last executing test programs: 8m34.546706656s ago: executing program 4 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r1, 0x801, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, r4, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x4}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="0600000003000000", 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r7, @ANYRESOCT, @ANYBLOB="01002cbd7001fedbdf2530000000180001801400020076657468315f746f5f626f6e64000000080006"], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) 8m33.486409244s ago: executing program 4 (id=1082): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x48) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r3, &(0x7f00000033c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@tclass={{0x14, 0x29, 0x43, 0x401}}], 0x18}}], 0x2, 0x4000000) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = socket(0x2b, 0x80801, 0x1) shutdown(r5, 0x7ffffffe) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r7, 0xa06, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x10}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c840}, 0xd4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, &(0x7f0000000280)=r6}, 0x20) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000340)={'lo\x00', {0x2, 0x4e22, @broadcast}}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r10, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000004100010028bd7000fedbdf250100000004004880100001800c00108004000e8004004480040002625e4a43154615d708cd5335a626392a89b33f01a9b38fda911605ab2e30a451955cd21083efb3a9d7a6b550de559aa45bb6f4e14400be59343ca30a6754d28fb74b981788ca1ec9664e90de9a2aa8356bc327dde492e84a42918d3e03a5e26df4970c133b15502f9c2a5847bc03ad219607b86d0663bfc7c05f38132316d5d95bd544d31215c10781f08c09f3d17aee305a15e15f32ea6ef814bc16ad78aeb1a6b76187730d9f78e515ae727368f2f1c62325b7a7d44a13fbdbebb61df861461063cc093fecd7b569368738ffca2e70e303c3e32499fdb17f9e4bb7ee4dd2813f17713e3c20d7594c581975480ba5a25ef4c18473f0277690d1c09395440d09e053e3559a26d70f91eedbab860bdeca34379344463057bbf7959ff45f30d1e82110"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmmsg(r0, &(0x7f0000006b40)=[{{&(0x7f0000001600)=@isdn={0x22, 0x5, 0x5, 0xdb, 0x7}, 0x80, &(0x7f0000003b40)=[{&(0x7f00000006c0)="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", 0x149}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="b5e7bffe07df904dd974b73a19feb7a29073beb30eceb73032e61f18702accf4a1af9fd9c40c9c652f9baa76e334f9697dc51c06802fb3f379d4561495bea2c8fd0ff5a6be5534c3d05d", 0x4a}, {&(0x7f00000027c0)="4183ce6f4bcd02e7c9ed9ffa08b90feff881157f46ebc832dc8dbf88f56e4ed7b569f534a7fa5e9f4a4ddfe89a9d7195591ed6dfe091c04b11b71523dc8b2dc96af27f236148b92c43de4d43bda97b28", 0x50}, {&(0x7f0000002840)="9e8705bda8888e771f5b502c5c191219c4c771ecbb91d4af0c7e96d3757a80f9a5926164efc7d7c3e0e4cbae211e3324744dba9f9c7e35384e3877d3f2456313247bb828e079752f3cd96cec23b494922981ba922a4d4e8e069550feb5a115d935dcd3220b60268ed17828e5f35f1e06a18629ca1add8baca9bb2f4f1b03f3bb5417cb62e24a035e800f6c94d5981b60a7a1f8e0411ce7ed717f22c825d367f392c710e2cc", 0xa5}, {&(0x7f0000002900)="a1229d787db552095110f7dfed04bfd92e9b1dd46525cf984fd2becf5377f344dd9afff6c314d5121fd508643c3e23c8a298f8df9d3e7c2165610df0aa1c2ac6c4bf559b8e4c1c4275610ec92e31617e81cd8cec", 0x54}, {&(0x7f0000002980)="3e82de8234bdc5a5fbc663c7d186a1c9d7066602f7435eacd6b6d1df7a03196fb8010d3ae443b4f9027b965d96205665807b3c042418a27f34173e6474ce9ab76680058be2d9f0c986d03685a88f73a67477a404389f2ad2195afca95c17315cc7a642989dc8db3df72ca45cb88bdc3e68da99fe69d1ec828df19b704f5cad894b92b4e340d87e6558189a7fa25877c177340c61abbbcf98bc2ebe5cdef6eac675a3c0302d18c6020bd21cea59396f97e8241a4a58d9f4e3793973f89f74a60008f0100ffebe7e52994de5d537d31cc7600c0e86cd", 0xd5}, {&(0x7f0000002a80)="252afcb37021900877c1beaecd71d8a453644c0fdc1397a8fae681678e1f5e10a49a1bd3ea5a311419526a07cc1e63f432dc29ccdc2e1b94448a50e069feaa64a0038072b6ca07b7481df12f34d4d11d34cc2420b62f6d0ea45ffb6bd92e9193e19c1808f2ef3e2c45600dfd5035d0b8a311a26c2ddfc11adac7c9bfb725b73d0c437ab2adb0971945fb7c61adc12ea1f274aa280575294b208f182e542e9d8a4a75c378d2320cd6", 0xa8}, {&(0x7f0000002b40)="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", 0xc4b}], 0x9}}], 0x1, 0x20000004) r11 = socket(0x10, 0x803, 0x0) writev(r11, &(0x7f0000000240)=[{&(0x7f0000000000)="f17d6c3d630486506f66d1d57d92e6775da79101f4859b4b51a9783cff07", 0x1e}, {&(0x7f0000000040)="ba775aaca20c17a29d755a1fc6085d440fa3ce36b3bd8c0ea2d81c6190de61f4434446f8c624249ff52e99a808f4c95c336b5c873023163b7d5758efe2dc51", 0x3f}, {&(0x7f00000000c0)="5c2a3fb162405f3239ed32cc582ed1df7776b6b5d77b72aa6cce7a85a8d1b4310960f652afd003f46edb98b8ba3e77385d88886d2dcd4054223aa88629a5cdc24e7dc29baf9ad57495204bef152f330c34ea24c49a73ace0fcfad19285", 0x5d}, {&(0x7f0000000140)="bdf2bac4b05017", 0x7}, {&(0x7f00000001c0)="d14e00d065d3b6b0f7ba0f81d3affb21ab70e1f0a4782b23ecda39f72508edfd069b2cdb724d4c89b9637c6fc189d0e7761603d67ecb98e3a05523e7707716e91e062c16d8a4edcf74da9a992a95356aa4027f60f2abace575916a692ac9", 0x5e}], 0x5) 8m32.663704316s ago: executing program 4 (id=1084): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x138}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f0000000300)="e0b9546f5bec20f391e402cc", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x600) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24881}, 0x800) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4008005) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x52}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x8000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 8m32.082273138s ago: executing program 4 (id=1090): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002700010000000000000000000e000000100001800b000200"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001600010000000000000000000a00000004000000140001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2b, 0x70bd2b, 0x70bd2b, 0x8, [0x5]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x24000058) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014a3dcd55c030000000000008500000005000000bf09000000000000c6090100000003e70600000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000114000000060000005c93000000000000b5030000b68f3f208500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 8m31.804649908s ago: executing program 4 (id=1091): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0xe95}], 0x1, 0x8000, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getchain={0x3c, 0x66, 0x4, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x8}, {0xfff1, 0x2}, {0x8, 0x9}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01f3ff000000f3ffffff01"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 8m30.93939481s ago: executing program 4 (id=1096): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000001000400000000005592a0ddaf72633cd22c8d289760f60ca4041fd3a269617c40b6f9b421bbc463b808895e1a0a84405ead2e2f3d5e0f58fd31c7094f373b37c988119ead7ba687e5148926dff92379118b4d00f8996e1e04d8a728fc7bd3cfd8821c644f38ed607e655c5d8c2608e464c642b6f17430f66cc30fa5323da281133603af38f472a6969fd06afe957920b9344af555f688a50627443c2343243be305a3aa753108d1fcfb5df4df635cde07a4ef4c81edc3c970e86d7e4b68802e402af620cc538a0f3bbd864c33de778277", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x44}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c0fe0000f4ffffff0800ffff"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18f3000000eb55f69b0000000000080000850000000768af87ff9c3821060b1ddb022a76c937c1b60247ccae1f3c18fed9e3d2d76889de5351dd8594a29769f52509816bd83a61bf0ed7eda76a83"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 8m15.705925175s ago: executing program 32 (id=1096): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000001000400000000005592a0ddaf72633cd22c8d289760f60ca4041fd3a269617c40b6f9b421bbc463b808895e1a0a84405ead2e2f3d5e0f58fd31c7094f373b37c988119ead7ba687e5148926dff92379118b4d00f8996e1e04d8a728fc7bd3cfd8821c644f38ed607e655c5d8c2608e464c642b6f17430f66cc30fa5323da281133603af38f472a6969fd06afe957920b9344af555f688a50627443c2343243be305a3aa753108d1fcfb5df4df635cde07a4ef4c81edc3c970e86d7e4b68802e402af620cc538a0f3bbd864c33de778277", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x44}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c0fe0000f4ffffff0800ffff"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000140002", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03d6b623375271, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18f3000000eb55f69b0000000000080000850000000768af87ff9c3821060b1ddb022a76c937c1b60247ccae1f3c18fed9e3d2d76889de5351dd8594a29769f52509816bd83a61bf0ed7eda76a83"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 23.076692657s ago: executing program 3 (id=2985): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000180)={0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x1, 0x1, 0xffffffffffffffff}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x1, 0x1, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000200000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0x1, 0x32e}, 0x28) 23.072266617s ago: executing program 3 (id=2987): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000040)="7b968ef9388fd0d216af32c6adf40cd193ba1ee598a85d9ef71b92dbc4fb4f9678252765dcbfe9758ce665133faf4248b23cf1f0dfbddfcdb6491a0299f57e77be2827234c278cff37924aaaf44ef992be361552a56bdb02804b34da425c10e72aa16ab278cf09e9ca94287a561a18acb582484ec6e223f34da1a73188e3f78f624d3a24bfc2c2fcfac76d486c4e7b2e284005fdd55a8eb9c5445ac3d1dbffe8fa6bd0641e9581ceba92dae55063152a9aad5d334db2f7ccef6a82af76088716fccb6b79199d02740bb5d4b816c0", &(0x7f0000000140)=""/96}, 0x20) r1 = socket(0x2c, 0x800, 0x4) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7d62548911dcbda}, 0x44001) pselect6(0x40, &(0x7f0000000300)={0x80000001, 0xc0000000000, 0x1, 0x0, 0x6, 0x6, 0x9, 0x9}, &(0x7f0000000340)={0xa, 0x5, 0xffffffff, 0x7, 0x9, 0xc4, 0x8, 0xffffffff}, &(0x7f0000000380)={0x5, 0xb36, 0x7fffffff, 0x6, 0xb, 0x9, 0x9, 0x500000000000000}, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000440)={&(0x7f0000000400)={[0x6]}, 0x8}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040010}, 0x804) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000600)={0x0, 0xc6}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000640)={0x4, 0xe78f}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000680)={r1, 0x8, 0x2bc, 0x2}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf8, 0x3, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xb}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc0b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x551}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x167d}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xec88}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x8000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000008c0)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{r0}, r6, 0x10, @unused=[0xa, 0x0, 0x2, 0x80], @devid}) sendto$inet6(r3, &(0x7f0000001900)="2c793e58af6d83bf5ebc10", 0xb, 0x20008080, &(0x7f0000001940)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}, 0x1c) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000001980)={'security\x00', 0x0, [0x3, 0x401, 0x2, 0x3cf261b1, 0xfffffffa]}, &(0x7f0000001a00)=0x54) r7 = accept(r3, &(0x7f0000001a40)=@can={0x1d, 0x0}, &(0x7f0000001ac0)=0x80) setsockopt$packet_int(r7, 0x107, 0x10, &(0x7f0000001b00)=0x1705, 0x4) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000001c40)={0xfffffffffffffffd, 0x0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xef}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbf73}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1e0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xdcc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001d00)={'ip6_vti0\x00', &(0x7f0000001c80)={'syztnl1\x00', r8, 0x29, 0x1, 0x4, 0xda4, 0x4d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x98, 0x8000, 0x7, 0x7}}) bind$xdp(r3, &(0x7f0000001d40)={0x2c, 0xe, r9, 0x39, r1}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r10, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x4c, r11, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000850}, 0x50000) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001f40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000001f80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf43}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}}, 0x4001) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000020c0)={0x2, 'syz_tun\x00', {0x1}, 0x304}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000002240)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x70, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x13cd, 0x7e}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc57e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x254}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x541}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) 23.06830063s ago: executing program 3 (id=2990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$sock_int(r2, 0x1, 0xe, 0x0, &(0x7f00000000c0)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000500)={{r3, &(0x7f0000000040)='memory.events\x00', 0x8040, &(0x7f0000000140)={@_ha_fsid={[0xd]}, {0x2, 0xf, 0x3, 0x8}}, 0xde88, &(0x7f0000000180), &(0x7f0000000200)=0x5}, 0x1, &(0x7f0000000300)=[{0x3, 0x0, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="1533a573ace473602c7a45a01adb7f188520fcd787918301540b", 0x1a, 0x2}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) getsockopt$sock_int(r2, 0x1, 0xe, 0x0, &(0x7f00000000c0)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000500)={{r3, &(0x7f0000000040)='memory.events\x00', 0x8040, &(0x7f0000000140)={@_ha_fsid={[0xd]}, {0x2, 0xf, 0x3, 0x8}}, 0xde88, &(0x7f0000000180), &(0x7f0000000200)=0x5}, 0x1, &(0x7f0000000300)=[{0x3, 0x0, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="1533a573ace473602c7a45a01adb7f188520fcd787918301540b", 0x1a, 0x2}]}) (async) 22.233080946s ago: executing program 5 (id=2992): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000000)='(){\\(/&--\'\x00', 0x0, &(0x7f0000000040)={@align=0x7fffffff, {0x7, 0x401, 0xfff, 0xa}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xa}, 0x6, &(0x7f0000000580)=[{0x2, 0x7e, &(0x7f0000000100)='\xa2\\\x00', &(0x7f0000000140)="3ef6d74314b2c74f3c4f3004f63f0f6a37cc7311e54a8603d6bfa19622eb45f0aa544c9acf7a9f37e6a92784f34b82f61102859d1a99dedbb14f", 0x3a, 0x30}, {0x3, 0x5, &(0x7f0000000180)='}}(\x00', &(0x7f00000001c0)="3cf7747504627a696f6211b18410a0421862da7f82d50995", 0x18, 0x28}, {0x1, 0x8000, &(0x7f0000000200)='\\^,/\\\x00', &(0x7f0000000240)="188161d4ae19e0560058b144a7db37c787e82b7abb15cac850fd1fb535628f078d6292168109860ae9aa8fd8ca080735c592b5fc16e1899e2d1783eb1e613bc54ccccc38923f74035326384dcfbd520df2bd441ff90113d4a91dc709e63d8f1bc8835f7d732c2b4ccc03640c608b77c2f5f71630cc14f949f7", 0x79, 0x8}, {0x3, 0xb, &(0x7f00000002c0)='^-\\\x00', &(0x7f0000000300)="db4f72c648a5637c2196ddc26e195931da28e9109bae80ba53df8e728179238d28fca6247eb935ee439cf6daef816df35618006a35edae1d230439033accc0d2f53930e0eb83c38a590fb2f6b3ca18ab1bc826e49cbcd3587c9cb0cb89", 0x5d, 0x38}, {0x2, 0x6, &(0x7f0000000380)='^*&-\x00', &(0x7f00000003c0)="673c42e1f6495b5a4fbf6200d2fab914d56711eb640caec942753a7028abf0b8ad36ff35d35738a156e3eea70f4cedc601b2e466e54a3aea5cea345cc453e683318ec0282058e23193946b57bce09d4ca58a757d77226970ff59497da05b6661cff4d699dde8ab0194632e6726d96352159e65fd728e23f642ed17a231a8f958903d38719162ab6e7fb77a143a519063992dac42bcf001d54c4bb3e9a8ccb150d564b0b2e159bcb71a656c1159eccdf6841f479235e95ab83a6667fd4bf138c46dbfb92724482a77151f9009ab80226a6db2de03fd78a9db1a30b8e2bfc3776d23d97e542ad5ef", 0xe7, 0x12}, {0x2, 0x8, &(0x7f00000004c0)='\\{}\\[^)]\x00', &(0x7f0000000500)="ac2dadb6b087050727a6aeff2ac0111e5be9639885147aca65c7baf953cbb3eb8c0d09fbc1baf816a9539a14f7fc5ce46976721500dbad18d80f8ea372f70a43f30c79266f6904b9684fdafe8c8a329045eb12f7c58edbea32ca", 0x5a, 0x38}]}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffe01, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan4\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r1) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r3) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a00)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x1e14, @local, 0x10000}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, @in6={0xa, 0x4e20, 0x8, @private0, 0x7}], 0x84) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) write$6lowpan_control(r0, &(0x7f0000000bc0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f00)={'gre0\x00', &(0x7f0000000dc0)={'gretap0\x00', 0x0, 0x10, 0x8000, 0xffffffff, 0x5, {{0x48, 0x4, 0x0, 0x20, 0x120, 0x68, 0x0, 0xfd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x17, 0x3, [{0x0, 0xd, "a5f09fb7550f4f66697a25"}, {0x0, 0x4, 'c\\'}]}, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x41, 0x2, [{0x6, 0x12, "241ecceec6f864bf1108c1b41b158a28"}, {0x0, 0xd, "1704a37c0d94637e295695"}, {0x7, 0x6, "ba7c6807"}, {0x6, 0x4, "bc51"}, {0x6, 0x3, "01"}, {0x2, 0xf, "20640dc9e93a78c6088de47017"}]}, @timestamp_prespec={0x44, 0x44, 0xc4, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x61dc}, {@remote, 0x2}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0xf07}, {@multicast2, 0x1be}, {@loopback, 0x81}, {@private=0xa010102}, {@private=0xa010101, 0xfffffffd}]}, @rr={0x7, 0x1f, 0xeb, [@multicast1, @multicast1, @empty, @multicast1, @broadcast, @empty, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x52, 0x0, 0x8, [0x23]}, @timestamp_addr={0x44, 0x44, 0x42, 0x1, 0x7, [{@local, 0x19ec}, {@multicast2, 0x10000}, {@local, 0xdef}, {@loopback, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0xda3}, {@private=0xa010100, 0x3}]}]}}}}}) sendmmsg$inet(r5, &(0x7f0000000f80)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000c40)="f1", 0x1}, {&(0x7f0000000c80)="de4a5eba39d4d7f60d21696434dcf273f5ad0d085b", 0x15}, {&(0x7f0000000cc0)="8253e1f971d2c287622fd02207289564765cdada83d366168ad1887f5707117d35872cff88d25e48a9a14442dea71955aeb9d9ad8fe03cbeb13c658ed4c3032a5dec7342d7098b76586131382ab00e8c83bda25b141aeb638fde4c2657218f8d7a6b8b714042fcf57ea26eca3e233239238000eb0681118f019dedc325b696e70182b232fc62be860ed5c534d315bb1c056d4fc38381d7a46a1dfca0655510e0afa632", 0xa3}], 0x3, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc9}}], 0x38}}], 0x1, 0x4000d) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001140)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000001240)=0xe8) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002600)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002640)=0x0) r10 = getgid() ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002680)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) r13 = accept4$vsock_stream(r0, &(0x7f0000002740)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) r14 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002780)={{{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000002880)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000028c0)={0x0, 0x0, 0x0}, &(0x7f0000002900)=0xc) r17 = socket$inet_mptcp(0x2, 0x1, 0x106) r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$netlink(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000fc0)={0x174, 0x36, 0x300, 0x70bd28, 0x25dfdbfb, "", [@nested={0x8, 0x101, 0x0, 0x1, [@nested={0x4, 0x82}]}, @generic="177a433c1e8baff707264ebe63396c8893002b6c64a4190e0d6a14ed0718f423df7653cda2bb81c3218a59adbc26b8b553886b802d3aa1cc73262e036f300adb0664fae05b3c48ac79bbe1b42fd97831d0f9631825e9d25587496b175b8c34", @typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @generic="131a89b446f0f2de185ce63484afd9dc6d02084c7bb7494025541aa1622ebbe16c33ce09fae7a601d42922f380202d2740c2c1438f4ddd28cf14ed977989b4f2e027a72b94313fad42848a0985bfc0faf0ffcfca60600c19164b9d5ab8b146dfdb35e30ff4f9dffeefd68aae1f1a65e22c646e6973a8818dd9aab22a5312907a1bfaf801f06fc71d6523e0bcca85c7bab8f88e2fa1e3e40da355ad987c5201026a64c50ada3f08520e45134671cfcb2b", @typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @generic="f97847c4ed692766bb9df6603b849a74706326", @typed={0x27, 0x3c, 0x0, 0x0, @binary="4c5dad61ff718d55e27eaf96533f4b30d7b33b8b2208e3f1ebea38120bcee6c3e96b49"}]}, 0x174}, {&(0x7f0000001280)={0x1308, 0x11, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x10c, 0x51, 0x0, 0x1, [@generic="bf60fbd9fadb5483b741ae6d8f5d378f3b1b566445d2243c77e3d29a95f2c2756cf3ed141e997c26ba148fe92eb636c1a1a9367333dd114d914eb66b3a9c58a203870e4564b6e25376ae825d437b86e1af61927313b5752a9167640f6b22ad72230d74c48b", @generic="9a4236f4c5e06dac7c6a1151f60911e8a033e0a8dd94db18d775e600266b79d21d1124c5b4487ff6f447c808cd250673d4f1aa25f0d12102f004538e372dffa81ccaf98ceba7629ca3ef86c7127151183690a09c2377c91105197f9abff76bb6ae47632ba62b81dd46a4cb057b4597f439c4843a4b55ec7790c08ddcda45bbefa2dc4aaa5a8148993190e48c3c4bee32090954e37595692c94254c15d56519f4ab3fe2"]}, @typed={0x4, 0x3a}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r7}, @generic="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", @generic="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", @typed={0x8, 0xdc, 0x0, 0x0, @fd=r0}, @generic="829d90733685d58c05e16cb3456a3b0720585b4bd2f97ce2606e1fa60e8f3b8dd203a93c4fe2bb2dc827c4aa0a4a196f93083dbeb98f564dc782099cf49e822bc63a92d5805cbf2ae54862946a3730344686397ae45420eb1cc8b6e6366930c3c19411968e5a3612ff6bdfb80bf23d76539dfe42b7c91067d258bfb646ecf3a755c76ef890a056122682a96899ca1fa9c90a5b00a8e6eb0ead0eba012ffa2bbdec6ace39715fc99e5e405833950c34a93414417f6d5a665d3cf68479b98671922485cd4abf750f81b93a96f88bed777f6a0948ddaeea2c52bbd60447"]}, 0x1308}], 0x2, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r13]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r17]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x20, 0x1, 0x1, [r18, r5, r5, r0]}}], 0xf0, 0x804}, 0x4000004) socket$inet6(0xa, 0x6, 0x512) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000002a80)) 22.2178563s ago: executing program 3 (id=2993): r0 = socket(0x10, 0x3, 0x9) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x290, 0x0, 0x290, 0x0, 0x138, 0x350, 0x350, 0x350, 0x350, 0x350, 0x6, 0x0, {[{{@ip={@broadcast, @empty, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'pim6reg1\x00', {0xff}, {}, 0xff, 0x1, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3ec}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 21.651704645s ago: executing program 3 (id=2994): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x308, 0x220, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xff000000, 0xf, 0x7, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, {[0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x0, 0x3, 0x4794, 0x9, 0x7fff, 'macvtap0\x00', 'team0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @private=0xa010100, @broadcast, 0x4, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff000000, 0x1, 0x10, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xcf4b5403469f3cad, 0xff, 0xff]}}, 0x2, 0x63f, 0x80, 0x7ff, 0x8, 0xcb45, 'macsec0\x00', 'team0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="7f633373fcbc", @mac=@remote, @private=0xa010101, @multicast1, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) close(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x6, 0xf) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) close(r5) write(r1, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[], 0x10448) socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r8 = socket(0x10, 0x0, 0x4) getsockname$packet(r8, 0x0, &(0x7f0000000180)) 19.188283831s ago: executing program 5 (id=2996): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}, 0x1, 0x0, 0x0, 0x6040850}, 0x20008840) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newqdisc={0x5c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 18.308167955s ago: executing program 3 (id=2999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="40000000000000000000d57c00000000a25800007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r4, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000800) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8004) write$cgroup_pid(r8, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r7, &(0x7f0000000200)='THAWED\x00', 0x7) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000180), 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0644ae9ff467d855680000"], 0x8) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) 18.237647811s ago: executing program 5 (id=3000): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000180)={0x2, &(0x7f0000010080)=[{0x50, 0x1, 0x3, 0x4}, {0x6, 0x0, 0x0, 0x8}]}) write$ppp(r1, &(0x7f0000000400)='0L0', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x1b}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB='9\x00\x00', @ANYRES32=r4, @ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r2, &(0x7f0000002d80)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x10, @loopback, 0x8, 0x2}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="c75033efe9cc1a3408ce04106962d72a086421464879f9ecf6073468b3935b5fc1a1f662d1608153ab8fe1f8e9bff43d2ec614fa6d966b737625062380443d0227", 0x41}, {&(0x7f0000000300)="96ab6481fb1eeeb5bcd4f35f28dfdf16744df0631a30a2752975cbadc237b8957cbf584c4b8af122a66d6439fb388390423f483569f9c42b9d6c07c75ce0b71c311b74d9e07f3b4ac9a86763e0da14ea06e7b2c65915dbd80733b509910897e991fbce71041e9122276332cb961aa6d590ce71375b08494aee6dfc95df190b4e8dff24570a48de250a541063650ec178090eb8295fdb3a7569a2a5b6a0db92bc5dbdfe260150d336d7eebd1a1d9fb38a14d68ad6e433f4454023be488841fb5f391d1962ea891859ef2238", 0xcb}, {&(0x7f0000000400)="b570aea5a197803662ba8d0837706469bf89d14c4c4a8cba090cf5791f6e76f5eeece0446a2ec0df7bc0cd1124992d2226a5d64e3ac537d3179a9332a34ea19effcf8f86eedd1c4db2821ec9d86633fab792197eb7", 0x55}, {&(0x7f0000000480)="e4d51debcac8a971ee84ff8bd43b5cfa45990ad46b06aee82cadd1042604d1fc48808e9fe742fad1cc50a7b89d5ab83320df74cc24d97b1e5ecddd4646890c199dcbc820cc8236fb04b4d28dc17e665fc7fc151fb36580a75a539e019e948e81338c2c7ebec9ddaccc777ea83309b09cfc483069164f7bf1ba877f060814c94c639defc68b883bf6bb4c9feac14768bebbc75a449cb607814c3a7868540a5fbb748e5be94bce3c214b7e73eb837961793c044442b156aa152d6327eea5e54701dbbd6aadb8d9775a5f71dc1a1add5b99cd888cbbc9063be3de908b3514305af6ca225b20", 0xe4}, {&(0x7f0000000580)="99783f06f843c1c524b3fc54c3746b9fd58de99ca9bbf7ab205e1ce5f6f3e1cb5540000b136aada5114c9768794b8c69a0d4c0e581de7fcb3ef32f59ff1299ccc2e29a433d789d2ad720c9c5cca10fe2919d63fc0c3a9978a7e9dcb3682b4db85a35d21acda961baae8ec74094cd8fbaef9181732ada0c0957826e6a7a58", 0x7e}, {&(0x7f0000000600)="379d93e7", 0x4}], 0x6, &(0x7f00000006c0)=[{0x10, 0x10c, 0xb65}, {0xa0, 0xf215a288fbf1a8bf, 0x800000, "dbc06f31cc622aa5246bd0a5d01d91d3e04d486d5cc565f9e1e32a8c0f33d0ad56dd09e99faf13a80563fc587e2ae74870d97e97438ec23f9f475955a617646c8d3772df1704c18177445f0f6359b40a17bc2edb411c2e2ed0a57649d6e6a6ee6ef266150bf9634e3b0b451a68f83479f9b25d205a2d4bde7ea31f8da175c055453b8e3d413b2d0edbeb251c67584b8b"}, {0x10, 0x107, 0x6}], 0xc0}}, {{&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000800)="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", 0xff}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000000a00)="fd37aae9ca672b956d8363e760dbaef2d4c036111252502df612e258d034af7549aaa492d3e6908f0c598aa553c75e541ae5950f5e77593b18e010a352316d2b65f2b9269399bd51c0b2e8c1b4d447740cc0191e", 0x54}, {&(0x7f0000000a80)="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", 0x1000}], 0x4, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], 0x12c0}}], 0x2, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001", @ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 17.013619455s ago: executing program 5 (id=3005): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000006c0)='pids.max\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESDEC=r3], 0x9) 16.580815056s ago: executing program 1 (id=3006): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r2, 0x25, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x3a, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f0000000540)={&(0x7f0000000480)=[{0x3, 0x5, 0x2}, {0x2cc, 0x2}], 0x2, 0x10, 0x101, 0x80000001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYRES64, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071211f00000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd}, 0x94) socket(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x2a, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1], 0xcdc}, 0x1, 0x0, 0x0, 0xa89cb915cb77a2cd}, 0x89) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x68, r5, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x2, 0x34005}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x1f8, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0x0, 0x1}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce}, 0x94) 16.493720956s ago: executing program 0 (id=3007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x2f, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x9, 0x2, 0x6, 0x4, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x100, 0x4c, &(0x7f0000000500)=""/76, 0x41100, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xa, 0x2, 0xf}, 0x10, 0x1924f, r0, 0x3, &(0x7f0000000600)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000640)=[{0x2, 0x1, 0x0, 0x3}, {0x2, 0x1, 0x9}, {0x3, 0x4, 0xe, 0x8}], 0x10, 0x7fffffff}, 0x94) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r3, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 16.409331043s ago: executing program 5 (id=3008): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000800000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3cae}, 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3cae}, 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0xa4ff) (async) setsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0xa4ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c081}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ac0000000140a0103000000000000000007000008110003400000000008000340000000070900010073797a30000000000c000640000000000000000408000340000000030c00064000000000000000036f000800dcf482a437981760b41b15d9aa6437d49beb8e2f278bdcd9b6427d8f5393d4593c2b3667927d230cfe9a968fa0e9230513c578a9ee444ddffa5ec156a33ecde9614c2b0f1cf73daede055c1f0833be15191b5664df9abdde1885c451297a204c10e034283c8996b6233fda0030010000000a010200000000000000000200000908000240000000030900010073797a310000000011000600caa827f5345c98c89c2610f7610000000900010073797a3000000000dc000600f26c231d1754d4a72ae880a0032781e3bcb2c43ce686ee542f03e274b8f02991f78849a57acae29b44214ca81397ee05289b295f9ef36deecf525e6db3d029c8d282b856ed5cf322d26c9f80014b5eb076572e88c464fa5800d5030b70461fb4d1065f34d8c12ad68aa1a301ace9b50d82b09ff3971f44976e8dae0c18d6aa33fb40a6903df6bf5ec2ea164a624de520c7bf0e667323afc23539ef1f1c012db87b70e487c2d245402dccd94dcf7892405ae3d78264f68f65bef42707a48894ee4e6371e2ddd06ea8eef21df43617b6c723608e67445514910c000440000000000000000174000000160a030000000000000000000200000a4000038008000140000000002c00038014000100776c616e3000000000000000000000001400010070696d3672656731000000000000000008080240000000020900020073797a31000000000900010073797a30000000000800074000000001140000001100010000000000000000000300000a"], 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_emit_ethernet(0xff, &(0x7f0000000180)={@empty, @random, @void, {@ipv4={0x800, @igmp={{0xd, 0x4, 0x3, 0x5, 0xf1, 0x67, 0x0, 0x1, 0x2, 0x0, @loopback, @remote, {[@end, @noop, @lsrr={0x83, 0x1b, 0xbf, [@broadcast, @empty, @multicast1, @private=0xa010101, @rand_addr=0x64010101, @loopback]}, @end]}}, {0x1e, 0x8, 0x0, @empty, "3600aaf706538ed26d90c35f9e83c698ea0a02852ee2aa97244c60bee0cd0f43a55f5f6b642ef875c6eb8985ed778711828ebdb28ebaf9c28db3cc8f1f47807d61ab19037629aa52cec81f7169ad82ca10e3432ad9c92823780ab8799cf7ef167c0031236d6f05e11556a0968a688e9ae439b2c4fd27001a24c27e6e73a9368c1b7f13e739f36a2c2809374fabda5346c0811e9ec16e1a6566888b6c781a6afd79c0cb3b4570e6a0629c067702bfd3a403ced426e8"}}}}}, &(0x7f0000000280)={0x1, 0x4, [0xb26, 0x9a6, 0x92, 0x5fb]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180a000000000000000000000000000085000000190000009500000000000000502d9e1de0dfdaf0"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc}, 0x80) socket$tipc(0x1e, 0x0, 0x0) 15.674580899s ago: executing program 2 (id=3009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000bbf248abf9000014f30000000000000000000000000b0093011680fa952764c765afe1da9cfb15000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff0000000008"], 0x34}}, 0x8000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='D', &(0x7f0000000240), 0x4b2, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r0}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x12}]}}]}, 0x40}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000009500b522644500009500"/48], &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000005080)={@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4}}, {0x0}, 0x0, 0x44}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) r10 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r10, 0x4008941a, &(0x7f00000001c0)=0x2) 15.341907315s ago: executing program 5 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd00, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) 15.265557596s ago: executing program 1 (id=3011): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x3, 0x12) preadv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1, 0x6, 0x200) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300000018200000dc6f36f8b6af8fb759535f71afa0c3d7688d6b43de31e6459cc2171c18a462ddb7321cf0bd5f4ec480bb66f9cf522de65f5beb197d6116ee559026b13ef3696a6e2b189f674176c0292579ad76c4998ca797045d097688eb120e66229281786206be6ecb4bca9d0e4ce3c4384869fd75b42c7089d0311365996888d8adc00cc3ac528e71501d9d63087d6129fc0ca28a4348b0", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 15.032198173s ago: executing program 0 (id=3012): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001200), r0) 14.019315862s ago: executing program 0 (id=3013): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000800), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100005060100000000000000000000000000000000000000000000000c00030064756d6d79300000100012000a00010064756d6d7900000008001f0002000000"], 0x44}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000280)={0x79, 0x6, 0x5, 0xc, 0x2, 0x81}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000800), 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r3, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c00020008000a00e8030000"], 0x3c}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000330023000000000000000000000010006c00000000000000000000000000fc0200000000000000e1004000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r5 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x44, r8, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000012c0)=[{0x81, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x620542, 0x0) unshare(0x20000400) pwrite64(r9, 0x0, 0x0, 0x9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000001340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc26d5c22cf351505}, 0xc, &(0x7f0000001300)={&(0x7f0000001500)={0xa30, 0xd, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa08, 0x3, 0x0, 0x1, [{0x670, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY={0x33c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "bedd632c37e117532124e7b5b7a43fa61bd3e2ab8f9bd3a2cc12b7a575a807a6c9b3e10bd1ada1beaf8c78c9666d40e273b9da66137c31da5b43d0c35601b9bc19bf3845a6a4295f1645f29165972209a8fe93be638764d7af8f7ce361fd2fe6426dd8b0e2386592a53a3eae275f78e786966291f960e4b0673293c9956a8af466a51e1cce0bf1c3b17716198a8e3bbef8ac56ab438acebc49e7006cd1fb1579129bad2d46267d3d35328dcc58db3491df0e93aced26c72defff6c0b327fb311541ee0f65f20bd9937075e315b66636572d0cfeec65b7ef2ee60146634cd42"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xc7, 0x1, "534ffb0f2d2f0f1dac90cb47e447a29198927650d6b176bb0c51e39229d65accac08f1a3d438816502685e3f1d413b56e3bc652ff8252c36760050e762d6b67990d2ac4ffe91648f4faef4fbd7965b49b03271054639dd352a1baee853a8d1f66ad04a3f580b2b197ac45202893c543650e6370c599c4880bc9f699801216effefea642dbe97a26ad8c5739313d5fbf1a460e7b06a6a81bae29d39a03d5e7fa69f2408ff0206ade446dff6be858352fdba407b7aaa63c0125afd0f1281297c9d7581a2"}, @NFTA_DATA_VALUE={0xb4, 0x1, "0492948b8b13726488851843b4a01d63058b4a58b135f984b4ca6e7f1f82740629806efeb8bda3e218857225f34ad7131267cdaac444487b8f8977d2d4c3756c86a0d80b12a595190ea14e38917ddb494288a98cc1e9c93024e6113f85a954e1b1d23c23486d66883aa0cff9889be8072015092bbd247113d330624bc1a546609991e1287e1eda98f80f31038f281699fd9bad339a9321b3412ebb06f311a2b055e4e22521d51b1618c12afd366f5851"}, @NFTA_DATA_VALUE={0x27, 0x1, "09eef426de282c7ff30f58720b6413d9137498f20af77278ae3b866732439f4ec45711"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x23c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "16c4e93cb18b44ff8eef3fbfd4253d9f43121a441f75cfd72d7053446ad24af51b9de1241691c4b01976a5038a6e81f1bc93"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x97, 0x1, "e80eb880ee822307bb96637e9b71c1af9bf9e7600407c653231f035563f5f4603fd4e21b8d69e621e7f19c5b01c85d2f813fc89ee9fef7c917e70201586f047c4722bdcd76991247df36d044dcb9b8dded92922a02c5cb9a5fbd206a29b31ddf7962093010954a63a07020a72a14b6647d7dfa35b76d2380746cd62094facf5065269b3131e32397ee42c68209847e3ad0a0c7"}, @NFTA_DATA_VALUE={0xee, 0x1, "fea72be5a4f22ab0624e922e3a32bc38f866cb7d31f64e27906920b004fa730e86e6ce63882e54ba6267ce85b3a9c61e5817e8d36cc934706d2530ce89b74761c3f98ca16b9b163049cc3cd44d1a2f59e713644b04b2e65e8acf113e5c80cbe340cedeeef6172f0ed042de9f5c509a3cd28a15d091cfc7d00b5625e676bdc3d7b51efe67a292d7b8c7b70bd118daf7b66ee0a99bc48f8542685300f52561f552ea80c4729bc5f9ddb5d95bc09d4025841edb14a409c4e85e6c4492e88db2d471dc6c409c2d1494831140b634f1b9f17888e9a05e390b90ebde76e244852d3c6e97e29856669b1e96c01d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_USERDATA={0xc, 0x6, 0x1, 0x0, "8690a66c3c56d6dd"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x394, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'Q'}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xe7, 0x1, "2560d4281b3609942dea2f5070d2a94bf2ae94c6079cfb0b2ebd38542491ad4859918fb954bbea466c1d86d60ff9877143b0712f0366908895d915b18f476814da73df1b8248947ce5d3bf55af3f1a2e4adf29be07195e575a984077b259b0d293f45b9ac1ef8f941a3fc0515ccba0cf6a35c17951f089040e0ff1ebcac506ba89fd0890af1e11d920efa00475a247d0cdcebe61df077fe3cda55c916fd6cb1a1562bdb9b05aae19f70eaa554e1037372c005e6d19e3a922ef4f82a461eac7f587174a82bd9ee0d4bfe7d98fe483602ff0ddfe02dd3432602a4b19f7f12516e05b4df1"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_SET_ELEM_USERDATA={0xa0, 0x6, 0x1, 0x0, "4f333f87408c0da44f7426f4349e532706a724444dda62ecc0438d289841b7cb8d1173f2a5549a3d29457c88fcbab6654b20d4aeae25768272a470a0821a1babe514bccff0868d2fd390681770f5ef28bdf4edbf0dd80d61d109a21a7f70848d9bf41b8bf26c50900f0208c78f3acff48e133ab78f104e0d9aac172d3f4997ea8c2419ac59923e68a7805bfedb1298d0ad5fd36d14e4eb803d131ade"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}]}}}, @NFTA_SET_ELEM_USERDATA={0xce, 0x6, 0x1, 0x0, "48854726fe687d653763b032f0dff3fb17bc8feef6fd83120b27dc10b0ab8719157b30ee836f348d46372bf0d1e688bcba49883ecfeb908b1243a00f849b52e05c78d911ed78e5bda26236f793ee0a5394eceac8d33c46aa1bd8bb2d16e995ec24680be7a75b907b9d830ba7b144857a3f8be42f5d21fa303412ba90690be027beb92f31fe82fa1918de773f994fa9d5cd94791b8b5fb95f4544747483ff0f529b406e0d04e6fbc19bfa3fa70b2bdca6f0aa5b8b14dec299f78d6ace9ccc0cbfdb67750e348b686761a2"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x62}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xa30}, 0x1, 0x0, 0x0, 0x2081}, 0x4001) r11 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r11, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex, 0xffffffffffffffff, 0x7, 0x200e}, 0x20) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x3}}, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) 13.988571377s ago: executing program 1 (id=3014): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x8, 0x2}, {0x8, 0x1}]}, @var={0x5, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000840)=""/226, 0x52, 0xe2, 0x1, 0x8}, 0x28) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="00181100000000f3c42e3f41d99d816f00000000000000000000000000ba6bd4915b6fba2c5d7c8586b79433665004c65a0dc54aa3330cdbdcb5b1f5d920ec", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000001f9ffff9400000000000000bf7accbf68f08fa83442f22e24a2f56f4a9ec050cfb3aaabc05f747b"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) (async) listen(r2, 0x5) (async) accept(r2, 0x0, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x16, 0x8, 0x4, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, &(0x7f0000000140)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, 0x0}, 0x20) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x20, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xd1}]}]}, 0x20}}, 0x80) (rerun: 32) r6 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x10, 0x89, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x210000, 0x2b}, 0xa, @in=@remote, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0xffe0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000001d00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @exit, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 13.987542785s ago: executing program 2 (id=3015): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000f00)="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", 0x106}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0bab566913ef2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000440)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000000c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000000b40)="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", 0x322}], 0x5}}], 0x1, 0x40080a0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', &(0x7f0000000e00)=@ethtool_per_queue_op={0x4b, 0x1, [0x6da, 0x949, 0x7fff, 0x5aa104ec, 0x5, 0x800, 0x0, 0x0, 0x2, 0x8, 0x400, 0x100007, 0xcce0, 0x7ff, 0x8, 0x4, 0x10, 0x9, 0x80000001, 0xc, 0x4, 0xe5f, 0xbbd, 0x3, 0xf, 0xfffffffb, 0x7, 0x4, 0x1, 0x401, 0xab05, 0x74f, 0x200, 0xa01f, 0x8, 0x2, 0x6, 0x6, 0x2, 0xc, 0x7fffffff, 0xffff0001, 0x10, 0x1ff, 0xa3eb, 0x0, 0x6, 0xffffffff, 0x186f, 0x2, 0xfffffff8, 0x9, 0x1075ed75, 0x5c, 0x1, 0x8, 0x3, 0x1, 0x3, 0x7d, 0x0, 0x6, 0x5, 0x1, 0x55, 0x10000, 0x4000004, 0xb09, 0x7, 0x1, 0x4, 0x7, 0x3d80, 0x4, 0x3, 0x9, 0x2, 0x800, 0x1, 0x3, 0x40, 0x1ff, 0xc147, 0x9, 0x8000, 0x80000001, 0x5, 0x9, 0x93, 0x1, 0x7, 0x80000001, 0x6, 0xf, 0x4, 0x1, 0x9, 0x6, 0x80000001, 0xfffffff8, 0x4, 0x7, 0x7, 0x40, 0x3, 0x6, 0x1200, 0x1, 0x1563, 0x9, 0x5, 0x5, 0x8, 0x301, 0x3, 0x4, 0x3, 0xbb3b, 0x90, 0x7, 0x9, 0x2, 0x4, 0x0, 0x0, 0x2, 0xfffffff1, 0xd]}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x9ef0, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x2}, 0x50) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_opts(r4, 0x0, 0x13, &(0x7f00000001c0)="1e2fdec1b8", 0x5) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) sendto$inet(r4, 0x0, 0x0, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000060a030000000000000000000a00fffd090000090002004497730e64124da4e771bf65fa3573797a3200000000140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x10, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x1, 0x1, 0x2, 0x4, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000300)='GPL\x00', 0x2, 0x95, &(0x7f0000000340)=""/149, 0x0, 0x50, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x7, 0x7ff, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000500)=[{0x4, 0x5, 0x5, 0x4}, {0x2, 0x5, 0xf}, {0x5, 0x1, 0x7}, {0x3, 0x5, 0x10, 0xb}, {0x4, 0x5, 0xb, 0xa}, {0x4, 0x2, 0x2, 0xc}], 0x10, 0xd}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x25, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @tail_call, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xd9e697d02ae3d1b8, 0x6, 0x0, 0xffffffffffffffc0, 0x10}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x617000, 0x800}, 0x10, 0x23062, r11, 0x1, &(0x7f0000000700)=[r0, r0, r12, r0, r0], &(0x7f0000000740)=[{0x1, 0x1, 0x6, 0x3}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.225635738s ago: executing program 2 (id=3016): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004001001000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdf, &(0x7f0000000fc0)=""/4063, 0x40f00, 0x5}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1140000000000000000012800b005632b6d0637365630000100002800c0004000300000100c28000080005000300000000000000afef26739564cb08e5fadf2cf404c3ce78fac88bd2fbb6ade924f280b9b77322faf0ff1131a6f1f9fed6c11e3f1522efcc48d4b0d355820b3d", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004001001000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdf, &(0x7f0000000fc0)=""/4063, 0x40f00, 0x5}, 0x94) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (async) listen(r0, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1140000000000000000012800b005632b6d0637365630000100002800c0004000300000100c28000080005000300000000000000afef26739564cb08e5fadf2cf404c3ce78fac88bd2fbb6ade924f280b9b77322faf0ff1131a6f1f9fed6c11e3f1522efcc48d4b0d355820b3d", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) 12.816479192s ago: executing program 0 (id=3017): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd43}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) (async) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5000000000000000000906500000003006000000000393a00ff020000000000000000000000000001fc0100000000000000000000000000008900907800000000fe880000000000000000000000000001fc0000000000000000000000000000000002b0dcc4a3616748a199e53d96e28516dee2f18bf6ff13064479105f3859"], 0x73) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) (async) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) (async) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000010", @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000010", @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1080}, 0x0) sendto$inet(r6, &(0x7f0000000040)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x0, 0xd, 0x4, 0x2}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x0, 0xd, 0x4, 0x2, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={r9, 0x3, 0xfba4}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mtu(r10, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4) 12.215850799s ago: executing program 1 (id=3018): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x34, 0x0, 0x2, 0x2}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9, 0x6, 0xd, 0x100, 0xfffffffffffffffc, 0x10001, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2, @ANYBLOB="0000000008000000182b0000", @ANYRES32=r1, @ANYBLOB="80000000590100009500000000000800"], &(0x7f0000000480)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000}, 0x94) 11.953221195s ago: executing program 2 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300400000fbdbdf250c00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24008881) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x20, 0x70bd29, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4c045}, 0x4c005) 10.877652174s ago: executing program 2 (id=3020): unshare(0x24060400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) 10.276635224s ago: executing program 2 (id=3021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000098000000030a0179c0c0210000000000020000060900010073797a300000000078000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f1a4d0371736af66032ae4eed98dbb95537f0abcb8dc3c3813375407669db4999bf4d277be"], 0xe0}, 0x1, 0x0, 0x0, 0x40850}, 0x44882) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x13, 0x0, &(0x7f0000000100)="259a001471a76d2688a24e6588a8fb5e0af663", 0x0, 0x8a08, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000080)=0x407f, 0x4) setsockopt$packet_int(r4, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x10000) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0xdc, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66a6e056}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51ad9f0c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2752674d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4811b5e5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6263d575}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bdb6f3d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0xdc}}, 0x1) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r10, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-}.\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000805) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000180)=0x80000001, 0x4) sendmmsg$inet(r2, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x55, 0x5}, @enum64={0x5, 0x2, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x4, 0xe0d3}, {0x9, 0x10001, 0x3}]}, @union={0x8, 0x2, 0x0, 0x5, 0x1, 0x5, [{0x7, 0x0, 0x7}, {0xa, 0x0, 0xe2f8}]}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x57, 0x5f]}}, 0x0, 0x80, 0x0, 0x1, 0x8}, 0x28) 9.906796496s ago: executing program 1 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x41, 0x7f, 0x9}) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x1, r6, 0xfffffffd}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000000)=0xc, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @multicast2, 0x0}, &(0x7f0000000300)=0xc) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x8, r7, 0x12}, 0x10) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0205866, &(0x7f0000000900)={&(0x7f0000000100)=0x9ae, 0x5, &(0x7f0000000140), &(0x7f00000008c0)}) connect$unix(r8, 0x0, 0x0) r9 = getpid() r10 = getuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) sendmmsg$unix(r2, &(0x7f0000000880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="394e8037857d431d200a0d987efe45365acae06b0560703cba41e9e6eb3236d39f7fbd21a0c57871f06ee8a0ccca7b31f488f5c91423f9973840ed68ad7db6ae203c8710ab16e7b7e7520c605595a12b5a0ed477c7b117b603afb7f500042d42164f921f038938bfcc7e13c8a9e65eba5e73a32219a8bd519ebd9f06e784a59c5d87217e2f99752f27762140f04d7a2e", 0x90}, {&(0x7f00000002c0)="9bf90ffad6256eb22875ac98fdd367bab7665b5e1f358ddf60f7d7f59ffb121076b7eaa8cccf", 0x26}, {0x0}, {&(0x7f0000000580)="3fe1ef4299cd0644bda3015117426307d67e2bcf252668d5a45524fee5fc5970cc15df1f03b1a5ffd02b3213bfa04d97a04f2c5620a1083230281674dd0231588284e73fdccb6baad2f926eabad77375c224b6837eabf836bdb1421b0b175e05f45f1eed89747e50efccab259c5f07db6e06e0e38c13ff26dcfca78ddd198e3e0fc13dae49098aff055cb3b1f36bfa04643a6d30e3e29e51d072bc62ad1d94557f33b7fbb0788287a8", 0xa9}, {&(0x7f0000000640)="c9e07db553caa1f43222d27df491d5fc6cdf3065e453e685ce34099e9bad06b9d20f0decf840b8efec566b92d6afa92110cceab21fbf0a211a9ab264e99d35597462d4aab357c8206714b6c709d8f91af947842dd27f8b1e1d17d9f2b41e59", 0x5f}], 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r8, @ANYRES16=r1, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB, @ANYBLOB="a1890d4aa98f8f677ecc2e928f8b8e4850a888c2d90f3a02749b25c4af184328333ca42d7ebd5be5b02f6daf188c834c2d6c6f39234d6e4dc6f349accd0c9c6a679e956c3e5669b9336f", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x8800}}], 0x1, 0x4) syz_open_procfs$namespace(r9, &(0x7f0000000180)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r12, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) getsockopt$inet_opts(r12, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) 9.803927437s ago: executing program 0 (id=3023): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getlink={0x3c, 0x12, 0x1, 0x70bd25, 0x0, {0x7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0x1, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x14, r2, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x14, r2, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0xc000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000b80)=ANY=[@ANYBLOB="180200000900000000000000000000008500000007000000850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x20b, @loopback, 0x7fff}]}, &(0x7f0000000440)=0x10) socket$rds(0x15, 0x5, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, 0x0) socket(0x2, 0x80805, 0x0) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r6, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) getpeername$inet6(r4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e1ff46bd3bf574b7c1f6f585862b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e1ff46bd3bf574b7c1f6f585862b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$xdp(0x2c, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) r9 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x5, 0x9e38, 0x53, 0xc63, 0x7, 0x8, 0xe09, 0x2, 0x78, 0x40}, {0x9}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r7}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000010002a00000140012800b00010062726964676500000400028008000100"], 0x40}}, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) 9.201492025s ago: executing program 1 (id=3024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000180)=""/234, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1d}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)="1c202d9c654129707fcb04292cee205af0f8b5a0a4262979fa0118fb4db7686db9", 0x21}, {&(0x7f0000000380)="b11ae24054aa94eacdc2873697dbe92faba5492540910951dd05d042154dde47177593b805bdbf0e4690060596", 0x2d}], 0x2}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81eb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x55, &(0x7f00000000c0), 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a44, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x6, &(0x7f0000000600)=@raw=[@alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r5, 0x952de000) 0s ago: executing program 0 (id=3025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) unshare(0x24060400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) kernel console output (not intermixed with test programs): [ 528.575686][T14997] bond8 (unregistering): Released all slaves [ 529.185348][ T31] audit: type=1804 audit(1789918313.587:12): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2003" name="/newroot/402/cgroup.controllers" dev="tmpfs" ino=2090 res=1 errno=0 [ 529.190090][ T31] audit: type=1800 audit(1789918313.587:13): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2003" name="cgroup.controllers" dev="tmpfs" ino=2090 res=0 errno=0 [ 529.394254][T15027] netlink: 'syz.0.2003': attribute type 9 has an invalid length. [ 530.139332][T15072] netlink: 'syz.5.2016': attribute type 4 has an invalid length. [ 530.158235][T15072] openvswitch: netlink: Multiple metadata blocks provided [ 530.225823][ T6009] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.226922][ T6009] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.226962][ T6009] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.226997][ T6009] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.504717][T15088] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 530.931321][T15098] __nla_validate_parse: 12 callbacks suppressed [ 530.931344][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'. [ 530.984695][T15100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2025'. [ 531.505822][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2033'. [ 531.523045][T15132] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2033'. [ 531.614979][T15121] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.615479][T15121] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.954800][T15121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.000829][T15121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.011312][T15141] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 532.777462][T15121] veth1_vlan: left promiscuous mode [ 532.799554][T15121] batman_adv: batadv0: Interface deactivated: macvtap2 [ 532.900141][ T6173] lo speed is unknown, defaulting to 1000 [ 532.900192][ T6173] syz0: Port: 1 Link DOWN [ 532.912512][ T6185] ip6_vti0 speed is unknown, defaulting to 1000 [ 532.912558][ T6185] sz0: Port: 1 Link DOWN [ 532.922449][ T142] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.922481][ T142] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.922519][ T142] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.922543][ T142] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.922577][ T142] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.922608][ T142] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.922642][ T142] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.922666][ T142] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.044062][ T6173] lo speed is unknown, defaulting to 1000 [ 533.044129][ T6170] ip6_vti0 speed is unknown, defaulting to 1000 [ 533.288224][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2037'. [ 533.310048][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2037'. [ 533.329348][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2037'. [ 533.351541][T15162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2039'. [ 533.721431][T15183] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2041'. [ 533.735243][T15183] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2041'. [ 534.156916][T15201] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 534.397532][T15202] netlink: Failed to add helper -22 [ 534.397605][T15202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.813905][T15221] netlink: 'syz.0.2050': attribute type 10 has an invalid length. [ 534.876699][T15229] FAULT_INJECTION: forcing a failure. [ 534.876699][T15229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.876730][T15229] CPU: 0 UID: 0 PID: 15229 Comm: syz.2.2051 Not tainted syzkaller #0 PREEMPT(full) [ 534.876750][T15229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.876761][T15229] Call Trace: [ 534.876769][T15229] [ 534.876778][T15229] dump_stack_lvl+0xe8/0x150 [ 534.876813][T15229] should_fail_ex+0x410/0x560 [ 534.876843][T15229] _copy_to_user+0x31/0xb0 [ 534.876952][T15229] simple_read_from_buffer+0xe1/0x170 [ 534.876986][T15229] proc_fail_nth_read+0x1bb/0x230 [ 534.877043][T15229] ? common_file_perm+0x20e/0x2b0 [ 534.877070][T15229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.877102][T15229] ? rw_verify_area+0x24a/0x4c0 [ 534.877143][T15229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 534.877171][T15229] vfs_read+0x213/0xa80 [ 534.877204][T15229] ? __pfx___mutex_lock+0x10/0x10 [ 534.877276][T15229] ? __pfx_vfs_read+0x10/0x10 [ 534.877305][T15229] ? __fget_files+0x2a/0x420 [ 534.877335][T15229] ? __fget_files+0x3a2/0x420 [ 534.877358][T15229] ? __fget_files+0x2a/0x420 [ 534.877393][T15229] ksys_read+0x150/0x270 [ 534.877423][T15229] ? __pfx_ksys_read+0x10/0x10 [ 534.877462][T15229] do_syscall_64+0x166/0x520 [ 534.877484][T15229] ? trace_irq_disable+0x3b/0x140 [ 534.877505][T15229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.877525][T15229] ? clear_bhb_loop+0x70/0xc0 [ 534.877548][T15229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.877573][T15229] RIP: 0033:0x7f191955e98e [ 534.877592][T15229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 534.877608][T15229] RSP: 002b:00007f191a3e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 534.877628][T15229] RAX: ffffffffffffffda RBX: 00007f191a3e26c0 RCX: 00007f191955e98e [ 534.877642][T15229] RDX: 000000000000000f RSI: 00007f191a3e20a0 RDI: 0000000000000003 [ 534.877654][T15229] RBP: 00007f191a3e2090 R08: 0000000000000000 R09: 0000000000000000 [ 534.877665][T15229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.877676][T15229] R13: 00007f1919826128 R14: 00007f1919826090 R15: 00007ffdb213b428 [ 534.877709][T15229] [ 535.472933][T15251] syzkaller1: entered promiscuous mode [ 535.472957][T15251] syzkaller1: entered allmulticast mode [ 535.939777][T15272] __nla_validate_parse: 1 callbacks suppressed [ 535.939803][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 535.939830][T15272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2059'. [ 536.384154][T15280] openvswitch: netlink: Flow actions attr not present in new flow. [ 536.704293][T15302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'. [ 536.706214][T15299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'. [ 536.801576][T15304] netlink: 'syz.1.2065': attribute type 23 has an invalid length. [ 537.004390][T15315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.097462][T15315] openvswitch: netlink: Key type 29 is not supported [ 537.106945][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2068'. [ 537.477774][T15336] netlink: 1303 bytes leftover after parsing attributes in process `syz.3.2072'. [ 537.531464][T15339] tipc: Enabling of bearer rejected, failed to enable media [ 537.818220][ T6170] dummy0 speed is unknown, defaulting to 1000 [ 537.828842][ T6170] dummy0 speed is unknown, defaulting to 1000 [ 537.829068][ T6170] dummy0 speed is unknown, defaulting to 1000 [ 537.898140][T15352] openvswitch: netlink: Flow actions attr not present in new flow. [ 538.185420][T15375] netlink: 'syz.2.2079': attribute type 10 has an invalid length. [ 539.034383][T15412] syzkaller0: entered promiscuous mode [ 539.034407][T15412] syzkaller0: entered allmulticast mode [ 539.557183][T15433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.688709][T15437] openvswitch: netlink: Flow actions attr not present in new flow. [ 540.223783][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2091'. [ 540.229696][T15448] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2091'. [ 540.455036][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 540.778427][T15467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2095'. [ 541.157081][T15487] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2099'. [ 541.157129][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 541.351463][T15494] syzkaller0: entered promiscuous mode [ 541.351488][T15494] syzkaller0: entered allmulticast mode [ 541.453268][T15499] FAULT_INJECTION: forcing a failure. [ 541.453268][T15499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.453304][T15499] CPU: 1 UID: 0 PID: 15499 Comm: syz.1.2102 Not tainted syzkaller #0 PREEMPT(full) [ 541.453326][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.453339][T15499] Call Trace: [ 541.453347][T15499] [ 541.453356][T15499] dump_stack_lvl+0xe8/0x150 [ 541.453393][T15499] should_fail_ex+0x410/0x560 [ 541.453424][T15499] _copy_from_user+0x2d/0xb0 [ 541.453450][T15499] ___sys_sendmsg+0x1c6/0x360 [ 541.453480][T15499] ? __lock_acquire+0x747/0x2de0 [ 541.453507][T15499] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.453573][T15499] ? __fget_files+0x2a/0x420 [ 541.453598][T15499] ? __fget_files+0x3a2/0x420 [ 541.453637][T15499] __x64_sys_sendmsg+0x1b1/0x290 [ 541.453667][T15499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.453718][T15499] do_syscall_64+0x166/0x520 [ 541.453742][T15499] ? trace_irq_disable+0x3b/0x140 [ 541.453761][T15499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.453783][T15499] ? clear_bhb_loop+0x70/0xc0 [ 541.453808][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.453828][T15499] RIP: 0033:0x7fbaa499e159 [ 541.453848][T15499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.453865][T15499] RSP: 002b:00007fbaa5821028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.453887][T15499] RAX: ffffffffffffffda RBX: 00007fbaa4c25fa0 RCX: 00007fbaa499e159 [ 541.453902][T15499] RDX: 0000000000040004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 541.453915][T15499] RBP: 00007fbaa5821090 R08: 0000000000000000 R09: 0000000000000000 [ 541.453928][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.453940][T15499] R13: 00007fbaa4c26038 R14: 00007fbaa4c25fa0 R15: 00007ffef72b3b68 [ 541.453973][T15499] [ 542.057739][T15506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.064410][T15506] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.073309][T15506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.213517][T15506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.229613][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 542.255280][T15506] veth1_vlan: left promiscuous mode [ 542.256766][T15506] veth0_vlan: left promiscuous mode [ 542.258747][T15506] veth0_vlan: entered promiscuous mode [ 542.282940][T15506] veth1_vlan: entered promiscuous mode [ 542.289664][T15506] veth1_macvtap: left promiscuous mode [ 542.291117][T15506] veth0_macvtap: left promiscuous mode [ 542.310149][T15506] veth0_macvtap: entered promiscuous mode [ 542.318715][T15506] veth1_macvtap: entered promiscuous mode [ 542.333220][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 542.334746][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 542.335853][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 542.336949][T15506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.378547][T15506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.607582][T15506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.638329][T15506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.869619][T15506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.890480][T15514] sit0: entered promiscuous mode [ 542.890633][T15514] netlink: 'syz.5.2105': attribute type 1 has an invalid length. [ 542.890652][T15514] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2105'. [ 543.227710][T10197] wg2 speed is unknown, defaulting to 1000 [ 543.228180][T10197] syz2: Port: 1 Link ACTIVE [ 543.228189][T15527] batman_adv: batadv0: Removing interface: gretap1 [ 543.230313][T15527] batman_adv: batadv0: Interface deactivated: gretap2 [ 543.230333][T15527] batman_adv: batadv0: Removing interface: gretap2 [ 543.246701][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.246918][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.248397][ T59] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 543.248615][ T59] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 543.250720][ T59] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 543.284006][ T6701] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.291404][ T6170] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 543.300411][ T6170] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 543.324084][ T6170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 543.357425][ T6701] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 543.370776][ T6009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.374287][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.380384][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.418590][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2107'. [ 543.569985][T15554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2110'. [ 543.690026][T15556] netlink: 'syz.0.2112': attribute type 10 has an invalid length. [ 544.013903][ T6173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.093222][ T6173] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.118363][T15570] netlink: 'syz.5.2116': attribute type 10 has an invalid length. [ 544.120840][T15570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.142063][T15570] team0: Port device netdevsim1 added [ 544.766390][T15600] netlink: Conntrack attr has 4 unknown bytes [ 544.766426][T15600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.774004][T15593] netlink: 'syz.2.2121': attribute type 2 has an invalid length. [ 544.781352][T15593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 544.857898][T15603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2124'. [ 544.857928][T15603] openvswitch: netlink: Invalid VLAN frame [ 545.728239][T15622] ip6gre2: entered promiscuous mode [ 545.728263][T15622] ip6gre2: entered allmulticast mode [ 545.834432][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 545.834467][T15638] bond0: option miimon: invalid value (18446744073675997440) [ 545.834487][T15638] bond0: option miimon: allowed values 0 - 2147483647 [ 545.958195][T15639] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 546.327507][T15658] openvswitch: netlink: Multiple metadata blocks provided [ 546.327826][T15655] openvswitch: netlink: Multiple metadata blocks provided [ 546.405216][T15640] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 546.607816][T15668] syzkaller0: entered promiscuous mode [ 546.607841][T15668] syzkaller0: entered allmulticast mode [ 546.609355][T15670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2135'. [ 546.609381][T15670] openvswitch: netlink: Invalid VLAN frame [ 546.633157][T15669] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 547.095143][T15684] netlink: 'syz.1.2140': attribute type 11 has an invalid length. [ 547.095812][T15689] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2142'. [ 547.096448][T15692] netlink: 'syz.1.2140': attribute type 11 has an invalid length. [ 547.300253][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 547.337583][T15703] FAULT_INJECTION: forcing a failure. [ 547.337583][T15703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.337618][T15703] CPU: 1 UID: 0 PID: 15703 Comm: syz.3.2144 Not tainted syzkaller #0 PREEMPT(full) [ 547.337640][T15703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.337653][T15703] Call Trace: [ 547.337661][T15703] [ 547.337670][T15703] dump_stack_lvl+0xe8/0x150 [ 547.337704][T15703] should_fail_ex+0x410/0x560 [ 547.337732][T15703] _copy_from_iter+0x1d3/0x1660 [ 547.337757][T15703] ? __alloc_skb+0x27a/0x7a0 [ 547.337784][T15703] ? __alloc_skb+0x27a/0x7a0 [ 547.337809][T15703] ? __alloc_skb+0x27a/0x7a0 [ 547.337832][T15703] ? __pfx__copy_from_iter+0x10/0x10 [ 547.337853][T15703] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 547.337890][T15703] ? __alloc_skb+0x27a/0x7a0 [ 547.337909][T15703] ? __alloc_skb+0x27a/0x7a0 [ 547.337938][T15703] ? netlink_sendmsg+0x650/0xb40 [ 547.337967][T15703] ? skb_put+0x112/0x210 [ 547.337994][T15703] netlink_sendmsg+0x6c0/0xb40 [ 547.338034][T15703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.338073][T15703] ? apparmor_socket_sendmsg+0x98/0x360 [ 547.338097][T15703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.338123][T15703] sock_sendmsg_nosec+0x13a/0x180 [ 547.338148][T15703] ____sys_sendmsg+0x54e/0x850 [ 547.338179][T15703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.338215][T15703] ? import_iovec+0x73/0xa0 [ 547.338244][T15703] ___sys_sendmsg+0x2a5/0x360 [ 547.338268][T15703] ? __lock_acquire+0x747/0x2de0 [ 547.338293][T15703] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.338356][T15703] ? __fget_files+0x2a/0x420 [ 547.338383][T15703] ? __fget_files+0x3a2/0x420 [ 547.338430][T15703] __x64_sys_sendmsg+0x1b1/0x290 [ 547.338460][T15703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.338508][T15703] do_syscall_64+0x166/0x520 [ 547.338531][T15703] ? trace_irq_disable+0x3b/0x140 [ 547.338551][T15703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.338572][T15703] ? clear_bhb_loop+0x70/0xc0 [ 547.338597][T15703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.338617][T15703] RIP: 0033:0x7f95f6d9e159 [ 547.338636][T15703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.338653][T15703] RSP: 002b:00007f95f7ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.338676][T15703] RAX: ffffffffffffffda RBX: 00007f95f7026090 RCX: 00007f95f6d9e159 [ 547.338691][T15703] RDX: 0000000000040004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 547.338704][T15703] RBP: 00007f95f7ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 547.338717][T15703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.338729][T15703] R13: 00007f95f7026128 R14: 00007f95f7026090 R15: 00007ffd80d8d548 [ 547.338763][T15703] [ 548.787290][T15659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.971923][ C1] ip6_tnl_xmit_ctl: 10 callbacks suppressed [ 548.971947][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 549.042657][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 550.660174][T15727] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2149'. [ 550.841292][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 550.841319][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2152'. [ 550.841489][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 550.841505][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2152'. [ 550.945280][T15734] netlink: 'syz.5.2151': attribute type 1 has an invalid length. [ 550.945306][T15734] netlink: 1368 bytes leftover after parsing attributes in process `syz.5.2151'. [ 551.047333][T15740] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 551.439813][T15758] openvswitch: netlink: Message has 8 unknown bytes. [ 551.569957][T15746] syzkaller0: entered promiscuous mode [ 551.569985][T15746] syzkaller0: entered allmulticast mode [ 554.634029][T15782] macvlan0: entered promiscuous mode [ 554.634214][T15782] macvlan0: entered allmulticast mode [ 554.634227][T15782] gretap0: entered allmulticast mode [ 554.680790][T15782] __nla_validate_parse: 3 callbacks suppressed [ 554.680813][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'. [ 554.680828][T15782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2163'. [ 554.683830][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2163'. [ 554.683849][T15782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2163'. [ 554.760084][T15784] netlink: 'syz.3.2163': attribute type 10 has an invalid length. [ 554.811971][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 554.858235][T15784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.868942][T15784] team0: Port device netdevsim1 added [ 554.879418][T15784] netlink: 'syz.3.2163': attribute type 10 has an invalid length. [ 554.937306][T15784] team0: Port device netdevsim1 removed [ 555.060214][T15798] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 555.452458][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 555.909546][T15840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.960657][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 556.092102][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 556.095413][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 556.495966][T15853] syzkaller0: entered promiscuous mode [ 556.495992][T15853] syzkaller0: entered allmulticast mode [ 556.518636][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2183'. [ 556.535779][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 556.585850][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 556.687052][T15863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2184'. [ 556.725523][T15860] veth5: entered allmulticast mode [ 556.727650][T15861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2182'. [ 556.749574][T15863] 8021q: VLANs not supported on ip_vti0 [ 556.780865][T15865] xt_l2tp: missing protocol rule (udp|l2tpip) [ 556.795726][T15860] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 557.926498][T15874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.989050][T15893] vlan3: entered promiscuous mode [ 558.989075][T15893] bridge0: entered promiscuous mode [ 559.008031][T15894] hsr_slave_0: left promiscuous mode [ 559.075913][T12500] wg2 speed is unknown, defaulting to 1000 [ 559.075955][T12500] syz2: Port: 1 Link DOWN [ 559.084963][ T6010] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.085006][ T6010] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.085036][ T6010] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.091842][T15805] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.240624][T15913] xt_hashlimit: size too large, truncated to 1048576 [ 559.334742][T15916] netlink: 'syz.3.2196': attribute type 49 has an invalid length. [ 559.979575][T15942] __nla_validate_parse: 3 callbacks suppressed [ 559.979597][T15942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2203'. [ 560.173766][T15953] netlink: 'syz.5.2206': attribute type 1 has an invalid length. [ 560.353027][T15953] bond2: option mode: invalid value (7) [ 560.354831][T15953] bond2 (unregistering): Released all slaves [ 560.400357][T15957] team0: Port device dummy0 removed [ 560.407060][T15964] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2209'. [ 560.407082][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'. [ 560.476052][T15961] : renamed from dummy0 [ 561.492569][T16005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2219'. [ 561.492840][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2219'. [ 561.841028][T16014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2222'. [ 561.869172][T16015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2222'. [ 562.174293][T16021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.312743][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 562.440990][T16034] 8021q: VLANs not supported on ipvlan0 [ 562.441652][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 562.947466][T16048] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 563.134417][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.134486][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.201627][T16054] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 563.277606][T16057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2233'. [ 563.669953][T16083] netlink: 'syz.3.2242': attribute type 1 has an invalid length. [ 563.827094][T16083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 564.021872][T16086] bond7 (unregistering): Released all slaves [ 564.051224][T16094] SET target dimension over the limit! [ 564.121279][T16093] netlink: 'syz.5.2246': attribute type 2 has an invalid length. [ 564.131356][T16090] xt_CT: No such helper "syz1" [ 564.155022][T16096] netlink: 'syz.0.2244': attribute type 30 has an invalid length. [ 564.315930][T16093] netlink: 'syz.5.2246': attribute type 10 has an invalid length. [ 564.369264][T16096] netlink: 'syz.0.2244': attribute type 30 has an invalid length. [ 564.479005][T16093] team0: Port device  added [ 564.642083][T16120] netlink: 'syz.2.2250': attribute type 15 has an invalid length. [ 564.721565][T16128] netlink: 'syz.0.2252': attribute type 1 has an invalid length. [ 564.933449][T16129] bond2: entered allmulticast mode [ 564.943654][T16143] netlink: 'syz.3.2254': attribute type 49 has an invalid length. [ 564.963509][T16137] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 564.964219][T16137] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 564.999922][T16134] syzkaller0: entered promiscuous mode [ 564.999946][T16134] syzkaller0: entered allmulticast mode [ 565.002499][T16138] 0: reclassify loop, rule prio 0, protocol 800 [ 565.047095][T16151] netlink: 'syz.2.2255': attribute type 23 has an invalid length. [ 565.060069][T16143] veth0_to_bridge: entered promiscuous mode [ 565.060286][T16143] macvtap2: entered allmulticast mode [ 565.060368][T16143] veth0_to_bridge: entered allmulticast mode [ 565.076834][T16143] veth0_to_bridge: left allmulticast mode [ 565.076862][T16143] veth0_to_bridge: left promiscuous mode [ 565.094747][T16159] 0: reclassify loop, rule prio 0, protocol 800 [ 565.578476][T16166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.763886][T16178] netlink: 'syz.0.2259': attribute type 1 has an invalid length. [ 565.763911][T16178] __nla_validate_parse: 7 callbacks suppressed [ 565.763923][T16178] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2259'. [ 565.850268][T16177] 0: reclassify loop, rule prio 0, protocol 03 [ 565.864747][T16177] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 565.978583][T16166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.186563][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2260'. [ 566.270106][T16191] ip_tables: iptables: counters copy to user failed while replacing table [ 566.331501][T16193] netlink: Unknown NAT attribute (type=16383, max=9) [ 566.331528][T16193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.353398][T16193] : entered promiscuous mode [ 566.581605][T16205] xt_check_table_hooks: 23 callbacks suppressed [ 566.581780][T16205] x_tables: duplicate entry at hook 1 [ 566.790301][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2264'. [ 566.840903][T16212] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2266'. [ 566.840928][T16212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2266'. [ 566.865637][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2268'. [ 566.883108][T16217] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2268'. [ 566.883298][T16217] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2268'. [ 566.883501][T16217] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2268'. [ 566.883650][T16217] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2268'. [ 567.013368][T16212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.128956][T16221] bond5: (slave geneve2): making interface the new active one [ 567.130628][T16221] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 567.195177][ T6010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.232377][T15806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.241119][T15806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.241150][T15806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.069106][T16262] xt_policy: output policy not valid in PREROUTING and INPUT [ 603.071055][T16263] __nla_validate_parse: 29 callbacks suppressed [ 603.071075][T16263] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2275'. [ 603.129072][T16267] Bluetooth: hci0: unsupported parameter 5135 [ 603.129098][T16267] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 603.176405][T16271] xt_policy: output policy not valid in PREROUTING and INPUT [ 603.230832][T16257] validate_nla: 4 callbacks suppressed [ 603.230856][T16257] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 603.230872][T16257] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2275'. [ 603.230888][T16257] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 603.363843][T16267] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 603.368387][T16275] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 603.368962][T16275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.369921][T16275] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 604.045522][T16303] ip6tnl5: entered allmulticast mode [ 604.060186][ T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 604.060505][ T12] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 604.082707][ T6183] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 604.153855][ T6183] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 604.212456][ T6183] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 604.242307][T16290] syzkaller0: entered promiscuous mode [ 604.242334][T16290] syzkaller0: entered allmulticast mode [ 604.777443][T16332] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 604.843602][T16337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.072820][T16351] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2292'. [ 605.135092][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2292'. [ 605.288383][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 607.847503][T16324] pim6reg: entered allmulticast mode [ 608.125628][T16361] team0 (unregistering): Port device dummy0 removed [ 608.175645][T12500] dummy0 speed is unknown, defaulting to 1000 [ 608.175705][ T5712] dummy0 speed is unknown, defaulting to 1000 [ 608.283044][T16372] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2299'. [ 608.283085][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'. [ 608.338099][T16375] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2298'. [ 608.411932][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 609.918785][T16429] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 610.171541][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2308'. [ 610.703636][T16456] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 610.707202][T16457] netlink: 'syz.0.2312': attribute type 1 has an invalid length. [ 610.707221][T16457] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2312'. [ 610.707236][T16457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2312'. [ 610.798454][T16459] netlink: 'syz.5.2311': attribute type 1 has an invalid length. [ 611.164942][T16476] xt_cluster: node mask cannot exceed total number of nodes [ 611.806598][T16506] sctp: [Deprecated]: syz.5.2320 (pid 16506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.806598][T16506] Use struct sctp_sack_info instead [ 611.873370][T16506] 8021q: VLANs not supported on ip6tnl0 [ 614.124581][T16477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 614.510962][T16530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.525029][T16543] openvswitch: netlink: Flow actions attr not present in new flow. [ 614.549660][T16530] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.570243][T16530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.675605][T16554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.741732][T16557] netlink: 7924 bytes leftover after parsing attributes in process `syz.0.2332'. [ 615.055976][T16565] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2334'. [ 615.467557][T16579] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 615.467675][T16579] syzkaller1: linktype set to 825 [ 615.550233][T16586] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2340'. [ 615.550325][T16586] netlink: 480 bytes leftover after parsing attributes in process `syz.3.2340'. [ 615.559889][T16586] netlink: 'syz.3.2340': attribute type 3 has an invalid length. [ 615.597056][T16583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 615.600612][T16588] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2342'. [ 615.607479][T16583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.664806][T16585] bridge0: port 1(wlan1) entered blocking state [ 615.664987][T16585] bridge0: port 1(wlan1) entered disabled state [ 615.665155][T16585] mac80211_hwsim hwsim73 wlan1: entered allmulticast mode [ 615.667941][T16585] mac80211_hwsim hwsim73 wlan1: entered promiscuous mode [ 615.671275][T16410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.671559][T16410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.691467][T16591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2343'. [ 615.693789][T12500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.906574][T16597] openvswitch: netlink: Flow actions attr not present in new flow. [ 616.319103][T16617] ip_tables: iptables: counters copy to user failed while replacing table [ 616.420875][T16623] lo: entered promiscuous mode [ 616.425001][T16623] tunl0: entered promiscuous mode [ 616.425294][T16623] gre0: entered promiscuous mode [ 616.530471][T16623] erspan0: entered promiscuous mode [ 616.560908][T16623] ip_vti0: entered promiscuous mode [ 616.586720][T16623] ip6_vti0: entered promiscuous mode [ 616.606703][T16623] sit0: entered promiscuous mode [ 616.669945][T16623] ip6tnl0: entered promiscuous mode [ 616.751248][T16623] ip6gre0: entered promiscuous mode [ 616.891934][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 616.898286][T16623] vcan0: entered promiscuous mode [ 616.926059][T16623] dummy0: entered promiscuous mode [ 616.931480][T16623] nlmon0: entered promiscuous mode [ 616.952486][T16623] vxcan0: entered promiscuous mode [ 616.982146][T16623] vxcan1: entered promiscuous mode [ 617.014305][T16623] veth0: entered promiscuous mode [ 617.054656][T16623] veth1: entered promiscuous mode [ 617.105589][T16623] wg0: entered promiscuous mode [ 617.133189][T16623] wg2: entered promiscuous mode [ 617.138717][T16623] veth0_to_bridge: entered promiscuous mode [ 617.231246][T16623] veth1_to_bridge: entered promiscuous mode [ 617.274580][T16623] bridge_slave_1: entered promiscuous mode [ 617.299620][T16623] veth0_to_bond: entered promiscuous mode [ 617.324144][T16623] bond_slave_0: entered promiscuous mode [ 617.346966][T16623] veth1_to_bond: entered promiscuous mode [ 617.388697][T16623] veth0_to_team: entered promiscuous mode [ 617.406414][T16623] team_slave_0: entered promiscuous mode [ 617.421444][T16623] veth1_to_team: entered promiscuous mode [ 617.438482][T16623] team_slave_1: entered promiscuous mode [ 617.453894][T16623] xfrm0: entered promiscuous mode [ 617.469694][T16623] veth0_to_hsr: entered promiscuous mode [ 617.483816][T16623] hsr_slave_0: entered promiscuous mode [ 617.499878][T16623] veth1_virt_wifi: entered promiscuous mode [ 617.506516][T16644] openvswitch: netlink: Flow actions attr not present in new flow. [ 617.524574][T16623] veth0_virt_wifi: entered promiscuous mode [ 617.540167][T16623] virt_wifi0: entered promiscuous mode [ 617.580930][T16623] macvtap0: entered promiscuous mode [ 617.603528][T16623] batman_adv: batadv0: Interface deactivated: macsec0 [ 617.603627][T16623] macsec0: entered promiscuous mode [ 617.610939][T16623] geneve0: entered promiscuous mode [ 617.646577][T16623] geneve1: entered promiscuous mode [ 617.668572][T16623] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 617.671399][T16623] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 617.690758][T16623] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 617.703220][T16623] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 617.727694][T16623] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 617.729960][T16623] dvmrp0: entered promiscuous mode [ 617.750388][T16623] erspan1: entered promiscuous mode [ 617.765128][T16623] bond1: entered promiscuous mode [ 617.780208][T16623] ip6gretap1: entered promiscuous mode [ 617.789690][T16623] ip6tnl1: entered promiscuous mode [ 617.804126][T16623] veth2: entered promiscuous mode [ 617.819491][T16623] veth3: entered promiscuous mode [ 617.833926][T16623] bridge1: entered promiscuous mode [ 617.859510][T16623] mac80211_hwsim hwsim20 wlan2: entered promiscuous mode [ 617.889412][T16623] mac80211_hwsim hwsim24 wlan3: entered promiscuous mode [ 617.906951][T16623] mac80211_hwsim hwsim34 wlan4: entered promiscuous mode [ 617.920737][T16623] gre1: entered promiscuous mode [ 617.965279][T16623] mac80211_hwsim hwsim36 wlan5: entered promiscuous mode [ 618.030742][T16623] ipip0: entered promiscuous mode [ 618.040701][T16623] bond2: entered promiscuous mode [ 618.040716][T16623] veth5: entered promiscuous mode [ 618.057273][T16623] veth4: entered promiscuous mode [ 618.079395][T16623] ip6tnl2: entered promiscuous mode [ 618.105555][T16623] macvlan2: entered promiscuous mode [ 618.127781][T16623] mac80211_hwsim hwsim42 wlan6: entered promiscuous mode [ 618.130618][T16623] bond3: entered promiscuous mode [ 618.130633][T16623] veth7: entered promiscuous mode [ 618.154687][T16623] veth6: entered promiscuous mode [ 618.179217][T16623] veth8: entered promiscuous mode [ 618.196434][T16623] veth9: entered promiscuous mode [ 618.211310][T16623] veth10: entered promiscuous mode [ 618.233396][T16623] veth11: entered promiscuous mode [ 618.247209][T16623] macvtap1: entered promiscuous mode [ 618.264074][T16623] bond4: entered promiscuous mode [ 618.264097][T16623] geneve2: entered promiscuous mode [ 618.289926][T16623] sit1: entered promiscuous mode [ 618.326583][T16623] macvlan3: entered promiscuous mode [ 618.328482][T16623] bridge2: entered promiscuous mode [ 618.343928][T16623] bond5: entered promiscuous mode [ 618.365506][T16623] mac80211_hwsim hwsim55 wlan7: entered promiscuous mode [ 618.368599][T16623] batadv0: entered promiscuous mode [ 618.372960][T16623] gre2: entered promiscuous mode [ 618.389711][T16623] bridge3: entered promiscuous mode [ 618.397251][T16623] bond6: entered promiscuous mode [ 618.398841][T16623] vlan0: entered promiscuous mode [ 618.408918][T16623] bond0: entered promiscuous mode [ 618.410482][T16623] gretap0: left allmulticast mode [ 618.423653][T16623] macvlan1: entered promiscuous mode [ 618.429967][T16623] syztnl0: entered promiscuous mode [ 618.451646][T16623] mac80211_hwsim hwsim80 wlan8: entered promiscuous mode [ 618.460067][T16623] bridge0: entered promiscuous mode [ 618.468823][T16623] veth12: entered promiscuous mode [ 618.479308][T16623] veth13: entered promiscuous mode [ 618.485464][T16623] ip6tnl3: entered promiscuous mode [ 618.488007][T16623] sit2: entered promiscuous mode [ 618.493061][T16623] gretap1: entered promiscuous mode [ 618.522594][T16623] gretap2: entered promiscuous mode [ 618.535438][T16623] mac80211_hwsim hwsim89 wlan9: entered promiscuous mode [ 618.535629][T16623] mac80211_hwsim hwsim90 wlan10: entered promiscuous mode [ 618.536100][T16623] pim6reg: entered promiscuous mode [ 618.593677][T16639] bridge2: entered allmulticast mode [ 618.607294][T16410] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.608159][T16410] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.608199][T16410] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.608230][T16410] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.664637][T16647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2357'. [ 618.800563][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2358'. [ 619.116225][T16607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.116379][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'. [ 619.466076][T16674] atomic_op ffff8880571b91e0 conn xmit_atomic 0000000000000000 [ 619.603242][T16672] syzkaller0: entered promiscuous mode [ 619.603267][T16672] syzkaller0: entered allmulticast mode [ 619.644145][T16672] tipc: Enabled bearer , priority 0 [ 619.649524][T16668] tipc: Resetting bearer [ 619.715145][T16668] tipc: Disabling bearer [ 619.730049][T16665] lo speed is unknown, defaulting to 1000 [ 619.918489][T16682] __nla_validate_parse: 1 callbacks suppressed [ 619.918513][T16682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'. [ 620.076830][T16665] dummy0 speed is unknown, defaulting to 1000 [ 620.728914][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2372'. [ 620.846856][T16665] ip6_vti0 speed is unknown, defaulting to 1000 [ 621.383634][T16706] xt_hashlimit: overflow, try lower: 0/0 [ 621.454978][T16665] wg2 speed is unknown, defaulting to 1000 [ 621.459971][T16704] tc_dump_action: action bad kind [ 621.464338][T16665] lo speed is unknown, defaulting to 1000 [ 621.684505][T16706] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 621.711460][T16706] netlink: 'syz.1.2376': attribute type 10 has an invalid length. [ 621.728886][T16706] team0: Port device dummy0 removed [ 621.787430][ T31] audit: type=1804 audit(1789918406.187:14): pid=16719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2380" name="/newroot/252/cgroup.controllers" dev="tmpfs" ino=1313 res=1 errno=0 [ 621.787490][ T31] audit: type=1800 audit(1789918406.187:15): pid=16719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2380" name="cgroup.controllers" dev="tmpfs" ino=1313 res=0 errno=0 [ 621.893781][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2375'. [ 622.171374][T16725] openvswitch: netlink: Flow actions attr not present in new flow. [ 622.421171][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 622.421212][T16736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2382'. [ 622.833094][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 623.086002][T16757] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 623.151166][T16755] netlink: 'syz.5.2387': attribute type 1 has an invalid length. [ 623.198526][T16757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2388'. [ 623.453305][T16755] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.490668][T16759] macvlan2: entered promiscuous mode [ 623.490694][T16759] macvlan2: entered allmulticast mode [ 623.491205][T16759] bond4: entered allmulticast mode [ 623.491250][T16759] bond4: entered promiscuous mode [ 623.525220][T16759] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 623.530565][T16759] team0: Port device macvlan2 added [ 623.694245][T16772] bond4: (slave ip6gretap0): making interface the new active one [ 623.694267][T16772] ip6gretap0: entered promiscuous mode [ 623.694387][T16772] ip6gretap0: entered allmulticast mode [ 623.732440][T16772] bond4: (slave ip6gretap0): Enslaving as an active interface with an up link [ 624.582752][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.582821][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.616684][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 624.626756][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 624.710227][T16803] x_tables: duplicate underflow at hook 3 [ 624.714374][T16808] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2400'. [ 624.776866][T16803] ip6gre3: entered promiscuous mode [ 624.776891][T16803] ip6gre3: entered allmulticast mode [ 624.808051][T16815] xt_connbytes: Forcing CT accounting to be enabled [ 625.147220][T16825] __nla_validate_parse: 2 callbacks suppressed [ 625.147243][T16825] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2404'. [ 625.147263][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'. [ 625.147279][T16825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2404'. [ 625.569514][T16835] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 625.569539][T16835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2407'. [ 625.850962][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2410'. [ 625.909078][T16843] syzkaller1: entered promiscuous mode [ 625.909102][T16843] syzkaller1: entered allmulticast mode [ 626.122792][T16854] netlink: 'syz.2.2415': attribute type 32 has an invalid length. [ 626.212416][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 626.294939][T16858] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2416'. [ 626.592232][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2412'. [ 627.184975][T16890] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2422'. [ 627.235509][T16890] IPVS: Error connecting to the multicast addr [ 627.393143][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 627.623674][ T43] nci: nci_rx_work: unknown MT 0x1 [ 627.702069][T16920] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 627.822725][T16902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.679548][T16931] batman_adv: batadv0: Interface activated: macsec0 [ 628.707867][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.713601][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.716464][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.720380][T16931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.736746][T16931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.815632][T16931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.839970][T16931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.858072][T16931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 628.896053][T16931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 628.898971][T16931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.939539][T16931] 8021q: adding VLAN 0 to HW filter on device bond6 [ 628.941409][T16931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.942832][T16931] gretap0: entered allmulticast mode [ 629.157819][T16952] pim6reg: entered allmulticast mode [ 629.178377][T16409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.178455][T16409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.178493][T16409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.178529][T16409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.178677][T16958] team0: entered allmulticast mode [ 629.178697][T16958] team_slave_0: entered allmulticast mode [ 629.178714][T16958] team_slave_1: entered allmulticast mode [ 629.179054][T16939] pim6reg: left allmulticast mode [ 629.376054][T16939] team0: left allmulticast mode [ 629.376098][T16939] team_slave_0: left allmulticast mode [ 629.376117][T16939] team_slave_1: left allmulticast mode [ 629.980765][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.980879][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.980975][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.981071][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.981167][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.981262][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.981376][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.981472][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.981575][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 629.981759][T17005] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 630.043099][T16994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.096970][T16994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.228753][T17005] __nla_validate_parse: 3 callbacks suppressed [ 630.228774][T17005] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2443'. [ 630.343439][T17020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 630.818638][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'. [ 631.051197][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2454'. [ 631.051225][T17047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2454'. [ 631.051249][T17047] netlink: 'syz.5.2454': attribute type 18 has an invalid length. [ 631.090520][T17054] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2456'. [ 631.253216][T17054] tipc: Enabled bearer , priority 0 [ 631.256338][T17047] netlink: 'syz.5.2454': attribute type 10 has an invalid length. [ 631.318844][T17049] tipc: Disabling bearer [ 631.325018][T17047] netlink: 'syz.5.2454': attribute type 10 has an invalid length. [ 631.397221][T17047] team0: Port device netdevsim1 removed [ 631.437609][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.481395][T17047] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 631.757544][T17067] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2458'. [ 632.605047][T17100] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 632.605073][T17100] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2465'. [ 632.984914][T17101] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 633.667069][T17121] syzkaller1: entered promiscuous mode [ 633.667097][T17121] syzkaller1: entered allmulticast mode [ 633.731233][T17123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2469'. [ 634.172089][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 634.301548][T17136] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2472'. [ 634.465496][T17136] hsr_slave_0 (unregistering): left promiscuous mode [ 634.918624][T17156] syzkaller0: entered promiscuous mode [ 634.918649][T17156] syzkaller0: entered allmulticast mode [ 635.688246][T17176] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 636.229207][T17176] bond7 (unregistering): Released all slaves [ 636.708493][T17211] __nla_validate_parse: 3 callbacks suppressed [ 636.708516][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2486'. [ 636.730055][T17211] netlink: 'syz.3.2486': attribute type 1 has an invalid length. [ 636.779991][T17219] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2488'. [ 636.953514][T17229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2489'. [ 637.030390][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2488'. [ 637.216798][T17240] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 637.660827][T17254] xt_hashlimit: size too large, truncated to 1048576 [ 637.678940][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 637.678974][T17252] netlink: 'syz.1.2495': attribute type 26 has an invalid length. [ 637.678987][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'. [ 637.679645][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 637.679665][T17252] netlink: 'syz.1.2495': attribute type 26 has an invalid length. [ 637.679677][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2495'. [ 637.769676][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2497'. [ 638.114601][T17274] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2499'. [ 638.138598][T17274] nbd: must specify at least one socket [ 638.369871][T17278] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 638.411085][T17287] netlink: 'syz.5.2501': attribute type 12 has an invalid length. [ 638.411110][T17287] netlink: 'syz.5.2501': attribute type 14 has an invalid length. [ 638.412208][T17287] netlink: 'syz.5.2501': attribute type 12 has an invalid length. [ 638.412225][T17287] netlink: 'syz.5.2501': attribute type 14 has an invalid length. [ 638.770540][T17291] netlink: 'syz.0.2505': attribute type 15 has an invalid length. [ 638.785123][T17291] netlink: 'syz.0.2505': attribute type 4 has an invalid length. [ 638.851089][T10198] lo speed is unknown, defaulting to 1000 [ 638.851130][T10198] syz0: Port: 1 Link ACTIVE [ 638.851211][T10198] lo speed is unknown, defaulting to 1000 [ 638.891072][T17295] lo speed is unknown, defaulting to 1000 [ 638.962280][T17311] net_ratelimit: 46 callbacks suppressed [ 638.962305][T17311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.168409][T17321] netlink: 'syz.1.2509': attribute type 18 has an invalid length. [ 639.267965][T17300] syzkaller0: entered promiscuous mode [ 639.267991][T17300] syzkaller0: entered allmulticast mode [ 639.282218][T16405] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.283078][T16410] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.283452][T16410] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.283484][T16410] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.816077][T17295] dummy0 speed is unknown, defaulting to 1000 [ 639.961199][T17333] lo speed is unknown, defaulting to 1000 [ 640.160701][ T31] audit: type=1800 audit(1789918424.557:16): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2515" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1478 res=0 errno=0 [ 640.776503][T17370] tc_dump_action: action bad kind [ 640.838770][T17295] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.125522][T17333] dummy0 speed is unknown, defaulting to 1000 [ 641.735986][T17295] wg2 speed is unknown, defaulting to 1000 [ 641.749457][T17295] lo speed is unknown, defaulting to 1000 [ 642.462281][T17419] __nla_validate_parse: 14 callbacks suppressed [ 642.462307][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2529'. [ 642.467928][T17333] ip6_vti0 speed is unknown, defaulting to 1000 [ 642.843148][T17429] openvswitch: netlink: Flow actions attr not present in new flow. [ 643.224785][T17333] wg2 speed is unknown, defaulting to 1000 [ 643.228575][T17333] lo speed is unknown, defaulting to 1000 [ 643.231469][T17411] smc: removing ib device syz1 [ 643.435457][T17411] smbdirect: ib_dev[syz1] removed [ 643.638775][T17448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2538'. [ 644.569069][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 644.569747][T17479] bridge0: left promiscuous mode [ 644.880858][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 644.976830][T17489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2547'. [ 645.052231][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 645.823884][T17495] tipc: Enabling of bearer rejected, media not registered [ 645.854597][T17495] validate_nla: 2 callbacks suppressed [ 645.854709][T17495] netlink: 'syz.2.2550': attribute type 1 has an invalid length. [ 646.422169][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'. [ 646.422195][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 646.559984][T17506] smc: adding net device vlan1 with user defined pnetid SYZ2 [ 646.952726][T17511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 649.114238][T17563] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 649.317022][T17563] bond9 (unregistering): Released all slaves [ 649.707574][T17584] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 649.707950][T17583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.956781][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 650.019196][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 650.945504][T17621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2582'. [ 651.708547][T17649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2587'. [ 651.789412][T17645] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 651.909883][T17657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2590'. [ 652.009375][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2590'. [ 652.039665][T17645] xt_CT: No such helper "netbios-ns" [ 652.379538][T17672] tipc: Enabled bearer , priority 0 [ 652.394211][T17672] batman_adv: batadv0: Interface deactivated: macsec0 [ 652.394521][T17672] macsec0: left promiscuous mode [ 652.394540][T17672] macsec0: entered allmulticast mode [ 652.480587][T17672] sch_tbf: burst 255 is lower than device xfrm0 mtu (1500) ! [ 652.510137][T17672] tipc: Resetting bearer [ 652.556918][T17671] tipc: Disabling bearer [ 652.712176][T16414] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.722801][T16409] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.722877][T16409] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.722914][T16409] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.857897][T17693] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2598'. [ 653.024893][T17694] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 653.050582][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2598'. [ 653.368183][T17709] netlink: 'syz.3.2602': attribute type 7 has an invalid length. [ 653.380927][T17709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2602'. [ 653.488693][T17714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2601'. [ 653.963538][T17735] lo: left promiscuous mode [ 653.975950][T17735] tunl0: left promiscuous mode [ 653.979460][T17735] gre0: left promiscuous mode [ 653.980353][T17735] erspan0: left promiscuous mode [ 653.980767][T17735] ip_vti0: left promiscuous mode [ 654.004037][T17735] ip6_vti0: left promiscuous mode [ 654.004490][T17735] sit0: left promiscuous mode [ 654.004904][T17735] ip6tnl0: left promiscuous mode [ 654.006895][T17735] ip6gre0: left promiscuous mode [ 654.007687][T17735] vcan0: left promiscuous mode [ 654.009768][T17735] dummy0: left promiscuous mode [ 654.010314][T17735] nlmon0: left promiscuous mode [ 654.010797][T17735] vxcan0: left promiscuous mode [ 654.056280][T17735] vxcan1: left promiscuous mode [ 654.056835][T17735] veth0: left promiscuous mode [ 654.057306][T17735] veth1: left promiscuous mode [ 654.058029][T17735] wg0: left promiscuous mode [ 654.058503][T17735] wg2: left promiscuous mode [ 654.058977][T17735] veth0_to_bridge: left promiscuous mode [ 654.059900][T17735] veth1_to_bridge: left promiscuous mode [ 654.060349][T17735] bridge_slave_1: left promiscuous mode [ 654.060826][T17735] veth0_to_bond: left promiscuous mode [ 654.061300][T17735] bond_slave_0: left promiscuous mode [ 654.071904][T17735] veth1_to_bond: left promiscuous mode [ 654.108310][T17735] veth0_to_team: left promiscuous mode [ 654.108800][T17735] team_slave_0: left promiscuous mode [ 654.112763][T17735] veth1_to_team: left promiscuous mode [ 654.117248][T17735] team_slave_1: left promiscuous mode [ 654.117701][T17735] xfrm0: left promiscuous mode [ 654.121195][T17735] veth0_to_hsr: left promiscuous mode [ 654.126588][T17735] hsr_slave_0: left promiscuous mode [ 654.127047][T17735] veth1_virt_wifi: left promiscuous mode [ 654.129880][T17735] veth0_virt_wifi: left promiscuous mode [ 654.133407][T17735] virt_wifi0: left promiscuous mode [ 654.133861][T17735] veth1_macvtap: left promiscuous mode [ 654.138758][T17735] macvtap0: left promiscuous mode [ 654.139467][T17735] veth1_macvtap: entered promiscuous mode [ 654.139483][T17735] veth1_macvtap: entered allmulticast mode [ 654.143957][T17735] batman_adv: batadv0: Interface activated: macsec0 [ 654.146599][T17735] geneve1: left promiscuous mode [ 654.147535][T17735] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 654.148420][T17735] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 654.149128][T17735] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 654.150716][T17735] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 654.155299][T17735] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 654.155719][T17735] dvmrp0: left promiscuous mode [ 654.157187][T17735] erspan1: left promiscuous mode [ 654.158333][T17735] bond1: left promiscuous mode [ 654.158839][T17735] ip6gretap1: left promiscuous mode [ 654.159226][T17735] ip6tnl1: left promiscuous mode [ 654.161201][T17735] veth2: left promiscuous mode [ 654.162830][T17735] veth3: left promiscuous mode [ 654.163280][T17735] bridge1: left promiscuous mode [ 654.164422][T17735] mac80211_hwsim hwsim20 wlan2: left promiscuous mode [ 654.165102][T17735] mac80211_hwsim hwsim24 wlan3: left promiscuous mode [ 654.167302][T17735] mac80211_hwsim hwsim34 wlan4: left promiscuous mode [ 654.168290][T17735] gre1: left promiscuous mode [ 654.168735][T17735] mac80211_hwsim hwsim36 wlan5: left promiscuous mode [ 654.169186][T17735] ipip0: left promiscuous mode [ 654.169757][T17735] bond2: left promiscuous mode [ 654.170561][T17735] veth4: left promiscuous mode [ 654.170963][T17735] veth5: left promiscuous mode [ 654.173091][T17735] ip6tnl2: left promiscuous mode [ 654.175357][T17735] macvlan2: left promiscuous mode [ 654.177241][T17735] mac80211_hwsim hwsim42 wlan6: left promiscuous mode [ 654.179365][T17735] bond3: left promiscuous mode [ 654.181003][T17735] veth6: left promiscuous mode [ 654.183403][T17735] veth7: left promiscuous mode [ 654.184615][T17735] veth8: left promiscuous mode [ 654.185767][T17735] veth9: left promiscuous mode [ 654.188134][T17735] veth10: left promiscuous mode [ 654.188619][T17735] veth11: left promiscuous mode [ 654.189949][T17735] macvtap1: left promiscuous mode [ 654.192755][T17735] bond4: left promiscuous mode [ 654.193390][T17735] geneve2: left promiscuous mode [ 654.196113][T17735] sit1: left promiscuous mode [ 654.196640][T17735] macvlan3: left promiscuous mode [ 654.198569][T17735] bridge2: left promiscuous mode [ 654.199034][T17735] bond5: left promiscuous mode [ 654.200817][T17735] mac80211_hwsim hwsim55 wlan7: left promiscuous mode [ 654.201351][T17735] batadv0: left promiscuous mode [ 654.203967][T17735] gre2: left promiscuous mode [ 654.205276][T17735] bridge3: left promiscuous mode [ 654.205774][T17735] bond6: left promiscuous mode [ 654.207835][T17735] vlan0: left promiscuous mode [ 654.207850][T17735] geneve0: left promiscuous mode [ 654.209533][T17735] bond0: left promiscuous mode [ 654.210781][T17735] macvlan0: left promiscuous mode [ 654.211428][T17735] macvlan1: left promiscuous mode [ 654.213569][T17735] syztnl0: left promiscuous mode [ 654.214436][T17735] mac80211_hwsim hwsim80 wlan8: left promiscuous mode [ 654.217257][T17735] veth12: left promiscuous mode [ 654.217947][T17735] veth13: left promiscuous mode [ 654.219329][T17735] ip6tnl3: left promiscuous mode [ 654.219811][T17735] sit2: left promiscuous mode [ 654.220473][T17735] gretap1: left promiscuous mode [ 654.226569][T17735] gretap2: left promiscuous mode [ 654.233983][T17735] mac80211_hwsim hwsim89 wlan9: left promiscuous mode [ 654.244948][T17735] mac80211_hwsim hwsim90 wlan10: left promiscuous mode [ 654.251495][T17735] pim6reg: left promiscuous mode [ 654.270786][T17735] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 655.021261][T17780] __nla_validate_parse: 5 callbacks suppressed [ 655.021284][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2614'. [ 655.254925][T17786] netlink: 'syz.5.2621': attribute type 2 has an invalid length. [ 655.254951][T17786] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2621'. [ 655.341144][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2622'. [ 655.443795][T17793] netlink: 'syz.5.2621': attribute type 10 has an invalid length. [ 655.653140][T17799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2623'. [ 655.963808][T17814] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2628'. [ 656.106329][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2628'. [ 656.259096][T16414] tipc: Subscription rejected, illegal request [ 656.393589][T17827] vlan2: entered promiscuous mode [ 656.506840][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 656.907729][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'. [ 656.922497][T17845] netlink: 'syz.2.2634': attribute type 1 has an invalid length. [ 656.934486][T17856] geneve2: left promiscuous mode [ 656.940040][T17856] bridge0: left promiscuous mode [ 656.941195][T17856] ip6gre2: left promiscuous mode [ 656.941208][T17856] ip6gre2: left allmulticast mode [ 656.948242][T17856] ip6gre3: left promiscuous mode [ 656.948263][T17856] ip6gre3: left allmulticast mode [ 657.091289][T17852] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2637'. [ 657.123343][T16400] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.123415][T16400] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.123449][T16400] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.123483][T16400] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.708819][T17896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.784374][T17896] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2644'. [ 658.193400][T17900] x_tables: duplicate underflow at hook 2 [ 658.369162][T17910] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 658.386409][T17910] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 658.682676][T17920] netlink: 'syz.2.2649': attribute type 1 has an invalid length. [ 659.029535][T17924] veth8: entered allmulticast mode [ 659.042605][T17924] bond10: (slave veth8): Enslaving as an active interface with a down link [ 659.060950][T17929] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 659.092675][T17920] macvlan3: entered promiscuous mode [ 659.092701][T17920] macvlan3: entered allmulticast mode [ 659.093478][T17920] bond10: entered promiscuous mode [ 659.096058][T17920] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 659.096975][T17920] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 659.097461][T17920] bond10: left promiscuous mode [ 661.025833][T17988] __nla_validate_parse: 6 callbacks suppressed [ 661.025860][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 661.419500][T18002] netlink: 'syz.2.2673': attribute type 2 has an invalid length. [ 661.421099][T18002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2673'. [ 661.458877][T18000] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 661.458900][T18000] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2674'. [ 661.569960][T18000] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 661.569986][T18000] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2674'. [ 661.594062][T18002] netlink: 'syz.2.2673': attribute type 10 has an invalid length. [ 661.825393][T18000] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 661.825417][T18000] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2674'. [ 662.084326][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 662.112187][T18000] netlink: 'syz.3.2674': attribute type 1 has an invalid length. [ 662.112210][T18000] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2674'. [ 662.155252][T18023] netlink: 'syz.5.2677': attribute type 7 has an invalid length. [ 662.155275][T18023] netlink: 'syz.5.2677': attribute type 3 has an invalid length. [ 662.155287][T18023] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2677'. [ 662.258489][T18023] netlink: 'syz.5.2677': attribute type 1 has an invalid length. [ 662.258512][T18023] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2677'. [ 662.549764][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 662.754491][T18035] 8021q: adding VLAN 0 to HW filter on device bond8 [ 663.277264][T18054] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.315661][T18061] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.696485][T18075] validate_nla: 3 callbacks suppressed [ 663.696508][T18075] netlink: 'syz.3.2686': attribute type 10 has an invalid length. [ 663.808098][T18079] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 664.179714][T18082] veth7: entered promiscuous mode [ 664.179738][T18082] veth7: entered allmulticast mode [ 664.202740][T18090] x_tables: duplicate underflow at hook 1 [ 664.276590][T18081] veth7: entered promiscuous mode [ 664.277816][T18081] veth7: entered allmulticast mode [ 664.414312][T18083] veth7: entered promiscuous mode [ 664.414338][T18083] veth7: entered allmulticast mode [ 664.519531][T18091] bridge0: port 1(wlan1) entered blocking state [ 664.519647][T18091] bridge0: port 1(wlan1) entered disabled state [ 664.519825][T18091] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 664.565391][T18091] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 664.751841][T18096] bridge0: port 1(wlan1) entered disabled state [ 664.775736][T18096] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 664.775769][T18096] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 664.776038][T18096] bridge0: port 1(wlan1) entered disabled state [ 665.338980][T18107] syzkaller0: entered promiscuous mode [ 665.339006][T18107] syzkaller0: entered allmulticast mode [ 665.362516][T16412] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.378673][T18114] netlink: 'syz.5.2699': attribute type 2 has an invalid length. [ 665.478129][T18121] netlink: 'syz.5.2699': attribute type 10 has an invalid length. [ 665.979089][T18131] syzkaller1: entered promiscuous mode [ 665.979122][T18131] syzkaller1: entered allmulticast mode [ 666.649457][T18141] netlink: 'syz.1.2703': attribute type 11 has an invalid length. [ 666.770670][T18144] __nla_validate_parse: 7 callbacks suppressed [ 666.770693][T18144] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2704'. [ 666.989956][T18142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.997995][T18142] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.025495][T18142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.055251][T18151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.173033][T18142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.199949][T18142] veth1_vlan: left promiscuous mode [ 667.210617][T18142] veth0_vlan: left promiscuous mode [ 667.229820][T18142] veth0_vlan: entered promiscuous mode [ 667.249377][T18142] veth1_vlan: entered promiscuous mode [ 667.286398][T18142] veth1_macvtap: left promiscuous mode [ 667.295447][T18142] veth0_macvtap: left promiscuous mode [ 667.301337][T18142] veth0_macvtap: entered promiscuous mode [ 667.309597][T18142] veth1_macvtap: entered promiscuous mode [ 667.345170][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 667.347019][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 667.348264][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 667.349429][T18142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 667.393648][T18142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.505199][T18142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 667.508472][T18142] 8021q: adding VLAN 0 to HW filter on device bond3 [ 667.581066][T18142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.630257][T18142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.743694][T16410] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.743729][T16410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.743786][T16410] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.743811][T16410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.743844][T16410] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.743867][T16410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.743900][T16410] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.743924][T16410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.926068][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 667.926701][T18168] netlink: 'syz.3.2707': attribute type 7 has an invalid length. [ 667.929237][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 667.929909][T18170] netlink: 'syz.3.2707': attribute type 7 has an invalid length. [ 667.935929][ T5742] wg2 speed is unknown, defaulting to 1000 [ 667.935964][ T5742] syz2: Port: 1 Link ACTIVE [ 668.055915][T18173] netlink: 'syz.1.2708': attribute type 10 has an invalid length. [ 668.108279][T18175] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2710'. [ 668.128400][T18175] netlink: 'syz.5.2710': attribute type 3 has an invalid length. [ 668.270573][T16417] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.270865][T16417] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.292608][T15148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.294628][T16417] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 668.294875][T16417] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 668.301043][T16417] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 668.301304][T16417] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 668.344183][T15148] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 668.345543][T15148] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 668.346167][T15148] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 668.354116][T18183] netlink: 'syz.2.2712': attribute type 5 has an invalid length. [ 668.999508][T18205] warn_alloc: 1 callbacks suppressed [ 668.999538][T18205] syz.2.2720: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 668.999603][T18205] CPU: 1 UID: 0 PID: 18205 Comm: syz.2.2720 Not tainted syzkaller #0 PREEMPT(full) [ 668.999625][T18205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 668.999636][T18205] Call Trace: [ 668.999646][T18205] [ 668.999655][T18205] dump_stack_lvl+0xe8/0x150 [ 668.999696][T18205] warn_alloc+0x24d/0x270 [ 668.999721][T18205] ? kasan_save_track+0x4f/0x80 [ 668.999775][T18205] ? kasan_save_track+0x3e/0x80 [ 668.999802][T18205] ? __pfx_warn_alloc+0x10/0x10 [ 668.999822][T18205] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 668.999853][T18205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.999900][T18205] __vmalloc_node_range_noprof+0x127/0x1540 [ 668.999969][T18205] ? rcu_is_watching+0x16/0xb0 [ 669.000011][T18205] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 669.000040][T18205] ? __kmalloc_cache_noprof+0x321/0x600 [ 669.000061][T18205] ? __kmalloc_cache_noprof+0x14d/0x600 [ 669.000081][T18205] ? xskq_create+0x56/0x220 [ 669.000169][T18205] xskq_create+0x148/0x220 [ 669.000194][T18205] ? xsk_init_queue+0x8a/0xe0 [ 669.000219][T18205] xsk_init_queue+0x8a/0xe0 [ 669.000244][T18205] xsk_setsockopt+0x5e0/0x960 [ 669.000270][T18205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 669.000290][T18205] ? __pfx_aa_sk_perm+0x10/0x10 [ 669.000357][T18205] ? aa_sock_opt_perm+0x142/0x1e0 [ 669.000388][T18205] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 669.000434][T18205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 669.000458][T18205] do_sock_setsockopt+0x17c/0x1b0 [ 669.000493][T18205] __x64_sys_setsockopt+0x13d/0x1b0 [ 669.000536][T18205] do_syscall_64+0x166/0x520 [ 669.000563][T18205] ? trace_irq_disable+0x3b/0x140 [ 669.000585][T18205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.000608][T18205] ? clear_bhb_loop+0x70/0xc0 [ 669.000635][T18205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.000657][T18205] RIP: 0033:0x7f191959e159 [ 669.000679][T18205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.000699][T18205] RSP: 002b:00007f191a403028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 669.000724][T18205] RAX: ffffffffffffffda RBX: 00007f1919825fa0 RCX: 00007f191959e159 [ 669.000741][T18205] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 669.000754][T18205] RBP: 00007f191963506b R08: 0000000000000004 R09: 0000000000000000 [ 669.000768][T18205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.000783][T18205] R13: 00007f1919826038 R14: 00007f1919825fa0 R15: 00007ffdb213b428 [ 669.000820][T18205] [ 669.000923][T18205] Mem-Info: [ 669.000935][T18205] active_anon:6080 inactive_anon:4 isolated_anon:0 [ 669.000935][T18205] active_file:2 inactive_file:43245 isolated_file:0 [ 669.000935][T18205] unevictable:0 dirty:182 writeback:0 [ 669.000935][T18205] slab_reclaimable:13906 slab_unreclaimable:128986 [ 669.000935][T18205] mapped:29486 shmem:533 pagetables:3788 [ 669.000935][T18205] sec_pagetables:0 bounce:0 [ 669.000935][T18205] kernel_misc_reclaimable:0 [ 669.000935][T18205] free:1013336 free_pcp:14338 free_cma:0 [ 669.033212][T18205] Node 0 active_anon:24420kB inactive_anon:16kB active_file:8kB inactive_file:172784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117944kB dirty:724kB writeback:0kB shmem:2132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15520kB pagetables:14984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 669.033287][T18205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 669.033332][T18205] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.033386][T18205] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 669.033423][T18205] Node 0 DMA32 free:213664kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24420kB inactive_anon:16kB active_file:8kB inactive_file:172784kB unevictable:0kB writepending:724kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:57252kB local_pcp:39292kB free_cma:0kB [ 669.033474][T18205] lowmem_reserve[]: 0 0 0 0 0 [ 669.033507][T18205] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.033554][T18205] lowmem_reserve[]: 0 0 0 0 0 [ 669.033588][T18205] Node 1 Normal free:3828416kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.033637][T18205] lowmem_reserve[]: 0 0 0 0 0 [ 669.033670][T18205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 669.033780][T18205] Node 0 DMA32: 671*4kB (UME) 636*8kB (UME) 189*16kB (UM) 420*32kB (UME) 159*64kB (UME) 91*128kB (UME) 31*256kB (UME) 20*512kB (UM) 14*1024kB (UM) 10*2048kB (UM) 28*4096kB (U) = 213740kB [ 669.034008][T18205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 669.034111][T18205] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 10*16kB (UM) 4*32kB (UM) 4*64kB (UM) 7*128kB (UM) 3*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 933*4096kB (M) = 3828416kB [ 669.034259][T18205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.034275][T18205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 669.034289][T18205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 669.034304][T18205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 669.034318][T18205] 43776 total pagecache pages [ 669.034326][T18205] 0 pages in swap cache [ 669.034333][T18205] Free swap = 124996kB [ 669.034340][T18205] Total swap = 124996kB [ 669.034348][T18205] 2097051 pages RAM [ 669.034355][T18205] 0 pages HighMem/MovableOnly [ 669.034361][T18205] 428700 pages reserved [ 669.034368][T18205] 0 pages cma reserved [ 669.794144][T18213] ipvlan2: entered allmulticast mode [ 669.794166][T18213] macvlan1: entered allmulticast mode [ 669.795427][T18213] batman_adv: batadv0: Adding interface: ipvlan2 [ 669.795440][T18213] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.795467][T18213] batman_adv: batadv0: Interface activated: ipvlan2 [ 669.869261][T18218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 669.883992][T18213] ipvlan3: entered allmulticast mode [ 669.893237][T18213] batman_adv: batadv0: Adding interface: ipvlan3 [ 669.893253][T18213] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.893275][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 669.893288][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.893300][T18213] batman_adv: batadv0: Interface activated: ipvlan3 [ 669.980940][T18214] ipvlan4: entered allmulticast mode [ 669.988931][T18214] batman_adv: batadv0: Adding interface: ipvlan4 [ 669.988948][T18214] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.988971][T18214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2 [ 669.988986][T18214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.988995][T18214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan3 [ 669.989006][T18214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.989018][T18214] batman_adv: batadv0: Interface activated: ipvlan4 [ 670.005772][T18221] xt_hashlimit: overflow, try lower: 18446744073709551614/255 [ 670.261601][T18220] syzkaller0: entered promiscuous mode [ 670.261627][T18220] syzkaller0: entered allmulticast mode [ 670.367743][T18220] tipc: Enabled bearer , priority 0 [ 670.416831][T18220] tipc: Resetting bearer [ 670.465591][T18217] tipc: Resetting bearer [ 670.591254][T18217] tipc: Disabling bearer [ 670.617285][T18241] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2729'. [ 670.617312][T18241] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 670.663606][T18221] syzkaller1: entered promiscuous mode [ 670.663631][T18221] syzkaller1: entered allmulticast mode [ 670.669633][T18237] syzkaller0: entered promiscuous mode [ 670.669655][T18237] syzkaller0: entered allmulticast mode [ 670.809711][T18237] tipc: Enabled bearer , priority 0 [ 670.821112][T18239] tipc: Resetting bearer [ 670.844538][T18236] tipc: Resetting bearer [ 670.895755][T18236] tipc: Disabling bearer [ 671.327304][T18263] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 671.327349][T18263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.392829][T18273] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2736'. [ 671.574414][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'. [ 671.617104][T18287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'. [ 672.158623][T18295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2740'. [ 673.371512][T15148] ip6_tnl_xmit_ctl: 23 callbacks suppressed [ 673.371537][T15148] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 673.464286][T15148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 673.617166][T18336] IPVS: set_ctl: invalid protocol: 202 172.20.20.187:20000 [ 673.771989][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 673.803547][T16401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.803571][T16401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.888385][T16410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.888409][T16410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.094229][T15148] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 674.169562][T18348] netlink: 'syz.2.2752': attribute type 1 has an invalid length. [ 674.411475][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 674.411499][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 674.606217][T18348] 8021q: adding VLAN 0 to HW filter on device bond11 [ 674.611347][T18359] netlink: 'syz.2.2752': attribute type 1 has an invalid length. [ 674.752596][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 674.752619][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 674.842655][T18352] macvlan4: entered promiscuous mode [ 674.842680][T18352] macvlan4: entered allmulticast mode [ 675.168215][T18364] macvlan5: entered promiscuous mode [ 675.168239][T18364] macvlan5: entered allmulticast mode [ 676.410006][T18390] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2757'. [ 676.410040][T18390] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2757'. [ 676.530365][T18390] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2757'. [ 676.561998][T18390] netlink: 'syz.0.2757': attribute type 2 has an invalid length. [ 676.562026][T18390] netlink: 'syz.0.2757': attribute type 2 has an invalid length. [ 676.684877][T18400] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 678.248144][T18424] netlink: 67 bytes leftover after parsing attributes in process `syz.5.2766'. [ 678.363683][T18414] bond5: option all_slaves_active: invalid value (255) [ 678.430083][T18414] bond5 (unregistering): Released all slaves [ 679.403277][T18436] netlink: 'syz.0.2772': attribute type 3 has an invalid length. [ 679.461246][T18436] Unsupported ieee802154 address type: 0 [ 679.743651][T18441] SET target dimension over the limit! [ 680.247655][T18445] bond6 (unregistering): Released all slaves [ 680.732763][T18455] Cannot find del_set index 4 as target [ 680.892513][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 681.532171][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 681.685204][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2782'. [ 681.735659][T18476] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 682.173347][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 682.814263][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 683.015412][T18466] syzkaller0: entered promiscuous mode [ 683.015644][T18466] syzkaller0: entered allmulticast mode [ 683.313159][T18493] netlink: 'syz.0.2785': attribute type 1 has an invalid length. [ 684.214506][T18515] x_tables: duplicate underflow at hook 2 [ 684.292787][T18515] xt_addrtype: ipv6 does not support BROADCAST matching [ 685.322348][T18522] netlink: 'syz.5.2791': attribute type 61 has an invalid length. [ 685.322377][T18522] netlink: 'syz.5.2791': attribute type 62 has an invalid length. [ 686.017280][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.877443][T18493] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 691.889545][T18494] erspan2: entered allmulticast mode [ 691.983490][T18497] syz.0.2785 (18497) used obsolete PPPIOCDETACH ioctl [ 693.148175][T18564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2799'. [ 693.255594][T18567] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.778211][T18573] xt_l2tp: invalid flags combination: 0 [ 694.619634][T18592] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 694.680953][T18592] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 695.666243][T18543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.413189][T18620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 696.889182][T18631] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2814'. [ 696.891842][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 697.447613][T18644] block nbd3: server does not support multiple connections per device. [ 697.448158][T18644] block nbd3: shutting down sockets [ 699.042697][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 699.095524][ T5742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 699.143719][ T5742] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 699.168276][ T5742] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 699.227455][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 699.364080][T10198] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 699.451858][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 699.457270][T10198] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 699.852660][T10198] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 700.073902][T18678] veth0: entered promiscuous mode [ 700.075805][T18678] veth0: left promiscuous mode [ 700.142612][T18679] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 701.976885][T18660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 702.712524][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2827'. [ 702.714299][T18701] batman_adv: batadv0: Adding interface: dummy0 [ 702.714315][T18701] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.714340][T18701] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 702.785374][T18701] netlink: 'syz.3.2829': attribute type 3 has an invalid length. [ 702.785399][T18701] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2829'. [ 703.501697][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'. [ 703.982535][T18726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2835'. [ 704.585130][T18744] netlink: 'syz.0.2841': attribute type 7 has an invalid length. [ 704.585155][T18744] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2841'. [ 704.866368][T18750] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 704.908563][T18747] netlink: 'syz.2.2842': attribute type 2 has an invalid length. [ 704.925732][T18747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 705.726813][T18755] IPVS: Scheduler module ip_vs_sip not found [ 705.789630][T18770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2849'. [ 706.190574][T18782] netlink: 'syz.1.2850': attribute type 1 has an invalid length. [ 706.235913][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 706.476450][T18791] netlink: 'syz.2.2852': attribute type 10 has an invalid length. [ 706.545577][T18788] bond6: (slave geneve4): making interface the new active one [ 706.546799][T18788] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 706.617104][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2850'. [ 706.741106][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 706.762453][T18787] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 706.805826][T18787] bond12 (unregistering): Released all slaves [ 707.690205][T18777] bond6: entered promiscuous mode [ 707.690232][T18777] geneve4: entered promiscuous mode [ 707.713239][T18777] 8021q: adding VLAN 0 to HW filter on device bond6 [ 707.773255][T15805] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.777436][T16405] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.786883][T16410] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 707.786921][T16410] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 708.364146][T18814] FAULT_INJECTION: forcing a failure. [ 708.364146][T18814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.364179][T18814] CPU: 0 UID: 0 PID: 18814 Comm: syz.5.2857 Not tainted syzkaller #0 PREEMPT(full) [ 708.364200][T18814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.364211][T18814] Call Trace: [ 708.364219][T18814] [ 708.364228][T18814] dump_stack_lvl+0xe8/0x150 [ 708.364263][T18814] should_fail_ex+0x410/0x560 [ 708.364294][T18814] _copy_to_user+0x31/0xb0 [ 708.364324][T18814] simple_read_from_buffer+0xe1/0x170 [ 708.364358][T18814] proc_fail_nth_read+0x1bb/0x230 [ 708.364387][T18814] ? common_file_perm+0x20e/0x2b0 [ 708.364413][T18814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.364446][T18814] ? rw_verify_area+0x24a/0x4c0 [ 708.364476][T18814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.364504][T18814] vfs_read+0x213/0xa80 [ 708.364537][T18814] ? __pfx___mutex_lock+0x10/0x10 [ 708.364564][T18814] ? __pfx_vfs_read+0x10/0x10 [ 708.364592][T18814] ? __fget_files+0x2a/0x420 [ 708.364623][T18814] ? __fget_files+0x3a2/0x420 [ 708.364648][T18814] ? __fget_files+0x2a/0x420 [ 708.364692][T18814] ksys_read+0x150/0x270 [ 708.364722][T18814] ? __pfx_ksys_read+0x10/0x10 [ 708.364762][T18814] do_syscall_64+0x166/0x520 [ 708.364784][T18814] ? trace_irq_disable+0x3b/0x140 [ 708.364804][T18814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.364823][T18814] ? clear_bhb_loop+0x70/0xc0 [ 708.364848][T18814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.364867][T18814] RIP: 0033:0x7f1357d5e98e [ 708.364886][T18814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 708.364903][T18814] RSP: 002b:00007f1358b7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.364925][T18814] RAX: ffffffffffffffda RBX: 00007f1358b806c0 RCX: 00007f1357d5e98e [ 708.364942][T18814] RDX: 000000000000000f RSI: 00007f1358b800a0 RDI: 0000000000000004 [ 708.364955][T18814] RBP: 00007f1358b80090 R08: 0000000000000000 R09: 0000000000000000 [ 708.364967][T18814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.364978][T18814] R13: 00007f1358026038 R14: 00007f1358025fa0 R15: 00007ffe66a7e208 [ 708.365013][T18814] [ 709.225494][T18820] syzkaller0: entered promiscuous mode [ 709.225520][T18820] syzkaller0: entered allmulticast mode [ 709.838126][T18834] netlink: 'syz.5.2862': attribute type 2 has an invalid length. [ 709.838156][T18834] netlink: 'syz.5.2862': attribute type 2 has an invalid length. [ 709.887398][T18857] __nla_validate_parse: 1 callbacks suppressed [ 709.887419][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 709.897623][T18858] netlink: 'syz.5.2862': attribute type 1 has an invalid length. [ 716.064166][T18870] netlink: 'syz.1.2868': attribute type 5 has an invalid length. [ 716.081053][T18867] syzkaller0: entered promiscuous mode [ 716.081075][T18867] syzkaller0: entered allmulticast mode [ 716.133179][T18867] tc action pedit 'at' offset 5 out of bounds [ 716.688116][T18895] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 716.840384][T18889] vlan3: entered promiscuous mode [ 716.840561][T18889] bond0: entered promiscuous mode [ 716.840576][T18889] bond_slave_0: entered promiscuous mode [ 716.896856][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 716.896880][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 717.287803][T18895] 8021q: adding VLAN 0 to HW filter on device bond12 [ 718.052297][T16410] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.052999][T16410] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.053036][T16410] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.101256][T18913] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2877'. [ 718.140247][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 718.705776][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2883'. [ 719.023654][ T5712] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 719.023678][ T5712] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 719.047629][ T5712] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 719.093869][ T5712] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 719.113024][ T5712] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 719.313003][ T5712] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 719.844246][T18955] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2886'. [ 719.934063][T10198] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 719.934683][T10198] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.013591][T10198] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 720.209255][T18958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2886'. [ 720.424513][T18925] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 720.424560][T18925] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 720.424579][T18925] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 720.933660][T18966] bond9: entered promiscuous mode [ 721.057813][T18964] erspan0: left promiscuous mode [ 721.309137][T18964] 8021q: adding VLAN 0 to HW filter on device .` [ 721.419640][T18964] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.526024][T18964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.716787][T18964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.719619][T18964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.748029][T18964] veth0_vlan: left promiscuous mode [ 721.762958][T18964] veth0_vlan: entered promiscuous mode [ 721.768998][T18964] veth1_vlan: entered promiscuous mode [ 721.789314][T18964] veth1_vlan: entered allmulticast mode [ 721.810674][T18964] veth1_macvtap: left promiscuous mode [ 721.821412][T18964] veth0_macvtap: left promiscuous mode [ 721.833556][T18964] veth0_macvtap: entered promiscuous mode [ 721.836831][T18964] veth1_macvtap: entered promiscuous mode [ 721.879762][T18964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.889757][T18964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.891281][T18964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.908515][T18964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 721.930533][T18964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.931189][T18964] erspan0: entered promiscuous mode [ 722.024709][T18964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.129576][T18964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.140905][T18964] batman_adv: batadv0: Interface activated: macvtap2 [ 722.149363][T18964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 722.165187][T18964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 722.243362][T18964] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 722.334260][T18979] syzkaller0: entered promiscuous mode [ 722.334287][T18979] syzkaller0: entered allmulticast mode [ 727.517139][ T5712] ip6_vti0 speed is unknown, defaulting to 1000 [ 727.518233][ T5712] sz0: Port: 1 Link ACTIVE [ 727.518319][ T5712] ip6_vti0 speed is unknown, defaulting to 1000 [ 727.554543][T16410] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.554658][T16410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.561299][T16410] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.561420][T16410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.807827][T18996] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2891'. [ 727.826730][T16405] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.827163][T16405] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.827202][T16405] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.827237][T16405] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.328109][T16410] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.328356][T16410] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.352582][ T5742] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.894405][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.911992][ T5769] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.972822][ T5769] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 729.357827][T19039] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 730.558028][T19053] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2904'. [ 730.581541][T19053] x_tables: duplicate underflow at hook 3 [ 731.512022][T19072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2909'. [ 731.740396][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 732.733432][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 732.893426][T19067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2907'. [ 734.576763][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2915'. [ 734.652607][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 734.679304][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2915'. [ 735.088982][T19108] syzkaller0: left promiscuous mode [ 735.089007][T19108] syzkaller0: left allmulticast mode [ 736.007869][T19124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 736.127319][T19123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2921'. [ 736.172363][T19125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2923'. [ 736.477331][T19125] netlink: 'syz.3.2923': attribute type 3 has an invalid length. [ 736.477356][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2923'. [ 736.572236][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 736.582047][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 737.220466][T19149] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2930'. [ 737.390139][T19153] openvswitch: netlink: Flow actions attr not present in new flow. [ 737.490595][T19157] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2932'. [ 738.356627][T19172] batman_adv: batadv0: Adding interface: gretap1 [ 738.356650][T19172] batman_adv: batadv0: Interface activated: gretap1 [ 738.376709][T19174] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2937'. [ 738.521085][T19182] netlink: 'syz.0.2939': attribute type 1 has an invalid length. [ 738.583336][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 738.727142][T19182] 8021q: adding VLAN 0 to HW filter on device bond6 [ 739.132443][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 739.132469][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2940'. [ 739.317427][T19196] syzkaller0: entered promiscuous mode [ 739.317452][T19196] syzkaller0: entered allmulticast mode [ 739.443606][T19197] bond6 (unregistering): Released all slaves [ 739.585717][T19201] tipc: Enabled bearer , priority 0 [ 739.722087][T19171] tipc: Resetting bearer [ 740.051292][T19171] tipc: Disabling bearer [ 740.296425][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2943'. [ 740.723268][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2944'. [ 740.723293][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2944'. [ 740.723317][T19221] netlink: 'syz.0.2944': attribute type 6 has an invalid length. [ 741.104774][T19242] openvswitch: netlink: Flow actions attr not present in new flow. [ 741.511031][T19232] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.632903][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'. [ 741.840160][T19232] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.988716][T19232] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.334911][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 742.457688][T19232] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.561862][T19263] tipc: Can't bind to reserved service type 0 [ 743.142486][T15804] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.207437][T16404] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.362003][T15805] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.582849][T16414] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.096652][T19316] syzkaller1: entered promiscuous mode [ 745.096678][T19316] syzkaller1: entered allmulticast mode [ 745.254155][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2960'. [ 747.347149][T19366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2969'. [ 747.456052][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.890065][T19374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 747.906917][T19374] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 747.910191][T19374] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 747.911206][T19374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 747.919019][T19374] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 748.610326][T19381] block nbd3: server does not support multiple connections per device. [ 748.610690][T19381] block nbd3: shutting down sockets [ 750.013182][ T5613] Bluetooth: hci3: command tx timeout [ 750.344600][T19408] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2977'. [ 750.412861][T16414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.412901][T16414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.412925][T16414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 750.557075][T19403] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2977'. [ 750.933223][T19417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 751.027611][T16414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.027650][T16414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.027675][T16414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.463282][T16414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.463320][T16414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.463345][T16414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 751.829619][T19371] lo speed is unknown, defaulting to 1000 [ 752.092805][T19374] Bluetooth: hci3: command tx timeout [ 752.125808][T16414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.125846][T16414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.125870][T16414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 752.546739][T19444] dvmrp6: entered allmulticast mode [ 752.561132][T19443] syz_tun: entered allmulticast mode [ 752.589632][T19446] syz_tun: left allmulticast mode [ 753.028829][T19371] ip6_vti0 speed is unknown, defaulting to 1000 [ 753.272568][T16414] mac80211_hwsim hwsim73 wlan1: left allmulticast mode [ 753.279925][T16414] mac80211_hwsim hwsim73 wlan1: left promiscuous mode [ 753.286884][T16414] bridge0: port 1(wlan1) entered disabled state [ 753.413129][T16414] batman_adv: batadv0: Interface deactivated: gretap1 [ 754.172766][T19374] Bluetooth: hci3: command tx timeout [ 754.756231][T16414] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 755.174155][T16414] batman_adv: batadv0: Removing interface: gretap1 [ 755.495139][T16414] bond6 (unregistering): (slave geneve4): Releasing active interface [ 755.495168][T16414] geneve4 (unregistering): left promiscuous mode [ 755.651163][T16414] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 755.784594][T16414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.785302][T16414] bond_slave_0: left promiscuous mode [ 755.857286][T16414] bond0 (unregistering): Released all slaves [ 755.874032][T16414] bond1 (unregistering): Released all slaves [ 755.899264][T16414] bond2 (unregistering): (slave veth3): Releasing active interface [ 755.899295][T16414] veth0_to_bond: entered promiscuous mode [ 755.920991][T16414] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 755.921019][T16414] veth0_to_bond: left promiscuous mode [ 755.959703][T16414] bond2 (unregistering): Released all slaves [ 755.986409][T16414] bond3 (unregistering): Released all slaves [ 756.007799][T16414] bond4 (unregistering): Released all slaves [ 756.036172][T16414] bond5 (unregistering): Released all slaves [ 756.069802][T16414] bond6 (unregistering): Released all slaves [ 756.107536][T19371] wg2 speed is unknown, defaulting to 1000 [ 756.111262][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 756.129526][ T5742] wg2 speed is unknown, defaulting to 1000 [ 756.129562][ T5742] syz2: Port: 1 Link DOWN [ 756.130076][T19371] lo speed is unknown, defaulting to 1000 [ 756.253147][T19374] Bluetooth: hci3: command tx timeout [ 756.474840][T16414] ovs-s: left promiscuous mode [ 756.757872][T16414] : left promiscuous mode [ 756.906546][T16414] tipc: Left network mode [ 757.008110][T16414] IPVS: stopping backup sync thread 17584 ... [ 758.117583][T19371] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.120873][T19371] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.121039][T19371] bridge_slave_0: entered allmulticast mode [ 758.146930][T19371] bridge_slave_0: entered promiscuous mode [ 758.162912][T19371] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.163127][T19371] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.163273][T19371] bridge_slave_1: entered allmulticast mode [ 758.171324][T19371] bridge_slave_1: entered promiscuous mode [ 758.278205][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 758.296930][T19371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.368024][T19371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.829081][T19371] team0: Port device team_slave_0 added [ 758.865984][T19371] team0: Port device team_slave_1 added [ 759.068654][T19371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.068674][T19371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.068702][T19371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.152221][T19371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.152240][T19371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.152267][T19371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.153061][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 760.356669][T19371] hsr_slave_0: entered promiscuous mode [ 760.357965][T19371] hsr_slave_1: entered promiscuous mode [ 760.893743][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 763.323610][T19371] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 763.356059][T19371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.357057][T19371] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 763.393333][T19371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.450994][T19371] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 763.489417][T19371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 763.559335][T19371] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 763.579062][T19371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.067469][T19371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.179684][T19371] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.292837][T16405] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.292954][T16405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.338875][T16417] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.338993][T16417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.688739][T19371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.919098][T19371] veth0_vlan: entered promiscuous mode [ 766.966423][T19371] veth1_vlan: entered promiscuous mode [ 767.127088][T19371] veth0_macvtap: entered promiscuous mode [ 767.156614][T19371] veth1_macvtap: entered promiscuous mode [ 767.263628][T19371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.338929][T19371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.471907][T16405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.472976][T16405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.473016][T16405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.473051][T16405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.738769][T19573] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2991'. [ 767.774818][T16414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.774844][T16414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.976624][T16414] veth1_macvtap: left promiscuous mode [ 767.976693][T16414] veth0_macvtap: left promiscuous mode [ 767.976891][T16414] veth1_vlan: left promiscuous mode [ 767.976933][T16414] veth0_vlan: left promiscuous mode [ 768.462912][T19597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 768.473753][ T31] audit: type=1107 audit(1789918552.877:17): pid=19593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 770.186576][T16414] team0 (unregistering): Port device team_slave_1 removed [ 770.210951][T16414] team0 (unregistering): Port device team_slave_0 removed [ 770.722399][T15804] smbdirect: ib_dev[syz2] removed [ 770.987919][T19585] tipc: Enabling of bearer rejected, failed to enable media [ 771.857476][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2996'. [ 772.085659][T19638] netlink: 'syz.0.2998': attribute type 2 has an invalid length. [ 772.121971][T19634] macvtap0: entered promiscuous mode [ 772.121996][T19634] vlan0: entered promiscuous mode [ 772.122431][T19634] macvtap0: entered allmulticast mode [ 772.122446][T19634] vlan0: entered allmulticast mode [ 772.122457][T19634] veth0_vlan: entered allmulticast mode [ 772.195543][T19638] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 772.278071][T15804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.278094][T15804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.488349][T16404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.488371][T16404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.917108][T19647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3000'. [ 773.438576][T16414] IPVS: stop unused estimator thread 0... [ 773.603337][T19656] sctp: [Deprecated]: syz.1.2966 (pid 19656) Use of int in max_burst socket option. [ 773.603337][T19656] Use struct sctp_assoc_value instead [ 773.973751][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 773.993552][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 773.996048][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.021118][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.030208][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 774.208053][T10841] cgroup: fork rejected by pids controller in /syz5 [ 774.637292][T19666] netlink: 'syz.1.3006': attribute type 4 has an invalid length. [ 776.094809][ T5613] Bluetooth: hci2: command tx timeout [ 776.342368][T16414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.342408][T16414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.514326][T19695] tipc: Enabled bearer , priority 0 [ 776.518288][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 776.764223][T16414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.764260][T16414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.855383][T19693] tipc: Disabling bearer [ 777.213471][T19374] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 777.238477][T19374] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 777.239559][T19374] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 777.240575][T19374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 777.241332][T19374] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.396726][T16414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 777.396765][T16414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.567335][T19662] lo speed is unknown, defaulting to 1000 [ 777.650555][T19710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3016'. [ 777.828522][T19716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3016'. [ 778.010869][T19718] ip_tables: iptables: counters copy to user failed while replacing table [ 778.156665][T19718] netlink: 'syz.0.3017': attribute type 2 has an invalid length. [ 778.175858][T19374] Bluetooth: hci2: command tx timeout [ 778.189618][T19719] netlink: 'syz.0.3017': attribute type 2 has an invalid length. [ 778.957651][T19662] ip6_vti0 speed is unknown, defaulting to 1000 [ 779.453703][ T5613] Bluetooth: hci1: command tx timeout [ 780.262904][ T5613] Bluetooth: hci2: command tx timeout [ 780.515626][T19662] lo speed is unknown, defaulting to 1000 [ 781.041973][T19750] vcan0: entered allmulticast mode [ 781.079520][T19751] vcan0: left allmulticast mode [ 781.369157][T19755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'. [ 781.369188][T19755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 781.422518][T19754] xt_limit: Overflow, try lower: 0/0 [ 781.453321][T19754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'. [ 781.533583][ T5613] Bluetooth: hci1: command tx timeout [ 790.681659][T19706] lo speed is unknown, defaulting to 1000 [ 791.157913][T19706] ip6_vti0 speed is unknown, defaulting to 1000 [ 791.642915][T19706] lo speed is unknown, defaulting to 1000 [ 886.861555][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 886.886220][ C1] rcu: 0-...!: (3 ticks this GP) idle=48bc/1/0x4000000000000000 softirq=109326/109326 fqs=23 [ 886.896484][ C1] rcu: (detected by 1, t=10502 jiffies, g=133281, q=410 ncpus=2) [ 886.904308][ C1] Sending NMI from CPU 1 to CPUs 0: [ 886.909534][ C0] NMI backtrace for cpu 0 [ 886.909551][ C0] CPU: 0 UID: 0 PID: 16409 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 886.909571][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 886.909583][ C0] Workqueue: krds_cp_wq#0/1 rds_connect_worker [ 886.909709][ C0] RIP: 0010:rcu_is_watching+0x72/0xb0 [ 886.909737][ C0] Code: 18 6a 96 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d f7 cc e8 11 74 11 83 e0 04 c1 e8 02 5b <41> 5e 41 5f c3 cc cc cc cc cc e8 6f 02 87 ff eb e8 48 c7 c7 00 2f [ 886.909752][ C0] RSP: 0018:ffffc90000007c88 EFLAGS: 00000002 [ 886.909769][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000001000003 [ 886.909781][ C0] RDX: 0000000000000000 RSI: ffffffff8c6da060 RDI: ffffffff8c6da020 [ 886.909794][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 886.909806][ C0] R10: ffffc90000007d58 R11: fffff52000000fad R12: ffffffff9ac4a908 [ 886.909819][ C0] R13: 0000000000000000 R14: ffffffff8e6e67d0 R15: dffffc0000000000 [ 886.909832][ C0] FS: 0000000000000000(0000) GS:ffff888124ccd000(0000) knlGS:0000000000000000 [ 886.909848][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.909861][ C0] CR2: 000056017c1d9008 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 886.909878][ C0] Call Trace: [ 886.909887][ C0] [ 886.909896][ C0] lock_acquire+0x58/0x350 [ 886.909916][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 886.909945][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 886.909966][ C0] ? debug_object_deactivate+0x9a/0x250 [ 886.910026][ C0] debug_object_deactivate+0x9a/0x250 [ 886.910052][ C0] __hrtimer_run_queues+0x239/0xa10 [ 886.910098][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 886.910137][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 886.910172][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 886.910193][ C0] [ 886.910200][ C0] [ 886.910207][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.910228][ C0] RIP: 0010:__inet6_bind+0xfe/0xf30 [ 886.910311][ C0] Code: 30 e8 56 59 5c 01 4c 89 e8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ef e8 01 19 ae f7 4d 8b 6d 00 4c 89 f8 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 44 0b 00 00 41 0f b7 2f bf 0a 00 00 00 89 ee e8 3a 15 [ 886.910326][ C0] RSP: 0018:ffffc90005ec7758 EFLAGS: 00000a02 [ 886.910342][ C0] RAX: 0000000000000000 RBX: ffff888012106c00 RCX: ffff8880400d9f40 [ 886.910355][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 886.910366][ C0] RBP: dffffc0000000000 R08: 0000000049cb000a R09: 00000000000080fe [ 886.910379][ C0] R10: 0000000000000000 R11: ffffffff8a89d5d0 R12: ffff888012107880 [ 886.910391][ C0] R13: ffff88807d53a7c0 R14: 1ffff11002420d82 R15: ffffc90005ec7820 [ 886.910407][ C0] ? __pfx_inet6_bind+0x10/0x10 [ 886.910438][ C0] ? __inet6_bind+0xda/0xf30 [ 886.910463][ C0] ? kernel_bind+0xf0/0x1c0 [ 886.910492][ C0] kernel_bind+0x13e/0x1c0 [ 886.910519][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 886.910551][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 886.910595][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 886.910625][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 886.910653][ C0] ? lock_acquire+0x115/0x350 [ 886.910682][ C0] rds_connect_worker+0x1d8/0x290 [ 886.910702][ C0] ? process_scheduled_works+0x97a/0x1630 [ 886.910732][ C0] process_scheduled_works+0xc3d/0x1630 [ 886.910770][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 886.910795][ C0] ? assign_work+0x3cf/0x5d0 [ 886.910820][ C0] worker_thread+0xa47/0xfb0 [ 886.910857][ C0] kthread+0x38b/0x480 [ 886.910874][ C0] ? __pfx_worker_thread+0x10/0x10 [ 886.910896][ C0] ? __pfx_kthread+0x10/0x10 [ 886.910914][ C0] ret_from_fork+0x514/0xb70 [ 886.910939][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 886.910956][ C0] ? __switch_to+0xc89/0x1420 [ 886.910997][ C0] ? __pfx_kthread+0x10/0x10 [ 886.911015][ C0] ret_from_fork_asm+0x1a/0x30 [ 886.911050][ C0] [ 887.289459][ C1] rcu: rcu_preempt kthread starved for 9643 jiffies! g133281 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 887.300510][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 887.310499][ C1] rcu: RCU grace-period kthread stack dump: [ 887.316400][ C1] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 887.329928][ C1] Call Trace: [ 887.333225][ C1] [ 887.336184][ C1] __schedule+0x17db/0x58f0 [ 887.340720][ C1] ? __lock_acquire+0x747/0x2de0 [ 887.345701][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 887.350849][ C1] ? __pfx___schedule+0x10/0x10 [ 887.355724][ C1] ? lock_acquire+0x115/0x350 [ 887.360432][ C1] ? schedule+0x90/0x2b0 [ 887.364702][ C1] schedule+0x164/0x2b0 [ 887.368890][ C1] schedule_timeout+0x152/0x2c0 [ 887.373776][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 887.379187][ C1] ? __pfx_process_timeout+0x10/0x10 [ 887.384508][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 887.390334][ C1] ? prepare_to_swait_event+0x322/0x350 [ 887.395911][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 887.400805][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 887.406982][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 887.412292][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 887.417516][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 887.423348][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 887.427961][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 887.433186][ C1] ? __kthread_parkme+0x71/0x1f0 [ 887.438159][ C1] ? __kthread_parkme+0x199/0x1f0 [ 887.443217][ C1] kthread+0x38b/0x480 [ 887.447308][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 887.452525][ C1] ? __pfx_kthread+0x10/0x10 [ 887.457137][ C1] ret_from_fork+0x514/0xb70 [ 887.461756][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 887.466886][ C1] ? __switch_to+0xc89/0x1420 [ 887.471602][ C1] ? __pfx_kthread+0x10/0x10 [ 887.476237][ C1] ret_from_fork_asm+0x1a/0x30 [ 887.481059][ C1] [ 887.484097][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 887.490449][ C1] CPU: 1 UID: 0 PID: 19745 Comm: syz.2.3021 Not tainted syzkaller #0 PREEMPT(full) [ 887.499843][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 887.509914][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x49/0x80 [ 887.516111][ C1] Code: 29 89 d6 81 e6 00 01 00 0f 81 fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 3c 17 00 00 00 74 2c <8b> 91 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 [ 887.535744][ C1] RSP: 0018:ffffc9000d2af318 EFLAGS: 00000246 [ 887.541852][ C1] RAX: ffffffff81bb817e RBX: ffff8880b8643708 RCX: ffff88801e73be80 [ 887.549847][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 887.557846][ C1] RBP: ffffc9000d2af470 R08: ffff88801e73d41f R09: 1ffff11003ce7a83 [ 887.565841][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffff110170c86e1 [ 887.573829][ C1] R13: 0000000000000000 R14: ffff8880b8643700 R15: 0000000000000001 [ 887.581815][ C1] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 887.590765][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 887.597363][ C1] CR2: 00007f4b34827dac CR3: 000000008e954000 CR4: 00000000003526f0 [ 887.605362][ C1] Call Trace: [ 887.608661][ C1] [ 887.611616][ C1] smp_call_function_many_cond+0x63e/0x1500 [ 887.617557][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 887.622795][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 887.629145][ C1] ? rcu_is_watching+0x16/0xb0 [ 887.633932][ C1] ? trace_tlb_flush+0x3c/0x160 [ 887.638821][ C1] flush_tlb_mm_range+0x8ff/0x1090 [ 887.643969][ C1] ? __lock_acquire+0x747/0x2de0 [ 887.648940][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 887.654526][ C1] ? __lock_acquire+0x747/0x2de0 [ 887.659483][ C1] ? free_pgd_range+0x1356/0x13c0 [ 887.664536][ C1] ? __lock_acquire+0x747/0x2de0 [ 887.669501][ C1] tlb_flush_mmu+0x1af/0xa30 [ 887.674120][ C1] tlb_finish_mmu+0xf4/0x220 [ 887.678733][ C1] free_ldt_pgtables+0x192/0x360 [ 887.683703][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 887.689203][ C1] ? down_read+0x2be/0x330 [ 887.693654][ C1] exit_mmap+0x1bf/0x9f0 [ 887.697939][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 887.702758][ C1] ? __pfx_exit_aio+0x10/0x10 [ 887.707514][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 887.712747][ C1] __mmput+0x118/0x420 [ 887.716861][ C1] exit_mm+0x221/0x2d0 [ 887.720951][ C1] do_exit+0x6cd/0x2360 [ 887.725149][ C1] ? lock_acquire+0x115/0x350 [ 887.729845][ C1] ? __pfx_do_exit+0x10/0x10 [ 887.734467][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 887.739529][ C1] do_group_exit+0x22d/0x2f0 [ 887.744138][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 887.749360][ C1] get_signal+0x121b/0x12c0 [ 887.753913][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 887.759492][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 887.765687][ C1] ? fput_close_sync+0x11f/0x240 [ 887.770673][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 887.776066][ C1] ? rcu_is_watching+0x16/0xb0 [ 887.780865][ C1] do_syscall_64+0x328/0x520 [ 887.785480][ C1] ? trace_irq_disable+0x3b/0x140 [ 887.790529][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.796616][ C1] ? clear_bhb_loop+0x70/0xc0 [ 887.801326][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.807237][ C1] RIP: 0033:0x7f191959e159 [ 887.811685][ C1] Code: Unable to access opcode bytes at 0x7f191959e12f. [ 887.818779][ C1] RSP: 002b:00007f191a4030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 887.827217][ C1] RAX: fffffffffffffe00 RBX: 00007f1919825fa8 RCX: 00007f191959e159 [ 887.835208][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1919825fa8 [ 887.843198][ C1] RBP: 00007f1919825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 887.851187][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.859187][ C1] R13: 00007f1919826038 R14: 00007ffdb213b340 R15: 00007ffdb213b428 [ 887.867228][ C1]