612fd928711a5a6a00b856f0fa8c857317578795e5bc90a7df9f302d26c9a1f35a7a6ed0d8a3508bbbfbe7899ec45e62e429ed6f13c17587bcbf1bf0299087b6ef37dbab17f2aef978ae37145a26bc1d236574504e385c3f95649eab72bfbe14ea0ec75e9f92bcce7be4223232514331df774eeb26c9aef5bd92a31a56a43955b6e64c940ae16b76ec1e12c92dc1387be6f2aeecda4d0ff3883343f72effbe8c21f8021e5a1cac76b846818de04b29402aaf8e2a19aa285cf492b541cf27356f4c7853addf5eab0ad5e252c0360e328e32598e5b689f21cbf148d09c305f393101715dac8f0baa8458c729f200229cec008555e1647f2691c357d47a94c9b3b534ce3e18e9d82cdb47fcb3d7dba34054a5742d912e7a26fe106a3fd749fd8ad7f6c46e9c36873d3f717579656036909368d1b4964794c24f9b118aaa6e1a509305c936dbe0df9c35926ce0bc02a2d5c5a8bf75246d1665acb01589cd9c5b1ec4a9b00f419a29308602ae2dab96306215a5f18d1bd8d17fb739b1404ece9a93521be681067dc8b0dfffee5b81f3c917b6d992adfdde5dbc5636a149406a4fcb3c614bf58e801d2d381d57c2dae8fb6807ed49d0b440964a2d150ae580e617a0cca6c1106be", 0x27f}], 0x7) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x6}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff}, {0x7, 0xab5d, 0x47b, 0x7e000000}}}]}]}]}}]}, 0x74}}, 0x0) write$tun(r0, &(0x7f0000000940)=ANY=[], 0x46) 1m47.013153253s ago: executing program 1 (id=1836): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="07000000010001", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a012400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014600000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000003400038030000080040001800c000540000000000000004910000b800c000080080001006e6174800c00044000000000000007"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3103040000000000000009000000040003"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) sendfile(r1, r6, &(0x7f0000000200)=0x40, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000040000901feffffff00000000017c0000040042800c0001800600060080000000000000400000194380ab3666239cd8793aff4a9c4dc3"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_icmp(0x2, 0x2, 0x1) 1m46.779380543s ago: executing program 3 (id=1837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x12, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x62, 0x0, 0x7, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}}, {{0x6e22, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e95cd0fb083e7d135ecec0400f50041"}]}}}}}}}, 0x0) 1m46.495428798s ago: executing program 1 (id=1838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001d00010000f9ffffffffffffff00806e0800000000000000040001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x25}, 0x5ac26234566118fa}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) close(r7) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c00000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x0, 0xe, 0x0, &(0x7f0000000980)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000013000500"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="4fbefee0f0be7d623a658ad29018be7371d091c7660f55e1afa1b2db8a0647b3d9f353cb8185"], 0x28}}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x0, 0x3}, 0x10) close(r9) 1m46.287888902s ago: executing program 4 (id=1839): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0x8f, 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m46.116248041s ago: executing program 3 (id=1840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="0ec9d677", @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf250400000008000700ac1414aa0c000100697036746e6c300016000100726663343130362867636d286165732929000000"], 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x4c041) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500100001000010400000000000000000000000000000000000000000000349c3a5070fb6fda000000000000000000011234ffff000036b00a00808011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d23200000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000800000003132333435363738393031323334353664636261"], 0x150}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000480)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000001900)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x4000) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={0x2c, r4, 0x800, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001c40)={r7, &(0x7f0000001c80), &(0x7f0000001cc0)=@tcp6=r6, 0x1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x6, 0x14, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001ec0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f00)={r8, r10, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001f40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @local, @remote}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001a00)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001a40)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000001b80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f00000006c0)={0x6c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4082) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x400120a0, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r14, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0x232, 0x2, 0xc20, [0x0, 0x200000001040, 0x0, 0x0, 0x2000000019f0, 0x200000001c30], 0x0, 0x0, &(0x7f0000000c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x10, 0xfbfb, 'team0\x00', 'ipvlan0\x00', 'netpci0\x00', 'veth0_to_batadv\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x0, 0x950, 0x950, 0x980, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x8e, 0x400, 0x4, 0x1}}}, @among={{'among\x00', 0x0, 0x888}, {{@zero, @offset=0x438, 0x2, {[0x7, 0x9, 0xd971, 0x9, 0x7fff, 0x0, 0x6, 0x7, 0x3, 0x7fff, 0xf2, 0x0, 0x8, 0x9, 0x3, 0x4d46, 0x26c0, 0x3, 0x8, 0xfff, 0x7, 0x2, 0x8001, 0x9, 0xfffffffa, 0x6c, 0x6, 0x200, 0x5, 0x2cc, 0x10, 0xa00, 0x3, 0x6, 0x6, 0x6, 0x4, 0x8, 0x8000000, 0x4c1e, 0xb, 0x7ff, 0x7, 0x8cf, 0x2, 0xf, 0xfffffffe, 0x6, 0x7fff, 0x8, 0x6, 0x4, 0x6, 0x7fff, 0x4, 0xff0, 0xfffffffd, 0x3, 0x1, 0xf, 0x6, 0x3, 0xb, 0x2, 0x10, 0x4, 0x9, 0x5, 0x3, 0x4, 0x7, 0x1, 0xb, 0x1000, 0xfffff000, 0x7, 0x4, 0xafb8, 0x6, 0x0, 0x2, 0x0, 0x6, 0x56b, 0x7, 0x2008, 0x8, 0x5, 0x4, 0x516, 0x711, 0xd1, 0xff, 0x401, 0x43, 0x5, 0x7fff, 0x10, 0xfffffffc, 0x10, 0x6, 0x1, 0x7, 0x7, 0x6, 0x4e, 0x5, 0x7fff, 0x7ff, 0xec2, 0x9, 0x0, 0x2, 0x8, 0x8, 0x8, 0x100, 0x2f8, 0x6, 0x76, 0x2, 0x6192, 0x4, 0x1, 0xa, 0xd1, 0xe82, 0x5dd, 0xfffffffa, 0x800, 0x5, 0x400, 0x8, 0x2, 0x0, 0x9, 0x4c, 0x7e, 0x9, 0x400, 0xafe, 0x2, 0x9, 0xffff, 0xa703, 0x4, 0x10, 0x81, 0x5, 0x5, 0x2, 0x1, 0x8, 0x73, 0x0, 0x2, 0x401, 0x9, 0x0, 0x1edd, 0x8, 0xe4, 0x1, 0x1, 0x5, 0x6, 0x9, 0x8001, 0x3fe, 0x3, 0x1, 0x23, 0x7, 0x0, 0x1, 0x1ff, 0x0, 0x3, 0x3, 0x5, 0x3, 0x40000, 0xf96, 0xe000000, 0x8000, 0x13a, 0x10, 0x0, 0x100, 0x100, 0x4, 0x800, 0x0, 0x1, 0x40, 0x8, 0x6b9b, 0x1, 0x4, 0x1, 0x9, 0x294b, 0x9, 0x6509a3f9, 0x400, 0x2, 0x8, 0x400, 0x28, 0x6, 0x3, 0x3, 0x7, 0xffffffff, 0x5, 0x9, 0xc94d, 0x1000, 0x1, 0x5, 0x9, 0x5, 0x80000001, 0x508203d3, 0xfffffff9, 0x4, 0x9, 0x8, 0x8000, 0x0, 0x7, 0x3, 0x3, 0xc870, 0x8e, 0x3, 0x0, 0x4460, 0x5, 0x2, 0x339f, 0x6, 0x7fffffff, 0x8, 0x40, 0x8, 0x8000, 0x0, 0x80, 0xb87f, 0x60, 0x9, 0x3ff, 0x3, 0x4, 0x3ff, 0x26], 0x3, [{[0x401, 0x5], @dev={0xac, 0x14, 0x14, 0x44}}, {[0xe, 0x2], @rand_addr=0x64010100}, {[0x4, 0x3ff], @remote}]}, {[0x9, 0x4, 0x3ff, 0x4, 0x0, 0x7fff, 0xe3, 0x9, 0x3, 0x6, 0x8, 0x6, 0x2, 0xa31, 0x8866, 0x1, 0x3, 0x8, 0xcd, 0x6, 0x8f41, 0x423, 0x5, 0x5, 0xff, 0x8, 0x1, 0x2, 0xb, 0x320, 0x2, 0xf, 0x80000000, 0x58, 0xc47, 0x3, 0x7fffffff, 0x7, 0x10, 0x4, 0x9, 0x6, 0x8, 0x8b56, 0x9, 0x10000, 0x50a, 0xfffffffc, 0x6, 0x5559, 0xfffffffb, 0x63000000, 0xb0, 0x2, 0x664, 0xd, 0x7, 0xff, 0x1, 0x80000000, 0x40, 0x659, 0x8, 0x1000, 0xd21a, 0x2, 0xda3, 0x7, 0x6, 0x10000, 0xffffffff, 0x9, 0x7fffffff, 0x1, 0x8000, 0x3, 0x7, 0x6, 0x2, 0x2, 0x7f, 0xa259, 0x0, 0x3, 0x400, 0x7, 0x800, 0x8d78, 0x9, 0xc2, 0x4, 0x65b4820, 0x1, 0x9, 0xa70, 0x8, 0x9, 0x2, 0x72, 0xd, 0x7, 0x5e, 0x4, 0x7ff, 0x63, 0xc2, 0x0, 0x8, 0xf4, 0x0, 0x1000, 0x1, 0x7, 0x3, 0x7, 0x7, 0x9, 0x1ae, 0x6, 0xfff, 0x0, 0x8000, 0x8, 0x4, 0x3ff, 0xfffffff9, 0x8b0a, 0x7ff, 0x1, 0x8, 0x8001, 0x9, 0x7, 0x4, 0x5, 0x8, 0x3ff, 0x9, 0xbe, 0x8, 0x3, 0x10000, 0x72, 0x3ff, 0xc6, 0x3, 0x7f, 0xf, 0x1b, 0xfce, 0x40, 0x8, 0x8, 0x1, 0x6, 0x0, 0x80000001, 0x6, 0x0, 0x10001, 0x5, 0x7, 0x7fffffff, 0x3, 0x7, 0x1, 0x8, 0xc98, 0xace, 0x9, 0xe, 0x6e59, 0x57c2, 0x127a, 0x7ff, 0x8, 0xfffffffd, 0x1, 0x4, 0x7ff, 0x4, 0xff, 0x0, 0x2, 0x9fcb, 0x8001, 0x401, 0x7fff, 0xdbfa, 0x6, 0x7ff, 0x2c8, 0x28000, 0xae, 0x80000000, 0x6, 0xb92, 0x1, 0x1, 0xb, 0x0, 0x2, 0x8000, 0x3, 0x8001, 0x7ff, 0x1, 0xd68, 0xd553, 0xffff, 0x8, 0x1, 0x9, 0x6, 0x5, 0xfffffff9, 0x8, 0x7f, 0x26e, 0x0, 0x3, 0x3, 0x80000001, 0x40, 0x6, 0x2, 0xc, 0x80000001, 0x1, 0x2e381a, 0x6, 0x3, 0x4, 0xe, 0x2, 0x4, 0x6, 0xa0, 0x7, 0x4, 0x4, 0xf1, 0x8, 0x0, 0x1983, 0x8001, 0x2, 0xd, 0x7, 0x3ff, 0x80b7, 0x1, 0x9, 0x4, 0x3, 0x6, 0x1], 0x6, [{[0xe, 0xfffff000], @loopback}, {[0x3, 0x81], @dev={0xac, 0x14, 0x14, 0x38}}, {[0x1000, 0x6dd9], @multicast2}, {[0x0, 0xb58b], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x8, 0x6], @multicast2}, {[0x401, 0x3e1], @broadcast}]}}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x3, 0x2, 0x4305, 'pimreg\x00', 'syz_tun\x00', 'bond_slave_1\x00', 'sit0\x00', @multicast, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x0, 0xe8, 0x1d8, 0x210, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x8, 0x9bd4, 0x3, 0x3, 0x6}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x856, 0xe}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x7, 0xfff, 0x1, 0x0, "9c6135a7ff722139abf89aebb9fbb4376d88e530cdb25c366a25fb76d8b22d059d53b80064af29c4b69609deebe819638dbe880223b2f1e6e3d40e6e1d589faf"}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1800, 0xd, 0x462, 0x0, 0x0, "a580ad02d2a6270b8d73d4d4b9f0a41ba468fb595e7706c60bb8ad9760905af82991f89f23d1f5a768baf21a3410de25a6bb9ac63724d3ef3176af0d616f0882"}}}], @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0xc98) r15 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r15, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1m45.203319382s ago: executing program 1 (id=1841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFT_MSG_DELSET={0x190, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_EXPRESSIONS={0x124, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_USERDATA={0x38, 0xd, 0x1, 0x0, "2f8d17681f647c4c06af6319b9cfa222512fcc906af336b8e9d1425158d35cee0c78d81f63d2336c0784c2b2da68676d4b888f88"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x218}, 0x1, 0x0, 0x0, 0x24040001}, 0x4008054) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket$vsock_seqpacket(0x28, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='geneve0\x00', 0x10) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000340)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x8, 0x5, 0x3, 0x6, "cdadea956794295600675336953323f652ef95dbb0ca6cb7016a2ca3c027943fae4a894b4b2b62cc4cfffd950f1907b34497dbb352304672ebb992c65bd4a2ca7d125de09ceb76bb01c625b86f2de859da62342e954fdfaa4124742d2c39fa6f44dcaf8dacbb1f2e39d22a930dce5fbb8c125ea7421a4395ab717bc3e65a83b9"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x23}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c10}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000580)=0xff, 0x8) r5 = socket(0x28, 0x3, 0x7445) write(r5, &(0x7f00000005c0)="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", 0x1000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001800)={'syztnl0\x00', &(0x7f0000001780)={'ip6tnl0\x00', 0x0, 0x4, 0x12, 0x4, 0xf3b, 0x2, @empty, @empty, 0x8000, 0x20, 0xe, 0x69a}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000018c0)={0x8, 0x0}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001900)={r2, 0x7a9, 0xffffffff, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1f, 0xe, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0xdf82}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000016c0)='GPL\x00', 0x0, 0x5a, &(0x7f0000001700)=""/90, 0x41100, 0x60, '\x00', r7, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001880)={0x2, 0x3, 0x3bf, 0x8}, 0x10, r8, r9, 0x0, &(0x7f0000001940), 0x0, 0x10, 0x6}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001a40), r11) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000001a80)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000001ac0)={"e0b5e802db0f3490febcf138cfbc83e4", 0x0, r12, {0x9, 0x8}, {0x2, 0xfffffffa}, 0x9, [0x1, 0x2, 0x56d, 0x40, 0xfffffffffffffbff, 0xf, 0xc, 0xed, 0xf05, 0xffff, 0x3, 0x9, 0x8000, 0x100000000, 0xec, 0x1]}) socket$tipc(0x1e, 0x5, 0x0) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001c00), r11) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xb4, r13, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:udev_tbl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_run_t:s0\x00'}]}, 0xb4}}, 0x800) connect$x25(r5, &(0x7f0000001d80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r10, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001e00)=[0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0], 0x0, 0xcb, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002500)={r10, 0xe0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000002300)=[{}, {}], 0x10, 0x10, &(0x7f0000002340), &(0x7f0000002380), 0x8, 0xfa, 0x8, 0x8, &(0x7f00000023c0)}}, 0x10) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002600)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000002580)=""/102, 0x27, 0x66, 0x1, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0xa, 0xc, &(0x7f00000020c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x3, 0x3, 0x3, 0xb, 0xf, 0x80, 0xffffffffffffffff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f0000002140)='GPL\x00', 0x2, 0x8a, &(0x7f0000002180)=""/138, 0x41100, 0x0, '\x00', r14, @fallback=0x14, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002640)={0x0, 0xb, 0x8, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000002a00)=[r5, r6, r6, r6, r6], &(0x7f0000002a40)=[{0x0, 0x5, 0x2, 0x6}], 0x10, 0x1f0b}, 0x94) 1m45.091851495s ago: executing program 4 (id=1842): r0 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)='esp', 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@broadcast, @random="00eaffffff00", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @private1={0xfc, 0x1, '\x00', 0xfc}}}}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000007c0)={0x1, [0x0]}, &(0x7f0000000800)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6044}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r2, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001540)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001640), &(0x7f0000001680)}, 0x2a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@deltfilter={0x840, 0x2d, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x6}, {0xe, 0xffff}, {0x4, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x7, 0x81, 0xf1b0, 0x8, 0x101, 0x7, 0x99a, 0x8, 0x0, 0x5, 0x8351, 0xf, 0x4, 0x0, 0x4e7, 0x10001, 0x5, 0x7, 0x0, 0x4, 0x9, 0xfffffe00, 0x3, 0xd, 0xffffffff, 0x9, 0x9, 0x9, 0x3, 0x5, 0x121, 0x6, 0x7d, 0x200, 0x1fce, 0x8001, 0xceb1, 0x6, 0x8, 0x9, 0x50, 0x401, 0x8000, 0x36, 0xffff8001, 0x44d, 0x1, 0x47, 0x54378dd7, 0x8, 0x9, 0x1000, 0x7, 0xfff, 0xf, 0x5, 0x10001, 0x200, 0x1, 0x401, 0x6, 0x5, 0x9, 0x9, 0x0, 0x623, 0x0, 0x9, 0xd, 0xe4, 0xa0, 0x2, 0x0, 0x8, 0x97, 0x7, 0x4, 0x30, 0x9, 0x0, 0x90000, 0xd1, 0x3, 0x1, 0x1, 0x4, 0x2, 0x8, 0x9, 0x7, 0x8000, 0x3ff, 0x4, 0x2, 0x2, 0x7, 0x3, 0x5, 0x3ff, 0x1, 0x7, 0x1, 0x8001, 0x3, 0x9, 0x6, 0x0, 0x3, 0x4, 0xa, 0xd, 0x9, 0x6, 0x8, 0x800, 0x7, 0x2f, 0x80000001, 0x1, 0x1, 0x0, 0x1, 0x12357adf, 0x7, 0xfffffffc, 0xf2, 0xa6f4, 0x9, 0x3, 0x6, 0x0, 0x15562237, 0x7, 0x8, 0x74, 0x200, 0xce, 0x3, 0xae, 0x0, 0x0, 0x9, 0x64e313cf, 0x8653, 0x3, 0x5, 0x8, 0x1, 0x0, 0x4f, 0x6, 0x5, 0x2015, 0x9, 0x7, 0x7, 0x81, 0x100, 0xd, 0x1, 0x8001, 0x7ff, 0x3, 0x7fff, 0x9f46, 0xd164, 0xd, 0x5d, 0x7, 0x401, 0x10000, 0x2, 0x4, 0xffffffff, 0x7fff, 0x57, 0x5e8, 0x2, 0x1000, 0xa5f, 0x5, 0xfffffb3a, 0x6, 0x4, 0x7, 0xe112fd9, 0x9, 0x9, 0x4, 0x2, 0x38, 0x2, 0x4b9, 0x1, 0x10001, 0x6, 0x4ab7, 0x4, 0x8, 0x9, 0x4, 0x80000000, 0x3, 0x0, 0xc4c, 0x1, 0x4, 0x6, 0x9, 0x0, 0x65185107, 0xf, 0x6, 0x10000, 0xe, 0x6, 0x7fff, 0xc, 0xfffffffa, 0x6, 0xffff7fff, 0xb, 0x10000, 0x7, 0x20d3, 0xc9, 0x0, 0xb, 0x1ff, 0x0, 0x40, 0x5, 0x7, 0x400, 0x8, 0xffff81ee, 0x10001, 0x9b667135, 0x6, 0x1, 0x598, 0x1, 0x10000, 0x0, 0x3, 0x5, 0xfb, 0x7f, 0x912a, 0x5, 0x2, 0x7, 0xfffffff9, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4c, 0x4, 0x5, 0x51, 0xfffffffd, 0x9, 0x81, 0xffc00000, 0xe, 0x10001, 0xc56, 0x10001, 0x278, 0xe, 0x8d, 0xf, 0x0, 0x3, 0x6, 0x8, 0x1, 0x10, 0x3, 0x6, 0x7, 0x0, 0x4, 0x6, 0x40, 0x2, 0x1, 0xa28b, 0xfffffffe, 0x82ab, 0x5e, 0x2, 0x707, 0x4, 0x9, 0x3, 0x9, 0xfffffffb, 0x1, 0x2, 0x0, 0x6, 0x60000000, 0x8001, 0x1, 0x2, 0x7, 0xffff, 0x2, 0xfffffffc, 0x3, 0x9243834a, 0x0, 0xfff, 0x9, 0x0, 0x43, 0x6, 0x8, 0x8, 0x1, 0x8, 0x0, 0x28, 0x4, 0x5e7a, 0x3ff, 0x8, 0x4, 0x8, 0xb21c, 0x1000, 0xd52, 0x3, 0x7fffffff, 0x446b0f9, 0x7ff, 0xd, 0x7, 0x1000, 0xec1, 0x3550, 0x8, 0x0, 0x3, 0x8, 0x0, 0x6, 0x4, 0x7, 0x800, 0x9e1c, 0x26837357, 0x7f, 0xa, 0x6, 0xb, 0x53e3, 0x4, 0xaa46, 0x5, 0x10, 0x8, 0xc, 0x6, 0xdba3924, 0x3, 0x6, 0xb139, 0xa374, 0x200, 0xfffffff7, 0xc, 0xf7ef, 0x800, 0xffff0000, 0xa, 0xff, 0x8000, 0x81, 0x3, 0xc479, 0xa392d54, 0x8, 0x6, 0x2, 0x1ff, 0x0, 0x3, 0xe, 0xffff, 0x2, 0x1ff, 0xfffff800, 0x3, 0x2, 0x5, 0x3, 0x3ffa7e8a, 0x49c, 0xa72, 0x7f, 0x5, 0x6fd, 0x3fdf, 0x8, 0x2, 0x400, 0xd, 0x8, 0xfff, 0xbe82, 0x401, 0x40, 0x5, 0x8, 0x9, 0x10, 0x4, 0x8, 0x2b2, 0x80000001, 0x1, 0x3, 0x8, 0x9, 0x7, 0xe, 0x9, 0x2, 0x81, 0x6, 0x3, 0x5, 0x400, 0xffff, 0x200, 0x7, 0x8, 0xa8b, 0xf10d, 0x9, 0x8, 0x8, 0x6, 0x484a, 0x4, 0x5, 0x400, 0x2, 0x8, 0x401, 0x7fff, 0x8, 0x0, 0x9, 0x8, 0x5, 0x4, 0x1, 0x3, 0x5c2, 0x0, 0x3, 0xff, 0x7, 0xb97, 0xe, 0x1, 0x10, 0x4, 0xe9a, 0x1, 0xffffffff, 0x2, 0x2, 0x7, 0x5573, 0x100, 0x7, 0x4, 0x3, 0x9, 0x5, 0x7, 0x3, 0x800, 0x3, 0x4, 0x7c89, 0x4, 0x4, 0x9, 0xfffffff9, 0x1, 0x3ff, 0x7, 0x52a5, 0x80000001, 0x7, 0x243f, 0x7fff, 0x2, 0x8, 0x11, 0x0, 0x3, 0xe4, 0x929, 0x9, 0x3f0, 0xa52]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4008084}, 0x20040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000003080), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x2004c890) close(0xffffffffffffffff) sendmsg$nl_xfrm(r5, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=ANY=[@ANYBLOB="58010000100001002bbc700000000004fe800000000000000000000000000022ac14144300000000000000000000000000000008000300050a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000000000ffffe00000010000000032000000e0000002000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c00000000000000680002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"], 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) 1m44.977704427s ago: executing program 2 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000080)={0x2, 0x1}, &(0x7f0000000680)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000900)={0x0, 0xfffffff5, &(0x7f0000000940)=[{&(0x7f0000000980)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', 0x1}) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000006c0)='syzkaller0\x00', 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x4000840) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) 1m44.675286199s ago: executing program 1 (id=1844): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x8000000, 0x1, [0x100, 0x9, 0x80000000, 0x7983a33, 0xffffffffffffffff], [0x7, 0x7ff, 0x7, 0xf, 0x7, 0x2, 0x3, 0x87f4, 0x4, 0x7fff, 0x1, 0xfa, 0x44, 0xa, 0x7ff, 0xf0, 0xa3, 0x2, 0x80000000, 0x7fffffff, 0x1, 0x3, 0x5, 0x5d8fb66f, 0x9, 0x4, 0x1, 0x8000000000000001, 0x5, 0x7, 0x5c7d, 0x9, 0x2, 0xe, 0x3a, 0xf2, 0x7fffffffffffffff, 0xff, 0x8, 0x7, 0x7, 0x7, 0x4, 0x4, 0x2, 0xffffffffffffff80, 0x8223, 0x8000, 0x6, 0x7, 0x1, 0x35f0, 0x60f5b054, 0x3, 0x8000, 0x31, 0x6, 0xb, 0xcb8c, 0x3, 0x4, 0x8, 0x0, 0xfc, 0x0, 0x8, 0x100, 0xffffffffffffffff, 0x3, 0x8, 0x5, 0x4, 0xfffffffffffffff8, 0x4, 0x100000001, 0x7, 0x6, 0xd77, 0x0, 0xc2a, 0x4, 0x3, 0xffffffffef229fe6, 0x5, 0x8, 0x7fff, 0x4, 0xffffffff00000001, 0x310, 0x6, 0x800, 0x6, 0xd793, 0x6, 0x7f, 0xb0f, 0x0, 0x395, 0x7fffffffffffffff, 0x7dbe, 0x2608c3a7, 0x7f, 0x9, 0x8, 0x9, 0x6, 0xb10, 0x7, 0x712, 0x3ff, 0x6, 0x1, 0x9, 0x7fffffff, 0xbb1, 0x0, 0x1168, 0xa8, 0x0, 0xbd, 0x80000000]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={r1, 0x9, 0x0, [0x80000001, 0xacaa, 0xb8fb, 0x180000, 0xc44], [0xc, 0xb8, 0x31, 0x8fb, 0x8, 0x9, 0x5f11, 0x80, 0x4, 0x9, 0x4, 0x4, 0x72a7, 0x8, 0x101, 0x750, 0x1, 0x7f, 0x9, 0x3, 0x6, 0x9, 0x2, 0xfff, 0x5, 0x4a4, 0x1, 0x70, 0x0, 0x5, 0x8, 0x0, 0x10, 0xd4dd, 0x10, 0x8, 0x10000, 0x531, 0x1, 0xa, 0x1, 0xce, 0x8, 0x0, 0x180000000000000, 0x500000000, 0x5, 0x6, 0xf, 0x10000, 0xfffffffffffffffa, 0x1, 0x6, 0xe3, 0x8, 0xe0000000000000, 0x8000000000000000, 0xff, 0x5, 0x8000000000000000, 0x6, 0xb, 0x6, 0x5, 0x7fffffffffffffff, 0x8, 0x2, 0x3, 0xfffffffffffffff9, 0x0, 0x81, 0xa, 0x2, 0x2, 0xd, 0x4, 0x0, 0xffffffffffffffb9, 0xf, 0x6, 0x70, 0x3, 0x4, 0x6bb, 0xffffffff, 0x3, 0xd76, 0x100, 0x5, 0xbc3, 0x6, 0x6, 0xc, 0x0, 0x8, 0x5, 0x2, 0xe3, 0x3, 0x3ff, 0x2, 0x8, 0xfff, 0x1, 0x3, 0x9, 0x8000, 0x5, 0x80, 0xc62, 0x1, 0x9, 0x9, 0xfffffffffffff229, 0x4, 0x8, 0x3, 0x0, 0xb, 0x8, 0x2bf]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000900)) sendfile(r0, r2, 0x0, 0xb22e) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000a40)={r0, &(0x7f0000000940)='^%\xcf(\x00', 0x200, &(0x7f0000000980)={@align=0x5, {0x8, 0x4, 0x6, 0x80000000}}, 0x1, &(0x7f00000009c0), &(0x7f0000000a00)=0x5e9}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000b40)={0x2, 0x88, &(0x7f0000000a80)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x4, @mcast2, 0x80}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0xea4b, @empty, 0x7}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000b80)=0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r3) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000d40)=0x4, 0x4) sendto$inet6(r3, &(0x7f0000000d80)="b28df3408886160e54dc5683f1803c759923896a4018d950d377a469e2d91434cd7c7f912ae5a5f333556aca7c86e7780bdfcc102e85abbb1d12938fe63c764c33a6cce066acbe8aa9734fc051734edc0cb90a1950c788e5c11567930ec979b48a9743eee758c6c3cddab62dabfe54d27b29caf85fa08eb0fc4fdd28e567d1deec349fee760fb28502747b49d9e4ea5d86d0a04d671967164b8733c10cba1acc16180dec96674f26720823808f19fcf3162a66e32a1867ea104bc21e7fe9bd47bbcdbe74a40e4e045637fe63df563631403779ec0da6a52d9b2d9c6d6b02387ee300aa868a74c4", 0xe7, 0x40083, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000e80)=0x0) write$cgroup_pid(r3, &(0x7f0000000ec0)=r6, 0x12) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000001fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000000f40)={0x1018, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "dfdadd3e0dfa98c521b91f64560978f1510549bb7f110a31db94e748cc5e20ae1ac084ec9631ce8150244d51e6e87caf340c0ba3b3dad9eb84019950ba0ab3e8923e0de083325a53a4bb97535a09af12a01f2e7da328082f0984605e8ba58d9dfd54eccc64accf8da4d6b1897182a4fcd3912a1600a03e23423b851cfbac4813f733dd6488bc30244d9be07bf8753aa99d43b756864ce345536054fdfd716c23992e0da45638c94dbc5c65f00daf9f0a499b3ae8e35d5af12f265c458673e4c3d7de3e062be0adec59ea6885f79b381efb8a4a020d8ae4a2160863fdb1bdacc7725a5843f5660f77f4a36f997e7b0ebc4d8d45f57210303084c03cbb116479c2951e2e5d2707551dc5ced6f2b582d4f6551c5077629765d8ddfa09f2dbfa725acb653a1637ffa2351681881a9e37289c3502388fcb6242fc07fbdf6b647a7762ebab583f497fba3f97438c42c40acb045be01b1a9a8e4caa1a2ca05968c19dbedc19d4b814e716f087d0472e3842d2389b512768f52ea52f2d3287add94eab8964a570164a9f8eb533f5c0879176f622f8e1906335290a973eb4b22c032c374664b710ce6e933979ada387c60521f1fc3c962124cfbc1cf3662346763cd0cd1ff306e2f6b5a2d2fe007e2bb37d85d7c31a0e0f7e3da5cdbb92ff1703b39308a42033092d02b7106e17db273a81bac647c53e731b01d89f64aa5706c13b151fec241027dafd7f494b2f5d9349b4705831d1794365c9dee7be641d80f14122e72673ced4383de55c660be27cb14246e0d51826aad5b1745b26f3809436c3ca0fb093a6dae5177a87f929dc2e9d82f734cea995446d54dfbe7108351bb893c9dfaade391f291432536d633990f662e1b3eec425d554ca1e18f2856f19138c59f1edf8203ebe99c3b0f6547b846d9655fddf96704823f1248b13b6cc467a92445e886005c214968f7cae53d6070d36b23fd8669235b4f776c243fd0d01126c92bfee50296285d09f4ac0c917adb7f9e0cda0b01e1ce297f4c5153a859b265fc598cef6f872983a6dca1a57737a0f79ed3da5e7d8898f7ae5fd64cf6bd824abeddd5f75d3e3ca53ca265bc010481470da2069875ff90b38577079728ba319bd99342f0f0f806f4576ca41a9cca3788d7a41e3b1bed0e1c22187726e6fe02d6eee0d5230716aa03cc1eb4fc9621913b1d2875d3ed99b4df648ab0bb965974001fcbacaecd8f26b74a9fc8340de28d13a68c035c72eb082c0790a31686d2c6cf0d43b7e54fe3c0c546d532f730d89b84bb5f527ef31af0a20dbc0b7f233e6e8e70eb7e88aefaf92a3ab642256420f0a855d48ba697c205ca2e33a96daf32f70ced4701bf23b4b499c0d674a14453b3a553fcb5b40789158b476ce78f350c58706a46a31462035678226a9f90bfa0d2c9c56e790b0875ba7c1450509cf099f7d3cb034a15df8a7f823b35faa075632de459de91af697f7b38770be8c7f078684e43ef9146f6a56aeae0b5670f79d3f209f945c4f3e1f8dbd1413325d40c0d0560b961e6217baecd399d3909f4d95a961e73536d391a48c6b78db2596a6d0245429d1beab6d66b398cc3f93da694daf4bb15a2d8b442f3dbb4a5b6860a1c1d06af4228f33039b67ee671cdf1614e41f6fb2d1aa53a5fed4ee81af9347b007434d825a6689cdca17c785a8d4e99420d169e01cdc617ece5c0371621d6c5872faa2d4640827f389a5348ef6519ecf6be9925182c23540c7901668b5ffecb92d59c893462cc37b7f362b1c646c22f378be5bdd048300a18e44268b0e395fc551759f70fbde4896729bf2373df458dfd716d6307b899b3493ad9e6fe6f75db809699f70058b3a43591dc852d13187a32cbf8065b1dfaa328c4deda2732190f692c39ee537625347b0b7c82adf2d89d1bbd04944493c053ba14a66b99737600a26ba554fc594aba7756edf369e37e6a6eee4942f493b450b6772ecf03db905660c666ce4e58a3d9ac49f8332159d112d44395ee4350540f1d47d2a10ef8f4e85f4118e5ec023dac40f9e10af6dfe5da9ca1bf51f09b7a46268170d0f30b48e4f2b61d3659ae7c839713ad0ad6de55d4a8143350b9499cf56a30b65ae9828b90bfcd8da668d0117337cd4e483bce473f943e6a47e896d1cf52a895706dd1b5e56d960a56994ec0df05120e8d1ef3090a2d45bfafcb8b647c5b6cf3ed571d3ce4b0f47e5aaa1967bd780dd49abd6300ba2f443bede3b60ccb3d5b2d13f214a24d869b4c624cfe325cb67f4cf144c6d2c8b03bf60f5cdc812dba358790d30e8fc9371380cfa78eb9afee2996d1a18423fb63d04fff238e08b439f28f550f42bb6ee2d72c9d2295daab0611520f747aeb0a3a52c05004134c85c2881b4966573ddd2fd9b45f402971dfadea716fda08edde32e56f9c39494b57e517b17ecd503a42ecd1f44c7deb4250b1601e44da20a1ddbfe77122d93252bf8772c842c15ce871e1beb38579ac79d6abd9172828eae3c9d2a6b8bab11e1a716086a55931703947a3d9068fee4133ae60cf20effdbc6b07f274240c246f66adc4c55914aef5c89039d772f5f04e0aad16aeb5e35260fa33a35a199686dd6d642679645feabc3ea39fbbcd7050bffdb4be900ce35ab443e9c96c591caa7d084b30f8e7fdd4eab327d01a22f5cd3155f8476958fb60188c8d3aa47698783141f2dab8009531275fa481fdc75047e7323e460687bc7817ccfe3aeadd77ab1d39037fd4fb89419d8a4436644123d62957c7914f0ac93c4ef4498a246df8e3008d3be444460ae340099039d83a5be58403b2aed30b1b623bcaa9312624f8d0223bf8c7d03f22206a87129426a5cf8b7d1c0ef98fb5f9ac926fbcb5779cf6d5ddab971e7e7a16112dc3431afb9c94bcfeba6b6b5181ac29275ad5f9532b071b58975a3fe19013eb36a16dbe1faa8dba90f30db171d02ff304ca60a47d283c3f9d4364ddcd099f75ddf1b9f130f082769840a53164c1a02e21ebd2e1f9f3b617327f406d54007ac510a9b17fd3c2e26b7b5c0d6d3f85f6f0edf4e07d9fc9fe8121bda1554b56b008ad0d4d71b90f10b1dffeba00af42ce0841d18ef8cdebab0654a26f99631a79c11a554389775d2a75dd69ef82bcc6304014564a703c739df0574701fd18dfedc7bc183b5d1af415879ca06b558b25f79f074b7d6079d75de9fe383db52e281a6e1daabd706db3578ebadd421a29efb3ad0b74b1756486b9e2c802ee8714c92c50da7f8f8669d6dd2057bd59718fee542f0efc06287a97c5ee0856af732cc05f0c537a37b7edaf98e26db958ca5e367a349d0451553f3283b00d508a7089c4918cdb76bc2f67f2a1d8b963ef4df4e5327a59a7d460b9ebb1908109b12be6cdf31057799fabf879d2074ae0d00f8e340e373018ac25a3eff751c21920d2b65424fcb97e2eb7f085ca4c8bcec4501b2ea91102d0b0979b5f95fe1f442533650f3d8a36f5713ac64e4c5b0409610fa656753e14f42ebfd283f7978e28aae86abaab1b034c2654a32240df565f9e7b46144006544952efc3b36c56d99f8b235610572efebbcd7b27ca2f452c2c7e343ceaa0222b0bd5a85dd56e74c7be4d1705a33141274fbb25c6885cd34a9f942d81edf56b451409b3f462b9edad8391adc79ac194389f35ee62d68d49e1caf5728e48329ac6fcab6ddcd67fbb2e667139098056d4cbbfa8780afebe00cc0c5a0a36836133ec882c33bc6ed87f8440725db81b06504dacb2dffd5ea8b05aec7502bd82e71a6b3d62f2c6ff953aae9520c1af922f34d89dd6bbd0319a9844cfda92a2e64729b72a22abd02cc5578ff0ac9159aa947712bcd1f1981dc63e3ec48589f5052d5f7609d76b3e7c557eca5466b510111b95e7c6740272c4ef62f38b85ea6e61bb991fe3b9b62ea1b3629d07b4d9d2061ced03a1bb1beee4654c4593902a76242898f07da49b66d2d083e79bc5e15eb6abca876e955cf5785b4beeb73109dd45f3459761cfe7a95488b42a4c8cbd0d7fb5b183806114a809fa569e18e92cc3cf29d8dfa5ffbfc5c0b07b721f7023aa98a64035847d091134652a9860809b18bd2d52598d251d0eb4d18603aa937ec352e43ba37c0e960a998f302cddc2024c1c4a154c43c53d67b33cb1170a5fa1d30c9f4a84a2e550926fe202e3f76f7ef819d6bc4939f305fe53e197e8cf4064573463129073498a9e82057ebb7f3ea1769c24fe2ef71d8bdd59be5747efe06c57f82584d915b5cfe51073905faa63f4f91e584bbe83ec27e26a16b18c246e4c3e935e75073eabaa4be8ee3f315157c0087b172fbdc439566b74d284906ac70539a3ae5f9e61b86ad9a33de48d589b6c47c3e4b0cea61e77e0ed1fd96489afabc488610681cdc67319ea33df03c8c7d2c14d7619fad66034d81450c3f6193c3f4d2aee1884ad212789f505dca7f053bd0e5abad15c1b2cdaee8fa93ce8d577864e4a0e54a204b2eba55b981c15a7d8155cc8be394fad3ff308c4872cc3ce8b899d0db072a482323813e50d1e7c0c8cddea05a756473000c227122b00796520690f5efea27bf1b1fe04ac64bda432d976f7c8685faacca705e9770189cf3ddcf6cc8cec629ad1c71ada861a1933bcf2adff3f1280c24c088ccf7a5b2235707c0397184320e9853fcc597d026b7166b7013285bd159f39da8bd711307e3fede2b17a9cf239dc9fb5d17431a3114915f4cc0a6703146965dce6e72f120838f40dab8d6369cc8742a8914cd0501364fa641e0d701170ea4b83f514cd5cc0d6b8a2a9d8ee2a89bbb5e25f293d6096578643b26365c3ee863938880a5a78fd686de1a263ba15323ff178125339cb87e419ef54dc319f95c671fc5c402e1fb268a254d595027a31b9b0c1d80cf31b1535acfb5f48b6e69028a431f7f8c4507f2dec3037669055eceab43921f69c4cb370f9f049263ca1482f910eb0b2e632786837a19cc9ebf41bdba962a1af78a72e678130190306a238b6601f2ece17372113836ec5aa8e79a733a79caaeca18d3f1994ff642d7dd48c5aec9b2e204b14eb3ab1db1e4595a85d88e8c4790ddc8ffbed6e8f694daf9b1120fa1b933b3288fb0139824cc42febdc2a2f35b1f75abf61a29cf906b9d5bf1840736a9b0b6381dc37c346a2a15bf528bf95f5cfde02fc9e222e88ab14f00de84de50c5dc3fbb201012e9b8d5601c552403e94122b383f064603ca2976487ae3e85e79590f6303301193c5a3ed3d3821639ce5063673fd238b307526130b2c751819f599fc6db7013e71dc487a36cf6b3d49dbbbfd0ea0f87f71993e821161a1f8079f27a1afc92598f8804e932491535cd28cb41c5b025810305d0e55881543c90bac6b6626956afcf31acd26b38956baf8982313db25a33d906158cb51e4b0d73479c3bd17b1f6a44a0e0eb32c10408e0cea9fda8508c92e0428d2d6bdf5432a2ffebde00f665f29ba655bf62a0225f2f814f619454bbca7f3d7717bd6b0ae1832abf53c427cf4e22e90801f0cf698ad803fc4180dcef342fec489286e7184628a11ccd11e713c7c04eff3481739ea7803c6809f771d0b16f5ea95e459263ec81d258b313d4077fa53bf579cd014f22690efb6295f76683a85a1c3240ebe226ce78209c39344d3ec2dea5e044d94d82b0a791ec76cf41e9782244fbe3e1555a475c1e60665fc196661240cf8a753a1a36019e2517d37bd4f784d5c8022ca57c5492eccd22c1d7b0a7515f210dfc9df048ae3b96e813bdb07f84263840d43a1faece090f7644a539f6dc7c7e9113ecf751056605009cb32e0a49"}]}, 0x1018}}, 0x4000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), r3) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000002300)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002080)={0x234, r8, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf730}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2f03543b}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x90}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "80616fdede0e3b81413d61a7bd4e32f0fc03408f0577457a4f"}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x722a19a5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x63b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc4e9}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xcdbb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000002340)={'geneve1\x00', {0x2, 0x4e24, @remote}}) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000002380)=0x55, 0x4) socket$inet6(0xa, 0x1, 0x7f) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x48, r10, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc090}, 0x40000) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000002600)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x7b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f8, &(0x7f0000002640)="816ea9d8d5345655ebfc76887f880ab93ae3a5b466f2c635b0a100b8925ffbedd24e387f71937d539b216938b7bed0dd55e4e45ec464282f7db2a7ffa4c58dc8f065e46a01b5cbf1195714524cccd56ef318af30e160edd74a08567450252bab8977cd7478d32d30a66cefd551123129f9fcfd06c06670c97d") 1m44.319602842s ago: executing program 0 (id=1845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03031b003000320006f56300000000442fff00000000000000000000ffffac141419ff020000000000000000000000000001"], 0x76) 1m43.362688059s ago: executing program 4 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002a00)=@deltfilter={0x2600, 0x2d, 0x300, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xb}, {0xe, 0xc}, {0x0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xfb, 0x6}}, @filter_kind_options=@f_bpf={{0x8}, {0x25c4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x5, 0x5, 0xf8, 0x4}, {0x4, 0x8, 0x7, 0x1450}, {0x9, 0x38, 0x80, 0x1d54}, {0x7, 0x6, 0x2, 0x2}, {0x5, 0xb3, 0x42, 0x16}]}}, @TCA_BPF_ACT={0x2270, 0x1, [@m_ife={0xcc, 0x1c, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x98, 0x6, "5fa013a08b698021433f2ab05a1b036b2c26beadd48adcf73c4f69c989932bc4f44a4bd4f024fb39f6c7df61d885c1fb917b1b92429bd656027d52febb102cd9c5303e6ec2ee964757b864c5d219bacdbbb49dfdba6de989931057cccce2659f81a12d5a1f1d5daa7dd5e45502f1ed15518765ccf2d772a5499a8d67a48a24d7de20d0ff79d53129eda82826aa0fe15dd5e9a7d2"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}, @m_connmark={0xf0, 0x1c, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x2, 0x7, 0x9, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd80, 0x8, 0xffffffffffffffff, 0x8, 0x3}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x6, 0xfffffffb, 0xf7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x6, 0x324, 0x7}, 0x3ff}}]}, {0x4f, 0x6, "1fdd234f5e42be43d983dba1911d2bf1ebdf13ad5b4309683c556a05ae6df724a0851219b9458b80f51def56ae0a6cffb88c202c4c634538f0ef664df13b7a74ebeacbee39ccb6991a2aaa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_pedit={0xed0, 0x1e, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x7f, 0x8, 0x20000000, 0x4d06, 0x9}, 0x4, 0xf7, [{0x101, 0xdf, 0x9, 0x3, 0x7, 0xffffffff}, {0x0, 0x2, 0x10000, 0x70, 0x140, 0x2}, {0x2c1, 0x5, 0xbfb5, 0x400, 0xc, 0x9}, {0x1, 0x1, 0x7, 0x9, 0x800, 0x6}]}, [{0xd74d, 0x8000, 0x7, 0xd, 0x100, 0x1}, {0x7, 0x8, 0x6, 0x80000001, 0x6, 0x100}, {0xc59, 0x9, 0x800, 0xffff3f9d, 0x4, 0xee}, {0x91d, 0x1, 0xf, 0xa0, 0x8001, 0x1}, {0x3, 0x88, 0x53f, 0xfffffe00, 0x4, 0xe9e0}, {0x0, 0x923, 0x6, 0x4, 0x5, 0x3}, {0x7f, 0x4, 0xd7, 0x4, 0xfff, 0x81}, {0x3, 0xb1, 0x2, 0x5, 0x1, 0xac}, {0x8, 0x9, 0x401, 0xfffffffe, 0xfffffc01}, {0x3, 0x1, 0x9, 0xffffffff, 0x36e, 0xb}, {0x2, 0xff0, 0x6, 0x9, 0x3, 0x81}, {0x400, 0x4, 0x2, 0x2cd, 0x80000001, 0x1}, {0xd8f, 0x1ff, 0x2, 0x500, 0x7, 0xf4}, {0x9, 0x9, 0x2, 0x0, 0x8, 0x5}, {0xffffffdf, 0x1000, 0x81, 0x5, 0xa51a, 0x101}, {0xc, 0xa, 0x200, 0x7fff, 0x4, 0x1000}, {0x5, 0x3, 0x3d, 0x58ab, 0xfffffffd, 0x4}, {0x0, 0x8, 0x0, 0x48e, 0xf89d, 0x5}, {0x3, 0xff, 0x419d, 0x6, 0x2}, {0xb9fa, 0xc, 0x8, 0x9570, 0x1, 0x9}, {0x0, 0x6, 0x6, 0x74a8, 0x7, 0x4}, {0x80, 0x6, 0x1, 0x1, 0x3, 0x5}, {0x81, 0xffff9e06, 0x2, 0xffffffff, 0x5, 0x5}, {0x4, 0xbd, 0xdc8, 0x9, 0x1, 0xf45f}, {0x72f, 0xa527, 0x100, 0x9, 0xa0, 0x7}, {0x1, 0x1ff, 0x0, 0x10001, 0x8, 0x8d}, {0x9, 0x2, 0x58c, 0xb, 0x50b, 0x7}, {0x7f, 0xffffffff, 0x6, 0x7, 0x10001}, {0x3, 0x0, 0x4a51, 0x2, 0x4000000, 0x2}, {0x5, 0xa, 0x1000, 0x8, 0x8, 0x1}, {0x40f9, 0x401, 0x5, 0x4bc298e2, 0xb, 0x4}, {0xa, 0x9, 0x9, 0x5, 0x1, 0x1}, {0xffffffff, 0x9, 0x6, 0x5, 0xcfb, 0x3}, {0x7, 0x3, 0x0, 0x100, 0x7, 0x9}, {0x2, 0x20000000, 0x2, 0x9, 0x1, 0x10000}, {0x8, 0x401, 0x40, 0x4, 0x6, 0x10}, {0x5, 0x18, 0xc5, 0xe5, 0x10001, 0x40}, {0xe4, 0x0, 0x100, 0xfffffffd, 0x3, 0x5}, {0x7, 0x200, 0x5, 0x3, 0x0, 0x4d72}, {0x4, 0x2, 0x30000000, 0xffffffff, 0x5, 0x5}, {0x10000, 0x2, 0x10001, 0x4, 0xe, 0xb7c9}, {0x0, 0x9, 0x5, 0x9, 0x7, 0x6}, {0x3, 0x553, 0x10000, 0x7fffffff, 0x401, 0x8001}, {0x8, 0x8, 0x5, 0x10001, 0x6, 0x8}, {0x140, 0x777a5cdd, 0xb, 0x4e, 0x2, 0x5}, {0x8000, 0x10, 0xa, 0x8000, 0xe2a, 0x7}, {0xffffffb6, 0x6f2, 0x3, 0xede, 0x9, 0xfffffffa}, {0xffff, 0x2, 0xe31, 0x10000, 0x1ff, 0x7d2a}, {0x64d538c6, 0x6, 0x7862, 0x4, 0x5, 0xfff}, {0x5, 0xfffffffc, 0xfffff273, 0xffff00, 0x5, 0x9}, {0x4, 0x400, 0x2, 0x4, 0xe, 0x5}, {0x401, 0x2, 0x9b, 0x5, 0x7, 0x4}, {0x1c000, 0x7, 0x0, 0xee, 0x1, 0x7}, {0x7, 0xc, 0x7, 0x82, 0x8, 0xdd}, {0x97c2, 0x10, 0xce, 0x9, 0x0, 0x3}, {0x8000, 0x1, 0x80000000, 0x0, 0x7b, 0xb}, {0xa4e, 0x6, 0x1000, 0x8, 0x3, 0x6}, {0x72, 0x8, 0x9, 0x81, 0x9, 0xe}, {0xc0000000, 0x7, 0x4, 0xf, 0x9, 0x5}, {0x9, 0x7f, 0x9, 0x2, 0x8, 0x3}, {0x800, 0x7fff, 0xd, 0xd9020d67, 0x4, 0x6}, {0x5, 0xa, 0x5, 0x6, 0x1, 0x1}, {0x8846, 0x6, 0x8001, 0x0, 0x101, 0xfff}, {0xd, 0x8, 0xa197, 0x2, 0x6, 0xffffff39}, {0x1, 0xae, 0x8000, 0x2658, 0x2, 0x6}, {0x3, 0x0, 0x80, 0xd, 0xc, 0x9}, {0x4, 0x270, 0xd, 0x7, 0x8, 0x7}, {0x5, 0x2, 0xff, 0x2, 0x3e64f6ab, 0xf}, {0x88e, 0x4c500, 0xd, 0x2, 0x9, 0x1}, {0x94e, 0x7, 0x2, 0x6, 0xc, 0x9}, {0x5, 0x4, 0xb83, 0xf, 0x3, 0x8001}, {0x7, 0x8, 0x5, 0x1ff, 0xfffffff8, 0xb8}, {0xe5, 0x1, 0x9, 0x2, 0x0, 0x200}, {0xfb57, 0x1, 0x1e6b, 0x4, 0xfffffff4, 0x5}, {0x3ff, 0x6, 0x2cdc1841, 0x5, 0x3, 0x3}, {0x80000000, 0x2000, 0xfffffffd, 0x2, 0x301, 0xa}, {0xc6, 0x9, 0x5, 0x401, 0x1, 0xc}, {0x3, 0x9, 0x8, 0xab2, 0x10, 0x76}, {0xfabb0000, 0x9, 0x400, 0x3, 0x0, 0x580}, {0xffffffff, 0x3, 0x5, 0x8, 0xffff98f7, 0x6}, {0x3, 0xff, 0x4, 0x8, 0x9, 0x1}, {0x2, 0x2, 0x3, 0x2, 0xfffffb41, 0x9}, {0x4, 0x3, 0x1, 0x1, 0x2, 0x8}, {0x9, 0x0, 0xffff, 0x3, 0x9, 0x60000}, {0x7f, 0x4, 0x7f, 0x6, 0xf, 0x81}, {0x6, 0x9, 0x10001, 0x6, 0x7, 0x1}, {0x6, 0x6, 0x5, 0x1, 0x1ff, 0x9}, {0x463a, 0xb4d, 0x4, 0x1, 0x2, 0x7}, {0x3, 0x200, 0x401, 0x7, 0x1000, 0x4}, {0x9, 0x2, 0x6, 0x200, 0x9, 0x100}, {0x7, 0x6, 0x1, 0x2, 0x7}, {0xfffffff9, 0x10000, 0x5, 0x52, 0xffff, 0x2}, {0x7, 0x2, 0x5, 0x8, 0x3}, {0x7fff, 0x5, 0xfffffffb, 0x7, 0x2, 0x4}, {0xe27, 0x9, 0x9, 0x100, 0x4, 0x37}, {0x47, 0xfffffff7, 0x8000, 0xbb5, 0x6, 0x1400}, {0x1, 0x7, 0x3, 0x5, 0xf, 0x4}, {0xc, 0x61, 0x6, 0x100, 0xfffffc01, 0x5}, {0xfff, 0x9, 0x6, 0xa, 0x4, 0x5}, {0x5dd3, 0x7ff, 0xc, 0xc3, 0x5, 0x90000000}, {0x679, 0xb8f1, 0x6, 0x4, 0x9, 0x2}, {0x18eb, 0x1, 0x5, 0x7, 0x4, 0x2}, {0x9, 0x6, 0x6, 0x80, 0x4, 0x5}, {0x1ff, 0x3, 0x8, 0x49, 0x8, 0xc2}, {0x9, 0x0, 0x63, 0xffff8001, 0x4, 0x9}, {0xffffffff, 0x18aa, 0x6, 0x6, 0x800, 0x7}, {0x0, 0x6, 0x7a, 0x2, 0x6, 0x4}, {0x3, 0x5e4fcb44, 0x7, 0x0, 0x508, 0x10000}, {0x9, 0x662, 0x5, 0x2, 0xd72, 0x8}, {0xffff7fff, 0x9, 0x9b, 0x657, 0xfff, 0x9}, {0xfffffffb, 0x4, 0x5, 0x10f0, 0x3ff, 0x6}, {0x0, 0x6, 0x200, 0x6, 0x0, 0x80000001}, {0x4, 0xb, 0x5, 0x8, 0xfe3, 0x6}, {0x3eda0b11, 0x8, 0xd6, 0xac, 0x90c3, 0xa}, {0x9e8, 0x5, 0x6, 0x7, 0xffff0000, 0x7}, {0xfffffcf7, 0x800, 0xcd5c88d2, 0x4587, 0x999, 0x3}, {0xfffffff9, 0xffffffff, 0x7, 0xe62, 0x4, 0x7}, {0x1, 0xab48, 0x7, 0x1, 0x100, 0xfffffffe}, {0x1abbc903, 0x94e2, 0x81c, 0xfffffff7, 0xfffffffd, 0x7da}, {0xe, 0x9, 0x3, 0x3, 0x80000001, 0x6}, {0xf906, 0xac5, 0x8001, 0x684, 0x68, 0x3}, {0xfffffffe, 0x8, 0x3, 0x1, 0x45fe, 0x92b}, {0x26, 0x3, 0x4, 0x3, 0x7, 0x9}, {0x0, 0x1, 0x3ff, 0xe, 0x4a01, 0x10000}, {0x1ff, 0x9, 0x7, 0xfffffff9, 0x6, 0x2}, {0x0, 0x9, 0x5, 0x200, 0x5, 0xe7}, {0x7, 0x2, 0x6, 0x1, 0x8, 0x81}, {0x8, 0x8, 0x669, 0x7b4, 0x3, 0x3}], [{0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {}, {0x3}, {0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x8051d780e5394d38}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x7}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0xe28c7b652b6aca61}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5974fb60f84a0d5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x21, 0x6, "886f5561c415e42628f88d8eafbe75f248699bab86f4b65eab9854d4b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x15c, 0x2, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x950}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x20000000, 0x1, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xeb, 0x6, "6963769471d0acf31da77d4f0a34befa5528cec04ec43d0ce8429d8b98ab6499cd0c276a2401bdf4de39262cf55b804dfefa25c3500d22205e2ac76968d8327395acb8b5cf711e869da460b3c86c1363ec055f864933e3a5879dc2f5d681445a88167d5454b9a9a3a5b27c8cfb1b567d06b232970b45870b849dc4d944da4225545075a4833d8cb622657e919ae13906967e110793dd6b99539bd3a8b01dc45f48ee65a5e3fa85a64ca97f89317f590f3e8986ba5a15746a5ed249664c6b42bbda1b479f48986e391e228d2349a525d323fdb45283e0dc1603c400d4ada2908b12cedc2c3eeea3"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1084, 0x1, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x0, 0x5, 0x200}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xd, 0x0, 0x1, 0xa}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x1, 0x8, 0x5}, 0x14}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xa1fa8e35d070c2a, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xfff3}}, @TCA_BPF_ACT={0x2fc, 0x1, [@m_mpls={0x104, 0x20, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6536f}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0xb7, 0x6, "3ec2c87fa110e2b01a4305aa4476ab5bf3d38177fca206fc67c67747654408ef57bf85ff969c8d3c6b95f659df5acc4df687b9125a9519311a71cbab6eaed7efc4f70446a499aa476fe740ca06052eb1b655509885d85b21017eee9b90f5d65c7e632c53b37c4c72e1d2c3cdf8fe348e9825b7405b7c77e46b573698676e3b3355e8ec864280b69678b8c4946761aff0d9670ee10b08d744c20d2dd1b5912142196cd6a917bc86641e7f2e974e71e2d86fc329"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xdc, 0x15, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x8, 0x8, 0x1, 0x4}, 0x3, r2}}]}, {0x90, 0x6, "852a88a35a937c434a9e395a8972035548304e8f83f20166b5842b3bbc8cd6e28e40ede10492d9a9e8b6b430b0fc7e6fe9a015e79843665621939c58b7c285c458e23461446f8ca0a9ee7ca35ab75727568720251b8f76baae1e7400905666ca85e732a4ab00de5958c8d162a00f2cc7a4bb090c82a85714ec4908520b226a7e2f206761b7342961f03eb389"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x118, 0x1d, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x6, 0x9, 0x4, 0xb}, {0x6, 0xe, 0xb0, 0x7}, {0xa00, 0x5, 0xea, 0x8}, {0x8, 0x2, 0x2, 0x4}, {0x1000, 0x2, 0x8, 0x1}, {0x200, 0x5, 0xad, 0x2}, {0x5, 0x5, 0x6, 0x11}, {0x7, 0x25, 0x8, 0x5}]}]}, {0x69, 0x6, "2d832645af7c3edeae8a8696d1e29cb4d39906ed2fe83ce8186c2f2253867e33572fb915097ec5e3d4bd20c63e2fe78dd620d6a34732cdd19df21b1fa27617149e1c95f2792cc9d551f3dbfad211cae34448ffb928f8562ad771f43183d874dd4e8b3b4209"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x69, 0x5}}]}, 0x2600}}, 0x10000094) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) sendmmsg$unix(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040800}}], 0x1, 0x4000) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f00000002c0), 0x4) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r6 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2100, 0x0, 0xfffffffd, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffbff9, 0x0, 0x0, 0x2, 0x23, 0x3, 0x401}, {0x5, 0xb}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@empty, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xf9, 0x3, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r8, &(0x7f0000000180), 0x21, 0x810) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f00000029c0)={0xa, 0x4e22, 0x56202321, @empty, 0x4000005}, 0x1c) 1m43.299395561s ago: executing program 3 (id=1847): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000980)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB='\x00'/28, @ANYRESOCT=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296b}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000007c0), 0x40000000000009f, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e00)={'ip6tnl0\x00', &(0x7f0000000d80)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x5, 0x66, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x7, 0x410b, 0x8}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000e40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r5}, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1900000004000000040000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000200"/28], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f00)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x44}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x1c}}], 0x20, 0x40800}}], 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001100)={{{@in=@private=0xa010102, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x0, 0x2, 0x20, 0x10, 0x32, r8}, {0x0, 0x7, 0x3, 0xfffffffffffffffe, 0x2, 0x2, 0x280, 0x6}, {0x0, 0x7188, 0xff, 0x4}, 0x8, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x6c}, 0x8b2b82596f6c9aa5, @in=@empty, 0x3505, 0x5, 0x2, 0x40, 0x9, 0x18926321, 0x21}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x1e, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711229000000000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 1m42.909935765s ago: executing program 1 (id=1848): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @ringbuf_query]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x28, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xf, 0x1ff, 0x8}, 0x10, 0xc216, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x3, 0x5, 0x3, 0x8}], 0x10, 0xc}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r4, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x54}}, 0x0) 1m42.835964692s ago: executing program 0 (id=1849): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000100)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208150f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1m42.72087084s ago: executing program 3 (id=1850): syz_emit_ethernet(0x112, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00dc2b00fc020000000000000000000000000001fc"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d30000000000000080005"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f0000000500)="0004000003000000", 0x8) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x10000040) 1m42.528059541s ago: executing program 0 (id=1851): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x40000}, 0x80) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r4, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%pK \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000f00)='cgroup.clone_children\x00', 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000f40)={0x1a0000010}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={r5}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x11, &(0x7f0000000cc0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r8, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000e40)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0xdb, 0x3, 0xff, 0x100, 0x3, 0x41000040, r9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) connect$inet(r10, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_tcp_buf(r10, 0x6, 0x1a, 0x0, &(0x7f0000000140)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000140007800800124000000000050015000600000005050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}}, 0x0) 1m42.473527152s ago: executing program 3 (id=1852): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000300)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@broadcast, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) syz_emit_ethernet(0x12f, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x121, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @cc={0x1, 0x0, 0xea, 0x3, 0x4, 0x1, 0x1, [@ipv6=@gre_packet={0x6, 0x6, "d01828", 0xc3, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x3a, 0x0, 0x10, 0x1, 0x0, 0x1, 0x66}, @fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x1d, 0x65}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x34, 0x0, [], "a998522d6423c8f01aaa6e188d2bc42e5329372f70555a199a82928306c7be474e48e0a5d9022b9f1df0ca757260e25318b5641c"}, {}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8, 0x9], "5fa311346f5e8d05e7d3d608775a4ac8a870c640cd40cb9d8001290c00000082f1470f5dd19a5daa04421e82ffd323b4fc4964bf2884ba"}, {0x8, 0x88be, 0x0, {{0x7, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7, 0x8}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x0, {{0x1, 0x2, 0x2, 0x1, 0x1, 0x0, 0x1, 0x3}, 0x2, {0x80000001, 0x3, 0x1, 0x9, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x1}}}}]}}}}}}, 0x0) r8 = socket$kcm(0x2d, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000800)={@rand_addr=' \x01\x00', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000840)={@private2, 0x9c940000, 0x2, 0x1, 0x8, 0x69bb, 0xffff}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000880)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) socket$kcm(0x2, 0x3, 0x2) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xfffffc01, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000001}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x21}, @generic={0x6, 0x9, 0x5, 0x3, 0x9}]}, &(0x7f0000000c00)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa369, r4, 0x1, &(0x7f0000000c40)=[r3, 0x1, r3, r3, r11], &(0x7f0000000c80)=[{0x4, 0x2, 0x2, 0xa}], 0x10, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000cc0)={r6, r2, 0x25, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000d00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 0s ago: executing program 32 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r1, 0x84, 0x81, &(0x7f0000000080)={0x2, 0x1}, &(0x7f0000000680)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000900)={0x0, 0xfffffff5, &(0x7f0000000940)=[{&(0x7f0000000980)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', 0x1}) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000006c0)='syzkaller0\x00', 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x4000840) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2, 0x4e20, @loopback}, 0x10) kernel console output (not intermixed with test programs): bpf_check+0x14ae/0x34e0 [ 244.823740][T10073] __vmalloc_noprof+0xd2/0x120 [ 244.823804][T10073] ? bpf_check+0x14ae/0x34e0 [ 244.823868][T10073] bpf_check+0x14ae/0x34e0 [ 244.823963][T10073] ? ktime_get_with_offset+0x93/0x2d0 [ 244.824040][T10073] ? ktime_get_with_offset+0x93/0x2d0 [ 244.824118][T10073] ? __pfx_bpf_check+0x10/0x10 [ 244.824184][T10073] ? bpf_obj_name_cpy+0x194/0x1e0 [ 244.824263][T10073] bpf_prog_load+0x14da/0x1c60 [ 244.824358][T10073] ? __pfx_bpf_prog_load+0x10/0x10 [ 244.824451][T10073] ? __might_fault+0xaf/0x130 [ 244.824533][T10073] __sys_bpf+0xd86/0xe00 [ 244.824609][T10073] ? __pfx___sys_bpf+0x10/0x10 [ 244.824704][T10073] ? __fget_files+0x2a/0x420 [ 244.824836][T10073] ? ksys_write+0x242/0x270 [ 244.824920][T10073] ? __pfx_ksys_write+0x10/0x10 [ 244.825008][T10073] __x64_sys_bpf+0xba/0xd0 [ 244.825104][T10073] do_syscall_64+0x166/0x520 [ 244.825161][T10073] ? trace_irq_disable+0x3b/0x140 [ 244.825247][T10073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.825302][T10073] ? clear_bhb_loop+0x70/0xc0 [ 244.825376][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.825442][T10073] RIP: 0033:0x7f9e1179f559 [ 244.825497][T10073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.825549][T10073] RSP: 002b:00007f9e126b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.825607][T10073] RAX: ffffffffffffffda RBX: 00007f9e11a25fa0 RCX: 00007f9e1179f559 [ 244.825662][T10073] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 244.825676][T10073] RBP: 00007f9e126b9090 R08: 0000000000000000 R09: 0000000000000000 [ 244.825690][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.825703][T10073] R13: 00007f9e11a26038 R14: 00007f9e11a25fa0 R15: 00007fff5085c8e8 [ 244.825739][T10073] [ 244.875000][T10073] Mem-Info: [ 244.875035][T10073] active_anon:5701 inactive_anon:0 isolated_anon:0 [ 244.875035][T10073] active_file:0 inactive_file:43859 isolated_file:0 [ 244.875035][T10073] unevictable:0 dirty:326 writeback:0 [ 244.875035][T10073] slab_reclaimable:11071 slab_unreclaimable:104735 [ 244.875035][T10073] mapped:29843 shmem:594 pagetables:3470 [ 244.875035][T10073] sec_pagetables:0 bounce:0 [ 244.875035][T10073] kernel_misc_reclaimable:0 [ 244.875035][T10073] free:1308460 free_pcp:11089 free_cma:0 [ 244.875171][T10073] Node 0 active_anon:22804kB inactive_anon:0kB active_file:0kB inactive_file:175244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119372kB dirty:1304kB writeback:0kB shmem:2376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12852kB pagetables:13772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 244.875326][T10073] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 244.875477][T10073] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.875641][T10073] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 244.875793][T10073] Node 0 DMA32 free:1289108kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22804kB inactive_anon:0kB active_file:0kB inactive_file:175244kB unevictable:0kB writepending:1164kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:44352kB local_pcp:21304kB free_cma:0kB [ 244.894192][T10073] lowmem_reserve[]: 0 0 1 1 1 [ 244.894316][T10073] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 244.894530][T10073] lowmem_reserve[]: 0 0 0 0 0 [ 244.894629][T10073] Node 1 Normal free:3929372kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.894898][T10073] lowmem_reserve[]: 0 0 0 0 0 [ 244.895004][T10073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.895320][T10073] Node 0 DMA32: 3439*4kB (UME) 2049*8kB (UME) 1381*16kB (UM) 656*32kB (UME) 657*64kB (UME) 596*128kB (UME) 409*256kB (UME) 241*512kB (UME) 131*1024kB (UME) 9*2048kB (UME) 175*4096kB (UM) = 1289044kB [ 244.895837][T10073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 244.911915][T10073] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 10*16kB (UM) 7*32kB (UM) 10*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 958*4096kB (UM) = 3929372kB [ 244.912393][T10073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.912443][T10073] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.912492][T10073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.912535][T10073] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.912578][T10073] 44449 total pagecache pages [ 244.912600][T10073] 0 pages in swap cache [ 244.912630][T10073] Free swap = 124996kB [ 244.912651][T10073] Total swap = 124996kB [ 244.912673][T10073] 2097051 pages RAM [ 244.912738][T10073] 0 pages HighMem/MovableOnly [ 244.912760][T10073] 434240 pages reserved [ 244.912781][T10073] 0 pages cma reserved [ 245.047359][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 245.047448][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 245.047504][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 245.047568][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 246.176568][T10121] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1347'. [ 246.176597][T10121] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1347'. [ 246.278574][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 246.280780][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'. [ 246.933666][T10233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1350'. [ 246.978441][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1350'. [ 248.645643][T10100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.772008][T10332] netlink: 904 bytes leftover after parsing attributes in process `syz.4.1358'. [ 248.772038][T10332] netlink: 904 bytes leftover after parsing attributes in process `syz.4.1358'. [ 249.101695][T10344] bridge_slave_0: left allmulticast mode [ 249.101723][T10344] bridge_slave_0: left promiscuous mode [ 249.102165][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.152435][T10344] bridge_slave_1: left allmulticast mode [ 249.152460][T10344] bridge_slave_1: left promiscuous mode [ 249.152684][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.241014][T10344] bond1: (slave veth0_to_bond): Releasing backup interface [ 249.279148][T10344] bond0: (slave bond_slave_0): Releasing backup interface [ 249.309295][T10344] bond0: (slave bond_slave_1): Releasing backup interface [ 249.352518][T10344] team0: Port device team_slave_0 removed [ 249.382477][T10344] team0: Port device team_slave_1 removed [ 249.384642][T10344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.404674][T10344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.409518][T10346] team0: Mode changed to "broadcast" [ 249.497418][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 249.638256][ T62] net_ratelimit: 53 callbacks suppressed [ 249.638279][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 249.638306][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 249.638329][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 249.638351][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 249.780019][T10364] x_tables: unsorted entry at hook 2 [ 249.869781][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 249.869816][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 250.146430][ T1279] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 250.146467][ T1279] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 250.146491][ T1279] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 250.146515][ T1279] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 250.430752][T10383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1372'. [ 250.453503][T10380] bridge8: entered promiscuous mode [ 250.453529][T10380] bridge8: entered allmulticast mode [ 251.557216][T10421] bridge0: port 1(batadv0) entered disabled state [ 251.591627][T10421] bridge_slave_0: left allmulticast mode [ 251.591656][T10421] bridge_slave_0: left promiscuous mode [ 251.591952][T10421] bridge0: port 3(bridge_slave_0) entered disabled state [ 251.642630][T10421] bridge_slave_1: left allmulticast mode [ 251.642666][T10421] bridge_slave_1: left promiscuous mode [ 251.642986][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.724323][T10421] bond0: (slave bond_slave_1): Releasing backup interface [ 251.754201][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 251.766208][T10421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.779881][T10421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.852120][T10428] tipc: Enabling of bearer rejected, failed to enable media [ 252.481775][T10447] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1386'. [ 252.486777][T10447] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1386'. [ 252.619886][T10450] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 252.657301][T10447] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 252.723001][T10447] bond1 (unregistering): Released all slaves [ 253.258458][T10468] veth0: entered promiscuous mode [ 253.412848][T10476] FAULT_INJECTION: forcing a failure. [ 253.412848][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 253.412882][T10476] CPU: 1 UID: 0 PID: 10476 Comm: syz.0.1395 Not tainted syzkaller #0 PREEMPT(full) [ 253.412908][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 253.412922][T10476] Call Trace: [ 253.412931][T10476] [ 253.412941][T10476] dump_stack_lvl+0xe8/0x150 [ 253.412983][T10476] should_fail_ex+0x3eb/0x540 [ 253.413019][T10476] should_failslab+0xa8/0x100 [ 253.413054][T10476] __kmalloc_noprof+0xf9/0x710 [ 253.413081][T10476] ? nft_pernet+0x23/0x240 [ 253.413112][T10476] ? nf_tables_newrule+0x1524/0x28a0 [ 253.413140][T10476] ? nf_tables_newrule+0x1524/0x28a0 [ 253.413178][T10476] nf_tables_newrule+0x1524/0x28a0 [ 253.413226][T10476] ? __pfx_nf_tables_newrule+0x10/0x10 [ 253.413255][T10476] ? lock_acquire+0x115/0x350 [ 253.413282][T10476] ? nfnl_pernet+0x23/0x240 [ 253.413322][T10476] ? __nla_parse+0x40/0x60 [ 253.413359][T10476] nfnetlink_rcv+0x1288/0x28c0 [ 253.413428][T10476] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 253.413513][T10476] ? lock_acquire+0x115/0x350 [ 253.413553][T10476] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.413585][T10476] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.413623][T10476] netlink_unicast+0x8ef/0xa80 [ 253.413672][T10476] netlink_sendmsg+0x7f0/0xb20 [ 253.413713][T10476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.413750][T10476] ? aa_sock_msg_perm+0x144/0x210 [ 253.413779][T10476] ? apparmor_socket_sendmsg+0x98/0x360 [ 253.413820][T10476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.413851][T10476] sock_sendmsg_nosec+0x14e/0x190 [ 253.413886][T10476] ____sys_sendmsg+0x54e/0x850 [ 253.413917][T10476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.413950][T10476] ? import_iovec+0x73/0xa0 [ 253.413976][T10476] ___sys_sendmsg+0x2a5/0x360 [ 253.413993][T10476] ? __lock_acquire+0x747/0x2de0 [ 253.414019][T10476] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.414070][T10476] ? __fget_files+0x3a2/0x420 [ 253.414091][T10476] ? __fget_files+0x2a/0x420 [ 253.414121][T10476] __x64_sys_sendmsg+0x1b1/0x290 [ 253.414143][T10476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.414180][T10476] do_syscall_64+0x166/0x520 [ 253.414200][T10476] ? trace_irq_disable+0x3b/0x140 [ 253.414225][T10476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.414244][T10476] ? clear_bhb_loop+0x70/0xc0 [ 253.414266][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.414284][T10476] RIP: 0033:0x7f242ab9f559 [ 253.414301][T10476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.414317][T10476] RSP: 002b:00007f242bb03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.414336][T10476] RAX: ffffffffffffffda RBX: 00007f242ae25fa0 RCX: 00007f242ab9f559 [ 253.414349][T10476] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 253.414360][T10476] RBP: 00007f242bb03090 R08: 0000000000000000 R09: 0000000000000000 [ 253.414371][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.414382][T10476] R13: 00007f242ae26038 R14: 00007f242ae25fa0 R15: 00007ffd932b9808 [ 253.414410][T10476] [ 253.416251][T10456] veth0: left promiscuous mode [ 253.417823][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 253.992294][T10492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1400'. [ 253.993297][T10492] netlink: 'syz.3.1400': attribute type 4 has an invalid length. [ 254.020481][T10492] netlink: 'syz.3.1400': attribute type 4 has an invalid length. [ 254.170648][ T30] audit: type=1804 audit(1793448845.259:6): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1404" name="/newroot/291/cgroup.controllers" dev="tmpfs" ino=1487 res=1 errno=0 [ 254.171896][ T30] audit: type=1800 audit(1793448845.259:7): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1404" name="cgroup.controllers" dev="tmpfs" ino=1487 res=0 errno=-22 [ 254.228569][T10498] netlink: 'syz.2.1404': attribute type 10 has an invalid length. [ 254.735133][ T62] net_ratelimit: 55 callbacks suppressed [ 254.735156][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 254.735182][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 254.735204][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 254.735226][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 254.971521][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 255.009864][T10516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.028894][ T157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 255.028993][ T157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 255.247681][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 255.247720][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 255.247745][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 255.898078][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071921][T10565] FAULT_INJECTION: forcing a failure. [ 256.071921][T10565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.071955][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.2.1422 Not tainted syzkaller #0 PREEMPT(full) [ 256.071980][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 256.071995][T10565] Call Trace: [ 256.072003][T10565] [ 256.072013][T10565] dump_stack_lvl+0xe8/0x150 [ 256.072055][T10565] should_fail_ex+0x3eb/0x540 [ 256.072089][T10565] _copy_from_iter+0x1d3/0x1680 [ 256.072123][T10565] ? _copy_from_iter+0x21b/0x1680 [ 256.072148][T10565] ? sock_alloc_send_pskb+0xc87/0xd90 [ 256.072176][T10565] ? __pfx__copy_from_iter+0x10/0x10 [ 256.072208][T10565] ? __pfx__copy_from_iter+0x10/0x10 [ 256.072243][T10565] copy_page_from_iter+0x219/0x2d0 [ 256.072274][T10565] skb_copy_datagram_from_iter+0x2f4/0x720 [ 256.072316][T10565] unix_dgram_sendmsg+0x5b3/0x17e0 [ 256.072344][T10565] ? __lock_acquire+0x747/0x2de0 [ 256.072383][T10565] ? __pfx_process_measurement+0x10/0x10 [ 256.072419][T10565] ? __lock_acquire+0x747/0x2de0 [ 256.072447][T10565] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 256.072478][T10565] ? aa_sock_msg_perm+0x129/0x210 [ 256.072506][T10565] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 256.072536][T10565] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 256.072562][T10565] sock_sendmsg_nosec+0x14e/0x190 [ 256.072596][T10565] ____sys_sendmsg+0x54e/0x850 [ 256.072630][T10565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.072666][T10565] ? import_iovec+0x73/0xa0 [ 256.072698][T10565] ___sys_sendmsg+0x2a5/0x360 [ 256.072720][T10565] ? __lock_acquire+0x747/0x2de0 [ 256.072762][T10565] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.072793][T10565] ? kstrtouint+0x6e/0xe0 [ 256.072860][T10565] ? __fget_files+0x3a2/0x420 [ 256.072887][T10565] ? __fget_files+0x2a/0x420 [ 256.072926][T10565] __sys_sendmmsg+0x273/0x4e0 [ 256.072957][T10565] ? __pfx___sys_sendmmsg+0x10/0x10 [ 256.072994][T10565] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 256.073039][T10565] ? ksys_write+0x242/0x270 [ 256.073071][T10565] ? __pfx_ksys_write+0x10/0x10 [ 256.073109][T10565] __x64_sys_sendmmsg+0xa0/0xc0 [ 256.073136][T10565] do_syscall_64+0x166/0x520 [ 256.073161][T10565] ? trace_irq_disable+0x3b/0x140 [ 256.073192][T10565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.073215][T10565] ? clear_bhb_loop+0x70/0xc0 [ 256.073245][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.073267][T10565] RIP: 0033:0x7fb9b299f559 [ 256.073289][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.073309][T10565] RSP: 002b:00007fb9b37e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 256.073333][T10565] RAX: ffffffffffffffda RBX: 00007fb9b2c25fa0 RCX: 00007fb9b299f559 [ 256.073350][T10565] RDX: 0400000000000292 RSI: 0000200000000a00 RDI: 0000000000000003 [ 256.073365][T10565] RBP: 00007fb9b37e1090 R08: 0000000000000000 R09: 0000000000000000 [ 256.073380][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.073394][T10565] R13: 00007fb9b2c26038 R14: 00007fb9b2c25fa0 R15: 00007ffc7239f1d8 [ 256.073433][T10565] [ 256.605600][T10577] FAULT_INJECTION: forcing a failure. [ 256.605600][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.605634][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.0.1429 Not tainted syzkaller #0 PREEMPT(full) [ 256.605661][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 256.605675][T10577] Call Trace: [ 256.605688][T10577] [ 256.605698][T10577] dump_stack_lvl+0xe8/0x150 [ 256.605740][T10577] should_fail_ex+0x3eb/0x540 [ 256.605773][T10577] _copy_from_user+0x2d/0xb0 [ 256.605803][T10577] kstrtouint_from_user+0xd6/0x180 [ 256.605830][T10577] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 256.605865][T10577] ? lock_acquire+0x115/0x350 [ 256.605899][T10577] proc_fail_nth_write+0x8e/0x210 [ 256.605936][T10577] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.605982][T10577] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.606017][T10577] vfs_write+0x296/0xba0 [ 256.606115][T10577] ? __pfx_vfs_write+0x10/0x10 [ 256.606146][T10577] ? __fget_files+0x2a/0x420 [ 256.606172][T10577] ? __fget_files+0x3a2/0x420 [ 256.606198][T10577] ? __fget_files+0x2a/0x420 [ 256.606230][T10577] ? fdget+0x1ac/0x250 [ 256.606266][T10577] ksys_write+0x150/0x270 [ 256.606298][T10577] ? __pfx_ksys_write+0x10/0x10 [ 256.606341][T10577] do_syscall_64+0x166/0x520 [ 256.606367][T10577] ? trace_irq_disable+0x3b/0x140 [ 256.606398][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.606422][T10577] ? clear_bhb_loop+0x70/0xc0 [ 256.606451][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.606474][T10577] RIP: 0033:0x7f242ab5fd8e [ 256.606495][T10577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.606515][T10577] RSP: 002b:00007f242bb02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.606539][T10577] RAX: ffffffffffffffda RBX: 00007f242bb036c0 RCX: 00007f242ab5fd8e [ 256.606556][T10577] RDX: 0000000000000001 RSI: 00007f242bb030a0 RDI: 0000000000000005 [ 256.606570][T10577] RBP: 00007f242bb03090 R08: 0000000000000000 R09: 0000000000000000 [ 256.606585][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.606599][T10577] R13: 00007f242ae26038 R14: 00007f242ae25fa0 R15: 00007ffd932b9808 [ 256.606637][T10577] [ 257.263652][T10594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1435'. [ 257.442919][T10604] bridge0: port 2(ip6gretap0) entered blocking state [ 257.443088][T10604] bridge0: port 2(ip6gretap0) entered forwarding state [ 257.469051][T10604] 8021q: adding VLAN 0 to HW filter on device  [ 257.472266][T10604] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.549340][T10604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.552635][T10604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.581081][T10604] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 257.632773][T10610] xt_hashlimit: size too large, truncated to 1048576 [ 258.573630][T10643] syzkaller1: entered promiscuous mode [ 258.573654][T10643] syzkaller1: entered allmulticast mode [ 258.902318][T10655] FAULT_INJECTION: forcing a failure. [ 258.902318][T10655] name failslab, interval 1, probability 0, space 0, times 0 [ 258.902360][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT(full) [ 258.902386][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 258.902400][T10655] Call Trace: [ 258.902408][T10655] [ 258.902418][T10655] dump_stack_lvl+0xe8/0x150 [ 258.902463][T10655] should_fail_ex+0x3eb/0x540 [ 258.902498][T10655] should_failslab+0xa8/0x100 [ 258.902533][T10655] __kmalloc_node_noprof+0xfb/0x720 [ 258.902560][T10655] ? __get_vm_area_node+0x200/0x2f0 [ 258.902581][T10655] ? __get_vm_area_node+0x283/0x2f0 [ 258.902601][T10655] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 258.902625][T10655] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 258.902658][T10655] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 258.902720][T10655] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.902745][T10655] ? __kasan_kmalloc+0x93/0xb0 [ 258.902777][T10655] ? __kmalloc_cache_noprof+0x31c/0x600 [ 258.902804][T10655] ? __kmalloc_cache_noprof+0x148/0x600 [ 258.902829][T10655] ? bpf_diag_init+0x87/0x140 [ 258.902858][T10655] ? bpf_diag_init+0x87/0x140 [ 258.902891][T10655] ? bpf_check+0x14ae/0x34e0 [ 258.902911][T10655] __vmalloc_noprof+0xd2/0x120 [ 258.902933][T10655] ? bpf_check+0x14ae/0x34e0 [ 258.902958][T10655] bpf_check+0x14ae/0x34e0 [ 258.902993][T10655] ? ktime_get_with_offset+0x93/0x2d0 [ 258.903026][T10655] ? ktime_get_with_offset+0x93/0x2d0 [ 258.903058][T10655] ? __pfx_bpf_check+0x10/0x10 [ 258.903084][T10655] ? bpf_obj_name_cpy+0x194/0x1e0 [ 258.903117][T10655] bpf_prog_load+0x14da/0x1c60 [ 258.903153][T10655] ? __pfx_bpf_prog_load+0x10/0x10 [ 258.903191][T10655] ? __might_fault+0xaf/0x130 [ 258.903222][T10655] __sys_bpf+0xd86/0xe00 [ 258.903253][T10655] ? __pfx___sys_bpf+0x10/0x10 [ 258.903288][T10655] ? __fget_files+0x2a/0x420 [ 258.903334][T10655] ? ksys_write+0x242/0x270 [ 258.903390][T10655] ? __pfx_ksys_write+0x10/0x10 [ 258.903435][T10655] __x64_sys_bpf+0xba/0xd0 [ 258.903466][T10655] do_syscall_64+0x166/0x520 [ 258.903491][T10655] ? trace_irq_disable+0x3b/0x140 [ 258.903521][T10655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.903545][T10655] ? clear_bhb_loop+0x70/0xc0 [ 258.903573][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.903596][T10655] RIP: 0033:0x7f895fb9f559 [ 258.903617][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.903637][T10655] RSP: 002b:00007f8960ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.903661][T10655] RAX: ffffffffffffffda RBX: 00007f895fe25fa0 RCX: 00007f895fb9f559 [ 258.903678][T10655] RDX: 0000000000000094 RSI: 0000200000002040 RDI: 0000000000000005 [ 258.903692][T10655] RBP: 00007f8960ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 258.903707][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.903720][T10655] R13: 00007f895fe26038 R14: 00007f895fe25fa0 R15: 00007ffe9c4326f8 [ 258.903757][T10655] [ 258.904335][T10655] syz.3.1452: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 258.904415][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT(full) [ 258.904439][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 258.904453][T10655] Call Trace: [ 258.904467][T10655] [ 258.904477][T10655] dump_stack_lvl+0xe8/0x150 [ 258.904517][T10655] warn_alloc+0x24d/0x270 [ 258.904552][T10655] ? __pfx_warn_alloc+0x10/0x10 [ 258.904585][T10655] ? __kmalloc_node_noprof+0x4d2/0x720 [ 258.904611][T10655] ? __get_vm_area_node+0x200/0x2f0 [ 258.904634][T10655] ? __get_vm_area_node+0x283/0x2f0 [ 258.904654][T10655] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 258.904680][T10655] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 258.904712][T10655] __vmalloc_node_range_noprof+0xa10/0x16f0 [ 258.904774][T10655] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.904798][T10655] ? __kasan_kmalloc+0x93/0xb0 [ 258.904829][T10655] ? __kmalloc_cache_noprof+0x31c/0x600 [ 258.904857][T10655] ? __kmalloc_cache_noprof+0x148/0x600 [ 258.904883][T10655] ? bpf_diag_init+0x87/0x140 [ 258.904912][T10655] ? bpf_diag_init+0x87/0x140 [ 258.904945][T10655] ? bpf_check+0x14ae/0x34e0 [ 258.904966][T10655] __vmalloc_noprof+0xd2/0x120 [ 258.904990][T10655] ? bpf_check+0x14ae/0x34e0 [ 258.905016][T10655] bpf_check+0x14ae/0x34e0 [ 258.905052][T10655] ? ktime_get_with_offset+0x93/0x2d0 [ 258.905082][T10655] ? ktime_get_with_offset+0x93/0x2d0 [ 258.905114][T10655] ? __pfx_bpf_check+0x10/0x10 [ 258.905141][T10655] ? bpf_obj_name_cpy+0x194/0x1e0 [ 258.905174][T10655] bpf_prog_load+0x14da/0x1c60 [ 258.905210][T10655] ? __pfx_bpf_prog_load+0x10/0x10 [ 258.905251][T10655] ? __might_fault+0xaf/0x130 [ 258.905281][T10655] __sys_bpf+0xd86/0xe00 [ 258.905312][T10655] ? __pfx___sys_bpf+0x10/0x10 [ 258.905355][T10655] ? __fget_files+0x2a/0x420 [ 258.905402][T10655] ? ksys_write+0x242/0x270 [ 258.905434][T10655] ? __pfx_ksys_write+0x10/0x10 [ 258.905470][T10655] __x64_sys_bpf+0xba/0xd0 [ 258.905505][T10655] do_syscall_64+0x166/0x520 [ 258.905529][T10655] ? trace_irq_disable+0x3b/0x140 [ 258.905560][T10655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.905583][T10655] ? clear_bhb_loop+0x70/0xc0 [ 258.905612][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.905635][T10655] RIP: 0033:0x7f895fb9f559 [ 258.905653][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.905672][T10655] RSP: 002b:00007f8960ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.905695][T10655] RAX: ffffffffffffffda RBX: 00007f895fe25fa0 RCX: 00007f895fb9f559 [ 258.905712][T10655] RDX: 0000000000000094 RSI: 0000200000002040 RDI: 0000000000000005 [ 258.905726][T10655] RBP: 00007f8960ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 258.905740][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.905752][T10655] R13: 00007f895fe26038 R14: 00007f895fe25fa0 R15: 00007ffe9c4326f8 [ 258.905787][T10655] [ 258.988351][T10655] Mem-Info: [ 258.988384][T10655] active_anon:5717 inactive_anon:0 isolated_anon:0 [ 258.988384][T10655] active_file:0 inactive_file:43865 isolated_file:0 [ 258.988384][T10655] unevictable:0 dirty:348 writeback:0 [ 258.988384][T10655] slab_reclaimable:11185 slab_unreclaimable:102437 [ 258.988384][T10655] mapped:29810 shmem:545 pagetables:3457 [ 258.988384][T10655] sec_pagetables:0 bounce:0 [ 258.988384][T10655] kernel_misc_reclaimable:0 [ 258.988384][T10655] free:1311622 free_pcp:10586 free_cma:0 [ 258.988443][T10655] Node 0 active_anon:22868kB inactive_anon:0kB active_file:0kB inactive_file:175268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119240kB dirty:1388kB writeback:0kB shmem:2180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12964kB pagetables:13720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 258.988505][T10655] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 258.988576][T10655] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.988643][T10655] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 258.988708][T10655] Node 0 DMA32 free:1302868kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22868kB inactive_anon:0kB active_file:0kB inactive_file:175268kB unevictable:0kB writepending:1388kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:41352kB local_pcp:18940kB free_cma:0kB [ 258.988778][T10655] lowmem_reserve[]: 0 0 1 1 1 [ 258.988816][T10655] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 258.988880][T10655] lowmem_reserve[]: 0 0 0 0 0 [ 258.988917][T10655] Node 1 Normal free:3928260kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:988kB local_pcp:0kB free_cma:0kB [ 258.988982][T10655] lowmem_reserve[]: 0 0 0 0 0 [ 258.989019][T10655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.989150][T10655] Node 0 DMA32: 3361*4kB (UME) 2148*8kB (UME) 1291*16kB (UME) 617*32kB (UME) 615*64kB (UME) 573*128kB (UME) 420*256kB (UME) 248*512kB (UME) 138*1024kB (UME) 11*2048kB (UME) 176*4096kB (UM) = 1302964kB [ 259.000925][T10655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 259.009826][T10655] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 10*16kB (UM) 7*32kB (UM) 12*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 958*4096kB (UM) = 3928336kB [ 259.010002][T10655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.010022][T10655] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.010039][T10655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 259.010055][T10655] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 259.010072][T10655] 44406 total pagecache pages [ 259.010081][T10655] 0 pages in swap cache [ 259.010088][T10655] Free swap = 124996kB [ 259.010097][T10655] Total swap = 124996kB [ 259.010106][T10655] 2097051 pages RAM [ 259.010114][T10655] 0 pages HighMem/MovableOnly [ 259.010136][T10655] 434240 pages reserved [ 259.010161][T10655] 0 pages cma reserved [ 259.485583][T10661] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1453'. [ 259.846754][ T157] net_ratelimit: 52 callbacks suppressed [ 259.846818][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 259.846891][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 259.846945][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 259.847008][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 260.126854][ T157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 260.126890][ T157] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 260.189740][T10664] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1454'. [ 260.189766][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 260.356317][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 260.356352][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 260.356377][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 260.356400][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 260.694931][ T4956] Bluetooth: hci4: command tx timeout [ 261.083526][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 261.193726][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'. [ 261.195748][T10719] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1463'. [ 261.378372][T10727] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1467'. [ 261.590114][T10731] tipc: Can't bind to reserved service type 1 [ 261.888926][T10745] IPVS: length: 75 != 24 [ 262.087172][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 262.382394][T10765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1479'. [ 262.408133][T10764] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 262.489888][T10768] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1480'. [ 262.929389][T10783] xt_TPROXY: Can be used only with -p tcp or -p udp [ 263.096795][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 263.781472][T10826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 263.894512][T10832] FAULT_INJECTION: forcing a failure. [ 263.894512][T10832] name failslab, interval 1, probability 0, space 0, times 0 [ 263.894543][T10832] CPU: 1 UID: 0 PID: 10832 Comm: syz.1.1497 Not tainted syzkaller #0 PREEMPT(full) [ 263.894567][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 263.894580][T10832] Call Trace: [ 263.894589][T10832] [ 263.894603][T10832] dump_stack_lvl+0xe8/0x150 [ 263.894644][T10832] should_fail_ex+0x3eb/0x540 [ 263.894676][T10832] should_failslab+0xa8/0x100 [ 263.894710][T10832] __kmalloc_noprof+0xf9/0x710 [ 263.894735][T10832] ? rcu_is_watching+0x16/0xb0 [ 263.894767][T10832] ? tomoyo_realpath_from_path+0xef/0x640 [ 263.894790][T10832] ? tomoyo_realpath_from_path+0xef/0x640 [ 263.894822][T10832] tomoyo_realpath_from_path+0xef/0x640 [ 263.894859][T10832] ? tomoyo_path_number_perm+0x219/0x5f0 [ 263.894893][T10832] tomoyo_path_number_perm+0x246/0x5f0 [ 263.894930][T10832] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.894960][T10832] ? __lock_acquire+0x747/0x2de0 [ 263.895032][T10832] ? __fget_files+0x2a/0x420 [ 263.895062][T10832] ? __fget_files+0x2a/0x420 [ 263.895088][T10832] ? __fget_files+0x2a/0x420 [ 263.895121][T10832] security_file_ioctl+0xc3/0x2a0 [ 263.895154][T10832] __se_sys_ioctl+0x47/0x170 [ 263.895190][T10832] do_syscall_64+0x166/0x520 [ 263.895214][T10832] ? trace_irq_disable+0x3b/0x140 [ 263.895245][T10832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.895269][T10832] ? clear_bhb_loop+0x70/0xc0 [ 263.895297][T10832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.895329][T10832] RIP: 0033:0x7f1f5699f559 [ 263.895351][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.895370][T10832] RSP: 002b:00007f1f54bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.895395][T10832] RAX: ffffffffffffffda RBX: 00007f1f56c26090 RCX: 00007f1f5699f559 [ 263.895412][T10832] RDX: 0000200000000800 RSI: 00000000400448c8 RDI: 0000000000000005 [ 263.895427][T10832] RBP: 00007f1f54bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 263.895442][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.895456][T10832] R13: 00007f1f56c26128 R14: 00007f1f56c26090 R15: 00007fff73cc0068 [ 263.895495][T10832] [ 264.019735][T10832] ERROR: Out of memory at tomoyo_realpath_from_path. [ 264.548674][T10859] __nla_validate_parse: 3 callbacks suppressed [ 264.548697][T10859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1504'. [ 264.760408][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 264.792347][T10873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1508'. [ 264.806027][T10873] netlink: 'syz.0.1508': attribute type 1 has an invalid length. [ 264.850760][T10869] netlink: 'syz.2.1507': attribute type 11 has an invalid length. [ 264.953234][T10869] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20003 [ 264.965610][ T979] net_ratelimit: 53 callbacks suppressed [ 264.965631][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 264.965659][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 264.965707][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 264.965731][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.224062][T10887] syzkaller0: entered promiscuous mode [ 265.224088][T10887] syzkaller0: entered allmulticast mode [ 265.225016][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 265.225048][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.320720][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1511'. [ 265.475804][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 265.475841][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 265.475865][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 265.475888][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 265.699707][T10898] Unsupported ieee802154 address type: 0 [ 265.702181][T10898] Unsupported ieee802154 address type: 0 [ 265.803631][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 266.192587][T10924] netlink: 'syz.0.1521': attribute type 21 has an invalid length. [ 266.193719][T10924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1521'. [ 266.193770][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1521'. [ 266.402122][ T53] Bluetooth: hci4: link tx timeout [ 266.402142][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 266.414245][T10931] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1523'. [ 266.443464][T10927] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 266.443488][T10927] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1522'. [ 266.680203][T10939] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 266.680232][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 266.861744][T10943] x_tables: duplicate underflow at hook 1 [ 267.565279][T10964] netlink: 'syz.0.1529': attribute type 9 has an invalid length. [ 268.316804][T10977] xt_l2tp: unknown flags: e7 [ 268.455465][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 268.787648][T10995] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 268.957840][T10995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.037774][T11005] bond3: (slave veth7): Enslaving as an active interface with a down link [ 269.080424][T11008] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 269.081270][T11008] bond3: (slave wlan1): Opening slave failed [ 270.096042][ T979] net_ratelimit: 50 callbacks suppressed [ 270.096065][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 270.096092][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 270.096116][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 270.096139][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 270.337620][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 270.337655][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 270.606025][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 270.606060][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 270.606083][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 270.606107][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 271.759341][T10997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.997327][T11067] __nla_validate_parse: 4 callbacks suppressed [ 271.997352][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 271.997383][T11067] netlink: 'syz.3.1549': attribute type 30 has an invalid length. [ 272.037910][T11067] vxlan1: entered promiscuous mode [ 272.037937][T11067] vxlan1: entered allmulticast mode [ 272.071648][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 272.071716][T11070] netlink: 'syz.3.1549': attribute type 30 has an invalid length. [ 272.278696][T11070] vxlan1: entered promiscuous mode [ 272.278723][T11070] vxlan1: entered allmulticast mode [ 272.339743][T11076] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 272.389634][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1552'. [ 272.389662][T11076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1552'. [ 272.496459][T11081] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1551'. [ 272.599799][T11088] syzkaller0: entered promiscuous mode [ 272.599823][T11088] syzkaller0: entered allmulticast mode [ 272.640321][T11088] tipc: Started in network mode [ 272.640355][T11088] tipc: Node identity ea4609c8f2eb, cluster identity 4711 [ 272.640653][T11088] tipc: Enabled bearer , priority 0 [ 272.679022][T11087] tipc: Resetting bearer [ 272.847748][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 272.852472][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 273.181728][T11107] Cannot find set identified by id 0 to match [ 273.439233][T11086] tipc: Resetting bearer [ 273.519737][T11086] tipc: Disabling bearer [ 273.889938][T11143] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 274.273800][T11125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.343899][T11125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.343929][T11125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.367339][T11125] tipc: Resetting bearer [ 274.367685][T11125] tipc: Resetting bearer [ 274.372739][T11125] veth1_vlan: left promiscuous mode [ 274.374094][T11125] veth0_vlan: left promiscuous mode [ 274.387376][T11125] veth0_vlan: entered promiscuous mode [ 274.407062][T11125] veth1_vlan: entered promiscuous mode [ 274.413410][T11125] veth1_macvtap: left promiscuous mode [ 274.428112][T11125] veth0_macvtap: left promiscuous mode [ 274.436860][T11125] veth0_macvtap: entered promiscuous mode [ 274.439856][T11125] veth1_macvtap: entered promiscuous mode [ 274.467144][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 274.468396][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 274.469850][T11125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 274.518804][T11125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.749979][T11162] sctp: [Deprecated]: syz.4.1572 (pid 11162) Use of int in max_burst socket option deprecated. [ 274.749979][T11162] Use struct sctp_assoc_value instead [ 274.753389][T11166] netlink: 'syz.1.1574': attribute type 10 has an invalid length. [ 274.753411][T11166] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1574'. [ 274.754035][T11162] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1572'. [ 274.754097][T11162] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz0 [ 274.816098][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.816136][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.816164][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 274.816207][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.816236][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.816264][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 274.816304][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.816332][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.816359][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 275.111294][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 275.195598][ T62] net_ratelimit: 53 callbacks suppressed [ 275.195622][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 275.195648][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 275.195695][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 275.195718][ T62] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 275.318105][T11179] netlink: 'syz.3.1577': attribute type 10 has an invalid length. [ 275.470036][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 275.470070][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 275.567514][T11192] netlink: 'syz.2.1578': attribute type 2 has an invalid length. [ 275.567540][T11192] netlink: 'syz.2.1578': attribute type 2 has an invalid length. [ 275.705555][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 275.705592][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 275.705616][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 275.705640][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 276.366773][T11237] netlink: 'syz.4.1592': attribute type 1 has an invalid length. [ 276.448344][T11237] bond4: entered promiscuous mode [ 276.449001][T11237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.722357][T11242] bond4: (slave bridge4): making interface the new active one [ 276.722385][T11242] bridge4: entered promiscuous mode [ 276.751109][T11242] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 276.788652][T11232] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 277.068673][T11259] __nla_validate_parse: 11 callbacks suppressed [ 277.068695][T11259] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1595'. [ 277.068736][T11259] FAULT_INJECTION: forcing a failure. [ 277.068736][T11259] name failslab, interval 1, probability 0, space 0, times 0 [ 277.069698][T11259] CPU: 1 UID: 0 PID: 11259 Comm: syz.2.1595 Not tainted syzkaller #0 PREEMPT(full) [ 277.069742][T11259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 277.069757][T11259] Call Trace: [ 277.069765][T11259] [ 277.069775][T11259] dump_stack_lvl+0xe8/0x150 [ 277.069817][T11259] should_fail_ex+0x3eb/0x540 [ 277.069850][T11259] should_failslab+0xa8/0x100 [ 277.069886][T11259] __kmalloc_noprof+0xf9/0x710 [ 277.069912][T11259] ? nft_pernet+0x23/0x240 [ 277.069943][T11259] ? nf_tables_newrule+0x1524/0x28a0 [ 277.069972][T11259] ? nf_tables_newrule+0x1524/0x28a0 [ 277.070011][T11259] nf_tables_newrule+0x1524/0x28a0 [ 277.070060][T11259] ? __pfx_nf_tables_newrule+0x10/0x10 [ 277.070089][T11259] ? lock_acquire+0x115/0x350 [ 277.070121][T11259] ? nfnl_pernet+0x23/0x240 [ 277.070164][T11259] ? __nla_parse+0x40/0x60 [ 277.070201][T11259] nfnetlink_rcv+0x1288/0x28c0 [ 277.070273][T11259] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 277.070356][T11259] ? skb_clone+0x246/0x3a0 [ 277.070404][T11259] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.070450][T11259] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.070489][T11259] netlink_unicast+0x8ef/0xa80 [ 277.070539][T11259] netlink_sendmsg+0x7f0/0xb20 [ 277.070579][T11259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.070616][T11259] ? aa_sock_msg_perm+0x144/0x210 [ 277.070652][T11259] ? apparmor_socket_sendmsg+0x98/0x360 [ 277.070689][T11259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.070725][T11259] sock_sendmsg_nosec+0x14e/0x190 [ 277.070759][T11259] ____sys_sendmsg+0x54e/0x850 [ 277.070791][T11259] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.070827][T11259] ? import_iovec+0x73/0xa0 [ 277.070860][T11259] ___sys_sendmsg+0x2a5/0x360 [ 277.070882][T11259] ? __lock_acquire+0x747/0x2de0 [ 277.070916][T11259] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.070985][T11259] ? __fget_files+0x3a2/0x420 [ 277.071012][T11259] ? __fget_files+0x2a/0x420 [ 277.071050][T11259] __x64_sys_sendmsg+0x1b1/0x290 [ 277.071080][T11259] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.071130][T11259] do_syscall_64+0x166/0x520 [ 277.071156][T11259] ? trace_irq_disable+0x3b/0x140 [ 277.071187][T11259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.071210][T11259] ? clear_bhb_loop+0x70/0xc0 [ 277.071238][T11259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.071261][T11259] RIP: 0033:0x7fb9b299f559 [ 277.071281][T11259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.071299][T11259] RSP: 002b:00007fb9b37e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.071323][T11259] RAX: ffffffffffffffda RBX: 00007fb9b2c25fa0 RCX: 00007fb9b299f559 [ 277.071340][T11259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 277.071353][T11259] RBP: 00007fb9b37e1090 R08: 0000000000000000 R09: 0000000000000000 [ 277.071367][T11259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.071381][T11259] R13: 00007fb9b2c26038 R14: 00007fb9b2c25fa0 R15: 00007ffc7239f1d8 [ 277.071419][T11259] [ 277.746133][T11267] FAULT_INJECTION: forcing a failure. [ 277.746133][T11267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.746166][T11267] CPU: 0 UID: 0 PID: 11267 Comm: syz.2.1598 Not tainted syzkaller #0 PREEMPT(full) [ 277.746191][T11267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 277.746205][T11267] Call Trace: [ 277.746213][T11267] [ 277.746223][T11267] dump_stack_lvl+0xe8/0x150 [ 277.746264][T11267] should_fail_ex+0x3eb/0x540 [ 277.746298][T11267] _copy_from_user+0x2d/0xb0 [ 277.746327][T11267] csum_and_copy_from_iter_full+0x210/0x2000 [ 277.746374][T11267] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 277.746406][T11267] ? rcu_is_watching+0x16/0xb0 [ 277.746440][T11267] ? trace_kmalloc+0x2a/0xf0 [ 277.746472][T11267] ip_generic_getfrag+0x149/0x2d0 [ 277.746494][T11267] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 277.746525][T11267] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 277.746546][T11267] ? raw_getfrag+0x116/0x3a0 [ 277.746576][T11267] ? __alloc_skb+0x4d0/0x7a0 [ 277.746606][T11267] ? skb_put+0x112/0x210 [ 277.746631][T11267] __ip_append_data+0x3760/0x3cf0 [ 277.746653][T11267] ? __lock_acquire+0x747/0x2de0 [ 277.746710][T11267] ? __pfx_raw_getfrag+0x10/0x10 [ 277.746756][T11267] ? __pfx___ip_append_data+0x10/0x10 [ 277.746780][T11267] ? ipv4_mtu+0x561/0x670 [ 277.746812][T11267] ? ipv4_mtu+0x23/0x670 [ 277.746845][T11267] ? __pfx_ipv4_mtu+0x10/0x10 [ 277.746878][T11267] ? ip_setup_cork+0x512/0x920 [ 277.746905][T11267] ip_append_data+0x10d/0x190 [ 277.746933][T11267] ? __pfx_raw_getfrag+0x10/0x10 [ 277.746958][T11267] raw_sendmsg+0x1406/0x1a20 [ 277.747013][T11267] ? __pfx_raw_sendmsg+0x10/0x10 [ 277.747070][T11267] ? irqentry_exit+0x2a0/0x9b0 [ 277.747111][T11267] ? aa_sock_msg_perm+0xfc/0x210 [ 277.747131][T11267] ? sock_rps_record_flow+0x19/0x350 [ 277.747158][T11267] ? inet_sendmsg+0x298/0x320 [ 277.747179][T11267] ? apparmor_socket_sendmsg+0x98/0x360 [ 277.747213][T11267] ? __pfx_inet_sendmsg+0x10/0x10 [ 277.747234][T11267] sock_sendmsg_nosec+0x10f/0x190 [ 277.747267][T11267] __sys_sendto+0x408/0x5a0 [ 277.747301][T11267] ? ksys_write+0x1e6/0x270 [ 277.747334][T11267] ? __pfx___sys_sendto+0x10/0x10 [ 277.747365][T11267] ? __mutex_unlock_slowpath+0x731/0x900 [ 277.747407][T11267] ? fdget+0x1ac/0x250 [ 277.747458][T11267] ? __pfx_ksys_write+0x10/0x10 [ 277.747492][T11267] __x64_sys_sendto+0xde/0x100 [ 277.747529][T11267] do_syscall_64+0x166/0x520 [ 277.747554][T11267] ? trace_irq_disable+0x3b/0x140 [ 277.747584][T11267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.747608][T11267] ? clear_bhb_loop+0x70/0xc0 [ 277.747637][T11267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.747658][T11267] RIP: 0033:0x7fb9b299f559 [ 277.747687][T11267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.747706][T11267] RSP: 002b:00007fb9b37e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 277.747731][T11267] RAX: ffffffffffffffda RBX: 00007fb9b2c25fa0 RCX: 00007fb9b299f559 [ 277.747748][T11267] RDX: 000000000000fdef RSI: 0000200000001c80 RDI: 0000000000000003 [ 277.747763][T11267] RBP: 00007fb9b37e1090 R08: 0000200000001cc0 R09: 0000000000000010 [ 277.747779][T11267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.747793][T11267] R13: 00007fb9b2c26038 R14: 00007fb9b2c25fa0 R15: 00007ffc7239f1d8 [ 277.747831][T11267] [ 278.158629][T11269] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1599'. [ 278.740440][T11296] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1604'. [ 279.355770][T11316] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1609'. [ 279.395148][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 280.168997][T11356] FAULT_INJECTION: forcing a failure. [ 280.168997][T11356] name failslab, interval 1, probability 0, space 0, times 0 [ 280.169033][T11356] CPU: 1 UID: 0 PID: 11356 Comm: syz.1.1617 Not tainted syzkaller #0 PREEMPT(full) [ 280.169061][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 280.169076][T11356] Call Trace: [ 280.169085][T11356] [ 280.169096][T11356] dump_stack_lvl+0xe8/0x150 [ 280.169142][T11356] should_fail_ex+0x3eb/0x540 [ 280.169179][T11356] should_failslab+0xa8/0x100 [ 280.169219][T11356] __kmalloc_cache_node_noprof+0xa5/0x620 [ 280.169265][T11356] ? __get_vm_area_node+0x155/0x2f0 [ 280.169289][T11356] ? __get_vm_area_node+0x155/0x2f0 [ 280.169314][T11356] ? kasan_save_track+0x4f/0x80 [ 280.169350][T11356] __get_vm_area_node+0x155/0x2f0 [ 280.169373][T11356] ? do_syscall_64+0x166/0x520 [ 280.169422][T11356] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 280.169452][T11356] ? bpf_check+0x14ae/0x34e0 [ 280.169525][T11356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.169556][T11356] ? __kasan_kmalloc+0x93/0xb0 [ 280.169592][T11356] ? __kmalloc_cache_noprof+0x31c/0x600 [ 280.169624][T11356] ? __kmalloc_cache_noprof+0x148/0x600 [ 280.169653][T11356] ? bpf_diag_init+0x87/0x140 [ 280.169685][T11356] ? bpf_diag_init+0x87/0x140 [ 280.169722][T11356] ? bpf_check+0x14ae/0x34e0 [ 280.169746][T11356] __vmalloc_noprof+0xd2/0x120 [ 280.169774][T11356] ? bpf_check+0x14ae/0x34e0 [ 280.169803][T11356] bpf_check+0x14ae/0x34e0 [ 280.169845][T11356] ? ktime_get_with_offset+0x93/0x2d0 [ 280.169881][T11356] ? ktime_get_with_offset+0x93/0x2d0 [ 280.169918][T11356] ? __pfx_bpf_check+0x10/0x10 [ 280.169948][T11356] ? bpf_obj_name_cpy+0x194/0x1e0 [ 280.169985][T11356] bpf_prog_load+0x14da/0x1c60 [ 280.170026][T11356] ? __pfx_bpf_prog_load+0x10/0x10 [ 280.170070][T11356] ? __might_fault+0xaf/0x130 [ 280.170104][T11356] __sys_bpf+0xd86/0xe00 [ 280.170141][T11356] ? __pfx___sys_bpf+0x10/0x10 [ 280.170181][T11356] ? __fget_files+0x2a/0x420 [ 280.170245][T11356] ? ksys_write+0x242/0x270 [ 280.170282][T11356] ? __pfx_ksys_write+0x10/0x10 [ 280.170321][T11356] __x64_sys_bpf+0xba/0xd0 [ 280.170362][T11356] do_syscall_64+0x166/0x520 [ 280.170391][T11356] ? trace_irq_disable+0x3b/0x140 [ 280.170425][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.170452][T11356] ? clear_bhb_loop+0x70/0xc0 [ 280.170484][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.170510][T11356] RIP: 0033:0x7f1f5699f559 [ 280.170534][T11356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.170557][T11356] RSP: 002b:00007f1f54bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.170585][T11356] RAX: ffffffffffffffda RBX: 00007f1f56c25fa0 RCX: 00007f1f5699f559 [ 280.170605][T11356] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 280.170621][T11356] RBP: 00007f1f54bee090 R08: 0000000000000000 R09: 0000000000000000 [ 280.170638][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.170654][T11356] R13: 00007f1f56c26038 R14: 00007f1f56c25fa0 R15: 00007fff73cc0068 [ 280.170698][T11356] [ 280.246935][T11356] syz.1.1617: vmalloc error: size 600, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 280.247145][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.1.1617 Not tainted syzkaller #0 PREEMPT(full) [ 280.247209][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 280.247243][T11356] Call Trace: [ 280.247272][T11356] [ 280.247295][T11356] dump_stack_lvl+0xe8/0x150 [ 280.247390][T11356] warn_alloc+0x24d/0x270 [ 280.247471][T11356] ? __kasan_kmalloc+0x22/0xb0 [ 280.247557][T11356] ? __pfx_warn_alloc+0x10/0x10 [ 280.247599][T11356] ? __get_vm_area_node+0x155/0x2f0 [ 280.247622][T11356] ? kasan_save_track+0x4f/0x80 [ 280.247655][T11356] ? __get_vm_area_node+0x2a9/0x2f0 [ 280.247678][T11356] ? do_syscall_64+0x166/0x520 [ 280.247713][T11356] __vmalloc_node_range_noprof+0x396/0x16f0 [ 280.247778][T11356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.247803][T11356] ? __kasan_kmalloc+0x93/0xb0 [ 280.247911][T11356] ? __kmalloc_cache_noprof+0x31c/0x600 [ 280.247992][T11356] ? __kmalloc_cache_noprof+0x148/0x600 [ 280.248063][T11356] ? bpf_diag_init+0x87/0x140 [ 280.248137][T11356] ? bpf_diag_init+0x87/0x140 [ 280.248224][T11356] ? bpf_check+0x14ae/0x34e0 [ 280.248271][T11356] __vmalloc_noprof+0xd2/0x120 [ 280.248340][T11356] ? bpf_check+0x14ae/0x34e0 [ 280.248411][T11356] bpf_check+0x14ae/0x34e0 [ 280.248498][T11356] ? ktime_get_with_offset+0x93/0x2d0 [ 280.248581][T11356] ? ktime_get_with_offset+0x93/0x2d0 [ 280.248666][T11356] ? __pfx_bpf_check+0x10/0x10 [ 280.248731][T11356] ? bpf_obj_name_cpy+0x194/0x1e0 [ 280.248826][T11356] bpf_prog_load+0x14da/0x1c60 [ 280.248921][T11356] ? __pfx_bpf_prog_load+0x10/0x10 [ 280.249017][T11356] ? __might_fault+0xaf/0x130 [ 280.249092][T11356] __sys_bpf+0xd86/0xe00 [ 280.249175][T11356] ? __pfx___sys_bpf+0x10/0x10 [ 280.249262][T11356] ? __fget_files+0x2a/0x420 [ 280.249413][T11356] ? ksys_write+0x242/0x270 [ 280.249497][T11356] ? __pfx_ksys_write+0x10/0x10 [ 280.249584][T11356] __x64_sys_bpf+0xba/0xd0 [ 280.249681][T11356] do_syscall_64+0x166/0x520 [ 280.249743][T11356] ? trace_irq_disable+0x3b/0x140 [ 280.249835][T11356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.249897][T11356] ? clear_bhb_loop+0x70/0xc0 [ 280.249964][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.250025][T11356] RIP: 0033:0x7f1f5699f559 [ 280.250079][T11356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.250131][T11356] RSP: 002b:00007f1f54bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.250214][T11356] RAX: ffffffffffffffda RBX: 00007f1f56c25fa0 RCX: 00007f1f5699f559 [ 280.250257][T11356] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 280.250291][T11356] RBP: 00007f1f54bee090 R08: 0000000000000000 R09: 0000000000000000 [ 280.250335][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.250368][T11356] R13: 00007f1f56c26038 R14: 00007f1f56c25fa0 R15: 00007fff73cc0068 [ 280.250463][T11356] [ 280.268367][T11356] Mem-Info: [ 280.268385][T11356] active_anon:5919 inactive_anon:0 isolated_anon:0 [ 280.268385][T11356] active_file:0 inactive_file:43873 isolated_file:0 [ 280.268385][T11356] unevictable:0 dirty:293 writeback:0 [ 280.268385][T11356] slab_reclaimable:11168 slab_unreclaimable:106327 [ 280.268385][T11356] mapped:29800 shmem:528 pagetables:3488 [ 280.268385][T11356] sec_pagetables:0 bounce:0 [ 280.268385][T11356] kernel_misc_reclaimable:0 [ 280.268385][T11356] free:1307178 free_pcp:10456 free_cma:0 [ 280.268444][T11356] Node 0 active_anon:23676kB inactive_anon:0kB active_file:0kB inactive_file:175300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119200kB dirty:1172kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13196kB pagetables:13844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 280.268553][T11356] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 280.268772][T11356] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.269273][T11356] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 280.269381][T11356] Node 0 DMA32 free:1283992kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23676kB inactive_anon:0kB active_file:0kB inactive_file:175300kB unevictable:0kB writepending:1172kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:41820kB local_pcp:20432kB free_cma:0kB [ 280.269556][T11356] lowmem_reserve[]: 0 0 1 1 1 [ 280.269652][T11356] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 280.269850][T11356] lowmem_reserve[]: 0 0 0 0 0 [ 280.269955][T11356] Node 1 Normal free:3929360kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.273857][T11356] lowmem_reserve[]: 0 0 0 0 0 [ 280.273975][T11356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 280.277578][T11356] Node 0 DMA32: 1659*4kB (UM) 2006*8kB (UME) 1154*16kB (UME) 721*32kB (UME) 616*64kB (UME) 543*128kB (UM) 409*256kB (UM) 245*512kB (UE) 138*1024kB (UME) 9*2048kB (UME) 176*4096kB (UM) = 1283932kB [ 280.278117][T11356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 280.278406][T11356] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 10*16kB (UM) 8*32kB (UM) 11*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 958*4096kB (UM) = 3929360kB [ 280.293110][T11356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.293160][T11356] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.293203][T11356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.293246][T11356] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.293299][T11356] 44397 total pagecache pages [ 280.293320][T11356] 0 pages in swap cache [ 280.293334][T11356] Free swap = 124996kB [ 280.293356][T11356] Total swap = 124996kB [ 280.293378][T11356] 2097051 pages RAM [ 280.293423][T11356] 0 pages HighMem/MovableOnly [ 280.293444][T11356] 434240 pages reserved [ 280.293464][T11356] 0 pages cma reserved [ 280.352957][ T144] net_ratelimit: 53 callbacks suppressed [ 280.353016][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 280.353079][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 280.353134][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 280.353195][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 280.577983][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 280.578070][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 280.892119][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 280.892215][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 280.892283][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 280.892345][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 281.382200][T11364] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1622'. [ 281.499284][T11369] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 281.542717][T11371] FAULT_INJECTION: forcing a failure. [ 281.542717][T11371] name failslab, interval 1, probability 0, space 0, times 0 [ 281.542750][T11371] CPU: 0 UID: 0 PID: 11371 Comm: syz.1.1626 Not tainted syzkaller #0 PREEMPT(full) [ 281.542775][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 281.542793][T11371] Call Trace: [ 281.542800][T11371] [ 281.542810][T11371] dump_stack_lvl+0xe8/0x150 [ 281.542852][T11371] should_fail_ex+0x3eb/0x540 [ 281.542883][T11371] ? __alloc_skb+0x1db/0x7a0 [ 281.542916][T11371] should_failslab+0xa8/0x100 [ 281.542950][T11371] ? __alloc_skb+0x1db/0x7a0 [ 281.542981][T11371] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 281.543007][T11371] ? __alloc_skb+0x18d/0x7a0 [ 281.543041][T11371] ? __alloc_skb+0x1db/0x7a0 [ 281.543082][T11371] __alloc_skb+0x1db/0x7a0 [ 281.543121][T11371] netlink_sendmsg+0x5cd/0xb20 [ 281.543162][T11371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.543198][T11371] ? aa_sock_msg_perm+0x144/0x210 [ 281.543232][T11371] ? apparmor_socket_sendmsg+0x98/0x360 [ 281.543266][T11371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.543296][T11371] sock_sendmsg_nosec+0x14e/0x190 [ 281.543329][T11371] ____sys_sendmsg+0x54e/0x850 [ 281.543359][T11371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.543394][T11371] ? import_iovec+0x73/0xa0 [ 281.543425][T11371] ___sys_sendmsg+0x2a5/0x360 [ 281.543445][T11371] ? __lock_acquire+0x747/0x2de0 [ 281.543478][T11371] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.543541][T11371] ? __fget_files+0x3a2/0x420 [ 281.543567][T11371] ? __fget_files+0x2a/0x420 [ 281.543604][T11371] __x64_sys_sendmsg+0x1b1/0x290 [ 281.543632][T11371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.543678][T11371] do_syscall_64+0x166/0x520 [ 281.543703][T11371] ? trace_irq_disable+0x3b/0x140 [ 281.543734][T11371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.543757][T11371] ? clear_bhb_loop+0x70/0xc0 [ 281.543785][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.543807][T11371] RIP: 0033:0x7f1f5699f559 [ 281.543826][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.543845][T11371] RSP: 002b:00007f1f54bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.543869][T11371] RAX: ffffffffffffffda RBX: 00007f1f56c25fa0 RCX: 00007f1f5699f559 [ 281.543885][T11371] RDX: 000000000400c014 RSI: 0000200000000180 RDI: 0000000000000005 [ 281.543901][T11371] RBP: 00007f1f54bee090 R08: 0000000000000000 R09: 0000000000000000 [ 281.543915][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.543929][T11371] R13: 00007f1f56c26038 R14: 00007f1f56c25fa0 R15: 00007fff73cc0068 [ 281.543966][T11371] [ 281.626988][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 281.911527][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1630'. [ 281.979792][T11381] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1628'. [ 281.984649][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.093377][T11382] __nla_validate_parse: 7 callbacks suppressed [ 282.093399][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.122506][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.137212][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.170240][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.203576][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.231949][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.268395][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.308022][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.330218][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.364270][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 282.761504][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.761667][T11411] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.761860][T11411] bridge_slave_0: entered allmulticast mode [ 282.788140][T11411] bridge_slave_0: entered promiscuous mode [ 282.791969][T11411] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.792102][T11411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.862213][T11411] bridge_slave_0: left allmulticast mode [ 282.862245][T11411] bridge_slave_0: left promiscuous mode [ 282.862494][T11411] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.077966][T11454] netlink: 'syz.2.1648': attribute type 83 has an invalid length. [ 285.045987][T11500] netlink: 'syz.4.1657': attribute type 10 has an invalid length. [ 285.082123][T11500] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.104337][T11500] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.181151][T11500] sctp: [Deprecated]: syz.4.1657 (pid 11500) Use of int in max_burst socket option. [ 285.181151][T11500] Use struct sctp_assoc_value instead [ 285.208391][T11505] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 285.457114][ T31] net_ratelimit: 52 callbacks suppressed [ 285.457137][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 285.457164][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 285.457186][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 285.457209][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 285.738096][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 285.738131][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 285.759882][T11523] xt_hashlimit: size too large, truncated to 1048576 [ 285.832204][T11533] syzkaller0: entered promiscuous mode [ 285.832231][T11533] syzkaller0: entered allmulticast mode [ 285.969133][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 285.969168][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 285.969192][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 285.969215][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 286.096721][T11540] veth0: Caught tx_queue_len zero misconfig [ 287.068777][T11581] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 287.401848][T11583] ieee802154 phy0 wpan0: encryption failed: -126 [ 288.277155][T11596] vxcan1 speed is unknown, defaulting to 1000 [ 288.847769][T11616] __nla_validate_parse: 33 callbacks suppressed [ 288.847791][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1689'. [ 288.956720][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1690'. [ 289.170510][T11625] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 289.247271][T11627] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 290.148725][T11637] syzkaller0: entered promiscuous mode [ 290.148751][T11637] syzkaller0: entered allmulticast mode [ 290.235650][ T157] IPVS: starting estimator thread 0... [ 290.327997][T11648] IPVS: using max 25 ests per chain, 60000 per kthread [ 290.492523][T11647] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 290.586323][ T157] net_ratelimit: 51 callbacks suppressed [ 290.586345][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 290.586371][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 290.586396][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 290.586419][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 290.673841][T11644] ip6gre1: entered allmulticast mode [ 290.847356][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 290.847700][ T13] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 291.092182][T11656] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1700'. [ 291.092418][T11656] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 291.096763][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 291.096795][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 291.096819][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 291.096841][ T157] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 291.261769][T11656] 0ªX¹¦Dö»: entered allmulticast mode [ 291.342709][T11656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1700'. [ 292.501907][T11696] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1709'. [ 292.501944][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 292.649738][T11680] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 292.650713][T11680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1707'. [ 292.679377][T11680] netlink: 'syz.0.1707': attribute type 10 has an invalid length. [ 292.679400][T11680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1707'. [ 292.679643][T11680] bridge0: port 1(batadv0) entered blocking state [ 292.679830][T11680] bridge0: port 1(batadv0) entered disabled state [ 292.717014][T11680] bridge0: port 1(batadv0) entered blocking state [ 292.717136][T11680] bridge0: port 1(batadv0) entered forwarding state [ 292.733269][ T144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 292.733288][ T144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 293.593875][T11715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1716'. [ 293.979000][T11722] netlink: 'syz.3.1720': attribute type 21 has an invalid length. [ 293.985215][T11723] netlink: 'syz.3.1720': attribute type 21 has an invalid length. [ 294.009479][T11722] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1720'. [ 294.268447][T11732] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1724'. [ 294.693893][T11737] netlink: 'syz.2.1722': attribute type 1 has an invalid length. [ 294.714961][T11737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1722'. [ 294.818852][T11740] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 294.818877][T11740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1722'. [ 294.818907][T11740] batadv0: entered allmulticast mode [ 295.401635][T11751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1728'. [ 295.664863][T11757] tipc: Enabled bearer , priority 0 [ 295.685917][ T31] net_ratelimit: 51 callbacks suppressed [ 295.685938][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 295.685964][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 295.685986][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 295.686009][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 295.893479][T11758] syzkaller0: entered promiscuous mode [ 295.893505][T11758] syzkaller0: entered allmulticast mode [ 295.932228][T11754] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 295.932250][T11754] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1727'. [ 296.014347][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1727'. [ 296.053214][T11754] tipc: Resetting bearer [ 296.057284][ T1162] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 296.057317][ T1162] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 296.111921][T11753] tipc: Resetting bearer [ 296.197532][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 296.197568][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 296.197592][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 296.197649][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 296.286333][T11753] tipc: Disabling bearer [ 296.687755][T11789] §: renamed from erspan0 (while UP) [ 296.693061][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1735'. [ 296.722455][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 296.770406][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 299.198225][T11828] sch_tbf: burst 32855 is lower than device geneve0 mtu (65499) ! [ 299.549732][T11836] nbd1: detected capacity change from 0 to 2251799813685248 [ 299.897773][T11823] nbd2: detected capacity change from 0 to 2251799813685248 [ 300.161522][ T4956] block nbd1: Receive control failed (result -104) [ 300.173011][ T53] block nbd2: Receive control failed (result -32) [ 300.827624][ T12] net_ratelimit: 52 callbacks suppressed [ 300.827648][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 300.827677][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 300.827702][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 300.827725][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 301.097960][T11867] vlan2: entered promiscuous mode [ 301.097984][T11867] bridge0: entered promiscuous mode [ 301.155927][ T3391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 301.155964][ T3391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 301.207832][T11871] syzkaller0: entered promiscuous mode [ 301.207856][T11871] syzkaller0: entered allmulticast mode [ 301.344436][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 301.344474][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 301.344498][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 301.344522][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 302.562826][T11882] __nla_validate_parse: 3 callbacks suppressed [ 302.562846][T11882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1758'. [ 302.606152][T11880] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 302.672631][T11880] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 302.672654][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1758'. [ 303.103467][T11888] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1760'. [ 303.808525][T11900] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1764'. [ 304.704794][T11896] batadv_slave_1: entered promiscuous mode [ 304.730791][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 304.730820][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 304.804348][T11907] team_slave_1: entered allmulticast mode [ 305.934566][ T31] net_ratelimit: 50 callbacks suppressed [ 305.934627][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 305.934788][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 305.979099][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 305.979137][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 305.979170][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 305.979199][ T144] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.318415][T11927] x_tables: unsorted underflow at hook 4 [ 306.367642][T11927] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1775'. [ 306.446823][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 306.446860][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 306.492880][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 306.492913][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 307.011432][T11932] bond5: Removing last arp target with arp_interval on [ 308.174180][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1782'. [ 308.731974][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'. [ 309.399910][T11975] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1785'. [ 309.713875][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1788'. [ 310.399751][T11996] netlink: 'syz.3.1791': attribute type 10 has an invalid length. [ 310.432621][T11996] team0: Port device syz_tun added [ 311.035388][ T1175] net_ratelimit: 50 callbacks suppressed [ 311.035410][ T1175] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 311.035436][ T1175] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.095358][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 311.095394][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 311.095417][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 311.095440][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.544955][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 311.544992][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 311.607162][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 311.607200][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 312.217580][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.351721][T11979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.832776][T12029] FAULT_INJECTION: forcing a failure. [ 312.832776][T12029] name failslab, interval 1, probability 0, space 0, times 0 [ 312.832810][T12029] CPU: 1 UID: 0 PID: 12029 Comm: syz.4.1803 Not tainted syzkaller #0 PREEMPT(full) [ 312.832835][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 312.832863][T12029] Call Trace: [ 312.832872][T12029] [ 312.832882][T12029] dump_stack_lvl+0xe8/0x150 [ 312.832924][T12029] should_fail_ex+0x3eb/0x540 [ 312.832958][T12029] should_failslab+0xa8/0x100 [ 312.832994][T12029] __kmalloc_cache_noprof+0x9e/0x600 [ 312.833022][T12029] ? __kmalloc_cache_noprof+0x148/0x600 [ 312.833048][T12029] ? sctp_add_bind_addr+0x8c/0x370 [ 312.833071][T12029] ? sctp_add_bind_addr+0x8c/0x370 [ 312.833105][T12029] sctp_add_bind_addr+0x8c/0x370 [ 312.833136][T12029] sctp_copy_local_addr_list+0x31a/0x4e0 [ 312.833166][T12029] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 312.833194][T12029] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 312.833232][T12029] ? sctp_v6_is_any+0x64/0x80 [ 312.833262][T12029] ? sctp_copy_one_addr+0x93/0x360 [ 312.833292][T12029] sctp_bind_addr_copy+0xb3/0x3c0 [ 312.833319][T12029] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 312.833363][T12029] sctp_connect_new_asoc+0x2ff/0x6b0 [ 312.833399][T12029] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 312.833440][T12029] ? __local_bh_enable_ip+0xd6/0x140 [ 312.833469][T12029] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 312.833499][T12029] ? security_sctp_bind_connect+0x7e/0x2c0 [ 312.833547][T12029] sctp_sendmsg+0x159b/0x2d00 [ 312.833590][T12029] ? kstrtouint+0x6e/0xe0 [ 312.833623][T12029] ? __pfx_sctp_sendmsg+0x10/0x10 [ 312.833651][T12029] ? lock_acquire+0x115/0x350 [ 312.833703][T12029] ? aa_sock_msg_perm+0xf5/0x210 [ 312.833723][T12029] ? sock_rps_record_flow+0x19/0x350 [ 312.833750][T12029] ? inet_sendmsg+0x298/0x320 [ 312.833775][T12029] ? __pfx_inet_sendmsg+0x10/0x10 [ 312.833796][T12029] sock_sendmsg_nosec+0x10f/0x190 [ 312.833829][T12029] __sys_sendto+0x408/0x5a0 [ 312.833862][T12029] ? ksys_write+0x1e6/0x270 [ 312.833894][T12029] ? __pfx___sys_sendto+0x10/0x10 [ 312.833924][T12029] ? __mutex_unlock_slowpath+0x731/0x900 [ 312.833966][T12029] ? fdget+0x1ac/0x250 [ 312.834007][T12029] ? __pfx_ksys_write+0x10/0x10 [ 312.834041][T12029] __x64_sys_sendto+0xde/0x100 [ 312.834079][T12029] do_syscall_64+0x166/0x520 [ 312.834103][T12029] ? trace_irq_disable+0x3b/0x140 [ 312.834132][T12029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.834155][T12029] ? clear_bhb_loop+0x70/0xc0 [ 312.834183][T12029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.834204][T12029] RIP: 0033:0x7f9e1179f559 [ 312.834235][T12029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.834254][T12029] RSP: 002b:00007f9e126b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 312.834278][T12029] RAX: ffffffffffffffda RBX: 00007f9e11a25fa0 RCX: 00007f9e1179f559 [ 312.834295][T12029] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 312.834309][T12029] RBP: 00007f9e126b9090 R08: 0000200000000ac0 R09: 000000000000001c [ 312.834324][T12029] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 312.834338][T12029] R13: 00007f9e11a26038 R14: 00007f9e11a25fa0 R15: 00007fff5085c8e8 [ 312.834376][T12029] [ 313.234841][T12032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1801'. [ 313.255660][T12031] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1802'. [ 313.827186][T12042] netlink: 'syz.2.1805': attribute type 12 has an invalid length. [ 314.358528][T12053] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 314.552772][T12053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1809'. [ 314.571840][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1812'. [ 314.589872][T12063] xt_IDLETIMER: label is empty or not nul-terminated [ 314.605611][T12063] FAULT_INJECTION: forcing a failure. [ 314.605611][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 314.605643][T12063] CPU: 1 UID: 0 PID: 12063 Comm: syz.2.1812 Not tainted syzkaller #0 PREEMPT(full) [ 314.605669][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 314.605683][T12063] Call Trace: [ 314.605691][T12063] [ 314.605701][T12063] dump_stack_lvl+0xe8/0x150 [ 314.605743][T12063] should_fail_ex+0x3eb/0x540 [ 314.605774][T12063] ? __alloc_skb+0x1db/0x7a0 [ 314.605808][T12063] should_failslab+0xa8/0x100 [ 314.605842][T12063] ? __alloc_skb+0x1db/0x7a0 [ 314.605873][T12063] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 314.605900][T12063] ? __alloc_skb+0x18d/0x7a0 [ 314.605934][T12063] ? __alloc_skb+0x1db/0x7a0 [ 314.605984][T12063] __alloc_skb+0x1db/0x7a0 [ 314.606024][T12063] netlink_sendmsg+0x5cd/0xb20 [ 314.606065][T12063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.606100][T12063] ? aa_sock_msg_perm+0x144/0x210 [ 314.606129][T12063] ? apparmor_socket_sendmsg+0x98/0x360 [ 314.606164][T12063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.606204][T12063] sock_sendmsg_nosec+0x14e/0x190 [ 314.606239][T12063] ____sys_sendmsg+0x54e/0x850 [ 314.606270][T12063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.606310][T12063] ? import_iovec+0x73/0xa0 [ 314.606343][T12063] ___sys_sendmsg+0x2a5/0x360 [ 314.606364][T12063] ? __lock_acquire+0x747/0x2de0 [ 314.606399][T12063] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.606466][T12063] ? __fget_files+0x3a2/0x420 [ 314.606493][T12063] ? __fget_files+0x2a/0x420 [ 314.606532][T12063] __x64_sys_sendmsg+0x1b1/0x290 [ 314.606560][T12063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.606609][T12063] do_syscall_64+0x166/0x520 [ 314.606635][T12063] ? trace_irq_disable+0x3b/0x140 [ 314.606667][T12063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.606690][T12063] ? clear_bhb_loop+0x70/0xc0 [ 314.606719][T12063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.606741][T12063] RIP: 0033:0x7fb9b299f559 [ 314.606762][T12063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.606783][T12063] RSP: 002b:00007fb9b37e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.606807][T12063] RAX: ffffffffffffffda RBX: 00007fb9b2c25fa0 RCX: 00007fb9b299f559 [ 314.606824][T12063] RDX: 0000000004000050 RSI: 00002000000003c0 RDI: 0000000000000003 [ 314.606839][T12063] RBP: 00007fb9b37e1090 R08: 0000000000000000 R09: 0000000000000000 [ 314.606854][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.606868][T12063] R13: 00007fb9b2c26038 R14: 00007fb9b2c25fa0 R15: 00007ffc7239f1d8 [ 314.606906][T12063] [ 314.612710][T12053] netlink: 'syz.0.1809': attribute type 10 has an invalid length. [ 314.612731][T12053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1809'. [ 315.052766][T12068] Bluetooth: hci0: unsupported parameter 5135 [ 315.052793][T12068] Bluetooth: hci0: unsupported parameter 8192 [ 315.052824][T12068] Bluetooth: hci0: unsupported parameter 5135 [ 315.052840][T12068] Bluetooth: hci0: unsupported parameter 8192 [ 315.116266][T12068] Cannot find del_set index 4 as target [ 315.550728][T12073] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.694243][T12076] batman_adv: batadv0: Adding interface: syzkaller0 [ 315.694265][T12076] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.694488][T12076] batman_adv: batadv0: Interface activated: syzkaller0 [ 316.361542][ T3391] net_ratelimit: 50 callbacks suppressed [ 316.361567][ T3391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 316.361633][ T3391] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.361813][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 316.361936][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 316.361969][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 316.361992][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 316.533869][T12078] ip_tables: iptables: counters copy to user failed while replacing table [ 316.647459][T12075] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 316.730553][T12084] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1817'. [ 316.730654][T12084] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not syz0 [ 316.730731][T12084] FAULT_INJECTION: forcing a failure. [ 316.730731][T12084] name failslab, interval 1, probability 0, space 0, times 0 [ 316.730756][T12084] CPU: 1 UID: 0 PID: 12084 Comm: syz.2.1817 Not tainted syzkaller #0 PREEMPT(full) [ 316.730781][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 316.730795][T12084] Call Trace: [ 316.730804][T12084] [ 316.730813][T12084] dump_stack_lvl+0xe8/0x150 [ 316.730862][T12084] should_fail_ex+0x3eb/0x540 [ 316.730897][T12084] should_failslab+0xa8/0x100 [ 316.730932][T12084] __kmalloc_cache_noprof+0x9e/0x600 [ 316.730963][T12084] ? nfnetlink_rcv+0x1021/0x28c0 [ 316.730991][T12084] ? nfnetlink_rcv+0x1021/0x28c0 [ 316.731029][T12084] nfnetlink_rcv+0x1021/0x28c0 [ 316.731101][T12084] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 316.731188][T12084] ? skb_clone+0x246/0x3a0 [ 316.731232][T12084] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.731264][T12084] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.731302][T12084] netlink_unicast+0x8ef/0xa80 [ 316.731353][T12084] netlink_sendmsg+0x7f0/0xb20 [ 316.731394][T12084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.731431][T12084] ? aa_sock_msg_perm+0x144/0x210 [ 316.731460][T12084] ? apparmor_socket_sendmsg+0x98/0x360 [ 316.731496][T12084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.731527][T12084] sock_sendmsg_nosec+0x14e/0x190 [ 316.731561][T12084] ____sys_sendmsg+0x54e/0x850 [ 316.731592][T12084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.731628][T12084] ? import_iovec+0x73/0xa0 [ 316.731661][T12084] ___sys_sendmsg+0x2a5/0x360 [ 316.731683][T12084] ? __lock_acquire+0x747/0x2de0 [ 316.731718][T12084] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.731786][T12084] ? __fget_files+0x3a2/0x420 [ 316.731813][T12084] ? __fget_files+0x2a/0x420 [ 316.731858][T12084] __x64_sys_sendmsg+0x1b1/0x290 [ 316.731888][T12084] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.731939][T12084] do_syscall_64+0x166/0x520 [ 316.731965][T12084] ? trace_irq_disable+0x3b/0x140 [ 316.731996][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.732019][T12084] ? clear_bhb_loop+0x70/0xc0 [ 316.732048][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.732071][T12084] RIP: 0033:0x7fb9b299f559 [ 316.732091][T12084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.732111][T12084] RSP: 002b:00007fb9b37e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.732135][T12084] RAX: ffffffffffffffda RBX: 00007fb9b2c25fa0 RCX: 00007fb9b299f559 [ 316.732152][T12084] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 316.732166][T12084] RBP: 00007fb9b37e1090 R08: 0000000000000000 R09: 0000000000000000 [ 316.732180][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.732194][T12084] R13: 00007fb9b2c26038 R14: 00007fb9b2c25fa0 R15: 00007ffc7239f1d8 [ 316.732232][T12084] [ 316.879697][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 316.879731][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 316.879755][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 317.250527][T12075] batman_adv: batadv0: Removing interface: syzkaller0 [ 317.439258][T12090] sock: sock_timestamping_bind_phc: sock not bind to device [ 317.452683][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.974499][T12098] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1820'. [ 318.293153][T12103] netlink: 'syz.3.1821': attribute type 49 has an invalid length. [ 321.018137][T12120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1825'. [ 321.137646][T12124] netlink: 'syz.3.1827': attribute type 1 has an invalid length. [ 321.465165][ T31] net_ratelimit: 52 callbacks suppressed [ 321.465187][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 321.465212][ T31] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 321.465394][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 321.465418][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 321.465442][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 321.465465][ T31] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 321.670662][T12127] vxcan1 speed is unknown, defaulting to 1000 [ 321.977547][ T1175] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 321.977615][ T1175] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 321.977640][ T1175] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 321.977663][ T1175] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 322.216511][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 322.471089][T12153] pimreg0: tun_chr_ioctl cmd 1074025677 [ 322.471205][T12153] pimreg0: linktype set to 259 [ 322.932944][T12162] FAULT_INJECTION: forcing a failure. [ 322.932944][T12162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.932978][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.1.1834 Not tainted syzkaller #0 PREEMPT(full) [ 322.933003][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 322.933018][T12162] Call Trace: [ 322.933026][T12162] [ 322.933036][T12162] dump_stack_lvl+0xe8/0x150 [ 322.933077][T12162] should_fail_ex+0x3eb/0x540 [ 322.933110][T12162] prepare_alloc_pages+0x21e/0x5f0 [ 322.933147][T12162] __alloc_frozen_pages_noprof+0x17c/0x410 [ 322.933200][T12162] ? __lock_acquire+0x747/0x2de0 [ 322.933232][T12162] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.933271][T12162] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 322.933318][T12162] ? __get_vm_area_node+0x155/0x2f0 [ 322.933350][T12162] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 322.933378][T12162] ? policy_nodemask+0x31b/0x980 [ 322.933409][T12162] ? do_syscall_64+0x166/0x520 [ 322.933434][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.933476][T12162] alloc_pages_mpol+0x21e/0x390 [ 322.933516][T12162] alloc_pages_noprof+0xb1/0x2b0 [ 322.933553][T12162] get_free_pages_noprof+0xf/0x80 [ 322.933582][T12162] __kasan_populate_vmalloc+0x38/0x1c0 [ 322.933618][T12162] ? do_raw_spin_unlock+0xf5/0x200 [ 322.933648][T12162] alloc_vmap_area+0xd10/0x1410 [ 322.933700][T12162] ? __pfx_alloc_vmap_area+0x10/0x10 [ 322.933731][T12162] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 322.933762][T12162] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 322.933801][T12162] ? __get_vm_area_node+0x155/0x2f0 [ 322.933830][T12162] __get_vm_area_node+0x200/0x2f0 [ 322.933873][T12162] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 322.933910][T12162] ? bpf_check+0x14ae/0x34e0 [ 322.933979][T12162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.934004][T12162] ? __kasan_kmalloc+0x93/0xb0 [ 322.934041][T12162] ? __kmalloc_cache_noprof+0x31c/0x600 [ 322.934069][T12162] ? __kmalloc_cache_noprof+0x148/0x600 [ 322.934095][T12162] ? bpf_diag_init+0x87/0x140 [ 322.934123][T12162] ? bpf_diag_init+0x87/0x140 [ 322.934169][T12162] ? bpf_check+0x14ae/0x34e0 [ 322.934201][T12162] __vmalloc_noprof+0xd2/0x120 [ 322.934225][T12162] ? bpf_check+0x14ae/0x34e0 [ 322.934251][T12162] bpf_check+0x14ae/0x34e0 [ 322.934295][T12162] ? ktime_get_with_offset+0x93/0x2d0 [ 322.934347][T12162] ? ktime_get_with_offset+0x93/0x2d0 [ 322.934379][T12162] ? __pfx_bpf_check+0x10/0x10 [ 322.934406][T12162] ? bpf_obj_name_cpy+0x194/0x1e0 [ 322.934451][T12162] bpf_prog_load+0x14da/0x1c60 [ 322.934495][T12162] ? __pfx_bpf_prog_load+0x10/0x10 [ 322.934537][T12162] ? __might_fault+0xaf/0x130 [ 322.934583][T12162] __sys_bpf+0xd86/0xe00 [ 322.934615][T12162] ? __pfx___sys_bpf+0x10/0x10 [ 322.934650][T12162] ? __fget_files+0x2a/0x420 [ 322.934709][T12162] ? ksys_write+0x242/0x270 [ 322.934743][T12162] ? __pfx_ksys_write+0x10/0x10 [ 322.934777][T12162] __x64_sys_bpf+0xba/0xd0 [ 322.934812][T12162] do_syscall_64+0x166/0x520 [ 322.934847][T12162] ? trace_irq_disable+0x3b/0x140 [ 322.934879][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.934913][T12162] ? clear_bhb_loop+0x70/0xc0 [ 322.934942][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.934965][T12162] RIP: 0033:0x7f1f5699f559 [ 322.934986][T12162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.935005][T12162] RSP: 002b:00007f1f54bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.935030][T12162] RAX: ffffffffffffffda RBX: 00007f1f56c25fa0 RCX: 00007f1f5699f559 [ 322.935047][T12162] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 322.935062][T12162] RBP: 00007f1f54bee090 R08: 0000000000000000 R09: 0000000000000000 [ 322.935077][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.935090][T12162] R13: 00007f1f56c26038 R14: 00007f1f56c25fa0 R15: 00007fff73cc0068 [ 322.935126][T12162] [ 323.165245][T12162] syz.1.1834: vmalloc error: size 3000, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.165321][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.1.1834 Not tainted syzkaller #0 PREEMPT(full) [ 323.165346][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 323.165360][T12162] Call Trace: [ 323.165369][T12162] [ 323.165378][T12162] dump_stack_lvl+0xe8/0x150 [ 323.165420][T12162] warn_alloc+0x24d/0x270 [ 323.165449][T12162] ? lockdep_hardirqs_on+0x7b/0x110 [ 323.165479][T12162] ? __pfx_warn_alloc+0x10/0x10 [ 323.165504][T12162] ? kfree+0x1c5/0x650 [ 323.165535][T12162] ? __get_vm_area_node+0x219/0x2f0 [ 323.165568][T12162] __vmalloc_node_range_noprof+0x396/0x16f0 [ 323.165638][T12162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.165672][T12162] ? __kasan_kmalloc+0x93/0xb0 [ 323.165705][T12162] ? __kmalloc_cache_noprof+0x31c/0x600 [ 323.165733][T12162] ? __kmalloc_cache_noprof+0x148/0x600 [ 323.165758][T12162] ? bpf_diag_init+0x87/0x140 [ 323.165787][T12162] ? bpf_diag_init+0x87/0x140 [ 323.165820][T12162] ? bpf_check+0x14ae/0x34e0 [ 323.165841][T12162] __vmalloc_noprof+0xd2/0x120 [ 323.165865][T12162] ? bpf_check+0x14ae/0x34e0 [ 323.165891][T12162] bpf_check+0x14ae/0x34e0 [ 323.165927][T12162] ? ktime_get_with_offset+0x93/0x2d0 [ 323.165959][T12162] ? ktime_get_with_offset+0x93/0x2d0 [ 323.165989][T12162] ? __pfx_bpf_check+0x10/0x10 [ 323.166014][T12162] ? bpf_obj_name_cpy+0x194/0x1e0 [ 323.166046][T12162] bpf_prog_load+0x14da/0x1c60 [ 323.166083][T12162] ? __pfx_bpf_prog_load+0x10/0x10 [ 323.166124][T12162] ? __might_fault+0xaf/0x130 [ 323.166154][T12162] __sys_bpf+0xd86/0xe00 [ 323.166185][T12162] ? __pfx___sys_bpf+0x10/0x10 [ 323.166220][T12162] ? __fget_files+0x2a/0x420 [ 323.166267][T12162] ? ksys_write+0x242/0x270 [ 323.166299][T12162] ? __pfx_ksys_write+0x10/0x10 [ 323.166334][T12162] __x64_sys_bpf+0xba/0xd0 [ 323.166369][T12162] do_syscall_64+0x166/0x520 [ 323.166393][T12162] ? trace_irq_disable+0x3b/0x140 [ 323.166424][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.166446][T12162] ? clear_bhb_loop+0x70/0xc0 [ 323.166474][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.166497][T12162] RIP: 0033:0x7f1f5699f559 [ 323.166518][T12162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.166536][T12162] RSP: 002b:00007f1f54bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.166559][T12162] RAX: ffffffffffffffda RBX: 00007f1f56c25fa0 RCX: 00007f1f5699f559 [ 323.166576][T12162] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 323.166590][T12162] RBP: 00007f1f54bee090 R08: 0000000000000000 R09: 0000000000000000 [ 323.166604][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.166618][T12162] R13: 00007f1f56c26038 R14: 00007f1f56c25fa0 R15: 00007fff73cc0068 [ 323.166700][T12162] [ 323.611997][T12162] Mem-Info: [ 323.612014][T12162] active_anon:6184 inactive_anon:0 isolated_anon:0 [ 323.612014][T12162] active_file:16 inactive_file:43891 isolated_file:0 [ 323.612014][T12162] unevictable:0 dirty:236 writeback:0 [ 323.612014][T12162] slab_reclaimable:10830 slab_unreclaimable:111829 [ 323.612014][T12162] mapped:33984 shmem:528 pagetables:3597 [ 323.612014][T12162] sec_pagetables:0 bounce:0 [ 323.612014][T12162] kernel_misc_reclaimable:0 [ 323.612014][T12162] free:1298797 free_pcp:13066 free_cma:0 [ 323.612085][T12162] Node 0 active_anon:24736kB inactive_anon:0kB active_file:64kB inactive_file:175372kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135936kB dirty:940kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13652kB pagetables:14280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 323.612167][T12162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 323.612227][T12162] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.612295][T12162] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 323.612337][T12162] Node 0 DMA32 free:1250468kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24736kB inactive_anon:0kB active_file:64kB inactive_file:175372kB unevictable:0kB writepending:940kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:52260kB local_pcp:38288kB free_cma:0kB [ 323.612405][T12162] lowmem_reserve[]: 0 0 1 1 1 [ 323.612444][T12162] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 323.612508][T12162] lowmem_reserve[]: 0 0 0 0 0 [ 323.612547][T12162] Node 1 Normal free:3929360kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.612642][T12162] lowmem_reserve[]: 0 0 0 0 0 [ 323.612680][T12162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.612810][T12162] Node 0 DMA32: 2470*4kB (UME) 1329*8kB (UME) 313*16kB (UME) 461*32kB (UME) 520*64kB (UME) 413*128kB (UME) 399*256kB (UM) 260*512kB (UME) 144*1024kB (UME) 10*2048kB (UME) 176*4096kB (UM) = 1250512kB [ 323.612990][T12162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.613109][T12162] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 10*16kB (UM) 8*32kB (UM) 11*64kB (UM) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 958*4096kB (UM) = 3929360kB [ 323.613279][T12162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.613298][T12162] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.613316][T12162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.613334][T12162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.613352][T12162] 44431 total pagecache pages [ 323.613360][T12162] 0 pages in swap cache [ 323.613368][T12162] Free swap = 124996kB [ 323.613376][T12162] Total swap = 124996kB [ 323.613385][T12162] 2097051 pages RAM [ 323.613392][T12162] 0 pages HighMem/MovableOnly [ 323.613400][T12162] 434240 pages reserved [ 323.613408][T12162] 0 pages cma reserved [ 324.251891][T12165] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1835'. [ 324.622393][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'. [ 325.325298][T12177] bridge0: left promiscuous mode [ 325.325340][T12177] bridge0: left allmulticast mode [ 325.363721][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.363843][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.364158][T12177] bridge_slave_0: entered allmulticast mode [ 325.423838][T12177] bridge_slave_0: entered promiscuous mode [ 325.533644][T12177] bridge_slave_0: left allmulticast mode [ 325.533679][T12177] bridge_slave_0: left promiscuous mode [ 325.533959][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.747307][ T12] net_ratelimit: 51 callbacks suppressed [ 326.747330][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 326.747366][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 326.747544][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 326.747601][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 326.747626][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 326.747650][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 327.255681][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 327.255718][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 327.255741][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 327.255764][ T3391] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 328.773507][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 334.394682][ C0] sched: DL replenish lagged too much [ 336.919235][ T41] block nbd2: Possible stuck request ffff888027f10000: control (read@0,4096B). Runtime 30 seconds [ 337.079058][ T1710] block nbd1: Possible stuck request ffff888027eae000: control (read@0,4096B). Runtime 30 seconds [ 343.186686][ T979] net_ratelimit: 20 callbacks suppressed [ 343.196745][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 343.205961][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 343.215068][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 343.224210][ T979] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 343.517978][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 343.527740][ T979] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 355.299898][ T53] Bluetooth: hci4: link tx timeout [ 355.299924][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 357.744506][ T4956] Bluetooth: hci4: command 0x0405 tx timeout [ 378.902808][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.176460][ T1710] block nbd2: Possible stuck request ffff888027f10000: control (read@0,4096B). Runtime 60 seconds [ 386.370795][ T41] block nbd1: Possible stuck request ffff888027eae000: control (read@0,4096B). Runtime 60 seconds [ 429.982150][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 436.864948][ T1710] block nbd2: Possible stuck request ffff888027f10000: control (read@0,4096B). Runtime 90 seconds [ 436.884210][T12253] block nbd1: Possible stuck request ffff888027eae000: control (read@0,4096B). Runtime 90 seconds [ 440.350742][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.762417][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.951371][ T33] INFO: task kworker/1:5:5766 blocked for more than 143 seconds. [ 534.951403][ T33] Not tainted syzkaller #0 [ 534.951415][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.951427][ T33] task:kworker/1:5 state:D stack:23624 pid:5766 tgid:5766 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 534.951506][ T33] Workqueue: events switchdev_deferred_process_work [ 534.961147][ T33] Call Trace: [ 534.961163][ T33] [ 534.961181][ T33] __schedule+0x17dd/0x5830 [ 534.961234][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 534.961269][ T33] ? __pfx___schedule+0x10/0x10 [ 534.961304][ T33] ? schedule+0x90/0x2b0 [ 534.961333][ T33] schedule+0x164/0x2b0 [ 534.961359][ T33] schedule_preempt_disabled+0x13/0x30 [ 534.961383][ T33] __mutex_lock+0x7c4/0x15a0 [ 534.961415][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 534.961448][ T33] ? switchdev_deferred_process_work+0xe/0x20 [ 534.961489][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 534.961517][ T33] ? lock_acquire+0x115/0x350 [ 534.971364][ T33] ? rcu_is_watching+0x16/0xb0 [ 534.971414][ T33] ? process_scheduled_works+0x97a/0x1630 [ 534.971452][ T33] switchdev_deferred_process_work+0xe/0x20 [ 534.971489][ T33] process_scheduled_works+0xc3d/0x1630 [ 534.981329][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.981390][ T33] ? assign_work+0x3cf/0x5d0 [ 534.981431][ T33] worker_thread+0xa47/0xfb0 [ 534.981534][ T33] ? __kthread_parkme+0x71/0x1f0 [ 534.981570][ T33] kthread+0x38b/0x480 [ 534.991664][ T33] ? __pfx_worker_thread+0x10/0x10 [ 534.991712][ T33] ? __pfx_kthread+0x10/0x10 [ 534.991741][ T33] ret_from_fork+0x514/0xb70 [ 534.991773][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 534.991801][ T33] ? __switch_to+0xc78/0x1410 [ 534.991841][ T33] ? __pfx_kthread+0x10/0x10 [ 534.991869][ T33] ret_from_fork_asm+0x1a/0x30 [ 534.991915][ T33] [ 534.991985][ T33] [ 534.991985][ T33] Showing all locks held in the system: [ 534.991995][ T33] locks held by kthreadd/2: 2, last CPU#0: [ 534.992013][ T33] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 534.992087][ T33] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 534.992152][ T33] locks held by kworker/R-rcu_g/4: 1, last CPU#1: [ 534.992169][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 534.992237][ T33] locks held by kworker/0:1/10: 3, on CPU#0: [ 534.992254][ T33] #0: ffff888056d6e948 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 534.992326][ T33] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 534.992411][ T33] #2: ffff888034c134b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 534.992477][ T33] locks held by kworker/u8:0/12: 4, last CPU#0: [ 534.992493][ T33] #0: ffff88802974b148 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 535.162378][ T33] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 535.162465][ T33] #2: ffff888055d01480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 535.162526][ T33] #3: ffff88807a2a0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 535.172893][ T33] locks held by kworker/u8:1/13: 4, on CPU#0: [ 535.172912][ T33] #0: ffff88802974f948 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 535.172999][ T33] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 535.173079][ T33] #2: ffff888013b95480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 535.173135][ T33] #3: ffff888021726640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 535.173192][ T33] locks held by kworker/R-mm_pe/14: 1, on CPU#0: [ 535.173208][ T33] #0: ffffffff8fdf6480 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 535.173277][ T33] locks held by kworker/u8:2/31: 5, last CPU#0: [ 535.173293][ T33] #0: ffff8880216be148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 535.173357][ T33] #1: ffffc90000a77c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 535.173422][ T33] #2: ffff8880364a40e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 535.173485][ T33] #3: ffff88803648ccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 535.173549][ T33] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: blk_mq_run_hw_queue+0x236/0x4e0 [ 535.184022][ T33] locks held by pr/ttyS0/32: 1, last CPU#0: [ 535.184041][ T33] #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60