last executing test programs: 4m55.113670784s ago: executing program 2 (id=2980): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_NETNS_COOKIE(r0, 0x1, 0x47, &(0x7f0000007cc0), &(0x7f0000007d00)=0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)=')#\x00', 0x3) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@alu={0x7, 0x1, 0x6, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x8, 0x1, {{0x48, 0x4, 0x2, 0x2a, 0x120, 0x65, 0x0, 0xfc, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@cipso={0x86, 0x35, 0x1, [{0x1, 0x4, "64bc"}, {0x2, 0x6, "262f2493"}, {0x5, 0x8, "8946e3f4a219"}, {0x1, 0x3, "ea"}, {0x7, 0x9, "52e384dcd5e563"}, {0x7, 0xb, "14f5d47e0271fe11d0"}, {0x7, 0x2}, {0x1, 0x4, "07d0"}]}, @timestamp_addr={0x44, 0x34, 0x45, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x37}, 0xfaf2}, {@rand_addr=0x64010102, 0x9}, {@loopback}, {@private=0xa010100, 0x6d}, {@remote, 0xfffff027}, {@multicast1}]}, @cipso={0x86, 0xd, 0x2, [{0x2, 0x7, "ee34687dcf"}]}, @cipso={0x86, 0x20, 0x2, [{0x2, 0x9, "bb8da1bf9a35f7"}, {0x2, 0x4, "bdbc"}, {0x4, 0xd, "58639bc58e5d9a490b6842"}]}, @lsrr={0x83, 0xf, 0x42, [@empty, @loopback, @loopback]}, @generic={0x82, 0xd, "e28d8b57ec65c31fa7cdb5"}, @timestamp={0x44, 0xc, 0x5f, 0x0, 0x4, [0x7fffffff, 0x3ff]}, @end, @timestamp_prespec={0x44, 0x4c, 0x97, 0x3, 0x2, [{@private=0xa010100, 0xfffffff8}, {@local, 0x2}, {@broadcast, 0x8}, {@remote, 0x80}, {@loopback, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x35}}, {@rand_addr=0x64010101, 0x9}, {@local}, {@local, 0x80000000}]}]}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) (async, rerun: 64) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r3, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', r2, r3, 0x1, 0x1}, 0x50) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r4, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 4m54.769255147s ago: executing program 2 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff050000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a00000008000000000000001c0017000000000000000000ffffffff0000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0) 4m54.521665047s ago: executing program 2 (id=2987): r0 = socket(0x1f, 0x800, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB="c8371a24", @ANYBLOB="000228bd70001bd7ec256600000008000300", @ANYRES32=0x0, @ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x4044055) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e24000000090000000000000000000000000000000006000000030000000600080009"], 0xb0}, 0x1, 0x7}, 0x18004) r3 = socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf250c0000000800050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x890) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000334000480300001800e0001006279746570726465720000001c000280080001400000001008000540000000d1080004030000001f0900010073797a300000000009000e0073797a3200000000140000001100010800000000000000000700000a"], 0x88}}, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x2, 0xfffff000}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r7, 0x0, 0x2, &(0x7f00000001c0)=""/29, &(0x7f0000000080)=0x1d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000002c0)={{0x3a, @broadcast, 0x4e21, 0x4, 'lblcr\x00', 0x0, 0x873, 0x59}, {@multicast2, 0x4e24, 0x1, 0x8, 0x2}}, 0x44) ppoll(&(0x7f0000000140)=[{r3, 0x2ce}, {r8, 0x402}, {0xffffffffffffffff, 0x4104}, {r9, 0x41}], 0x4, &(0x7f0000000f80)={0x77359400}, &(0x7f0000000fc0)={[0x6]}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) socket(0x8, 0x5, 0x4) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001014d9ec29bd7000fcd9df25080010"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 4m53.87390933s ago: executing program 2 (id=2992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@local, 0x4f24, 0x0, 0x4e22, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x30, 0x6b654eecffb3ff31, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x100000000000003, 0x9, 0x7}, {0x4800000, 0xfffffffffffffffe, 0x0, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x210000, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x64, 0x2c, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xf}, {0x0, 0xffff}, {0xe, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x64}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x3, 0x3) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@local, 0x4f24, 0x0, 0x4e22, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x30, 0x6b654eecffb3ff31, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x100000000000003, 0x9, 0x7}, {0x4800000, 0xfffffffffffffffe, 0x0, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x210000, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000280)=""/166, &(0x7f0000000340)=0xa6) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000cc0)=@newtfilter={0x64, 0x2c, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xf}, {0x0, 0xffff}, {0xe, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_nat={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x64}}, 0x0) (async) 4m53.505018042s ago: executing program 2 (id=2997): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280700d8a7d2950a8cb7e9358cb8551281f8a4e5560f5ac96f9542731a9279f92ed7f535848931358062faf1bd443dce7c9d4f5cf503340664b22f6ec761b26269093cbc3e14cd92a943fb02840549ca23ba2cd3eb7f27abf1e8ef809919f32508229d7e33104af0366f64c872fb663b9ad68a0b86226e65bd184f165c13afd32e474b82fa5af2f5d80d31becd60c7faa7735ee2e2cf053c7b364c7f402c7a649bdfe7d766eb33f6b40a0caa", @ANYRES16=r1, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900092000001c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40049d0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r4, 0x9, 0x101, 0x3094e04a, 0x3, 0x3}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000000600034000040000240002801400018008010100e000000108000200e00000010c00028005000100000000000800074000000003"], 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000340)={0x6, 0x5c, 0x204, 0x401, 0x80000000, 0xb2b, 0x400, 0x0, r4}, &(0x7f0000000480)=0x20) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0x4, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r9, 0x3, 0x4}, 0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r13, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a28000180080001"], 0x64}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe800000", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0) 4m53.257352119s ago: executing program 2 (id=2999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x20, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x9, 0x6, 0x79}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x210, 0x20a, 0x278, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 4m25.504970715s ago: executing program 32 (id=2999): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x20, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x9, 0x6, 0x79}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x210, 0x20a, 0x278, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 2m34.731644628s ago: executing program 0 (id=4195): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x22, 0x2e, 0x501, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r2, 0x200204) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe90, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0x9, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x7, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1000, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x0, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e22, 0x0, @remote, 0x9}}, 0x1}, 0x90) (rerun: 64) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x4c0680, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f00000012c0)={0x3, &(0x7f0000001280)=[{0x3, 0x10, 0x2, 0xc}, {0xd, 0x0, 0x1, 0x7fff}, {0xc2, 0xc, 0x2, 0x7c5}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000011c0)=ANY=[@ANYBLOB="18008b960010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000269a9397ddcd37ad632dec6cfc5c34ec486b936c75d4363dcaf2bc61f4c0e8713da8e6c79e49ea2eccb722cf016cc55eeeffbd87c1a362eb0fa3fe2db0d610706120afacc25e81e28ec3f9367761c65bcd43a35c0abb00bc0398141aa096d632fcaaabbe81537f41cc5b115277ee453192da2e0402b4e7d2b120bc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) (async) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 2m34.604461364s ago: executing program 0 (id=4197): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x60, 0x9, 0x1955}}}]}]}]}}]}, 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 2m34.365270501s ago: executing program 0 (id=4198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, r1, 0x1, 0x4000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000030000000000000012000000850000009300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x211}, 0x94) 2m34.266864826s ago: executing program 0 (id=4200): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r3, 0x29, 0x7, &(0x7f0000000600)={0x7fff, {{0xa, 0x4e24, 0x5, @empty, 0xffffffff}}, {{0xa, 0x4e20, 0x1000009, @loopback, 0xfffffffa}}}, 0x108) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="0100fdfffffffdffffff1d00", @ANYBLOB], 0x64}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r2) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB="0000210000000000000042be83d04f26ab2c821e", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000300000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001b40), &(0x7f0000001c40), 0x5, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r7, &(0x7f0000000140)}, 0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@local, 0x4e25, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0xc, 0x2, {{0x9d, 0x80000009, 0x7, 0x8, 0x4e19}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x809b}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 2m34.088257901s ago: executing program 0 (id=4204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r2, &(0x7f0000001000)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@gre={{0xf, 0x4, 0x3, 0x15, 0x21e, 0x1064, 0x0, 0x40, 0x2f, 0x0, @local, @multicast1, {[@cipso={0x86, 0x11, 0x1, [{0x1, 0x4, "dd6f"}, {0x1, 0x7, "64df3d1587"}]}, @end, @noop, @rr={0x7, 0x13, 0x40, [@loopback, @loopback, @loopback, @loopback]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x68, 0x0, [], "450b768b5fe3da7bb071f967686d5eb57c1aa3dd155815e98ad25b534f5e680f5c56b1b41f74803e75680087e174126e26dc17a2d644d370a82287b14f85497d7ecaeb8b01c46f125e3013ab337b89a6ff8dabe81dd544dbd84206c964549d07f8b8044ae7ee0000"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xbf6, 0x4]}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0xec39], "b691d9d3ddbeff5edacff75bd0654b2668570ebb382153698a5b21c422f40eba307079ed608a7471f302a94524a5815aec19a6df919546890a95655d728ba1eeb605e1d3e57f47d7247a506d61c7194fede8bf4177fe268e02f1411879417b0b728d6fadef59c8271e4382431793f6ed28d3452c97892beb183f68bf4108d96fec856a7f5798f96177bfd72a48f23fb4eacd0ca5fef68b040fc52a1cd4071578435ceccee84dad57a3764da91cdccffcebfec84fdcc6f31c2ab08dd726baa6b29934c448e6eb93ba0ece3ce96150c7e2f395dcd75d7da303465dfce7aa7765a330e667aff078cd49078283d7b381fe68b7"}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0xb9, 0x3, 0x1, 0x1, 0x3, 0x3}, 0x1, {0x93}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x62, 0x1, 0x0, 0x1, 0x1, 0x2}, 0x2, {0xef, 0x5, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "cf60073fa9a92385c2116b9357b919e0dea42aff940be819d4cfdd695d65d17824e0721fc3a587fa58bd56661cfb57b1453487df1aa4119ff34083f08a07fc"}}}}, 0x22c) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0xc80, 0x22, 0x4, 0x70bd27, 0x25dfdbff, {0xa}, [@nested={0xc69, 0x11, 0x0, 0x1, [@generic="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"]}]}, 0xc80}}, 0x40) 2m33.508864105s ago: executing program 0 (id=4209): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r3 = socket$kcm(0x23, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r3, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x78) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0803, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94) 2m7.300402698s ago: executing program 33 (id=4209): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r3 = socket$kcm(0x23, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r3, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x78) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0803, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94) 1m22.439369599s ago: executing program 5 (id=4776): unshare(0x24020400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffe, 0x0, 0xc, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75}}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$PPPIOCGIDLE32(0xffffffffffffffff, 0x8008743f, &(0x7f0000000080)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400800002000d008100000005"], 0x50) syz_emit_ethernet(0x46, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) unshare(0x44010000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000e40)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000e80)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x0, 0x7, 0x30, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0x8, 0x468b783e}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)={0x130, 0x0, 0x724, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x401}, 0x14) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000002c0)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000780)={'erspan0\x00', r11, 0x80, 0x40, 0x0, 0xd1, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x66, 0x0, 0x40, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @cipso={0x86, 0x32, 0x1, [{0x2, 0x8, "42b90d59f7e4"}, {0x1, 0x11, "396922b7c78f3ff47a444b792e962e"}, {0x1, 0x3, '%'}, {0x1, 0x2}, {0x7, 0x4, "ab13"}, {0x6, 0xa, "a404e699841ba3e2"}]}, @cipso={0x86, 0x3f, 0x3, [{0x1, 0xd, "59f24d3bd4a852f4b74255"}, {0x7, 0xc, "47d79d46e63f6602a663"}, {0x4, 0x4, "fa71"}, {0x2, 0xe, "fba7ee827587f4875115b6bf"}, {0x6, 0xe, "8a98826b304253292ff70542"}]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0x2, [{0x0, 0xe, "e76304a81d3afdd9a02b2347"}, {0x6, 0x3, "8f"}]}]}}}}}) 1m21.76974401s ago: executing program 5 (id=4785): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}}}, 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x48) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) (async) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0a010200000000fe8000000000000000000000bbfe880000000000000000000000000001fc020000000000000000000002000001fc020000000000000000000000000001fe800000000000001000000000000028000000"], 0x58) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="6b6218a6b3670dc184f2511ef0e84c25506da9249c105b7351ffb401d0101c620011f2944f89933b4da08f3c3f31fa4846d2aa81d6d84a228a4eafd27f5a3d134806f386f8a9671ac039be5a3bfa737e5e6829f9e9d714e6b53b328cd3b3086ac68b4daf317d328dc178740e4ae0cfe56c0bb4737409232bb1be", @ANYRES64=r2, @ANYRESHEX=r2, @ANYRES8=r2, @ANYRES16=r3, @ANYRESDEC=r0], 0x8) (async, rerun: 32) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) (rerun: 32) sendmsg$inet6(r4, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="140000"], 0x18}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e000000010004b0400000000000000007a000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c0012800b20010062726964676500000c000280050007000700000024002b8008000800", @ANYRES32=0xffffffffffffffff, @ANYBLOB="080003"], 0xe0}, 0x1, 0x0, 0x0, 0x8011}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRESDEC=r5, @ANYRES64=r8], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r9}, 0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r9, r11, 0x25, 0x4, @void}, 0x2a) openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.bfq.time\x00', 0x275a, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$OCFS2_IOC_RESVSP(r12, 0x40305828, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) 1m21.188933688s ago: executing program 5 (id=4790): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x3447}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e5445240140000076a8a20122e4dbbe000000000000000000000000000064ac038d0000000000000000000000000000000000000000002000"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x4c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x84}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRES32=r4, @ANYRESDEC=r6, @ANYRESDEC=0x0], 0x28}, 0x1, 0x0, 0x0, 0x808}, 0x4040400) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000000c0)={0xc, {{0x2, 0x4e21, @loopback}}}, 0x88) bind$bt_l2cap(r9, &(0x7f0000000180)={0x1f, 0x3, @none}, 0xe) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f00000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$kcm(0xa, 0x2, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) setsockopt$sock_attach_bpf(r10, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @loopback, 0x200000}, 0x80, 0x0}, 0x4cc54) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x3f, 0xb13, 0x5, 0x10000}, 0x14) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1m20.406565997s ago: executing program 5 (id=4796): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x6, 0x580, 0x8, {0x77359400}, {}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x0, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "da96af2fcead2a68"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040051) (async) r2 = socket(0xa, 0x3, 0xff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x1, 0x3, 0x1, 0x10002, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x0, 0x100}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x7, [@int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x17, 0x3}, @float={0x2, 0x0, 0x0, 0x10, 0x4}, @struct={0xd, 0x6, 0x0, 0x4, 0x0, 0x64abfa48, [{0xb, 0x0, 0x7}, {0x10, 0x0, 0x1}, {0x9, 0x0, 0x9}, {0xe, 0x3, 0x9}, {0x3, 0x3, 0xf}, {0x1, 0x2, 0x9}]}, @fwd={0x2}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x3, 0x2}]}, {0x0, [0x61, 0x5f, 0x5f, 0x61, 0x0]}}, &(0x7f0000000740)=""/214, 0xb7, 0xd6, 0x1, 0x1, 0x10000}, 0x28) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000010000000100000000900000040000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="0500000002000000030000000d000000009d00000009000000000000"], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xbb}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x6c, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000880)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x7, 0x60, 0x101}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r13, r5, r14, r5, r5, r7, r5, r5, r5], &(0x7f0000000a80)=[{0x0, 0x1}, {0x3, 0x2, 0xb, 0x7}]}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4780]}}]}]}, 0x58}}, 0x4000010) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, 0x0, &(0x7f0000000040)) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r15, 0xffffffffffffffff, 0x60}, 0xc) (async) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="071404"], 0xa8) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x2}, 0xe) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdf9, {0x0, 0x0, 0x0, r16, {0xfff3}, {0x1, 0xffff}, {0xffe0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001680)={0x0, 0x0, "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", "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"}) 1m20.18792803s ago: executing program 5 (id=4801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001540)=@getnexthop={0x20, 0x6a, 0x519, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf2500018044000400200001000a000000000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 1m17.730321068s ago: executing program 5 (id=4809): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @loopback, 0x1}, 0x1c) listen(r2, 0x4) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r3, 0x800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r5) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0803, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) 53.635114571s ago: executing program 34 (id=4809): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @loopback, 0x1}, 0x1c) listen(r2, 0x4) r3 = socket$kcm(0x23, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r3, 0x800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r5) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0803, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) 5.184061605s ago: executing program 1 (id=5320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.156723723s ago: executing program 4 (id=5329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r5, 0x0) accept4$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c, 0x80800) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r8, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 4.140807406s ago: executing program 1 (id=5330): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=r0, @ANYRESHEX=r0], 0x38}}, 0x0) 3.940418619s ago: executing program 1 (id=5331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000050000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYRESDEC=r2], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=0x0, @ANYBLOB="01000000000001000000010000000800010002000000240004800500030005000000050003000100000005000300050000000500030000000000"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001"], 0x64}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000000f40)="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", 0x5d7}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) socket$kcm(0xa, 0x5, 0x0) 3.754684557s ago: executing program 4 (id=5334): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0x7}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4004880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0xa, 0x3, 0x3a) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x5, 0xf, 0x0, &(0x7f0000000180)="87e1b9e890dc17004c430a3a7bedf1", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6384}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050300000000000000000a00000008000300", @ANYRES32=r11], 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008014) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='wg1\x00') r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close(r12) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.628645458s ago: executing program 7 (id=5335): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0xff58) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000017010000f8ffffffbfa400000000000007040000f0ffffffb70200000800002f18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 3.281326529s ago: executing program 7 (id=5336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) 2.956801468s ago: executing program 3 (id=5339): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}], 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x4e, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7040010000000300000008000300", @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x18) sendmsg$inet_sctp(r1, &(0x7f0000002000)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x800c054}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 2.956526429s ago: executing program 6 (id=5340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.850101958s ago: executing program 1 (id=5341): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x70bd25, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @loopback}}, @sadb_sa={0x2, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}]}, 0x50}, 0x1, 0x7}, 0x20000030) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163c9d04d1200000000500000000000000ffff03425d4d50e7182ce0ab6d0400", 0x31}], 0x1, 0x5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@o_path={&(0x7f0000000340)='./file0\x00', 0x1, 0x4000, r2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)={0xd, 0x9, 0x0, 0x9, 0x6, 0x0, [{0x8, 0x6, 0x6, '\x00', 0x1100}, {0x7, 0x2, 0x401, '\x00', 0x602}, {0x40, 0x1f20, 0xbffffffffd, '\x00', 0x4}, {0x4, 0xe8, 0x8, '\x00', 0x80}, {0x4, 0x7, 0x1, '\x00', 0x1289}, {0x9, 0x6, 0xb3f6, '\x00', 0x2a02}]}) socket$igmp6(0xa, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080267277c2a43b9e000000000000", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.817805401s ago: executing program 3 (id=5342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0x60}}, 0x20000010) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x80, 0x2, 0x6, 0x6287f1718c512c3a, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001bc0)={0x2c, r2, 0x1, 0x0, 0x25dfdc00, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5b66b94073"}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "654068723a8e987a18ec84f32a1b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d0e6734a04"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b9a00adf49c37a2482a6b53f3c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000010}, 0x88) 1.941033058s ago: executing program 7 (id=5343): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x8, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x807ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0xb}, {0xfff, 0x1000006, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x3ff, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbead, 0x8, 0x5}, {0x3, 0x10000008, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0xffffffff, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xa, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0x5, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0xe, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x100}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x52, 0x1}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r8) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r9, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r10 = accept(0xffffffffffffffff, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1220000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c009a15", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf25090000000500050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) 1.940671561s ago: executing program 6 (id=5344): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000500)={{r0, &(0x7f0000000000)='-,z\x00', 0x280480, &(0x7f0000000040)={@align=0xffe0000000000000, {0x0, 0x2, 0x2, 0x2}}, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x2}, 0x2, &(0x7f00000004c0)=[{0x2, 0x10, &(0x7f0000000200)='gtp\x00', &(0x7f0000000380)="8f27991fb6b998e3221ec8688f88a0a15b67a8a6338073afaf2d58930378686a134b2625b140f15d1eec7d392a5aace388aef434a3c605cf6ea13dea4a16482530003593b2d186e61e6cd7a6758236ed7c8aaafd0df5b077335a4432f142901f4da8bc1f94177a55df2f6f9eefc2ad38ad7a04f759ae9e384ec02cf68de206d80b56db947b5630f93fb74bbc427f0c5b483da5d1a7ef67f3336f41497781d51c", 0xa0}, {0x1, 0xff, &(0x7f0000000440)='gtp\x00', &(0x7f0000000480)="428bb7ef", 0x4, 0x3a}]}) write$cgroup_subtree(r1, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="220a7ee47a0d208575ddbb4c9eafaf6bce2bbd0fa34556cf8c077fbc0863ee59fbb8a942277630aa54897481705c0501d9b3f944ecfd2349942fb0b52e93322bd30c73ec3dd78092b1bff999c7456c1a507ca353c6a409cc4bf698774f8df629b79fd3e3f70cfd7dda2c03d2b970ac6e691790f9dcd7cd97f9344b103554a0fa68bdf5b5981ad6653d6fbca9799736bdd34f797f578e48ebc9ba5540b0d1f70901fc4600531669c0c2a5fa1a62133288debb945f68a922b5bcab4bb9cc78b901469b70f3e22c68b3ead536038747d2e2a79489f69c7a74c9f70e7ad44ec547aa88aee98587bfeeea8ba4bd01a4", @ANYRES32=r0], 0xfe33) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000001600)={@vsock={0x28, 0x0, 0x2711, @hyper}, {&(0x7f00000005c0)=""/4096, 0x1000}, &(0x7f00000015c0), 0x10}, 0xa0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0xdf00, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x70001}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 1.939195404s ago: executing program 4 (id=5345): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x2, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x200000000000001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) 1.845105162s ago: executing program 1 (id=5346): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) unshare(0x22020600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0x3, 0xf}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f00000002c0)=""/98, 0x53, 0x62}, 0x28) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @initdev, @private}, &(0x7f0000000100)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x18, &(0x7f0000000480)=@raw=[@call={0x85, 0x0, 0x0, 0xcd}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @exit], &(0x7f0000000540)='GPL\x00', 0x80000001, 0x1c, &(0x7f0000000580)=""/28, 0x40f00, 0xa, '\x00', 0x0, @cgroup_device, r3, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000600)=[0x1, r0], &(0x7f0000000640)=[{0x0, 0x3, 0xa, 0xa}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000080)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x30, '\x00', r4, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x3, 0x9, 0x1ff}, 0x10, 0x30347, r5, 0x2, &(0x7f0000000780)=[r0, r1, r1, r0, r0], &(0x7f00000007c0)=[{0x1, 0x3, 0x0, 0x3}, {0x1, 0x1, 0xa, 0x1}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000300)={0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0x200, 0x0) openat$cgroup_ro(r8, &(0x7f0000000900)='freezer.state\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x1c, 0x41, 0x301, 0x70bd2b, 0x25dfdbfd, {0x3}, [@generic="7f36148877"]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) 1.813994473s ago: executing program 4 (id=5347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) socketpair(0x1, 0x100000005, 0x0, 0x0) unshare(0x8040480) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@bridge_dellink={0x24, 0x13, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r3, 0x3000}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 1.685299113s ago: executing program 6 (id=5348): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/243, 0xf3}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40018122, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x12) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 1.56136128s ago: executing program 6 (id=5349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000090000000000000001000000850000001100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000009b0000009500000000000000e80fe86a36d1ce4db3d2072ca755bcec3dbb7dfa85342afbb8d8f8b6f58b764c6f7a6db9a0c3802dff041d22c476e04d801b21836b41c3316ab42e557f572ad5cb9bbc3d1463b15671681afa40754dcf524505ede54c7a0e9ddfbbb04e9f222820fe8599dde6f2d8fbbb81232866568098228706f5fbb94a93b4e936c343cc4e44c05253c912b020c5b1d75b6ca25eb3b20d05379a37f6a108500106c4d5b9ca16a9ce62416730b399f72523e5bc5c732eb89574fd84f6b41bf4742452497a90ae72fadcbbc5c55ca1849920686700a987a10a378ba8c667f8936a53f7f3a32134bd0d85e6aaccf2a59f09a76d0de4"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbd8abc89b6f59ec", 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8bf0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.550259913s ago: executing program 3 (id=5350): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x400}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8000}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048005}, 0x4000000) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000180)={0x0, 0x0, "a503f6c7f43a8406e44e0c6683f84e17"}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7fff}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x2f580000}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @NETCONFA_FORWARDING={0x8, 0x2, 0xfffff275}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x7, 0xfffffffe, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0xffff, 0x70}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x8, '\x00', r1, r0, 0x4, 0x0, 0x1}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40060}, 0x8000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000600)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000640)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r7, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x19, 0x14, 'cpuacct.usage_percpu\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'syztnl1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000801}, 0x24040000) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xb8fe, 0x0, r2, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3}, 0x50) sendmsg$netlink(r0, &(0x7f0000000900)={&(0x7f00000007c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, &(0x7f0000000800), 0x0, &(0x7f00000008c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r12, r0]}}], 0x20, 0x80}, 0x408c4) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000000940)={0x7, 0x7, 0x3}, &(0x7f0000000980)=0x28) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x78, r13, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x298}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd12}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf72}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x192}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x57a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11a4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x4000040) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r15, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000894) r16 = accept$inet6(r0, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000d00)=0x1c) ioctl$XFS_IOC_FSGROWFSLOG(r16, 0x4008586f, &(0x7f0000000d40)={0x401, 0x10}) r17 = accept(r5, &(0x7f0000000d80)=@ethernet={0x0, @broadcast}, &(0x7f0000000e00)=0x80) connect(r17, &(0x7f0000000e40)=@xdp={0x2c, 0x9, r6, 0x7}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 1.342689962s ago: executing program 6 (id=5351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x20, @broadcast}, {0x4000, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}}}}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) 1.137051143s ago: executing program 3 (id=5352): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbf}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) r1 = socket(0xa, 0x3, 0x85) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@mcast2, 0x40, r2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) bind$tipc(r3, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x3}}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x140d, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x840) 1.03894342s ago: executing program 3 (id=5353): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @local, @empty}}}}) 1.014906892s ago: executing program 6 (id=5354): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005680)="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", 0x1000}, {&(0x7f0000000340)="6af285618a2f30e0b65115da3c877599d806030c48d2dc50879d237e944665893c5ffdcd68ceb67182416b2676c984e21b764ebafb9e55e4f88e5a2d629123ce5631aaf128d9c4850aafca26acfde43e11d0ba15cee3e042b599f9390e030fb5972da4f36bb6387df0e2efffc75dbd44c8e74ba00b54e5f9745369a2b3be8b590d7a06e7244e4fb9c29c2844b5d90ce024aee8625e55b029f77abbf0f6fb7cf5f02dadb93a6632e4d73d638a0b2cdcb25ccca3cb7ac7b20a4863", 0xba}, {&(0x7f0000000400)="31fa5719e38a818662f3dabcbed278d291660c895ecbe9b2d2802847b3c309d0be00396725b9317caf299c5a2fc22f73dd1c785880a7285d7da780dcfd", 0x3d}, {&(0x7f0000006780)="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", 0xbdb}], 0x4}}], 0x1, 0x24040000) poll(&(0x7f0000000000), 0x31, 0x4) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7c, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x4, 0x8, 0x1, 0x9, 0x7fffffff, 0xfffffff5, 0xa}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4044850}, 0x24040000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) r10 = socket$kcm(0x29, 0x5, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_ADD_TX_TS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) sendfile(r10, r11, 0x0, 0xffffffff004) sendmsg$nl_route_sched(r9, 0x0, 0x20001090) syz_emit_ethernet(0x2a, 0x0, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000040)="114353012008ba00000037510800", 0xe, 0x4008005, &(0x7f00000000c0)={0x11, 0xd, r13, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0x0, 0x2}}}}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001a0001000000060000005f250a808000000080a200009f5abf395a288facb09dd2c53ee88083a2ffa004c530d02745d190878a3894bce4644ebddf2e2e068d49432d1e0ad8dc6f9df15c80cfcbc7ea3dcd3bfad042500f77fc04c12136d4a842fc11701e649a0c332b39a229313d3e71fba1149762391a630cf854931f98a92438d0ef15fd08e1b21c40278ee39352fbedf6ee2380f026e05465b49f5b11eaa922a5c9da6d", @ANYRESDEC=r13], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 785.686699ms ago: executing program 1 (id=5355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 784.698095ms ago: executing program 7 (id=5356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r2, &(0x7f00000006c0)="6000000000142b4000e4331e26bff073b302d6b8b34123ca000000000000000000000000000001000013", 0x2a, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000480)={'syz_tun\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x17, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e7040000000600000018010000756c6c2500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000000b50302000000000085000000c4000000b70000000000000095000000000000000000000000003b5366b700000000003f6e8869293db2a1033977b945d46377e08241c9969d43a9928eb3cb540d3e66ce6190a852ca28bea69baee3e9b852f9c8ed4c7ba4c81981638df239ed4263c27cc67f29b3c013945c2b0fa90274836a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r3}, 0x18) socket$l2tp(0x2, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) r7 = socket(0x10, 0xa, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000bbc78cb98ac4", @ANYBLOB="f3c38847511c08e7092c61cf5272f795107574e57cc06f431d0b67507cf6a1f321ffd7ea98cb3d6731da5752e26b91f59aa951fde051a0ee898b40", @ANYRES64=0x0, @ANYRESOCT], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4020811) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000680)=0x90) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) unshare(0x2c020400) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f00000000c0), 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7001fedbdf251200000018000180140002006272696467655f736c6176655f3100000800070002000000080008000e"], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x5, 0x0, {{0x29, 0x4, 0x0, 0x11, 0xa4, 0x67, 0x0, 0xcf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x65, [@empty]}, @cipso={0x86, 0xf, 0x3, [{0x7, 0x3, "14"}, {0x2, 0x4, "8f92"}, {0x2, 0x2}]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0x3, "98"}, {0x7, 0x2}, {0x1, 0x12, "fa4f719f5522c2890700000000000000"}]}, @timestamp_addr={0x44, 0x2c, 0x4a, 0x1, 0x8, [{@rand_addr=0xa837, 0xb99d}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x9}, {@multicast2, 0x9}, {@loopback, 0x315}, {@empty, 0x4}]}, @ssrr={0x89, 0x2b, 0x4, [@multicast2, @multicast1, @multicast1, @remote, @loopback, @loopback, @private=0xa010100, @broadcast, @private=0xa010100, @multicast1]}]}}}}}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xd0}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r3, &(0x7f0000000280)='\x00', 0x1, &(0x7f00000002c0)={@align=0x100000000000, {0xf, 0x7, 0xe, 0x50c}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x82}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000004c0)={'vxcan1\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="0100"/20, @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="03000000080000000500"/28], 0x50) 749.808916ms ago: executing program 4 (id=5357): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) socket$inet(0x2, 0x2, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0x200000000000001, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000021c0), 0x100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xe00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x0) 550.379033ms ago: executing program 7 (id=5358): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x80000001, 0xb, 0x3}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040), 0x10) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'veth0_to_bond\x00', 0x4000}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) recvmsg(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/49, 0x31}, {&(0x7f0000000400)=""/200, 0xc8}], 0x5, &(0x7f0000000580)=""/18, 0x12}, 0x18002) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000600)=0x3, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000640)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}, 0x1c) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000680)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000006c0)=0x28) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000700)={0x7, 0x7, 0x2}, &(0x7f0000000740)=0x28) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000780)="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", 0x1000) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000017c0)={0x3ef, 0x40, '\x00', 0x1, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000001800)=0x7, &(0x7f0000001840)=0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x2c, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f00000019c0)={0x2f, @multicast1, 0x4e20, 0x0, 'lblc\x00', 0xd, 0x0, 0x3f}, 0x2c) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000001a00)) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000001a40)={0x1, 0x9}) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000001a80)=0xc6797518872177dd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ac0)={'dvmrp1\x00'}) tee(r1, r2, 0x641d, 0x1) r5 = socket$netlink(0x10, 0x3, 0x14) shutdown(r2, 0x0) connect$inet(r4, &(0x7f0000001b00)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000001f00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001bc0)={0x2c0, r7, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x456dd928afb7965d, 0x3, 0x2, 0x0, {0x80000000, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x3, 0x1}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}], @NL80211_ATTR_IE={0x75, 0x2a, [@measure_req={0x26, 0x48, {0x2, 0x3, 0xff, "eb490bb68b6ccd93ba1de0c79257c4bc7d225c713a18fc33c6be968e8381e1404914ee77c665d04d0cf3b631016acc2b8da32438abfeb40e5c4be352577373d456b8fd4b81"}}, @mic={0x8c, 0x18, {0xb5e, "825c9ea05418", @long="b322deea40352094ad4003577683735e"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x44}}]}, @NL80211_ATTR_SSID={0xc, 0x34, @random="a588b0571b99b93b"}, @NL80211_ATTR_IE={0x64, 0x2a, [@perr={0x84, 0x55, {0x81, 0x5, [{{}, @broadcast, 0x4, @void, 0x1b}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x29}, {{0x0, 0x1}, @broadcast, 0xdd, @value=@broadcast, 0x10}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x38}, {{}, @broadcast, 0x0, @void, 0x37}]}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x20}}]}, @NL80211_ATTR_KEYS={0x150, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xf, 0x4, "78824cb34c8f8850b2565e"}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d6c93f5626"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "4581a0a60a9b3f3484"}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7f2d281a24"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "92f269"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9ba4de0f2252e96e78e1e79c37"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d01c62dfd8588ff471bdfefeea"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x6, 0x4, "c8e1"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "83a288bcf8e850fdb4dc84df9e"}, @NL80211_KEY_SEQ={0xd, 0x4, "2428d34fc676b95402"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) 345.120835ms ago: executing program 4 (id=5359): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x44010, &(0x7f0000000200)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000780)={0xc0000000}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000c000000000000000290000000367f4ff00010000bda9feffffffffffbf91000000000000b7020000020000008500baec84000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x3, 0x3f, &(0x7f0000000280)=""/63, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x47eb3fe9, 0x3}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000400)=[{0x4, 0x2, 0xb, 0x6}, {0x0, 0x5, 0x5, 0x3}, {0x1, 0x5, 0x2, 0x7}, {0x3, 0x2, 0xd, 0xc}, {0x2, 0x5, 0xd, 0x9}, {0x2, 0x4, 0x10, 0x3}, {0x0, 0x5, 0x9, 0x4}, {0x5, 0x2, 0x7, 0xc}, {0x1, 0x4, 0x6, 0x3}], 0x10, 0xfffffc00}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000580)=r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x0, 0x6, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', r2, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0005", @ANYRESOCT], 0xfdef) close(0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) 85.21254ms ago: executing program 7 (id=5360): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r9, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0x3, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x2) close(r7) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000006c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r9, 0x1003c}, 0x80, &(0x7f0000004600)=[{&(0x7f0000000580)="25ff2b8e99e20341f94b754b2d663444fd304c65", 0x14}], 0x1}, 0x24004401) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x63}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x20010) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xe095}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x240008c4}, 0x200080c4) 0s ago: executing program 3 (id=5361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): el medium [ 608.994988][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.996090][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.019789][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.022490][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.024999][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.030379][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.034411][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.040583][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.048573][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.055098][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.068229][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.078212][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.088975][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.094546][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.103954][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.109125][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.115500][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.135587][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.141990][T21515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.365036][T21524] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4006'. [ 609.680188][T21539] sctp: [Deprecated]: syz.4.4010 (pid 21539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.680188][T21539] Use struct sctp_sack_info instead [ 610.065324][T21558] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 610.065364][T21558] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 610.070852][T21558] tipc: Enabled bearer , priority 0 [ 610.862837][T21594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.961876][T21598] syzkaller0: entered promiscuous mode [ 610.961892][T21598] syzkaller0: entered allmulticast mode [ 611.009034][T21600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4030'. [ 611.016095][T21602] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4031'. [ 611.054463][T21599] mac80211_hwsim hwsim44 wlan0: left promiscuous mode [ 611.054491][T21599] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 611.212050][ T5807] tipc: Node number set to 2226467392 [ 611.272116][T21614] FAULT_INJECTION: forcing a failure. [ 611.272116][T21614] name failslab, interval 1, probability 0, space 0, times 0 [ 611.272139][T21614] CPU: 1 UID: 0 PID: 21614 Comm: syz.0.4034 Not tainted syzkaller #0 PREEMPT(full) [ 611.272155][T21614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.272163][T21614] Call Trace: [ 611.272168][T21614] [ 611.272174][T21614] dump_stack_lvl+0xe8/0x150 [ 611.272194][T21614] should_fail_ex+0x410/0x560 [ 611.272211][T21614] should_failslab+0xa8/0x100 [ 611.272225][T21614] __kvmalloc_node_noprof+0x176/0x820 [ 611.272238][T21614] ? __kvmalloc_node_noprof+0x345/0x820 [ 611.272260][T21614] ? bpf_check_cfg+0x1ad/0x3840 [ 611.272270][T21614] ? bpf_check_cfg+0x1ad/0x3840 [ 611.272283][T21614] bpf_check_cfg+0x1ad/0x3840 [ 611.272303][T21614] ? kasan_quarantine_put+0xbb/0x1f0 [ 611.272314][T21614] ? lockdep_hardirqs_on+0x7b/0x110 [ 611.272329][T21614] ? __pfx_bpf_check_cfg+0x10/0x10 [ 611.272338][T21614] ? bpf_prog_calc_tag+0x310/0x370 [ 611.272350][T21614] ? vfree+0x42b/0x490 [ 611.272366][T21614] ? bpf_prog_calc_tag+0x310/0x370 [ 611.272380][T21614] ? check_and_resolve_insns+0x1d54/0x21d0 [ 611.272398][T21614] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 611.272411][T21614] ? add_kfuncs+0x251/0x2e0 [ 611.272425][T21614] bpf_check+0x24b6/0x2e10 [ 611.272441][T21614] ? ktime_get_with_offset+0x93/0x2d0 [ 611.272455][T21614] ? __pfx_bpf_check+0x10/0x10 [ 611.272467][T21614] ? bpf_obj_name_cpy+0x194/0x1e0 [ 611.272484][T21614] bpf_prog_load+0x14d6/0x1c20 [ 611.272501][T21614] ? __pfx_bpf_prog_load+0x10/0x10 [ 611.272525][T21614] __sys_bpf+0xd0d/0xd90 [ 611.272541][T21614] ? __pfx___sys_bpf+0x10/0x10 [ 611.272557][T21614] ? __fget_files+0x2a/0x420 [ 611.272580][T21614] ? ksys_write+0x242/0x270 [ 611.272597][T21614] ? __pfx_ksys_write+0x10/0x10 [ 611.272615][T21614] __x64_sys_bpf+0xba/0xd0 [ 611.272626][T21614] do_syscall_64+0x166/0x520 [ 611.272638][T21614] ? trace_irq_disable+0x3b/0x140 [ 611.272648][T21614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.272659][T21614] ? clear_bhb_loop+0x70/0xc0 [ 611.272672][T21614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.272682][T21614] RIP: 0033:0x7f3c2459e159 [ 611.272693][T21614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.272703][T21614] RSP: 002b:00007f3c227f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 611.272715][T21614] RAX: ffffffffffffffda RBX: 00007f3c24825fa0 RCX: 00007f3c2459e159 [ 611.272723][T21614] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 611.272730][T21614] RBP: 00007f3c227f6090 R08: 0000000000000000 R09: 0000000000000000 [ 611.272737][T21614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.272744][T21614] R13: 00007f3c24826038 R14: 00007f3c24825fa0 R15: 00007fff2e2a6038 [ 611.272762][T21614] [ 611.647949][T21618] tipc: Enabling of bearer rejected, already enabled [ 611.673781][T21618] tipc: Resetting bearer [ 611.760983][T21629] No such timeout policy "s " [ 611.761001][T21629] netlink: Failed to associated timeout policy 's ' [ 612.035034][T21637] can: request_module (can-proto-4) failed. [ 612.102053][T21647] x_tables: unsorted underflow at hook 3 [ 612.351434][T21656] syzkaller0: entered promiscuous mode [ 612.351457][T21656] syzkaller0: entered allmulticast mode [ 612.888654][T21676] IPVS: persistence engine module ip_vs_pe_À not found [ 613.027992][T21673] __nla_validate_parse: 4 callbacks suppressed [ 613.028015][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 613.083180][T21675] syzkaller0: entered promiscuous mode [ 613.083207][T21675] syzkaller0: entered allmulticast mode [ 613.111776][T21698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.115455][T21672] tipc: Enabled bearer , priority 0 [ 613.284272][T21670] tipc: Resetting bearer [ 613.344055][T21670] tipc: Disabling bearer [ 613.464147][T21707] bridge_slave_1 (unregistering): left allmulticast mode [ 613.464177][T21707] bridge_slave_1 (unregistering): left promiscuous mode [ 613.464257][T21707] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.604826][T21692] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4054'. [ 613.617941][T21715] netlink: 'syz.4.4059': attribute type 2 has an invalid length. [ 613.617964][T21715] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4059'. [ 613.619355][T21715] netlink: 'syz.4.4059': attribute type 39 has an invalid length. [ 613.941784][T21726] xt_hashlimit: size too large, truncated to 1048576 [ 614.139933][T21735] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.140061][T21735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.142030][T21735] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.142168][T21735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.255315][T21733] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.256320][T21735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.280982][T21735] batman_adv: batadv0: Interface activated: macvtap1 [ 614.390217][T21742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4067'. [ 614.542815][T21747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4069'. [ 614.546343][T21748] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4068'. [ 615.871787][T21742] batadv0: entered promiscuous mode [ 615.874402][T21742] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 615.875360][T21742] batadv0: left promiscuous mode [ 616.845493][ T30] audit: type=1800 audit(1789714080.510:8): pid=21766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4072" name="memory.events" dev="tmpfs" ino=1055 res=0 errno=0 [ 616.847499][ T30] audit: type=1804 audit(1789714080.520:9): pid=21766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4072" name="/newroot/202/memory.events" dev="tmpfs" ino=1055 res=1 errno=0 [ 617.316999][T21781] netlink: 'syz.4.4075': attribute type 2 has an invalid length. [ 617.317027][T21781] netlink: 'syz.4.4075': attribute type 2 has an invalid length. [ 619.779641][T21780] netlink: 'syz.4.4075': attribute type 12 has an invalid length. [ 619.779664][T21780] netlink: 'syz.4.4075': attribute type 29 has an invalid length. [ 619.779678][T21780] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4075'. [ 619.779696][T21780] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4075'. [ 619.982195][T21797] tipc: Enabling of bearer rejected, failed to enable media [ 619.997401][T21800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4080'. [ 620.041720][T21800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4080'. [ 620.041761][T21800] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 620.169135][T21807] netlink: 'syz.1.4081': attribute type 361 has an invalid length. [ 620.749801][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4094'. [ 620.972017][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'. [ 620.972054][T21848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4098'. [ 620.998319][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4098'. [ 620.998358][T21848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4098'. [ 621.280713][T21864] netlink: 'syz.1.4103': attribute type 12 has an invalid length. [ 621.280745][T21864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4103'. [ 621.428124][T21869] ipvlan2: entered promiscuous mode [ 621.567903][T21880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.689195][ T8424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.689216][ T8424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.987404][T21908] netlink: 'syz.1.4112': attribute type 1 has an invalid length. [ 622.261110][T21925] netlink: 'syz.4.4122': attribute type 29 has an invalid length. [ 622.352656][T21933] netlink: 'syz.4.4123': attribute type 7 has an invalid length. [ 622.352678][T21933] netlink: 'syz.4.4123': attribute type 8 has an invalid length. [ 623.782149][T22013] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 624.019703][T22025] openvswitch: ovs-system: Dropping previously announced user features [ 624.046278][T22027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.054426][T22025] netlink: 'syz.3.4155': attribute type 12 has an invalid length. [ 624.440435][T22049] dummy0: entered allmulticast mode [ 624.440915][T22049] syzkaller0: entered promiscuous mode [ 624.440934][T22049] syzkaller0: entered allmulticast mode [ 624.471950][T22047] dummy0: left allmulticast mode [ 624.846461][T22071] __nla_validate_parse: 16 callbacks suppressed [ 624.846489][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4164'. [ 624.906513][T22075] netlink: 404 bytes leftover after parsing attributes in process `syz.1.4166'. [ 624.985443][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4167'. [ 624.985474][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4167'. [ 624.986360][T22075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4166'. [ 624.989685][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4167'. [ 624.989717][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4167'. [ 625.398919][T22100] syzkaller0: entered promiscuous mode [ 625.398938][T22100] syzkaller0: entered allmulticast mode [ 627.659416][T22059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.116201][T22124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4177'. [ 629.785042][T22141] xt_TPROXY: Can be used only with -p tcp or -p udp [ 629.805084][T22141] netlink: 'syz.0.4182': attribute type 3 has an invalid length. [ 630.078413][T22156] bridge0: port 2(veth1_virt_wifi) entered blocking state [ 630.080877][T22156] bridge0: port 2(veth1_virt_wifi) entered disabled state [ 630.081045][T22156] veth1_virt_wifi: entered allmulticast mode [ 630.085734][T22156] veth1_virt_wifi: left allmulticast mode [ 630.807781][T22199] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4195'. [ 630.965276][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.965483][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.965663][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.965842][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.966014][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.966182][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.980119][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.980302][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 630.980463][T22202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4196'. [ 631.490094][T22229] syzkaller1: entered promiscuous mode [ 631.490117][T22229] syzkaller1: entered allmulticast mode [ 631.625531][T22239] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.691308][T22239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.724801][T22239] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 631.758899][T22241] netlink: 'syz.1.4206': attribute type 3 has an invalid length. [ 631.759184][T22241] netlink: 'syz.1.4206': attribute type 3 has an invalid length. [ 631.847439][T13163] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.847487][T13163] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.847520][T13163] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.847553][T13163] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.868910][T22249] Cannot find map_set index 2 as target [ 631.879731][T22247] Cannot find map_set index 2 as target [ 631.920767][T22250] netlink: 'syz.4.4205': attribute type 29 has an invalid length. [ 631.924243][T22250] netlink: 'syz.4.4205': attribute type 29 has an invalid length. [ 632.104444][T22247] bond5: option primary_reselect: invalid value (6) [ 632.107356][T22247] bond5 (unregistering): Released all slaves [ 632.611137][T22266] netlink: 'syz.5.4211': attribute type 8 has an invalid length. [ 632.611399][T22266] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.612121][T22266] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.934611][T22289] syzkaller0: entered promiscuous mode [ 632.934633][T22289] syzkaller0: entered allmulticast mode [ 633.083783][T22295] syzkaller0: entered promiscuous mode [ 633.083806][T22295] syzkaller0: entered allmulticast mode [ 633.143766][T22295] tipc: Enabled bearer , priority 0 [ 633.155886][T22294] tipc: Resetting bearer [ 633.191118][T22294] tipc: Disabling bearer [ 633.219667][T22303] syzkaller0: entered promiscuous mode [ 633.219690][T22303] syzkaller0: entered allmulticast mode [ 633.274378][T22305] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 633.310078][T22303] tipc: Enabled bearer , priority 0 [ 633.324154][T22302] tipc: Resetting bearer [ 633.370819][T22302] tipc: Disabling bearer [ 634.055722][T22323] sctp: [Deprecated]: syz.3.4228 (pid 22323) Use of int in maxseg socket option. [ 634.055722][T22323] Use struct sctp_assoc_value instead [ 634.520698][T22340] x_tables: duplicate underflow at hook 3 [ 634.918907][T22344] IPVS: Scheduler module ip_vs_sip not found [ 634.961479][T22348] syzkaller0: entered promiscuous mode [ 634.961502][T22348] syzkaller0: entered allmulticast mode [ 635.086900][T13163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.087092][T13168] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.087125][T13168] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.087156][T13168] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.905149][T22392] FAULT_INJECTION: forcing a failure. [ 635.905149][T22392] name failslab, interval 1, probability 0, space 0, times 0 [ 635.905189][T22392] CPU: 0 UID: 0 PID: 22392 Comm: syz.3.4255 Not tainted syzkaller #0 PREEMPT(full) [ 635.905227][T22392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.905240][T22392] Call Trace: [ 635.905249][T22392] [ 635.905258][T22392] dump_stack_lvl+0xe8/0x150 [ 635.905292][T22392] should_fail_ex+0x410/0x560 [ 635.905335][T22392] should_failslab+0xa8/0x100 [ 635.905362][T22392] __kvmalloc_node_noprof+0x176/0x820 [ 635.905387][T22392] ? __kvmalloc_node_noprof+0x345/0x820 [ 635.905409][T22392] ? bpf_compute_scc+0x106/0xb10 [ 635.905428][T22392] ? bpf_compute_scc+0x106/0xb10 [ 635.905454][T22392] bpf_compute_scc+0x106/0xb10 [ 635.905492][T22392] bpf_check+0x25c9/0x2e10 [ 635.905525][T22392] ? ktime_get_with_offset+0x93/0x2d0 [ 635.905554][T22392] ? __pfx_bpf_check+0x10/0x10 [ 635.905578][T22392] ? bpf_obj_name_cpy+0x194/0x1e0 [ 635.905610][T22392] bpf_prog_load+0x14d6/0x1c20 [ 635.905645][T22392] ? __pfx_bpf_prog_load+0x10/0x10 [ 635.905692][T22392] __sys_bpf+0xd0d/0xd90 [ 635.905721][T22392] ? __pfx___sys_bpf+0x10/0x10 [ 635.905753][T22392] ? __fget_files+0x2a/0x420 [ 635.905795][T22392] ? ksys_write+0x242/0x270 [ 635.905826][T22392] ? __pfx_ksys_write+0x10/0x10 [ 635.905860][T22392] __x64_sys_bpf+0xba/0xd0 [ 635.905883][T22392] do_syscall_64+0x166/0x520 [ 635.905905][T22392] ? trace_irq_disable+0x3b/0x140 [ 635.905924][T22392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.905945][T22392] ? clear_bhb_loop+0x70/0xc0 [ 635.905970][T22392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.905990][T22392] RIP: 0033:0x7fd29319e159 [ 635.906009][T22392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.906026][T22392] RSP: 002b:00007fd2940b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.906050][T22392] RAX: ffffffffffffffda RBX: 00007fd293425fa0 RCX: 00007fd29319e159 [ 635.906065][T22392] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 635.906078][T22392] RBP: 00007fd2940b2090 R08: 0000000000000000 R09: 0000000000000000 [ 635.906091][T22392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 635.906103][T22392] R13: 00007fd293426038 R14: 00007fd293425fa0 R15: 00007fff4b028648 [ 635.906134][T22392] [ 636.072298][T22401] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 636.931320][T22437] __nla_validate_parse: 38 callbacks suppressed [ 636.931344][T22437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4267'. [ 636.936449][T22435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4267'. [ 637.086516][T22445] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4268'. [ 637.101608][T22446] syzkaller0: entered promiscuous mode [ 637.101632][T22446] syzkaller0: entered allmulticast mode [ 637.203213][T22446] tipc: Enabled bearer , priority 0 [ 637.221265][T22444] tipc: Resetting bearer [ 637.225130][T22457] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4271'. [ 637.268935][T22444] tipc: Disabling bearer [ 637.272733][T22460] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4271'. [ 637.480300][T22469] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 637.638692][T22478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4277'. [ 637.972730][T22495] netlink: 'syz.3.4282': attribute type 1 has an invalid length. [ 637.972750][T22495] netlink: 'syz.3.4282': attribute type 2 has an invalid length. [ 638.098021][T22493] vlan2: entered promiscuous mode [ 638.098045][T22493] bridge0: entered promiscuous mode [ 638.686167][T22537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4285'. [ 638.686587][T22537] netlink: 'syz.3.4285': attribute type 5 has an invalid length. [ 638.686604][T22537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4285'. [ 638.846340][T22541] syzkaller0: entered promiscuous mode [ 638.846364][T22541] syzkaller0: entered allmulticast mode [ 638.867342][T22541] 0: reclassify loop, rule prio 0, protocol 700 [ 638.869704][T22541] netlink: 784 bytes leftover after parsing attributes in process `syz.1.4286'. [ 638.869784][T22541] netlink: 784 bytes leftover after parsing attributes in process `syz.1.4286'. [ 638.874584][T22541] netlink: 'syz.1.4286': attribute type 11 has an invalid length. [ 638.975539][T22545] FAULT_INJECTION: forcing a failure. [ 638.975539][T22545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.975561][T22545] CPU: 0 UID: 0 PID: 22545 Comm: syz.4.4288 Not tainted syzkaller #0 PREEMPT(full) [ 638.975574][T22545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.975581][T22545] Call Trace: [ 638.975587][T22545] [ 638.975592][T22545] dump_stack_lvl+0xe8/0x150 [ 638.975612][T22545] should_fail_ex+0x410/0x560 [ 638.975628][T22545] _copy_from_user+0x2d/0xb0 [ 638.975723][T22545] kstrtouint_from_user+0xd6/0x180 [ 638.975738][T22545] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 638.975754][T22545] ? lock_acquire+0x115/0x350 [ 638.975768][T22545] proc_fail_nth_write+0x8e/0x210 [ 638.975791][T22545] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 638.975811][T22545] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 638.975826][T22545] vfs_write+0x296/0xba0 [ 638.975847][T22545] ? __pfx_vfs_write+0x10/0x10 [ 638.975863][T22545] ? __fget_files+0x2a/0x420 [ 638.975879][T22545] ? __fget_files+0x3a2/0x420 [ 638.975892][T22545] ? __fget_files+0x2a/0x420 [ 638.975910][T22545] ksys_write+0x150/0x270 [ 638.975927][T22545] ? __pfx_ksys_write+0x10/0x10 [ 638.975954][T22545] do_syscall_64+0x166/0x520 [ 638.975966][T22545] ? trace_irq_disable+0x3b/0x140 [ 638.975977][T22545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.975988][T22545] ? clear_bhb_loop+0x70/0xc0 [ 638.976002][T22545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.976013][T22545] RIP: 0033:0x7fad5015e98e [ 638.976024][T22545] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 638.976034][T22545] RSP: 002b:00007fad50fcafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 638.976046][T22545] RAX: ffffffffffffffda RBX: 00007fad50fcb6c0 RCX: 00007fad5015e98e [ 638.976054][T22545] RDX: 0000000000000001 RSI: 00007fad50fcb0a0 RDI: 0000000000000005 [ 638.976061][T22545] RBP: 00007fad50fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 638.976068][T22545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.976074][T22545] R13: 00007fad50426038 R14: 00007fad50425fa0 R15: 00007fff0a4399c8 [ 638.976091][T22545] [ 639.088950][T22547] Bluetooth: MGMT ver 1.23 [ 639.275223][T22558] ip_tables: iptables: counters copy to user failed while replacing table [ 639.453959][T22574] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 639.735686][T22587] netlink: 'syz.3.4298': attribute type 2 has an invalid length. [ 639.961016][T22599] netlink: 'syz.3.4303': attribute type 7 has an invalid length. [ 639.961035][T22599] netlink: 'syz.3.4303': attribute type 8 has an invalid length. [ 639.970045][T22604] netlink: 'syz.3.4303': attribute type 7 has an invalid length. [ 639.970065][T22604] netlink: 'syz.3.4303': attribute type 8 has an invalid length. [ 640.000922][T22601] netlink: 'syz.5.4304': attribute type 1 has an invalid length. [ 640.059897][T22601] bond4: entered promiscuous mode [ 640.060278][T22601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.822841][T22647] gretap0: entered promiscuous mode [ 640.825254][T22647] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.825362][T22647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.825661][T22647] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.825836][T22647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.006459][T22655] netlink: 'syz.3.4316': attribute type 10 has an invalid length. [ 642.067107][T22709] sctp: [Deprecated]: syz.1.4329 (pid 22709) Use of int in maxseg socket option. [ 642.067107][T22709] Use struct sctp_assoc_value instead [ 642.530346][T22721] __nla_validate_parse: 73 callbacks suppressed [ 642.530371][T22721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4332'. [ 642.740750][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051f78000: rx timeout, send abort [ 642.828728][T22741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4336'. [ 643.241117][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051f78000: abort rx timeout. Force session deactivation [ 643.243656][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a37b000: rx timeout, send abort [ 643.562945][T22761] wlan0 speed is unknown, defaulting to 1000 [ 643.743702][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a37b000: abort rx timeout. Force session deactivation [ 643.878626][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4343'. [ 643.956218][T22770] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 644.192371][T22775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 644.196577][T22772] bridge0: port 1(vlan2) entered blocking state [ 644.199621][T22772] bridge0: port 1(vlan2) entered disabled state [ 644.199774][T22772] vlan2: entered allmulticast mode [ 644.199789][T22772] geneve0: entered allmulticast mode [ 644.201573][T22772] vlan2: entered promiscuous mode [ 644.201588][T22772] geneve0: entered promiscuous mode [ 644.204104][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 644.425232][T22800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4349'. [ 644.751048][T22814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4353'. [ 644.829023][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4354'. [ 644.984010][T22822] validate_nla: 4 callbacks suppressed [ 644.984030][T22822] netlink: 'syz.3.4355': attribute type 7 has an invalid length. [ 658.237258][T22843] sctp: [Deprecated]: syz.3.4365 (pid 22843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.237258][T22843] Use struct sctp_sack_info instead [ 658.464104][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4364'. [ 658.487489][T22852] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 658.489061][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 658.491465][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 658.496325][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 658.529395][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 658.534415][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 658.593465][T22857] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 658.609516][T22857] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4367'. [ 658.730602][T22860] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 658.747695][T22863] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 658.754739][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4369'. [ 658.825528][T22868] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 659.491282][T22854] wlan0 speed is unknown, defaulting to 1000 [ 660.213841][T22854] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.214012][T22854] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.214148][T22854] bridge_slave_0: entered allmulticast mode [ 660.215972][T22854] bridge_slave_0: entered promiscuous mode [ 660.245502][T22854] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.245674][T22854] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.246104][T22854] bridge_slave_1: entered allmulticast mode [ 660.254128][T22909] netlink: 292 bytes leftover after parsing attributes in process `syz.5.4378'. [ 660.257754][T22909] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4378'. [ 660.286346][T22854] bridge_slave_1: entered promiscuous mode [ 660.316397][T22912] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 660.331385][T22909] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4378'. [ 660.418251][T22854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.421659][T22854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.490970][T22854] team0: Port device team_slave_0 added [ 660.495400][T22854] team0: Port device team_slave_1 added [ 660.508901][T22918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.522310][T22918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.561893][T22854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.561912][T22854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.561939][T22854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.566065][T22854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.566081][T22854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.566107][T22854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.647511][ T52] Bluetooth: hci6: command tx timeout [ 660.827601][T22854] hsr_slave_0: entered promiscuous mode [ 660.830695][T22854] hsr_slave_1: entered promiscuous mode [ 660.831417][T22854] debugfs: 'hsr0' already exists in 'hsr' [ 660.831437][T22854] Cannot create hsr debugfs directory [ 662.729126][ T52] Bluetooth: hci6: command tx timeout [ 662.790711][T22947] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4387'. [ 662.865358][T22854] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.882399][T22854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 662.884825][T22854] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 662.889714][T22947] netlink: 'syz.5.4387': attribute type 1 has an invalid length. [ 662.889733][T22947] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4387'. [ 662.933875][T22854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 662.934751][T22854] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 662.978323][T22854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 663.003895][T22854] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 663.016566][T22854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 663.273039][T22854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.319514][T22854] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.343357][T13163] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.343463][T13163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.378990][T13161] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.379113][T13161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.610327][T22985] netlink: 'syz.4.4395': attribute type 21 has an invalid length. [ 663.610351][T22985] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4395'. [ 663.610420][T22985] netlink: 'syz.4.4395': attribute type 4 has an invalid length. [ 663.610434][T22985] netlink: 'syz.4.4395': attribute type 3 has an invalid length. [ 663.610446][T22985] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4395'. [ 663.755661][T22997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 664.773316][T22854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.803506][ T52] Bluetooth: hci6: command tx timeout [ 665.018144][T23028] netlink: 95 bytes leftover after parsing attributes in process `syz.5.4406'. [ 665.136478][T23019] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 665.154740][T23031] ip_tables: iptables: counters copy to user failed while replacing table [ 665.441173][T23042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4409'. [ 665.565178][T22854] veth0_vlan: entered promiscuous mode [ 665.595409][T22854] veth1_vlan: entered promiscuous mode [ 665.731600][T23045] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4410'. [ 665.757279][T22854] veth0_macvtap: entered promiscuous mode [ 665.763748][T22854] veth1_macvtap: entered promiscuous mode [ 665.807889][T22854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.832144][T22854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.874322][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.874536][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.958798][ T1276] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.958842][ T1276] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.074768][T13161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.074789][T13161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.126262][T13161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.126284][T13161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.295969][T23056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4413'. [ 666.502794][T23063] netlink: 'syz.6.4362': attribute type 2 has an invalid length. [ 666.648903][T23082] netlink: 'syz.3.4417': attribute type 1 has an invalid length. [ 666.687388][T23087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4418'. [ 666.760405][T23082] bond5: option mode: invalid value (7) [ 666.762057][T23082] bond5 (unregistering): Released all slaves [ 666.877134][ T52] Bluetooth: hci6: command tx timeout [ 666.877725][T23093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4419'. [ 667.003704][T23099] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 667.033923][T23095] can: request_module (can-proto-0) failed. [ 667.432454][T23102] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.449678][T23102] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.550604][T23114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 667.611041][T23117] IPv6: addrconf: prefix option has invalid lifetime [ 667.635712][T23109] netlink: 'syz.4.4423': attribute type 1 has an invalid length. [ 667.659971][T23109] tipc: Enabling of bearer rejected, already enabled [ 668.292186][T23150] ip6t_rt: too many addresses specified [ 668.357459][T23145] ip_tables: iptables: counters copy to user failed while replacing table [ 668.412335][T23154] xt_TPROXY: Can be used only with -p tcp or -p udp [ 668.470220][T23159] syzkaller0: entered promiscuous mode [ 668.470244][T23159] syzkaller0: entered allmulticast mode [ 668.556642][T23159] tipc: Enabled bearer , priority 0 [ 668.571264][T23158] tipc: Resetting bearer [ 668.630352][T23168] FAULT_INJECTION: forcing a failure. [ 668.630352][T23168] name failslab, interval 1, probability 0, space 0, times 0 [ 668.630386][T23168] CPU: 1 UID: 0 PID: 23168 Comm: syz.4.4443 Not tainted syzkaller #0 PREEMPT(full) [ 668.630409][T23168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.630421][T23168] Call Trace: [ 668.630429][T23168] [ 668.630438][T23168] dump_stack_lvl+0xe8/0x150 [ 668.630472][T23168] should_fail_ex+0x410/0x560 [ 668.630500][T23168] should_failslab+0xa8/0x100 [ 668.630536][T23168] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 668.630565][T23168] ? __lock_acquire+0x747/0x2de0 [ 668.630586][T23168] ? __d_alloc+0x37/0x6f0 [ 668.630613][T23168] ? __d_alloc+0x37/0x6f0 [ 668.630646][T23168] __d_alloc+0x37/0x6f0 [ 668.630672][T23168] ? __lock_acquire+0x747/0x2de0 [ 668.630697][T23168] d_alloc_pseudo+0x21/0xc0 [ 668.630727][T23168] alloc_path_pseudo+0x107/0x220 [ 668.630756][T23168] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 668.630791][T23168] alloc_file_pseudo+0xa8/0x1e0 [ 668.630817][T23168] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 668.630852][T23168] anon_inode_getfd+0xc8/0x1f0 [ 668.630913][T23168] bpf_prog_load+0x1612/0x1c20 [ 668.630950][T23168] ? __pfx_bpf_prog_load+0x10/0x10 [ 668.630999][T23168] __sys_bpf+0xd0d/0xd90 [ 668.631029][T23168] ? __pfx___sys_bpf+0x10/0x10 [ 668.631062][T23168] ? __fget_files+0x2a/0x420 [ 668.631105][T23168] ? ksys_write+0x242/0x270 [ 668.631136][T23168] ? __pfx_ksys_write+0x10/0x10 [ 668.631170][T23168] __x64_sys_bpf+0xba/0xd0 [ 668.631193][T23168] do_syscall_64+0x166/0x520 [ 668.631215][T23168] ? trace_irq_disable+0x3b/0x140 [ 668.631235][T23168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.631255][T23168] ? clear_bhb_loop+0x70/0xc0 [ 668.631279][T23168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.631299][T23168] RIP: 0033:0x7fad5019e159 [ 668.631315][T23168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.631332][T23168] RSP: 002b:00007fad50fcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 668.631354][T23168] RAX: ffffffffffffffda RBX: 00007fad50425fa0 RCX: 00007fad5019e159 [ 668.631368][T23168] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 668.631382][T23168] RBP: 00007fad50fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 668.631395][T23168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 668.631408][T23168] R13: 00007fad50426038 R14: 00007fad50425fa0 R15: 00007fff0a4399c8 [ 668.631440][T23168] [ 668.736343][T23172] netlink: 'syz.5.4441': attribute type 4 has an invalid length. [ 669.035142][T23158] tipc: Disabling bearer [ 669.573928][T23202] __nla_validate_parse: 3 callbacks suppressed [ 669.573950][T23202] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4451'. [ 669.615204][T23205] vlan3: entered allmulticast mode [ 669.615240][T23205] dummy0: entered allmulticast mode [ 669.681080][T23211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4454'. [ 669.718389][T23211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4454'. [ 669.763092][T23211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4454'. [ 669.975785][T23226] syzkaller0: entered promiscuous mode [ 669.975810][T23226] syzkaller0: entered allmulticast mode [ 670.780051][T23252] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4462'. [ 670.895693][ T30] audit: type=1800 audit(1789714134.560:10): pid=23259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4464" name="memory.events" dev="tmpfs" ino=1499 res=0 errno=0 [ 671.093618][T23264] xt_REDIRECT: bad MAP_IPS. [ 671.304364][T23278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4468'. [ 671.322927][T23278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.752425][T23295] C: renamed from veth1_to_team (while UP) [ 671.756148][T23295] netlink: 'syz.5.4472': attribute type 1 has an invalid length. [ 671.756169][T23295] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4472'. [ 671.756186][T23295] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 671.864148][T23316] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4477'. [ 672.263111][T23327] FAULT_INJECTION: forcing a failure. [ 672.263111][T23327] name failslab, interval 1, probability 0, space 0, times 0 [ 672.263145][T23327] CPU: 0 UID: 0 PID: 23327 Comm: syz.6.4481 Not tainted syzkaller #0 PREEMPT(full) [ 672.263166][T23327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.263177][T23327] Call Trace: [ 672.263185][T23327] [ 672.263193][T23327] dump_stack_lvl+0xe8/0x150 [ 672.263226][T23327] should_fail_ex+0x410/0x560 [ 672.263253][T23327] should_failslab+0xa8/0x100 [ 672.263276][T23327] ? alloc_empty_file+0x5b/0x1d0 [ 672.263299][T23327] kmem_cache_alloc_noprof+0xa1/0x600 [ 672.263336][T23327] ? alloc_empty_file+0x5b/0x1d0 [ 672.263366][T23327] alloc_empty_file+0x5b/0x1d0 [ 672.263390][T23327] alloc_file_pseudo+0x115/0x1e0 [ 672.263417][T23327] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 672.263451][T23327] anon_inode_getfd+0xc8/0x1f0 [ 672.263478][T23327] bpf_prog_load+0x1612/0x1c20 [ 672.263515][T23327] ? __pfx_bpf_prog_load+0x10/0x10 [ 672.263561][T23327] __sys_bpf+0xd0d/0xd90 [ 672.263590][T23327] ? __pfx___sys_bpf+0x10/0x10 [ 672.263619][T23327] ? __fget_files+0x2a/0x420 [ 672.263666][T23327] ? ksys_write+0x242/0x270 [ 672.263696][T23327] ? __pfx_ksys_write+0x10/0x10 [ 672.263730][T23327] __x64_sys_bpf+0xba/0xd0 [ 672.263754][T23327] do_syscall_64+0x166/0x520 [ 672.263775][T23327] ? trace_irq_disable+0x3b/0x140 [ 672.263793][T23327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.263814][T23327] ? clear_bhb_loop+0x70/0xc0 [ 672.263838][T23327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.263858][T23327] RIP: 0033:0x7f0d0579e159 [ 672.263878][T23327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.263896][T23327] RSP: 002b:00007f0d065d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 672.263919][T23327] RAX: ffffffffffffffda RBX: 00007f0d05a25fa0 RCX: 00007f0d0579e159 [ 672.263933][T23327] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 672.263946][T23327] RBP: 00007f0d065d1090 R08: 0000000000000000 R09: 0000000000000000 [ 672.263959][T23327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 672.263973][T23327] R13: 00007f0d05a26038 R14: 00007f0d05a25fa0 R15: 00007ffda8b6b7a8 [ 672.264004][T23327] [ 672.520015][T23332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4484'. [ 672.540869][ T7909] team_slave_0: entered promiscuous mode [ 672.540906][ T7909] team_slave_1: entered promiscuous mode [ 672.563765][T23341] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 672.565003][T23342] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 672.602986][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4486'. [ 672.638216][T23341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 672.727879][T23345] bond5: (slave gretap1): making interface the new active one [ 672.735964][T23345] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 672.765812][ T7888] team_slave_0: left promiscuous mode [ 672.765868][ T7888] team_slave_1: left promiscuous mode [ 672.896157][T23351] netlink: 'syz.1.4490': attribute type 1 has an invalid length. [ 673.340393][T23383] macvlan0: entered allmulticast mode [ 673.346446][T23378] FAULT_INJECTION: forcing a failure. [ 673.346446][T23378] name failslab, interval 1, probability 0, space 0, times 0 [ 673.346480][T23378] CPU: 0 UID: 0 PID: 23378 Comm: syz.6.4496 Not tainted syzkaller #0 PREEMPT(full) [ 673.346503][T23378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.346514][T23378] Call Trace: [ 673.346522][T23378] [ 673.346532][T23378] dump_stack_lvl+0xe8/0x150 [ 673.346565][T23378] should_fail_ex+0x410/0x560 [ 673.346592][T23378] should_failslab+0xa8/0x100 [ 673.346618][T23378] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 673.346648][T23378] ? __lock_acquire+0x747/0x2de0 [ 673.346670][T23378] ? __d_alloc+0x37/0x6f0 [ 673.346694][T23378] ? __d_alloc+0x37/0x6f0 [ 673.346724][T23378] __d_alloc+0x37/0x6f0 [ 673.346757][T23378] ? __lock_acquire+0x747/0x2de0 [ 673.346781][T23378] d_alloc_pseudo+0x21/0xc0 [ 673.346810][T23378] alloc_path_pseudo+0x107/0x220 [ 673.346839][T23378] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 673.346874][T23378] alloc_file_pseudo+0xa8/0x1e0 [ 673.346902][T23378] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 673.346938][T23378] anon_inode_getfd+0xc8/0x1f0 [ 673.346967][T23378] bpf_prog_load+0x1612/0x1c20 [ 673.347003][T23378] ? __pfx_bpf_prog_load+0x10/0x10 [ 673.347051][T23378] __sys_bpf+0xd0d/0xd90 [ 673.347082][T23378] ? __pfx___sys_bpf+0x10/0x10 [ 673.347116][T23378] ? __fget_files+0x2a/0x420 [ 673.347160][T23378] ? ksys_write+0x242/0x270 [ 673.347192][T23378] ? __pfx_ksys_write+0x10/0x10 [ 673.347226][T23378] __x64_sys_bpf+0xba/0xd0 [ 673.347249][T23378] do_syscall_64+0x166/0x520 [ 673.347271][T23378] ? trace_irq_disable+0x3b/0x140 [ 673.347290][T23378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.347311][T23378] ? clear_bhb_loop+0x70/0xc0 [ 673.347336][T23378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.347356][T23378] RIP: 0033:0x7f0d0579e159 [ 673.347375][T23378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.347392][T23378] RSP: 002b:00007f0d065d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 673.347414][T23378] RAX: ffffffffffffffda RBX: 00007f0d05a25fa0 RCX: 00007f0d0579e159 [ 673.347430][T23378] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 673.347444][T23378] RBP: 00007f0d065d1090 R08: 0000000000000000 R09: 0000000000000000 [ 673.347456][T23378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.347469][T23378] R13: 00007f0d05a26038 R14: 00007f0d05a25fa0 R15: 00007ffda8b6b7a8 [ 673.347501][T23378] [ 673.399573][T23386] nft_compat: unsupported protocol 0 [ 673.477364][T23389] syzkaller0: entered promiscuous mode [ 673.477386][T23389] syzkaller0: entered allmulticast mode [ 673.722554][T23389] tipc: Enabled bearer , priority 0 [ 673.736256][T23388] tipc: Resetting bearer [ 673.821947][T23388] tipc: Disabling bearer [ 674.621326][T23447] __nla_validate_parse: 9 callbacks suppressed [ 674.621345][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 674.621359][T23447] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4516'. [ 674.678022][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4516'. [ 674.863198][T23459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 674.863219][T23459] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4516'. [ 674.870727][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4516'. [ 674.879878][T23447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 674.954723][T23447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 675.042515][T23454] netlink: 'syz.3.4518': attribute type 25 has an invalid length. [ 675.042537][T23454] netlink: 'syz.3.4518': attribute type 3 has an invalid length. [ 675.042550][T23454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4518'. [ 675.139596][T23478] tipc: Resetting bearer [ 675.212416][T23478] tipc: Disabling bearer [ 675.843260][T23505] netlink: 'syz.1.4529': attribute type 5 has an invalid length. [ 675.847620][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4530'. [ 675.965952][T23506] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003 [ 676.333059][T23524] netlink: 'syz.5.4535': attribute type 1 has an invalid length. [ 676.365996][T23524] 8021q: adding VLAN 0 to HW filter on device bond6 [ 676.369954][T23521] tipc: Invalid UDP bearer configuration [ 676.370001][T23521] tipc: Enabling of bearer rejected, failed to enable media [ 676.500476][T23533] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 676.876551][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4545'. [ 676.876585][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4545'. [ 676.949107][T23565] pim6reg1: entered promiscuous mode [ 676.949131][T23565] pim6reg1: entered allmulticast mode [ 678.546029][T23616] 8021q: adding VLAN 0 to HW filter on device .` [ 678.568298][T23616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.630669][T23625] netlink: 'syz.4.4563': attribute type 3 has an invalid length. [ 678.672006][T23616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 678.672033][T23616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.689063][T23616] veth1_vlan: left promiscuous mode [ 678.706179][T23616] veth0_vlan: left promiscuous mode [ 678.714450][T23616] veth0_vlan: entered promiscuous mode [ 678.715407][T23616] tipc: Resetting bearer [ 678.728403][T23616] veth1_vlan: entered promiscuous mode [ 678.728425][T23616] veth1_vlan: entered allmulticast mode [ 678.750928][T23616] 8021q: adding VLAN 0 to HW filter on device €Â [ 678.751978][T23616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.753397][T23616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 678.754888][T23616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.787922][T23616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.806564][T23616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 678.830099][T23616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 678.839617][T23616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.881042][T23616] bridge0: port 1(vlan2) entered blocking state [ 678.881159][T23616] bridge0: port 1(vlan2) entered forwarding state [ 678.963698][T23619] pim6reg: entered allmulticast mode [ 679.089517][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.098518][T13170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.100140][T13170] netdevsim netdevsim3 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.100882][T13170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.101036][T13170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.216889][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.357938][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.594741][T23662] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 679.642082][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 679.671085][T23668] __nla_validate_parse: 9 callbacks suppressed [ 679.671106][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4573'. [ 679.671674][T23668] tipc: Resetting bearer [ 679.721258][T23668] tipc: Disabling bearer [ 679.919606][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.042830][T23675] xt_recent: Unsupported userspace flags (000000c5) [ 680.045624][T23675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.352438][T23682] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4580'. [ 680.474632][T23689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4583'. [ 680.488878][T23689] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.4583'. [ 680.488938][T23689] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.4583'. [ 680.555670][T23692] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4584'. [ 680.735706][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.736427][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.869698][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 680.871593][T23712] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 680.871662][T23712] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 680.880704][T23712] netlink: 'syz.4.4592': attribute type 3 has an invalid length. [ 681.022338][T23706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4589'. [ 681.059955][T23720] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4594'. [ 681.198240][T23723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4595'. [ 681.204315][T23723] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4595'. [ 681.716410][T23751] openvswitch: netlink: IP tunnel dst address not specified [ 681.774275][T23753] bridge_slave_0: left allmulticast mode [ 681.774295][T23753] bridge_slave_0: left promiscuous mode [ 681.775591][T23753] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.820220][T23753] bridge_slave_1: left allmulticast mode [ 681.820246][T23753] bridge_slave_1: left promiscuous mode [ 681.820454][T23753] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.862427][T23753] bond0: (slave bond_slave_0): Releasing backup interface [ 681.879422][T23753] bond0: (slave bond_slave_1): Releasing backup interface [ 681.900686][T23753] team0: Port device team_slave_0 removed [ 681.915720][T23753] team0: Port device team_slave_1 removed [ 681.924545][T23753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.924568][T23753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.944325][T23753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.944347][T23753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.974073][T23761] netlink: 'syz.3.4606': attribute type 1 has an invalid length. [ 682.071731][T23761] bond5: option mode: invalid value (7) [ 682.078171][T23761] bond5 (unregistering): Released all slaves [ 682.201348][T23761] netlink: 'syz.3.4606': attribute type 10 has an invalid length. [ 682.224831][T23761] dummy0: entered promiscuous mode [ 682.570237][T23806] sctp: [Deprecated]: syz.3.4614 (pid 23806) Use of int in max_burst socket option. [ 682.570237][T23806] Use struct sctp_assoc_value instead [ 682.743176][T23810] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 682.743205][T23810] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 682.794595][T23821] gre1: entered allmulticast mode [ 682.921783][T23826] bond5: Removing last arp target with arp_interval on [ 683.341616][T23841] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 2, id = 0 [ 683.646126][T23854] syzkaller0: entered promiscuous mode [ 683.646141][T23854] syzkaller0: entered allmulticast mode [ 684.558725][ C1] net_ratelimit: 2 callbacks suppressed [ 684.558840][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.194389][T23785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.481009][T23865] netlink: 'syz.4.4630': attribute type 4 has an invalid length. [ 685.508989][T23865] netlink: 'syz.4.4630': attribute type 4 has an invalid length. [ 685.851048][T23888] __nla_validate_parse: 11 callbacks suppressed [ 685.853312][T23888] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4635'. [ 685.853581][T23887] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4635'. [ 686.262427][T23899] syzkaller0: entered promiscuous mode [ 686.262452][T23899] syzkaller0: entered allmulticast mode [ 686.312886][T23899] nbd: couldn't find a device at index 0 [ 686.362142][T23904] netlink: 'syz.1.4641': attribute type 1 has an invalid length. [ 686.633754][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4643'. [ 687.008733][T13168] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 687.008804][T13168] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 687.052931][T13168] bond6: active interface up! [ 687.101574][T23935] tipc: Started in network mode [ 687.101594][T23935] tipc: Node identity ac14142f, cluster identity 4711 [ 687.102251][T23935] tipc: New replicast peer: 172.20.20.170 [ 687.102584][T23935] tipc: Enabled bearer , priority 10 [ 687.106027][T23935] tipc: New replicast peer: 0.0.0.0 [ 687.164138][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4648'. [ 687.164176][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4648'. [ 687.164207][T23935] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4648'. [ 687.280024][T23940] tipc: Enabled bearer , priority 20 [ 687.445174][T23946] bridge4: entered allmulticast mode [ 687.667967][T23960] wlan0 speed is unknown, defaulting to 1000 [ 688.063522][T23981] ¾x9ÿÿþ: renamed from bridge_slave_0 (while UP) [ 688.088135][T23978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4661'. [ 688.217238][ T7909] tipc: Node number set to 2886997039 [ 688.372085][T23999] netlink: 'syz.1.4665': attribute type 5 has an invalid length. [ 688.494268][T24002] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 691.351512][T24007] dummy0: entered allmulticast mode [ 691.840959][T24033] syzkaller0: entered promiscuous mode [ 691.840984][T24033] syzkaller0: entered allmulticast mode [ 691.899594][T24033] tipc: Enabled bearer , priority 0 [ 691.923270][T24032] tipc: Resetting bearer [ 691.991619][T24032] tipc: Disabling bearer [ 692.043238][T24035] syzkaller0: entered promiscuous mode [ 692.043262][T24035] syzkaller0: entered allmulticast mode [ 692.079378][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.632058][T24054] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 692.723526][T24057] ipt_rpfilter: unknown options [ 692.730977][T24057] netlink: 'syz.1.4681': attribute type 15 has an invalid length. [ 692.786339][T24057] netlink: 'syz.1.4681': attribute type 15 has an invalid length. [ 692.797846][ T13] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 692.797892][ T13] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 692.797925][ T13] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 692.797958][ T13] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 693.035894][T24063] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 693.073502][T24068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4685'. [ 693.134583][T24069] syzkaller0: entered promiscuous mode [ 693.134599][T24069] syzkaller0: entered allmulticast mode [ 693.235082][T24069] tipc: Enabled bearer , priority 0 [ 693.273365][T24066] tipc: Resetting bearer [ 693.378572][T24066] tipc: Disabling bearer [ 693.700683][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700707][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700720][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700732][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700745][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700757][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700770][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700782][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700795][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700808][T24091] tc action pedit unable to extract header offset for header type (0x5) [ 693.700830][T24091] 0: reclassify loop, rule prio 0, protocol 800 [ 694.061015][T24113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4700'. [ 694.090801][T24108] lo: left promiscuous mode [ 694.090823][T24108] lo: left allmulticast mode [ 694.198422][T24121] netlink: 'syz.1.4698': attribute type 7 has an invalid length. [ 694.198444][T24121] netlink: 'syz.1.4698': attribute type 8 has an invalid length. [ 694.232703][T24108] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.234858][T24108] bridge0: port 1(1¾x9ÿÿþ) entered disabled state [ 694.292795][T24108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.307766][T24108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.393260][T24108] tipc: Resetting bearer [ 694.394959][T24108] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 694.394975][T24108] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 694.460730][T24113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.460760][T24113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.462982][T24113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.463006][T24113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.465111][T24113] batman_adv: batadv0: Interface deactivated: macvtap1 [ 694.465133][T24113] batman_adv: batadv0: Removing interface: macvtap1 [ 694.548741][T13168] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.548777][T13168] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.554675][T13161] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.554710][T13161] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.554775][T13161] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.554800][T13161] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.559081][T13161] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 694.559113][T13161] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.896107][T24127] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 694.896138][T24127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 694.958853][T24128] tipc: Enabled bearer , priority 0 [ 695.224683][T24131] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4704'. [ 695.241687][T24131] dummy0 (unregistering): left allmulticast mode [ 695.911647][T24162] netlink: 'syz.6.4709': attribute type 23 has an invalid length. [ 695.911663][T24162] netlink: 'syz.6.4709': attribute type 6 has an invalid length. [ 695.911673][T24162] IPv6: NLM_F_CREATE should be specified when creating new route [ 696.250964][T24171] netlink: 'syz.6.4713': attribute type 3 has an invalid length. [ 696.254111][T24171] netlink: 'syz.6.4713': attribute type 1 has an invalid length. [ 696.402619][T24171] bond1: entered promiscuous mode [ 696.402901][T24171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.440065][T24184] netlink: 'syz.5.4716': attribute type 10 has an invalid length. [ 696.478970][T24180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.479365][T24180] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 696.479387][T24180] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 696.515490][T24180] bond1: (slave ipip0): making interface the new active one [ 696.515513][T24180] ipip0: entered promiscuous mode [ 696.533091][T24180] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 697.396785][T24207] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4722'. [ 697.827015][T24227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4725'. [ 697.860988][T24227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 698.230036][T24209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.873410][T24266] netlink: 'syz.1.4730': attribute type 4 has an invalid length. [ 698.940946][T24270] netlink: 'syz.6.4732': attribute type 1 has an invalid length. [ 698.940967][T24270] nbd: error processing sock list [ 698.941210][T24270] block nbd5: shutting down sockets [ 699.083904][T24274] netlink: 'syz.3.4735': attribute type 1 has an invalid length. [ 699.083926][T24274] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4735'. [ 699.123219][T24277] ip_tables: iptables: counters copy to user failed while replacing table [ 699.144913][T24277] syzkaller1: entered promiscuous mode [ 699.144936][T24277] syzkaller1: entered allmulticast mode [ 699.218060][T24270] ipvlan2: entered allmulticast mode [ 699.218079][T24270] macvlan1: entered allmulticast mode [ 699.218092][T24270] veth1_vlan: entered allmulticast mode [ 699.225624][T24270] batman_adv: batadv0: Adding interface: ipvlan2 [ 699.225643][T24270] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.225847][T24270] batman_adv: batadv0: Interface activated: ipvlan2 [ 699.577222][T24286] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4738'. [ 699.578849][T24286] nbd5: detected capacity change from 0 to 63 [ 699.594058][T24286] block nbd5: NBD_DISCONNECT [ 699.599601][T24286] block nbd5: Disconnected due to user request. [ 699.599625][T24286] block nbd5: shutting down sockets [ 699.613091][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 699.613404][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 699.621128][ C0] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 699.621203][ C0] Buffer I/O error on dev nbd5, logical block 1, async page read [ 699.621228][ C0] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 699.621284][ C0] Buffer I/O error on dev nbd5, logical block 2, async page read [ 699.621330][ C0] Buffer I/O error on dev nbd5, logical block 3, async page read [ 699.621792][ T2080] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 699.621820][ T2080] Buffer I/O error on dev nbd5, logical block 0, async page read [ 699.622063][ T2080] Buffer I/O error on dev nbd5, logical block 1, async page read [ 699.622080][ T2080] Buffer I/O error on dev nbd5, logical block 2, async page read [ 699.622094][ T2080] Buffer I/O error on dev nbd5, logical block 3, async page read [ 699.624917][ T2080] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 699.624945][ T2080] Buffer I/O error on dev nbd5, logical block 0, async page read [ 699.624962][ T2080] Buffer I/O error on dev nbd5, logical block 1, async page read [ 699.628692][ T2080] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 699.628869][ T2080] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 699.629038][ T2080] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 699.629199][ T2080] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 699.630534][ T2080] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 699.635438][T24004] ldm_validate_partition_table(): Disk read failed. [ 699.643701][T24004] Dev nbd5: unable to read RDB block 0 [ 699.649339][T24004] nbd5: unable to read partition table [ 699.797150][T24004] ldm_validate_partition_table(): Disk read failed. [ 699.797666][T24004] Dev nbd5: unable to read RDB block 0 [ 699.802998][T24004] nbd5: unable to read partition table [ 699.976993][T24295] wlan0 speed is unknown, defaulting to 1000 [ 700.088175][T24280] dummy0: left promiscuous mode [ 700.099863][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 700.166621][T24280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 700.726073][T24324] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 700.826619][T24337] netlink: 'syz.3.4750': attribute type 21 has an invalid length. [ 700.826642][T24337] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4750'. [ 700.853180][T24337] netlink: 'syz.3.4750': attribute type 4 has an invalid length. [ 700.853202][T24337] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4750'. [ 700.950009][T24342] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4751'. [ 700.950138][T24342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4751'. [ 700.960674][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.068955][T24296] netlink: 'syz.4.4741': attribute type 15 has an invalid length. [ 701.068980][T24296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4741'. [ 701.148519][T24296] netlink: 'syz.4.4741': attribute type 4 has an invalid length. [ 701.641278][T24374] netlink: 'syz.5.4757': attribute type 1 has an invalid length. [ 701.641299][T24374] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.4757'. [ 701.644032][T24374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4757'. [ 701.972821][T24385] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4760'. [ 702.012126][T24388] ipvlan3: entered promiscuous mode [ 702.022754][T24388] bridge0: port 3(ipvlan3) entered blocking state [ 702.022860][T24388] bridge0: port 3(ipvlan3) entered disabled state [ 702.022993][T24388] ipvlan3: entered allmulticast mode [ 702.023008][T24388] bridge0: entered allmulticast mode [ 702.046991][T24388] ipvlan3: left allmulticast mode [ 702.047011][T24388] bridge0: left allmulticast mode [ 702.362394][ T52] Bluetooth: hci6: SCO packet too small [ 702.526518][T24407] sch_fq: defrate 4 ignored. [ 702.840697][T24424] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 702.840727][T24424] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 702.961492][T24424] tipc: Enabling of bearer rejected, already enabled [ 704.125956][T24475] __nla_validate_parse: 5 callbacks suppressed [ 704.125977][T24475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.126028][T24475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.163062][T24484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.163124][T24484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.489069][T24484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.489130][T24484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.512668][T24475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.512725][T24475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 704.786377][T24522] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 705.294644][T24547] syzkaller0: entered promiscuous mode [ 705.294668][T24547] syzkaller0: entered allmulticast mode [ 707.374109][T24561] pim6reg1: entered promiscuous mode [ 707.374123][T24561] pim6reg1: entered allmulticast mode [ 707.614558][T24502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.816840][T24569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4807'. [ 708.089513][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 708.101820][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4809'. [ 708.451803][T24590] tipc: Enabled bearer , priority 10 [ 708.550853][T24593] ip_tables: iptables: counters copy to user failed while replacing table [ 708.953128][T24609] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 708.994466][T24611] macsec1: entered promiscuous mode [ 708.994489][T24611] macsec1: entered allmulticast mode [ 709.085775][ T30] audit: type=1804 audit(1789714172.750:11): pid=24614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4821" name="/newroot/409/cgroup.controllers" dev="tmpfs" ino=2115 res=1 errno=0 [ 709.085902][ T30] audit: type=1800 audit(1789714172.750:12): pid=24614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4821" name="cgroup.controllers" dev="tmpfs" ino=2115 res=0 errno=0 [ 709.235229][T24620] netlink: 'syz.6.4823': attribute type 1 has an invalid length. [ 709.290834][T24620] netlink: 'syz.6.4823': attribute type 46 has an invalid length. [ 709.465219][T24632] __nla_validate_parse: 4 callbacks suppressed [ 709.465238][T24632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4826'. [ 709.501794][T24632] vlan2: entered allmulticast mode [ 709.532610][T24632] erspan0: entered allmulticast mode [ 709.694432][T24641] netlink: 'syz.4.4828': attribute type 1 has an invalid length. [ 709.711362][T24643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.733263][T24641] bond3: entered promiscuous mode [ 709.733766][T24641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.805427][T24641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.818823][T24641] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 709.818839][T24641] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 709.826584][T24641] bond3: (slave ip6gre2): making interface the new active one [ 709.826607][T24641] ip6gre2: entered promiscuous mode [ 709.863773][T24641] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 710.135241][T24661] netlink: 'syz.3.4832': attribute type 1 has an invalid length. [ 710.135265][T24661] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4832'. [ 710.443543][T24670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4835'. [ 710.618163][T24673] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 710.618874][T24673] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 710.626549][T24673] netlink: 'syz.1.4836': attribute type 1 has an invalid length. [ 710.722627][T24673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 710.747058][T24680] bond3: (slave veth5): Enslaving as an active interface with a down link [ 710.802440][T24673] bond3: (slave dummy0): making interface the new active one [ 710.816393][T24673] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 710.831562][T24673] netlink: 'syz.1.4836': attribute type 10 has an invalid length. [ 710.831584][T24673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4836'. [ 710.845704][T24685] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.871795][T24673] dummy0: entered promiscuous mode [ 710.878403][T24685] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4839'. [ 710.878422][T24685] netlink: 356 bytes leftover after parsing attributes in process `syz.6.4839'. [ 710.878433][T24685] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4839'. [ 710.883408][T24673] bond3: (slave dummy0): Releasing active interface [ 710.914388][T24685] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4839'. [ 711.071428][T24692] syzkaller0: entered promiscuous mode [ 711.071461][T24692] syzkaller0: entered allmulticast mode [ 711.079195][T24694] syzkaller0: entered promiscuous mode [ 711.079218][T24694] syzkaller0: entered allmulticast mode [ 711.081983][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4840'. [ 711.153995][T24692] tipc: Enabled bearer , priority 0 [ 711.162336][T24694] tipc: Enabled bearer , priority 0 [ 711.171692][T24690] tipc: Resetting bearer [ 711.234331][T24690] tipc: Disabling bearer [ 711.255225][T24691] tipc: Resetting bearer [ 711.299742][T24691] tipc: Disabling bearer [ 711.313593][T24699] tipc: Enabling of bearer rejected, failed to enable media [ 711.658272][T24728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4852'. [ 711.665505][T24728] netlink: 'syz.3.4852': attribute type 21 has an invalid length. [ 711.694933][T24726] ip_tables: iptables: counters copy to user failed while replacing table [ 711.964947][T24738] syzkaller0: entered promiscuous mode [ 711.964971][T24738] syzkaller0: entered allmulticast mode [ 711.991166][T24740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 712.041384][T24738] tipc: Enabled bearer , priority 0 [ 712.069858][T24734] tipc: Resetting bearer [ 712.144181][T24734] tipc: Disabling bearer [ 732.094484][ T5617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 732.110947][ T5617] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 732.113746][ T5617] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 732.115898][ T5617] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 732.120380][ T5617] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 732.343516][T24780] tipc: Enabling of bearer rejected, already enabled [ 732.542183][T24788] __nla_validate_parse: 1 callbacks suppressed [ 732.542205][T24788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4870'. [ 732.546325][T24789] syzkaller0: left promiscuous mode [ 732.546347][T24789] syzkaller0: left allmulticast mode [ 732.574558][T24789] tipc: Resetting bearer [ 732.692891][T24795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.804545][T24801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'. [ 732.804570][T24801] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4875'. [ 732.815397][T24759] wlan0 speed is unknown, defaulting to 1000 [ 733.024776][T24806] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4876'. [ 733.326213][T24815] tipc: Enabling of bearer rejected, already enabled [ 733.464442][T24825] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4882'. [ 733.464470][T24825] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4882'. [ 733.464486][T24825] netlink: 'syz.4.4882': attribute type 6 has an invalid length. [ 733.464500][T24825] netlink: 'syz.4.4882': attribute type 5 has an invalid length. [ 733.464512][T24825] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4882'. [ 733.657145][T24832] Cannot find map_set index 2 as target [ 733.734610][T24759] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.735924][T24759] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.736075][T24759] bridge_slave_0: entered allmulticast mode [ 733.770561][T24759] bridge_slave_0: entered promiscuous mode [ 733.786224][T24759] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.786355][T24759] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.804392][T24759] bridge_slave_1: entered allmulticast mode [ 733.813960][T24759] bridge_slave_1: entered promiscuous mode [ 733.873829][T24838] Set syz1 is full, maxelem 2076 reached [ 733.874477][T24841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4886'. [ 733.924869][T24843] bond4: option primary_reselect: invalid value (6) [ 733.925944][T24843] bond4 (unregistering): Released all slaves [ 733.948766][T24759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.952974][T24841] bridge0: port 2(veth0) entered blocking state [ 733.953096][T24841] bridge0: port 2(veth0) entered disabled state [ 733.953200][T24841] veth0: entered allmulticast mode [ 733.954279][T24841] veth0: entered promiscuous mode [ 733.960697][T24841] bridge0: port 2(veth0) entered blocking state [ 733.960893][T24841] bridge0: port 2(veth0) entered forwarding state [ 733.968837][T24759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.056545][T24759] team0: Port device team_slave_0 added [ 734.068315][T24759] team0: Port device team_slave_1 added [ 734.165693][T24845] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4886'. [ 734.172737][T24759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.176914][T24759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.176943][T24759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.196496][T24759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.196514][T24759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.196541][T24759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.256044][ T52] Bluetooth: hci7: command tx timeout [ 734.314220][T24759] hsr_slave_0: entered promiscuous mode [ 734.315171][T24759] hsr_slave_1: entered promiscuous mode [ 734.315965][T24759] debugfs: 'hsr0' already exists in 'hsr' [ 734.315989][T24759] Cannot create hsr debugfs directory [ 734.319138][T24861] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4889'. [ 734.322294][T24861] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20003 [ 734.751108][T24882] nbd: couldn't find a device at index 0 [ 735.254462][T24759] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 735.265394][T24759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.269539][T24759] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 735.292199][T24759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.313041][T24898] xt_TPROXY: Can be used only with -p tcp or -p udp [ 735.313639][T24759] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 735.314543][T24898] netlink: 'syz.1.4898': attribute type 1 has an invalid length. [ 735.339144][T24759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.341333][T24759] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 735.346639][T24898] x_tables: duplicate underflow at hook 1 [ 735.395900][T24759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.648658][T24759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.700775][T24759] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.725981][T13168] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.726084][T13168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.736952][T13168] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.737051][T13168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.780018][T24913] netlink: 'syz.1.4902': attribute type 29 has an invalid length. [ 735.780042][T24913] netlink: 'syz.1.4902': attribute type 1 has an invalid length. [ 735.789825][T24913] ±ÿ: left promiscuous mode [ 735.789848][T24913] ±ÿ: left allmulticast mode [ 735.795616][T24913] netlink: 'syz.1.4902': attribute type 2 has an invalid length. [ 735.798707][T24913] A link change request failed with some changes committed already. Interface 04±ÿ may have been left with an inconsistent configuration, please check. [ 736.093966][T24928] bond3: ARP target 9.0.0.0 is already present [ 736.093992][T24928] bond3: option arp_ip_target: invalid value (9) [ 736.110191][T24933] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 736.111571][T24928] bond3 (unregistering): Released all slaves [ 736.326884][ T52] Bluetooth: hci7: command tx timeout [ 736.449551][T24947] FAULT_INJECTION: forcing a failure. [ 736.449551][T24947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.449584][T24947] CPU: 1 UID: 0 PID: 24947 Comm: syz.6.4912 Not tainted syzkaller #0 PREEMPT(full) [ 736.449608][T24947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.449621][T24947] Call Trace: [ 736.449630][T24947] [ 736.449639][T24947] dump_stack_lvl+0xe8/0x150 [ 736.449680][T24947] should_fail_ex+0x410/0x560 [ 736.449710][T24947] _copy_from_user+0x2d/0xb0 [ 736.449737][T24947] ___sys_sendmsg+0x1c6/0x360 [ 736.449765][T24947] ? __lock_acquire+0x747/0x2de0 [ 736.449791][T24947] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.449850][T24947] ? __fget_files+0x2a/0x420 [ 736.449879][T24947] ? __fget_files+0x3a2/0x420 [ 736.449914][T24947] __x64_sys_sendmsg+0x1b1/0x290 [ 736.449950][T24947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.449997][T24947] do_syscall_64+0x166/0x520 [ 736.450020][T24947] ? trace_irq_disable+0x3b/0x140 [ 736.450041][T24947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.450061][T24947] ? clear_bhb_loop+0x70/0xc0 [ 736.450085][T24947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.450104][T24947] RIP: 0033:0x7f0d0579e159 [ 736.450125][T24947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.450143][T24947] RSP: 002b:00007f0d065d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.450164][T24947] RAX: ffffffffffffffda RBX: 00007f0d05a25fa0 RCX: 00007f0d0579e159 [ 736.450179][T24947] RDX: 0000000000008804 RSI: 0000200000000300 RDI: 0000000000000003 [ 736.450192][T24947] RBP: 00007f0d065d1090 R08: 0000000000000000 R09: 0000000000000000 [ 736.450204][T24947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.450216][T24947] R13: 00007f0d05a26038 R14: 00007f0d05a25fa0 R15: 00007ffda8b6b7a8 [ 736.450246][T24947] [ 737.033000][T24961] netlink: 'syz.1.4915': attribute type 83 has an invalid length. [ 737.087951][T24961] xt_hashlimit: invalid rate [ 737.488665][T24759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.850167][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.160923][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.190187][T25002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.242027][T25001] tc_dump_action: action bad kind [ 738.342561][T24759] veth0_vlan: entered promiscuous mode [ 738.358481][T24759] veth1_vlan: entered promiscuous mode [ 738.397386][ T52] Bluetooth: hci7: command tx timeout [ 738.418662][T24759] veth0_macvtap: entered promiscuous mode [ 738.442823][T24759] veth1_macvtap: entered promiscuous mode [ 738.565576][T24759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.604691][T24759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.663207][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.726887][T13170] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.726934][T13170] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.726971][T13170] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.774134][ T1276] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.862448][T25030] __nla_validate_parse: 2 callbacks suppressed [ 738.862470][T25030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4935'. [ 738.862485][T25030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4935'. [ 738.924942][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.924964][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.944780][T25030] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 739.019651][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.019671][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.132019][T25030] xt_CT: No such helper "netbios-ns" [ 739.276131][T25048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4940'. [ 739.276171][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4940'. [ 739.347671][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4940'. [ 739.372648][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4940'. [ 739.382144][T25048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4940'. [ 739.607335][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4946'. [ 739.786012][T25088] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 739.851967][T25096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4951'. [ 740.059697][T25101] syzkaller0: entered promiscuous mode [ 740.059721][T25101] syzkaller0: entered allmulticast mode [ 740.099438][T25101] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 740.283976][T25111] sctp: [Deprecated]: syz.1.4956 (pid 25111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.283976][T25111] Use struct sctp_sack_info instead [ 740.476909][ T52] Bluetooth: hci7: command tx timeout [ 740.750435][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4963'. [ 740.981832][T25153] netlink: 'syz.7.4967': attribute type 10 has an invalid length. [ 740.981852][T25153] netlink: 'syz.7.4967': attribute type 5 has an invalid length. [ 741.022783][T25153] geneve2: entered promiscuous mode [ 741.022806][T25153] geneve2: entered allmulticast mode [ 741.097180][T13170] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 35230 - 0 [ 741.104050][ T1276] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 35230 - 0 [ 741.104098][ T1276] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 35230 - 0 [ 741.104133][ T1276] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 35230 - 0 [ 741.219077][T25165] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 741.222426][T25165] bond3 (unregistering): Released all slaves [ 741.290243][T25168] netlink: 'syz.3.4970': attribute type 1 has an invalid length. [ 742.253205][T25219] netlink: 'syz.6.4986': attribute type 4 has an invalid length. [ 742.299943][T25221] tipc: Enabled bearer , priority 10 [ 742.756269][T25241] openvswitch: netlink: Message has 512 unknown bytes. [ 742.948039][T25253] syzkaller0: entered promiscuous mode [ 742.948062][T25253] syzkaller0: entered allmulticast mode [ 742.975404][T25253] xt_TPROXY: Can be used only with -p tcp or -p udp [ 743.274384][ T30] audit: type=1800 audit(1789714206.940:13): pid=25262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5001" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=84 res=0 errno=0 [ 743.290055][T25266] netlink: 'syz.6.5002': attribute type 2 has an invalid length. [ 743.290795][T25266] netlink: 'syz.6.5002': attribute type 1 has an invalid length. [ 743.376161][T25267] team0: No ports can be present during mode change [ 743.458839][T25274] syzkaller1: entered promiscuous mode [ 743.458864][T25274] syzkaller1: entered allmulticast mode [ 743.464477][T25272] syzkaller1: entered promiscuous mode [ 743.464492][T25272] syzkaller1: entered allmulticast mode [ 743.671419][T25284] ip_tables: iptables: counters copy to user failed while replacing table [ 743.918796][T24771] udevd[24771]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 743.956430][T25284] netlink: 'syz.6.5009': attribute type 16 has an invalid length. [ 743.956453][T25284] netlink: 'syz.6.5009': attribute type 17 has an invalid length. [ 743.973280][T25289] netlink: 'syz.4.5010': attribute type 2 has an invalid length. [ 743.980001][T25289] __nla_validate_parse: 11 callbacks suppressed [ 743.980020][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5010'. [ 744.002280][T24771] udevd[24771]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 744.116280][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5014'. [ 744.123088][T25297] netlink: 'syz.3.5013': attribute type 9 has an invalid length. [ 744.202512][T25284] tipc: Resetting bearer [ 744.203012][T25284] bond1: left promiscuous mode [ 744.203025][T25284] ipip0: left promiscuous mode [ 744.204249][T25284] ipvlan2: left allmulticast mode [ 744.204261][T25284] macvlan1: left allmulticast mode [ 744.204269][T25284] veth1_vlan: left allmulticast mode [ 744.215226][T25284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 744.487785][T25311] batman_adv: batadv0: Adding interface: gretap1 [ 744.487804][T25311] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.487837][T25311] batman_adv: batadv0: Interface activated: gretap1 [ 744.657465][T25317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5021'. [ 744.657488][T25317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5021'. [ 744.752414][T25323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5021'. [ 744.752437][T25323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5021'. [ 744.989156][T25335] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 744.989941][T25335] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 744.993830][T25335] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 744.998107][T25331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5024'. [ 745.161051][T25346] syzkaller0: entered promiscuous mode [ 745.161075][T25346] syzkaller0: entered allmulticast mode [ 745.210116][T25346] tipc: Started in network mode [ 745.210147][T25346] tipc: Node identity 3af562561cec, cluster identity 4711 [ 745.210480][T25346] tipc: Enabled bearer , priority 0 [ 745.303453][T25351] bond4 (unregistering): Released all slaves [ 745.409409][T25361] tipc: Resetting bearer [ 745.423580][T25344] tipc: Resetting bearer [ 745.496592][T25344] tipc: Disabling bearer [ 745.789230][T25382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5039'. [ 745.789312][T25382] IPv6: NLM_F_REPLACE set, but no existing node found! [ 745.792134][T25384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5039'. [ 745.792206][T25384] IPv6: NLM_F_REPLACE set, but no existing node found! [ 745.808048][T25385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.914230][T25388] nftables ruleset with unbound chain [ 745.981980][T25393] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 746.264685][T25398] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 746.583960][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5046'. [ 746.660108][ T13] tipc: Subscription rejected, illegal request [ 746.820662][T25406] syz_tun: entered promiscuous mode [ 746.820809][T25406] vlan2: entered promiscuous mode [ 747.143097][T25424] netlink: 'syz.7.5051': attribute type 3 has an invalid length. [ 747.322791][T25426] tipc: Enabling of bearer rejected, failed to enable media [ 747.637868][T25436] syzkaller0: entered promiscuous mode [ 747.637892][T25436] syzkaller0: entered allmulticast mode [ 748.265734][T25469] mac80211_hwsim hwsim47 syzkaller0: left promiscuous mode [ 748.265763][T25469] mac80211_hwsim hwsim47 syzkaller0: left allmulticast mode [ 748.342865][T25466] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 748.374624][T25466] erspan0: entered promiscuous mode [ 748.529450][T25478] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 748.529491][T25478] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 748.529532][T25478] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 748.619098][T25484] netlink: 'syz.6.5068': attribute type 1 has an invalid length. [ 748.619126][T25484] netlink: 'syz.6.5068': attribute type 2 has an invalid length. [ 748.635529][T25478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 748.677884][T25484] syzkaller0: entered promiscuous mode [ 748.677934][T25484] syzkaller0: entered allmulticast mode [ 748.744650][T25487] syzkaller0: entered promiscuous mode [ 748.744674][T25487] syzkaller0: entered allmulticast mode [ 748.937234][T25487] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 749.075582][T25504] __nla_validate_parse: 6 callbacks suppressed [ 749.075604][T25504] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5072'. [ 749.519910][T25511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5074'. [ 749.519975][T25511] netlink: 'syz.4.5074': attribute type 29 has an invalid length. [ 749.520006][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5074'. [ 749.569732][T25517] FAULT_INJECTION: forcing a failure. [ 749.569732][T25517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.569766][T25517] CPU: 1 UID: 0 PID: 25517 Comm: syz.1.5075 Not tainted syzkaller #0 PREEMPT(full) [ 749.569789][T25517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.569801][T25517] Call Trace: [ 749.569810][T25517] [ 749.569820][T25517] dump_stack_lvl+0xe8/0x150 [ 749.569854][T25517] should_fail_ex+0x410/0x560 [ 749.569882][T25517] _copy_from_user+0x2d/0xb0 [ 749.569909][T25517] __sys_bpf+0x2e7/0xd90 [ 749.569941][T25517] ? __pfx___sys_bpf+0x10/0x10 [ 749.569975][T25517] ? __fget_files+0x2a/0x420 [ 749.570019][T25517] ? ksys_write+0x242/0x270 [ 749.570051][T25517] ? __pfx_ksys_write+0x10/0x10 [ 749.570084][T25517] __x64_sys_bpf+0xba/0xd0 [ 749.570111][T25517] do_syscall_64+0x166/0x520 [ 749.570132][T25517] ? trace_irq_disable+0x3b/0x140 [ 749.570152][T25517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.570173][T25517] ? clear_bhb_loop+0x70/0xc0 [ 749.570198][T25517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.570219][T25517] RIP: 0033:0x7f6a55b9e159 [ 749.570237][T25517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.570255][T25517] RSP: 002b:00007f6a56ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.570278][T25517] RAX: ffffffffffffffda RBX: 00007f6a55e25fa0 RCX: 00007f6a55b9e159 [ 749.570293][T25517] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 749.570307][T25517] RBP: 00007f6a56ae6090 R08: 0000000000000000 R09: 0000000000000000 [ 749.570320][T25517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.570332][T25517] R13: 00007f6a55e26038 R14: 00007f6a55e25fa0 R15: 00007fff508c6578 [ 749.570364][T25517] [ 749.613312][T25515] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 749.627101][T25515] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5077'. [ 750.071354][T25528] syzkaller1: entered promiscuous mode [ 750.071408][T25528] syzkaller1: entered allmulticast mode [ 750.167432][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5084'. [ 750.469029][T25546] bond4: entered promiscuous mode [ 750.469075][T25546] bond4: entered allmulticast mode [ 750.471650][T25555] mac80211_hwsim hwsim47 syzkaller0: entered promiscuous mode [ 750.471729][T25555] mac80211_hwsim hwsim47 syzkaller0: entered allmulticast mode [ 750.610366][T25547] tipc: Enabling of bearer rejected, already enabled [ 750.944479][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 751.012410][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 751.012801][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 751.031225][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 751.031507][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5090'. [ 751.330265][T25581] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 751.330536][T25582] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 751.646169][T25581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 751.738810][T25586] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 751.769169][T13160] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 751.880285][T13170] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 752.668064][T25614] netlink: 'syz.6.5100': attribute type 21 has an invalid length. [ 752.668120][T25614] netlink: 'syz.6.5100': attribute type 22 has an invalid length. [ 752.668135][T25614] netlink: 'syz.6.5100': attribute type 23 has an invalid length. [ 752.668164][T25614] netlink: 'syz.6.5100': attribute type 25 has an invalid length. [ 752.735733][T25616] FAULT_INJECTION: forcing a failure. [ 752.735733][T25616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.735798][T25616] CPU: 0 UID: 0 PID: 25616 Comm: syz.4.5101 Not tainted syzkaller #0 PREEMPT(full) [ 752.735824][T25616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 752.735836][T25616] Call Trace: [ 752.735844][T25616] [ 752.735853][T25616] dump_stack_lvl+0xe8/0x150 [ 752.735888][T25616] should_fail_ex+0x410/0x560 [ 752.735916][T25616] _copy_from_user+0x2d/0xb0 [ 752.735942][T25616] bpf_test_init+0xd8/0x150 [ 752.735975][T25616] bpf_prog_test_run_skb+0x31e/0x2230 [ 752.736003][T25616] ? lock_acquire+0x115/0x350 [ 752.736040][T25616] ? __fget_files+0x3a2/0x420 [ 752.736067][T25616] ? __fget_files+0x2a/0x420 [ 752.736098][T25616] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 752.736127][T25616] bpf_prog_test_run+0x2c5/0x340 [ 752.736154][T25616] __sys_bpf+0xa22/0xd90 [ 752.736185][T25616] ? __pfx___sys_bpf+0x10/0x10 [ 752.736207][T25616] ? taprio_dequeue+0x250/0x540 [ 752.736381][T25616] ? sched_clock_cpu+0x74/0x440 [ 752.736425][T25616] ? __irq_exit_rcu+0xcb/0x220 [ 752.736467][T25616] ? handle_softirqs+0x720/0x860 [ 752.736494][T25616] __x64_sys_bpf+0xba/0xd0 [ 752.736517][T25616] do_syscall_64+0x166/0x520 [ 752.736538][T25616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.736557][T25616] ? clear_bhb_loop+0x70/0xc0 [ 752.736580][T25616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.736599][T25616] RIP: 0033:0x7fad5019e159 [ 752.736617][T25616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.736634][T25616] RSP: 002b:00007fad50fcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 752.736655][T25616] RAX: ffffffffffffffda RBX: 00007fad50425fa0 RCX: 00007fad5019e159 [ 752.736668][T25616] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 752.736680][T25616] RBP: 00007fad50fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 752.736693][T25616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.736706][T25616] R13: 00007fad50426038 R14: 00007fad50425fa0 R15: 00007fff0a4399c8 [ 752.736738][T25616] [ 753.133825][T25592] bond4 (unregistering): (slave gretap2): Removing an active aggregator [ 753.134436][T25592] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 753.160244][T25592] bond4 (unregistering): Released all slaves [ 753.214699][T25619] netlink: 'syz.3.5102': attribute type 4 has an invalid length. [ 753.215039][T25621] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 753.215125][T25621] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 753.228257][T25621] veth1_virt_wifi: entered allmulticast mode [ 753.236435][T25621] veth1_virt_wifi: left allmulticast mode [ 753.660137][T25642] syzkaller0: entered promiscuous mode [ 753.660162][T25642] syzkaller0: entered allmulticast mode [ 753.931142][T25652] x_tables: duplicate underflow at hook 3 [ 753.932075][T25652] pim6reg1: entered promiscuous mode [ 753.932094][T25652] pim6reg1: entered allmulticast mode [ 754.109791][T25660] FAULT_INJECTION: forcing a failure. [ 754.109791][T25660] name failslab, interval 1, probability 0, space 0, times 0 [ 754.109840][T25660] CPU: 0 UID: 0 PID: 25660 Comm: syz.1.5113 Not tainted syzkaller #0 PREEMPT(full) [ 754.109864][T25660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.109876][T25660] Call Trace: [ 754.109885][T25660] [ 754.109893][T25660] dump_stack_lvl+0xe8/0x150 [ 754.109927][T25660] should_fail_ex+0x410/0x560 [ 754.109955][T25660] should_failslab+0xa8/0x100 [ 754.109983][T25660] __kmalloc_noprof+0xfe/0x720 [ 754.110004][T25660] ? sk_prot_alloc+0xe7/0x210 [ 754.110027][T25660] ? sk_prot_alloc+0xe7/0x210 [ 754.110057][T25660] sk_prot_alloc+0xe7/0x210 [ 754.110079][T25660] ? sk_alloc+0x27/0x390 [ 754.110121][T25660] sk_alloc+0x3a/0x390 [ 754.110149][T25660] bpf_prog_test_run_skb+0x3a6/0x2230 [ 754.110178][T25660] ? lock_acquire+0x115/0x350 [ 754.110216][T25660] ? __fget_files+0x3a2/0x420 [ 754.110242][T25660] ? __fget_files+0x2a/0x420 [ 754.110273][T25660] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 754.110302][T25660] bpf_prog_test_run+0x2c5/0x340 [ 754.110331][T25660] __sys_bpf+0xa22/0xd90 [ 754.110361][T25660] ? __pfx___sys_bpf+0x10/0x10 [ 754.110415][T25660] ? ksys_write+0x242/0x270 [ 754.110447][T25660] ? __pfx_ksys_write+0x10/0x10 [ 754.110481][T25660] __x64_sys_bpf+0xba/0xd0 [ 754.110505][T25660] do_syscall_64+0x166/0x520 [ 754.110528][T25660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.110549][T25660] ? clear_bhb_loop+0x70/0xc0 [ 754.110574][T25660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.110594][T25660] RIP: 0033:0x7f6a55b9e159 [ 754.110613][T25660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.110631][T25660] RSP: 002b:00007f6a56ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 754.110659][T25660] RAX: ffffffffffffffda RBX: 00007f6a55e25fa0 RCX: 00007f6a55b9e159 [ 754.110674][T25660] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 754.110688][T25660] RBP: 00007f6a56ae6090 R08: 0000000000000000 R09: 0000000000000000 [ 754.110701][T25660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.110714][T25660] R13: 00007f6a55e26038 R14: 00007f6a55e25fa0 R15: 00007fff508c6578 [ 754.110747][T25660] [ 754.292773][T25655] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 754.552734][T25667] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 754.681531][T25667] bond6 (unregistering): Released all slaves [ 754.731213][T25676] IPVS: Scheduler module ip_vs_sip not found [ 754.961946][ T30] audit: type=1804 audit(1789714218.630:14): pid=25683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5120" name="/newroot/420/cgroup.controllers" dev="tmpfs" ino=2173 res=1 errno=0 [ 754.964698][ T30] audit: type=1800 audit(1789714218.630:15): pid=25683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5120" name="cgroup.controllers" dev="tmpfs" ino=2173 res=0 errno=0 [ 755.048587][T25681] __nla_validate_parse: 3 callbacks suppressed [ 755.048608][T25681] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5119'. [ 755.741690][T25696] FAULT_INJECTION: forcing a failure. [ 755.741690][T25696] name failslab, interval 1, probability 0, space 0, times 0 [ 755.741725][T25696] CPU: 1 UID: 0 PID: 25696 Comm: syz.7.5127 Not tainted syzkaller #0 PREEMPT(full) [ 755.741749][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.741761][T25696] Call Trace: [ 755.741769][T25696] [ 755.741778][T25696] dump_stack_lvl+0xe8/0x150 [ 755.741811][T25696] should_fail_ex+0x410/0x560 [ 755.741839][T25696] should_failslab+0xa8/0x100 [ 755.741865][T25696] __kmalloc_noprof+0xfe/0x720 [ 755.741886][T25696] ? security_sk_alloc+0x52/0x360 [ 755.742027][T25696] ? security_sk_alloc+0x52/0x360 [ 755.742060][T25696] security_sk_alloc+0x52/0x360 [ 755.742095][T25696] sk_prot_alloc+0x101/0x210 [ 755.742117][T25696] ? sk_alloc+0x27/0x390 [ 755.742141][T25696] sk_alloc+0x3a/0x390 [ 755.742169][T25696] bpf_prog_test_run_skb+0x3a6/0x2230 [ 755.742198][T25696] ? lock_acquire+0x115/0x350 [ 755.742235][T25696] ? __fget_files+0x3a2/0x420 [ 755.742261][T25696] ? __fget_files+0x2a/0x420 [ 755.742294][T25696] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 755.742323][T25696] bpf_prog_test_run+0x2c5/0x340 [ 755.742351][T25696] __sys_bpf+0xa22/0xd90 [ 755.742381][T25696] ? __pfx___sys_bpf+0x10/0x10 [ 755.742413][T25696] ? __fget_files+0x2a/0x420 [ 755.742456][T25696] ? ksys_write+0x242/0x270 [ 755.742497][T25696] ? __pfx_ksys_write+0x10/0x10 [ 755.742531][T25696] __x64_sys_bpf+0xba/0xd0 [ 755.742554][T25696] do_syscall_64+0x166/0x520 [ 755.742576][T25696] ? trace_irq_disable+0x3b/0x140 [ 755.742595][T25696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.742615][T25696] ? clear_bhb_loop+0x70/0xc0 [ 755.742639][T25696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.742658][T25696] RIP: 0033:0x7fa373d9e159 [ 755.742677][T25696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.742694][T25696] RSP: 002b:00007fa374bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 755.742716][T25696] RAX: ffffffffffffffda RBX: 00007fa374025fa0 RCX: 00007fa373d9e159 [ 755.742731][T25696] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 755.742744][T25696] RBP: 00007fa374bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 755.742757][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.742770][T25696] R13: 00007fa374026038 R14: 00007fa374025fa0 R15: 00007ffe74735258 [ 755.742801][T25696] [ 755.762601][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 756.708326][T25720] wlan0 speed is unknown, defaulting to 1000 [ 756.837120][T25735] netlink: 'syz.4.5138': attribute type 1 has an invalid length. [ 756.983583][T25744] pim6reg: entered allmulticast mode [ 757.019063][T25744] team0: entered allmulticast mode [ 757.019103][T25744] team_slave_0: entered allmulticast mode [ 757.019153][T25744] team_slave_1: entered allmulticast mode [ 757.024698][T25744] pim6reg: left allmulticast mode [ 757.184330][T25740] team0: left allmulticast mode [ 757.184354][T25740] team_slave_0: left allmulticast mode [ 757.184372][T25740] team_slave_1: left allmulticast mode [ 757.196991][T25750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5141'. [ 757.197022][T25750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5141'. [ 757.614854][T25760] netlink: 'syz.1.5145': attribute type 11 has an invalid length. [ 757.614878][T25760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5145'. [ 757.629815][T25760] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5145'. [ 757.629836][T25760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5145'. [ 758.952308][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5152'. [ 759.013850][T25790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5152'. [ 760.284199][T25818] mac80211_hwsim hwsim47 ..ãc¤±: renamed from wlan1 [ 760.693414][T25839] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5160'. [ 760.894255][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5164'. [ 760.894288][T25851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5164'. [ 760.895699][T25851] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 760.895811][T25852] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 761.200143][T25862] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 761.218173][T25862] syzkaller0: entered promiscuous mode [ 761.218196][T25862] syzkaller0: entered allmulticast mode [ 762.030049][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5171'. [ 762.030589][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5171'. [ 762.106055][T25892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5172'. [ 762.523720][T25912] netlink: 'syz.3.5173': attribute type 10 has an invalid length. [ 762.664665][T25915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5177'. [ 763.095439][T25925] syzkaller0: entered promiscuous mode [ 763.095464][T25925] syzkaller0: entered allmulticast mode [ 763.293888][T25925] tipc: Enabled bearer , priority 0 [ 763.311582][T25924] tipc: Resetting bearer [ 763.351442][T25924] tipc: Disabling bearer [ 763.591815][T25937] netlink: 'syz.7.5184': attribute type 4 has an invalid length. [ 763.628406][T25940] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5185'. [ 763.649676][T25942] netlink: 'syz.7.5184': attribute type 4 has an invalid length. [ 763.842365][T25948] x_tables: duplicate underflow at hook 2 [ 764.228501][T25958] netlink: 'syz.3.5192': attribute type 12 has an invalid length. [ 764.228525][T25958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5192'. [ 764.354716][T25965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5194'. [ 764.469362][T25969] tipc: Enabling of bearer rejected, already enabled [ 764.799931][T25978] netlink: 'syz.1.5198': attribute type 2 has an invalid length. [ 765.207246][T25989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.282217][T25983] ip_tables: iptables: counters copy to user failed while replacing table [ 765.357076][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 766.126037][T26012] netdevsim netdevsim7 €Â: renamed from netdevsim0 (while UP) [ 766.178366][T26015] syzkaller0: entered promiscuous mode [ 766.178389][T26015] syzkaller0: entered allmulticast mode [ 766.311207][T26015] tipc: Enabled bearer , priority 0 [ 766.322210][T26013] tipc: Resetting bearer [ 766.381321][T26013] tipc: Disabling bearer [ 766.436614][T26019] __nla_validate_parse: 2 callbacks suppressed [ 766.445163][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5210'. [ 766.445222][T26019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.467439][T26019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.471772][T26019] batman_adv: batadv0: Removing interface: macvtap1 [ 766.473153][T26019] batman_adv: batadv0: Interface deactivated: gretap1 [ 766.473206][T26019] batman_adv: batadv0: Removing interface: gretap1 [ 767.044254][T26032] tipc: Enabling of bearer rejected, already enabled [ 767.077084][T26037] xt_HMARK: spi-set and port-set can't be combined [ 767.754063][T26050] dummy0: left promiscuous mode [ 767.876543][T26035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5217'. [ 767.979427][T26071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5217'. [ 767.990072][T26050] tipc: Resetting bearer [ 767.990795][T26050] tipc: Resetting bearer [ 768.296146][T26050] macsec1: left promiscuous mode [ 768.296170][T26050] macsec1: left allmulticast mode [ 768.347039][T26065] tipc: Enabling of bearer rejected, already enabled [ 768.377513][T26069] macsec1: entered promiscuous mode [ 768.377573][T26069] macsec1: entered allmulticast mode [ 768.393930][T26071] veth0_vlan: left promiscuous mode [ 768.427041][T25834] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.427076][T25834] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 768.427101][T25834] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.427138][T25834] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.427163][T25834] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 768.427189][T25834] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.427222][T25834] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.427256][T25834] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 768.427281][T25834] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.427314][T25834] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.427340][T25834] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 768.427365][T25834] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.609789][T26082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5227'. [ 768.923969][T26090] netlink: 'syz.1.5231': attribute type 11 has an invalid length. [ 768.936975][T26090] netlink: 'syz.1.5231': attribute type 1 has an invalid length. [ 768.937013][T26090] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5231'. [ 768.963793][T26090] netlink: 26 bytes leftover after parsing attributes in process `syz.1.5231'. [ 769.311007][T26093] No such timeout policy "syz1" [ 769.466236][T26097] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5232'. [ 770.102377][T26112] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5237'. [ 770.613872][T13160] IPVS: starting estimator thread 0... [ 770.698300][T26129] IPVS: using max 27 ests per chain, 64800 per kthread [ 771.118377][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.327531][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.666537][T26157] netlink: 'syz.1.5250': attribute type 1 has an invalid length. [ 771.680332][T26158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5249'. [ 771.680364][T26158] bond0: Unable to set down delay as MII monitoring is disabled [ 771.681077][T26158] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5249'. [ 772.142785][T26174] No such timeout policy "syz1" [ 772.438151][T26185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 772.832535][T26199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5262'. [ 774.126348][T26219] ip6gre1: entered promiscuous mode [ 774.126374][T26219] ip6gre1: entered allmulticast mode [ 774.450982][T26146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 774.518854][T26233] netlink: 9924 bytes leftover after parsing attributes in process `syz.6.5270'. [ 774.628554][T26236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 775.061038][T26254] tipc: Bearer : already 2 bearers with priority 10 [ 775.061059][T26254] tipc: Bearer : trying with adjusted priority [ 775.061071][T26254] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 775.207908][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5278'. [ 776.036035][T26279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5283'. [ 776.068002][T26271] syzkaller0: entered promiscuous mode [ 776.068042][T26271] syzkaller0: entered allmulticast mode [ 776.155304][T26280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5284'. [ 776.155915][T26271] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 776.532766][T26290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5288'. [ 776.550921][T26290] x_tables: duplicate underflow at hook 3 [ 776.771845][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5291'. [ 776.862211][T26296] block nbd5: server does not support multiple connections per device. [ 776.862599][T26296] block nbd5: shutting down sockets [ 776.950943][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'. [ 776.950967][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 776.966732][T26298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'. [ 776.966753][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 777.286470][T26304] tipc: Resetting bearer [ 777.349335][T26314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5294'. [ 777.613270][T26304] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 777.613295][T26304] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 777.696409][T26320] ip6erspan0: entered allmulticast mode [ 777.725215][T26325] x_tables: duplicate underflow at hook 3 [ 778.023161][T26304] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 778.023201][T26304] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 778.478188][T26350] openvswitch: netlink: Message has 8 unknown bytes. [ 778.478257][T26350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.737309][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5305'. [ 781.419552][T26430] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.5327'. [ 781.431278][T26439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5330'. [ 781.744798][T26450] xt_hashlimit: size too large, truncated to 1048576 [ 782.217095][T26466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5334'. [ 782.377138][T26469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5336'. [ 782.424178][T26466] vlan2: entered promiscuous mode [ 782.424202][T26466] gretap0: entered promiscuous mode [ 782.610854][T26476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5339'. [ 783.874670][T26499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5346'. [ 784.818006][T26524] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 785.134014][T26527] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 785.526504][ T31] INFO: task syz.0.4209:22257 blocked for more than 143 seconds. [ 785.526547][ T31] Not tainted syzkaller #0 [ 785.526589][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 785.526613][ T31] task:syz. ** replaying previous printk message ** [ 785.526613][ T31] task:syz.0.4209 state:D stack:27528 pid:22257 tgid:22255 ppid:17153 task_flags:0x400040 flags:0x00080002 [ 785.526874][ T31] Call Trace: [ 785.526895][ T31] [ 785.526908][ T31] __schedule+0x17db/0x58f0 [ 785.527060][ T31] ? __pfx___schedule+0x10/0x10 [ 785.527106][ T31] ? schedule+0x90/0x2b0 [ 785.527190][ T31] schedule+0x164/0x2b0 [ 785.527230][ T31] schedule_preempt_disabled+0x13/0x30 [ 785.527296][ T31] __mutex_lock+0x7c1/0x1550 [ 785.527368][ T31] ? __mutex_lock+0x5d4/0x1550 [ 785.527424][ T31] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 785.527596][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 785.527661][ T31] ? __nlmsg_put+0xef/0x1b0 [ 785.527719][ T31] ? genlmsg_put+0x137/0x2e0 [ 785.527760][ T31] nfsd_nl_version_get_doit+0x17c/0xd20 [ 785.527824][ T31] ? __nla_parse+0x40/0x60 [ 785.527880][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 785.527921][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 785.527975][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 785.528021][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 785.528082][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 785.528147][ T31] ? __lock_acquire+0x747/0x2de0 [ 785.528278][ T31] genl_rcv_msg+0x614/0x7a0 [ 785.528338][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.528377][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 785.528447][ T31] netlink_rcv_skb+0x226/0x4a0 [ 785.528504][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.528544][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.528633][ T31] ? down_read+0x2be/0x330 [ 785.528700][ T31] genl_rcv+0x28/0x40 [ 785.528735][ T31] netlink_unicast+0x7bd/0x940 [ 785.528803][ T31] netlink_sendmsg+0x813/0xb40 [ 785.528872][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.528936][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 785.528993][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.529035][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 785.529096][ T31] ____sys_sendmsg+0x54e/0x850 [ 785.529158][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.529224][ T31] ? import_iovec+0x73/0xa0 [ 785.529267][ T31] ___sys_sendmsg+0x2a5/0x360 [ 785.529322][ T31] ? __lock_acquire+0x747/0x2de0 [ 785.529362][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.529423][ T31] ? futex_wait+0x2a2/0x390 [ 785.529530][ T31] ? __fget_files+0x2a/0x420 [ 785.529582][ T31] ? __fget_files+0x3a2/0x420 [ 785.529656][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 785.529719][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 785.529814][ T31] do_syscall_64+0x166/0x520 [ 785.529852][ T31] ? trace_irq_disable+0x3b/0x140 [ 785.529889][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.529941][ T31] ? clear_bhb_loop+0x70/0xc0 [ 785.529981][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.530018][ T31] RIP: 0033:0x7f3c2459e159 [ 785.530052][ T31] RSP: 002b:00007f3c227f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.530106][ T31] RAX: ffffffffffffffda RBX: 00007f3c24825fa0 RCX: 00007f3c2459e159 [ 785.530121][ T31] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000005 [ 785.530149][ T31] RBP: 00007f3c2463506b R08: 0000000000000000 R09: 0000000000000000 [ 785.530177][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.530206][ T31] R13: 00007f3c24826038 R14: 00007f3c24825fa0 R15: 00007fff2e2a6038 [ 785.530269][ T31] [ 785.530344][ T31] [ 785.530344][ T31] Showing all locks held in the system: [ 785.536245][ T31] locks held by pr/ttyS0/16: 2, last CPU#1: [ 785.536445][ T31] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 785.536605][ T31] #1: ffffffff9ad3a098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 785.537091][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 785.537122][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 785.537257][ T31] locks held by getty/5371: 2, on CPU#0: [ 785.537287][ T31] #0: ffff88801c3e60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 785.537479][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 785.537615][ T31] locks held by syz-executor/17532: 4, last CPU#0: [ 785.537652][ T31] #0: ffffffff8ee36330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 785.537774][ T31] #1: ffff88802760dcf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 785.537871][ T31] #2: ffff88803308f678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 785.537976][ T31] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 785.538075][ T31] locks held by syz.2.2999/17856: 2, on CPU#1: [ 785.538104][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.538182][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 785.538300][ T31] locks held by syz.0.4209/22257: 2, on CPU#0: [ 785.538330][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.545443][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 785.545541][ T31] locks held by syz.5.4809/24570: 2, on CPU#0: [ 785.545556][ T31] #0: ffffffff902c34e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.545643][ T31] #1: ffffffff8f09f500 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 785.545734][ T31] locks held by kworker/u8:28/25821: 3, on CPU#1: [ 785.545746][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 785.545836][ T31] #1: ffffc9000d64fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 785.545914][ T31] #2: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 785.546100][ T31] locks held by kworker/u8:30/25834: 4, last CPU#0: [ 785.546115][ T31] #0: ffff88807fa7e940 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 785.546203][ T31] #1: ffffc90019c77c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 785.546925][ T31] #2: ffff8880552fa780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 785.547145][ T31] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 785.547380][ T31] locks held by syz.6.5354/26515: 1, last CPU#1: [ 785.547411][ T31] #0: ffff88803af283b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 785.547514][ T31] locks held by syz.1.5355/26520: 1, last CPU#1: [ 785.547543][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 785.547670][ T31] locks held by syz.4.5359/26528: 2, on CPU#0: [ 785.547684][ T31] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 785.552061][ T31] #1: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 785.552201][ T31] locks held by syz.7.5360/26531: 1, on CPU#0: [ 785.552232][ T31] #0: ffffffff90252520 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 785.552330][ T31] [ 785.552336][ T31] ============================================= [ 785.552336][ T31] [ 785.552367][ T31] NMI backtrace for cpu 0 [ 785.552383][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 785.552404][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.552416][ T31] Call Trace: [ 785.552424][ T31] [ 785.552432][ T31] dump_stack_lvl+0xe8/0x150 [ 785.552463][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 785.552544][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 785.552576][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 785.552606][ T31] sys_info+0x135/0x170 [ 785.552665][ T31] watchdog+0xfd7/0x1030 [ 785.552700][ T31] ? watchdog+0x1c7/0x1030 [ 785.552725][ T31] kthread+0x38b/0x480 [ 785.552745][ T31] ? __pfx_watchdog+0x10/0x10 [ 785.552762][ T31] ? __pfx_kthread+0x10/0x10 [ 785.552782][ T31] ret_from_fork+0x514/0xb70 [ 785.552825][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 785.552875][ T31] ? __switch_to+0xc89/0x1420 [ 785.552907][ T31] ? __pfx_kthread+0x10/0x10 [ 785.552934][ T31] ret_from_fork_asm+0x1a/0x30 [ 785.552982][ T31] [ 785.553080][ T31] Sending NMI from CPU 0 to CPUs 1: [ 785.553127][ C1] NMI backtrace for cpu 1 [ 785.553149][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 785.553170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 785.553182][ C1] RIP: 0010:delay_tsc+0x73/0xd0 [ 785.553211][ C1] Code: e8 82 fa b0 f5 65 48 8b 05 fa 08 b1 07 48 85 c0 74 1c f3 90 bf 01 00 00 00 e8 19 f9 b0 f5 e8 f4 7a 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bb e8 24 7e 4f f5 eb dd 4c 29 fb e8 da 7a 01 00 89 c5 0f [ 785.553226][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000046 [ 785.553244][ C1] RAX: 000000001dace64c RBX: 0000000000000899 RCX: 0000000000000001 [ 785.553256][ C1] RDX: 0000000000000196 RSI: ffffffff8c6d9c60 RDI: ffffffff8c6d9c20 [ 785.553269][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 785.553280][ C1] R10: dffffc0000000000 R11: ffffffff8be3e6c0 R12: 1ffffffff35a746d [ 785.553294][ C1] R13: 00000000ffffffff R14: 000001961dace2a6 R15: 0000000000000336 [ 785.553307][ C1] FS: 0000000000000000(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 785.553322][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 785.553336][ C1] CR2: 0000200001000000 CR3: 000000004881e000 CR4: 00000000003526f0 [ 785.553353][ C1] Call Trace: [ 785.553360][ C1] [ 785.553370][ C1] wait_for_lsr+0x147/0x2f0 [ 785.553439][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 785.553471][ C1] serial8250_console_write+0xaa1/0x1200 [ 785.553489][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 785.553513][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 785.553532][ C1] ? __schedule+0x17f1/0x58f0 [ 785.553557][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 785.553586][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 785.553610][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 785.553638][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 785.553666][ C1] nbcon_kthread_func+0x679/0x880 [ 785.553688][ C1] ? nbcon_kthread_func+0x163/0x880 [ 785.553706][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 785.553729][ C1] ? __kthread_parkme+0x71/0x1f0 [ 785.553755][ C1] ? __kthread_parkme+0x199/0x1f0 [ 785.553782][ C1] kthread+0x38b/0x480 [ 785.553800][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 785.553817][ C1] ? __pfx_kthread+0x10/0x10 [ 785.553835][ C1] ret_from_fork+0x514/0xb70 [ 785.553853][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 785.553879][ C1] ? __switch_to+0xc89/0x1420 [ 785.553904][ C1] ? __pfx_kthread+0x10/0x10 [ 785.553922][ C1] ret_from_fork_asm+0x1a/0x30 [ 785.553956][ C1] [ 785.558388][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 786.607695][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 786.616811][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 786.626947][ T31] Call Trace: [ 786.630222][ T31] [ 786.633150][ T31] vpanic+0x56d/0xa60 [ 786.637141][ T31] ? __pfx___schedule+0x10/0x10 [ 786.641990][ T31] ? __pfx_vpanic+0x10/0x10 [ 786.646500][ T31] ? irqentry_exit+0x218/0x910 [ 786.651267][ T31] panic+0xc5/0xd0 [ 786.654988][ T31] ? __pfx_panic+0x10/0x10 [ 786.659414][ T31] watchdog+0x1030/0x1030 [ 786.663741][ T31] ? watchdog+0x1c7/0x1030 [ 786.668154][ T31] kthread+0x38b/0x480 [ 786.672215][ T31] ? __pfx_watchdog+0x10/0x10 [ 786.676881][ T31] ? __pfx_kthread+0x10/0x10 [ 786.681461][ T31] ret_from_fork+0x514/0xb70 [ 786.686042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 786.691156][ T31] ? __switch_to+0xc89/0x1420 [ 786.695838][ T31] ? __pfx_kthread+0x10/0x10 [ 786.700426][ T31] ret_from_fork_asm+0x1a/0x30 [ 786.705201][ T31] [ 786.708554][ T31] Kernel Offset: disabled [ 786.712874][ T31] Rebooting in 86400 seconds..