last executing test programs: 5.274924614s ago: executing program 4 (id=255): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1aa79}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bond0\x00', @broadcast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r11, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x35, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, 0x8c05, 0x8000}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 4.598153558s ago: executing program 4 (id=260): r0 = socket(0x18, 0xa, 0x1) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) splice(r0, &(0x7f0000000000)=0x7, r1, &(0x7f0000000080)=0x2, 0x6, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendto(r2, &(0x7f00000000c0)="78ff1fa5acb1efcaf99f36890bd27af84466afb0fe1daedf70fa1c052e7888344b7d2d0c774b992e10ad94853dc352fd56a41543c065c125873166c3588eb8d7fdfbcd33cebde1b221eb06a25644146b081d873ef6ccdf237389b5c6a8c74ea02f88c89772ea94934bb8b2adcc80a2de8ab26ff98f707f611bce264d0517a447fa16e6fc257436aef0e38a2babe2f9c4db862930c3b1e815", 0x98, 0x805, &(0x7f00000001c0)=@nfc={0x27, r3, 0x1, 0x3}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x2c, 0x8, {{0x12, 0x4, 0x3, 0x37, 0x48, 0x66, 0x0, 0x7f, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x27, 0x14, [@remote, @remote, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @empty]}, @rr={0x7, 0xb, 0xdf, [@empty, @local]}]}}}}}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x1152, 0x7f77, 0x101, 0x10908, 0x1, 0xffff, '\x00', r4, r1, 0x1, 0x5, 0x1, 0x0, @void, @value, @value=r5}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x2, '\x00', r4, r1, 0x0, 0x0, 0x5}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f0000000480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000004c0)='GPL\x00', 0x5d, 0x4e, &(0x7f0000000500)=""/78, 0x0, 0x2, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xf, 0x6, 0xb2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r6, r6, r6, r6, r6, r6], &(0x7f0000000640)=[{0x3, 0x4, 0xd, 0x6}, {0x0, 0x3, 0x1, 0xc}], 0x10, 0x4bc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000440), &(0x7f0000000740)=r8}, 0x20) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000007c0)={0x0, 'vlan1\x00', {0x1}, 0x7ff}) recvmsg$can_j1939(r0, &(0x7f00000019c0)={&(0x7f0000000800)=@rc={0x1f, @none}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/219, 0xdb}], 0x1, &(0x7f00000009c0)=""/4096, 0x1000}, 0x103) r9 = accept(r0, &(0x7f0000001a00)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000001a80)=0x80) sendmsg$nl_route(r9, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20048a0}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=@ipv4_getnexthop={0x34, 0x6a, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000001bc0)={0x0, 0xd, "2ab34f8f3f38f0103c66f2ae8c"}, &(0x7f0000001c00)=0x15) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001c40)={r10, @in6={{0xa, 0x4e23, 0x4, @private2, 0x5288}}, 0x7f, 0xc0e, 0x4, 0x1, 0x7}, &(0x7f0000001d00)=0x98) syz_emit_ethernet(0x1025, &(0x7f0000001d40)={@local, @broadcast, @void, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}, {0xac, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x101, 0x0, 0x1}], @llc={@llc={0x90, 0xe, "15", "c27e27237e69a7e881a097a86b1bafcb896756a661bdb022f863a487936879370149e3ccaabe71f014b7e96fbffe68b4e61531cd385e86c821b8c304331755522bb90913acba391d40b18733050e47b80bb3a783cad8f370c2a0969abd0968174cdd6a57d79502127cc01786460675ff676a1ddaa810f4664394aaaa5ccabf83f6fe58bb717767911f7d6f308c09673fdc8d64021a66f5df17ebb4309013fceb338311c633d00d83cd3b1d24f52db9d305084a47786c6f0bf0a73f213db801f0e4967b6a9eebb63916ef899ebad8d39f36988d17522c8172bb0f7f6a71a3e395594f614b153aaea53aa957bdbf907dc5bec7007095e93d1a17fe10d57ee5894a3e757fcda7b327734ddeb0762184cb133c7b6b78bde117d22eb2366267b0dda68ff81dbd1c4104ea2a92def866f3a0a321adb5247364cccb9674f65989883bcfe371cffce2b6d5f96737b18a66de1258a17a4bddb2304c2a009e2166013f221f97c3d15e875ab0f075ee41aecadff6662d8e0deddba543079e7f2f217a93b4c80c5aa8ecd5f2c06aec182d73dd39e645f69cdc6feb20b70c0be1e31dd9c9f4390dba5800459a24c5aa4c2d37593b1fa3f85e3760557308fd9309a10fd381700e3679a1b558e70de88eab2b0270de47794d457c350db84322c10ea81b7f7f3ed150a8cb97f8f1b34168dbda9490e8814ae52a18416b5c46a504c5647b304833ba356bc050fa06196cc0350b18314619fe7b2d435361a799464efe01e026130c9752a8e5eef5fffcb0bce90683d62227b674600bf7d32664b8f00c214b7b69f309792791a980529e3f9e9f47ae3448d91805acf2a2a41cf46cd63b7b05a0d453d5d7c99eca475919cecb98478c82b10aab87ee6a331c377da9541a76d4174416f7b0115bb8ab4c9658be87eeee1fe2479ade3e28e04b5bbae222af1d618b328c11ffffb0882a243ef7be9314e82b208200edb43d23d9380be76541e6eb40c2536b8063b50ef6578684bdaa90e8164880d779535349c64d4e517d395688cc30623d77a600edac744a62a0313e3425e6bf1a5fb5abe5feeed1ca2d1c0b6aa78cd3b5cef7f04c1178df14e121ea5aa8ea1c39c37fb239bc69110a13ff5649d03337fe94f798e23f18e0b035d89dbcb8f9b34230e0bf381a7772b7bf3b537827bab88005d6ab213282cb9e6148c9e0dbf92fb1d07a972792be6cb63daf74c593be92188e857a9a56cc90424b86b29c8a6be8905142415bab5e2b478002fbaf3d5f579aa4a4ab86742022a83b3213dcc8b8e737a56635cf1c78182dcdb5e177765ab12a0cad3a0b972154211ad439843f9e8b2e8c4bdd62b9764f3f96dff916284d3f1ac3bf12c47e8a2981d6a7efb1ca372981fa8d5191b4395e2403eccc0a7bcb108d312140293c87b73a6aaaac34c2b27658da5416eb0e63815543834e18fe1920ccd4b7b6f08022b37b175b5465a6c72fcc13055745bf1975721d8331bddb19f852b264350b21ca52a0b53f01c72718ac8543102da59b823aa2beddf41c3cf6cb04eafb77b829cdb9da9399cfe460a9049dab1d17167d7928cf63c6c3fa290fb3641c91ca912eab2a2ceb49c7a60cadbc0e45d2d8db41f012df404d67d9b096033a383631375aa80ee7308686d1d16416ccfaaf9c7facd9d912b45d7e8f46bcc1605f370fb621bbb7b7cc146315c05073b7d7ff50df278b8e2a5d96dad958927363f82a1524bbd2441ad7dd6c7cc833f9c6082ef22ffcfb337d9b4c7c07f5e12fd9925645fcdd4b921dacf2dbececc365efcb5a018c84f66adae9870b38664ec376588adc40104c5a40e9586c7938801a0e8111db8f288c0a19bcfd469527fa33b030c9134d9d469e321dae6b47055cf071a606adfc586f1bcfd90cc7cdf78a56242c44fed91ae6e4dad3fd121903fb112ab995e175a6fb98e6f79e047770335ed2949b6a298e5c8d09f14e206ce4454976e4cfcb86fb3fb53e2c429298d944ac5006ddb517f422a047b7dd0920d263d8331bf86f4bafcc5fce2384fead8c89e51ba2a6d1ce0178783b5b7e3e5988756e92dbf65fa2748d71f56641daf7d35368023c5199a6abb8ced9b10f3265454023c5a53a85c183e61ac51dd38da9dc20ce9d6bb3b467501ea36fb0ae2944bfdd18d440c8256275f6785fd28d6952479eee729c066598add91884ae220b4ad6f27d50c136ec96b75f8cf11fe26f95c7789adecd94d65919510de0c0acae11cc507b2e3d815ac887fc6aa11fe9b8e71216e92293e72fea830fa9857a864089806de3307842300c3d9b3c285e2216103324c8e5e26f8661985977af424c03aa3ea0ff71d7ece12a4303cfab8c220bfc85dc98fbda1adaec504ee06b7e2d09bab086c9ef61338251992ec45f25acfa46169e68c32f92b0981968a7f267f3685f5690279039babc4e472948dc011e7867693cda8b24a5888d4e9fba5d3e2ee7e7a59061aed5142ddb96bd970e2719e9e3fc487b5bfcd672e06992ce4b4ca3a45f0df2ecc94d08326140293158cc2e3d6f01813e780c507e471d2cad457435a32aa2ba56c571ece68d243b04761a89fc63dd4a55767ad65ba769fc7a64ce8b5f37c8c03fa30cc0c3d3544dcfa82d3cb3a4f2fb2a0d84837d381319191793fad6a4aa7805b57c9574b3e1edea920d85bea7d843e33cbb5583405997db2580cb9c4e914d3249f7bdfeafeea27334ac88e12aa472502f3aeb3a7e70e136ec59f7691058754e3f018816325c6c1eb97745fb004406aaf533600d9c377e09985d37c6fe4127c9215910085694b14f9f916c6ad992b462bc2ba3e34aabd432392a218b5cacb2b2be5af02b84cc03dde69fd0c6c02b51e1688b8a2c21fd37054fec3139bc47d57b96536b2221adc860f2cf4b5031e9f20d8e6f1ed734dab8648dd60a88c6e56f14196e6bf2f3d58f2214864f2c777d0abd92160a939145f315b5864def41a4000ffbb00097de8e83c297375c343b57965eaa56c12813f2f7bc7f57568173810bd06ad5aae5f32e8b79eca5fd4c1d4398eaa2bbe12d228df97299b518d095995694a572a8ec3ba0e588fb08ef6063c72c2c00ddce171800fb8334e05b9aad7b20a08eb095b3c17adb8356d611df7c264298e2273173994205f29940b8cf7b6e27372338646c4a3873a667ba7348fa22090dac90df72a0b00b6091eb9517a97992263aa80dcd274e7a80bf5c351d103945ae8dd835dd7cd3ad6f5c14a98a7747f540429c0edcc550c2962bfbe7774f5aaf99ab2903043b8a55bbc8e538aaa7c1108246482b6d1e5d229465ab4f71f102bffa39bef7f840928fec60426d36d207deb992a744e6294fdc013ccf6f31eb89205c0cd222e000705dce0e3bdcbb422d4360abb38922683c244f89ad94c582f4bf84dcba54f1031fdcd0ee214827efd7995d5c8ea16e525d91708c22b27caedfefcc0e7ccd4f55381b4957876727282406cf38c1a0a16b65d0a4b07194ff8da9a52d24112ecdc6db94f21650acb689f52cf714779be554872c98ff1eff5fa8bf5263f279bca5c6e21498273256c2d9485553046a8f8e6042233f0d1acdc0bb1bc9c26125e38b3d088567d9b7c64576868884b016ee6839e8f267e7a20faacf7df1ea74a2a9ab1344595bf463c2e5b97724d0f2bb315a98eddaf44d3450113d5b24cdaeea2c7618f3905cbe8737ab1ea4b57d5429ea7cc54470768c31092e6223e847441dd365e361552bee6e082b78c105b7b077f4448ec9d04f9e598b0da4353bd2cfca8abdfc21a1b12694365aabf208d9f248ad47c79241f0573e4ebfa4fa952c74672133b3457347f6d911f320aeefea7c0f14abded9fab381b3bca37ebf82b125f9e9b39463224ffb06f2078199790f03cff722fc52558097149dc9f921e0ceb3f6a4bd724ef9c54d17ef95f9fe53f7d69a65f745ac6b10a01792ba8905745630d381a78f5cc6571f69b57b3bdcbc5873f6d9a406188bdb3eea96426cb81e6aace18988aa3eda8ba79f718b18f6b51523d80ff4e387ebc11567abbc07c385d061d12ed10aa34e6ce0e24bfa8bcf825e75bbb753c5937350b8f4a548e4645242568a07664f72b3cc8a35bb807557632be353f999b6a6f88127d5e55886285ab0e0b37b30cee3859935d70332ceb5b8821afb38a81b1fb6075d7505275d6aec4197ea40edda567fa233c47421c783b327d3b84d4b839047b016660bfd7d400bfbbd9ff0151c3ba808ee5d6ffed1c21f2e64af1c52f0b8b3abfd90cc75fb411d56ca57c1fb41d82344a2e03b8ca1937f3c5c5564f71b03be86e8ff939d75e9cb6273a3eabb2f61f6c297083ebbde8fd4ac17d075ec0d5f0076c8b4694324e009e069a2c49f809b0ba22ceba01f3899b033e148c7dd10d7d6d9a9a7ff1a4a6b5aa88fdf7dd6d6f82012f46c2984045d16893af15f8e142de25b87ada207165492e3845947f55c4bfa4c077e3a1bce6ce9025945f2404e41d99a6f9adf8bfe6742d8ce8dfe0dde0f01ece4e9bb9fd0aaf94c6c120d131da8d7d2ce85e8408ef282666c4771509cac7b758e942024cc12e8416b816606314bcc0cd33cf3d744afcaf745a71e31acd8bc361e1e9183be83f8bb73b1e37edeed8b4761796a14330d95eff9ee6d1973926ad93f33eb7767041a109e779f888e83c87a82f1a0e08636bff3a47e88183d8f4ab560faf3b44c64d44871884fc9952914777653acbd7b6140faa60184095030aefb7dbbbceadc9ef00db061c4c0f2d51ca3b6c9b49a41186763298605392b099c24f1983cf8199e633042f4d7c3834108c12a8727b28a78b3465dbb98efeadb8502c43c28dee3d2ac05da5dfd4e0de82639379dc1a6d4edd795e4e3cd9c7f28cc813ae025f881b37d65b0dd81e294c9d1175390a6c362557b5b1e9ae418b76b15b8b5197f74101051f822249a37e410fc346934dc05891f543ecb72e7b679e51857418fbc682ea8daae4b3f41d4d7a45ae40c047717ac1934d86feee2b1616486c01e65ac38c9ec8fb0ea319789382a99c74f455b48e25445b1fbdf6479df0d26fc3ff7126763395e92abf2ca0ca9843f611b6bf771f5576091e7619d6b053d3202d4e6517d809a8fa4a9c25375c203dcac8c4931b82cf9f5bb64725d06981519bf83f256562dc055c4b98e7d213dea9085248436b1e1e400d7d32db0072479049fc9694306415e25cb17d2a8a64eeb524eb62d7f4dbfedb216a89efd7ee9198a5324d8bdf9408421b8ddabc0dd745602762939fb7064db5b0c452eb457dbb5dcc5837d15aa2078dfb54c7e29f94699c79c66582195c8a2f4d5516919f682df5d03b2a34fab727221ae83bdb236f8538087f1211abad07180a93b494c1fe4d8913ecdc7a447c2a565a0eb7d02ff5a3937544607a63a2b4b52fcf75c823435b49f285c706a275aca95b03361e696c5ac19f93832ce57172e31a43aca2376e565bb5e7fadefb6f5ed12d342cae07b599084947c3efa858a1589889217dcc7072cdd1bdf77c199bc460a943204faeb8a61909cb024d2dc8dedb3fa4342a6bab0889ff07f18398216b52c725f23f7453039f17af37526be678259cbcc9bdcf8d7fde7cf0a73185cebaffa63786c5eef5406bc411cd973fe12a7e84a3ee3e5ece7107bf30f6532140ec70c9e011cf23799e376064dab2f9f23d4bf3c71e56d14d4cb9b8cd88e36056875a8ce334fb727dea91895a1744a239949070691515a325fc5d4ba68161a9c6e4dd63186bd2ce1e8b5efe4ce748a069c3d00843bcf95b96b6ff1ec6ec67bb64b7d4374209293664432e9095c3875f346ae096022"}}}}}}, &(0x7f0000002d80)={0x1, 0x4, [0xe40, 0x181, 0xc94, 0x455]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e00), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f80)={&(0x7f0000002e80)={0xec, r11, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x26}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x844}, 0x4c010) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003180), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000031c0)=@bpf_tracing={0x1a, 0x9, &(0x7f0000003000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x6, 0x8, 0xa, 0x8, 0xffffffffffffffff}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000003080)='GPL\x00', 0x4, 0x32, &(0x7f00000030c0)=""/50, 0x41000, 0x0, '\x00', r4, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x2, 0x7, 0xf2e, 0x7}, 0x10, 0x1678f, r13, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000032c0), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003300)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000003480)={&(0x7f0000003280), 0xc, &(0x7f0000003440)={&(0x7f0000003340)={0xfc, r14, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000034c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003640)={r16, 0x20, &(0x7f0000003600)={&(0x7f0000003500)=""/136, 0x88, 0x0, &(0x7f00000035c0)=""/33, 0x21}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.20334382s ago: executing program 4 (id=266): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) (async) listen(r0, 0xfff) (async) r1 = accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)=0x3c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019080), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000190c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000019180)={&(0x7f0000019040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000019140)={&(0x7f0000019100)={0x34, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r6, 0x89e0, &(0x7f0000000100)={'bond_slave_0\x00', 0x5, 0x3}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000019380)={&(0x7f00000191c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000019340)={&(0x7f0000019200)={0x120, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2c}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe0, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xb9, 0x1, "c43c0e2396d213d704dcc59b0360002b32d1591554f65f5167539e8f0c5412a17739d71c7a160addaaf9aba62de370b34a25a5467f3b835e158162f2d7af2bcdc86259801e3b669b48cc3544a8169e8518dac84c919b0895400f814fd42e43d8c0db052fb73b68e727c51efa78dcf9c9deb2380f5a67a972c24be6a273da26cd08d4318113d1688ffb655c120a6b79d0ca5f4415fb0641ddc3217274ba99ebebe13ce7cd88734f4f0e5f7014d4deabbdcd1d40c3d0"}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x9, 0x1, "e621ceda2d"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x40090) r7 = socket(0x10, 0x3, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r8, &(0x7f0000000000)="41000200010007", 0x7) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0x2}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x566}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xe140}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r5, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xffff840e}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = socket(0x40000000015, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2710, &(0x7f0000000040)=""/102396, &(0x7f0000000000)=0x18ffc) (async) r12 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r12, 0x29, 0x41, &(0x7f00000006c0)={'mangle\x00', 0x1000, "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"}, &(0x7f0000001700)=0x1024) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000019500)={&(0x7f00000193c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000194c0)={&(0x7f0000019400)={0x88, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x51}}}}, [@NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0x1000, 0x9, 0x4, 0xe, 0x1]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x51c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9a1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffff349}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xf7}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8001) 3.929886505s ago: executing program 0 (id=269): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r1, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000b2f0cbaa1f357331000000180001801400020073797a5f74756e000000000000000000080002000f"], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) recvmsg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/43, 0x2b}], 0x1}, 0x40000002) 3.707341992s ago: executing program 0 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={0x18, r2, 0x1, 0x0, 0x1, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000001c0)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_b, @broadcast, @random="b1c6a93e9727", {0x7, 0x1}, @value=@ver_80211n={0x0, 0x80}}, 0x4, @default, 0x8, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x6}, {0x6c}, {0x18}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x3, 0x3, 0x0, {0x6, 0x81, 0x0, 0x8, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x400, 0xff, 0x6c}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x40}}, [{0xdd, 0x6, "fb62708020ac"}, {0xdd, 0x6, "37f28099d71b"}, {0xdd, 0x6, "02c5f1cb192a"}]}, 0x72) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x29, 0x1}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) 3.212408272s ago: executing program 4 (id=273): r0 = socket(0x2b, 0x80801, 0x1) (async) unshare(0x22020400) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000400), &(0x7f0000000300)=r6}, 0x20) (async) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2090e854ac71", 0x6}], 0x1}, 0x2) (async) recvmsg$unix(r1, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) getuid() bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%-5lx \x00'}, 0x20) ioctl$XFS_IOC_SCRUBV_METADATA(r8, 0xc0285840, &(0x7f0000000300)={0x1, 0x0, 0x9f, 0x0, 0xfc01, 0x1, 0x0, &(0x7f00000002c0)=[{0x10, 0x1ff, 0xff}]}) r9 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x90, 0x26, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @generic="11c1ea7b89a7265b107d62bbafb54c4484067761f9734de870f5e78d6b999fde5efd4429c7768e84902261f24ffed40eb6f08767ece2a1c5dd99c4029cd687ee6183ed9d71db5891b1f4ae106bdfb26701b6139880af9a4fe4fb1b335d46039152b3dc78d0fd1f407d1b7e5fead608ecb78c11"]}, 0x90}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 3.01869087s ago: executing program 4 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xff80, 0x90}, 0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000100)=0xb8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x3}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa7, 0x0, 0x0, 0x0, 0x2, 0x1, 0xf}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) 2.977908026s ago: executing program 4 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0xc}, {0xf, 0x4}, {0x2, 0xfff3}}, [{0x8}, {0x8, 0xb, 0x401}]}, 0x34}}, 0x40004) 2.830505567s ago: executing program 1 (id=277): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0x4d3b897f6247ab3f}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xffffffff, 0x3}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x48080) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000003380)={0x0, 0x3}, &(0x7f00000033c0)=0x8) close(r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000100)='%pK \x00'}, 0x20) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010001fff000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703667726574617000000018000280140006002001000000000000000000000000000108001f0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004844}, 0x44004) 2.829993096s ago: executing program 0 (id=278): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x80000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x0, 0xffff}, {0xffe0, 0xffe0}}}, 0x24}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.736705683s ago: executing program 3 (id=279): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x1c8, 0x0, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@empty, @empty=0x98, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}], {{'\x00', 0x0, 0x70, 0x98, 0x11e}, {0x28}}}}, 0x3f0) 2.648555763s ago: executing program 3 (id=280): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x2000006}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 48) 2.427100088s ago: executing program 3 (id=281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x4008800}, 0x40800) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)=';', 0x1}], 0x1}}], 0x1, 0x2400c890) r5 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xffffffffffffff8b, &(0x7f0000000b00), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r5, &(0x7f0000000380)=""/238, 0xee, 0x10120, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000002000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x138, 0x3, "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"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 2.316178545s ago: executing program 1 (id=282): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x9, 0x2, 0xa32a}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno', 0xa) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fe41000000bf86000000000000070a0000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ff000000008500000007000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.197813474s ago: executing program 3 (id=283): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f00000004c0)="9dfaf99ab5f946b14484329b2d1c6cdc", 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.994749857s ago: executing program 3 (id=284): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x5, 0x7, 0x46, 0x10000, 0xffffffffffffffff, 0xb5b, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0xf}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x74, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xd4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000, 0x100008}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfffffffb}}]}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-010d \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@local, 0x6e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x200000000000001, 0xfffffffffffffffc, 0x100007ffffffc, 0x2095, 0xffffdffffffffffa, 0x2}, {0x4, 0x40, 0x5d93, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@multicast2, 0x0, 0x3c}, 0x2, @in=@private=0xa010101, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r10, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r11, 0x4}, 0x38) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x17}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x639, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0x1a, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x7, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4, 0x4}}}}]}, 0x34}}, 0x0) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x1c, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3db0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffff7}, @ldst={0x1, 0x2, 0x0, 0x7, 0x7, 0x8}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x35d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xd1, 0x75, &(0x7f00000003c0)=""/117, 0x41000, 0x28, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000440)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r3, r6, r9, r11, r13, r15, r16, 0x1, r17], &(0x7f0000000740)=[{0x0, 0x2, 0x4, 0x8}, {0x3, 0x1, 0x0, 0x2}], 0x10, 0x2}, 0x94) 1.994197585s ago: executing program 1 (id=285): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@ifindex, 0xffffffffffffffff, 0x19, 0x4030, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000300)={r2, 0x10, 0x7}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f616400240002800800034000000092080002400000000008000440000000e9080001400000000d0800034000000002080002401000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000010001000000000000ffed0000009e0e000000000000000000001a00000000000000000000000004000000000000000000000000000000000000000000000000000000000000007f7f00000000000000000000000000000000000013000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc79ee42cbe0e2855ab0ab7d593fffdfa7062ec0ea9ba54510c2281631e3752dcf0d78a384ed087ae5bf1f27e4a5cf1054d6a4fcc36e3c093b57257f1ccb8dac3dc0c740ec4c81481068e4f08aebf43cdf97bdc9fbf0afc37178c5"], 0x90) 1.905652914s ago: executing program 1 (id=286): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0x13}, @call={0x85, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (fail_nth: 9) 1.803722465s ago: executing program 2 (id=287): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@restrict={0xe}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0xb, 0x5}, {0x6}, {0x1}, {0xd, 0x3}, {0x0, 0x3}, {0x9, 0x1}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0xa}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x0]}}, &(0x7f00000000c0)=""/212, 0x89, 0xd4, 0x0, 0x47fc, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@restrict={0xe}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x1}, {0xb, 0x5}, {0x6}, {0x1}, {0xd, 0x3}, {0x0, 0x3}, {0x9, 0x1}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x3, 0xa}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x61, 0x0]}}, &(0x7f00000000c0)=""/212, 0x89, 0xd4, 0x0, 0x47fc, 0x10000}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) (async) 1.632677237s ago: executing program 1 (id=288): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x9, &(0x7f00000005c0)=@raw=[@tail_call, @exit, @generic={0x3, 0x0, 0x9, 0x2, 0x2}, @map_fd={0x18, 0x6}], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) (async) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x844) (async) r7 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000001b00000127bd7000fddbdf25ac1414bb000000000000000000000000ffffffff0000000000000000000000004e2300074e20fffd020000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01f0ffffffffffff80000000000000000000000000001000ffffffff00000000090000000000000001000000000000000700000000000000feffffffffffff0800000000000000000002000000000000030000000000000100000000000000030000000000000002010200000000008a00010000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0", 0x3a}], 0x1) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x1, 0x70bd25, 0x25dfdbf9, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x0) 1.489446407s ago: executing program 2 (id=289): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x37000000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0xd, @mcast1, 0x1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000007c0f60e4319cc543ba12ff350a4d7cc08dc1c3db2577320b907f1285eb47"], 0x28}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.363582589s ago: executing program 2 (id=290): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x98, 0x1c8, 0x0, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@empty, @empty=0x98, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}], {{'\x00', 0x0, 0x70, 0x98, 0x300}, {0x28}}}}, 0x3f0) 1.294021014s ago: executing program 2 (id=291): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0x13}, @call={0x85, 0x0, 0x0, 0x24}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.148793813s ago: executing program 2 (id=292): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$xdp(0x2c, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"d0942af5df8606a6af15b416ea66c7e1", 0x0, 0x0, {0x1, 0x1}, {0x1, 0x3}, 0x9, [0xfff, 0x6, 0x1, 0x3, 0x5, 0x6, 0x8, 0x7, 0x198, 0x80, 0x9, 0x6, 0x2, 0x7fff, 0x10000, 0x35]}) unshare(0x2a060400) r1 = socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a00000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001007000128009000100766c616e0000000060000280060001000200000006000100020000004c0004800c00010003000000800000000c00010002000000090000000c00010012000000070000000c000100fbffffff040000000c00010009000000090000000c000100008000000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0x84, 0x1a, &(0x7f00000001c0)="f8105d2f959e3e2ceb2e388c40b965d36526c0fc1dd22cf2a21c56db6be4690c33f355f8ff0ac2e11537f5a02b630ebc325aab9bade68f2909af1956df45468c450d8bb6f4db6f71afbf666f1e025229e6524a68a481f9aae9d9517dfc5486232d2dc7d0becd6b648f94063c1fd6f693820e33fca4d4380f79d7f6dcb2f4cf76e22979b5", &(0x7f0000000280)=""/26, 0x5, 0x0, 0xf0, 0x6, &(0x7f00000002c0)="60c904ab79e2349d102b37e5fa837be947297f6e75ef3fc9378f3fcea680af523ff4db615fe74a082fb9ce9790d3cf0e5fd4b4c8ab95b93dd9f80217de1de85372c0dd2e537f398e510e7aea4b6062d0a50727038a3af9c30876e5106d4400a7af53ec08f822e6293466819309b8b3b5fac2789cbdb0e15951d190be96ae5d0841e451e69aa42940c96dbf38d4148ccf794a4bb4504a91f9d27fffb0c536b3921c4258a3655000de4b630b026feff1c3b5f026fab324e1ff7fab4e69804095e6e473b5c60c16d92fdff2551427e324f274a2f03313ccf12e5ed55dd20e28ffe01db67616196ad999a79c5c0b0906d68f", &(0x7f00000003c0)="fafb508a31fe", 0x8, 0x0, 0x4}, 0x50) 280.245679ms ago: executing program 0 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x50002}, 0x20048050) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 215.186763ms ago: executing program 0 (id=294): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r5, 0x81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r6, 0x6, 0x2, 0x40006, 0x1, 0x400}, &(0x7f0000000100)=0x14) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_STOP_AP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x2400c801) sendmsg$netlink(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001280)=[{0x0}, {&(0x7f0000000600)={0x10, 0x30, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2, &(0x7f0000001400)=[@rights={{0x10}}], 0x10, 0x40}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newqdisc={0x84, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3fc0000, 0x9, 0xfc70, 0x7f, 0x7, 0xfffffff8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x800, 0x5, 0x100, 0x4, 0x6}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x800}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 82.580179ms ago: executing program 1 (id=295): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001300)={'nat\x00', 0x0, [0x5, 0x88980000, 0x2, 0x7, 0xa]}, &(0x7f0000000140)=0x54) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x0, 0x40000000, 0x8000, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008050}, 0x4000) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000080), 0x12) sendfile(r2, r8, 0x0, 0xffffffff000) connect$llc(r2, &(0x7f0000000040)={0x1a, 0xf, 0x9, 0xa, 0x6, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) accept4(r2, 0x0, &(0x7f0000000100), 0x800) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9f21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x89}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000400)={0x32, 0x6, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}]}, 0x38) setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r11, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 80.546815ms ago: executing program 0 (id=296): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r2, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x0, 0x5, 0xd9e, 0xffffff7f}, &(0x7f0000000340)=0x98) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000280)={r0, r1+10000000}, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 38.74733ms ago: executing program 2 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a01040033c800000000000200000324000480200001800e000100627974656f726465720000000c00028008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a"], 0x78}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002140)=ANY=[@ANYBLOB="3c0200001900010029bd7000fbdbdf25fe880000000000000000000000000001ff020000000000000000000000000001000000004e2100000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000004000000040000000000000000000000010002020000000084010500fe880000000000000000000000000101000004d23c00000000000000ac1414aa0000000000000000000000000000000000020100ff7f0000070000005395214300000000000000000000000000000000000004d533000000020000007f00000100000000000000000000000000000000000122000500000001040000020000007f000001000000000000000000000000000004d23200000002000000fe88000000000000000000000000000101350000020101000400000008000000ffffff7ffe8000000000000000000000000000bb000004d23200"], 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r4, 0x301}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x34}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x7c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000016c0)={'ip6tnl0\x00', &(0x7f0000001640)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0x36, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x8000, 0x6, 0x6}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfd, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xf, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) sendmmsg$inet(r2, &(0x7f0000002440)=[{{&(0x7f0000000440)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="336ade732fd8a78b5b63ddb91e4d046cec195c45cead9162034bd1984dcbb6f98cc69c80e0712becef2aff389840495695b38e2e299e03b64bbac06aac0c3dae09366de53c243549429be230e86ded3e526e5306c0198edb44", 0x59}, {&(0x7f0000000540)="4cb0fe810c7992500c081c87baa41f694675afca48e2dba9afba64433ae3dfae6cab845f940ba8edd1eba3c4fdc920ad4fed1f6437f82b820c6aa2231d025152a828c7a2bd0aa37f56cabee16a96127b1440f806977e0b0804669514d4203fcc8f36ebaad2ff50cb3feebc00dff3ed5f662adb422710544e7f0af75e1a30358ee293b97331538a7b52e6c6eacaf7619b3c63668341932cf76954865cdc88e1370b14cfef2946f4f7d0119c866f01b5faa441", 0xb2}], 0x2, &(0x7f0000000680)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x3f, 0x3, [{0x0, 0x12, "520fa63116ab5041bd0be611408af4b4"}, {0x6, 0xf, "ea9a33a275f6f37fd730c877fc"}, {0x7, 0x10, "886e82f77793a88dfa6961c7c558"}, {0x5, 0x4, "e1a0"}, {0x6, 0x4, "f299"}]}, @generic={0x94, 0x11, "8f9d1c2afce31cf7c5b140b40fdd82"}, @lsrr={0x83, 0x13, 0x61, [@private=0xa010101, @private=0xa010102, @remote, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xe0}}, {{&(0x7f0000000780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="58756a695f33e024229607e28d5447dbb66ab8b265d8c7fa671ddf00a63834476099003788a27efb7c0b946300e771e8009e73455313", 0x36}, {&(0x7f0000000800)="524e4b1de924b8899aa87ea39b56762736cc7c113e7eebbf80d88132cb2706ebeef55311d14708d93cee676aefc5eba24212b8d344727a692388e284c49dace9e3b6bca7be44ec9703008bf476c1830abf0f31b42ca1bf4309f4aae2a05e5526909334688bfb8dd6c42031796d2ad7a99f81b2128b4d396382660b1dd76ba82973f16630af05eab0b0ae7193431fbbc606278a7ae1fe5adcb494e58b4518304275e5191c29cb8c1828055478157bbaa2cddb5e82cccd1a5e7fce8e7ca572c8c0fa9a4a586f99d0431a68854d", 0xcc}], 0x2, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}], 0x18}}, {{&(0x7f0000000980)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="be7e7518746bb62988daa8eb81a0b9ff1146a15599e625d9966f53179f6f9fe7fc23625c77c3b981d97367054ffe34bb307dd6c12689164832bc72736fef8e475fb8601e138b311d4b4a8163b8d0a95e95e29b5890d26e40d8da65219029b3168b08941a0479f885f006fca746766c2ef8432337516970aa8b38bbcb400da39b69487bed78357e775e33d1d4759939a43a05b724b078ccb07b803d8a95bf4611fd4eac29f2819cfd1a8f5cbc5190b38b4598e9e849f22cf8102f1b8855c79a1c874cedfea7fb35", 0xc7}], 0x1, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b80)="16e6f4d7f4e7", 0x6}, {&(0x7f0000000bc0)="79ecc16a9ace986aa327a2e5e1fea7554bcee4e10b6f9fe5ea1a1d8b4b2e2d3767e4ad4721a5fd6b1243445aba4e585cb0c1ee27901678db4c55667cfab2cf4586ce75bcf4ef87a39e80c7f2a7fb6ae7ac043656eeabfa367e17ba5409d60b3f442ccead9aec8573498f35f1", 0x6c}, {&(0x7f0000000c40)="b690d7772eee7b440831dee624ffd2e013daa0ecaa60886f3568fbdf33", 0x1d}, {&(0x7f0000000c80)="84da827b", 0x4}, {&(0x7f0000000cc0)="e001453480ee91f4b81d8922331f0d1714f90a0e3dcc4c5692e6507774a01868979f23c553e545e61696bacfd395496ecd8065498c3a48a858", 0x39}, {&(0x7f0000000d00)="d9b935b9d1c5ad85432ddf7a5f4fb8ec1736fced3cdb5e9e4113216c678c163eca9b4f95eb2f20c1191db58d036bf833c505b1baf40f52d2817b068c4a42f9d3ca7cf50d3a79917cfa73a57c", 0x4c}, {&(0x7f0000000d80)="8f7654e40f2a047836225cc46f5f2cc4d15447a4945c7cb9d356ba6423f3ef4340ed6ca645ac149c5975fa21a0ff533269a8f10f463b148257de987b530cbb21cbbbfc07995be05eecce982a675c0b8527e1785eab2c7fbeb24f9b35b9dc8aec32f58cd0e4c817bce45c6ab762364e7aebf0ada14bbf79a5f8734919497f86fc43c181d9106de44a88922698489d7c9323d293a338ae4478d2701b7748d392cc299859a970132438853763912e58ca653c94f29234903b998e2bf07a599140fbd03e97071d5935734e0d40baa1c2c83af406a9542dc84bb70dff0a0e57cd5af19658f296014acdc2", 0xe8}, {&(0x7f0000000e80)="38a7be28ccee39ed50aa8fcdf9ff0e09b67da8e1c412b56cf8c43a089a608784f7774f9424cc963ad9cd6b409de75a917d324b440fcef56ba53c9e49aee36901debf784bc90d655568ad5c9208744d5c151b0d783ff4d442bfa7b1df3b243cbf9722a9588906adc76ca77f45fb7c771ac7579fc4ef336e031d5c163ec2030d0ae98e168d4bdb5986a348c0156d2260561d86a7bc1cefa8e59d29ee5efa6ceb1b4484312b8b3399b02cd446ebfb05dd9cfca488e2a861d16c7f29abf7d3adc3f78294fe6469435787d4ee7844031fa937367242336b52e7f57b0169f93678c1343e7fde6cc276c2ecd1e81f9f69f33d9e34", 0xf1}], 0x8, &(0x7f0000001000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x30}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="5a2ea16e9216fc8ad84f3d78f89f83825c1d2bf517863956b10e55e52e9dcbea25ca8ae78ddd8e66fe57c608803c02932815a9c9dedefb7cfee5be6282d9694500906cbf0ac8001e8fe22a717e8e1317105cbdaf658af054e9605e064b0a71ca4ffa20425b3698e23cabcd92e8ff5a91", 0x70}], 0x1, &(0x7f0000001100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0xb0}}, {{&(0x7f00000011c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001200)="b4a5d7c99e080459af0d098ad92f18aca86aaa2348f9b15f1eeb965fcf286b9d0535285f8a60996dc0bc1f5c0088403a7b0ff2a9c2db7ebd06daaf84f79cfc3ecc6a27fc1ad6e7d2ef5270bd00b74c6fad9fa4c910509434330a4769bfe1e16d52d9f3ca798db8311aa3b48d9215b6ec58c4834277b3b0434e51b66d35d3087f00fd359b1e4807c1", 0x88}, {&(0x7f00000012c0)="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", 0xfc}, {&(0x7f00000013c0)="c7795906bb281e6af1733a52bbc60e096f", 0x11}, {&(0x7f0000001400)="bfe7c3ba55af2949ab10e91016304b262ee7b9f044d1d9928803c60396e23ad880ed95413de7ca45b5267770c0e4eb9c35187191983149b9e72094c02e60116349080bb527da53ac3b2e38ee6d9bcfb0b0bcf5cd4eb49aaa7e5c16a6d67a4b9e0d6ad847efc2102994fb0be12340c5579b7f1f14af2fd3d44857aa92c9b335e634f3c04acdfa8b6d8de406b2e4bb8c257063fefd842b2a5b100622bba30eefb2c2ce892156", 0xa5}, {&(0x7f00000014c0)="c3c11b50a28c7f6d76efa14d4e804434589f02dfd93ee97ead25e902920e0d9d6f2a7cbe228d70422d886311a4956273f2047e2efd1dc75d31d58fdab483fd9b1dc0b683e1f624c247912fd738ff20f57339695e95bf155644889246660b492125aa197ec770c8e7156c8768836500bd7ede1a317ad5112c9481c1adbabe5f91c3a2a77a9029f7f0c5d8b11884b49b7a8803772dddf5b7f41b3516a72cb67a507b0621914613b7d253a968e293", 0xad}, {&(0x7f0000001580)="787bde31c9399c16fb0eeacb1c08ed5ff78952755e52de0d3e382286bb8269e1bbd61e23e29a", 0x26}], 0x6, &(0x7f0000001700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast2}}}], 0x90}}, {{&(0x7f00000017c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001800)="b0bf275a5d7f4f1218bd7d2ec44eedda9dfd16aaf28e7621caf875f20a01468f426dd87f3088b9974a5325210e346be2084eb499ee3c507d9b51a8ffcd1c4f57f4f91a32390dfd9bc36c079343f56b83c268727063cee432e25e68657f9968ee9a4b0992b5b4e27ae31f724932b93e838599e10d30a466121de6678f60ca824282e0d8c0557607613b2f215f4f0c8b0cdabda240897e59386a89048dbcaaffb66a750604e83db55c45bfc765248e28e81e62a2f446db574d3b9b04eaabcd80d86f953ff23615834a2e1e84ee83a070c4e2", 0xd1}, {&(0x7f0000001900)="df457689e556e19368d2c7e62da446bdc510f9182d1d60729d480ce8012f1a92adca4b51b9dae4d43655b727e715a5d1192bd55f7a26ed4ff1a9a98cc24412f958e1e9d88ef2a343649f83cd716788ff45ed967f946964ea411305f9f8bb175cbe7a4a5de3cc6e50b83d28df363ae71c95510826ba03fd1179cea7fb15e2a1f18abbb06b96fbf89d9d041f614f9b53eee0dc5d5169cbc4691fe387840af62761a5e4bebc16f306722eb91b729e1ac91d194b369c6addd4d34f48c1c6ebae8efc7c44a4156a757197fcda0761a09a47774dce998bf661378062167174", 0xdc}, {&(0x7f0000001a00)="874747cbc40f229d664b80c09ce00bb3d8f2142099ddfed754ae358828686cc8df6608b40752f967e49331622b73639e51f0adeb4e766de7355dba84c634bdd24f7ded1aa3ae7c648830d53008b0540713436a", 0x53}, {&(0x7f0000001a80)="9de046b81d06fb5de0c357bef52d302506e55b73a63b6f9205c151d14967663bedf29161723bf9ac1af5a071a5b6a3365be8f672b61f28af01fc08326b2db87f889ca7d58b6fb17389cb79859c5ad755e0668ed010a058bb3d3dff71dacdc828132abdec8adebc5e6646467d57fe284adfbece6b6673c9f1e37657e95f7b080f3c1515a6999b24c153b4b7596ac9d2ed12dca1f09ea0b5c006e1c8097adf67817109b48d685dc9c9120bab4531017be95fc7b61aca050cbf3492093b29c1afe3816bcf208a034635c118e47d58273d80458e371e30770a09402d1d556e69f0367458b7f01f3d3ce815", 0xe9}, {&(0x7f0000001b80)="4ae655d77bfaa3df5c70ef3c3bc2bb8c324a5f6376e1891658be4f6b53494eee9ab8dbc3ee888b1438f675919dd3f96d41405b4ea9f568fbe46a1d0c76e1a09747d34cbd1c815b642959689df2d7bbb16abee4c096ce853f7f9f2058c993aad37ebde793635dd3fc8cb356c7195be5a45bfbd4fe432f57377a9c639cce3695e05bb25bbbcb578f5d70585024e7658c3314d69291afc900e270606c85094034d134bc5ed47d8ccd52cf79d15ea86f4909629083d5eb2456709899b69861f76b83bae576637a0fa6b8acc9ac651d01ec", 0xcf}, {&(0x7f0000001c80)="6a47adc8e69aa14e1002e69538edf9e6d8a2eaf49a893bfda260fedf322fb3f5911b5519dd80e0f663b9973ca961fa83d365a70b5491f781ded72f8cf0f669d5ddb60efb5cba51d19bf08fc20a0258f7598100dd2d09d7f49e5a1e2b3b620f3496d99b4336c19c605ee2597c3a0122499354b68d889a5d0fde80aac8d14e82954ab9a4", 0x83}, {&(0x7f0000001d40)="e9ef8e26704255a9cc0e6d60251efe5b6f8850755f", 0x15}], 0x7}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)="73aa15f1038811368a7119dbd18b21dbe39ea3fd72e92f685d1f07df48c1ed49ae5db8029869046a1a88d731e9b70dee79a63bb701990f6d821273a0ffec3ce671256259c180ed5b2921f5e66339e6643b79f46611f055f3d561694550830d8a8d37fb3197682812ac637e4485cbce49057c344d0e6a40f4793e7f976802f514b7009a3424", 0x85}, {&(0x7f0000001ec0)="14b5389cf985e2a3f8f6097b2195b7699a5f4623416105446e5c98bdeec14af0e2dad222f7e5be3c7ec51527c05d91d08399fe34c307dbdbedd0fdb70d1d29607302a894894db4dc68d2616638a7699f0f76d2a86b138007ad6e7ea7d89af7f424d2981c34d86dc5b448323c86d82cc9e92bcf87f32b71e442ae355719bff3a3beaecb71ce4e69960dffbe4de77919ae0984df5b1b2ddacbd04c99886890f6a549feb74fb2947e0acb09c2e25b0107f742d63a42f0ce78a4bcfee5bb5622f1d9012ce6f15ee67fa0434422ef0c174707b70ec650e23737299493b16e03748c232a6a41c5f8ac3ed9e11c956c8ae88d0f783997921b", 0xf5}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)="a5ad7bf04a34ad10b354c7d773a184526aadf6bd67645ebe9b2d7c5bcec74e67a115d72d186105e20008b7c48053151544869b2768f2ce6275a5612c6c046560b676d1607765bb86f81b9ba9c6cf875939b5b07e283fa5325c891a680af5", 0x5e}, {&(0x7f0000002080)="5d9c6001dcb9d7cc2c3e78281202007628b671278014c801f2118f7cc01102830d22c8bb8cf42e277f4dad72c16fb80d4bb81a12cef910dba5642804d943c05bae46", 0x42}, {&(0x7f0000002100)="438602a5ae82915858e6f7984711a16d1b4c3ae5fc4e225caa1fabd2e927773a977f06505d2e9ec2ba5955", 0x2b}], 0x6, &(0x7f0000002380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@cipso={0x86, 0x5e, 0x3, [{0x6, 0xb, "729752f1a3594df187"}, {0x6, 0x11, "5b2c373978403602ffb7c6a6045993"}, {0x1, 0xa, "3c5968b324234b5e"}, {0x0, 0x11, "3912e2d4053950716c9fa52165b33b"}, {0x6, 0x5, "8f1996"}, {0x2, 0x9, "3913e6d7f1a15d"}, {0x0, 0x2}, {0x6, 0xf, "dcacaf04a87f78dc3f65d55b6f"}, {0x2, 0x2}]}]}}}], 0xc0}}], 0x8, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r15, 0x50010, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000300010000000500030000000000050005000100000005000200ff00230b050003001000000005000200b9000000050003004000000005000500"], 0x6c}, 0x1, 0x0, 0x0, 0x20009085}, 0x2604c0c4) 0s ago: executing program 3 (id=298): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000080)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005140)={@fallback, 0xffffffffffffffff, 0x19, 0x20}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'tunl0\x00', 0x2000}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'netpci0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@setneightbl={0xb0, 0x43, 0x20, 0x70bd26, 0x25dfdbfd, {0x7}, [@NDTA_PARMS={0x4}, @NDTA_PARMS={0x48, 0x6, 0x0, 0x1, [@NDTPA_QUEUE_LEN={0x8, 0x8, 0x5}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x8}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0xfffffffffffffffd}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x3}, @NDTPA_MCAST_REPROBES={0xfffffffffffffd85, 0x11, 0x3}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x1}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x101}]}, @NDTA_NAME={0x8, 0x1, 'ife\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x9d}, @NDTA_PARMS={0x24, 0x6, 0x0, 0x1, [@NDTPA_IFINDEX={0x0, 0x1, r6}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x7}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x1}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xfff}, @NDTA_THRESH2={0x8, 0x3, 0xfffffffd}, @NDTA_PARMS={0x0, 0x6, 0x0, 0x1, [@NDTPA_APP_PROBES={0x0, 0x9, 0xa}, @NDTPA_RETRANS_TIME={0x0, 0x5, 0x80}, @NDTPA_DELAY_PROBE_TIME={0x0, 0x7, 0xbb47}, @NDTPA_MCAST_REPROBES={0x0, 0x11, 0x70e065e}, @NDTPA_MCAST_PROBES={0x0, 0xb, 0x7}, @NDTPA_MCAST_REPROBES={0x0, 0x11, 0x6}, @NDTPA_APP_PROBES={0x0, 0x9, 0x9}, @NDTPA_MCAST_REPROBES={0x0, 0x11, 0x7}, @NDTPA_LOCKTIME={0x0, 0xf, 0x4}]}]}, 0xb0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffeb1, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x2800c005}, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@deltaction={0x120, 0x31, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd1}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfc05}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xab5}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffc01}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1a8}}, {0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa450}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x24044091}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 76.577659][ T5605] cgroup: Unknown subsys name 'net' [ 76.673005][ T5605] cgroup: Unknown subsys name 'cpuset' [ 76.683216][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.321047][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.725055][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.730332][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.742626][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.750350][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.750698][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.751642][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.751951][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.752912][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.760507][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.760921][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.762655][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.762788][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.763722][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.772233][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.772456][ T5627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.774103][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.775736][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.776861][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.791592][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.809449][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.916033][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.923957][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.934547][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.943272][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.945586][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.806227][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.807877][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.808288][ T5623] bridge_slave_0: entered allmulticast mode [ 82.815879][ T5623] bridge_slave_0: entered promiscuous mode [ 82.833760][ T5624] Bluetooth: hci2: command tx timeout [ 82.839710][ T5624] Bluetooth: hci1: command tx timeout [ 82.839819][ T5624] Bluetooth: hci0: command tx timeout [ 82.889869][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.890106][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.890415][ T5623] bridge_slave_1: entered allmulticast mode [ 82.895166][ T5623] bridge_slave_1: entered promiscuous mode [ 82.919949][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.920096][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.923922][ T5618] bridge_slave_0: entered allmulticast mode [ 82.929403][ T5618] bridge_slave_0: entered promiscuous mode [ 82.980931][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.981183][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.981556][ T5618] bridge_slave_1: entered allmulticast mode [ 82.986382][ T5618] bridge_slave_1: entered promiscuous mode [ 82.999608][ T5632] Bluetooth: hci4: command tx timeout [ 82.999896][ T5632] Bluetooth: hci3: command tx timeout [ 83.088819][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.090192][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.092904][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.093279][ T5626] bridge_slave_0: entered allmulticast mode [ 83.101373][ T5626] bridge_slave_0: entered promiscuous mode [ 83.118253][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.158338][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.176743][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.177114][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.178151][ T5626] bridge_slave_1: entered allmulticast mode [ 83.184882][ T5626] bridge_slave_1: entered promiscuous mode [ 83.212325][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.229251][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.230152][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.231465][ T5631] bridge_slave_0: entered allmulticast mode [ 83.236364][ T5631] bridge_slave_0: entered promiscuous mode [ 83.256923][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.257196][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.260934][ T5631] bridge_slave_1: entered allmulticast mode [ 83.271176][ T5631] bridge_slave_1: entered promiscuous mode [ 83.347894][ T5623] team0: Port device team_slave_0 added [ 83.356491][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.373723][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.374084][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.375095][ T5619] bridge_slave_0: entered allmulticast mode [ 83.383249][ T5619] bridge_slave_0: entered promiscuous mode [ 83.399820][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.399923][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.400302][ T5619] bridge_slave_1: entered allmulticast mode [ 83.406656][ T5619] bridge_slave_1: entered promiscuous mode [ 83.428079][ T5623] team0: Port device team_slave_1 added [ 83.445573][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.455359][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.474753][ T5618] team0: Port device team_slave_0 added [ 83.491888][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.521033][ T5618] team0: Port device team_slave_1 added [ 83.525561][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.525600][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.525674][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.583509][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.601310][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.601434][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.601526][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.647438][ T5626] team0: Port device team_slave_0 added [ 83.655068][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.683917][ T5631] team0: Port device team_slave_0 added [ 83.691049][ T5626] team0: Port device team_slave_1 added [ 83.706255][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.706434][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.706525][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.742187][ T5631] team0: Port device team_slave_1 added [ 83.777095][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.778178][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.778257][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.836353][ T5619] team0: Port device team_slave_0 added [ 83.869437][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.872194][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.872278][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.884665][ T5619] team0: Port device team_slave_1 added [ 83.922141][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.922784][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.922860][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.928232][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.928265][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.928337][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.999722][ T5623] hsr_slave_0: entered promiscuous mode [ 84.002608][ T5623] hsr_slave_1: entered promiscuous mode [ 84.010403][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.010441][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.010468][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.104849][ T5618] hsr_slave_0: entered promiscuous mode [ 84.107450][ T5618] hsr_slave_1: entered promiscuous mode [ 84.112094][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 84.112380][ T5618] Cannot create hsr debugfs directory [ 84.137976][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.138110][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.138197][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.206961][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.207003][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.207031][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.261313][ T5626] hsr_slave_0: entered promiscuous mode [ 84.263995][ T5626] hsr_slave_1: entered promiscuous mode [ 84.265901][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 84.265954][ T5626] Cannot create hsr debugfs directory [ 84.362573][ T5631] hsr_slave_0: entered promiscuous mode [ 84.368414][ T5631] hsr_slave_1: entered promiscuous mode [ 84.373894][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 84.373946][ T5631] Cannot create hsr debugfs directory [ 84.467816][ T5619] hsr_slave_0: entered promiscuous mode [ 84.471922][ T5619] hsr_slave_1: entered promiscuous mode [ 84.476898][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 84.476947][ T5619] Cannot create hsr debugfs directory [ 84.910451][ T5624] Bluetooth: hci0: command tx timeout [ 84.910483][ T52] Bluetooth: hci2: command tx timeout [ 84.916149][ T5632] Bluetooth: hci1: command tx timeout [ 84.929853][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.944625][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.950741][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.965507][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.974647][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.985229][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.993906][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.003308][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.077585][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.085520][ T5632] Bluetooth: hci3: command tx timeout [ 85.085554][ T5632] Bluetooth: hci4: command tx timeout [ 85.104786][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.113475][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.124772][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.139058][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.148736][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.154629][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.163852][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.239757][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.256940][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.268600][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.280491][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.284124][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.296186][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.322409][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.332898][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.424521][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.435517][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.454693][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.466377][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.472689][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.484948][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.510507][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.520723][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.531781][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.632035][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.642064][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.654404][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.666019][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.677253][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.681213][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.696033][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.710077][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.720610][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.745092][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.745424][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.767126][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.810726][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.810986][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.854976][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.898461][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.898691][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.932386][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.950154][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.950286][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.011635][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.036429][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.067149][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.067680][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.120656][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.138860][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.139273][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.163125][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.163431][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.236482][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.251758][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.252007][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.326666][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.354819][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.355064][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.422330][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.422474][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.989895][ T5624] Bluetooth: hci0: command tx timeout [ 87.001025][ T5624] Bluetooth: hci1: command tx timeout [ 87.001074][ T5624] Bluetooth: hci2: command tx timeout [ 87.159949][ T5632] Bluetooth: hci4: command tx timeout [ 87.162219][ T5632] Bluetooth: hci3: command tx timeout [ 87.575582][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.638710][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.833253][ T5623] veth0_vlan: entered promiscuous mode [ 87.874343][ T5623] veth1_vlan: entered promiscuous mode [ 87.958657][ T5618] veth0_vlan: entered promiscuous mode [ 88.006095][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.026592][ T5618] veth1_vlan: entered promiscuous mode [ 88.040980][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.055201][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.117582][ T5623] veth0_macvtap: entered promiscuous mode [ 88.137397][ T5623] veth1_macvtap: entered promiscuous mode [ 88.191282][ T5618] veth0_macvtap: entered promiscuous mode [ 88.232490][ T5618] veth1_macvtap: entered promiscuous mode [ 88.256559][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.278348][ T5619] veth0_vlan: entered promiscuous mode [ 88.301545][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.308371][ T5631] veth0_vlan: entered promiscuous mode [ 88.341462][ T5619] veth1_vlan: entered promiscuous mode [ 88.368744][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.387637][ T5631] veth1_vlan: entered promiscuous mode [ 88.411604][ T1177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.423766][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.492514][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.492594][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.492690][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.492817][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.492918][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.493023][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.493123][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.677807][ T5631] veth0_macvtap: entered promiscuous mode [ 88.694185][ T5619] veth0_macvtap: entered promiscuous mode [ 88.707970][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.708024][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.732905][ T5631] veth1_macvtap: entered promiscuous mode [ 88.745387][ T5619] veth1_macvtap: entered promiscuous mode [ 88.793063][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.793109][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.857111][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.858033][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.858097][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.876039][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.915473][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.915530][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.945780][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.953433][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.987184][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.040438][ T5626] veth0_vlan: entered promiscuous mode [ 89.069854][ T5624] Bluetooth: hci2: command tx timeout [ 89.069876][ T5632] Bluetooth: hci1: command tx timeout [ 89.069906][ T5624] Bluetooth: hci0: command tx timeout [ 89.069966][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.073810][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.085904][ T1163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.141984][ T3347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.142482][ T3347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.142890][ T3347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.143805][ T3347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.144584][ T3347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.210621][ T5626] veth1_vlan: entered promiscuous mode [ 89.244251][ T5624] Bluetooth: hci3: command tx timeout [ 89.244306][ T5624] Bluetooth: hci4: command tx timeout [ 89.414941][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.414978][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.515148][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.515196][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.534642][ T5626] veth0_macvtap: entered promiscuous mode [ 89.592361][ T5626] veth1_macvtap: entered promiscuous mode [ 89.634609][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.634644][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.680019][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.680065][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.778884][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.817367][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.840906][ T5827] tipc: Started in network mode [ 89.840961][ T5827] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.844990][ T5827] tipc: New replicast peer: 172.20.20.187 [ 89.850523][ T5827] tipc: Enabled bearer , priority 10 [ 89.932791][ T5837] tipc: Enabling of bearer rejected, already enabled [ 90.063108][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.074794][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.086584][ T1177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.086659][ T1177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.204441][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.213747][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.341599][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.341654][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.355582][ T5850] ip_tables: iptables: counters copy to user failed while replacing table [ 90.496440][ T5847] Bluetooth: MGMT ver 1.23 [ 90.496514][ T5847] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 90.532511][ T5848] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 90.652281][ T5864] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 90.672819][ T5854] vlan2: entered promiscuous mode [ 90.672876][ T5854] hsr0: entered promiscuous mode [ 90.707819][ T5854] vlan2: entered allmulticast mode [ 90.714770][ T5854] hsr0: entered allmulticast mode [ 90.720567][ T5854] hsr_slave_0: entered allmulticast mode [ 90.720593][ T5854] hsr_slave_1: entered allmulticast mode [ 90.760686][ T5865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14'. [ 90.877007][ T5872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 90.966766][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 91.022207][ T5870] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.046142][ T5804] tipc: Node number set to 2886997162 [ 91.114126][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 91.202920][ T5872] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 91.246497][ T5885] bridge_slave_0: left allmulticast mode [ 91.253785][ T5885] bridge_slave_0: left promiscuous mode [ 91.254136][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.292440][ T5885] bridge_slave_1: left allmulticast mode [ 91.298254][ T5885] bridge_slave_1: left promiscuous mode [ 91.304424][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.372761][ T5885] bond0: (slave bond_slave_0): Releasing backup interface [ 91.441339][ T5885] bond0: (slave bond_slave_1): Releasing backup interface [ 91.494346][ T5885] team0: Port device team_slave_0 removed [ 91.533213][ T5885] team0: Port device team_slave_1 removed [ 91.548309][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.548356][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.577578][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.585236][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.605849][ T5885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.085185][ T1807] cfg80211: failed to load regulatory.db [ 92.144036][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 92.144079][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 92.144373][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 92.144396][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 92.207327][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 92.307646][ T5916] netlink: 284 bytes leftover after parsing attributes in process `syz.4.28'. [ 92.335751][ T5912] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 (while UP) [ 92.438898][ T5920] syzkaller0: entered promiscuous mode [ 92.446975][ T5920] syzkaller0: entered allmulticast mode [ 92.855109][ T5937] x_tables: duplicate underflow at hook 1 [ 93.070888][ T5940] syzkaller0: entered promiscuous mode [ 93.070930][ T5940] syzkaller0: entered allmulticast mode [ 93.221007][ T50] IPVS: starting estimator thread 0... [ 93.290619][ T5947] veth3: entered allmulticast mode [ 93.321561][ T5956] IPVS: using max 26 ests per chain, 62400 per kthread [ 93.795972][ T5972] FAULT_INJECTION: forcing a failure. [ 93.795972][ T5972] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.812452][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.1.44 Not tainted syzkaller #0 PREEMPT(full) [ 93.812483][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.812505][ T5972] Call Trace: [ 93.812518][ T5972] [ 93.812528][ T5972] dump_stack_lvl+0xe8/0x150 [ 93.812574][ T5972] should_fail_ex+0x410/0x560 [ 93.812606][ T5972] _copy_to_user+0x31/0xb0 [ 93.812630][ T5972] bpf_verifier_vlog+0x496/0x900 [ 93.812674][ T5972] bpf_verifier_log_write+0x11d/0x1a0 [ 93.812715][ T5972] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 93.812752][ T5972] ? record_arg_access+0x148/0x970 [ 93.812785][ T5972] analyze_subprog+0x5d7c/0x9e00 [ 93.812808][ T5972] ? irq_work_run+0x1ff/0x230 [ 93.812883][ T5972] ? __pfx_analyze_subprog+0x10/0x10 [ 93.812907][ T5972] ? __x64_sys_bpf+0xba/0xd0 [ 93.812925][ T5972] ? perf_trace_rxrpc_bundle+0xc2/0x400 [ 93.812955][ T5972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.813016][ T5972] ? call_instance+0x263/0x560 [ 93.813038][ T5972] ? rcu_is_watching+0x16/0xb0 [ 93.813064][ T5972] ? call_instance+0x263/0x560 [ 93.813095][ T5972] ? trace_kmalloc+0x2a/0xf0 [ 93.813129][ T5972] ? call_instance+0x263/0x560 [ 93.813150][ T5972] ? __kvmalloc_node_noprof+0x52f/0x820 [ 93.813174][ T5972] ? __kvmalloc_node_noprof+0x345/0x820 [ 93.813194][ T5972] ? call_instance+0x263/0x560 [ 93.813214][ T5972] ? call_instance+0x263/0x560 [ 93.813252][ T5972] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 93.813276][ T5972] ? bpf_tracing_func_proto+0x72/0x180 [ 93.813326][ T5972] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 93.813357][ T5972] ? __kvmalloc_node_noprof+0x345/0x820 [ 93.813387][ T5972] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 93.813410][ T5972] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 93.813441][ T5972] bpf_compute_live_registers+0x8d3/0x1ff0 [ 93.813484][ T5972] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 93.813520][ T5972] bpf_check+0x25ed/0x2e10 [ 93.813553][ T5972] ? ktime_get_with_offset+0x93/0x2d0 [ 93.813580][ T5972] ? __pfx_bpf_check+0x10/0x10 [ 93.813605][ T5972] ? bpf_obj_name_cpy+0x194/0x1e0 [ 93.813639][ T5972] bpf_prog_load+0x14d6/0x1c20 [ 93.813675][ T5972] ? __pfx_bpf_prog_load+0x10/0x10 [ 93.813724][ T5972] __sys_bpf+0xd0d/0xd90 [ 93.813756][ T5972] ? __pfx___sys_bpf+0x10/0x10 [ 93.813790][ T5972] ? __fget_files+0x2a/0x420 [ 93.813836][ T5972] ? ksys_write+0x242/0x270 [ 93.813868][ T5972] ? __pfx_ksys_write+0x10/0x10 [ 93.813904][ T5972] __x64_sys_bpf+0xba/0xd0 [ 93.813946][ T5972] do_syscall_64+0x166/0x520 [ 93.813975][ T5972] ? trace_irq_disable+0x3b/0x140 [ 93.813995][ T5972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.814017][ T5972] ? clear_bhb_loop+0x70/0xc0 [ 93.814044][ T5972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.814066][ T5972] RIP: 0033:0x7f48a359e159 [ 93.814095][ T5972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.814114][ T5972] RSP: 002b:00007f48a44dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.814155][ T5972] RAX: ffffffffffffffda RBX: 00007f48a3825fa0 RCX: 00007f48a359e159 [ 93.814171][ T5972] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 93.814184][ T5972] RBP: 00007f48a44dc090 R08: 0000000000000000 R09: 0000000000000000 [ 93.814198][ T5972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.814210][ T5972] R13: 00007f48a3826038 R14: 00007f48a3825fa0 R15: 00007ffeb74330a8 [ 93.814242][ T5972] [ 94.587180][ T5992] ip6tnl1: entered allmulticast mode [ 94.626998][ T31] audit: type=1804 audit(1787919153.607:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.47" name="/newroot/11/cgroup.controllers" dev="tmpfs" ino=73 res=1 errno=0 [ 94.649163][ T31] audit: type=1800 audit(1787919153.607:3): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="cgroup.controllers" dev="tmpfs" ino=73 res=0 errno=0 [ 94.675114][ T31] audit: type=1800 audit(1787919153.637:4): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="cgroup.controllers" dev="tmpfs" ino=73 res=0 errno=0 [ 94.705192][ T31] audit: type=1800 audit(1787919153.687:5): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="cgroup.controllers" dev="tmpfs" ino=73 res=0 errno=0 [ 95.485487][ T6021] netlink: 'syz.1.53': attribute type 6 has an invalid length. [ 95.532485][ T6021] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 95.561395][ T5714] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 96.454926][ T6064] xt_hashlimit: max too large, truncated to 1048576 [ 96.717607][ T6072] Zero length message leads to an empty skb [ 97.192877][ T6094] __nla_validate_parse: 3 callbacks suppressed [ 97.199541][ T6097] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 97.207453][ T6094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.76'. [ 97.324982][ T6103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 97.364559][ T52] block nbd0: Receive control failed (result -107) [ 97.551424][ T6116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.590006][ T6106] pim6reg: entered allmulticast mode [ 98.067205][ T6129] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 99.734632][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 99.923911][ T6169] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.936760][ T6169] Cannot find add_set index 0 as target [ 99.951826][ T6169] Illegal XDP return value 4294967274 on prog (id 27) dev N/A, expect packet loss! [ 99.967755][ T6169] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.99'. [ 100.054568][ T6171] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 100.236130][ T6176] tipc: Failed to remove unknown binding: 66,0,0/0:1688849478/1688849480 [ 100.236182][ T6176] tipc: Failed to remove unknown binding: 66,0,0/0:1688849478/1688849479 [ 100.237506][ T6176] tipc: Failed to remove unknown binding: 66,0,0/0:1688849478/1688849480 [ 100.237574][ T6176] tipc: Failed to remove unknown binding: 66,0,0/0:1688849478/1688849479 [ 100.246649][ T6175] tipc: Failed to remove unknown binding: 66,0,0/0:1688849478/1688849480 [ 100.246682][ T6175] tipc: Failed to remove unknown binding: 66,0,0/0:1688849478/1688849479 [ 100.414810][ T6180] netlink: 5 bytes leftover after parsing attributes in process `syz.2.103'. [ 100.559676][ T6178] vlan2: entered promiscuous mode [ 100.559718][ T6178] hsr0: entered promiscuous mode [ 100.568717][ T6178] vlan2: entered allmulticast mode [ 100.568791][ T6178] hsr0: entered allmulticast mode [ 100.568831][ T6178] hsr_slave_0: entered allmulticast mode [ 100.568873][ T6178] hsr_slave_1: entered allmulticast mode [ 101.284390][ T6223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.114'. [ 101.355169][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 101.498296][ T6235] bridge0: port 3(wlan1) entered blocking state [ 101.506953][ T6235] bridge0: port 3(wlan1) entered disabled state [ 101.514780][ T6235] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 101.526847][ T6235] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 101.535596][ T6235] bridge0: port 3(wlan1) entered blocking state [ 101.535748][ T6235] bridge0: port 3(wlan1) entered forwarding state [ 101.583689][ T6241] Cannot find set identified by id 0 to match [ 101.819939][ T6247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.121'. [ 101.947401][ T6237] bridge0: port 3(wlan1) entered disabled state [ 101.995343][ T6237] mac80211_hwsim hwsim5 wlan1 (unregistering): left allmulticast mode [ 102.004503][ T6237] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode [ 102.004790][ T6237] bridge0: port 3(wlan1) entered disabled state [ 102.627369][ T6298] netlink: 996 bytes leftover after parsing attributes in process `syz.0.128'. [ 103.215025][ T6298] erspan0: refused to change device tx_queue_len [ 103.240204][ T6300] lo speed is unknown, defaulting to 1000 [ 103.268805][ T6300] lo speed is unknown, defaulting to 1000 [ 103.393311][ T6300] lo speed is unknown, defaulting to 1000 [ 103.428790][ T6300] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 103.428857][ T6300] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 103.428933][ T6300] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 103.530067][ T6300] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 103.546236][ T6313] syzkaller0: entered promiscuous mode [ 103.546284][ T6313] syzkaller0: entered allmulticast mode [ 103.591365][ T6315] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 103.628289][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.133'. [ 103.671455][ T6315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.688547][ T6320] FAULT_INJECTION: forcing a failure. [ 103.688547][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.688592][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT(full) [ 103.688614][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.688625][ T6320] Call Trace: [ 103.688633][ T6320] [ 103.688659][ T6320] dump_stack_lvl+0xe8/0x150 [ 103.688695][ T6320] should_fail_ex+0x410/0x560 [ 103.688730][ T6320] _copy_to_user+0x31/0xb0 [ 103.688752][ T6320] bpf_verifier_vlog+0x496/0x900 [ 103.688795][ T6320] bpf_verifier_log_write+0x11d/0x1a0 [ 103.688838][ T6320] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 103.688874][ T6320] ? record_arg_access+0x148/0x970 [ 103.688907][ T6320] analyze_subprog+0x5d98/0x9e00 [ 103.688930][ T6320] ? irq_work_run+0x1ff/0x230 [ 103.688997][ T6320] ? __pfx_analyze_subprog+0x10/0x10 [ 103.689019][ T6320] ? __x64_sys_bpf+0xba/0xd0 [ 103.689036][ T6320] ? perf_trace_rxrpc_bundle+0xc2/0x400 [ 103.689065][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.689229][ T6320] ? call_instance+0x263/0x560 [ 103.689283][ T6320] ? rcu_is_watching+0x16/0xb0 [ 103.689354][ T6320] ? call_instance+0x263/0x560 [ 103.689400][ T6320] ? trace_kmalloc+0x2a/0xf0 [ 103.689490][ T6320] ? call_instance+0x263/0x560 [ 103.689542][ T6320] ? __kvmalloc_node_noprof+0x52f/0x820 [ 103.689601][ T6320] ? __kvmalloc_node_noprof+0x345/0x820 [ 103.689654][ T6320] ? call_instance+0x263/0x560 [ 103.689705][ T6320] ? call_instance+0x263/0x560 [ 103.689795][ T6320] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 103.689854][ T6320] ? bpf_tracing_func_proto+0x72/0x180 [ 103.689980][ T6320] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 103.690057][ T6320] ? __kvmalloc_node_noprof+0x345/0x820 [ 103.690109][ T6320] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 103.690167][ T6320] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 103.690247][ T6320] bpf_compute_live_registers+0x8d3/0x1ff0 [ 103.690353][ T6320] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 103.690442][ T6320] bpf_check+0x25ed/0x2e10 [ 103.690522][ T6320] ? ktime_get_with_offset+0x93/0x2d0 [ 103.690592][ T6320] ? __pfx_bpf_check+0x10/0x10 [ 103.690668][ T6320] ? bpf_obj_name_cpy+0x194/0x1e0 [ 103.690755][ T6320] bpf_prog_load+0x14d6/0x1c20 [ 103.690839][ T6320] ? __pfx_bpf_prog_load+0x10/0x10 [ 103.690971][ T6320] __sys_bpf+0xd0d/0xd90 [ 103.691052][ T6320] ? __pfx___sys_bpf+0x10/0x10 [ 103.691143][ T6320] ? __fget_files+0x2a/0x420 [ 103.691266][ T6320] ? ksys_write+0x242/0x270 [ 103.691349][ T6320] ? __pfx_ksys_write+0x10/0x10 [ 103.691441][ T6320] __x64_sys_bpf+0xba/0xd0 [ 103.691495][ T6320] do_syscall_64+0x166/0x520 [ 103.691573][ T6320] ? trace_irq_disable+0x3b/0x140 [ 103.691627][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.691680][ T6320] ? clear_bhb_loop+0x70/0xc0 [ 103.691737][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.691798][ T6320] RIP: 0033:0x7f48a359e159 [ 103.691851][ T6320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.691894][ T6320] RSP: 002b:00007f48a44dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.691956][ T6320] RAX: ffffffffffffffda RBX: 00007f48a3825fa0 RCX: 00007f48a359e159 [ 103.692006][ T6320] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 103.692046][ T6320] RBP: 00007f48a44dc090 R08: 0000000000000000 R09: 0000000000000000 [ 103.692090][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.692128][ T6320] R13: 00007f48a3826038 R14: 00007f48a3825fa0 R15: 00007ffeb74330a8 [ 103.692208][ T6320] [ 104.079848][ T6300] lo speed is unknown, defaulting to 1000 [ 104.089517][ T6316] batadv0: entered promiscuous mode [ 104.130508][ T6300] lo speed is unknown, defaulting to 1000 [ 104.155942][ T6300] lo speed is unknown, defaulting to 1000 [ 104.173608][ T6300] lo speed is unknown, defaulting to 1000 [ 104.202080][ T6300] lo speed is unknown, defaulting to 1000 [ 104.781274][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 104.998752][ T6361] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 104.998799][ T6361] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 104.998813][ T6361] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.147'. [ 105.493194][ T6372] syzkaller1: entered promiscuous mode [ 105.499109][ T6372] syzkaller1: entered allmulticast mode [ 105.570412][ T6376] x_tables: duplicate underflow at hook 1 [ 105.938374][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 105.938420][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 106.044017][ T6387] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 106.174334][ T6392] lo speed is unknown, defaulting to 1000 [ 106.976554][ T6417] vlan2: entered promiscuous mode [ 106.983866][ T6417] hsr0: entered promiscuous mode [ 106.984192][ T6417] vlan2: entered allmulticast mode [ 106.984212][ T6417] hsr0: entered allmulticast mode [ 106.984235][ T6417] hsr_slave_0: entered allmulticast mode [ 106.984254][ T6417] hsr_slave_1: entered allmulticast mode [ 107.044133][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.044177][ T6424] openvswitch: netlink: Flow actions attr not present in new flow. [ 107.997956][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'. [ 108.042550][ T6430] netlink: 76 bytes leftover after parsing attributes in process `syz.1.164'. [ 108.093151][ T6457] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 108.778865][ T6489] FAULT_INJECTION: forcing a failure. [ 108.778865][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.778943][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.2.178 Not tainted syzkaller #0 PREEMPT(full) [ 108.778975][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.778987][ T6489] Call Trace: [ 108.778996][ T6489] [ 108.779005][ T6489] dump_stack_lvl+0xe8/0x150 [ 108.779042][ T6489] should_fail_ex+0x410/0x560 [ 108.779079][ T6489] _copy_from_user+0x2d/0xb0 [ 108.779101][ T6489] __sys_bpf+0x2e7/0xd90 [ 108.779134][ T6489] ? __pfx___sys_bpf+0x10/0x10 [ 108.779169][ T6489] ? __fget_files+0x2a/0x420 [ 108.779228][ T6489] ? ksys_write+0x242/0x270 [ 108.779270][ T6489] ? __pfx_ksys_write+0x10/0x10 [ 108.779300][ T6489] __x64_sys_bpf+0xba/0xd0 [ 108.779321][ T6489] do_syscall_64+0x166/0x520 [ 108.779345][ T6489] ? trace_irq_disable+0x3b/0x140 [ 108.779363][ T6489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.779382][ T6489] ? clear_bhb_loop+0x70/0xc0 [ 108.779405][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.779424][ T6489] RIP: 0033:0x7f7d3859e159 [ 108.779441][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.779457][ T6489] RSP: 002b:00007f7d39415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.779477][ T6489] RAX: ffffffffffffffda RBX: 00007f7d38825fa0 RCX: 00007f7d3859e159 [ 108.779491][ T6489] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 108.779502][ T6489] RBP: 00007f7d39415090 R08: 0000000000000000 R09: 0000000000000000 [ 108.779514][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.779525][ T6489] R13: 00007f7d38826038 R14: 00007f7d38825fa0 R15: 00007ffc216669d8 [ 108.779553][ T6489] [ 110.417465][ T6550] FAULT_INJECTION: forcing a failure. [ 110.417465][ T6550] name failslab, interval 1, probability 0, space 0, times 1 [ 110.432485][ T6550] CPU: 0 UID: 0 PID: 6550 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) [ 110.432514][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.432527][ T6550] Call Trace: [ 110.432536][ T6550] [ 110.432545][ T6550] dump_stack_lvl+0xe8/0x150 [ 110.432581][ T6550] should_fail_ex+0x410/0x560 [ 110.432617][ T6550] should_failslab+0xa8/0x100 [ 110.432644][ T6550] __kmalloc_cache_node_noprof+0xaa/0x620 [ 110.432679][ T6550] ? __get_vm_area_node+0x155/0x2f0 [ 110.432705][ T6550] ? __get_vm_area_node+0x155/0x2f0 [ 110.432739][ T6550] __get_vm_area_node+0x155/0x2f0 [ 110.432774][ T6550] __vmalloc_node_range_noprof+0x343/0x1540 [ 110.432805][ T6550] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 110.432830][ T6550] ? __lock_acquire+0x6df/0x2e50 [ 110.432877][ T6550] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.432927][ T6550] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 110.432949][ T6550] __vmalloc_noprof+0xd2/0x120 [ 110.432978][ T6550] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 110.433005][ T6550] bpf_prog_alloc_no_stats+0x47/0x560 [ 110.433027][ T6550] ? bpf_prog_alloc+0x2a/0x1a0 [ 110.433052][ T6550] bpf_prog_alloc+0x3c/0x1a0 [ 110.433076][ T6550] bpf_prog_load+0x7f8/0x1c20 [ 110.433111][ T6550] ? __pfx_bpf_prog_load+0x10/0x10 [ 110.433160][ T6550] __sys_bpf+0xd0d/0xd90 [ 110.433191][ T6550] ? __pfx___sys_bpf+0x10/0x10 [ 110.433225][ T6550] ? __fget_files+0x2a/0x420 [ 110.433270][ T6550] ? ksys_write+0x242/0x270 [ 110.433303][ T6550] ? __pfx_ksys_write+0x10/0x10 [ 110.433338][ T6550] __x64_sys_bpf+0xba/0xd0 [ 110.433362][ T6550] do_syscall_64+0x166/0x520 [ 110.433390][ T6550] ? trace_irq_disable+0x3b/0x140 [ 110.433410][ T6550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.433432][ T6550] ? clear_bhb_loop+0x70/0xc0 [ 110.433459][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.433480][ T6550] RIP: 0033:0x7f94a639e159 [ 110.433501][ T6550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.433518][ T6550] RSP: 002b:00007f94a7204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.433541][ T6550] RAX: ffffffffffffffda RBX: 00007f94a6625fa0 RCX: 00007f94a639e159 [ 110.433557][ T6550] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 110.433570][ T6550] RBP: 00007f94a7204090 R08: 0000000000000000 R09: 0000000000000000 [ 110.433583][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.433596][ T6550] R13: 00007f94a6626038 R14: 00007f94a6625fa0 R15: 00007ffc9d7d94c8 [ 110.433628][ T6550] [ 110.501582][ T6550] syz.4.189: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.502130][ T6550] CPU: 1 UID: 0 PID: 6550 Comm: syz.4.189 Not tainted syzkaller #0 PREEMPT(full) [ 110.502153][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.502165][ T6550] Call Trace: [ 110.502173][ T6550] [ 110.502182][ T6550] dump_stack_lvl+0xe8/0x150 [ 110.502216][ T6550] warn_alloc+0x24d/0x270 [ 110.502303][ T6550] ? __kasan_kmalloc+0x22/0xb0 [ 110.502384][ T6550] ? __pfx_warn_alloc+0x10/0x10 [ 110.502483][ T6550] ? __get_vm_area_node+0x155/0x2f0 [ 110.502579][ T6550] ? __get_vm_area_node+0x2a9/0x2f0 [ 110.502681][ T6550] __vmalloc_node_range_noprof+0x36b/0x1540 [ 110.502766][ T6550] ? __lock_acquire+0x6df/0x2e50 [ 110.502890][ T6550] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.502988][ T6550] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 110.503049][ T6550] __vmalloc_noprof+0xd2/0x120 [ 110.503125][ T6550] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 110.503197][ T6550] bpf_prog_alloc_no_stats+0x47/0x560 [ 110.503257][ T6550] ? bpf_prog_alloc+0x2a/0x1a0 [ 110.503322][ T6550] bpf_prog_alloc+0x3c/0x1a0 [ 110.503412][ T6550] bpf_prog_load+0x7f8/0x1c20 [ 110.503515][ T6550] ? __pfx_bpf_prog_load+0x10/0x10 [ 110.503632][ T6550] __sys_bpf+0xd0d/0xd90 [ 110.503722][ T6550] ? __pfx___sys_bpf+0x10/0x10 [ 110.503829][ T6550] ? __fget_files+0x2a/0x420 [ 110.503949][ T6550] ? ksys_write+0x242/0x270 [ 110.504020][ T6550] ? __pfx_ksys_write+0x10/0x10 [ 110.504118][ T6550] __x64_sys_bpf+0xba/0xd0 [ 110.504188][ T6550] do_syscall_64+0x166/0x520 [ 110.504260][ T6550] ? trace_irq_disable+0x3b/0x140 [ 110.504311][ T6550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.504364][ T6550] ? clear_bhb_loop+0x70/0xc0 [ 110.504435][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.504487][ T6550] RIP: 0033:0x7f94a639e159 [ 110.504545][ T6550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.504587][ T6550] RSP: 002b:00007f94a7204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.504637][ T6550] RAX: ffffffffffffffda RBX: 00007f94a6625fa0 RCX: 00007f94a639e159 [ 110.504683][ T6550] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 110.504715][ T6550] RBP: 00007f94a7204090 R08: 0000000000000000 R09: 0000000000000000 [ 110.504753][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.504783][ T6550] R13: 00007f94a6626038 R14: 00007f94a6625fa0 R15: 00007ffc9d7d94c8 [ 110.504862][ T6550] [ 110.534207][ T6550] Mem-Info: [ 110.534256][ T6550] active_anon:5863 inactive_anon:0 isolated_anon:0 [ 110.534256][ T6550] active_file:0 inactive_file:43167 isolated_file:0 [ 110.534256][ T6550] unevictable:0 dirty:246 writeback:0 [ 110.534256][ T6550] slab_reclaimable:10249 slab_unreclaimable:94213 [ 110.534256][ T6550] mapped:32385 shmem:518 pagetables:1181 [ 110.534256][ T6550] sec_pagetables:0 bounce:0 [ 110.534256][ T6550] kernel_misc_reclaimable:0 [ 110.534256][ T6550] free:1329342 free_pcp:9886 free_cma:0 [ 110.534410][ T6550] Node 0 active_anon:23452kB inactive_anon:0kB active_file:0kB inactive_file:172460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129540kB dirty:976kB writeback:0kB shmem:2072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12620kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.534588][ T6550] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.534729][ T6550] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.534896][ T6550] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 110.534989][ T6550] Node 0 DMA32 free:1354044kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23452kB inactive_anon:0kB active_file:0kB inactive_file:172460kB unevictable:0kB writepending:976kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:39544kB local_pcp:20844kB free_cma:0kB [ 110.535158][ T6550] lowmem_reserve[]: 0 0 0 0 0 [ 110.535252][ T6550] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.535400][ T6550] lowmem_reserve[]: 0 0 0 0 0 [ 110.535502][ T6550] Node 1 Normal free:3947964kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.559596][ T6550] lowmem_reserve[]: 0 0 0 0 0 [ 110.559718][ T6550] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.560040][ T6550] Node 0 DMA32: 673*4kB (UM) 131*8kB (ME) 264*16kB (UME) 327*32kB (UME) 64*64kB (UM) 41*128kB (UME) 25*256kB (UME) 12*512kB (UME) 9*1024kB (ME) 13*2048kB (UM) 312*4096kB (UM) = 1354108kB [ 110.560484][ T6550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 110.560776][ T6550] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 11*16kB (UM) 13*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (U) 961*4096kB (M) = 3947964kB [ 110.575643][ T6550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.575694][ T6550] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.575735][ T6550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.575784][ T6550] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.575839][ T6550] 43681 total pagecache pages [ 110.575869][ T6550] 0 pages in swap cache [ 110.575890][ T6550] Free swap = 124996kB [ 110.575910][ T6550] Total swap = 124996kB [ 110.575926][ T6550] 2097051 pages RAM [ 110.575946][ T6550] 0 pages HighMem/MovableOnly [ 110.575960][ T6550] 428730 pages reserved [ 110.575982][ T6550] 0 pages cma reserved [ 110.982438][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 111.423504][ T6556] netlink: 'syz.1.190': attribute type 3 has an invalid length. [ 111.433562][ T6556] netlink: 'syz.1.190': attribute type 3 has an invalid length. [ 111.825510][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.194'. [ 111.839857][ T6579] lo speed is unknown, defaulting to 1000 [ 111.847364][ T6579] lo speed is unknown, defaulting to 1000 [ 111.869672][ T6579] lo speed is unknown, defaulting to 1000 [ 111.898884][ T6579] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 111.899656][ T6579] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 111.899718][ T6579] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 111.957354][ T6579] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 112.006675][ T6579] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 112.087987][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 112.147405][ T6585] ip6tnl2: entered allmulticast mode [ 112.169481][ T6579] lo speed is unknown, defaulting to 1000 [ 112.200409][ T6579] lo speed is unknown, defaulting to 1000 [ 112.218704][ T6579] lo speed is unknown, defaulting to 1000 [ 112.234639][ T6579] lo speed is unknown, defaulting to 1000 [ 112.245484][ T6585] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 112.245532][ T6585] netlink: 224 bytes leftover after parsing attributes in process `syz.3.197'. [ 112.278243][ T6579] lo speed is unknown, defaulting to 1000 [ 112.320952][ T6586] xt_hashlimit: size too large, truncated to 1048576 [ 112.512842][ T6601] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 112.512842][ T6601] Please contact the netfilter-devel mailing list or update your nftables rules. [ 112.620989][ T6603] FAULT_INJECTION: forcing a failure. [ 112.620989][ T6603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.635046][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.4.202 Not tainted syzkaller #0 PREEMPT(full) [ 112.635075][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.635088][ T6603] Call Trace: [ 112.635097][ T6603] [ 112.635105][ T6603] dump_stack_lvl+0xe8/0x150 [ 112.635142][ T6603] should_fail_ex+0x410/0x560 [ 112.635177][ T6603] prepare_alloc_pages+0x223/0x600 [ 112.635218][ T6603] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 112.635246][ T6603] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.635273][ T6603] ? __pfx_policy_nodemask+0x10/0x10 [ 112.635297][ T6603] ? __get_vm_area_node+0x155/0x2f0 [ 112.635323][ T6603] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 112.635353][ T6603] ? __vmalloc_noprof+0xd2/0x120 [ 112.635380][ T6603] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.635403][ T6603] ? bpf_prog_alloc+0x3c/0x1a0 [ 112.635424][ T6603] ? __sys_bpf+0xd0d/0xd90 [ 112.635444][ T6603] ? __x64_sys_bpf+0xba/0xd0 [ 112.635467][ T6603] ? do_syscall_64+0x166/0x520 [ 112.635514][ T6603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.635542][ T6603] alloc_pages_mpol+0x21e/0x390 [ 112.635576][ T6603] alloc_pages_noprof+0xb1/0x2b0 [ 112.635606][ T6603] get_free_pages_noprof+0xf/0x80 [ 112.635629][ T6603] __kasan_populate_vmalloc+0x38/0x1c0 [ 112.635664][ T6603] ? do_raw_spin_unlock+0xf5/0x200 [ 112.635700][ T6603] alloc_vmap_area+0xd1a/0x1420 [ 112.635752][ T6603] ? __pfx_alloc_vmap_area+0x10/0x10 [ 112.635779][ T6603] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 112.635815][ T6603] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 112.635849][ T6603] ? __get_vm_area_node+0x155/0x2f0 [ 112.635884][ T6603] __get_vm_area_node+0x200/0x2f0 [ 112.635920][ T6603] __vmalloc_node_range_noprof+0x343/0x1540 [ 112.635952][ T6603] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.635977][ T6603] ? __lock_acquire+0x6df/0x2e50 [ 112.636022][ T6603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.636062][ T6603] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.636083][ T6603] __vmalloc_noprof+0xd2/0x120 [ 112.636114][ T6603] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.636140][ T6603] bpf_prog_alloc_no_stats+0x47/0x560 [ 112.636163][ T6603] ? bpf_prog_alloc+0x2a/0x1a0 [ 112.636190][ T6603] bpf_prog_alloc+0x3c/0x1a0 [ 112.636216][ T6603] bpf_prog_load+0x7f8/0x1c20 [ 112.636253][ T6603] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.636305][ T6603] __sys_bpf+0xd0d/0xd90 [ 112.636339][ T6603] ? __pfx___sys_bpf+0x10/0x10 [ 112.636375][ T6603] ? __fget_files+0x2a/0x420 [ 112.636423][ T6603] ? ksys_write+0x242/0x270 [ 112.636458][ T6603] ? __pfx_ksys_write+0x10/0x10 [ 112.636494][ T6603] __x64_sys_bpf+0xba/0xd0 [ 112.636520][ T6603] do_syscall_64+0x166/0x520 [ 112.636548][ T6603] ? trace_irq_disable+0x3b/0x140 [ 112.636569][ T6603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.636592][ T6603] ? clear_bhb_loop+0x70/0xc0 [ 112.636619][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.636642][ T6603] RIP: 0033:0x7f94a639e159 [ 112.636662][ T6603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.636691][ T6603] RSP: 002b:00007f94a7204028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.636714][ T6603] RAX: ffffffffffffffda RBX: 00007f94a6625fa0 RCX: 00007f94a639e159 [ 112.636730][ T6603] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 112.636752][ T6603] RBP: 00007f94a7204090 R08: 0000000000000000 R09: 0000000000000000 [ 112.636764][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.636775][ T6603] R13: 00007f94a6626038 R14: 00007f94a6625fa0 R15: 00007ffc9d7d94c8 [ 112.636804][ T6603] [ 113.077660][ T6605] netlink: 276 bytes leftover after parsing attributes in process `syz.0.203'. [ 113.085114][ T6605] netlink: 276 bytes leftover after parsing attributes in process `syz.0.203'. [ 113.646667][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 113.682444][ T6635] lo speed is unknown, defaulting to 1000 [ 113.716471][ T6635] lo speed is unknown, defaulting to 1000 [ 113.884508][ T6648] FAULT_INJECTION: forcing a failure. [ 113.884508][ T6648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.898318][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.3.214 Not tainted syzkaller #0 PREEMPT(full) [ 113.898350][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.898363][ T6648] Call Trace: [ 113.898372][ T6648] [ 113.898381][ T6648] dump_stack_lvl+0xe8/0x150 [ 113.898419][ T6648] should_fail_ex+0x410/0x560 [ 113.898457][ T6648] prepare_alloc_pages+0x223/0x600 [ 113.898500][ T6648] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 113.898528][ T6648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.898549][ T6648] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 113.898574][ T6648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 113.898601][ T6648] ? __pfx_policy_nodemask+0x10/0x10 [ 113.898625][ T6648] ? __get_vm_area_node+0x155/0x2f0 [ 113.898653][ T6648] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 113.898683][ T6648] ? __vmalloc_noprof+0xd2/0x120 [ 113.898721][ T6648] __alloc_pages_noprof+0x10/0x100 [ 113.898744][ T6648] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 113.898789][ T6648] ? alloc_pages_noprof+0x140/0x2b0 [ 113.898820][ T6648] __kasan_populate_vmalloc+0xb7/0x1c0 [ 113.898862][ T6648] alloc_vmap_area+0xd1a/0x1420 [ 113.898904][ T6648] ? __pfx_alloc_vmap_area+0x10/0x10 [ 113.898930][ T6648] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 113.898966][ T6648] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 113.898998][ T6648] ? __get_vm_area_node+0x155/0x2f0 [ 113.899032][ T6648] __get_vm_area_node+0x200/0x2f0 [ 113.899069][ T6648] __vmalloc_node_range_noprof+0x343/0x1540 [ 113.899100][ T6648] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 113.899134][ T6648] ? __lock_acquire+0x6df/0x2e50 [ 113.899195][ T6648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.899234][ T6648] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 113.899256][ T6648] __vmalloc_noprof+0xd2/0x120 [ 113.899286][ T6648] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 113.899313][ T6648] bpf_prog_alloc_no_stats+0x47/0x560 [ 113.899336][ T6648] ? bpf_prog_alloc+0x2a/0x1a0 [ 113.899362][ T6648] bpf_prog_alloc+0x3c/0x1a0 [ 113.899389][ T6648] bpf_prog_load+0x7f8/0x1c20 [ 113.899425][ T6648] ? __pfx_bpf_prog_load+0x10/0x10 [ 113.899475][ T6648] __sys_bpf+0xd0d/0xd90 [ 113.899507][ T6648] ? __pfx___sys_bpf+0x10/0x10 [ 113.899542][ T6648] ? __fget_files+0x2a/0x420 [ 113.899588][ T6648] ? ksys_write+0x242/0x270 [ 113.899621][ T6648] ? __pfx_ksys_write+0x10/0x10 [ 113.899656][ T6648] __x64_sys_bpf+0xba/0xd0 [ 113.899679][ T6648] do_syscall_64+0x166/0x520 [ 113.899706][ T6648] ? trace_irq_disable+0x3b/0x140 [ 113.899726][ T6648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.899748][ T6648] ? clear_bhb_loop+0x70/0xc0 [ 113.899771][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.899792][ T6648] RIP: 0033:0x7f8feaf9e159 [ 113.899812][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.899828][ T6648] RSP: 002b:00007f8fe91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.899850][ T6648] RAX: ffffffffffffffda RBX: 00007f8feb225fa0 RCX: 00007f8feaf9e159 [ 113.899866][ T6648] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 113.899879][ T6648] RBP: 00007f8fe91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.899891][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.899904][ T6648] R13: 00007f8feb226038 R14: 00007f8feb225fa0 R15: 00007ffefbfc3698 [ 113.899937][ T6648] [ 114.255273][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 114.278293][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 114.331510][ T6653] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 114.365958][ T6657] xt_connbytes: Forcing CT accounting to be enabled [ 114.456545][ T6655] netlink: 'syz.4.216': attribute type 3 has an invalid length. [ 114.823498][ T6665] netlink: 124 bytes leftover after parsing attributes in process `syz.0.218'. [ 115.270256][ T6686] FAULT_INJECTION: forcing a failure. [ 115.270256][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.270327][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.1.224 Not tainted syzkaller #0 PREEMPT(full) [ 115.270351][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.270430][ T6686] Call Trace: [ 115.270459][ T6686] [ 115.270489][ T6686] dump_stack_lvl+0xe8/0x150 [ 115.270602][ T6686] should_fail_ex+0x410/0x560 [ 115.270697][ T6686] _copy_to_user+0x31/0xb0 [ 115.270759][ T6686] bpf_verifier_vlog+0x496/0x900 [ 115.270883][ T6686] bpf_verifier_log_write+0x11d/0x1a0 [ 115.270971][ T6686] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 115.271078][ T6686] ? record_arg_access+0x148/0x970 [ 115.271177][ T6686] analyze_subprog+0x53ed/0x9e00 [ 115.271238][ T6686] ? irq_work_run+0x1ff/0x230 [ 115.271445][ T6686] ? __pfx_analyze_subprog+0x10/0x10 [ 115.271508][ T6686] ? __x64_sys_bpf+0xba/0xd0 [ 115.271557][ T6686] ? perf_trace_rxrpc_bundle+0xc2/0x400 [ 115.271643][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.271793][ T6686] ? call_instance+0x263/0x560 [ 115.271861][ T6686] ? rcu_is_watching+0x16/0xb0 [ 115.271945][ T6686] ? call_instance+0x263/0x560 [ 115.271999][ T6686] ? trace_kmalloc+0x2a/0xf0 [ 115.272083][ T6686] ? call_instance+0x263/0x560 [ 115.272150][ T6686] ? __kvmalloc_node_noprof+0x52f/0x820 [ 115.272214][ T6686] ? __kvmalloc_node_noprof+0x345/0x820 [ 115.272274][ T6686] ? call_instance+0x263/0x560 [ 115.272326][ T6686] ? call_instance+0x263/0x560 [ 115.272444][ T6686] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 115.272533][ T6686] ? bpf_tracing_func_proto+0x72/0x180 [ 115.272667][ T6686] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 115.272748][ T6686] ? __kvmalloc_node_noprof+0x345/0x820 [ 115.272801][ T6686] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 115.272863][ T6686] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 115.272932][ T6686] bpf_compute_live_registers+0x8d3/0x1ff0 [ 115.273027][ T6686] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 115.273120][ T6686] bpf_check+0x25ed/0x2e10 [ 115.273208][ T6686] ? ktime_get_with_offset+0x93/0x2d0 [ 115.273292][ T6686] ? __pfx_bpf_check+0x10/0x10 [ 115.273371][ T6686] ? bpf_obj_name_cpy+0x194/0x1e0 [ 115.273471][ T6686] bpf_prog_load+0x14d6/0x1c20 [ 115.273616][ T6686] ? __pfx_bpf_prog_load+0x10/0x10 [ 115.273757][ T6686] __sys_bpf+0xd0d/0xd90 [ 115.273836][ T6686] ? __pfx___sys_bpf+0x10/0x10 [ 115.273911][ T6686] ? __fget_files+0x2a/0x420 [ 115.274027][ T6686] ? ksys_write+0x242/0x270 [ 115.274111][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 115.274210][ T6686] __x64_sys_bpf+0xba/0xd0 [ 115.274281][ T6686] do_syscall_64+0x166/0x520 [ 115.274356][ T6686] ? trace_irq_disable+0x3b/0x140 [ 115.274413][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.274473][ T6686] ? clear_bhb_loop+0x70/0xc0 [ 115.274553][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.274613][ T6686] RIP: 0033:0x7f48a359e159 [ 115.274685][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.274741][ T6686] RSP: 002b:00007f48a44dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.274812][ T6686] RAX: ffffffffffffffda RBX: 00007f48a3825fa0 RCX: 00007f48a359e159 [ 115.274853][ T6686] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 115.274891][ T6686] RBP: 00007f48a44dc090 R08: 0000000000000000 R09: 0000000000000000 [ 115.274923][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.274962][ T6686] R13: 00007f48a3826038 R14: 00007f48a3825fa0 R15: 00007ffeb74330a8 [ 115.275033][ T6686] [ 118.578775][ T6694] batadv_slave_1: entered promiscuous mode [ 118.755526][ T5804] lo speed is unknown, defaulting to 1000 [ 118.757168][ T6694] batadv_slave_1: left promiscuous mode [ 118.799379][ T6720] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 119.132736][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 119.197403][ T6738] FAULT_INJECTION: forcing a failure. [ 119.197403][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.197460][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.3.235 Not tainted syzkaller #0 PREEMPT(full) [ 119.197483][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.197543][ T6738] Call Trace: [ 119.197551][ T6738] [ 119.197574][ T6738] dump_stack_lvl+0xe8/0x150 [ 119.197695][ T6738] should_fail_ex+0x410/0x560 [ 119.197784][ T6738] _copy_to_user+0x31/0xb0 [ 119.197848][ T6738] bpf_verifier_vlog+0x496/0x900 [ 119.197964][ T6738] verbose+0x11d/0x1a0 [ 119.198065][ T6738] ? __pfx_verbose+0x10/0x10 [ 119.198150][ T6738] ? lock_acquire+0x115/0x350 [ 119.198225][ T6738] print_bpf_insn+0x92f/0x2910 [ 119.198305][ T6738] ? __pfx_verbose+0x10/0x10 [ 119.198390][ T6738] ? __pfx_print_bpf_insn+0x10/0x10 [ 119.198455][ T6738] ? _copy_to_user+0x8a/0xb0 [ 119.198526][ T6738] ? bpf_verifier_vlog+0x58d/0x900 [ 119.198634][ T6738] ? bpf_verifier_log_write+0x11d/0x1a0 [ 119.198727][ T6738] bpf_verbose_insn+0xcb/0x130 [ 119.198817][ T6738] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 119.198901][ T6738] ? __pfx_verbose+0x10/0x10 [ 119.198983][ T6738] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 119.199080][ T6738] ? record_arg_access+0x148/0x970 [ 119.199179][ T6738] analyze_subprog+0x53fa/0x9e00 [ 119.199241][ T6738] ? irq_work_run+0x1ff/0x230 [ 119.199451][ T6738] ? __pfx_analyze_subprog+0x10/0x10 [ 119.199513][ T6738] ? __x64_sys_bpf+0xba/0xd0 [ 119.199556][ T6738] ? perf_trace_rxrpc_bundle+0xc2/0x400 [ 119.199640][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.199795][ T6738] ? call_instance+0x263/0x560 [ 119.199878][ T6738] ? rcu_is_watching+0x16/0xb0 [ 119.199953][ T6738] ? call_instance+0x263/0x560 [ 119.200004][ T6738] ? trace_kmalloc+0x2a/0xf0 [ 119.200093][ T6738] ? call_instance+0x263/0x560 [ 119.200145][ T6738] ? __kvmalloc_node_noprof+0x52f/0x820 [ 119.200204][ T6738] ? __kvmalloc_node_noprof+0x345/0x820 [ 119.200255][ T6738] ? call_instance+0x263/0x560 [ 119.200306][ T6738] ? call_instance+0x263/0x560 [ 119.200406][ T6738] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 119.200489][ T6738] ? bpf_tracing_func_proto+0x72/0x180 [ 119.200625][ T6738] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 119.200705][ T6738] ? __kvmalloc_node_noprof+0x345/0x820 [ 119.200757][ T6738] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 119.200809][ T6738] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 119.200883][ T6738] bpf_compute_live_registers+0x8d3/0x1ff0 [ 119.201001][ T6738] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 119.201091][ T6738] bpf_check+0x25ed/0x2e10 [ 119.201168][ T6738] ? ktime_get_with_offset+0x93/0x2d0 [ 119.201241][ T6738] ? __pfx_bpf_check+0x10/0x10 [ 119.201311][ T6738] ? bpf_obj_name_cpy+0x194/0x1e0 [ 119.201395][ T6738] bpf_prog_load+0x14d6/0x1c20 [ 119.201485][ T6738] ? __pfx_bpf_prog_load+0x10/0x10 [ 119.201620][ T6738] __sys_bpf+0xd0d/0xd90 [ 119.201702][ T6738] ? __pfx___sys_bpf+0x10/0x10 [ 119.201778][ T6738] ? __fget_files+0x2a/0x420 [ 119.201918][ T6738] ? ksys_write+0x242/0x270 [ 119.202006][ T6738] ? __pfx_ksys_write+0x10/0x10 [ 119.202096][ T6738] __x64_sys_bpf+0xba/0xd0 [ 119.202158][ T6738] do_syscall_64+0x166/0x520 [ 119.202229][ T6738] ? trace_irq_disable+0x3b/0x140 [ 119.202291][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.202345][ T6738] ? clear_bhb_loop+0x70/0xc0 [ 119.202414][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.202466][ T6738] RIP: 0033:0x7f8feaf9e159 [ 119.202515][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.202558][ T6738] RSP: 002b:00007f8fe91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.202618][ T6738] RAX: ffffffffffffffda RBX: 00007f8feb225fa0 RCX: 00007f8feaf9e159 [ 119.202659][ T6738] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 119.202698][ T6738] RBP: 00007f8fe91f6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.202735][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.202761][ T6738] R13: 00007f8feb226038 R14: 00007f8feb225fa0 R15: 00007ffefbfc3698 [ 119.202837][ T6738] [ 120.035406][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 120.035498][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 120.093773][ T6768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.144492][ T6768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.238'. [ 120.398056][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.401744][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.561108][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.578488][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.753299][ T6714] lo speed is unknown, defaulting to 1000 [ 120.753361][ T6714] syz2: Port: 1 Link DOWN [ 120.824849][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.826512][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.926546][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.952241][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.325152][ T6280] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.325274][ T6280] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.482618][ T6823] netlink: 48 bytes leftover after parsing attributes in process `syz.0.247'. [ 121.519897][ T6276] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.519997][ T6276] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.520145][ T6276] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.520253][ T6276] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.520350][ T6276] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.520447][ T6276] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.770799][ T6828] bond1: option ad_user_port_key: invalid value (65535) [ 121.779668][ T6828] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 121.801493][ T6828] bond1 (unregistering): Released all slaves [ 121.876517][ T6839] netlink: 52 bytes leftover after parsing attributes in process `syz.2.253'. [ 121.899559][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'. [ 122.018132][ T6834] geneve0: entered promiscuous mode [ 122.093053][ T6837] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 122.258876][ T6843] bond0: entered promiscuous mode [ 122.258915][ T6843] bond_slave_0: entered promiscuous mode [ 122.259990][ T6843] bond_slave_1: entered promiscuous mode [ 122.278064][ T6843] bond0: entered allmulticast mode [ 122.283738][ T6843] bond_slave_0: entered allmulticast mode [ 122.289802][ T6843] bond_slave_1: entered allmulticast mode [ 122.303031][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.387608][ T6854] syzkaller0: entered promiscuous mode [ 122.387660][ T6854] syzkaller0: entered allmulticast mode [ 122.441742][ T6854] tipc: Enabled bearer , priority 0 [ 122.481668][ T6854] tipc: Resetting bearer [ 122.522539][ T6853] tipc: Resetting bearer [ 122.576332][ T6853] tipc: Disabling bearer [ 122.879682][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'. [ 122.942197][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 123.168902][ T6884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.242671][ T6889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.313305][ T6884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.586210][ T6907] netlink: 'syz.2.270': attribute type 2 has an invalid length. [ 123.586259][ T6907] netlink: 'syz.2.270': attribute type 2 has an invalid length. [ 123.668927][ T6912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.565050][ T6935] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 124.676876][ T6934] tipc: Started in network mode [ 124.676928][ T6934] tipc: Node identity f6470f28675f, cluster identity 4711 [ 124.677655][ T6934] tipc: Enabled bearer , priority 0 [ 124.728832][ T6934] netlink: 'syz.0.278': attribute type 10 has an invalid length. [ 124.737216][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.278'. [ 124.780443][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 124.789942][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.278'. [ 124.805503][ T6937] syzkaller0: entered promiscuous mode [ 124.807298][ T6937] syzkaller0: entered allmulticast mode [ 124.818588][ T6937] tipc: Resetting bearer [ 124.889834][ T6950] geneve2: entered promiscuous mode [ 124.889902][ T6950] geneve2: entered allmulticast mode [ 124.895181][ T6281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.911950][ T6273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.912003][ T6273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.912038][ T6273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.951459][ T6933] tipc: Resetting bearer [ 125.091650][ T6958] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 125.091707][ T6958] netlink: 'syz.3.283': attribute type 4 has an invalid length. [ 125.091735][ T6958] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.283'. [ 125.346582][ T6966] FAULT_INJECTION: forcing a failure. [ 125.346582][ T6966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.346648][ T6966] CPU: 1 UID: 0 PID: 6966 Comm: syz.1.286 Not tainted syzkaller #0 PREEMPT(full) [ 125.346674][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.346697][ T6966] Call Trace: [ 125.346705][ T6966] [ 125.346755][ T6966] dump_stack_lvl+0xe8/0x150 [ 125.346863][ T6966] should_fail_ex+0x410/0x560 [ 125.346949][ T6966] strncpy_from_user+0x36/0x2c0 [ 125.347038][ T6966] bpf_prog_load+0xdef/0x1c20 [ 125.347128][ T6966] ? __pfx_bpf_prog_load+0x10/0x10 [ 125.347266][ T6966] __sys_bpf+0xd0d/0xd90 [ 125.347350][ T6966] ? __pfx___sys_bpf+0x10/0x10 [ 125.347452][ T6966] ? __fget_files+0x2a/0x420 [ 125.347568][ T6966] ? ksys_write+0x242/0x270 [ 125.347647][ T6966] ? __pfx_ksys_write+0x10/0x10 [ 125.347722][ T6966] __x64_sys_bpf+0xba/0xd0 [ 125.347776][ T6966] do_syscall_64+0x166/0x520 [ 125.347850][ T6966] ? trace_irq_disable+0x3b/0x140 [ 125.347901][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.347960][ T6966] ? clear_bhb_loop+0x70/0xc0 [ 125.348023][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.348081][ T6966] RIP: 0033:0x7f48a359e159 [ 125.348133][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.348185][ T6966] RSP: 002b:00007f48a44dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.348247][ T6966] RAX: ffffffffffffffda RBX: 00007f48a3825fa0 RCX: 00007f48a359e159 [ 125.348295][ T6966] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 125.348334][ T6966] RBP: 00007f48a44dc090 R08: 0000000000000000 R09: 0000000000000000 [ 125.348373][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.348410][ T6966] R13: 00007f48a3826038 R14: 00007f48a3825fa0 R15: 00007ffeb74330a8 [ 125.348490][ T6966] [ 125.632508][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 125.756592][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 125.756656][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 126.819999][ T6933] tipc: Disabling bearer [ 126.856267][ T6961] vlan1: entered promiscuous mode [ 126.856314][ T6961] batadv0: entered promiscuous mode [ 126.857602][ T6961] vlan1: entered allmulticast mode [ 126.857663][ T6961] batadv0: entered allmulticast mode [ 127.014316][ T6715] tipc: Node number set to 2434273064 [ 127.284798][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'. [ 127.525640][ C0] ------------[ cut here ]------------ [ 127.525705][ C0] len > ((int)(~0U >> 1)) [ 127.525740][ C0] WARNING: ./include/linux/skbuff.h:2864 at qdisc_pkt_len_segs_init+0x4b4/0xa30, CPU#0: syz.1.295/6997 [ 127.546823][ C0] Modules linked in: [ 127.551690][ C0] CPU: 0 UID: 0 PID: 6997 Comm: syz.1.295 Not tainted syzkaller #0 PREEMPT(full) [ 127.560980][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.571141][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 127.577479][ C0] Code: 00 00 02 00 31 ff e8 bb a6 17 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 aa a1 17 f8 45 89 e7 e9 2c ff ff ff e8 9d a1 17 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 9a a3 17 f8 41 39 dc 0f [ 127.597185][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 127.603347][ C0] RAX: ffffffff89b01203 RBX: 0000000000000003 RCX: ffff88802bc61f40 [ 127.611411][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 127.619489][ C0] RBP: ffff888012165640 R08: 0000000000000100 R09: 1ffff110053bd00c [ 127.627504][ C0] R10: dffffc0000000000 R11: ffffed10053bd00d R12: 00000000fffffffe [ 127.635602][ C0] R13: dffffc0000000000 R14: 1ffff1100242cae3 R15: ffff88805593b598 [ 127.643653][ C0] FS: 00007f48a44dc6c0(0000) GS:ffff888124ce0000(0000) knlGS:0000000000000000 [ 127.652691][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.659445][ C0] CR2: 0000001000000008 CR3: 0000000079dfa000 CR4: 00000000003526f0 [ 127.667515][ C0] Call Trace: [ 127.670905][ C0] [ 127.673831][ C0] __netif_receive_skb_core+0x13b0/0x30c0 [ 127.679702][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 127.685865][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 127.691968][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 127.698550][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 127.704816][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 127.711232][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 127.717981][ C0] ? dev_gro_receive+0x1097/0x2380 [ 127.723231][ C0] napi_complete_done+0x299/0x730 [ 127.728436][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 127.734094][ C0] ? gro_cell_poll+0x18a/0x630 [ 127.738909][ C0] gro_cell_poll+0x5ff/0x630 [ 127.743616][ C0] ? gro_cell_poll+0x18a/0x630 [ 127.748439][ C0] __napi_poll+0xaa/0x330 [ 127.752988][ C0] net_rx_action+0x61d/0xf50 [ 127.757648][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 127.762899][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 127.768167][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 127.773550][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 127.778798][ C0] ? sched_clock+0x41/0x60 [ 127.783331][ C0] handle_softirqs+0x226/0x860 [ 127.788171][ C0] ? do_softirq+0x77/0xd0 [ 127.792617][ C0] ? tun_rx_batched+0x185/0x790 [ 127.797525][ C0] do_softirq+0x77/0xd0 [ 127.801781][ C0] [ 127.804767][ C0] [ 127.807727][ C0] __local_bh_enable_ip+0x100/0x140 [ 127.813029][ C0] ? tun_rx_batched+0x185/0x790 [ 127.817930][ C0] tun_rx_batched+0x616/0x790 [ 127.822713][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 127.828494][ C0] ? lock_acquire+0x115/0x350 [ 127.833311][ C0] ? tun_get_user+0x23ba/0x44d0 [ 127.838212][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 127.843594][ C0] ? tun_get_user+0x27b0/0x44d0 [ 127.848499][ C0] tun_get_user+0x2be0/0x44d0 [ 127.853330][ C0] ? tun_get_user+0x27b0/0x44d0 [ 127.858237][ C0] ? aa_file_perm+0x18b/0x15f0 [ 127.863117][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 127.867920][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 127.873076][ C0] ? __lock_acquire+0x6df/0x2e50 [ 127.878056][ C0] ? __pfx___futex_wait+0x10/0x10 [ 127.883183][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 127.888338][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 127.893884][ C0] ? lock_acquire+0x115/0x350 [ 127.898613][ C0] ? tun_get+0x1c/0x2f0 [ 127.902889][ C0] ? tun_get+0x1c/0x2f0 [ 127.907094][ C0] ? tun_get+0x1c/0x2f0 [ 127.911363][ C0] tun_chr_write_iter+0x113/0x200 [ 127.916446][ C0] vfs_write+0x612/0xba0 [ 127.920820][ C0] ? __pfx_vfs_write+0x10/0x10 [ 127.925656][ C0] ? __fget_files+0x2a/0x420 [ 127.930361][ C0] ksys_write+0x150/0x270 [ 127.934745][ C0] ? __pfx_ksys_write+0x10/0x10 [ 127.939791][ C0] do_syscall_64+0x166/0x520 [ 127.944426][ C0] ? trace_irq_disable+0x3b/0x140 [ 127.949555][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.955659][ C0] ? clear_bhb_loop+0x70/0xc0 [ 127.960430][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.966370][ C0] RIP: 0033:0x7f48a359e159 [ 127.970871][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.990559][ C0] RSP: 002b:00007f48a44dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.999070][ C0] RAX: ffffffffffffffda RBX: 00007f48a3825fa0 RCX: 00007f48a359e159 [ 128.007083][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000004 [ 128.015174][ C0] RBP: 00007f48a3635024 R08: 0000000000000000 R09: 0000000000000000 [ 128.023211][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.031255][ C0] R13: 00007f48a3826038 R14: 00007f48a3825fa0 R15: 00007ffeb74330a8 [ 128.039305][ C0] [ 128.042365][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.049704][ C0] CPU: 0 UID: 0 PID: 6997 Comm: syz.1.295 Not tainted syzkaller #0 PREEMPT(full) [ 128.058931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.069022][ C0] Call Trace: [ 128.072330][ C0] [ 128.075201][ C0] vpanic+0x56d/0xa60 [ 128.079235][ C0] ? __pfx__printk+0x10/0x10 [ 128.083956][ C0] ? __pfx_vpanic+0x10/0x10 [ 128.088502][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 128.093851][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 128.099101][ C0] panic+0xc5/0xd0 [ 128.102862][ C0] ? __pfx_panic+0x10/0x10 [ 128.107345][ C0] __warn+0x315/0x4c0 [ 128.111377][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 128.117064][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 128.122739][ C0] __report_bug+0x276/0x570 [ 128.127293][ C0] ? vfs_write+0x612/0xba0 [ 128.131749][ C0] ? ksys_write+0x150/0x270 [ 128.136294][ C0] ? do_syscall_64+0x166/0x520 [ 128.141115][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 128.146791][ C0] ? __pfx___report_bug+0x10/0x10 [ 128.151879][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 128.157561][ C0] report_bug+0x16b/0x220 [ 128.161963][ C0] ? qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 128.167635][ C0] ? qdisc_pkt_len_segs_init+0x4b6/0xa30 [ 128.173314][ C0] handle_bug+0x9c/0x200 [ 128.177608][ C0] exc_invalid_op+0x1a/0x50 [ 128.182155][ C0] asm_exc_invalid_op+0x1a/0x20 [ 128.187036][ C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30 [ 128.193309][ C0] Code: 00 00 02 00 31 ff e8 bb a6 17 f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 aa a1 17 f8 45 89 e7 e9 2c ff ff ff e8 9d a1 17 f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 9a a3 17 f8 41 39 dc 0f [ 128.212943][ C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246 [ 128.219042][ C0] RAX: ffffffff89b01203 RBX: 0000000000000003 RCX: ffff88802bc61f40 [ 128.227031][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 128.235022][ C0] RBP: ffff888012165640 R08: 0000000000000100 R09: 1ffff110053bd00c [ 128.243016][ C0] R10: dffffc0000000000 R11: ffffed10053bd00d R12: 00000000fffffffe [ 128.251003][ C0] R13: dffffc0000000000 R14: 1ffff1100242cae3 R15: ffff88805593b598 [ 128.259004][ C0] ? qdisc_pkt_len_segs_init+0x4b3/0xa30 [ 128.264676][ C0] __netif_receive_skb_core+0x13b0/0x30c0 [ 128.270457][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 128.276575][ C0] __netif_receive_skb_list_core+0x24d/0x830 [ 128.282599][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 128.289139][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 128.295313][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 128.301664][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 128.308379][ C0] ? dev_gro_receive+0x1097/0x2380 [ 128.313537][ C0] napi_complete_done+0x299/0x730 [ 128.318590][ C0] ? __pfx_napi_complete_done+0x10/0x10 [ 128.324163][ C0] ? gro_cell_poll+0x18a/0x630 [ 128.328980][ C0] gro_cell_poll+0x5ff/0x630 [ 128.333604][ C0] ? gro_cell_poll+0x18a/0x630 [ 128.338401][ C0] __napi_poll+0xaa/0x330 [ 128.342861][ C0] net_rx_action+0x61d/0xf50 [ 128.347493][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 128.352726][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 128.357961][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 128.363258][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 128.368474][ C0] ? sched_clock+0x41/0x60 [ 128.372941][ C0] handle_softirqs+0x226/0x860 [ 128.377764][ C0] ? do_softirq+0x77/0xd0 [ 128.382118][ C0] ? tun_rx_batched+0x185/0x790 [ 128.386990][ C0] do_softirq+0x77/0xd0 [ 128.391169][ C0] [ 128.394136][ C0] [ 128.397083][ C0] __local_bh_enable_ip+0x100/0x140 [ 128.402307][ C0] ? tun_rx_batched+0x185/0x790 [ 128.407195][ C0] tun_rx_batched+0x616/0x790 [ 128.411915][ C0] ? __pfx_tun_rx_batched+0x10/0x10 [ 128.417142][ C0] ? lock_acquire+0x115/0x350 [ 128.421847][ C0] ? tun_get_user+0x23ba/0x44d0 [ 128.426748][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 128.432078][ C0] ? tun_get_user+0x27b0/0x44d0 [ 128.436971][ C0] tun_get_user+0x2be0/0x44d0 [ 128.441697][ C0] ? tun_get_user+0x27b0/0x44d0 [ 128.446592][ C0] ? aa_file_perm+0x18b/0x15f0 [ 128.451400][ C0] ? aa_file_perm+0x4ed/0x15f0 [ 128.456201][ C0] ? __pfx_tun_get_user+0x10/0x10 [ 128.461264][ C0] ? __lock_acquire+0x6df/0x2e50 [ 128.466261][ C0] ? __pfx___futex_wait+0x10/0x10 [ 128.471358][ C0] ? ref_tracker_alloc+0x341/0x4b0 [ 128.476532][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.482047][ C0] ? lock_acquire+0x115/0x350 [ 128.486740][ C0] ? tun_get+0x1c/0x2f0 [ 128.490938][ C0] ? tun_get+0x1c/0x2f0 [ 128.495123][ C0] ? tun_get+0x1c/0x2f0 [ 128.499323][ C0] tun_chr_write_iter+0x113/0x200 [ 128.504378][ C0] vfs_write+0x612/0xba0 [ 128.508663][ C0] ? __pfx_vfs_write+0x10/0x10 [ 128.513475][ C0] ? __fget_files+0x2a/0x420 [ 128.518111][ C0] ksys_write+0x150/0x270 [ 128.522478][ C0] ? __pfx_ksys_write+0x10/0x10 [ 128.527411][ C0] do_syscall_64+0x166/0x520 [ 128.532040][ C0] ? trace_irq_disable+0x3b/0x140 [ 128.537083][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.543173][ C0] ? clear_bhb_loop+0x70/0xc0 [ 128.547877][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.553789][ C0] RIP: 0033:0x7f48a359e159 [ 128.558260][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.577897][ C0] RSP: 002b:00007f48a44dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.586340][ C0] RAX: ffffffffffffffda RBX: 00007f48a3825fa0 RCX: 00007f48a359e159 [ 128.594338][ C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000004 [ 128.602339][ C0] RBP: 00007f48a3635024 R08: 0000000000000000 R09: 0000000000000000 [ 128.610340][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.618337][ C0] R13: 00007f48a3826038 R14: 00007f48a3825fa0 R15: 00007ffeb74330a8 [ 128.626357][ C0] [ 128.630014][ C0] Kernel Offset: disabled [ 128.634356][ C0] Rebooting in 86400 seconds..