last executing test programs: 6.753985099s ago: executing program 3 (id=6377): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d00a6ff9ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) 6.730364536s ago: executing program 3 (id=6379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040fd342a067b91000000001e0a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x48054}, 0x0) 6.224745393s ago: executing program 3 (id=6382): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4bd269cd3f708eb78f33", 0xa) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90000, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x8, 0x80, 0x1, 0x7, {{0x11, 0x4, 0x2, 0x8, 0x44, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@rr={0x7, 0x17, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1]}, @lsrr={0x83, 0x17, 0x47, [@local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) (async, rerun: 32) r5 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) bind$xdp(r5, &(0x7f0000000200)={0x2c, 0x5, r4, 0x31, r6}, 0x10) sendmsg$sock(r3, &(0x7f0000000580)={&(0x7f0000000240)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="2c49a568d9bf3f50bc2c916b89dbed5290ecaa36dcbc62df6f9c42ded4b91a79ee65da7fc2b806ccf1880faa18671ef4ed6335b1c6fef1fd9eaccca027d67ab42aaa7c7b9bf1a0b1ce650b039436f85bcd29509aed1401e796ff7b01c8bade5b560b2a6e350380bb5d3a409f53568715d4dd2b0c0ca3c1ce45fd4aa5dfeb9c41baadef534564cd1d89bef0879925208692ca2cbb771fe82036347449747080516ed24e5605490f3fd9a8772c899cacadad953225ee67c66887e9d5d8bcef3d483683", 0xc2}, {&(0x7f00000003c0)="b30c5d64d2a0f33fd536325df2b94404c477b8197a4199b08dd5187891494672e1df44cf873ae0d7d53f4b1eb13dda4ed28bcaf50d2b63bb3d2beaf4bc5541fb7dd2cbc696ca0f5b3739d6c5310573b1dc940cef167d22ad42d35f85a452dee087b9a230ea8cd76edfe010cac164eabe2e27978fbdc15c5a4fddbd2f2567d2ab7c66c3256c2712aa72a9e382691b0a322a247de6a2592274c3e2271eb48542e5a27513fd096c0057c3a5c3ab62617053adcdc9c7ef6c951cd45131b45e5babd58abd24b5f003236e4452d8feeb53658cdff0ac15515cd3be3d2493b67156e62d35fe102d48ed37a2e863de91b3bd9a76e7226827", 0xf4}], 0x2, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}, 0x94) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000005c0), 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'gretap0\x00', r1, 0x80, 0x8000, 0x400, 0x3, {{0xa, 0x4, 0x2, 0x1d, 0x28, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, {[@generic={0x7, 0x11, "cc0ba509df35d52d28d2f5ca727be1"}]}}}}}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000006c0)={0x4, 0x2, 0x4, 0xc0000000, 0xffffffff}) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000700)=[@mss={0x2, 0x5d10}, @timestamp, @sack_perm, @mss={0x2, 0x492}, @timestamp, @window={0x3, 0xfffe}, @timestamp, @window={0x3, 0x9, 0x7}], 0x8) (async) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000740)=0x200000, 0x4) (async) write(r0, &(0x7f0000000780)="fc5eb347284f29c3ef1f8b884b0b7f7494e9a6cbbf127744d740ca5c9e7f22c03826cfadb129fc951436f803cae49c9259157cf6007fb599b5d98a0388d7d2ad0adc169d7e9f467b7c32199a322e4efeb8dd1d6e5dd3996d01bb4623365f48b1ae0c1d677c74ac", 0x67) (async) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{&(0x7f0000000800)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000840)="c678a8599ffb5b33c1d832db66dd42b6fa06329b83d15f7e6af72799bb26d2c19b1866a7cbe8b8ebb2cf3d1756209a8208558d70a05250f10a7c1332f4d4daf8f964fcbcbb9e0f8aadc8f9933b9ca3cc7be69f85991a7ba977606b44c9b4ecdeb7a6424af2e66f421a9e7caaa07a9744ef1b4a2c769f6bc16a6f0ffd095d4dc67f", 0x81}], 0x1, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x96d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x48}}], 0x1, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r8, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async, rerun: 32) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) (rerun: 32) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000cc0)={0x1, 0x8, 0xc2, &(0x7f0000000bc0)=""/194}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func={0xd, 0x0, 0x0, 0xc, 0x3}, @float={0xf, 0x0, 0x0, 0x10, 0x8}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000d80)=""/251, 0x42, 0xfb, 0x1, 0x843}, 0x28) ioctl$FITHAW(r9, 0xc0045878) (async) r10 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, &(0x7f0000000ec0)=0xcbc1) (async) ioctl$NILFS_IOCTL_GET_CPSTAT(r5, 0x80186e83, &(0x7f0000000f00)) pipe(&(0x7f0000001100)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x10, &(0x7f0000000f40)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x1, 0x8, 0x8, 0x4, 0x18, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0xd, 0xa, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f0000000fc0)='syzkaller\x00', 0x800, 0xaa, &(0x7f0000001000)=""/170, 0x40f00, 0x0, '\x00', r7, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000010c0)={0x2, 0xe, 0x4e3, 0x901e}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001140)=[r6, r11], &(0x7f0000001180)=[{0x4, 0x4, 0xf, 0x1}, {0x3, 0x1, 0xb, 0x1}, {0x0, 0x3, 0x10, 0x4}, {0x3, 0x5, 0x9, 0x1}, {0x4, 0x5, 0xb, 0x4}], 0x10, 0xff}, 0x94) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000012c0)=0x6, 0x4) (rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000001300)={{{@in=@dev, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000001400)=0xe8) 5.441146008s ago: executing program 4 (id=6388): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080), 0x0}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) (async) r3 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf250900025bad797a3200000000080041007278650014003300766c616e3000"/56], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) (rerun: 32) close(0x4) 4.964003988s ago: executing program 3 (id=6391): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x40480d4) write$nci(r1, &(0x7f0000003400)=ANY=[@ANYBLOB="7105015f020200066e40019238d8936b127de2b4d25de0cc04a970858805c02274973b4c48a247381f2a5588fbe1dff61c5d50c4ceeeb7452fd299ea2c085aee0d9b96335fcabae2fbb365211d9c943d05cd8e0a59a984c28233dcadf70fb9c3729a7974d5a1f7b109260c01e8135a94701772c7a51456a3916dbd90531890f71057807f570cacfffe65617def0c3af5c5ce216fccd847bd3e66f17a0d4e07400984b7ef00"], 0xa5) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000040), 0x10) sendto(r5, &(0x7f00000009c0)="8301a218320e9a90b7f2a15d17f599426a1b40c1deea261527e2c209ba502366d1be83a3b7c2ec31de0525390246a56dba5087c9733451dd867c1245057a38225e36fe233d35fad7a514f70b11dcfad996d7ef6a61ecd2767b00bb2fb5b19c0a701670da02d3cc642cc3e3df22da7888da58fb19788b07ff3a8f9fe01a468ce6", 0x80, 0x4008001, &(0x7f0000000380)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r7 = syz_open_procfs$namespace(0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket$inet6(0xa, 0x2, 0x8000000003c) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000001e40)=0x0) r13 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="4562411f6873c51a18f0a6d7903a64980c60462c45ea2a678489cb9b608813a73a1b423f76e5d04ddd5964fbe1985db27a", 0x31}, {&(0x7f0000000400)="e9a9ce8506d8b32a159df547bf14b44edee564586f0d106a637ac4c6c7554d8808e1e07761d386ec2e86bc24930ab4e2d168ea823718ea0d974d66ecd4f1a9007d92c8169c4adb4bd42b839bd20c09e069588d9a46471f492c9f80601f32841deafec9d11bc0c67186193f14626a994de75c0386d3e12decbeb2d57cf347a1df35428e354fadea986672ca7178cd7343", 0x90}, {&(0x7f00000004c0)="1adba5c1b0b9c51af6215d4db408ee1f470ad18b5f212ebaaa159e705c4cae", 0x1f}, {&(0x7f0000000500)="0f227978c6bf728b554de8104a7b0650cbab7e3873342cf18f6ca1ee330e7d97aa9194e9eb2604de3b0d67cd9308e900f8fa96737c15a165a0c8b61de87438e8897ddbb3c0372335f6d1dda8f2abbe34a66d8f071a940a6253896f8a", 0x5c}, {&(0x7f0000000580)="6f1adfc6651b187f31ca3828f7898eefa54278aacb324b527edfb4924c74265f93000d8a2d72e35b8d70c8f2284e85a1591b339b426cc39e748f0eabf376ab0c1092b8156a5421567c0ab224a966e482dfd664a6641dece91225715b3299a9e6ea9fcdb097b3c2126b0675f4c6c51223489585bce024325a9477f3fa700cb91acfc56916335dc60a", 0x88}, {&(0x7f0000000640)="c5741039bbc513720f57ffe85b4837eb23002114ff018e822b07fcc0ff160836bc8ed551d1fad253af61ba90a308abc4d1feab776044af8f4708ea39b5fdddb6b5708bea61d00e7293643101bfafb3312547907a99c964b8f9e6bc2c8fe7d61e9a0dbb47f2ece6d9b731a40537b41e5a59b939ceb86bc7ab164a4499c998e6cd587686dd79ab51402f12f04d5de272e9a19cbda4a6e04c1a09e52fca57b2c50cf97d77dcabe95f9c6d1240191d76d0b03ed7f89c63fbbe1614349f1e3ea22d20f854c1fbb1e5c3bcceb2609ce16b305891090dbf5390ef40c72129e3b43e60ae793c12100a", 0xe5}], 0x6, 0x0, 0x0, 0x4000}}, {{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000840)="3d78708d38235664ab103e41b6f89916222a4f1e02ab7f03e55c9eaed860078dcd54d522caf22fbfc700084446102369af561e19915c24b328be1162373784ebaa8af9138de1c70d2e47f6", 0x4b}, {&(0x7f00000008c0)="b283712109f48fa6c50792be2b597e28221dfd673a1467d7846a54c4d928a066422e57326b485ae5a4010e5f527df016918c01076aa4343f1e831745e48a7e708a580488bb8c850374243ce52a1a39f52b98f0d9b735a4a6a59fda", 0x5b}, {&(0x7f0000000f40)="fad130f87b7b29e2f1afc434663b502e4a644e1347ad593183b6d009684e1d2ec8a981922c9daabadc4a6bccc48a22e9cae0cdaba4584f1b97fd649609990bf96d7b6293f2f3faee6272a40bc6fbb86e1aaf64c7e4121095e352a1656ecee588cde585965ae96be6384533e81dc17b92630c74a3c946d4b502848a56678cc1bc9bc1722cfe", 0x85}], 0x3, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x4004084}}, {{&(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001100)="c1e4df6709177c9fecdf5370eeaca941fdf00ccb6dd5fb5ea753efb3e62f15cb736a95576f1b49ed2f7058f2c8c08e40184c1cfaca2953150f2c56a32844798f3d51feaada59dac14ca30fd2976c4d488e7a172e6341c3788fec8c8ec6b21250f142e1d7650af9", 0x67}, {&(0x7f0000001180)="7c0576ce7a2ee3840a1da35bda01a4acc92509b09f403a5851b6f2eecb9259fb7f81e825f4c910635008c0fa617a756a6ecf966a4de96509fa5a4d27bdc222e22597fa37551dbbbf66afc78b9e9adbe84184fcf6b3fa8b11a01370ca9b6e7430a1b7c7fd114971a4e01b2e4c8580f6357e182e96cc4c9af11dcba1c177f8c694076815539f0705ac727971aa367d53d8ff74d62757ab7d4fcdd871121fa60064ad5ad60a348029d83c3ed437911907b7dee06ebd0f212a21ab9a0ba9414497f2c08ec1e9c4c23192762634c59e4a0e", 0xcf}, {&(0x7f0000001280)="74a68eaab987a8db4d1e01d05616a37648223a5f9e05196fca04f34239095ef4bd07629bac507b81d7b45dd02933f9e1d78111255a60", 0x36}, {&(0x7f00000012c0)="ca050e708c93009294bc9d723e6bdd3c673cdf94b755c99e7bd5956101a230a47c3cf02b84", 0x25}, {&(0x7f0000001300)="ca8a17dfc574243c40095ccbdca7cbe8466390d3a70685237afdec6a54d3ecaea4f324bee2196d5efc9a47d2781c751ef2c6a8233791b0f6381745a3d2faa0e506429837f2f64fcfa4a13bcfa1e421c0f3ba2a28dbb47dd14b74a2dec67241978158bd89d0507d443c5855ef90c045414144da9d11cf7b7ba4d6f0081468843ba4429bf2d99a169d3e17ddc496fd266724f81fa348261a9ee048c256a8e469c51d419eb7e99198", 0xa7}, {&(0x7f00000013c0)="fc38522d414c21de2720198a394fc5e6d4d4947ebf8da289fb437d6d228646a3df228d794da06749608bb91be857d312042319e7e010ed4d848ff0b8c6966eb7347ec87e5bc121d5d5ea8e3936078f7c4b0beb5a7d0e170a13e75fab7d897e3e88933a568469f5121892f7f4d76500b99949586b6d7efb9755d2b57e6b8f1d65aabce75949ba28d2d6a8c800bdc838fe3ff49b9d2525bd33000075ee849ec2cb71412253e2c6dad053fb88fbb649311f16a53d717a8b0edd1f34233502a48f0d9685045e6d78ec9e147cef7f1809e3d6343e3115bc3bf43bd0ec3d243f4517134b21aacb2f824deeb440d2f5c86323bf0d1242ae2bbc33709311c113c7db", 0xfe}, {&(0x7f00000014c0)="565e10f9bc6424474a2a630242b53b", 0xf}], 0x7, &(0x7f0000001580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0082712e0139c6cf865b2a52f20000021c00080000000100000402200000bcae7943b988a3e149358041021d3649c924cd3e4ea1a98900b75da4069880c08d5290529072f0401e71c19b1203320841c2039d7d08000000e111216ae587b726d84fcac80521ebf06d57204125b5c76aecad4619718f616ba6feb5690666644990adfe0a033d138483c697ca7f3280a4afde8e5b4feb4129557bb337903d94228fd80dc5ad593557", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5], 0x60, 0x4000}}, {{&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001780)="5db71d1c4ab136c4e525a63722c46d045f8eaef7646f1f775e996ec63ee5134fb8b7d6c9a0a87b1521ae179ba8a83e9a0a2ae2957d0845ad7e696c46696da0216074fba1062afa0c5d148c6e96598071f525419427d50c04cf2cbca851", 0x5d}, {&(0x7f0000001800)="5b6e53db4d6cc60b736868a89e95aa8a31f21841524b14e077eca8e7ccb94d3bdd3568df6fef462943ba26852355bc245ce3060b40d07bd62c1c7984f6d09f9ec7f4fcb4224a313c13b0e26ef0c512edc9a99db5aca90eb34cb1d34f4badcca150247e51c67253ab0e3af4ad202f113f6346314cb389f0c06984a70d471138b0edd7435eba87555845716645a53876e14d395f44a2aa35e342ba25f754251713e31f454980ccf1e1029dd4f6018cde43cf9eda70ff118c0617e1aea2ee6cf58d1b05cc1f71ef7efd9792bca3c8e37520e63dbb3436189419299e", 0xda}, {&(0x7f0000001900)="b28b15ce485bf852b9fc807e6aa79186af84b36c821fc7d08977e8c09de78137f97c3f7e0868efc0e4087c98e0edcf6f2c08e0e9b1cc63d50ad0eb53bd92ccabe04ae5dd072bdf45bbefe13beeda99e21829b92316b7563539b069dc1739e2c77d6d1dcff3e474f34b800449ae53ceaa8869b649bed8a35dec1fe1bb2ab6f95b7cfacbb3ddba9ca9aef9da43aa443dd7a0b62c75b2d3e0f466bbca54263bc323a1acd3b7f53960603f568180d2921fd8d3d409", 0xb3}, {&(0x7f00000019c0)="7da2a916754afb9b96e8dbcca2b7848947318021fc2858cecc", 0x19}, {&(0x7f0000001a00)="30a6d968aa8520c7457604407a8902679039c5cdfa6cac617eb630515adbe5c083780e52d57a32df1dae", 0x2a}, {&(0x7f0000001a40)="fc4586f198d196ab404784a5762035fa76c856b7bf7aa3022c01bb98df86e895acfe0de16a8a9e6a78074d5d0e67d50a45a4fddcce2dffcc5fe05b661606a62bb5837cc197bf7b6c0c5020f2996b593a75e97b550fbf9da8e78a696e4aa8344407823a8a2e", 0x65}], 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r9, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r10, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8d000000"], 0x98}}, {{&(0x7f0000001d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)="faf502cfc30ba5849b82b9d790e2140cdf32ddf20a9121c9e91cbc1ddae90165208fe8da450ffd29900a0098a24e5f9d056fe806f1589647f6c30a701574040de4b3101db0408ad3d091326832defc7d4bea8126e1ed75d4d7b414815fac6f353790d70db42af77d2ef8e3a67c43b322031c1cd104b532081074e787d540a472", 0x80}], 0x1, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}], 0x20, 0x48081}}], 0x5, 0x85) connect$can_j1939(r10, &(0x7f00000002c0)={0x1d, r11, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, 0x0, 0x0) r15 = accept4(r14, 0x0, 0x0, 0x80800) setsockopt$sock_int(r15, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r15, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/97, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfffffffffffffefd}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.952084975s ago: executing program 2 (id=6392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r3, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x9, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x21}}}}}, 0x30}}, 0x4800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r13}, 0x38) close(r12) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.687744935s ago: executing program 0 (id=6394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r2, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c9", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87b", 0x2}], 0x1}}], 0x2, 0x4c040) (async) sendmmsg$inet(r2, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c9", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87b", 0x2}], 0x1}}], 0x2, 0x4c040) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03e09d7e"], 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x40800) 4.617194822s ago: executing program 4 (id=6395): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x75ddbfdedb4202d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="c9f7b98600fc0400000000000019", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.219331686s ago: executing program 1 (id=6398): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x0, 0x20000000, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'\x00', &(0x7f0000000240)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x2, 0xffffffff}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, &(0x7f0000001cc0)) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'team_slave_0\x00', {0x4}, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x42}}], 0x60}, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x7}, @window={0x3, 0x5, 0x7}, @timestamp, @mss={0x2, 0xfff}], 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001080bbdbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="100a0500231a05000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x20001082) 3.070022999s ago: executing program 1 (id=6399): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x2010, r1, 0xa72dd000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="05005300010000000876e3e6f463000574ca46ea90db565d91e15f5641cf5cf17ce9380208bad78311e0e65774a87f7a5f6ed6d3a2cef5ed7dfd43ded49732ba6c2d134b8d5da1ca055ef69d7e995e87694c4fa93c825dc4db090151ccf4891cef1873bd273ffeffcfa3f2f67e5797102f86141b6c3afbce87f1759ed9259704d8a3deef1735f4e30d4d82a866acefc997524dafe21587e73aeba9cee1be81fef583e8b6b20e0d921855"], 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e00000000000000", 0x48}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0x0, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x40, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x110, 0x4}], 0x1b0}, 0x4000c010) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r11}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r11}, 0x38) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028000380200000800c00018006000100d103000010000780090001006c617374000000000400008014000000110007ba00000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mmap(&(0x7f00006f6000/0x4000)=nil, 0x4000, 0x5, 0x40010, r0, 0x7fc9e000) recvmmsg$unix(r1, &(0x7f0000001c00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/175, 0xaf}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000002c0)=""/63, 0x3f}, {&(0x7f0000000300)=""/149, 0x95}], 0x6}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/232, 0xe8}, {&(0x7f0000001600)=""/237, 0xed}], 0x4}}, {{&(0x7f0000001740), 0x6e, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/203, 0xcb}], 0x1, &(0x7f0000001900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/154, 0x9a}], 0x1, &(0x7f0000001b80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}], 0x4, 0x0, &(0x7f0000001d00)={0x0, 0x3938700}) 1.855661828s ago: executing program 4 (id=6400): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) select(0x40, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x7ff}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c815}, 0xc000) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010ee000400000000008bec9c26c5ce6b8ae900000000000000", @ANYRES32=0x0, @ANYBLOB="0d63050000000000200012800b00010067656e65766500001000028004000600060005004e230000"], 0x40}, 0x1, 0x0, 0x0, 0x20008090}, 0x48000) 1.749413912s ago: executing program 4 (id=6401): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000300)=0x4403, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2, 0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={r3, &(0x7f00000005c0)='!\x00', 0x115040, &(0x7f0000000600)={@_ha_fsid={[0x84e7, 0x7f]}, {0x5, 0x10, 0x401, 0xfffffffffffff6de}}, 0x8, &(0x7f0000000640), &(0x7f0000000680)=0x3}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b00000000000000050000", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}, {0x1, 0x3, 0xe, 0x4}, {0x2, 0x1, 0x4, 0x5}, {0x5, 0x1, 0x10, 0xc}, {0x5, 0x3, 0x5, 0x9}, {0x0, 0x3, 0x9, 0x5}], 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@ifindex, 0x2e, 0x1, 0xba22, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@ifindex, r5, 0x2, 0x8, 0x0, @void, @value, @void, @void, r6}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010033704039c06c45cd71f02df000000", @ANYRES32=r9, @ANYBLOB="0b1b0500000000001c0012800b00010062726964676500000c0002800500070040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r7, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r9, 0x1, 0xe9, 0x6, @local}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x56, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe9, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r9, @ANYRES32=r4, @ANYBLOB="1f00000020000000", @ANYRES32, @ANYBLOB="4795f9be834fecea01ab047f2a2123c527c11c7b8f4c15161a464c4f6d42fa68e57e1ffa2d37df985fffca19a605c780f9cd5ad40e3f2d436d2358d698095229c8634e90079ac3bfebe469d9bb33c9d9dd281c2c30f8f15490012b6dab54362bbd8a2d4bb55d3c499b2b01e21b147557ca44ed4f3cc27e814fdf914f76d46f842c8281ac684d0acee991d6656f476cb8f516272e", @ANYRES32=r10, @ANYRES64=r6], 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x0, 0x10, 0x7fffffff, 0x7, {{0x20, 0x4, 0x2, 0x8, 0x80, 0x65, 0x0, 0x9f, 0x29, 0x0, @empty, @multicast2, {[@generic={0x94, 0xc, "cc9c7b4e0be98a3d809d"}, @end, @timestamp_addr={0x44, 0x14, 0x73, 0x1, 0x0, [{@private=0xa010100, 0x1d5}, {@remote, 0x81}]}, @ssrr={0x89, 0x13, 0xe1, [@multicast1, @multicast2, @local, @loopback]}, @end, @timestamp_addr={0x44, 0x2c, 0x65, 0x1, 0x8, [{@broadcast, 0x6}, {@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x4}, {@multicast1, 0x5}, {@remote, 0xffffffff}]}, @lsrr={0x83, 0x7, 0x40, [@rand_addr=0x64010101]}, @end, @noop]}}}}}) sendmsg$nl_route_sched(r12, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getchain={0x3c, 0x66, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0xffff, 0x6}, {0xfff2, 0x9}, {0x4}}, [{0x8}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa804}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r15, r14}, 0xc) 1.746669818s ago: executing program 1 (id=6402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x15, 0x1, 0x80, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000480)={0x1}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1830000001000000000000000300000095f1600000000000b21d88adb01b6feec7ad94af1b3cb1a4f79c1f14c8c444393cb5aee4052c73bba2028263d1f290113a6ba4223d3b04b86cc3925b8e6356b8e282"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe3a) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x882100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x5, 0xfffffffe, 0x2, 0x4, 0x7}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {}, {0xfffd, 0xb}, {0xffff, 0xcb4fd65fc56e3e7a}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200040a0}, 0xc040) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd84, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 1.743585951s ago: executing program 0 (id=6403): sendmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x3, 0x4, "0564958cad15047e52111e34118d161c902af76a1d890b9f0350e1133dc3395babd5423e800ec743a5128084e1d80ad0fae1cf25856ce28fe28eb5ba89a662", 0x7}, 0x80, 0x0}}], 0x1, 0x20000010) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[], 0x6) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000001900)={{r4}, "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"}) r7 = accept4$tipc(r4, &(0x7f0000000140)=@name, &(0x7f0000000200)=0x10, 0x80000) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000280)={{r7}, 0x3, &(0x7f0000000240)=[0x7fff, 0x5, 0x1], 0x7}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1000}, 0x28) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r8, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6008045) 1.742326198s ago: executing program 3 (id=6404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x4046013, r3, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r4, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r3, 0x12574000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="09000000170000000a0000004000000042000000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) 1.669145583s ago: executing program 2 (id=6405): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000002"], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r3, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) listen(r3, 0x0) close(r4) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, 0x0, &(0x7f0000000180)) connect$pppl2tp(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x3, 0x2, {0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x32) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="ee", 0x1}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000280)='l', 0x1}], 0x1) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r9 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r8, &(0x7f00000001c0)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010002}}}}}}, 0x2a) (rerun: 32) 1.438892003s ago: executing program 2 (id=6406): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547e0500dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0x773, 0x4) r3 = socket(0x18, 0x80805, 0x559) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x70, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_EXPR={0x54, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xe7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x54}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xbf889e185c695dd1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xa8}]}}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x314, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x1a0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}]}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb7ab}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x444}, 0x1, 0x0, 0x0, 0x804}, 0x4000010) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e1e, 0x3, 'lc\x00', 0x15, 0xa7e, 0x13}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x800, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x1, 0x5, 0x0, 0x0, 0x5, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40085) 1.370817681s ago: executing program 1 (id=6407): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1003, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async, rerun: 64) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r1, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) (rerun: 32) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x40a0, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 1.225547048s ago: executing program 2 (id=6408): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x269}, &(0x7f00000000c0)=0x8) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0x6, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x42b7, 0x8, 0x7}, &(0x7f00000001c0)=0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="080010"], 0x34}}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYRES16=r5, @ANYBLOB="040028bd7000fcdbdf3c78f585f0d70f290b4f807a00000008000100630000005c0700b42bc6da3d05321f739b"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040044) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x8c, "dbfab4a811311b8c6761c17630ad06446cf0ada9361a28e66af9f8a58c40b4b0da90f79e2000ca106f7139bced57ce2ef84c925c3ddb12c606e01c1a78a9b6eab686263637d04e40f81d15e577e1609b0f5b250548d1bef94bb224e0769aab50a2477edcbe06ef9668d3332e28afdc740fe68a9932a560f8cc7081af8074b6ae0b6900a807f4fa9fd0702d97"}, &(0x7f0000000440)=0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r11) 1.089741355s ago: executing program 1 (id=6409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19e9b5381791cbf0ceb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c008fc6da4fb2e98e5083aa3c0ad0d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000680)={{r0, &(0x7f0000000140)=',\x00', 0x210000, &(0x7f0000000180)={@_ha_fsid={[0x6, 0xffffff96]}, {0x7, 0x0, 0x0, 0x200}}, 0x8, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x4}, {[0xeb, 0x200, 0x5, 0x200]}, 0x3, 0x85, &(0x7f00000005c0)=""/133}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000001b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b40)={&(0x7f00000007c0)={0xbc, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x93}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004044}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001fffffe100004000632f77fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800ffd018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f34001280200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff10000000000001006c6173740000000008000340000001", @ANYBLOB="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"], 0xc0}}, 0x20050800) 878.413888ms ago: executing program 4 (id=6410): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000080000000d0000000000010801000000002e3000305f2e00901d3c4b388a716d95c2901252e2a3abe9ec9953ed39d39d7d5507c8e57f8bb08d36a85c5e1b90e47631d8a72b1c117d7d4901884da2cb39dd6abae4fa7e112358baaeb3295c5136f44b5b232f2e1564ff1e401ed08afd665dada5b8b1067f55093dd83d127a343ed241b910f2f9328fc5c26962b045849097cab34d461000652db038f1cbbd012446b27eb197b442b20267c88acef54f0fc7425e"], &(0x7f00000001c0)=""/139, 0x2c, 0x8b, 0x0, 0x3}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f0000000400)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x808001}}], 0x68}, 0x4008804) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="3282db78e0ea55c5", 0x8}], 0x1}, 0x8400) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000780)="f6982ca1dbf1f6e0810b87fd6160920fe5b54768cef8a7ca2009ec1e24557ffa8565cbbe141a0409826812e1505e15f3ff47602f0b773a39a37e80389c2226c3bd5b0ba1a2d7148a44056df0e1c40b69c562bd94b5490e7eca3c07a2f31f2422840ad3ed2d88b7f32ce8dc16c626d89b11ad", 0x72}, {&(0x7f0000003ac0)="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", 0x5ac}], 0x2}, 0x0) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x1000, @local, 0x8}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001e80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @loopback, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="7e3d64e5660436", 0x7}], 0x1}}], 0x1, 0x40000) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x10, 0x1, 0x5}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r8, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 757.687542ms ago: executing program 2 (id=6411): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1e, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xe, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x254b41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x3d, 0x0, "94713ce1a606754bab1cb61212bb07a2d70004000000000000071f0d1aadd97b9640d9a0cd7ba71a5e9aec7f03d4406a7710c4a1264cf8960d7669bcd7589d209bc45b4064028eb3faff7fb125736e00"}, 0x130) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c0001000308010802000000060015"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000180)=r8) r11 = accept$packet(0xffffffffffffffff, 0x0, 0x0) sendto$packet(r11, 0x0, 0x0, 0x20000040, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x44f}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 601.258572ms ago: executing program 0 (id=6412): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x39}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000240)={r0, &(0x7f0000000140)='wlan1\x00', 0x58340, &(0x7f0000000180)={@_ha_fsid={[0xfff, 0x9]}, {0x40, 0x2, 0xfffffffe, 0x1ff}}, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0xf}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r3, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x6ce4, 0x2, 0x5, 0xf2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000400)={0x438, 0x3f4, 0x108, 0x70bd2d, 0x25dfdbff, {0x5, 0x1, 0x21, [0xa, 0xb, 0x0, 0x7, 0x8001, 0x1ff, 0x8, 0x8, 0x2, 0xffffffff, 0x9, 0x467, 0x3, 0x3, 0x1000, 0xfffffc65, 0x195f, 0x9, 0x7f, 0x8, 0x93, 0x8001, 0xa, 0x0, 0x3, 0x8, 0xad, 0x9, 0x7, 0x7, 0x1eac, 0x7, 0xb6, 0xffff0934, 0x6, 0x7fffffff, 0x2, 0x590, 0x2, 0x4, 0x2, 0x7, 0x3ff, 0x7f, 0x60000000, 0x1, 0x4fc7, 0x1000, 0xd, 0x6, 0x0, 0x1513, 0x6e4, 0x9, 0x7f, 0x8, 0x7, 0x0, 0x0, 0xffff, 0xfffffff8, 0x200, 0x0, 0x8], [0x2, 0x9, 0xfffffffd, 0x5, 0x1, 0x2, 0x4, 0x154f, 0x1, 0xec, 0x0, 0xfffff000, 0xa8d, 0x0, 0x0, 0x5, 0x7f, 0x0, 0x101, 0x0, 0x0, 0x5, 0x37, 0x2, 0x0, 0x3, 0xb, 0xfffffe00, 0x8, 0x4, 0x4, 0x0, 0x200, 0x9, 0x5, 0x7, 0xd6, 0x8, 0x8a93, 0x7ff, 0x0, 0xffffffff, 0x2, 0x2, 0x65, 0xe6, 0xf, 0x8, 0x80000000, 0x0, 0x3, 0x9, 0x4, 0x7, 0xe7, 0x7fffffff, 0xffffffff, 0xfffffffa, 0x4, 0x3, 0x2db, 0x8, 0x5, 0x8], [0x2, 0x8, 0xff, 0x0, 0x8c, 0x200, 0x8001, 0x0, 0x3, 0x7, 0x4, 0x2, 0xffffffff, 0x5, 0x8, 0x2, 0x4, 0x0, 0x1ff, 0x8, 0x8, 0x3564, 0xf0a, 0x6, 0x2, 0x34, 0xfffffff9, 0x9, 0x1ff, 0x2, 0x7, 0x9, 0x9, 0x4, 0xb004, 0x1, 0x5, 0x1000, 0x7fffffff, 0x9, 0x6, 0x2, 0x7, 0xdb1e, 0x7ff, 0x2, 0xcc77, 0x3, 0x800, 0x7, 0x400, 0x81, 0x5, 0x9, 0x400, 0x0, 0x9, 0x8, 0x69b, 0x3, 0x401, 0xe, 0x7fffffff, 0xc00], [0x3, 0xd2, 0xffff, 0x6, 0x4, 0x3, 0xfffffffa, 0x7fffffff, 0x8, 0x7, 0x7, 0x1, 0x7, 0x1, 0x1, 0x7, 0xe38, 0x0, 0x800, 0x9, 0x200, 0xd, 0x10, 0x0, 0x7, 0x101, 0x5, 0x5, 0xfdaf, 0x6, 0x3, 0x6, 0x8, 0x0, 0x6, 0x6c, 0x2, 0x3, 0xe, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x9, 0x0, 0x3, 0x6, 0x7, 0x3, 0x83c, 0x6, 0x8, 0x2, 0x1, 0x1, 0x0, 0x1, 0x7ff, 0x9, 0x0, 0x2, 0x200], 0x16, ['wlan1\x00', 'TIPC\x00', 'wlan1\x00', 'TIPC\x00']}, ["", "", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x8811}, 0x40) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) (async, rerun: 32) r4 = gettid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000900)=r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000940)=""/25, &(0x7f0000000980)=0x19) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0xd4d7e000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r6, 0x28, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfbcd, 0x39}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x41) (async) ioctl$SIOCGETSGCNT(r2, 0x89e1, &(0x7f0000000b00)={@empty, @empty}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000bc0)={'ip6gre0\x00', &(0x7f0000000b40)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0xd, 0x9, 0x6, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x20, 0x7, 0x9, 0x6}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r2, r7, 0x25, 0x0, @val=@perf_event={0x385}}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r2, 0x0, 0x0, 0xa2, &(0x7f0000000c40), &(0x7f0000000c80)=""/162, 0x5, 0x0, 0x2a, 0x6f, &(0x7f0000000d40)="9f004ae80fd500c8e170e18d25f9e3b9837cb22f14678352738092d5a326a602b6aae1d75723452a0209", &(0x7f0000000d80)="d1d0a8c7fd940add9f380b06baa97de6c5277d08f80508a82b5de9ba37d8e6a8dc893d89deb55c1788076d5548deef3ec220bbdddfc95e8e9bc6271272537b5e3e1651a255dd6ea2804ca7df51eca137c5449b39c5860d20be4560a3df48ad711402096aca69d818fc7fe33fd3cf39", 0x0, 0x0, 0x4}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x40, 0x33}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc001) (async) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$XFS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000fc0)) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000001000)={'veth0_to_batadv\x00'}) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000001040)) (async, rerun: 64) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001240)={&(0x7f0000001140), 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c87}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24044041}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000001280)={'pimreg1\x00', 0x3}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000012c0)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000078c0)=[{{&(0x7f0000001340)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000013c0)=""/199, 0xc7}, {&(0x7f00000014c0)=""/33, 0x21}, {&(0x7f0000001500)=""/38, 0x26}, {&(0x7f0000001540)=""/183, 0xb7}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/76, 0x4c}, {&(0x7f0000002680)}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/14, 0xe}, {&(0x7f0000002780)=""/58, 0x3a}], 0x2, &(0x7f0000002800)=""/17, 0x11}, 0x9}, {{&(0x7f0000002840)=@nfc, 0x80, &(0x7f0000002b40)=[{&(0x7f00000028c0)=""/27, 0x1b}, {&(0x7f0000002900)=""/99, 0x63}, {&(0x7f0000002980)=""/172, 0xac}, {&(0x7f0000002a40)=""/209, 0xd1}], 0x4, &(0x7f0000002b80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c00)=""/191, 0xbf}, {&(0x7f0000003cc0)=""/176, 0xb0}, {&(0x7f0000003d80)=""/91, 0x5b}, {&(0x7f0000003e00)=""/229, 0xe5}], 0x4, &(0x7f0000003f40)=""/106, 0x6a}, 0x8}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003fc0)=""/27, 0x1b}, {&(0x7f0000004000)=""/105, 0x69}, {&(0x7f0000004080)=""/100, 0x64}, {&(0x7f0000004100)=""/175, 0xaf}, {&(0x7f00000041c0)=""/159, 0x9f}, {&(0x7f0000004280)=""/157, 0x9d}], 0x6, &(0x7f00000043c0)=""/43, 0x2b}}, {{&(0x7f0000004400)=@generic, 0x80, &(0x7f0000007840)=[{&(0x7f0000004480)=""/253, 0xfd}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/10, 0xa}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f00000065c0)=""/246, 0xf6}, {&(0x7f00000066c0)=""/169, 0xa9}, {&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000007780)=""/130, 0x82}], 0x8}, 0xfff}], 0x6, 0x0, &(0x7f0000007a40)) 513.480998ms ago: executing program 2 (id=6413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c060}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 353.924257ms ago: executing program 1 (id=6414): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@gettaction={0x4c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@gettaction={0x4c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) write(0xffffffffffffffff, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000030701010000000000000000000000070c000640000000000000000ff4ff0440000000af666fb90073797a300000000008000540000000013c000780080002400000000003fd01400000000d0800014000000002080001400000000908000240000007b408000140000007ff08000240000000040c000340000000000000ffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000030701010000000000000000000000070c000640000000000000000ff4ff0440000000af666fb90073797a300000000008000540000000013c000780080002400000000003fd01400000000d0800014000000002080001400000000908000240000007b408000140000007ff08000240000000040c000340000000000000ffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bond0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000013c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffffe00000010c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000010000800154000000002a526725bf1aad8c15d5f80089f102c7aeebebf24b10ed4df159d1c9cbc95f1ae9ab4f4edfa23"], 0x9c}}, 0x0) 277.845636ms ago: executing program 0 (id=6415): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0x20a, 0x6c0b, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 197.547097ms ago: executing program 4 (id=6416): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)="2a95", 0x2}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000980)="365e371f", 0x4}], 0x1}}], 0x2, 0x5) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r6, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) recvmmsg(r5, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10023, 0x0) shutdown(r0, 0x1) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@acquire={0x178, 0x17, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100}, @in6=@private2, {@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {0xffff}, {0x80000000}, 0x8, 0xfffffffd, 0x2}, 0x9}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x4d5, 0xff}, 0xa, @in6=@mcast2, 0x3505, 0x1, 0x0, 0xac, 0x3, 0x1, 0xc}]}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}]}, 0x178}}, 0x40090) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r10}, &(0x7f0000000100)=0x8) 107.070184ms ago: executing program 3 (id=6417): r0 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r1 = accept$packet(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000063f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000001000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003b40)={'ip_vti0\x00', &(0x7f0000003ac0)={'sit0\x00', 0x0, 0x700, 0x80, 0xfff, 0x80, {{0x16, 0x4, 0x2, 0x0, 0x58, 0x66, 0x0, 0xb9, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x3a, [@multicast1, @empty, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x5d, 0x0, 0x0, [0x800]}, @rr={0x7, 0x7, 0x37, [@dev={0xac, 0x14, 0x14, 0x39}]}, @generic={0x88, 0x12, "cd6fadc038d3da0c72484c1fe6a25d00"}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003e40)={r2, 0xe0, &(0x7f0000003d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003b80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000003bc0)=[0x0, 0x0, 0x0], &(0x7f0000003c00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000003c40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000003c80), &(0x7f0000003cc0), 0x8, 0x2, 0x8, 0x8, &(0x7f0000003d00)}}, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000000140)="5261c692fa5b359e5870dc70a6b75acd99a5635a5cc85d8182f672de17404256f0f18f79bd1ece96b3cb3e2b", 0x2c}, {&(0x7f0000000240)="34345c9474c12e403f11df2a27abbd01cf4fbe30f6c3537e52e7d54ec9", 0x1d}, {&(0x7f0000000500)="d1830f00d25a7042fb66758943a0d78e31d251b6b69e4ba30f8edc809bb34a3cf7843ea5d838575408f0d7d0429075a339814e63fc3d75a798055537fe58bec65e090fbbe8328f5b67461d2591b475cf095ab3d5b619af5f4bef92cfc6238c4c3216542c3dd21b12a73e31f449686eb0fa7c271aa444f771e79622d225bd6764c4cd0f19", 0x84}, {&(0x7f0000000700)="3e0a6c9a63d8fab32f7409a179824e5d11eb421c5d683c94ca54fa443e0c1e660e047c8a703554916cb2adc7444cf5e5ea3c12b431a8c2d35c4304596ac718f1492eaf98138abffe066ce30ef76adb56c6377d5080b51840c937f3e63c1d7c9a25a62bdca5362961e0961d7ede1edae86e6927f63e7daa9de4ca813e3f3fbc65b3fc1fe3752a2e262fcef35f38b4142be85c069ec2efa72246acd3d913e4", 0x9e}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f0000001780)="72ad6a53797cda2fe978369d6353d1028c8eafe90bc866e8adf9255d5540e9f4e555159896ba97b6b0a241b7c228413d791b7ec16b81c91071a3a8327989ade4dcc985906b7cb506ca26adadf829aac0ead27ad7da714894fcc6b8e6781ed584654e714b2daa496ba6da98e577c0bdf340b5560ffce294f325b1edb20d185bbb574f134789f6ea85c59874665c8dbabcca54f7794c56f49f7aaa14e8edb39bb7db0179fa35b535700624a70ad9a28512752be8f4ecae32ec76dfca7dbdefccbe26310fa188740518e458c9c47e447b24eb89323032d7c6eca61be52d20ad23cc87654077cc1b176986329ad467e9bc183ea6539a4fed7c662127ce90970fe92be420b4a48087141ae8f4d7d76ac095eb44aa2abbd32f951af9216c1dda80d06b2833b98c8e42f1c7c84316a33c741ad1634e7c0bd71464359a7b237ff601e4a7f1753b623696afef403f97086a2e9ed9cc39d023535a23d74d77fa87c1dce7a1bc089f17bf11000d85fd87840d3ec3eb891eba043725591c5d9f6bc96362bb868a2cd30e8debcf6618482ba40481b329da72314c5cb833df6020dae771d1d47da9c5aecc0f9616c3d3227e5a851bc4e1394f5de0b22bb8d5879d386c8a573ba3622fefcc2f210d86d01932faa6e8ecb48b509674d79869943297df9f658cae842bd306c20145053eea3add5bf5bc777e0750a6ac44cf71419569f1981681ed016a10bfdb10d40098648ecb6990b7f711ceeb4550afe53cf8da0bfa9904319a33db587f99442b0a5d04e1030d2240fa322f158e9f4f675b71b5d566b36b6fc88412496bc1c56ad948fed2a86b50309cd6abfde337b7517838e20ab2edc2ffac1186378d49a02d8a0d5083145dda92df742f6cf1abe026f9ad07aa5bdcc4f633a9419eb751becfdb0abe9e562ef1a49f34a109ed3e8f57fc400ac17aa52eb26590f35f039cc811bffd050dced3111b91bf4f249c893d582a13898b08f7785ba02a2faa9a8a8afc975eaf1f83af2d484a7b59b93eebafc4153238bdcb401301a343049f971f6ac21e2f2da6fd3c2d1f4978d9224d5219f6e57fe9fe23cb0e9074537f804adb62793f78653c73cb3a9c94632c5304ab8a42c176772e0b88595d761d43dd8dcdc4b4fd2151a3cf79dd805585bd0e88b1700b17b178ea0e23ba450d8298708c5abb67d1e1a34faacd9c2788072a65e4bbaf41d0fa70cd633f7a3a5b80f65fa163becb6b612dbae21dae57eaf0bbb1f260783648832ebca1eedeabfd07a7e9f880edd2edc2f11d4e9750dfc896f7bdaa8e6523047686e21e4d2fd64c91aadc6b23d53e463d7fa1c9e5d3cd8b32c9c38357f7ebe90c7400948fb0f9bd4ec8ef3c5c9a3e65b010100f16353b472948eaafd2b0e418f4fe1be8e611e8ced4a82cc7cbd77f2a2e7a6362d0c1c62b7db635ebf3d89ea17e4f088d6e0e029df33e87ef5ce830b9b8a26859a9e6d271aea2dc60fd071a4fc7159ea8fe22763ff7921c2034cd97c99290aa29b1704512026dd95165652e492fb8304334058b058159c3d18af7754a02ec554503e031c314d23e1dd0292ca8664a95e8c14f8a28f317ea41f490afd934893b37f3f6724c296c3baf5049fbc4466c2753e64e488bc6483a4a378c83934d6431c9c32fd8dd2d1d368847e74943a29857d0b9071863dadf637f70f83f6c03482e4e6f7eccacf78e8d1323754e772947328f8be480de1169570d248482f93990895d6f218f6decbaba9a1c8293ec6d5b6bedd30d69e588c8ff3b6ea18befd7935549da8bb11d70dd966b5622d3bf35eff509918227561fddbad2b304979ba78c1edb9f8aa0c2ec17db112db413434344ab5fd10586fca1593d67ebf99e79fee6984dd5476cf299b0d008cff8e3ca01505cea3db3148917a105f9bc27845d76d6b56d70544e04dea4a615ea80dcf534010f205394558443941d1a7f4a69a50ea2be60225de3ed55461b96cb375226516395c390516d8f8f07f9097405471c15ea3ca03067a4ce48d5d1ecba42a4340c37735584093c5a759da99043afb92be7f242246de18f1f8e40c41e2eb1c93addd0ab6dc9a9da4da2562ff1d1eee1afa4e3294f3de3cf719ac25cb8865acc0527f631783c1b1f9715d5b23a88ee7055dd8aa9033eb3d6ffdc46728ea191a50275bab1a279b0d742c84c49b9409569103fd6b9dadd5e0e5920e36111c99feda410a721ad8b9848ee8adc5337ab6c1ac3535453c1940d4cb0458c080f17d01293771acf7f5fbe16409ac5779cdf4e23114565b22dac04df92404c8cf8d15ac902ad7e64247c72f14143669303fe1b3a94979c5ab9072605032720f51a219a9931baad4bbc83999dda80726650636300e4b7fc8d4734d6646ffc68585f6fa34e77d4452d70a6bc6c25280ca65be3308ca621627c7736b6cd502db4ba7aba70581f767dda0374f80a83377881b8aede8bfec419079f643bf503b9de06803acdb2281ccb37109e866f96b9d50d934409ee196a59c0f4a715f84cb44b5efa22d23212ee345b620a5716b0df40c5e287e1fea84ba4082021455cced0565f6c2f8e0c9258716545bf5d3d1fc377f085954b982734990591ce1b0534a845766fb93f58871ebf4127cffef2d47845c776b1a3c0e926cd63a90a11dc861e3031cebfb20e58013a6e44b0d45afe6ffa1e3ffd69f6708fcb5a03af1c35de591e77c1b8115e7dd942fb2bbe8e23a75c6587e114c013981753fa2104ef8b368a517b3649472d023413e6cafb48607b1101621486f301c54d8ab39ec4f4c14bc9ce2291dbbf25c1a83083d00b8b3a10e44acf3ac5241567c234defd6157e65fc9530e4df00005dd6159dc98f1d2ca850ab3e77b8582e9c712586c67784255b86b8ac1c7d6e93efb51ddae44fde3706ee95ddca2a9dbfd19053059c9449a76a4f0a35ef494501bdb78f712d1cafb92ff250047315b113eb17682c1a3298eced8e21f3077e06251bf1e661141acedb21b0a5a80ff5e2a953512c8c27fdaa5fdcf1bead3690856a535a4d76fdc5ae153a4d268ea726428c34d2fba154ba3be2e7be2d00be8dfeb0d0618b079e69bf70abfbaac56222dd3d5b2d12c0490390a3e693364759fb126538bb3e6d35ae01a3025fc02ed5a856c587367e74093cedadaa0c89dfa336f4ff6af44b1ae2f11b63604b15dd120ad1654bd5d02ea8af7118f6230d965f0d45f55d0140ef16196fe3266d230a372b0f0e5bcd9efa0116f5641c7ee6312571fd3f9be0d3fc81224e5687dc412e6a5f763905f5dcd54e4faca349d23a4d8971302fb7396df34cdc14e1dae1c725c0dd3204edff48096760cc0ff4cde2c8082fe0d395a7dad926029982588aeefb37480ce7cbb19de5ab957a53966666955a2d1903c836a6e2bccd6f156dd0fe1cd5b4a06fef1daacf89122b6b024fa32d51a0170bb1bbf95ffd4a9e1def1f3d355a134771342a01d424701a02cb204311c1062865af4711354d38e2bdfb6aefbdb264271107a581690dd6bbca04f562ed0ad0d93c559aed62bf16829d94a9be6ddf89c65bf867b9eb45e4b46949023291e89320b932dff582ea8181ab8ebc7b8ba7ab1e7f76d240f2ff5512135bdb74d67ecb9def319cfc0b99b5acfd253c95078994a20994648c1de8d07e530314be7a4c1651d243890e09e5f7035db18e8f2de9dbb2969bda874dd9525a7aee7012bbf4c0ed8fdb038d1188848d7450a00c6a70604e8d54bb2e9150ba37f50901270b78a5ebfc9cd99c723589cc71323c4430cfe7ecea942b3c3376f674d9646806dd562ab65e277e8ec7ec28cb5b6d5254263302b3f22329d8139286277b9c011234a3604853731a8b25fee35b4bb370d85307b3af7bb6dbc33922f788cfafaa18264e37ce8a7b452c8f3eabfbf6173b740a035d5d1e1f513c322ceaf96a4bb1aa6cfbce3a96cd837f4854f5556064e3d794c4c5c07be655a04e967b35683ec503c586ca00473ab53f7690f10814731bfa5a8ec5911525b001053877635709af0c384e7e841cfddf8f7f1ef433ee9e28f1d0751d7bada813a7a6b9570ff970cf24ee3b2fc11f97dcb9ad67394570e8018a49d703df394d69fd9e387de8a9e346d131dc6dafda6e38b7bfc39f00bfc15a3f815afedee1e279bedac1e23d06437c79dda1f007a424022e891f9bd85fbb2b9dd7ba982fa45d7f77e638a828b029402a6c5623e65999fdf30e262c087ff67b0c598ca0481415010036bb6936f1b22a06228010b767a26dbe7006920cf6909db6fddaeea7bda82614a5916a16fe35ca58d5ba1a591eda08a1397cbaf8d88988e70480334f7eb0cf5793c87f081080b7f5989aed2b7fc2f78afd77792930d32e72c629bdeb17fcbc1e4d4d5ccb1d19d609052b5801e6b00312c01bcb0507f0b80cebc204da8c74b7bac563d36d8ce0d0bada73a5d6be7dada692383b029ea5fc5adc8949af47e1e8cfb902795c914c6ce7f91564e300c649659753d57b0de6784e5ad68e77344efa46908041e203d48fd47ba7bcc1226ae073a4d1c53ffe94d29a53b96486a37ebb5ff7eb6a06b6cfdde782989817fab7ea81007ac61c896035aa9acc94a14b04c89f53b85e2111812d8684ff789ce4eda18335b077da792df65ac60a6d0b5b92ee9135768b7b615ea77b1d18914ccf2c26edf0ce6cb5745099f08bd87e1c8c38b22c33bfa43694e99bcd8a64c886c2894be5467713bacb91590b0d5c3a58e25b8630bde50038d8eaeb54c0fdf848666d193b5ce94942e2489de00c5288761147fc354fab152550b9ab1508ba0cab980fe3f01fcab933c260b8657fa04421bd142dec3d0d6da34153b9b1d1a69990e9fd215f60ba0a9ddfbd46c766cea68a08b0d75eae0eb72c74bce2b08cd96a9b7503ce795594c420802cd6504989235a793612972cfbe1beb0bdc9b0c5837a742e703858b73120dafec85a17be9677c16564b578c97e63700fc0317777086c7f1f73cc7862e2b91de27bb0bed173ce5a8f5eac8c4517fd8e2de597d3fcc612013f5db167a0c14edb269cfc7f25a548459a3ea41d1698f72ceeb47af646bfcec7a68a3bb0426fc8243d1ff5e55a3abcdcabc3897290bfae056ce5a77b8b2e03a1fb401a06475ff1f6d96691d92fbfa5a5e08c71bedcb6f03788ac9163aa26bb974029e925a20aa3edaee9a0bfa53bf97b6c576777b88ec2d9b47a6650f05ccbb3e4b4af1b63b636ae867fd67feb8f81a18d961b6eacbd8517a7b5b65be2cec09d4a0bd3976a6913bf1d2cc9de7291a3f7102cce93dd28f2410150d7a0d3ff5fe1d826eca4df680e8064bd08964a1f32c266073ff16b209dc2275ba0433d23897897aeca4cdc9ee97156781e9c4e058f90ce19ca6d08a4d4ccf272403c668e44e0c57fd2416e1a57ec22f08ffb8d614cb58ffaadb9431ad805aaf4748f17bdcd330d84cfb487ecb5808d145f15b2eb5109dc7f198f78a090d9a55a967ad4c2d7a1ca5d56cf23188a273363406d85e8295f34e9e14f7cc2cb635570d1bef1c0fc64d2076a728d397c6488129d2d3c183347dff2562ce5463138d74aa73b247dc2bc04a84cbdeecc399e6b1d7573ad2ab5be1f7ae55d0073ff0f8961c4977de3c7e81e96d17857e5f067603595c2be7b34e1d5464113327f9e6478c831c2887f4d3c06f41cde5e966cc4b1b9c6575118110cf5f60319a24d1b4fe41e7eea4cd3a01ccf8766a0ab65be6d7f6e131711d3bd82396f0d685b83cb5e2e4938ab65a890f4948c831ff1dcc564e9c8d299b589e8be26d8170f4d5fc918a9ecb1558f07d56b35c84354ea73e5c6cdf51c3", 0x1000}, {&(0x7f0000002780)="f3297b30d8922eb5cb540be8bd61e2f5a708d98e78c7231ce7355661977eea31d670076d99be720a6b81cdb374d33a7f968acf6419200bbade20051e007643a0696a38614810b74565b28f308d3dd0adfd9c20bb2a89cad6a6e58cd3ff175d15a6e8f9e1aed6d9cd1a6840298f091a0dcb0fe29713cbd027ac8662b4af4471389b8649045be3f482d7903f1994fe96a12851bce6be31de66d3d4e2977e6fe71eaa9936e7bc55d2160113f281ab6b41cdbf5c1a51176dfd8eb91bfca9e5a79ce852db2eaf6135e308d561335ba05e5e270f79e0cf667d16f42e88ae817ab3d199fb11163206048f42dd6c5c179a689157bb0d5038ce6774", 0xf7}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="f3f71620e520bb55498eda09fbf42c305629e89840aacbb29f8fca025144e7758d1ad27fecd556a11489b6a25425a699425e183f5043b8c87aa22c28b6fe33b4d3ff48355b17390fdd1f20631740edd890fa3bbe6801fe3ae4350f83054bf01c1b36ae21b8303b9e14b98c7c0e6559c1f69ac79a844455fcdce49575b4fb84a5aae04f96de3cfe7fded9f790e0034f62c519a4430b10bc5d9d2aa16ece4c8ddcd4c55dc4228d1c51c846bd9c8b6e84d06bb5c7c6c498e054add196e264d46e42315181c03b3ce1de585c73e3f94a343ab8a4d13a1e997db6bb4eb4cab3cc661d64d0b72494c96143ce7a3ca0842be171f1", 0xf1}, {&(0x7f0000003980)="8bacbfba9ec59cc50066256235b355c3f7a1e6c043ebe32c2555cedc201b1d14c1cb9d04cf9c2feec102f9aed9cb871ce3c2fd725c67f4177f6af62fc67e511907", 0x41}], 0xa, &(0x7f0000003e80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x60}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @dev={0xac, 0x14, 0x14, 0x30}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc3}}], 0xc0}, 0x40000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) getsockname$packet(r1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6ec}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x4010) sendto$inet6(r10, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0xfffffffffffffee9) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25077c000008000180d8ba7c4308000380040008"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1=0xe00005a8}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000000000000001"], 0x50}, 0x0) 38.092334ms ago: executing program 0 (id=6418): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000004000030000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x800, 0x0) socket$alg(0x26, 0x5, 0x0) unshare(0xe060400) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x10, 0xffffffffffffffff, 0x91c6b000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="100000fd0002e90e00300bc4090768122d0007000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) read(r2, &(0x7f0000000140)=""/87, 0x57) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000259c0)=ANY=[], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @private1, 0x1e}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r4, 0xffff, 0x2d8dd698, 0x9}) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f00000005c0)=0x1000002, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x0, 0x0, &(0x7f00000004c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 0 (id=6419): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x24048090) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRES64=r3, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000540)=ANY=[@ANYBLOB='b *'], 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYRESDEC=r6], 0x20}}, 0x4000011) (async) r10 = socket$netlink(0x10, 0x3, 0x13) socket(0x2, 0x80805, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x88, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x0, 0x2, 0x34}, 0x2c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, 0x0, 0x400c000) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.3.5587'. [ 459.408731][T26453] netlink: 'syz.3.5587': attribute type 11 has an invalid length. [ 459.429721][T26453] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5587'. [ 459.450085][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5587'. [ 459.468074][T26453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5587'. [ 459.586125][T26470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5596'. [ 459.608927][T26470] xt_TCPMSS: Only works on TCP SYN packets [ 459.692581][T26477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5595'. [ 459.717479][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.729638][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.739133][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.749665][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.759924][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.781852][T26470] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 459.794398][T26470] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 459.801822][T26470] bridge0: port 3(netdevsim1) entered disabled state [ 459.812648][T26470] bridge_slave_1: left allmulticast mode [ 459.830042][T26470] bridge_slave_1: left promiscuous mode [ 459.840311][T26470] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.849825][T26476] x_tables: duplicate underflow at hook 2 [ 459.883533][T26487] netlink: 'syz.1.5600': attribute type 6 has an invalid length. [ 459.959060][T17582] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.976464][T26493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5602'. [ 459.997237][T26493] syzkaller0: entered promiscuous mode [ 460.002858][T26493] syzkaller0: entered allmulticast mode [ 460.032922][T17582] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.091524][T17582] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.149947][T17582] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.248456][T26480] xfrm0 speed is unknown, defaulting to 1000 [ 460.261223][T26511] syzkaller0: entered promiscuous mode [ 460.272887][T26511] syzkaller0: entered allmulticast mode [ 460.296373][T26516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 460.375245][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 460.408864][T17582] lo: left allmulticast mode [ 460.493059][T17582] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 460.504955][T17582] ip6gre1 (unregistering): left promiscuous mode [ 460.609359][T17582] bond4 (unregistering): (slave gretap1): Releasing active interface [ 460.673438][T17582] team0: Port device gtp0 removed [ 460.737536][T17582] bond0 (unregistering): Released all slaves [ 460.745709][T17582] bond1 (unregistering): Released all slaves [ 460.757161][T17582] bond2 (unregistering): (slave veth3): Releasing backup interface [ 460.766178][T17582] bond2 (unregistering): Released all slaves [ 460.776183][T17582] bond3 (unregistering): Released all slaves [ 460.785208][T17582] bond4 (unregistering): Released all slaves [ 460.794539][T17582] bond5 (unregistering): (slave veth11): Releasing backup interface [ 460.802745][T17582] veth11: left promiscuous mode [ 460.808211][T17582] bond5 (unregistering): Released all slaves [ 460.818532][T17582] bond6 (unregistering): Released all slaves [ 460.830526][T17582] bond7 (unregistering): (slave veth13): Releasing backup interface [ 460.839110][T17582] veth13: left promiscuous mode [ 460.845922][T17582] bond7 (unregistering): Released all slaves [ 460.855412][T17582] bond8 (unregistering): Released all slaves [ 460.864360][T17582] bond9 (unregistering): Released all slaves [ 460.873917][T17582] bond10 (unregistering): (slave veth15): Releasing active interface [ 460.882508][T17582] bond10 (unregistering): Released all slaves [ 460.892343][T17582] bond11 (unregistering): (slave veth17): Releasing backup interface [ 460.901366][T17582] bond11 (unregistering): Released all slaves [ 460.915025][T17582] bond12 (unregistering): (slave veth19): Releasing active interface [ 460.924225][T17582] bond12 (unregistering): (slave batadv0): Releasing active interface [ 460.933846][T17582] bond12 (unregistering): Released all slaves [ 460.946669][T26480] lo speed is unknown, defaulting to 1000 [ 460.953500][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 461.206470][ T8478] net_ratelimit: 10 callbacks suppressed [ 461.206488][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 461.226535][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 461.323795][T26572] FAULT_INJECTION: forcing a failure. [ 461.323795][T26572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.359203][T17578] smbdirect: ib_dev[syz1] removed [ 461.368305][T26572] CPU: 0 UID: 0 PID: 26572 Comm: syz.3.5615 Not tainted syzkaller #0 PREEMPT(full) [ 461.368329][T26572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.368339][T26572] Call Trace: [ 461.368345][T26572] [ 461.368352][T26572] dump_stack_lvl+0xe8/0x150 [ 461.368375][T26572] should_fail_ex+0x40c/0x560 [ 461.368395][T26572] _copy_from_iter+0x1d3/0x1660 [ 461.368415][T26572] ? rcu_is_watching+0x15/0xb0 [ 461.368434][T26572] ? __pfx__copy_from_iter+0x10/0x10 [ 461.368450][T26572] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 461.368475][T26572] ? netlink_sendmsg+0x650/0xb40 [ 461.368497][T26572] ? skb_put+0x112/0x210 [ 461.368518][T26572] netlink_sendmsg+0x6c0/0xb40 [ 461.368543][T26572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.368566][T26572] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.368583][T26572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.368603][T26572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.368624][T26572] ____sys_sendmsg+0x9b9/0xa20 [ 461.368649][T26572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.368671][T26572] ? lock_release+0x4b/0x3c0 [ 461.368694][T26572] ? import_iovec+0x73/0xa0 [ 461.368714][T26572] ___sys_sendmsg+0x2a5/0x360 [ 461.368733][T26572] ? rcu_is_watching+0x15/0xb0 [ 461.368748][T26572] ? get_pid_task+0x20/0x1f0 [ 461.368764][T26572] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.368786][T26572] ? rcu_is_watching+0x15/0xb0 [ 461.368813][T26572] ? __fget_files+0x2a/0x420 [ 461.368830][T26572] ? __fget_files+0x3a2/0x420 [ 461.368851][T26572] __x64_sys_sendmsg+0x1b1/0x290 [ 461.368873][T26572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.368900][T26572] ? rcu_is_watching+0x15/0xb0 [ 461.368917][T26572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.368933][T26572] do_syscall_64+0x174/0x580 [ 461.368954][T26572] ? trace_irq_disable+0x3b/0x140 [ 461.368973][T26572] ? clear_bhb_loop+0x40/0x90 [ 461.368991][T26572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.369012][T26572] RIP: 0033:0x7f7d9ed9ce59 [ 461.369027][T26572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.369040][T26572] RSP: 002b:00007f7d9cfb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.369057][T26572] RAX: ffffffffffffffda RBX: 00007f7d9f016180 RCX: 00007f7d9ed9ce59 [ 461.369069][T26572] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000008 [ 461.369079][T26572] RBP: 00007f7d9cfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 461.369090][T26572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.369099][T26572] R13: 00007f7d9f016218 R14: 00007f7d9f016180 R15: 00007ffe5122e7b8 [ 461.369116][T26572] [ 461.773272][T17582] 5Ò: left promiscuous mode [ 461.815643][ T5632] Bluetooth: hci1: command tx timeout [ 461.815683][T17582] hmac(sha224: left promiscuous mode [ 461.823844][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 461.840694][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 461.896011][T26589] netlink: del zone limit has 8 unknown bytes [ 461.933338][T17582] tipc: Disabling bearer [ 461.951590][T17582] tipc: Left network mode [ 461.994842][T26589] 8021q: adding VLAN 0 to HW filter on device bond10 [ 462.019216][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 462.043880][T26601] gretap2: entered allmulticast mode [ 462.053994][T26601] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 462.083154][T26609] netlink: 'syz.0.5622': attribute type 13 has an invalid length. [ 462.100270][T26609] netlink: 'syz.0.5622': attribute type 17 has an invalid length. [ 462.120980][T26611] netlink: 'syz.3.5625': attribute type 1 has an invalid length. [ 462.225819][T26609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.233855][T26609] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.277181][T26609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.287706][T26609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.306250][T26609] veth1_vlan: left promiscuous mode [ 462.315007][T26609] veth0_vlan: left promiscuous mode [ 462.320812][T26609] veth0_vlan: entered promiscuous mode [ 462.329191][T26609] veth1_vlan: entered promiscuous mode [ 462.340761][T26609] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 462.348393][T26609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.360587][T26609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.372427][T26609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.379730][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 462.379756][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 462.413680][T26609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.425777][T26609] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 462.452419][T26611] bond8: entered allmulticast mode [ 462.512535][T26480] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.520329][T26480] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.529399][T26480] bridge_slave_0: entered allmulticast mode [ 462.536664][T26480] bridge_slave_0: entered promiscuous mode [ 462.560835][T26480] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.568242][T26480] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.575643][T26480] bridge_slave_1: entered allmulticast mode [ 462.582620][T26480] bridge_slave_1: entered promiscuous mode [ 462.612402][T26627] netlink: 'syz.3.5629': attribute type 9 has an invalid length. [ 462.621452][T26627] netlink: 'syz.3.5629': attribute type 6 has an invalid length. [ 462.630178][T26627] netlink: 'syz.3.5629': attribute type 7 has an invalid length. [ 462.634983][T26480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.639579][T26627] netlink: 'syz.3.5629': attribute type 8 has an invalid length. [ 462.666233][T26480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.750146][T26480] team0: Port device team_slave_0 added [ 462.770940][T26480] team0: Port device team_slave_1 added [ 462.811059][T26480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.824668][T26480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.853123][T26480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.880904][T26480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.888271][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 462.902775][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 462.929002][T26480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.982486][T26480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.099970][T26480] hsr_slave_0: entered promiscuous mode [ 463.133189][T26480] hsr_slave_1: entered promiscuous mode [ 463.156269][T26480] debugfs: 'hsr0' already exists in 'hsr' [ 463.172177][T26480] Cannot create hsr debugfs directory [ 463.224149][T26665] __nla_validate_parse: 10 callbacks suppressed [ 463.224165][T26665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5639'. [ 463.270898][T26667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5639'. [ 463.442343][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 463.582321][T26677] syzkaller0: entered promiscuous mode [ 463.591829][T26677] syzkaller0: entered allmulticast mode [ 463.820569][T26696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5646'. [ 463.894907][ T5632] Bluetooth: hci1: command tx timeout [ 463.948439][T26696] netlink: 'syz.3.5646': attribute type 4 has an invalid length. [ 463.961651][T26707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5648'. [ 463.986606][T17582] hsr_slave_0: left promiscuous mode [ 463.999316][T17582] hsr_slave_1: left promiscuous mode [ 464.353255][T26717] ÿ: renamed from bond_slave_0 (while UP) [ 464.501240][T26480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.539155][T26480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.561729][T26480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.595445][T26480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.639821][T26480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 464.671689][T26480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.699728][T26480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.722565][T26480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.779732][T17582] IPVS: stop unused estimator thread 0... [ 464.976961][T26784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5665'. [ 464.991988][T26480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.035086][T26480] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.047786][T26796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5668'. [ 465.054261][T17578] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.063846][T17578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.120064][T17578] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.127208][T17578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.331162][T26815] syzkaller1: entered promiscuous mode [ 465.355103][T26815] syzkaller1: entered allmulticast mode [ 465.465769][T26809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5671'. [ 465.490668][T26828] syzkaller0: entered promiscuous mode [ 465.512583][T26828] syzkaller0: entered allmulticast mode [ 465.813544][T26848] netlink: 'syz.0.5678': attribute type 1 has an invalid length. [ 465.912214][T26848] bond9: entered promiscuous mode [ 465.940619][T26848] bond9: entered allmulticast mode [ 465.960760][T26848] 8021q: adding VLAN 0 to HW filter on device bond9 [ 465.974753][ T5632] Bluetooth: hci1: command tx timeout [ 465.989259][T26861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5680'. [ 466.034830][T26860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5680'. [ 466.183197][T26863] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5677'. [ 466.193377][T26480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.281186][T26480] veth0_vlan: entered promiscuous mode [ 466.308660][T26480] veth1_vlan: entered promiscuous mode [ 466.327483][T26887] netlink: 'syz.0.5684': attribute type 4 has an invalid length. [ 466.379230][T26480] veth0_macvtap: entered promiscuous mode [ 466.410603][T26480] veth1_macvtap: entered promiscuous mode [ 466.455856][T26480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.488307][T26480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.510480][T17578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.544973][T17578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.548807][T17582] net_ratelimit: 12 callbacks suppressed [ 466.548821][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 466.574536][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 466.578810][T17578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.640458][ T1178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.953256][T17580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.985903][T17580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.025598][T17580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.044258][T17580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.255457][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 467.269818][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 467.653750][T26976] validate_nla: 1 callbacks suppressed [ 467.653769][T26976] netlink: 'syz.3.5699': attribute type 39 has an invalid length. [ 467.744378][T26983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.759839][T26996] netlink: 'syz.4.5705': attribute type 11 has an invalid length. [ 467.760107][T26983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.774715][T26997] netlink: 'syz.4.5705': attribute type 11 has an invalid length. [ 467.803162][T26983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 467.828043][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 467.842465][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 467.868421][T26983] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.912425][T26983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.982792][T26983] 8021q: adding VLAN 0 to HW filter on device bond6 [ 467.991511][T26983] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 468.023689][T26983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.038378][T26983] 8021q: adding VLAN 0 to HW filter on device bond8 [ 468.053213][T26983] geneve3: left promiscuous mode [ 468.056689][ T5632] Bluetooth: hci1: command tx timeout [ 468.064622][T26983] bond9: left promiscuous mode [ 468.148994][T26999] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 468.189599][ T8478] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.194347][T27007] xt_hashlimit: size too large, truncated to 1048576 [ 468.209268][ T8478] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.222586][T27007] xt_hashlimit: max too large, truncated to 1048576 [ 468.258201][T27004] bond0: entered promiscuous mode [ 468.263277][T27004] bond_slave_0: entered promiscuous mode [ 468.269312][T27004] bond_slave_1: entered promiscuous mode [ 468.276942][T27004] batadv_slave_0: entered promiscuous mode [ 468.282894][T27004] batadv_slave_0: left promiscuous mode [ 468.288793][T27004] bond0: left promiscuous mode [ 468.293620][T27004] bond_slave_0: left promiscuous mode [ 468.301470][T27004] bond_slave_1: left promiscuous mode [ 468.343345][ T8478] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.353838][T17582] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 468.361798][T17582] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 468.375054][ T6651] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 468.383059][T17580] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 468.390767][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 468.405630][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 468.406657][ T6645] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 468.429418][T17580] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 468.465004][T17580] bond8: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 468.484412][T17580] bond8: (slave veth19): making interface the new active one [ 468.488883][T27021] __nla_validate_parse: 2 callbacks suppressed [ 468.488898][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 468.495790][T17580] bond8: active interface up! [ 468.517432][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 468.834992][ T6664] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 468.944801][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 468.970132][T27065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5723'. [ 468.974890][ T6645] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 468.997629][ T6650] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 469.276726][T27074] SET target dimension over the limit! [ 469.495655][ T6650] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 469.656916][T27095] netlink: 'syz.3.5733': attribute type 10 has an invalid length. [ 469.683029][T27095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5733'. [ 469.689426][T27097] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 469.710691][T27099] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5735'. [ 469.972795][T27109] netlink: 'syz.2.5738': attribute type 1 has an invalid length. [ 470.116692][T27119] netlink: 'syz.3.5741': attribute type 1 has an invalid length. [ 470.156474][T27119] bond9: entered promiscuous mode [ 470.162995][T27119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 470.182368][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5741'. [ 470.196382][T27119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5741'. [ 470.219807][T27128] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5745'. [ 470.268516][T27119] bond9: (slave bridge0): making interface the new active one [ 470.276663][T27119] bridge0: entered promiscuous mode [ 470.283616][T27119] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 470.301119][T27135] x_tables: duplicate underflow at hook 2 [ 470.314204][T27135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5746'. [ 470.335255][T27135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5746'. [ 471.109615][T27175] syzkaller1: entered promiscuous mode [ 471.124046][T27175] syzkaller1: entered allmulticast mode [ 471.735779][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 472.035211][T17578] net_ratelimit: 13 callbacks suppressed [ 472.035228][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 472.055323][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 472.280471][T27229] netlink: 'syz.2.5774': attribute type 41 has an invalid length. [ 472.280497][T27227] netlink: 'syz.1.5773': attribute type 11 has an invalid length. [ 472.303158][T27229] syzkaller1: entered promiscuous mode [ 472.316895][T27229] syzkaller1: entered allmulticast mode [ 472.395214][T27227] veth1_vlan: left promiscuous mode [ 472.412905][T27227] veth0_vlan: left promiscuous mode [ 472.438801][T27227] veth0_vlan: entered promiscuous mode [ 472.458676][T27227] veth1_vlan: entered promiscuous mode [ 472.470823][T27227] veth0_macvtap: left promiscuous mode [ 472.478110][T27227] veth0_macvtap: entered promiscuous mode [ 472.489822][T27227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.498609][T27227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.507150][T27227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.524037][T27227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.541541][T27227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.552777][T27227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 472.565758][T27227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 472.573325][T27227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.582470][T27227] 8021q: adding VLAN 0 to HW filter on device bond6 [ 472.598295][T27227] 8021q: adding VLAN 0 to HW filter on device bond7 [ 472.606374][T27227] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 472.624661][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 472.639515][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 472.726478][T27234] bridge0: entered allmulticast mode [ 472.737434][T17582] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.758903][T17582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.784405][T27237] bond9: (slave bridge0): Releasing backup interface [ 472.798026][T27237] bridge0 (unregistering): left promiscuous mode [ 472.860751][T17582] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.892728][T17582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.920866][T17582] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.951297][T17582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.164726][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 473.173570][T27259] bridge_slave_0: left allmulticast mode [ 473.179379][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 473.212274][T27259] bridge_slave_0: left promiscuous mode [ 473.218858][T27259] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.258654][T27259] bridge_slave_1: left allmulticast mode [ 473.272287][T27259] bridge_slave_1: left promiscuous mode [ 473.280525][T27259] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.307916][T27259] bond0: (slave bond_slave_0): Releasing backup interface [ 473.340507][T27259] bond0: (slave bond_slave_1): Releasing backup interface [ 473.377020][T27259] team0: Port device team_slave_0 removed [ 473.397053][T27259] team0: Port device team_slave_1 removed [ 473.403727][T27259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.425349][T27259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.435251][ T6659] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 473.435266][ T6659] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 473.461563][T27259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.481621][T27259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.504176][T27259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 473.613689][T27271] __nla_validate_parse: 19 callbacks suppressed [ 473.613705][T27271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5786'. [ 473.626496][T27275] netlink: 'syz.2.5788': attribute type 10 has an invalid length. [ 473.642246][T27275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5788'. [ 473.715003][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 473.729793][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 473.803534][T27294] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5790'. [ 473.840089][T27297] : renamed from bridge_slave_0 (while UP) [ 473.861943][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5790'. [ 473.917886][T27301] tc_dump_action: action bad kind [ 473.933146][T27294] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5790'. [ 474.164301][T27315] netlink: 'syz.1.5796': attribute type 4 has an invalid length. [ 474.265862][T17573] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 474.336961][T27322] netlink: 'syz.1.5799': attribute type 10 has an invalid length. [ 474.357261][T27322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5799'. [ 474.452359][T27324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5798'. [ 474.472025][T27327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5801'. [ 474.487766][T27324] erspan0: entered promiscuous mode [ 474.494331][T27324] macvtap1: entered promiscuous mode [ 474.508041][T27324] macvtap1: entered allmulticast mode [ 474.519386][T27324] erspan0: entered allmulticast mode [ 474.546040][T27331] erspan0: left allmulticast mode [ 474.563968][T27331] erspan0: left promiscuous mode [ 474.576584][T27331] macvtap1: left promiscuous mode [ 474.583263][T27331] macvtap1: left allmulticast mode [ 475.176492][T27379] netlink: 'syz.3.5813': attribute type 1 has an invalid length. [ 475.246416][T27392] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5816'. [ 475.341150][T27402] netlink: 'syz.3.5818': attribute type 4 has an invalid length. [ 475.570283][T27415] netlink: 'syz.3.5822': attribute type 10 has an invalid length. [ 475.592288][T27415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5822'. [ 475.641421][T27430] tipc: MTU too low for tipc bearer [ 475.731895][T27440] netlink: 'syz.4.5829': attribute type 1 has an invalid length. [ 475.772267][T27440] 8021q: adding VLAN 0 to HW filter on device bond12 [ 475.860344][T27450] netlink: 'syz.4.5832': attribute type 4 has an invalid length. [ 476.029921][T27459] bond11: option lacp_rate: invalid value (192) [ 476.037886][T27459] bond11 (unregistering): Released all slaves [ 476.052079][T27468] netlink: 'syz.0.5837': attribute type 1 has an invalid length. [ 476.694925][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 477.122237][T27498] netlink: 'syz.0.5846': attribute type 4 has an invalid length. [ 477.271942][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079155800: rx timeout, send abort [ 477.280736][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079155800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 477.374770][T17573] net_ratelimit: 11 callbacks suppressed [ 477.374789][T17573] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.394782][T17573] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 477.914734][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 477.929119][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.444787][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 478.459199][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 478.972425][T27503] bond11: entered allmulticast mode [ 478.982121][T27503] ipip1: entered promiscuous mode [ 478.987576][T27503] ipip1: entered allmulticast mode [ 478.987833][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 479.007353][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 479.037808][T27505] bond12: entered allmulticast mode [ 479.043224][T27505] 8021q: adding VLAN 0 to HW filter on device bond12 [ 479.084943][T27508] __nla_validate_parse: 18 callbacks suppressed [ 479.084960][T27508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5849'. [ 479.100766][T27508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5849'. [ 479.185763][T27511] syzkaller0: entered promiscuous mode [ 479.191446][T27511] syzkaller0: entered allmulticast mode [ 479.201073][T27511] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5850'. [ 479.230336][T27482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.372501][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5854'. [ 479.421251][T27530] validate_nla: 2 callbacks suppressed [ 479.421268][T27530] netlink: 'syz.2.5857': attribute type 4 has an invalid length. [ 479.524894][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 479.539446][ T1178] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 479.648500][T27541] vlan2: entered promiscuous mode [ 479.760857][T27551] xt_hashlimit: size too large, truncated to 1048576 [ 479.843370][T27556] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 480.004951][T27568] netlink: 840 bytes leftover after parsing attributes in process `syz.1.5867'. [ 480.072130][T27577] netlink: 'syz.1.5870': attribute type 4 has an invalid length. [ 480.131223][T27583] netlink: 'syz.1.5873': attribute type 1 has an invalid length. [ 480.142524][T27583] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5873'. [ 480.205168][T27579] nbd2: detected capacity change from 0 to 63 [ 480.227006][T27589] block nbd2: NBD_DISCONNECT [ 480.236898][T27589] block nbd2: Disconnected due to user request. [ 480.251009][T27589] block nbd2: shutting down sockets [ 480.261094][ C0] blk_print_req_error: 138 callbacks suppressed [ 480.261114][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.276497][ C0] buffer_io_error: 138 callbacks suppressed [ 480.276515][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 480.290868][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.299978][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 480.307798][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.316883][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 480.324649][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.333765][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 480.349144][T26931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.360237][T26931] Buffer I/O error on dev nbd2, logical block 0, async page read [ 480.388355][T26931] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.400219][T26931] Buffer I/O error on dev nbd2, logical block 1, async page read [ 480.408635][T26931] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.418505][T26931] Buffer I/O error on dev nbd2, logical block 2, async page read [ 480.428423][T26931] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.437865][T26931] Buffer I/O error on dev nbd2, logical block 3, async page read [ 480.446835][T26931] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.456378][T27598] veth0_macvtap: entered allmulticast mode [ 480.499773][T27604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5881'. [ 480.501975][T26931] Buffer I/O error on dev nbd2, logical block 0, async page read [ 480.539292][T26931] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 480.573771][T26931] Buffer I/O error on dev nbd2, logical block 1, async page read [ 480.591426][T27604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5881'. [ 480.615957][T26931] ldm_validate_partition_table(): Disk read failed. [ 480.636167][T26931] Dev nbd2: unable to read RDB block 0 [ 480.649439][T27614] netlink: 'syz.1.5883': attribute type 4 has an invalid length. [ 480.653558][T26931] nbd2: unable to read partition table [ 480.672361][T26931] ldm_validate_partition_table(): Disk read failed. [ 480.692210][T27604] veth23: entered allmulticast mode [ 480.699442][T26931] Dev nbd2: unable to read RDB block 0 [ 480.706518][T26931] nbd2: unable to read partition table [ 480.795965][T27622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5886'. [ 480.855462][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 480.865308][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 480.902757][T27630] netlink: 'syz.3.5888': attribute type 10 has an invalid length. [ 480.915659][T27630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5888'. [ 480.943645][T27634] netlink: 'syz.0.5889': attribute type 15 has an invalid length. [ 480.996418][T17574] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 480.996503][T27634] netlink: 'syz.0.5889': attribute type 15 has an invalid length. [ 481.024062][T17574] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 481.051758][T17574] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 481.181762][T27658] gre3: entered allmulticast mode [ 481.652219][T27696] netlink: 'syz.4.5909': attribute type 2 has an invalid length. [ 481.752810][T27708] xfrm0 speed is unknown, defaulting to 1000 [ 481.853783][T27710] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 481.880099][T17306] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 481.936217][T17306] CPU: 0 UID: 0 PID: 17306 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 481.936239][T17306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.936249][T17306] Call Trace: [ 481.936256][T17306] [ 481.936262][T17306] dump_stack_lvl+0xe8/0x150 [ 481.936286][T17306] dump_header+0xd3/0x4b0 [ 481.936309][T17306] oom_kill_process+0x3ab/0x970 [ 481.936332][T17306] out_of_memory+0x1064/0x1480 [ 481.936352][T17306] ? try_charge_memcg+0xbca/0x1590 [ 481.936377][T17306] ? __pfx_out_of_memory+0x10/0x10 [ 481.936395][T17306] ? do_raw_spin_unlock+0xf5/0x210 [ 481.936418][T17306] try_charge_memcg+0xc74/0x1590 [ 481.936439][T17306] ? fs_reclaim_acquire+0x7c/0x100 [ 481.936464][T17306] ? __pfx_try_charge_memcg+0x10/0x10 [ 481.936486][T17306] ? lock_release+0x4b/0x3c0 [ 481.936505][T17306] ? rcu_is_watching+0x15/0xb0 [ 481.936522][T17306] ? rcu_is_watching+0x15/0xb0 [ 481.936538][T17306] ? lock_release+0x4b/0x3c0 [ 481.936557][T17306] ? percpu_ref_tryget+0xfd/0x180 [ 481.936581][T17306] charge_memcg+0x19c/0x2b0 [ 481.936601][T17306] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 481.936620][T17306] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 481.936642][T17306] __swap_cache_prepare_and_add+0xdd/0x700 [ 481.936663][T17306] ? page_rmappable_folio+0x9a/0x170 [ 481.936687][T17306] swap_cache_alloc_folio+0xf1/0x240 [ 481.936706][T17306] swap_cluster_readahead+0x355/0x670 [ 481.936726][T17306] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 481.936748][T17306] ? xas_find+0x843/0x980 [ 481.936768][T17306] ? get_vma_policy+0x27b/0x3c0 [ 481.936789][T17306] swapin_readahead+0x196/0xc50 [ 481.936808][T17306] ? swap_table_get+0x1e/0x260 [ 481.936823][T17306] ? rcu_is_watching+0x15/0xb0 [ 481.936841][T17306] ? __pfx_swapin_readahead+0x10/0x10 [ 481.936857][T17306] ? lock_release+0x4b/0x3c0 [ 481.936876][T17306] ? rcu_is_watching+0x15/0xb0 [ 481.936889][T17306] ? get_swap_device_info+0x1c/0x2b0 [ 481.936907][T17306] ? swap_table_get+0x1e/0x260 [ 481.936922][T17306] ? swap_table_get+0x1e/0x260 [ 481.936938][T17306] ? swap_table_get+0x216/0x260 [ 481.936955][T17306] ? swap_cache_get_folio+0x2ea/0x2f0 [ 481.936973][T17306] do_swap_page+0x545/0x5340 [ 481.936993][T17306] ? __pte_offset_map+0x29/0x240 [ 481.937035][T17306] ? lock_acquire+0x5f/0x350 [ 481.937056][T17306] ? count_memcg_event_mm+0x21/0x260 [ 481.937071][T17306] ? rcu_is_watching+0x15/0xb0 [ 481.937087][T17306] ? count_memcg_event_mm+0x21/0x260 [ 481.937104][T17306] ? do_swap_page+0x128/0x5340 [ 481.937119][T17306] ? __pfx_do_swap_page+0x10/0x10 [ 481.937134][T17306] ? __pte_offset_map+0x45/0x240 [ 481.937150][T17306] ? __pte_offset_map+0x1ae/0x240 [ 481.937168][T17306] ? pte_offset_map_rw_nolock+0xea/0x160 [ 481.937186][T17306] handle_mm_fault+0x124c/0x3080 [ 481.937220][T17306] ? handle_mm_fault+0xec/0x3080 [ 481.937241][T17306] ? __pfx_handle_mm_fault+0x10/0x10 [ 481.937257][T17306] ? lock_vma_under_rcu+0x45a/0x500 [ 481.937282][T17306] ? lock_release+0x4b/0x3c0 [ 481.937303][T17306] ? rcu_is_watching+0x15/0xb0 [ 481.937320][T17306] do_user_addr_fault+0xa4d/0x1340 [ 481.937340][T17306] ? trace_page_fault_user+0x84/0x1e0 [ 481.937362][T17306] exc_page_fault+0x6a/0xc0 [ 481.937381][T17306] asm_exc_page_fault+0x26/0x30 [ 481.937396][T17306] RIP: 0033:0x7fd9d326ae77 [ 481.937411][T17306] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 39 7c 24 [ 481.937425][T17306] RSP: 002b:00007fff7314c150 EFLAGS: 00010206 [ 481.937440][T17306] RAX: 0000001b2e124000 RBX: 000000000000069f RCX: 00000000000756e8 [ 481.937450][T17306] RDX: 000000000b1f7e43 RSI: 00007fff7314c1e0 RDI: 0000000000000009 [ 481.937460][T17306] RBP: 00007fff7314c18c R08: 000000002a6e531a R09: 3fffffffffffffff [ 481.937471][T17306] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 481.937481][T17306] R13: 00000000000927c0 R14: 0000000000075770 R15: 00007fff7314c1e0 [ 481.937498][T17306] [ 481.940175][T17306] memory: usage 307200kB, limit 307200kB, failcnt 789 [ 482.246562][T27708] lo speed is unknown, defaulting to 1000 [ 482.351540][T17306] memory+swap: usage 301664kB, limit 9007199254740988kB, failcnt 0 [ 482.371577][T17306] kmem: usage 297176kB, limit 9007199254740988kB, failcnt 0 [ 482.400047][T17306] Memory cgroup stats for /syz1: [ 482.400183][T17306] cache 0 [ 482.431017][T17306] rss 0 [ 482.444614][T17306] rss_huge 0 [ 482.464972][T17306] shmem 0 [ 482.485323][T17306] mapped_file 0 [ 482.504634][T17306] dirty 0 [ 482.528336][T17306] writeback 0 [ 482.544265][T17306] workingset_refault_anon 18 [ 482.568616][T17306] workingset_refault_file 12 [ 482.597645][T17306] swap 188416 [ 482.611970][T17306] swapcached 290816 [ 482.639688][T17306] pgpgin 219796 [ 482.654775][T17574] net_ratelimit: 11 callbacks suppressed [ 482.654801][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 482.674794][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 482.691134][T17306] pgpgout 219789 [ 482.710912][T27728] nbd: socks must be embedded in a SOCK_ITEM attr [ 482.712731][T17306] pgfault 394715 [ 482.746996][T17306] pgmajfault 11 [ 482.765298][T17306] inactive_anon 28672 [ 482.782856][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.801773][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.805099][T17306] active_anon 0 [ 482.815259][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.829709][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.837772][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 482.860627][T17306] inactive_file 0 [ 482.886644][T17306] active_file 0 [ 482.904232][T17306] unevictable 0 [ 482.926234][T17306] hierarchical_memory_limit 314572800 [ 482.965199][T17306] hierarchical_memsw_limit 9223372036854771712 [ 483.000286][T17306] total_cache 0 [ 483.026300][T17306] total_rss 0 [ 483.035976][T17306] total_rss_huge 0 [ 483.044454][T17306] total_shmem 0 [ 483.066584][T17306] total_mapped_file 0 [ 483.077748][T17306] total_dirty 0 [ 483.093482][T17306] total_writeback 0 [ 483.102668][T17306] total_workingset_refault_anon 18 [ 483.116509][T17306] total_workingset_refault_file 12 [ 483.132862][T17306] total_swap 188416 [ 483.153492][T17306] total_swapcached 290816 [ 483.172282][T17306] total_pgpgin 219796 [ 483.193687][T17306] total_pgpgout 219789 [ 483.203026][T17306] total_pgfault 394715 [ 483.213127][T17306] total_pgmajfault 11 [ 483.222059][T17306] total_inactive_anon 28672 [ 483.231778][T17306] total_active_anon 0 [ 483.246036][T17306] total_inactive_file 0 [ 483.257928][T17306] total_active_file 0 [ 483.262210][T17306] total_unevictable 0 [ 483.269618][T17306] anon_cost 0 [ 483.283109][T17306] file_cost 0 [ 483.292440][T17306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5892,pid=27635,uid=0 [ 483.308886][T17573] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 483.320980][T17306] Memory cgroup out of memory: Killed process 27635 (syz.1.5892) total-vm:102424kB, anon-rss:1244kB, file-rss:23304kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 483.323960][T17573] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 483.361673][T17574] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.386623][T17574] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.492624][T17574] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.513570][T17574] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.553074][T27729] xfrm0 speed is unknown, defaulting to 1000 [ 483.611527][T17574] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.652164][T17574] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.767256][T17574] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.786660][T17574] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.909006][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 483.923366][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 484.235641][T17574] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 484.331824][T17574] batman_adv: batadv0: Removing interface: vlan3 [ 484.340796][T27785] __nla_validate_parse: 15 callbacks suppressed [ 484.340813][T27785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5929'. [ 484.470220][T17574] bond0 (unregistering): Released all slaves [ 484.476610][T27794] netlink: 'syz.3.5929': attribute type 3 has an invalid length. [ 484.486057][T17574] bond1 (unregistering): Released all slaves [ 484.499156][T17575] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 484.513472][T17575] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 484.531173][T17574] bond2 (unregistering): (slave batadv1): Releasing active interface [ 484.539847][T17574] batadv1: left promiscuous mode [ 484.544933][T17574] batadv1: left allmulticast mode [ 484.550831][T17574] bond2 (unregistering): Released all slaves [ 484.559914][T17574] bond3 (unregistering): Released all slaves [ 484.569645][T17574] bond4 (unregistering): (slave veth7): Releasing active interface [ 484.580047][T17574] bond4 (unregistering): Released all slaves [ 484.589399][T17574] bond5 (unregistering): Released all slaves [ 484.600512][T17574] bond6 (unregistering): Released all slaves [ 484.612714][T17574] bond7 (unregistering): (slave bond8): Releasing backup interface [ 484.627180][T17574] bond7 (unregistering): Released all slaves [ 484.637036][T17574] bond8 (unregistering): Released all slaves [ 484.646584][T17574] bond9 (unregistering): Released all slaves [ 484.655575][T17574] bond10 (unregistering): Released all slaves [ 484.664811][T17574] bond11 (unregistering): Released all slaves [ 484.673953][T17574] bond12 (unregistering): Released all slaves [ 484.686723][T27729] lo speed is unknown, defaulting to 1000 [ 484.695278][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 484.706616][ T5730] xfrm0 speed is unknown, defaulting to 1000 [ 484.714809][ T5730] syz0: Port: 1 Link DOWN [ 484.720199][ T5730] xfrm0 speed is unknown, defaulting to 1000 [ 484.732213][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 484.817492][T27796] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5930'. [ 484.854830][ T5632] Bluetooth: hci5: command tx timeout [ 484.964870][T27811] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.5934'. [ 485.024198][T27807] SET target dimension over the limit! [ 485.035509][T17572] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 485.049859][T17572] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 485.068188][T17582] smc: removing ib device syz0 [ 485.099748][T17582] smbdirect: ib_dev[syz0] removed [ 485.193411][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5938'. [ 485.212310][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5938'. [ 485.300945][T27807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.350741][T27807] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.510001][T27807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.526660][T27807] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.629744][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 485.782365][T27854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5941'. [ 485.818354][T27807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.825290][T27854] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.834117][T27807] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.940072][T27854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5941'. [ 486.094430][T17572] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.112169][T17572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.141756][T17572] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.188154][T17572] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.207081][T27729] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.233124][T27729] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.263448][T27729] bridge_slave_0: entered allmulticast mode [ 486.299319][T27729] bridge_slave_0: entered promiscuous mode [ 486.348500][T27729] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.405566][T27729] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.415670][T27729] bridge_slave_1: entered allmulticast mode [ 486.466171][T27729] bridge_slave_1: entered promiscuous mode [ 486.526482][T17580] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.551688][T17580] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.573670][T27902] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5951'. [ 486.618683][T27885] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5947'. [ 486.671493][T17580] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.700533][T17580] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.777705][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 486.784384][T27893] netlink: 'syz.0.5950': attribute type 2 has an invalid length. [ 486.799503][T27729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.821665][T27729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.884323][T27729] team0: Port device team_slave_0 added [ 486.898199][T27918] can: request_module (can-proto-0) failed. [ 486.902889][T27729] team0: Port device team_slave_1 added [ 486.935028][ T5632] Bluetooth: hci5: command tx timeout [ 486.976299][T27729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.001521][T27729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.076447][T27729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.104127][T17574] tipc: Left network mode [ 487.108130][T27729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.135306][T27729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.141432][T27938] sctp: [Deprecated]: syz.2.5958 (pid 27938) Use of int in max_burst socket option. [ 487.141432][T27938] Use struct sctp_assoc_value instead [ 487.170912][T27729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.195153][T27935] syz_tun: entered allmulticast mode [ 487.231339][T27945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5960'. [ 487.328521][T27945] 8021q: adding VLAN 0 to HW filter on device bond11 [ 487.410334][T27945] macvlan3: entered promiscuous mode [ 487.415887][T27945] macvlan3: entered allmulticast mode [ 487.422159][T27945] bond11: entered promiscuous mode [ 487.435262][T27945] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 487.443039][T27945] bond11: left promiscuous mode [ 487.527777][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 487.561917][T27729] hsr_slave_0: entered promiscuous mode [ 487.573057][T27729] hsr_slave_1: entered promiscuous mode [ 487.580621][T27729] debugfs: 'hsr0' already exists in 'hsr' [ 487.586792][T27729] Cannot create hsr debugfs directory [ 487.697444][T17575] net_ratelimit: 356 callbacks suppressed [ 487.697469][T17575] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 487.717589][T17575] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 487.787341][T27977] netlink: 'syz.1.5967': attribute type 2 has an invalid length. [ 487.977935][T27990] netlink: 'syz.1.5970': attribute type 22 has an invalid length. [ 487.986366][T27990] netlink: 'syz.1.5970': attribute type 22 has an invalid length. [ 488.212889][T28015] netlink: 'syz.2.5976': attribute type 1 has an invalid length. [ 488.257170][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 488.271539][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 488.363679][T28015] bond1: entered allmulticast mode [ 488.441593][T17574] hsr_slave_0: left promiscuous mode [ 488.450314][T17574] hsr_slave_1: left promiscuous mode [ 488.464146][T17574] veth0_to_bridge: left allmulticast mode [ 488.479044][T17574] veth0_to_bridge: left promiscuous mode [ 488.485942][T17574] veth1_vlan: left promiscuous mode [ 488.491313][T17574] veth0_vlan: left promiscuous mode [ 488.680068][T28023] bond1: (slave ip6gretap1): making interface the new active one [ 488.704382][T28023] ip6gretap1: entered allmulticast mode [ 488.717490][T28023] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 488.759100][T27729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 488.787651][T27729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.810977][T27729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 488.824706][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 488.839225][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 488.860106][T27729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.921228][T27729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 488.934509][T27729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.953789][T27729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 488.979056][T27729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.015554][ T5632] Bluetooth: hci5: command tx timeout [ 489.079759][T27729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.102417][T27729] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.127755][T17574] IPVS: stop unused estimator thread 0... [ 489.141142][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.148330][T17580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.201155][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.208323][T17580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.368251][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 489.382977][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 489.633076][T28096] bridge_slave_1: entered promiscuous mode [ 489.706795][T28099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.855458][T28107] __nla_validate_parse: 13 callbacks suppressed [ 489.855476][T28107] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5991'. [ 489.965189][T17580] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 489.979667][T17580] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 490.048575][T28122] bridge3: entered promiscuous mode [ 490.066914][T28122] bridge3: entered allmulticast mode [ 490.095644][T27729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.413947][T28138] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 490.438747][T28138] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 490.687554][T27729] veth0_vlan: entered promiscuous mode [ 490.761025][T27729] veth1_vlan: entered promiscuous mode [ 490.847659][T27729] veth0_macvtap: entered promiscuous mode [ 490.875292][T27729] veth1_macvtap: entered promiscuous mode [ 490.889968][T28167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6003'. [ 490.948897][T28172] bond12: option arp_all_targets: invalid value (3) [ 490.961784][T28172] bond12 (unregistering): Released all slaves [ 490.966979][T28175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6005'. [ 490.988821][T28167] 8021q: VLANs not supported on ip_vti0 [ 491.042792][T27729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.055837][T28179] SET target dimension over the limit! [ 491.075811][T27729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.095591][ T5632] Bluetooth: hci5: command tx timeout [ 491.118880][T17575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.153250][T17575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.176383][T17574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.201172][T28179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.216992][T17574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.244400][T28187] syzkaller0: entered promiscuous mode [ 491.252751][T28187] syzkaller0: entered allmulticast mode [ 491.269949][T28179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.362333][T28179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.397633][T17575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.427439][T17575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.455279][T28179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.475479][T17575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.483798][T17575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.539649][T17580] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.570492][T17580] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.587872][T17580] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.602353][T17580] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.870604][T17575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.891361][T17575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.031579][T28254] netlink: 'syz.3.6018': attribute type 10 has an invalid length. [ 492.052802][T28254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6018'. [ 492.159969][T28255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.330656][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.338777][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.348790][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.360638][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.371999][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.580276][T28285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6028'. [ 492.627263][T28289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6029'. [ 492.776271][T28301] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.809369][T28274] lo speed is unknown, defaulting to 1000 [ 492.912017][T28305] lo speed is unknown, defaulting to 1000 [ 493.079751][T28274] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.086941][T28274] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.094190][T28274] bridge_slave_0: entered allmulticast mode [ 493.101325][T28274] bridge_slave_0: entered promiscuous mode [ 493.108594][T28274] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.115776][T17574] net_ratelimit: 11 callbacks suppressed [ 493.115789][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.115809][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.150628][T28274] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.158189][T28274] bridge_slave_1: entered allmulticast mode [ 493.165008][T28274] bridge_slave_1: entered promiscuous mode [ 493.182228][T28274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.194156][T28274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.226476][T28274] team0: Port device team_slave_0 added [ 493.235219][T28274] team0: Port device team_slave_1 added [ 493.266804][T28274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.273758][T28274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.300769][T28274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.318599][T28319] syz_tun (unregistering): left allmulticast mode [ 493.327530][T28274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.334994][T28274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.361189][T28274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.393016][T28274] hsr_slave_0: entered promiscuous mode [ 493.399167][T28274] hsr_slave_1: entered promiscuous mode [ 493.405362][T28274] debugfs: 'hsr0' already exists in 'hsr' [ 493.411195][T28274] Cannot create hsr debugfs directory [ 493.475057][T28274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.487531][T28274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 493.498398][T28274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.571431][T28274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.593961][T28274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 493.604975][T28274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.619766][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6035'. [ 493.635977][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 493.650647][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 493.682720][T28274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.696159][T28274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 493.706755][T28274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.724803][T28334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6041'. [ 493.733881][T28334] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6041'. [ 493.778768][T28339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6042'. [ 493.834980][T28341] bond13: option arp_all_targets: invalid value (3) [ 493.842937][T28341] bond13 (unregistering): Released all slaves [ 493.961773][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88806a76ec00: rx timeout, send abort [ 493.970771][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806a76ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 494.079585][T28274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.088933][T28274] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.100337][T28274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.134489][T28274] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.161729][T28274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 494.183196][T28274] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.215984][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 494.230425][T17582] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.286448][T28274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 494.310700][T28274] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.372471][T28368] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 494.454822][ T5634] Bluetooth: hci2: command tx timeout [ 494.504409][T28274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.537976][T28274] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.563303][ T8478] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.570465][ T8478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.571988][T28392] FAULT_INJECTION: forcing a failure. [ 494.571988][T28392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.592469][T28392] CPU: 0 UID: 0 PID: 28392 Comm: syz.3.6054 Not tainted syzkaller #0 PREEMPT(full) [ 494.592495][T28392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.592505][T28392] Call Trace: [ 494.592512][T28392] [ 494.592519][T28392] dump_stack_lvl+0xe8/0x150 [ 494.592540][T28392] should_fail_ex+0x40c/0x560 [ 494.592559][T28392] _copy_to_user+0x31/0xb0 [ 494.592580][T28392] simple_read_from_buffer+0xe1/0x170 [ 494.592600][T28392] proc_fail_nth_read+0x1bb/0x230 [ 494.592621][T28392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.592641][T28392] ? rw_verify_area+0x24a/0x4c0 [ 494.592660][T28392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 494.592679][T28392] vfs_read+0x213/0xa80 [ 494.592699][T28392] ? __pfx___mutex_lock+0x10/0x10 [ 494.592719][T28392] ? __pfx_vfs_read+0x10/0x10 [ 494.592738][T28392] ? __fget_files+0x3a2/0x420 [ 494.592755][T28392] ? __fget_files+0x2a/0x420 [ 494.592772][T28392] ksys_read+0x150/0x270 [ 494.592792][T28392] ? __pfx_ksys_read+0x10/0x10 [ 494.592811][T28392] ? rcu_is_watching+0x15/0xb0 [ 494.592829][T28392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.592846][T28392] do_syscall_64+0x174/0x580 [ 494.592865][T28392] ? trace_irq_disable+0x3b/0x140 [ 494.592885][T28392] ? clear_bhb_loop+0x40/0x90 [ 494.592903][T28392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.592918][T28392] RIP: 0033:0x7f7d9ed5d68e [ 494.592933][T28392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.592946][T28392] RSP: 002b:00007f7d9cff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.592965][T28392] RAX: ffffffffffffffda RBX: 00007f7d9cff66c0 RCX: 00007f7d9ed5d68e [ 494.592977][T28392] RDX: 000000000000000f RSI: 00007f7d9cff60a0 RDI: 0000000000000005 [ 494.592987][T28392] RBP: 00007f7d9cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 494.592998][T28392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.593008][T28392] R13: 00007f7d9f016038 R14: 00007f7d9f015fa0 R15: 00007ffe5122e7b8 [ 494.593027][T28392] [ 494.617335][ T8478] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.775407][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 494.779806][ T8478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.788575][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 494.799205][T17580] wlan1: Trigger new scan to find an IBSS to join [ 494.864188][T28404] netlink: 'syz.2.6055': attribute type 1 has an invalid length. [ 494.874934][T28394] __nla_validate_parse: 11 callbacks suppressed [ 494.874950][T28394] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6055'. [ 494.986656][T28412] netlink: 'syz.3.6058': attribute type 58 has an invalid length. [ 495.265861][T28432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6063'. [ 495.354652][T17580] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 495.394745][T28437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6064'. [ 495.412836][T28274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.527947][T28274] veth0_vlan: entered promiscuous mode [ 495.559833][T28444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.587541][T28444] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.604524][T28274] veth1_vlan: entered promiscuous mode [ 495.627332][T28444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.637800][T28444] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.652965][T28451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.660219][T28451] IPv6: NLM_F_CREATE should be set when creating new route [ 495.678383][T28274] veth0_macvtap: entered promiscuous mode [ 495.702802][T28444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.721364][T28444] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.738488][T28274] veth1_macvtap: entered promiscuous mode [ 495.746278][T28450] netlink: 'syz.1.6069': attribute type 4 has an invalid length. [ 495.752857][T28274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.773372][T28274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.777828][T28450] netlink: 'syz.1.6069': attribute type 4 has an invalid length. [ 495.788515][ T9] lo speed is unknown, defaulting to 1000 [ 495.794374][ T9] syz2: Port: 1 Link DOWN [ 495.807007][T28444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.818328][T28444] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.835923][ T6659] lo speed is unknown, defaulting to 1000 [ 495.841745][ T9] lo speed is unknown, defaulting to 1000 [ 495.841858][T17573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.848079][ T9] syz2: Port: 1 Link ACTIVE [ 495.861141][T17573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.876053][T17573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.884959][T17573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.961658][ T8478] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.986897][ T8478] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.010354][ T8478] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.025526][ T8478] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.039303][T17578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.049787][ T8478] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.060257][T17578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.068763][ T8478] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.107921][ T8478] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.122672][ T8478] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.131880][T17573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.149613][T17573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.178430][T28466] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 496.271951][T28477] sch_fq: defrate 4294967293 ignored. [ 496.316500][T28469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6074'. [ 496.390372][T28469] bond1: option miimon: invalid value (18446744073709551607) [ 496.440690][T28469] bond1: option miimon: allowed values 0 - 2147483647 [ 496.459801][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.471210][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.476364][T28491] x_tables: duplicate underflow at hook 1 [ 496.486545][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 496.496459][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 496.505111][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.506402][T28469] bond1 (unregistering): Released all slaves [ 496.534804][ T5626] Bluetooth: hci2: command tx timeout [ 496.569998][T28503] xt_hashlimit: size too large, truncated to 1048576 [ 496.672657][T28508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6080'. [ 496.734421][ T5634] block nbd2: Receive control failed (result -32) [ 496.765207][T28511] syzkaller1: entered promiscuous mode [ 496.812065][T28511] syzkaller1: entered allmulticast mode [ 496.924982][T28530] netlink: 'syz.4.6083': attribute type 10 has an invalid length. [ 496.933005][T28526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6082'. [ 496.978257][T28529] bond1: option packets_per_slave: invalid value (1048584) [ 496.992533][T28530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6083'. [ 497.006176][T28529] bond1: option packets_per_slave: allowed values 0 - 65535 [ 497.031290][T28529] bond1 (unregistering): Released all slaves [ 497.069319][T28526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 497.210460][T28487] lo speed is unknown, defaulting to 1000 [ 497.473993][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6092'. [ 497.494964][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 497.495327][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 498.130734][ T29] audit: type=1804 audit(1781754648.923:15): pid=28591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6095" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=509 res=1 errno=0 [ 498.172480][ T29] audit: type=1800 audit(1781754648.923:16): pid=28591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6095" name="cgroup.controllers" dev="tmpfs" ino=509 res=0 errno=0 [ 498.393878][T28615] block nbd4: not configured, cannot reconfigure [ 498.444961][T17580] net_ratelimit: 11 callbacks suppressed [ 498.444976][T17580] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 498.465351][T17580] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 498.497425][T28487] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.514725][T28487] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.532134][T28487] bridge_slave_0: entered allmulticast mode [ 498.566800][T28628] netlink: 480 bytes leftover after parsing attributes in process `syz.3.6104'. [ 498.574699][ T5634] Bluetooth: hci3: command tx timeout [ 498.580939][T28487] bridge_slave_0: entered promiscuous mode [ 498.603554][T28487] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.615151][ T5634] Bluetooth: hci2: command tx timeout [ 498.628389][T28487] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.636656][T28487] bridge_slave_1: entered allmulticast mode [ 498.668978][T28487] bridge_slave_1: entered promiscuous mode [ 498.680576][T28631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.734207][T28487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.759231][T28487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.826730][T28487] team0: Port device team_slave_0 added [ 498.855477][T28487] team0: Port device team_slave_1 added [ 498.889417][T28487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.896594][T28487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.924362][T28487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.941993][T28487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.949504][T28487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.980813][T28487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.029308][T28487] hsr_slave_0: entered promiscuous mode [ 499.044433][T28487] hsr_slave_1: entered promiscuous mode [ 499.052804][T28487] debugfs: 'hsr0' already exists in 'hsr' [ 499.060428][T28487] Cannot create hsr debugfs directory [ 499.074660][T17575] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.089016][T17575] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.214370][T28487] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.228522][T28487] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.255691][T28669] bond1: entered promiscuous mode [ 499.287384][T28487] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.305944][T28487] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.357840][T28487] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.368000][T28487] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.387398][T28676] netlink: 'syz.2.6119': attribute type 12 has an invalid length. [ 499.408439][T28487] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.418629][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 499.427624][T28487] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.540614][T28487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 499.550965][T28487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.564963][T28487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 499.576842][T28487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.584512][T28487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 499.593865][T28487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.602545][T28487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.615649][T17573] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 499.630519][T17573] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 499.648087][T28487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.713845][T28487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.732723][T28487] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.744978][T17575] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.752087][T17575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.765955][T17575] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.773062][T17575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.155618][ T8491] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 500.169989][ T8491] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 500.184506][T28487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.234155][T28487] veth0_vlan: entered promiscuous mode [ 500.246577][T28487] veth1_vlan: entered promiscuous mode [ 500.273680][T28487] veth0_macvtap: entered promiscuous mode [ 500.283691][T28487] veth1_macvtap: entered promiscuous mode [ 500.303228][T28487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.318169][T28487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.331728][T17576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.347356][T17576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.381782][T17576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.409505][T17576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.452317][ T8491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.468430][ T8491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.517573][T17576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.540287][T17576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.556103][T28727] __nla_validate_parse: 8 callbacks suppressed [ 500.556120][T28727] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6129'. [ 500.615926][ T5634] Bluetooth: hci3: command tx timeout [ 500.693423][T28730] bond1: Removing last ns target with arp_interval on [ 500.709754][ T5634] Bluetooth: hci2: command tx timeout [ 500.744902][T17576] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 500.833196][T28739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6132'. [ 500.859193][T28739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6132'. [ 500.881699][T28739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6132'. [ 501.017023][T28742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6133'. [ 501.028980][T28743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6133'. [ 501.147147][T28757] netlink: 'syz.0.6138': attribute type 4 has an invalid length. [ 501.154993][T28757] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6138'. [ 501.182052][T28757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6138'. [ 501.282431][T28764] lo speed is unknown, defaulting to 1000 [ 501.514293][T28769] netlink: 'syz.2.6142': attribute type 1 has an invalid length. [ 501.877883][ T5626] block nbd4: Receive control failed (result -32) [ 501.877883][ T5634] block nbd4: Receive control failed (result -32) [ 501.920137][T28797] netlink: 'syz.3.6154': attribute type 10 has an invalid length. [ 501.967091][T28803] xt_HMARK: proto mask must be zero with L3 mode [ 501.979640][T28803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6156'. [ 502.118525][T28819] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 502.169724][T28824] sctp: [Deprecated]: syz.0.6163 (pid 28824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.169724][T28824] Use struct sctp_sack_info instead [ 502.279527][T28830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6165'. [ 502.486823][T28858] hsr0: entered promiscuous mode [ 502.549952][T28862] ip6tnl0: entered promiscuous mode [ 502.694757][ T5626] Bluetooth: hci3: command tx timeout [ 502.772519][T28872] C: renamed from veth1_to_team (while UP) [ 502.965200][T28887] bond2 (unregistering): Released all slaves [ 503.299775][T28898] netlink: 'syz.3.6186': attribute type 17 has an invalid length. [ 503.440704][T28910] ip6t_rpfilter: unknown options [ 503.524022][T28925] netlink: 'syz.3.6193': attribute type 2 has an invalid length. [ 503.526847][T28919] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 503.542784][T28919] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 503.548311][T28925] netlink: 'syz.3.6193': attribute type 1 has an invalid length. [ 503.602864][T28925] bond11: option lp_interval: invalid value (0) [ 503.611447][T28925] bond11: option lp_interval: allowed values 1 - 2147483647 [ 503.631423][T28925] bond11 (unregistering): Released all slaves [ 503.846313][ T8478] net_ratelimit: 14 callbacks suppressed [ 503.846329][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 503.867212][ T8478] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 504.384737][ T138] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 504.399119][ T138] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 504.531363][T28947] batman_adv: batadv0: Adding interface: dummy0 [ 504.539276][T28947] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.572866][T28947] batman_adv: batadv0: Interface activated: dummy0 [ 504.775028][ T5626] Bluetooth: hci3: command tx timeout [ 504.791135][T28983] vlan2: entered promiscuous mode [ 504.796481][T28983] bridge0: entered promiscuous mode [ 504.892895][T28988] lo speed is unknown, defaulting to 1000 [ 504.925635][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 504.940248][ T13] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 505.380687][T29011] tun0: tun_chr_ioctl cmd 1074025675 [ 505.390166][T29011] tun0: persist enabled [ 505.400385][T29012] tun0: tun_chr_ioctl cmd 1074025675 [ 505.425814][T29012] tun0: persist enabled [ 505.469935][ T1168] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 505.484497][ T1168] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 505.645444][T29025] __nla_validate_parse: 8 callbacks suppressed [ 505.645460][T29025] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6219'. [ 505.687763][T29033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6221'. [ 505.799074][T29039] tipc: Enabled bearer , priority 0 [ 505.859238][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6222'. [ 506.002735][T29049] lo speed is unknown, defaulting to 1000 [ 506.008745][ T159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 506.023622][ T159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 506.148069][T29061] netlink: 'syz.3.6229': attribute type 29 has an invalid length. [ 506.167133][T29061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6229'. [ 506.407131][T29070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6233'. [ 506.420304][T29069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6233'. [ 506.448772][T29081] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6235'. [ 506.490879][T29072] bond11: option xmit_hash_policy: invalid value (10) [ 506.509688][T29072] bond11 (unregistering): Released all slaves [ 506.653113][T29088] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6237'. [ 506.675389][T29088] nbd: couldn't find a device at index 0 [ 506.770129][T29092] tipc: Resetting bearer [ 506.785806][T29094] ipt_rpfilter: unknown options [ 506.857304][ T5626] Bluetooth: hci3: command tx timeout [ 506.903081][T29090] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6238'. [ 506.967208][T29090] veth0_to_bond: default FDB implementation only supports local addresses [ 506.987308][ T9] tipc: Node number set to 769 [ 507.053948][T29114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6243'. [ 507.171056][T29126] xt_hashlimit: size too large, truncated to 1048576 [ 507.184449][T29125] netlink: 'syz.4.6247': attribute type 21 has an invalid length. [ 507.211820][T29134] syz_tun: entered allmulticast mode [ 507.277231][T29143] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 507.309389][T29134] syz_tun (unregistering): left allmulticast mode [ 507.577599][T29166] batadv0: entered promiscuous mode [ 507.587582][T29166] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 507.607170][T29166] batadv0: left promiscuous mode [ 507.683748][T29167] vlan3: entered promiscuous mode [ 507.707027][T29167] geneve1: entered promiscuous mode [ 507.725250][T29167] vlan3: entered allmulticast mode [ 507.727909][T29184] netlink: 'syz.4.6259': attribute type 8 has an invalid length. [ 507.736849][T29167] geneve1: entered allmulticast mode [ 507.920222][T29183] syzkaller0: entered promiscuous mode [ 507.932682][T29183] syzkaller0: entered allmulticast mode [ 508.072325][T29212] tipc: Failed to obtain node identity [ 508.078324][T29212] tipc: Enabling of bearer rejected, failed to enable media [ 508.105857][T29194] syzkaller0: entered promiscuous mode [ 508.111458][T29194] syzkaller0: entered allmulticast mode [ 508.310158][T29229] netlink: 'syz.0.6269': attribute type 1 has an invalid length. [ 508.369885][T29232] TCP: TCP_TX_DELAY enabled [ 508.520300][T29255] FAULT_INJECTION: forcing a failure. [ 508.520300][T29255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.526952][T29252] can: request_module (can-proto-4) failed. [ 508.552855][T29255] CPU: 0 UID: 0 PID: 29255 Comm: syz.2.6278 Not tainted syzkaller #0 PREEMPT(full) [ 508.552879][T29255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.552889][T29255] Call Trace: [ 508.552895][T29255] [ 508.552903][T29255] dump_stack_lvl+0xe8/0x150 [ 508.552926][T29255] should_fail_ex+0x40c/0x560 [ 508.552945][T29255] _copy_from_user+0x2d/0xb0 [ 508.552973][T29255] __sys_bpf+0x229/0x950 [ 508.552994][T29255] ? __pfx___sys_bpf+0x10/0x10 [ 508.553022][T29255] ? ksys_write+0x242/0x270 [ 508.553043][T29255] ? __pfx_ksys_write+0x10/0x10 [ 508.553064][T29255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.553081][T29255] __x64_sys_bpf+0x7c/0x90 [ 508.553099][T29255] do_syscall_64+0x174/0x580 [ 508.553119][T29255] ? trace_irq_disable+0x3b/0x140 [ 508.553139][T29255] ? clear_bhb_loop+0x40/0x90 [ 508.553157][T29255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.553172][T29255] RIP: 0033:0x7f13f279ce59 [ 508.553187][T29255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.553200][T29255] RSP: 002b:00007f13f3611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 508.553217][T29255] RAX: ffffffffffffffda RBX: 00007f13f2a15fa0 RCX: 00007f13f279ce59 [ 508.553229][T29255] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 508.553239][T29255] RBP: 00007f13f3611090 R08: 0000000000000000 R09: 0000000000000000 [ 508.553249][T29255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.553259][T29255] R13: 00007f13f2a16038 R14: 00007f13f2a15fa0 R15: 00007ffcbbdf3ee8 [ 508.553277][T29255] [ 508.824486][T29270] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 508.840357][T29270] bond11 (unregistering): Released all slaves [ 508.879204][T29273] lo speed is unknown, defaulting to 1000 [ 509.005943][T29286] netlink: 'syz.0.6285': attribute type 6 has an invalid length. [ 509.026172][T29283] bond11: option packets_per_slave: invalid value (1048582) [ 509.033476][T29283] bond11: option packets_per_slave: allowed values 0 - 65535 [ 509.042230][T29283] bond11 (unregistering): Released all slaves [ 509.158200][T29285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.168846][T29285] vlan2: left promiscuous mode [ 509.173754][T29285] bridge0: left promiscuous mode [ 509.182794][T29285] vlan3: left promiscuous mode [ 509.188828][T29285] geneve1: left promiscuous mode [ 509.316768][ T159] net_ratelimit: 11 callbacks suppressed [ 509.316785][ T159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 509.337216][ T159] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 509.473420][T29299] lo speed is unknown, defaulting to 1000 [ 509.680968][T29307] tipc: Started in network mode [ 509.703608][T29307] tipc: Node identity bacbbee00c67, cluster identity 4711 [ 509.707147][T29311] FAULT_INJECTION: forcing a failure. [ 509.707147][T29311] name failslab, interval 1, probability 0, space 0, times 0 [ 509.728435][T29307] tipc: Enabled bearer , priority 0 [ 509.754348][T29311] CPU: 0 UID: 0 PID: 29311 Comm: syz.4.6293 Not tainted syzkaller #0 PREEMPT(full) [ 509.754373][T29311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.754382][T29311] Call Trace: [ 509.754389][T29311] [ 509.754396][T29311] dump_stack_lvl+0xe8/0x150 [ 509.754420][T29311] should_fail_ex+0x40c/0x560 [ 509.754440][T29311] should_failslab+0xa8/0x100 [ 509.754463][T29311] __kmalloc_cache_node_noprof+0x8c/0x690 [ 509.754485][T29311] ? unwind_next_frame+0x8f/0x2550 [ 509.754503][T29311] ? __get_vm_area_node+0x136/0x300 [ 509.754526][T29311] __get_vm_area_node+0x136/0x300 [ 509.754542][T29311] ? is_bpf_text_address+0x26/0x2b0 [ 509.754564][T29311] __vmalloc_node_range_noprof+0x358/0x1730 [ 509.754582][T29311] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.754601][T29311] ? lock_release+0x4b/0x3c0 [ 509.754621][T29311] ? lock_release+0x4b/0x3c0 [ 509.754642][T29311] ? is_bpf_text_address+0x292/0x2b0 [ 509.754665][T29311] ? lock_release+0x4b/0x3c0 [ 509.754683][T29311] ? arch_stack_walk+0xfb/0x150 [ 509.754699][T29311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 509.754724][T29311] ? __might_fault+0xaf/0x130 [ 509.754739][T29311] ? rcu_is_watching+0x15/0xb0 [ 509.754753][T29311] ? lock_acquire+0x5f/0x350 [ 509.754769][T29311] ? aa_file_perm+0x18b/0x15f0 [ 509.754786][T29311] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.754805][T29311] __vmalloc_noprof+0xd2/0x120 [ 509.754823][T29311] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.754843][T29311] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 509.754861][T29311] ? bpf_prog_alloc+0x2a/0x1a0 [ 509.754881][T29311] bpf_prog_alloc+0x3c/0x1a0 [ 509.754902][T29311] bpf_prog_load+0x788/0x1a10 [ 509.754922][T29311] ? rcu_is_watching+0x15/0xb0 [ 509.754937][T29311] ? get_pid_task+0x20/0x1f0 [ 509.754954][T29311] ? get_pid_task+0x20/0x1f0 [ 509.754969][T29311] ? __pfx_bpf_prog_load+0x10/0x10 [ 509.754989][T29311] ? __might_fault+0xaf/0x130 [ 509.755012][T29311] ? __might_fault+0xaf/0x130 [ 509.755029][T29311] ? __might_fault+0xcb/0x130 [ 509.755046][T29311] ? bpf_lsm_bpf+0x9/0x20 [ 509.755068][T29311] ? security_bpf+0x7e/0x2d0 [ 509.755091][T29311] __sys_bpf+0x618/0x950 [ 509.755112][T29311] ? __pfx___sys_bpf+0x10/0x10 [ 509.755138][T29311] ? ksys_write+0x242/0x270 [ 509.755158][T29311] ? __pfx_ksys_write+0x10/0x10 [ 509.755179][T29311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.755195][T29311] __x64_sys_bpf+0x7c/0x90 [ 509.755212][T29311] do_syscall_64+0x174/0x580 [ 509.755232][T29311] ? trace_irq_disable+0x3b/0x140 [ 509.755252][T29311] ? clear_bhb_loop+0x40/0x90 [ 509.755271][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.755286][T29311] RIP: 0033:0x7f79d799ce59 [ 509.755302][T29311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.755316][T29311] RSP: 002b:00007f79d5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.755334][T29311] RAX: ffffffffffffffda RBX: 00007f79d7c15fa0 RCX: 00007f79d799ce59 [ 509.755346][T29311] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 509.755357][T29311] RBP: 00007f79d5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 509.755367][T29311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.755377][T29311] R13: 00007f79d7c16038 R14: 00007f79d7c15fa0 R15: 00007ffc3210a808 [ 509.755396][T29311] [ 510.111195][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 510.125576][T17574] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 510.160078][T29311] syz.4.6293: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 510.184197][T29311] CPU: 1 UID: 0 PID: 29311 Comm: syz.4.6293 Not tainted syzkaller #0 PREEMPT(full) [ 510.184222][T29311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.184232][T29311] Call Trace: [ 510.184239][T29311] [ 510.184246][T29311] dump_stack_lvl+0xe8/0x150 [ 510.184268][T29311] warn_alloc+0x249/0x340 [ 510.184291][T29311] ? __pfx_warn_alloc+0x10/0x10 [ 510.184311][T29311] ? __get_vm_area_node+0x136/0x300 [ 510.184331][T29311] ? __get_vm_area_node+0x2af/0x300 [ 510.184352][T29311] __vmalloc_node_range_noprof+0x37d/0x1730 [ 510.184372][T29311] ? lock_release+0x4b/0x3c0 [ 510.184393][T29311] ? lock_release+0x4b/0x3c0 [ 510.184416][T29311] ? is_bpf_text_address+0x292/0x2b0 [ 510.184438][T29311] ? lock_release+0x4b/0x3c0 [ 510.184455][T29311] ? arch_stack_walk+0xfb/0x150 [ 510.184471][T29311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 510.184488][T29311] ? __might_fault+0xaf/0x130 [ 510.184504][T29311] ? rcu_is_watching+0x15/0xb0 [ 510.184522][T29311] ? lock_acquire+0x5f/0x350 [ 510.184540][T29311] ? aa_file_perm+0x18b/0x15f0 [ 510.184558][T29311] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 510.184576][T29311] __vmalloc_noprof+0xd2/0x120 [ 510.184594][T29311] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 510.184615][T29311] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 510.184634][T29311] ? bpf_prog_alloc+0x2a/0x1a0 [ 510.184654][T29311] bpf_prog_alloc+0x3c/0x1a0 [ 510.184673][T29311] bpf_prog_load+0x788/0x1a10 [ 510.184693][T29311] ? rcu_is_watching+0x15/0xb0 [ 510.184708][T29311] ? get_pid_task+0x20/0x1f0 [ 510.184725][T29311] ? get_pid_task+0x20/0x1f0 [ 510.184741][T29311] ? __pfx_bpf_prog_load+0x10/0x10 [ 510.184760][T29311] ? __might_fault+0xaf/0x130 [ 510.184782][T29311] ? __might_fault+0xaf/0x130 [ 510.184799][T29311] ? __might_fault+0xcb/0x130 [ 510.184816][T29311] ? bpf_lsm_bpf+0x9/0x20 [ 510.184836][T29311] ? security_bpf+0x7e/0x2d0 [ 510.184859][T29311] __sys_bpf+0x618/0x950 [ 510.184880][T29311] ? __pfx___sys_bpf+0x10/0x10 [ 510.184905][T29311] ? ksys_write+0x242/0x270 [ 510.184926][T29311] ? __pfx_ksys_write+0x10/0x10 [ 510.184947][T29311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.184964][T29311] __x64_sys_bpf+0x7c/0x90 [ 510.184982][T29311] do_syscall_64+0x174/0x580 [ 510.185002][T29311] ? trace_irq_disable+0x3b/0x140 [ 510.185023][T29311] ? clear_bhb_loop+0x40/0x90 [ 510.185040][T29311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.185056][T29311] RIP: 0033:0x7f79d799ce59 [ 510.185071][T29311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.185085][T29311] RSP: 002b:00007f79d5bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 510.185103][T29311] RAX: ffffffffffffffda RBX: 00007f79d7c15fa0 RCX: 00007f79d799ce59 [ 510.185115][T29311] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 510.185125][T29311] RBP: 00007f79d5bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.185135][T29311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.185145][T29311] R13: 00007f79d7c16038 R14: 00007f79d7c15fa0 R15: 00007ffc3210a808 [ 510.185163][T29311] [ 510.532818][T29311] Mem-Info: [ 510.540432][T29311] active_anon:13384 inactive_anon:0 isolated_anon:0 [ 510.540432][T29311] active_file:2595 inactive_file:41149 isolated_file:0 [ 510.540432][T29311] unevictable:768 dirty:411 writeback:0 [ 510.540432][T29311] slab_reclaimable:13262 slab_unreclaimable:145206 [ 510.540432][T29311] mapped:29991 shmem:1428 pagetables:1615 [ 510.540432][T29311] sec_pagetables:0 bounce:0 [ 510.540432][T29311] kernel_misc_reclaimable:0 [ 510.540432][T29311] free:1223939 free_pcp:43907 free_cma:0 [ 510.587364][T29311] Node 0 active_anon:53436kB inactive_anon:0kB active_file:10380kB inactive_file:164392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:54428kB dirty:1644kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17676kB pagetables:6308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 510.636200][T29307] syzkaller0: entered promiscuous mode [ 510.649203][T29307] syzkaller0: entered allmulticast mode [ 510.654931][T29311] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:65536kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 510.691533][T29312] tipc: Resetting bearer [ 510.714847][T29311] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 510.726913][T29324] __nla_validate_parse: 19 callbacks suppressed [ 510.726931][T29324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6298'. [ 510.791416][T29325] netlink: 'syz.3.6298': attribute type 1 has an invalid length. [ 510.791525][T29306] tipc: Resetting bearer [ 510.804873][T29311] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 510.810718][T29311] Node 0 DMA32 free:1174308kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53328kB inactive_anon:0kB active_file:10380kB inactive_file:164392kB unevictable:1536kB writepending:1652kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:106280kB local_pcp:28420kB free_cma:0kB [ 510.850072][T29311] lowmem_reserve[]: 0 0 0 0 0 [ 510.850719][T29331] netlink: 'syz.0.6300': attribute type 10 has an invalid length. [ 510.855130][T29311] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 510.855183][T29311] lowmem_reserve[]: 0 0 0 0 0 [ 510.855216][T29311] Node 1 Normal free:3718284kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62952kB local_pcp:34468kB free_cma:0kB [ 510.855265][T29311] lowmem_reserve[]: 0 0 0 0 0 [ 510.855312][T29311] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 510.855442][T29311] Node 0 DMA32: 9325*4kB (UM) 7320*8kB (UME) 4101*16kB (UM) 105*32kB (UM) 632*64kB (UM) 713*128kB [ 510.866610][T29331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6300'. [ 510.895351][T29311] (UM) 709*256kB (UM) 504*512kB (UM) 298*1024kB (UME) 65*2048kB (U) 0*4096kB = 1174372kB [ 510.971389][T29306] tipc: Disabling bearer [ 510.980456][T29311] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 510.980550][T29311] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 5*16kB (UM) 8*32kB (UM) 14*64kB (UM) 5*128kB (UM) 9*256kB (UM) 10*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 903*4096kB (UM) = 3718284kB [ 510.980697][T29311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.980712][T29311] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.980727][T29311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.980741][T29311] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 510.980755][T29311] 45169 total pagecache pages [ 510.980778][T29311] 0 pages in swap cache [ 510.980786][T29311] Free swap = 124996kB [ 510.980793][T29311] Total swap = 124996kB [ 510.980801][T29311] 2097051 pages RAM [ 510.980808][T29311] 0 pages HighMem/MovableOnly [ 510.980815][T29311] 427122 pages reserved [ 510.980822][T29311] 0 pages cma reserved [ 511.029199][T29341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6298'. [ 511.065731][T17580] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 511.111008][T17580] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 511.148353][T29325] 8021q: adding VLAN 0 to HW filter on device bond11 [ 511.163498][T29332] bond11: (slave geneve3): making interface the new active one [ 511.174249][T29332] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 511.189386][T29334] netlink: 'syz.3.6298': attribute type 8 has an invalid length. [ 511.197248][T29334] sch_fq: defrate 0 ignored. [ 511.203147][ T9] tipc: Node number set to 3064774368 [ 511.250715][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'. [ 511.260213][T29350] v: renamed from ip6_vti0 (while UP) [ 511.269247][T29353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6304'. [ 511.282864][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6305'. [ 511.293142][T29350] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 511.294098][T29354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6304'. [ 511.314653][T29350] netlink: 'syz.0.6305': attribute type 10 has an invalid length. [ 511.330275][T29350] syz_tun: entered promiscuous mode [ 511.362022][T29350] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 511.634740][T29337] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 511.649122][T29337] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 511.665956][T29381] nbd: couldn't find a device at index 0 [ 511.692250][T29381] netlink: 'syz.2.6312': attribute type 11 has an invalid length. [ 511.742893][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6313'. [ 511.768788][T29386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6313'. [ 511.794209][T29392] netlink: zone id is out of range [ 511.824246][T29394] netlink: 'syz.2.6312': attribute type 1 has an invalid length. [ 511.850366][T29394] netlink: 'syz.2.6312': attribute type 3 has an invalid length. [ 511.873631][T29394] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6312'. [ 512.078066][ T29] audit: type=1800 audit(1781754662.873:17): pid=29412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6317" name="memory.events" dev="tmpfs" ino=247 res=0 errno=0 [ 512.167757][T29418] veth0_to_bridge: entered promiscuous mode [ 512.174212][T29418] macvtap1: entered allmulticast mode [ 512.179880][T29418] veth0_to_bridge: entered allmulticast mode [ 512.192381][T29418] veth0_to_bridge: left allmulticast mode [ 512.203569][T29418] veth0_to_bridge: left promiscuous mode [ 512.629438][T17578] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.663953][T29454] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 512.688831][T29454] bond1 (unregistering): Released all slaves [ 512.740597][T17578] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.761744][T17578] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.783141][T29459] batadv_slave_1: entered promiscuous mode [ 512.804175][T17578] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.824118][T29453] batadv_slave_1: left promiscuous mode [ 513.746452][T29504] netlink: 'syz.1.6335': attribute type 7 has an invalid length. [ 514.725292][T17578] net_ratelimit: 323 callbacks suppressed [ 514.725309][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 514.742897][T29519] netlink: 'syz.2.6340': attribute type 1 has an invalid length. [ 514.745563][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 514.764249][T29519] bond4: entered promiscuous mode [ 514.773532][T29519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.294713][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 515.309108][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 515.359636][T29429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.798169][T29556] lo: entered allmulticast mode [ 515.826201][ T8471] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 515.840651][ T8471] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 516.376273][ T8471] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 516.391198][ T8471] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 516.914659][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 516.929020][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.457704][T29528] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.572360][T29576] __nla_validate_parse: 17 callbacks suppressed [ 518.572377][T29576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6356'. [ 518.863180][T29598] xt_hashlimit: size too large, truncated to 1048576 [ 518.917772][T29603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6364'. [ 518.976802][T29603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6364'. [ 519.176917][T29617] bond13 (unregistering): Released all slaves [ 519.195631][T29609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6367'. [ 519.205428][T29622] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6370'. [ 519.220462][T29626] batman_adv: batadv0: Interface deactivated: dummy0 [ 519.232203][T29626] batman_adv: batadv0: Removing interface: dummy0 [ 519.303907][T29626] team0: Port device xfrm0 added [ 519.334305][T29626] tipc: Enabled bearer , priority 0 [ 519.343322][T29630] syzkaller0: renamed from batadv_slave_1 (while UP) [ 519.362508][T29630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6373'. [ 519.392170][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6373'. [ 519.417281][T29630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6373'. [ 519.434071][T29639] netlink: 'syz.3.6377': attribute type 10 has an invalid length. [ 519.446584][T29639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6377'. [ 519.594396][T29647] mac80211_hwsim hwsim94 »»»»»»: renamed from wlan0 [ 519.717927][T29649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6380'. [ 520.008801][T17578] net_ratelimit: 11 callbacks suppressed [ 520.008818][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 520.029027][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 520.219625][T29663] hsr0: left promiscuous mode [ 520.314898][T29663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.355483][T29663] 8021q: adding VLAN 0 to HW filter on device eth0 [ 520.388810][T29663] 8021q: adding VLAN 0 to HW filter on device eth1 [ 520.427404][T29663] 8021q: adding VLAN 0 to HW filter on device eth2 [ 520.463198][T29663] 8021q: adding VLAN 0 to HW filter on device eth3 [ 520.512971][T29663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.530938][T29663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.560018][T29668] IPv6: sit1: Disabled Multicast RS [ 520.580727][T29668] sit1: entered allmulticast mode [ 520.715236][ T47] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 520.729777][ T47] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 521.042661][ T9] bridge0: entered promiscuous mode [ 521.221676][T29704] netlink: 'syz.1.6389': attribute type 10 has an invalid length. [ 521.359970][T29704] team0: entered promiscuous mode [ 521.370417][T29704] team_slave_0: entered promiscuous mode [ 521.435610][T29704] team_slave_1: entered promiscuous mode [ 521.458000][T29704] team0: entered allmulticast mode [ 521.466869][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 521.481220][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 521.514308][T29704] team_slave_0: entered allmulticast mode [ 521.544639][T29704] team_slave_1: entered allmulticast mode [ 521.598521][T29704] bridge0: port 3(team0) entered blocking state [ 521.663701][T29704] bridge0: port 3(team0) entered disabled state [ 521.741881][T29704] bridge0: port 3(team0) entered blocking state [ 521.748270][T29704] bridge0: port 3(team0) entered forwarding state [ 521.953880][T29725] syzkaller0: entered promiscuous mode [ 521.987324][T29725] syzkaller0: entered allmulticast mode [ 522.132925][T29749] sctp: [Deprecated]: syz.1.6397 (pid 29749) Use of int in maxseg socket option. [ 522.132925][T29749] Use struct sctp_assoc_value instead [ 522.224642][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.239221][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 522.755931][ T56] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.770287][ T56] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 524.280818][T29706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.594244][T29772] syzkaller0: entered promiscuous mode [ 524.616845][T29772] syzkaller0: entered allmulticast mode [ 525.058507][T29794] __nla_validate_parse: 5 callbacks suppressed [ 525.058527][T29794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6408'. [ 525.218583][T29794] net_ratelimit: 9 callbacks suppressed [ 525.218600][T29794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.335005][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 525.349433][T29333] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 525.371061][T29800] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6409'. [ 525.444793][T29770] sit0: entered promiscuous mode [ 525.488425][T29770] netlink: 'syz.3.6404': attribute type 1 has an invalid length. [ 525.512748][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6409'. [ 525.576682][T29770] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6404'. [ 525.695596][T29802] bond1: Unable to set up delay as MII monitoring is disabled [ 525.776262][T29802] bond1 (unregistering): Released all slaves [ 525.847996][T29813] tipc: Enabled bearer , priority 0 [ 525.883922][T29813] syzkaller0: entered promiscuous mode [ 525.940422][T29813] syzkaller0: entered allmulticast mode [ 525.985409][T29815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6414'. [ 526.014645][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 526.029014][T17578] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 526.050766][T29816] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6414'. [ 526.096645][T29819] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6414'. [ 526.201139][T29829] netlink: 'syz.3.6417': attribute type 8 has an invalid length. [ 526.287237][T29828] tipc: Resetting bearer [ 528.858845][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 530.489981][ C1] sched: DL replenish lagged too much [ 530.780231][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 531.273466][T17552] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 531.295055][T17552] batman_adv: batadv0: Local translation table size (92) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 531.415274][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 588.379239][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 592.359405][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 603.737353][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 603.737570][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 610.564088][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 634.114494][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 634.121460][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29823/1:b..l [ 634.129462][ C0] rcu: (detected by 0, t=10503 jiffies, g=122185, q=1537740 ncpus=2) [ 634.137632][ C0] task:syz.3.6417 state:R running task stack:25168 pid:29823 tgid:29823 ppid:17941 task_flags:0x40004c flags:0x00080001 [ 634.151123][ C0] Call Trace: [ 634.154408][ C0] [ 634.157343][ C0] __schedule+0x17d9/0x56c0 [ 634.161866][ C0] ? unwind_next_frame+0x8f/0x2550 [ 634.166983][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.171755][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 634.176961][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.181728][ C0] ? __pfx___schedule+0x10/0x10 [ 634.186585][ C0] ? lock_release+0x4b/0x3c0 [ 634.191185][ C0] ? lock_release+0x4b/0x3c0 [ 634.195783][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.200552][ C0] preempt_schedule_irq+0x4d/0xa0 [ 634.205583][ C0] irqentry_exit+0x14f/0x8f0 [ 634.210177][ C0] ? trace_irq_disable+0x3b/0x140 [ 634.215213][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 634.221198][ C0] RIP: 0010:unwind_next_frame+0x1f6/0x2550 [ 634.227013][ C0] Code: 08 8b 15 dd 29 b1 0c 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 24 a2 71 91 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d [ 634.246618][ C0] RSP: 0018:ffffc90005caf4a8 EFLAGS: 00000a02 [ 634.252686][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000080000000 [ 634.260660][ C0] RDX: 00000000000aaba9 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 634.268634][ C0] RBP: ffffffff816d2f12 R08: 0000000000000000 R09: 0000000000000000 [ 634.276605][ C0] R10: ffffc90005caf5f8 R11: fffff52000b95ec1 R12: dffffc0000000000 [ 634.284575][ C0] R13: ffffffff917356e0 R14: ffffc90005caf5a8 R15: 0000000000006d2f [ 634.292554][ C0] ? arch_stack_walk+0xe2/0x150 [ 634.297421][ C0] ? unwind_next_frame+0xb5/0x2550 [ 634.302547][ C0] ? arch_stack_walk+0xe3/0x150 [ 634.307404][ C0] ? unwind_next_frame+0x8f/0x2550 [ 634.312527][ C0] __unwind_start+0x514/0x660 [ 634.317214][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.323374][ C0] arch_stack_walk+0xe3/0x150 [ 634.328065][ C0] ? arch_stack_walk+0xe3/0x150 [ 634.332921][ C0] stack_trace_save+0xa9/0x100 [ 634.337693][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 634.343071][ C0] ? stack_depot_save_flags+0x33/0x800 [ 634.348535][ C0] kasan_save_track+0x3e/0x80 [ 634.353242][ C0] __kasan_kmalloc+0x93/0xb0 [ 634.357840][ C0] __kmalloc_cache_noprof+0x318/0x660 [ 634.363225][ C0] ? kmem_cache_free+0x156/0x650 [ 634.368169][ C0] ? __kmalloc_cache_noprof+0x157/0x660 [ 634.373722][ C0] ? tear_down_vmas+0x312/0x520 [ 634.378575][ C0] kmem_cache_free+0x156/0x650 [ 634.383349][ C0] tear_down_vmas+0x312/0x520 [ 634.388039][ C0] exit_mmap+0x4ca/0x9f0 [ 634.392288][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 634.397066][ C0] ? __pfx_exit_aio+0x10/0x10 [ 634.401751][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 634.407388][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 634.412597][ C0] __mmput+0x118/0x420 [ 634.416673][ C0] exit_mm+0x221/0x2d0 [ 634.420746][ C0] do_exit+0x6cd/0x2360 [ 634.424904][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 634.429847][ C0] ? __pfx_do_exit+0x10/0x10 [ 634.434438][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 634.439818][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 634.445203][ C0] do_group_exit+0x22d/0x2f0 [ 634.449800][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.455868][ C0] __x64_sys_exit_group+0x3f/0x40 [ 634.460895][ C0] x64_sys_call+0x221a/0x2240 [ 634.465573][ C0] do_syscall_64+0x174/0x580 [ 634.470172][ C0] ? clear_bhb_loop+0x40/0x90 [ 634.474851][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.480744][ C0] RIP: 0033:0x7f7d9ed9ce59 [ 634.485164][ C0] RSP: 002b:00007ffe5122eaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 634.493583][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d9ed9ce59 [ 634.501555][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.509528][ C0] RBP: 00007ffe5122eb5c R08: 0000000000000000 R09: 00000000000927c0 [ 634.517504][ C0] R10: 00007f7d9f016038 R11: 0000000000000246 R12: 0000000000000253 [ 634.525476][ C0] R13: 00000000000927c0 R14: 0000000000080539 R15: 00007ffe5122ebb0 [ 634.533460][ C0] [ 634.536481][ C0] rcu: rcu_preempt kthread starved for 779 jiffies! g122185 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 634.547585][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 634.557552][ C0] rcu: RCU grace-period kthread stack dump: [ 634.563476][ C0] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 634.576960][ C0] Call Trace: [ 634.580239][ C0] [ 634.583171][ C0] __schedule+0x17d9/0x56c0 [ 634.587685][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.592462][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.597231][ C0] ? __pfx___schedule+0x10/0x10 [ 634.602087][ C0] ? schedule+0x90/0x360 [ 634.606332][ C0] ? rcu_is_watching+0x15/0xb0 [ 634.611107][ C0] ? lock_release+0x4b/0x3c0 [ 634.615713][ C0] schedule+0x164/0x360 [ 634.619875][ C0] schedule_timeout+0x152/0x2c0 [ 634.624726][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 634.630101][ C0] ? __pfx_process_timeout+0x10/0x10 [ 634.635394][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 634.641203][ C0] ? prepare_to_swait_event+0x322/0x350 [ 634.646756][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 634.651622][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 634.657775][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 634.663067][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 634.668275][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 634.672874][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 634.678082][ C0] ? __kthread_parkme+0x71/0x1f0 [ 634.683028][ C0] ? __kthread_parkme+0x196/0x1f0 [ 634.688062][ C0] kthread+0x388/0x470 [ 634.692132][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 634.697349][ C0] ? __pfx_kthread+0x10/0x10 [ 634.701947][ C0] ret_from_fork+0x514/0xb70 [ 634.706541][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 634.711652][ C0] ? __switch_to+0xc89/0x1420 [ 634.716336][ C0] ? __pfx_kthread+0x10/0x10 [ 634.720932][ C0] ret_from_fork_asm+0x1a/0x30 [ 634.725711][ C0] [ 634.728729][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 634.735059][ C0] Sending NMI from CPU 0 to CPUs 1: [ 634.740274][ C1] NMI backtrace for cpu 1 [ 634.740289][ C1] CPU: 1 UID: 0 PID: 8471 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 634.740308][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.740319][ C1] Workqueue: krds_cp_wq#1/5 rds_connect_worker [ 634.740345][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 634.740364][ C1] Code: e8 fb f7 fc 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 c7 27 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c 60 86 00 48 c7 c3 d8 78 3b 93 49 03 1e 48 89 [ 634.740377][ C1] RSP: 0018:ffffc90000a07eb8 EFLAGS: 00000046 [ 634.740390][ C1] RAX: 1ffffffff1c4f8fb RBX: 0000000000000001 RCX: 0000000080000102 [ 634.740401][ C1] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 634.740413][ C1] RBP: ffffc90000a08100 R08: ffffffff903116f7 R09: 1ffffffff20622de [ 634.740425][ C1] R10: dffffc0000000000 R11: fffffbfff20622df R12: 1ffff92000141008 [ 634.740437][ C1] R13: 0000000000000001 R14: ffffffff8e27c7d8 R15: dffffc0000000000 [ 634.740448][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 634.740461][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.740472][ C1] CR2: 00007f851cc4063b CR3: 000000000e746000 CR4: 00000000003526f0 [ 634.740487][ C1] Call Trace: [ 634.740494][ C1] [ 634.740501][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 634.740523][ C1] trace_irq_enable+0x3b/0x140 [ 634.740545][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 634.740565][ C1] trace_hardirqs_on+0x18/0x40 [ 634.740585][ C1] __local_bh_enable_ip+0xd0/0x130 [ 634.740606][ C1] ipt_do_table+0x137f/0x15d0 [ 634.740633][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 634.740657][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 634.740678][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 634.740702][ C1] ? nf_nat_ipv4_local_fn+0x422/0x570 [ 634.740725][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 634.740747][ C1] nf_hook_slow+0xc5/0x220 [ 634.740764][ C1] ? __pfx_dst_output+0x10/0x10 [ 634.740783][ C1] nf_hook+0x22a/0x3a0 [ 634.740802][ C1] ? nf_hook+0xa1/0x3a0 [ 634.740818][ C1] ? __pfx_nf_hook+0x10/0x10 [ 634.740836][ C1] ? __pfx_dst_output+0x10/0x10 [ 634.740859][ C1] ? rcu_is_watching+0x15/0xb0 [ 634.740876][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 634.740902][ C1] __ip_local_out+0x558/0x6a0 [ 634.740919][ C1] ? __pfx_dst_output+0x10/0x10 [ 634.740938][ C1] ip_local_out+0x2a/0x190 [ 634.740957][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 634.740981][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 634.740999][ C1] ? synproxy_pernet+0x45/0x270 [ 634.741024][ C1] nft_synproxy_eval_v4+0x37b/0x530 [ 634.741045][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 634.741064][ C1] ? nf_ip_checksum+0x13c/0x510 [ 634.741086][ C1] nft_synproxy_do_eval+0x335/0x550 [ 634.741105][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 634.741130][ C1] nft_do_chain+0x48d/0x1b10 [ 634.741153][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 634.741173][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 634.741195][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 634.741228][ C1] nft_do_chain_inet+0x360/0x4b0 [ 634.741248][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 634.741267][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 634.741291][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 634.741315][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 634.741334][ C1] nf_hook_slow+0xc5/0x220 [ 634.741352][ C1] NF_HOOK+0x21f/0x3c0 [ 634.741366][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 634.741387][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 634.741402][ C1] ? NF_HOOK+0x9e/0x3c0 [ 634.741415][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 634.741430][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 634.741448][ C1] ? ip_local_deliver+0x113/0x190 [ 634.741464][ C1] NF_HOOK+0x336/0x3c0 [ 634.741478][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 634.741493][ C1] ? NF_HOOK+0x9e/0x3c0 [ 634.741506][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 634.741521][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 634.741535][ C1] ? ip_rcv_core+0x88d/0xd50 [ 634.741551][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 634.741565][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 634.741580][ C1] process_backlog+0xa34/0x1860 [ 634.741602][ C1] ? process_backlog+0x3c3/0x1860 [ 634.741626][ C1] __napi_poll+0xaa/0x330 [ 634.741644][ C1] net_rx_action+0x61d/0xf50 [ 634.741668][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 634.741697][ C1] handle_softirqs+0x225/0x840 [ 634.741718][ C1] ? do_softirq+0x76/0xd0 [ 634.741738][ C1] ? __inet6_bind+0x386/0xf30 [ 634.741760][ C1] do_softirq+0x76/0xd0 [ 634.741778][ C1] [ 634.741783][ C1] [ 634.741789][ C1] __local_bh_enable_ip+0xf8/0x130 [ 634.741809][ C1] __inet6_bind+0x386/0xf30 [ 634.741833][ C1] kernel_bind+0x13e/0x1c0 [ 634.741854][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 634.741874][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 634.741892][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 634.741912][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 634.741928][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 634.741949][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 634.741968][ C1] ? rcu_is_watching+0x15/0xb0 [ 634.741984][ C1] ? lock_acquire+0x5f/0x350 [ 634.742008][ C1] rds_connect_worker+0x1d8/0x290 [ 634.742029][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 634.742048][ C1] process_scheduled_works+0xa8e/0x14e0 [ 634.742077][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 634.742096][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 634.742117][ C1] ? assign_work+0x3cf/0x5d0 [ 634.742137][ C1] worker_thread+0xa47/0xfb0 [ 634.742167][ C1] kthread+0x388/0x470 [ 634.742181][ C1] ? __pfx_worker_thread+0x10/0x10 [ 634.742199][ C1] ? __pfx_kthread+0x10/0x10 [ 634.742214][ C1] ret_from_fork+0x514/0xb70 [ 634.742230][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 634.742245][ C1] ? __switch_to+0xc89/0x1420 [ 634.742267][ C1] ? __pfx_kthread+0x10/0x10 [ 634.742281][ C1] ret_from_fork_asm+0x1a/0x30 [ 634.742305][ C1]