last executing test programs: 19.776583621s ago: executing program 4 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) socket$kcm(0x11, 0x200000000000003, 0x300) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x8d}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10, 0xf1}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @remote, 0x8}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x2, {0x1, 0x1}, {0x0, 0xf0, 0x2}, 0xfe, 0xfe}, {0x2, 0x3, {0x1, 0x1, 0x3}, {0x2, 0x0, 0x2}, 0x0, 0x1}], 0x40) sendto$inet6(r5, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="0daaedb5bd36fa964f609a0252f3bcc9913e1c309b0f3afe5cb359bf544c7961e59d5196e914a133b2", 0x29}], 0x1}}], 0x1, 0x0) 19.619625307s ago: executing program 4 (id=531): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0", 0x89}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r5}, 0x18) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) accept4$rose(r6, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="f600f7f5360004000000000200000000000000010100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r7, @ANYRES32=r2, @ANYBLOB="aa45ae5013cc78af8746e708733fc2f10859ff493a4acfe7d3a774fcc4206f844b924e4741bbd366bed12cbf44e63e5452e224babf0ea1bdf2493a9dabaa8910d367f5f0f6c2c9176d8a354eb681370f9781edf76959d067229c579cdf1fefd022e1071a70fd9dde252ff01d65d6ebd8e91a4e59d99a5297d000ad5866126829c53af5d5f737"], 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc1000002b000b000000000000000000070000000800030004000100a01001"], 0x10bc}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f0000000600), &(0x7f0000000600), 0x80, r8, 0x0, 0x7}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x4, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) socket$isdn(0x22, 0x3, 0x24) 19.259444072s ago: executing program 1 (id=533): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe65, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x3000c81c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0000000000000000100010018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000003085000000d1000000bca900000000000035090100000000009500500000000006bf980000000000003608fffff3ffffff85000000079990db513abfea47000000950000000000cab9"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0000000000000000100010018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000003085000000d1000000bca900000000000035090100000000009500500000000006bf980000000000003608fffff3ffffff85000000079990db513abfea47000000950000000000cab9"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010300000068416a8fb4e89743090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) close(r4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0006000000000000240012800b00010067656e657665000014000280060005004e24000008000b"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 19.013904359s ago: executing program 1 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x9, 0x28, 0x2}, @srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}, @dstopts={0x3b}]}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x9, 0x6, 0x6, 0x5, 0x2, 0x4}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800310800000000000000001d01000005000d00"], 0x1c}}, 0x800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000014000780080012404b3762bc080008400000003716000300686173683a6e65742c706f72742c6e6574000000050005000a00000005000400000000000900020073797a3100008000050001000700a946"], 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, 0x0, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x170}, 0x841) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008081}, 0x4008811) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x61d0, 0x0) 18.402906954s ago: executing program 0 (id=541): sendmmsg(0xffffffffffffffff, &(0x7f0000001fc0), 0x0, 0x24044015) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c00}, 0x0) r1 = accept4(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000240)=0x80, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x1, 'sed\x00', 0x2, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x1ea8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x7, 0x5}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1e74, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x1e38, 0x2, [@m_police={0x1db4, 0x6, 0x0, 0x0, {{0xb}, {0x1d20, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x2000000, 0x3, 0x9767, 0xd, 0x8000, 0x4, 0xe3a4, 0x7ff, 0x4, 0x2, 0x8, 0x9, 0x9, 0xa, 0x2, 0xfff, 0x85e, 0x2, 0x80000001, 0x3, 0x8001, 0x6, 0x101, 0x5, 0x0, 0x2, 0x9, 0x5, 0x400, 0xfffffff7, 0x3, 0x7, 0x1, 0x4, 0x1, 0x5, 0x5, 0x0, 0x827b, 0xffffcec8, 0x4, 0x80000001, 0x3, 0x800, 0x4710, 0x2, 0x4, 0x6, 0xffff, 0x5, 0x1, 0x9, 0x1, 0x7, 0x2, 0x4, 0x7fff, 0x8, 0x0, 0x7, 0x3, 0x97, 0xfffffffb, 0x400, 0xa42a, 0xfffffbff, 0x3fe9, 0x5dfa, 0xa, 0x746, 0x8001, 0x9, 0x8, 0x7, 0xa, 0x77a, 0xc828, 0x5c, 0x0, 0x2, 0x2, 0x7, 0x7ff, 0x0, 0x7fff, 0x1ff, 0x4, 0x3, 0x7f, 0x4, 0xfffffff8, 0x7, 0x7, 0xfffffe01, 0x3, 0x2, 0xffffffff, 0x4c, 0x80000000, 0x8, 0x7, 0x7, 0x0, 0x7fffffff, 0x1, 0x4, 0x81, 0x1, 0x80000001, 0x7f, 0x0, 0x84, 0x0, 0x2, 0x51a8, 0x881, 0x6, 0x4, 0x7, 0x2, 0x7, 0xfffff0d5, 0x6, 0x4, 0x3, 0x80000001, 0x7, 0x700000, 0x3, 0x1, 0x87, 0xffe, 0x5, 0x7e, 0xc61, 0x4, 0x7, 0x0, 0x7f, 0x2, 0xff, 0x46, 0x7, 0x5, 0x6, 0x2, 0x5, 0xc887, 0x4, 0x6, 0x2, 0x8fe, 0x55ba, 0x7fffffff, 0x7fffffff, 0x5, 0x6, 0x401, 0x8, 0x2, 0x4, 0x8, 0x7fffffff, 0x7, 0x4, 0xffffffff, 0xfffff801, 0x3, 0x9, 0x7, 0xe5f, 0x1, 0x114, 0x5, 0x8, 0x7, 0x84, 0x80, 0x1, 0x2, 0x7fffffff, 0x0, 0x7a9, 0x4, 0xe, 0x4a, 0x5c, 0x8, 0x401, 0x8, 0xfffffe00, 0x6, 0x6, 0x0, 0x5, 0x9, 0x6, 0x7, 0x3, 0xb, 0x80, 0x8, 0x5, 0xfffffff7, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8, 0x10001, 0x6, 0x101, 0x7, 0x100, 0x4, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x1, 0x6e, 0x4ef73afd, 0xffff, 0x8, 0x7, 0x2, 0xae9, 0x1, 0x0, 0x5, 0xfff, 0x2, 0x1, 0xc782, 0x81, 0x1, 0x1000000, 0x3, 0x0, 0x7d9c, 0x8, 0x80000001, 0x7ff, 0x3, 0x7, 0x2, 0x80000000, 0x8, 0x3, 0x6, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x86f, 0x7, 0xdb0, 0x8, 0x4, 0x7fffffff, 0x6, 0xb7, 0x0, 0x3, 0x8, 0x8, 0xfa, 0x0, 0x0, 0x0, 0xffffffff, 0xf8, 0x0, 0x4af0, 0x5, 0x5, 0x8, 0xe, 0x7fff, 0x800, 0x927c, 0x2, 0x3caf, 0x6, 0x4, 0xc, 0x9, 0xff, 0x3, 0xffffd8e4, 0x4, 0x6, 0xffffff01, 0xfffff462, 0x9, 0x101, 0x1, 0x644, 0x1, 0x6, 0x8, 0x9, 0xe, 0x253b9315, 0x9, 0x3, 0x4, 0x1, 0x81, 0x101, 0x5, 0x8, 0x100, 0xff, 0x6, 0x754, 0x9, 0x9, 0x4, 0xe, 0x8, 0x8, 0x7fff, 0x8867, 0x7fff, 0x8, 0x8, 0xfffffffc, 0x5, 0x9edc, 0x81, 0xfff, 0x80, 0x4, 0x5, 0x7, 0x101, 0x7fff, 0x9, 0x5, 0x1, 0xfffff998, 0xffffffff, 0x6, 0x9, 0x8533, 0x6, 0xfff, 0x770, 0x0, 0x10, 0x9, 0x2, 0x7, 0x31, 0x7, 0x9, 0x9, 0x4, 0x4, 0xc, 0x3, 0x1, 0x5, 0x8001, 0x7, 0x5a2b, 0x7, 0x9, 0x9, 0x0, 0x7, 0x1, 0x5, 0xfffffff9, 0x8, 0x4, 0x7, 0x2ff, 0x2425, 0x1000, 0xdde, 0x6, 0xffff, 0xf2, 0xd, 0x2, 0x1, 0xfffffffb, 0xfffffffd, 0xb65f, 0x6, 0xf89, 0xfffffb0c, 0x7, 0x464, 0x7efe, 0x8, 0x200, 0x3, 0x7, 0x4, 0x101, 0x3, 0x381f, 0x4, 0xd31e, 0x1, 0x7, 0x5, 0xffff, 0x0, 0x1ff, 0x5438, 0x453, 0x2, 0x8, 0x7fffffff, 0x1, 0x6, 0x6b9f, 0x1, 0x557, 0x8000, 0x2, 0x7, 0x1ff, 0x5, 0x7, 0x4, 0x78d, 0xaa0, 0x5, 0x6, 0x62, 0x8, 0x2, 0x4, 0x477c, 0x7, 0x8, 0x0, 0x10, 0x2, 0xfffffff7, 0x82e, 0x80000000, 0x9, 0x7, 0xffff, 0x1000, 0xff, 0x32, 0x5f, 0x4, 0x8, 0x2, 0x6, 0x0, 0x3, 0x80, 0x6, 0x0, 0x1, 0x1, 0xfffffffc, 0x8, 0xfc4, 0x7, 0xab0, 0xedb, 0x51b, 0x81, 0x200, 0xffffffff, 0x7bec58eb, 0x4, 0x8, 0x7, 0xfffffffd, 0x6, 0x7, 0x6, 0x503, 0x7, 0x6, 0x183, 0x0, 0x8, 0xc2, 0xab8, 0x8, 0x0, 0x9, 0x8, 0x1, 0x0, 0x75, 0x6, 0xfffffff2, 0x8, 0x400, 0x2, 0x9, 0x8, 0x2, 0xcee, 0xfffffc01]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x12}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0xc0000000, 0x81, 0xfffffffd, {0x7, 0x1, 0x0, 0x82e4, 0x401, 0x4}, {0x44, 0x2, 0x122c, 0x81, 0xfff8, 0x9}, 0x80000001, 0xff, 0xc}}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x9, 0x10, 0x4, 0x8, 0x9, 0x40, 0x8, 0x2, 0x8, 0xb, 0xe0, 0x6, 0xffff3ff7, 0x80000, 0x6, 0xc, 0x879, 0xd7, 0x7fff, 0x7, 0x0, 0x8, 0x1729, 0x8, 0x5, 0xff, 0x8341, 0x7ff, 0x40, 0x200, 0x4, 0x6, 0x8, 0xfffffff9, 0xd, 0x80000002, 0x7, 0xffffffff, 0x9, 0x10000, 0x3, 0x800, 0xa6, 0x8, 0x0, 0x7, 0x5, 0x0, 0xd6, 0x1000, 0x3, 0x7, 0x5, 0x7, 0x2, 0x5, 0x9, 0x6, 0x200, 0x80000001, 0x2, 0x8001, 0x7, 0x5, 0x1, 0x2, 0xffffffe4, 0x4, 0x4, 0x4e92a1d5, 0xe, 0xffff, 0x23, 0x0, 0x7, 0x81, 0x2, 0x4, 0xdd, 0x2d, 0x7, 0xf1f6, 0x9, 0x5, 0x1, 0xffff, 0x3, 0xaff1, 0xb00000, 0x7, 0x8, 0x2b, 0x1, 0x3, 0x1ff, 0x1, 0x7, 0x1, 0x4, 0x2, 0x2, 0x2, 0x2, 0x3, 0x6, 0x8, 0x3, 0x9, 0x284ae85e, 0x7, 0x3, 0x0, 0x10000000, 0x3, 0x8, 0x8001, 0x7, 0x77, 0xc, 0xfe0, 0x800, 0x6, 0x5, 0x6, 0x90b, 0x5, 0x434e, 0x7, 0x1000, 0x2, 0x40, 0x8, 0x1, 0x4, 0x2, 0x1, 0x7db, 0x1, 0x7fff, 0xfff, 0x0, 0x8, 0xa, 0x0, 0xd7, 0x80d0, 0x0, 0x8424, 0x1, 0x8, 0x9, 0x7, 0x40, 0x3, 0xc577, 0x0, 0x0, 0x1, 0x1, 0x172, 0x1000, 0x6, 0x0, 0x5, 0x22, 0x2, 0x8, 0xfffffff9, 0x4, 0xb5e, 0x5, 0x0, 0x1, 0x200, 0x800, 0x2b, 0x87c0, 0x9, 0x3, 0x80000000, 0x1, 0x6, 0x7, 0x7fffffff, 0xffff8001, 0x8, 0x0, 0x10, 0x9, 0x7ff, 0x6, 0xfff, 0x401, 0x3, 0x4, 0x95, 0x8, 0x10000, 0x3, 0x2, 0xfffffffa, 0x100, 0x0, 0x1, 0x2, 0xffffffff, 0x800, 0x51d, 0x8, 0x7, 0x400, 0x5, 0x69d0, 0x5, 0xdea, 0x1, 0x94c4, 0x3dbc, 0x1ff, 0x8001, 0x118, 0x2, 0x2d2d, 0x7ff, 0x81, 0x7, 0xb49, 0x81, 0x9, 0x5, 0x2, 0x1, 0x1, 0xa, 0xffff, 0xffff54a2, 0xa, 0xe757, 0x6, 0x7, 0x208, 0x68a669c, 0xffffffff, 0xffffffff, 0x9, 0x0, 0x7ff, 0x401, 0x5, 0x6, 0x4, 0x20000, 0xfffffff1, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x232, 0x3, 0x2, 0x40, 0xff, 0x0, 0xc0000000, 0x1, 0x5, 0x80000001, 0x19e, 0x2, 0x40000000, 0x1, 0x9, 0xf9, 0x80000000, 0xd, 0x4, 0x4, 0x400, 0x7, 0x5, 0x306, 0x1, 0x99, 0x4, 0x3, 0xffff0000, 0x22, 0x9, 0xf, 0x8000, 0x7, 0x2, 0x1, 0xb, 0x7, 0x710e, 0x2, 0xca, 0x9, 0xffffffc1, 0x1, 0xac, 0x5, 0xfff, 0x9, 0x3, 0xf3c3, 0x9, 0x1, 0x1, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffff0a47, 0x4, 0x8, 0x1, 0x4, 0x8, 0xb5, 0xee67, 0x0, 0x1b, 0x1, 0xfffffff2, 0x3, 0x0, 0x69f, 0x4, 0x4, 0xc0, 0x1, 0x2, 0x2, 0x5, 0xffffffff, 0x3, 0x4, 0x2, 0x20000000, 0x9, 0x40, 0x5, 0x3, 0x3, 0x8d, 0xfffffffb, 0x8, 0x8, 0x3ff, 0x3e0, 0x5, 0x10000, 0x7, 0x81, 0xfffffffd, 0xff, 0xfffffffd, 0x9, 0x2, 0x3, 0xfffffff9, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x4, 0x2b6c, 0x8, 0x4, 0x8, 0x2, 0x2, 0x8, 0x7c4, 0xfffffff8, 0x5, 0x800, 0x7f, 0xd, 0x3887, 0x5, 0x200, 0x1, 0x661, 0x2, 0x10001, 0x2, 0x1, 0xa4, 0x1000, 0x0, 0x3, 0x8001, 0x6000, 0x152a, 0x34b, 0xffff8000, 0x6, 0xfffffffe, 0xc5f, 0x90b5, 0x9, 0x69, 0x10, 0x9, 0x5, 0xd, 0xce1, 0x1, 0xffffffff, 0x5, 0x7f, 0x6, 0xf3, 0x5, 0x6, 0x84b5, 0x80000000, 0xfffffff8, 0x2, 0xf1d, 0xe, 0x800, 0x0, 0xd1cd, 0x1, 0xa2, 0x5, 0x8, 0x9, 0x400, 0x3, 0x25, 0x57, 0x4, 0x2, 0x10001, 0x1, 0x9, 0x4, 0x9, 0x9, 0x57, 0x6c9, 0x5, 0x6, 0x4, 0x0, 0x7, 0x8, 0x5, 0x7, 0x4, 0xff, 0x401, 0xfffffffc, 0x3ff, 0x5, 0x2, 0xf, 0x2, 0x5, 0x8, 0x1, 0xab000000, 0xffffffff, 0x80, 0x6b, 0x2, 0x9, 0x5, 0x0, 0xd, 0x5, 0x40, 0x8, 0x400, 0x9, 0x7, 0x5, 0xd, 0x6, 0x2, 0x100, 0x1, 0x7, 0x100, 0x9, 0xfff, 0x7f, 0x2, 0x1d, 0x3, 0x6, 0x3, 0xfffffffc, 0x2, 0x8, 0xdaf, 0x6, 0x7fffffff, 0x1, 0x100, 0x2, 0xffffff23, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x54f5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff5, 0x200, 0x80000000, 0x8, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x8, 0x6, 0xa, 0x9, 0x5, 0xb, 0xa7, 0x7, 0x380d, 0x87ec, 0x0, 0x60000000, 0x5, 0x9, 0x7fffffff, 0x7, 0x10000, 0x1, 0x8, 0x208c0bc6, 0xb, 0x1, 0x2, 0x80, 0x8, 0x7fff, 0x4, 0x10, 0x7, 0x100, 0x8, 0xaab8, 0xfffffffb, 0x8, 0x2, 0x100, 0x7, 0x4, 0x6, 0x200, 0x5, 0x2b, 0x6, 0x1000, 0x13, 0x7, 0xc, 0x3, 0xfff, 0x10000000, 0x6, 0x7, 0x6, 0x7, 0x4, 0x2, 0xf50, 0xfffffff8, 0x1ff, 0x40, 0x7, 0x5, 0x9, 0x83e, 0x4, 0x9, 0x1ff, 0x0, 0x7f, 0xbf, 0xffffffff, 0x7, 0x8, 0x5, 0x0, 0x5, 0x5, 0x2, 0x0, 0xc, 0x3, 0x1, 0x400, 0x2, 0xa8d2, 0x5, 0x651, 0x0, 0x6, 0x8, 0x4, 0x3, 0x5, 0x9, 0x3, 0x9, 0x2, 0xc642, 0x0, 0x2, 0xc, 0x6, 0x3, 0xd, 0x7, 0x8b, 0xfffffff7, 0x6, 0xb, 0x2, 0x6, 0x2, 0x99ea, 0xfffffffa, 0xf1, 0x3, 0xf, 0xe92, 0x6b, 0x1, 0x4, 0x4, 0x8, 0xe, 0x9, 0x1, 0x10000, 0xfff, 0x0, 0x7ff, 0x2, 0x1, 0xe, 0xc, 0x2, 0x1, 0x0, 0xd99, 0x4f03, 0x1, 0xfffffffa, 0x0, 0x101, 0x0, 0x9, 0x80000000, 0x1, 0x81, 0x20000000, 0x4, 0x3ff, 0x2, 0x7fff, 0x9258, 0x9, 0x6, 0x7ff, 0x3, 0xa, 0x7, 0x7a, 0x4, 0x0, 0xcb0, 0x4, 0x401, 0x3, 0x2, 0xffff, 0x7, 0x9561, 0x7f, 0x8a, 0x5, 0xffffffff, 0x1, 0x200, 0x3, 0x1ffe0000, 0x0, 0x1, 0x1, 0x1, 0x7, 0x5, 0x3fecd0e4, 0x4, 0x5, 0x7, 0x4, 0xffff, 0x26c6, 0xd26b, 0x2, 0x2, 0x8, 0x5, 0x6, 0x9, 0x3, 0x7, 0x7819aa5b, 0x9, 0x4, 0x5, 0x4, 0x800, 0x5, 0x0, 0x1a, 0xc, 0x7fff, 0xfffffffa, 0x9, 0x0, 0x1, 0x80, 0x2, 0x100, 0x8926d9, 0x7, 0x81, 0x80000001, 0xc, 0x8000, 0x3, 0xb, 0x100, 0x4, 0x5, 0xfffffffe, 0x0, 0x3, 0x7f, 0x3, 0xfffffffa, 0x3fe00000, 0x2, 0xc33d, 0x5, 0x7, 0x7, 0x45870899, 0x3, 0x16, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xfffffffa, 0x6, 0x8c5, 0x7fffffff, 0xffffff01, 0x80000000, 0x2, 0x8, 0x7, 0x6000000, 0xfffffff9, 0x80000000, 0x401, 0x5235, 0x8c8, 0x7ff, 0xeb2a, 0x9, 0x0, 0xd, 0x0, 0x0, 0xffff, 0x6, 0x4, 0x0, 0x7, 0x7, 0x7fb13dfd, 0x5, 0x6, 0x4, 0x2, 0x4353bd4c, 0x6, 0x101, 0x7, 0x0, 0x7, 0x5a, 0x7, 0x10000, 0x0, 0x4a1, 0x1, 0xfffffffd, 0x8, 0x1, 0x0, 0x1, 0x6, 0x3, 0x8, 0x2, 0xd, 0x7, 0x2, 0x3, 0x1, 0x9, 0x9, 0x3, 0xa7, 0xdf3, 0xaa2, 0x0, 0x3ff, 0x7, 0xf, 0xfff, 0x7, 0x5, 0x1, 0x2987, 0xd, 0x3cf, 0x0, 0x8, 0x8, 0x3ff, 0x7ff8, 0x51, 0x7, 0x7c, 0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x1b7732e, 0x3ff, 0x54, 0x4, 0x8, 0x6, 0x8, 0x6, 0x9c, 0x3, 0x8, 0x80000001, 0x2, 0x6, 0x3, 0x0, 0x9, 0x3, 0x5, 0x6, 0xfffffffe, 0x172e3da3, 0x5, 0x3, 0x4a7, 0xda, 0x9, 0x7, 0x73, 0x8, 0x1, 0xf463, 0x0, 0x5, 0x3, 0x80, 0x6, 0x1, 0xd, 0x5, 0x5, 0x8, 0x5, 0x57e0, 0xffffb2ec, 0x4, 0x7, 0x0, 0x3, 0x9, 0xfffffff7, 0x8, 0x1000, 0x5, 0x8d5, 0x4, 0x5, 0xf, 0x7, 0x9, 0x1, 0x3, 0x6, 0x1000, 0x3f7, 0xfff, 0x83c3, 0x0, 0x3, 0x0, 0x1, 0x4, 0x3, 0x40, 0x80000000, 0x73b3, 0x9, 0x0, 0x68, 0x10, 0x101, 0x1, 0xffff, 0x4b6, 0xff, 0x8, 0xe7, 0xf5, 0x7, 0x3, 0x8c, 0xaf, 0x9, 0x40, 0x10001, 0x8, 0x10, 0xb5, 0xc, 0x3, 0x10000, 0x2, 0x4, 0x2, 0x7, 0x4, 0x5, 0xf, 0x1442, 0x4fa, 0x1, 0x1, 0x6, 0xcd, 0x7, 0x1f6, 0x7ff, 0x9, 0x8, 0x1, 0x4, 0x6, 0x5, 0x7, 0xffff, 0x5, 0x81, 0x6, 0x1, 0x5, 0xfffffffc, 0x80000000, 0x80000001, 0x5, 0x20, 0x40, 0x4, 0x7, 0x1, 0xfffffff8, 0xc, 0x7, 0xa, 0xc8, 0x1, 0x902e, 0x800, 0x8, 0x7, 0x7fff, 0x8, 0x92, 0x7b53, 0x2, 0xa15, 0x6, 0x1, 0x5, 0x1, 0xd02, 0x0, 0x392b, 0x5]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x7, 0xfffffffe, 0x923d, {0x9, 0x65786a5179f66c19, 0x2, 0x830, 0xbfc, 0x7}, {0x1, 0x1, 0x0, 0x738, 0x884, 0x8}, 0x1, 0x6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbaa, 0x2, 0x4, 0x8, 0xfffffff9, 0x1d, 0x32da, 0x200, 0x2, 0xfc5, 0xf9, 0x8, 0x0, 0x5, 0x1, 0x6, 0x2, 0xa000, 0x4, 0x80, 0x7403012a, 0xd7d3, 0x8001, 0x2, 0x5, 0xe, 0x4, 0x5, 0x6, 0x80, 0x3, 0x10000, 0x4, 0x1, 0x4, 0x4, 0x81, 0x7, 0xf, 0x1, 0x8, 0x7, 0x5db, 0x800, 0x9, 0x2, 0xc87, 0x800, 0x35bb, 0xd7, 0x1, 0x8, 0x4, 0x1, 0xc, 0xfffffffb, 0x0, 0x2c, 0x2, 0x7, 0xc8000000, 0x1, 0x80000000, 0x6, 0xa, 0x1, 0x800, 0x9, 0x6, 0xff, 0x400, 0x2, 0x9, 0x3, 0x1, 0x81, 0xfff, 0xa2, 0x1, 0x1, 0x7fffffff, 0x0, 0x6, 0x2, 0x6b, 0x7, 0x1, 0x3, 0x5, 0x0, 0xfffffffc, 0xae, 0x6, 0xffff0000, 0x10000, 0x62d, 0x9, 0x2, 0x80000000, 0x5, 0x800, 0xfffffffb, 0x7, 0x5, 0x3, 0x6, 0x401a, 0x9, 0x8, 0xff, 0x3, 0xbbe8, 0xfffff861, 0x6, 0x3, 0x6, 0x1a, 0x2, 0x1000, 0x4, 0x8, 0xad8, 0x9, 0x4, 0x3, 0x38ba7eb1, 0x9, 0x101, 0xd, 0x4372, 0x6, 0x2, 0x3ff, 0xacb, 0x7, 0x4, 0x9, 0x8, 0x5, 0x0, 0x4, 0x9, 0x2, 0x1, 0x600, 0x8, 0x5, 0x100007, 0x8, 0x10000, 0x8, 0x0, 0x2, 0x2, 0x7, 0x1, 0x5, 0x1, 0x400, 0x10, 0x3, 0x200, 0x10001, 0x800, 0x80, 0x0, 0x9, 0x6, 0x9, 0x6, 0x0, 0x8183, 0x1, 0x7, 0xfffffffe, 0x401, 0x400, 0x40, 0x7f7, 0x6, 0x4, 0x80000000, 0xfffffff7, 0xffffc30a, 0xc2, 0x5, 0x88, 0xf0, 0x2, 0x0, 0x5, 0x2, 0x8, 0x10000, 0x80000000, 0xab, 0x4, 0x3, 0x8e1, 0xd, 0x2, 0xfffeffff, 0x1, 0x5957, 0x2, 0xfffffffa, 0x2, 0x91, 0x3, 0xf7f7, 0xa1, 0xd07b, 0x24a, 0x4, 0x5, 0x101, 0xa7c, 0x5, 0x3, 0x9, 0x9, 0x200, 0x6, 0x2, 0x3ff, 0x7, 0x9, 0x9, 0x0, 0x400, 0x2, 0x0, 0x0, 0x7, 0x90, 0x3, 0x6, 0x49c, 0x0, 0x5, 0x40, 0x7, 0x2952, 0x7ff, 0xf9, 0x4, 0x5, 0x6, 0x10000000, 0x5, 0x3, 0x0, 0x4, 0x8, 0x9, 0x7]}]]}, {0x6c, 0x6, "1d105aa302e7184b10eff9f461ff9a6e0cf985cfa7f7e29553b2d826de57e6b6e5426ad5aa8d658ba344556b28f8844a363020ec246df173a7918f0ac97e9bd6364759419b948dd928f39076fc32ee8a9543e15c4628dc4d4755334561939d09c51ff39550788ab8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x80, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0x4d, 0x6, "43f5874acecd91534aa07589857a0d4e1332a634f67b076cc6590026ffc708aa2a8bf780a6a0bc9d3526042b089dd1f151fe5e3fc7a09e12ef3148f815f8861705eb07b0c121e33cd5"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1ea8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000200", @ANYRES16=r10, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', 0x0}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd7000ffdbdf2501000000040002800400030004000300040000040003000400030004000300"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 18.263135387s ago: executing program 4 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000021000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000076000d0b00401867be93f5ba420d0000000000000300000000000000e3acf3fde5bc54d91315d785d1f619360e3be2c76739a9fcce888d8d2ad02a5b7728da3f45ab37d8f7894bac863ab1f11aff79364c6344"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001300010229bd7000fadbdf3500000000", @ANYRES32=r7, @ANYBLOB="2010000042000100050011090000000018001680140001801000060001000080000000000100000026cb10000000b75a91cd4f15ffaec83c73a0ad34"], 0x40}, 0x1, 0x0, 0x0, 0x24004000}, 0xc804) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000a36000/0x4000)=nil, 0x4000, 0x3, 0x8031, r4, 0x4000) r10 = socket(0x1e, 0x4, 0x0) r11 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r11, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) 18.114353635s ago: executing program 3 (id=543): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000210000000000000000000000850000007500000020a80a64e7d5835695"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000009140765"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40080c0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x1411, 0x301, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4004800}, 0x40010) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000080)={0x3d}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x3919, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 17.899296345s ago: executing program 3 (id=544): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0xffffff80, 0x4) r1 = socket(0x10, 0x2, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000, 0xfffffffe]}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000003fc0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ed2ef3848fbc2506ac5b42f7efd6a5945a881291b52b85c7f892c5b8df27114df6837c52f94519a946fcdd5bc3335442822ad965fda44516aa542c7c9d41a96ef581e568fa3f4110f95fc7b4f1a64c8662ece581b7", 0x55}, {&(0x7f0000000080)="48f6b6f004535d40f552bb21dd6d21dd96f26efb2708a1c4710dceb1f79310efb70e23d868dbda8404c953ac5d9ef021808656193afc6ad6a6ef929074cd8e096e9c1732c970e04a9fc4444703966b83eaba5aba50a8566505daf033f63385b1cd9b63e4757385d384e19353ac1a76581ae76e5fe0ae463508aa210095d27f1222ae87d5c5cc07e7928ca3", 0x8b}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000900)=""/220, 0xdc}], 0x2}, 0x0) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xffffffff, @empty}}}, 0x108) pwrite64(r4, 0x0, 0x0, 0x1fb) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000300)={0x28, 0x0, 0x2710}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg$unix(r1, &(0x7f0000001880)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000cc0)=""/15, 0xf}, {&(0x7f0000000d00)=""/71, 0x47}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f00)=""/155, 0x9b}, {&(0x7f0000001200)=""/162, 0xa2}, {&(0x7f00000012c0)=""/231, 0xe7}, {&(0x7f00000013c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/57, 0x39}], 0x5}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001480)=""/158, 0x9e}, {&(0x7f0000001000)=""/50, 0x32}, {&(0x7f0000001540)=""/124, 0x7c}], 0x3, &(0x7f0000001600)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}], 0x3, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 17.84853965s ago: executing program 2 (id=545): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r9, 0x8919) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r11, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffffd5, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r14, @ANYBLOB="0000000002000000b70500000800000085000000b200000095"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000002000004000000000000", @ANYRES16=r14, @ANYBLOB="8b90000010e3040008000500", @ANYRES32=r13, @ANYBLOB="3000128009000100766c616e000000002000028006000100040000fe0f0004800c000100ff0f000003000000040003"], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 17.70539825s ago: executing program 3 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="050003"], 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) r8 = socket(0x11, 0xa, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_newaddr={0x44, 0x14, 0x309, 0x70bd2b, 0x25dfdbfb, {0x2, 0x80, 0x0, 0xc8, r6}, [@IFA_LABEL={0x14, 0x3, 'ip6erspan0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x198}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010100}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r8}, 0x20) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="aac6be871dce2eed972d42d881527588f18d37f46ab7a1b4fd76884ea282d46de5c480c0998752db22f01a6527b389aa3d9283ea8bb1e03d1e3a28015a5196e65d529563d1e9015d427f059f5be5896b4e010a95fe8a804985412c", 0x5b}, 0x1, 0x0, 0x0, 0x1000}, 0x140) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f00000002c0)=0x1) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x11c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xdb, 0x8, "dfd284314ac48ad89398a577c8e8c10b379a2f97879a672625860ef5cb02a7fff19b2969b4d6e0375b13ee1f2f989a272bb014d537f07303740c0daecbdc12d8e0051e91f165564c0609e1364ba51b762bfe48745400dac8e3e6e23d7f437cbb2d07a7acf15f8a933a0fb44a4a21779acd350cfab722115595b66c6ef0d2577d5434ceea004791d8a91e3902d2817a0d2e66ef160abef051aa420f5e3affb393007925a0e49b48e6ce35f6d87b0dcdb29288964fd3179c4f8cd3b6fad3aaf3dfa7023ea4bc10c16210b5ed1acfb95b3c92daacae88c39b"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 17.570780607s ago: executing program 0 (id=547): syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000e200000000000018010000786c6c2d00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r5, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7daa}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r10, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003280)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30, 0x280}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800054000000017080006400000800008000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="f4b84de4115d64a266ffff9e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="f4b84de4115d64a266ffff9e88a8", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) 17.421521665s ago: executing program 3 (id=548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r5, &(0x7f0000000040), 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x5c7, 0xfffffff9, 0x3, 0x24000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00990001fcffff2f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r10 = getpid() r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x5, 0x0, 0x0) 17.311453603s ago: executing program 1 (id=549): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0xf3ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a80)="28deeb01d387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17.257401888s ago: executing program 4 (id=550): sendmmsg(0xffffffffffffffff, &(0x7f0000001fc0), 0x0, 0x24044015) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c00}, 0x0) r1 = accept4(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000240)=0x80, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x1, 'sed\x00', 0x2, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x1ea8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x7, 0x5}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1e74, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x1e38, 0x2, [@m_police={0x1db4, 0x6, 0x0, 0x0, {{0xb}, {0x1d20, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x2000000, 0x3, 0x9767, 0xd, 0x8000, 0x4, 0xe3a4, 0x7ff, 0x4, 0x2, 0x8, 0x9, 0x9, 0xa, 0x2, 0xfff, 0x85e, 0x2, 0x80000001, 0x3, 0x8001, 0x6, 0x101, 0x5, 0x0, 0x2, 0x9, 0x5, 0x400, 0xfffffff7, 0x3, 0x7, 0x1, 0x4, 0x1, 0x5, 0x5, 0x0, 0x827b, 0xffffcec8, 0x4, 0x80000001, 0x3, 0x800, 0x4710, 0x2, 0x4, 0x6, 0xffff, 0x5, 0x1, 0x9, 0x1, 0x7, 0x2, 0x4, 0x7fff, 0x8, 0x0, 0x7, 0x3, 0x97, 0xfffffffb, 0x400, 0xa42a, 0xfffffbff, 0x3fe9, 0x5dfa, 0xa, 0x746, 0x8001, 0x9, 0x8, 0x7, 0xa, 0x77a, 0xc828, 0x5c, 0x0, 0x2, 0x2, 0x7, 0x7ff, 0x0, 0x7fff, 0x1ff, 0x4, 0x3, 0x7f, 0x4, 0xfffffff8, 0x7, 0x7, 0xfffffe01, 0x3, 0x2, 0xffffffff, 0x4c, 0x80000000, 0x8, 0x7, 0x7, 0x0, 0x7fffffff, 0x1, 0x4, 0x81, 0x1, 0x80000001, 0x7f, 0x0, 0x84, 0x0, 0x2, 0x51a8, 0x881, 0x6, 0x4, 0x7, 0x2, 0x7, 0xfffff0d5, 0x6, 0x4, 0x3, 0x80000001, 0x7, 0x700000, 0x3, 0x1, 0x87, 0xffe, 0x5, 0x7e, 0xc61, 0x4, 0x7, 0x0, 0x7f, 0x2, 0xff, 0x46, 0x7, 0x5, 0x6, 0x2, 0x5, 0xc887, 0x4, 0x6, 0x2, 0x8fe, 0x55ba, 0x7fffffff, 0x7fffffff, 0x5, 0x6, 0x401, 0x8, 0x2, 0x4, 0x8, 0x7fffffff, 0x7, 0x4, 0xffffffff, 0xfffff801, 0x3, 0x9, 0x7, 0xe5f, 0x1, 0x114, 0x5, 0x8, 0x7, 0x84, 0x80, 0x1, 0x2, 0x7fffffff, 0x0, 0x7a9, 0x4, 0xe, 0x4a, 0x5c, 0x8, 0x401, 0x8, 0xfffffe00, 0x6, 0x6, 0x0, 0x5, 0x9, 0x6, 0x7, 0x3, 0xb, 0x80, 0x8, 0x5, 0xfffffff7, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8, 0x10001, 0x6, 0x101, 0x7, 0x100, 0x4, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x1, 0x6e, 0x4ef73afd, 0xffff, 0x8, 0x7, 0x2, 0xae9, 0x1, 0x0, 0x5, 0xfff, 0x2, 0x1, 0xc782, 0x81, 0x1, 0x1000000, 0x3, 0x0, 0x7d9c, 0x8, 0x80000001, 0x7ff, 0x3, 0x7, 0x2, 0x80000000, 0x8, 0x3, 0x6, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x86f, 0x7, 0xdb0, 0x8, 0x4, 0x7fffffff, 0x6, 0xb7, 0x0, 0x3, 0x8, 0x8, 0xfa, 0x0, 0x0, 0x0, 0xffffffff, 0xf8, 0x0, 0x4af0, 0x5, 0x5, 0x8, 0xe, 0x7fff, 0x800, 0x927c, 0x2, 0x3caf, 0x6, 0x4, 0xc, 0x9, 0xff, 0x3, 0xffffd8e4, 0x4, 0x6, 0xffffff01, 0xfffff462, 0x9, 0x101, 0x1, 0x644, 0x1, 0x6, 0x8, 0x9, 0xe, 0x253b9315, 0x9, 0x3, 0x4, 0x1, 0x81, 0x101, 0x5, 0x8, 0x100, 0xff, 0x6, 0x754, 0x9, 0x9, 0x4, 0xe, 0x8, 0x8, 0x7fff, 0x8867, 0x7fff, 0x8, 0x8, 0xfffffffc, 0x5, 0x9edc, 0x81, 0xfff, 0x80, 0x4, 0x5, 0x7, 0x101, 0x7fff, 0x9, 0x5, 0x1, 0xfffff998, 0xffffffff, 0x6, 0x9, 0x8533, 0x6, 0xfff, 0x770, 0x0, 0x10, 0x9, 0x2, 0x7, 0x31, 0x7, 0x9, 0x9, 0x4, 0x4, 0xc, 0x3, 0x1, 0x5, 0x8001, 0x7, 0x5a2b, 0x7, 0x9, 0x9, 0x0, 0x7, 0x1, 0x5, 0xfffffff9, 0x8, 0x4, 0x7, 0x2ff, 0x2425, 0x1000, 0xdde, 0x6, 0xffff, 0xf2, 0xd, 0x2, 0x1, 0xfffffffb, 0xfffffffd, 0xb65f, 0x6, 0xf89, 0xfffffb0c, 0x7, 0x464, 0x7efe, 0x8, 0x200, 0x3, 0x7, 0x4, 0x101, 0x3, 0x381f, 0x4, 0xd31e, 0x1, 0x7, 0x5, 0xffff, 0x0, 0x1ff, 0x5438, 0x453, 0x2, 0x8, 0x7fffffff, 0x1, 0x6, 0x6b9f, 0x1, 0x557, 0x8000, 0x2, 0x7, 0x1ff, 0x5, 0x7, 0x4, 0x78d, 0xaa0, 0x5, 0x6, 0x62, 0x8, 0x2, 0x4, 0x477c, 0x7, 0x8, 0x0, 0x10, 0x2, 0xfffffff7, 0x82e, 0x80000000, 0x9, 0x7, 0xffff, 0x1000, 0xff, 0x32, 0x5f, 0x4, 0x8, 0x2, 0x6, 0x0, 0x3, 0x80, 0x6, 0x0, 0x1, 0x1, 0xfffffffc, 0x8, 0xfc4, 0x7, 0xab0, 0xedb, 0x51b, 0x81, 0x200, 0xffffffff, 0x7bec58eb, 0x4, 0x8, 0x7, 0xfffffffd, 0x6, 0x7, 0x6, 0x503, 0x7, 0x6, 0x183, 0x0, 0x8, 0xc2, 0xab8, 0x8, 0x0, 0x9, 0x8, 0x1, 0x0, 0x75, 0x6, 0xfffffff2, 0x8, 0x400, 0x2, 0x9, 0x8, 0x2, 0xcee, 0xfffffc01]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x12}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0xc0000000, 0x81, 0xfffffffd, {0x7, 0x1, 0x0, 0x82e4, 0x401, 0x4}, {0x44, 0x2, 0x122c, 0x81, 0xfff8, 0x9}, 0x80000001, 0xff, 0xc}}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x9, 0x10, 0x4, 0x8, 0x9, 0x40, 0x8, 0x2, 0x8, 0xb, 0xe0, 0x6, 0xffff3ff7, 0x80000, 0x6, 0xc, 0x879, 0xd7, 0x7fff, 0x7, 0x0, 0x8, 0x1729, 0x8, 0x5, 0xff, 0x8341, 0x7ff, 0x40, 0x200, 0x4, 0x6, 0x8, 0xfffffff9, 0xd, 0x80000002, 0x7, 0xffffffff, 0x9, 0x10000, 0x3, 0x800, 0xa6, 0x8, 0x0, 0x7, 0x5, 0x0, 0xd6, 0x1000, 0x3, 0x7, 0x5, 0x7, 0x2, 0x5, 0x9, 0x6, 0x200, 0x80000001, 0x2, 0x8001, 0x7, 0x5, 0x1, 0x2, 0xffffffe4, 0x4, 0x4, 0x4e92a1d5, 0xe, 0xffff, 0x23, 0x0, 0x7, 0x81, 0x2, 0x4, 0xdd, 0x2d, 0x7, 0xf1f6, 0x9, 0x5, 0x1, 0xffff, 0x3, 0xaff1, 0xb00000, 0x7, 0x8, 0x2b, 0x1, 0x3, 0x1ff, 0x1, 0x7, 0x1, 0x4, 0x2, 0x2, 0x2, 0x2, 0x3, 0x6, 0x8, 0x3, 0x9, 0x284ae85e, 0x7, 0x3, 0x0, 0x10000000, 0x3, 0x8, 0x8001, 0x7, 0x77, 0xc, 0xfe0, 0x800, 0x6, 0x5, 0x6, 0x90b, 0x5, 0x434e, 0x7, 0x1000, 0x2, 0x40, 0x8, 0x1, 0x4, 0x2, 0x1, 0x7db, 0x1, 0x7fff, 0xfff, 0x0, 0x8, 0xa, 0x0, 0xd7, 0x80d0, 0x0, 0x8424, 0x1, 0x8, 0x9, 0x7, 0x40, 0x3, 0xc577, 0x0, 0x0, 0x1, 0x1, 0x172, 0x1000, 0x6, 0x0, 0x5, 0x22, 0x2, 0x8, 0xfffffff9, 0x4, 0xb5e, 0x5, 0x0, 0x1, 0x200, 0x800, 0x2b, 0x87c0, 0x9, 0x3, 0x80000000, 0x1, 0x6, 0x7, 0x7fffffff, 0xffff8001, 0x8, 0x0, 0x10, 0x9, 0x7ff, 0x6, 0xfff, 0x401, 0x3, 0x4, 0x95, 0x8, 0x10000, 0x3, 0x2, 0xfffffffa, 0x100, 0x0, 0x1, 0x2, 0xffffffff, 0x800, 0x51d, 0x8, 0x7, 0x400, 0x5, 0x69d0, 0x5, 0xdea, 0x1, 0x94c4, 0x3dbc, 0x1ff, 0x8001, 0x118, 0x2, 0x2d2d, 0x7ff, 0x81, 0x7, 0xb49, 0x81, 0x9, 0x5, 0x2, 0x1, 0x1, 0xa, 0xffff, 0xffff54a2, 0xa, 0xe757, 0x6, 0x7, 0x208, 0x68a669c, 0xffffffff, 0xffffffff, 0x9, 0x0, 0x7ff, 0x401, 0x5, 0x6, 0x4, 0x20000, 0xfffffff1, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x232, 0x3, 0x2, 0x40, 0xff, 0x0, 0xc0000000, 0x1, 0x5, 0x80000001, 0x19e, 0x2, 0x40000000, 0x1, 0x9, 0xf9, 0x80000000, 0xd, 0x4, 0x4, 0x400, 0x7, 0x5, 0x306, 0x1, 0x99, 0x4, 0x3, 0xffff0000, 0x22, 0x9, 0xf, 0x8000, 0x7, 0x2, 0x1, 0xb, 0x7, 0x710e, 0x2, 0xca, 0x9, 0xffffffc1, 0x1, 0xac, 0x5, 0xfff, 0x9, 0x3, 0xf3c3, 0x9, 0x1, 0x1, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffff0a47, 0x4, 0x8, 0x1, 0x4, 0x8, 0xb5, 0xee67, 0x0, 0x1b, 0x1, 0xfffffff2, 0x3, 0x0, 0x69f, 0x4, 0x4, 0xc0, 0x1, 0x2, 0x2, 0x5, 0xffffffff, 0x3, 0x4, 0x2, 0x20000000, 0x9, 0x40, 0x5, 0x3, 0x3, 0x8d, 0xfffffffb, 0x8, 0x8, 0x3ff, 0x3e0, 0x5, 0x10000, 0x7, 0x81, 0xfffffffd, 0xff, 0xfffffffd, 0x9, 0x2, 0x3, 0xfffffff9, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x4, 0x2b6c, 0x8, 0x4, 0x8, 0x2, 0x2, 0x8, 0x7c4, 0xfffffff8, 0x5, 0x800, 0x7f, 0xd, 0x3887, 0x5, 0x200, 0x1, 0x661, 0x2, 0x10001, 0x2, 0x1, 0xa4, 0x1000, 0x0, 0x3, 0x8001, 0x6000, 0x152a, 0x34b, 0xffff8000, 0x6, 0xfffffffe, 0xc5f, 0x90b5, 0x9, 0x69, 0x10, 0x9, 0x5, 0xd, 0xce1, 0x1, 0xffffffff, 0x5, 0x7f, 0x6, 0xf3, 0x5, 0x6, 0x84b5, 0x80000000, 0xfffffff8, 0x2, 0xf1d, 0xe, 0x800, 0x0, 0xd1cd, 0x1, 0xa2, 0x5, 0x8, 0x9, 0x400, 0x3, 0x25, 0x57, 0x4, 0x2, 0x10001, 0x1, 0x9, 0x4, 0x9, 0x9, 0x57, 0x6c9, 0x5, 0x6, 0x4, 0x0, 0x7, 0x8, 0x5, 0x7, 0x4, 0xff, 0x401, 0xfffffffc, 0x3ff, 0x5, 0x2, 0xf, 0x2, 0x5, 0x8, 0x1, 0xab000000, 0xffffffff, 0x80, 0x6b, 0x2, 0x9, 0x5, 0x0, 0xd, 0x5, 0x40, 0x8, 0x400, 0x9, 0x7, 0x5, 0xd, 0x6, 0x2, 0x100, 0x1, 0x7, 0x100, 0x9, 0xfff, 0x7f, 0x2, 0x1d, 0x3, 0x6, 0x3, 0xfffffffc, 0x2, 0x8, 0xdaf, 0x6, 0x7fffffff, 0x1, 0x100, 0x2, 0xffffff23, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x54f5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff5, 0x200, 0x80000000, 0x8, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x8, 0x6, 0xa, 0x9, 0x5, 0xb, 0xa7, 0x7, 0x380d, 0x87ec, 0x0, 0x60000000, 0x5, 0x9, 0x7fffffff, 0x7, 0x10000, 0x1, 0x8, 0x208c0bc6, 0xb, 0x1, 0x2, 0x80, 0x8, 0x7fff, 0x4, 0x10, 0x7, 0x100, 0x8, 0xaab8, 0xfffffffb, 0x8, 0x2, 0x100, 0x7, 0x4, 0x6, 0x200, 0x5, 0x2b, 0x6, 0x1000, 0x13, 0x7, 0xc, 0x3, 0xfff, 0x10000000, 0x6, 0x7, 0x6, 0x7, 0x4, 0x2, 0xf50, 0xfffffff8, 0x1ff, 0x40, 0x7, 0x5, 0x9, 0x83e, 0x4, 0x9, 0x1ff, 0x0, 0x7f, 0xbf, 0xffffffff, 0x7, 0x8, 0x5, 0x0, 0x5, 0x5, 0x2, 0x0, 0xc, 0x3, 0x1, 0x400, 0x2, 0xa8d2, 0x5, 0x651, 0x0, 0x6, 0x8, 0x4, 0x3, 0x5, 0x9, 0x3, 0x9, 0x2, 0xc642, 0x0, 0x2, 0xc, 0x6, 0x3, 0xd, 0x7, 0x8b, 0xfffffff7, 0x6, 0xb, 0x2, 0x6, 0x2, 0x99ea, 0xfffffffa, 0xf1, 0x3, 0xf, 0xe92, 0x6b, 0x1, 0x4, 0x4, 0x8, 0xe, 0x9, 0x1, 0x10000, 0xfff, 0x0, 0x7ff, 0x2, 0x1, 0xe, 0xc, 0x2, 0x1, 0x0, 0xd99, 0x4f03, 0x1, 0xfffffffa, 0x0, 0x101, 0x0, 0x9, 0x80000000, 0x1, 0x81, 0x20000000, 0x4, 0x3ff, 0x2, 0x7fff, 0x9258, 0x9, 0x6, 0x7ff, 0x3, 0xa, 0x7, 0x7a, 0x4, 0x0, 0xcb0, 0x4, 0x401, 0x3, 0x2, 0xffff, 0x7, 0x9561, 0x7f, 0x8a, 0x5, 0xffffffff, 0x1, 0x200, 0x3, 0x1ffe0000, 0x0, 0x1, 0x1, 0x1, 0x7, 0x5, 0x3fecd0e4, 0x4, 0x5, 0x7, 0x4, 0xffff, 0x26c6, 0xd26b, 0x2, 0x2, 0x8, 0x5, 0x6, 0x9, 0x3, 0x7, 0x7819aa5b, 0x9, 0x4, 0x5, 0x4, 0x800, 0x5, 0x0, 0x1a, 0xc, 0x7fff, 0xfffffffa, 0x9, 0x0, 0x1, 0x80, 0x2, 0x100, 0x8926d9, 0x7, 0x81, 0x80000001, 0xc, 0x8000, 0x3, 0xb, 0x100, 0x4, 0x5, 0xfffffffe, 0x0, 0x3, 0x7f, 0x3, 0xfffffffa, 0x3fe00000, 0x2, 0xc33d, 0x5, 0x7, 0x7, 0x45870899, 0x3, 0x16, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xfffffffa, 0x6, 0x8c5, 0x7fffffff, 0xffffff01, 0x80000000, 0x2, 0x8, 0x7, 0x6000000, 0xfffffff9, 0x80000000, 0x401, 0x5235, 0x8c8, 0x7ff, 0xeb2a, 0x9, 0x0, 0xd, 0x0, 0x0, 0xffff, 0x6, 0x4, 0x0, 0x7, 0x7, 0x7fb13dfd, 0x5, 0x6, 0x4, 0x2, 0x4353bd4c, 0x6, 0x101, 0x7, 0x0, 0x7, 0x5a, 0x7, 0x10000, 0x0, 0x4a1, 0x1, 0xfffffffd, 0x8, 0x1, 0x0, 0x1, 0x6, 0x3, 0x8, 0x2, 0xd, 0x7, 0x2, 0x3, 0x1, 0x9, 0x9, 0x3, 0xa7, 0xdf3, 0xaa2, 0x0, 0x3ff, 0x7, 0xf, 0xfff, 0x7, 0x5, 0x1, 0x2987, 0xd, 0x3cf, 0x0, 0x8, 0x8, 0x3ff, 0x7ff8, 0x51, 0x7, 0x7c, 0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x1b7732e, 0x3ff, 0x54, 0x4, 0x8, 0x6, 0x8, 0x6, 0x9c, 0x3, 0x8, 0x80000001, 0x2, 0x6, 0x3, 0x0, 0x9, 0x3, 0x5, 0x6, 0xfffffffe, 0x172e3da3, 0x5, 0x3, 0x4a7, 0xda, 0x9, 0x7, 0x73, 0x8, 0x1, 0xf463, 0x0, 0x5, 0x3, 0x80, 0x6, 0x1, 0xd, 0x5, 0x5, 0x8, 0x5, 0x57e0, 0xffffb2ec, 0x4, 0x7, 0x0, 0x3, 0x9, 0xfffffff7, 0x8, 0x1000, 0x5, 0x8d5, 0x4, 0x5, 0xf, 0x7, 0x9, 0x1, 0x3, 0x6, 0x1000, 0x3f7, 0xfff, 0x83c3, 0x0, 0x3, 0x0, 0x1, 0x4, 0x3, 0x40, 0x80000000, 0x73b3, 0x9, 0x0, 0x68, 0x10, 0x101, 0x1, 0xffff, 0x4b6, 0xff, 0x8, 0xe7, 0xf5, 0x7, 0x3, 0x8c, 0xaf, 0x9, 0x40, 0x10001, 0x8, 0x10, 0xb5, 0xc, 0x3, 0x10000, 0x2, 0x4, 0x2, 0x7, 0x4, 0x5, 0xf, 0x1442, 0x4fa, 0x1, 0x1, 0x6, 0xcd, 0x7, 0x1f6, 0x7ff, 0x9, 0x8, 0x1, 0x4, 0x6, 0x5, 0x7, 0xffff, 0x5, 0x81, 0x6, 0x1, 0x5, 0xfffffffc, 0x80000000, 0x80000001, 0x5, 0x20, 0x40, 0x4, 0x7, 0x1, 0xfffffff8, 0xc, 0x7, 0xa, 0xc8, 0x1, 0x902e, 0x800, 0x8, 0x7, 0x7fff, 0x8, 0x92, 0x7b53, 0x2, 0xa15, 0x6, 0x1, 0x5, 0x1, 0xd02, 0x0, 0x392b, 0x5]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x7, 0xfffffffe, 0x923d, {0x9, 0x65786a5179f66c19, 0x2, 0x830, 0xbfc, 0x7}, {0x1, 0x1, 0x0, 0x738, 0x884, 0x8}, 0x1, 0x6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbaa, 0x2, 0x4, 0x8, 0xfffffff9, 0x1d, 0x32da, 0x200, 0x2, 0xfc5, 0xf9, 0x8, 0x0, 0x5, 0x1, 0x6, 0x2, 0xa000, 0x4, 0x80, 0x7403012a, 0xd7d3, 0x8001, 0x2, 0x5, 0xe, 0x4, 0x5, 0x6, 0x80, 0x3, 0x10000, 0x4, 0x1, 0x4, 0x4, 0x81, 0x7, 0xf, 0x1, 0x8, 0x7, 0x5db, 0x800, 0x9, 0x2, 0xc87, 0x800, 0x35bb, 0xd7, 0x1, 0x8, 0x4, 0x1, 0xc, 0xfffffffb, 0x0, 0x2c, 0x2, 0x7, 0xc8000000, 0x1, 0x80000000, 0x6, 0xa, 0x1, 0x800, 0x9, 0x6, 0xff, 0x400, 0x2, 0x9, 0x3, 0x1, 0x81, 0xfff, 0xa2, 0x1, 0x1, 0x7fffffff, 0x0, 0x6, 0x2, 0x6b, 0x7, 0x1, 0x3, 0x5, 0x0, 0xfffffffc, 0xae, 0x6, 0xffff0000, 0x10000, 0x62d, 0x9, 0x2, 0x80000000, 0x5, 0x800, 0xfffffffb, 0x7, 0x5, 0x3, 0x6, 0x401a, 0x9, 0x8, 0xff, 0x3, 0xbbe8, 0xfffff861, 0x6, 0x3, 0x6, 0x1a, 0x2, 0x1000, 0x4, 0x8, 0xad8, 0x9, 0x4, 0x3, 0x38ba7eb1, 0x9, 0x101, 0xd, 0x4372, 0x6, 0x2, 0x3ff, 0xacb, 0x7, 0x4, 0x9, 0x8, 0x5, 0x0, 0x4, 0x9, 0x2, 0x1, 0x600, 0x8, 0x5, 0x100007, 0x8, 0x10000, 0x8, 0x0, 0x2, 0x2, 0x7, 0x1, 0x5, 0x1, 0x400, 0x10, 0x3, 0x200, 0x10001, 0x800, 0x80, 0x0, 0x9, 0x6, 0x9, 0x6, 0x0, 0x8183, 0x1, 0x7, 0xfffffffe, 0x401, 0x400, 0x40, 0x7f7, 0x6, 0x4, 0x80000000, 0xfffffff7, 0xffffc30a, 0xc2, 0x5, 0x88, 0xf0, 0x2, 0x0, 0x5, 0x2, 0x8, 0x10000, 0x80000000, 0xab, 0x4, 0x3, 0x8e1, 0xd, 0x2, 0xfffeffff, 0x1, 0x5957, 0x2, 0xfffffffa, 0x2, 0x91, 0x3, 0xf7f7, 0xa1, 0xd07b, 0x24a, 0x4, 0x5, 0x101, 0xa7c, 0x5, 0x3, 0x9, 0x9, 0x200, 0x6, 0x2, 0x3ff, 0x7, 0x9, 0x9, 0x0, 0x400, 0x2, 0x0, 0x0, 0x7, 0x90, 0x3, 0x6, 0x49c, 0x0, 0x5, 0x40, 0x7, 0x2952, 0x7ff, 0xf9, 0x4, 0x5, 0x6, 0x10000000, 0x5, 0x3, 0x0, 0x4, 0x8, 0x9, 0x7]}]]}, {0x6c, 0x6, "1d105aa302e7184b10eff9f461ff9a6e0cf985cfa7f7e29553b2d826de57e6b6e5426ad5aa8d658ba344556b28f8844a363020ec246df173a7918f0ac97e9bd6364759419b948dd928f39076fc32ee8a9543e15c4628dc4d4755334561939d09c51ff39550788ab8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x80, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0x4d, 0x6, "43f5874acecd91534aa07589857a0d4e1332a634f67b076cc6590026ffc708aa2a8bf780a6a0bc9d3526042b089dd1f151fe5e3fc7a09e12ef3148f815f8861705eb07b0c121e33cd5"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1ea8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000200", @ANYRES16=r10, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', 0x0}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012bbd7000ffdbdf2501000000040002800400030004000300040000040003000400030004000300"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 17.152095407s ago: executing program 0 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async) recvmmsg(r2, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x1, 0x7ff, 0x9}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x6}, @window={0x3, 0x1, 0x405}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00\x00\v\x00'}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) r5 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r5, 0x0, 0x0, 0x854) (async) recvmmsg(r4, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16, 0x10}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/190, 0xbe}], 0x3, &(0x7f0000000c40)=""/114, 0x72}, 0x800}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x0, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x800) close(r6) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000100fffc0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080002400080000a080001400000000008000340000000000900010073797a30"], 0xc8}}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 17.103649093s ago: executing program 2 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 'erspan0\x00'}}, 0x1e) (async) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 17.052827978s ago: executing program 1 (id=553): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x46) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x3, 0x96, [0xff71, 0xff, 0xc0000000000000, 0xf, 0x45b0, 0x1], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000100)=""/150}, &(0x7f0000000040)=0x78) ioctl$SIOCAX25DELFWD(r4, 0x618f, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x5, 0x80, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@private, 0x4d0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x3507, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0xec, 0x0) 16.934967523s ago: executing program 2 (id=554): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit], {0x95, 0x0, 0x201}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 16.751284577s ago: executing program 0 (id=555): syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, r1, 0x20, 0x70bd2f, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x200}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_NAME={0x14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x894}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x87) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) bind$nfc_llcp(r2, &(0x7f00000003c0)={0x27, r6, 0x1, 0x6, 0x6e, 0x8, "d93304f01a26d29fa161f9345de60b03f7b205d3161015c0b3b98a4103d830cc809cf9cfc4490cb4a93a45169e3fd8765cd063eda216f61df26e1fea17f823", 0x15}, 0x60) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000080), &(0x7f0000000240)=r10}, 0x20) sendmsg$NL80211_CMD_SET_BSS(r10, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x99}]}, 0x4c}, 0x1, 0x0, 0x0, 0x84000}, 0x0) sendfile(r4, r2, 0x0, 0xf03a0005) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r12, &(0x7f00000000c0), 0x9) sendfile(r12, r11, 0x0, 0x10000) 16.678568091s ago: executing program 2 (id=556): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x1, 0x2}, 0x800}}, 0xb8}}, 0x2c000010) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r1, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x10, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffff7ffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x1}}, 0xb8}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000080000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @val={@void, {0x8100, 0x6, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2a) r11 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r12}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x7800, 0x8, 0x3, 0x6, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x65, 0x0, 0x80, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@noop, @end, @ssrr={0x89, 0x7, 0x57, [@dev={0xac, 0x14, 0x14, 0x27}]}]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f00000007c0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000001c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000000800)=@acquire={0x1354, 0x17, 0x10, 0x70bd28, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@empty, {@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x4, 0x4e20, 0x7425, 0xa, 0x80, 0x60, 0x5c, 0x0, r12}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e20, 0x8, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x0, r13, r14}, {0x4376, 0x6, 0x4, 0x0, 0x3800000000000000, 0x5, 0x9, 0x3}, {0x23, 0x7fffffffffffffff, 0x0, 0x2f3a}, 0x200, 0x6e6bb3, 0x1, 0x0, 0x0, 0x2}, 0x80000002, 0x80000001, 0xc80, 0x70bd28}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x68}, @algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sec_ctx={0xc7, 0x8, {0xc3, 0x8, 0x0, 0x2, 0xbb, "3d1b6dcb7c71360175e0dee5e3ee7fd8fba0abd18c6a8c9ed911b39098424c8344859cdf1c47139c14673f31282b52c3cb68a92d55b461ccf2117cedc31b1509bcbf78e468d3a75544662cb95b5718f3a014320c50c89dbdf47aa4e0cc391ee7c2e264e918f86d65030426014e4839951860f786ca3e0fe671eb975624c6b1b9cc2b07e476c74267f6f61fdaa19fb6e9d0d29bc27b53dddf8fc2ec90c60f4a59709d6cd26fc0830e7bb9158c52f21e7e1ea6499ca6191554d66bd8"}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd25, 0x3ff}}, @algo_auth_trunc={0x104c, 0x14, {{'cbcmac-aes-ce\x00'}, 0x8000, 0xc0, "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"}}, @etimer_thresh={0x8}, @algo_auth_trunc={0xaa, 0x14, {{'rmd128-generic\x00'}, 0x2f0, 0x0, "531af191c6d7578ced8b5f879ff0d7cf1141bc1a19d68cd4ce9cb134c1e66534f8035e676b63170682818a83011a8c40f4c649174532c4b288a219258537e9953582730d2515ef0d5d4363752b70cfedba7b36b87ff5c244a433dbd3f6f3"}}, @migrate={0x4}]}, 0x1354}}, 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r15, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x15ad}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r15, 0x84, 0x85, &(0x7f0000000000)={r16, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f0000000340)={r16, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x91, 0xffffffff}, 0x9c) 16.514795115s ago: executing program 4 (id=557): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r0, 0xffffffffffffffff, 0x2c}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000040)={0x1d, r6}, 0x10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 16.361473803s ago: executing program 2 (id=558): r0 = socket(0x28, 0xa, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x7f}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c2692a969b"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x8, 0x4, "258def5f"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "7a208564ca"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x8c}}, 0x4008800) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x100, 0x268, 0xffffffff, 0x268, 0x348, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, &(0x7f0000000400), {[{{@ip={@broadcast, @multicast1, 0xffffffff, 0xff, 'veth1_virt_wifi\x00', 'pimreg0\x00', {}, {}, 0x0, 0x1, 0x20}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x5}}, @common=@ah={{0x30}, {[0x9, 0x5], 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @port=0x4e22, @port=0x4e20}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffffff, 'bond0\x00', 'netpci0\x00', {}, {0xff}, 0x1d, 0x0, 0x10}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@loopback, [0xff000000, 0xffffffff, 0xff, 0xfffefe], @ipv4=@rand_addr=0x64010101, [0xff000000, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 0x4, 0x80000000, 0x87, 0x4e23, 0x4e20, 0x4e23, 0x4e23, 0x3500, 0x4}, 0x80, 0x2002}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xb, @loopback, @rand_addr=0x64010102, @port=0x4e22, @port=0x4e21}}}}, {{@ip={@local, @rand_addr=0x64010100, 0xff, 0xff000000, 'wlan0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x33, 0x1}, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x7, 0x80000001, 0x49ff, 0xb028, 0x3, 0xf9, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @remote, @loopback, @icmp_id=0x64, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x80, 0xf804, 0xff, 0x1}}, @common=@icmp={{0x28}, {0x0, "00fc", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x7, @ipv4=@multicast2, @ipv4=@dev={0xac, 0x14, 0x14, 0x32}, @port=0x4e24, @icmp_id=0x66}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x17}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x54}}, 0x8080) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000b40)={0x0, 0x9}, &(0x7f0000000b80)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000bc0)={r4, @in6={{0xa, 0x4e24, 0xb3, @dev={0xfe, 0x80, '\x00', 0x32}, 0x2}}, 0x401, 0x8000}, 0x90) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000c80)={{0x0, 0x7, 0xa04, 0x1, 0x6d, 0x25e, 0x76d, 0xffffff55, 0x2, 0x3, 0x5, 0x4, 0x5, 0x0, 0x5}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000d40)={{r5, 0xffffffff, 0x3, 0x1, 0x13, 0x0, 0x7, 0x0, 0x2, 0x7, 0x28, 0xa, 0xa0b, 0x2f, 0x1000}}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001d40), &(0x7f0000001d80)=0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001dc0)={r4, 0x5}, &(0x7f0000001e00)=0x8) r7 = socket(0x10, 0xa, 0x6f6) getsockname$packet(r7, &(0x7f0000001e40), &(0x7f0000001e80)=0x14) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ec0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000001f00)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000001f40)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001f80)=0xa, 0x4) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x34, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x31}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6e0dff7b078b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4002884) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002100)={0x0, 0x0}, &(0x7f0000002140)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000002180)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f0000002280)=0xe8) sendmsg$nl_generic(r7, &(0x7f00000024c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002480)={&(0x7f00000022c0)={0x184, 0x3b, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1f}, [@nested={0xce, 0x80, 0x0, 0x1, [@typed={0xc, 0x24, 0x0, 0x0, @u64=0x1}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x5}, @typed={0x57, 0x10f, 0x0, 0x0, @binary="f3051d5db521ed47af169b365a6aa75ef15ceafb65c717767286ce88207348be6757bfa6e1f4fa4c9aeba11ac47e849eac23c06f88c7cf6ee8c4a04b31f0dbaaa91bed83d07441537cf05ab2d63a404d21013a"}, @generic="ab14af609dab24ec89e78d689d7c24994546aaae9d2c2f815ad38f7721ea4ce91ca9963e83ab1c28a99d0f9ec03686fa14259062306e33cd6b2b3f5de74662f3a2040be3c802751a83eb0556e615f57ffc0d", @typed={0x8, 0x146, 0x0, 0x0, @uid=r10}]}, @typed={0x8, 0x76, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x6e, 0x0, 0x0, @u32=0x8}, @generic="96e0c57b06961a3dbee37be7506fd84f50", @nested={0x10, 0x64, 0x0, 0x1, [@nested={0x4, 0x1}, @typed={0x6, 0xc, 0x0, 0x0, @str='\'\x00'}, @generic]}, @nested={0x20, 0x116, 0x0, 0x1, [@generic="fffb601a0d79c918e50ce8898082d394ed379fc3", @typed={0x8, 0xce, 0x0, 0x0, @uid=r11}]}, @nested={0x49, 0x0, 0x0, 0x1, [@nested={0x4, 0x11a}, @nested={0x4, 0x13f}, @generic="0f3f4430d38444943e812526c10dfa1d177b9b43242a310612d8c45b3b73bea2654126b72753f3acbd", @nested={0x4, 0x7e}, @nested={0x4, 0x10d}, @nested={0x4, 0x14d}, @nested={0x4, 0x12e}, @nested={0x4, 0x101}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20004800}, 0x40040) recvmsg(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002500)=@nfc_llcp, 0x80, &(0x7f0000002880)=[{&(0x7f0000002580)=""/77, 0x4d}, {&(0x7f0000002600)=""/141, 0x8d}, {&(0x7f00000026c0)=""/39, 0x27}, {&(0x7f0000002700)=""/220, 0xdc}, {&(0x7f0000002800)=""/84, 0x54}], 0x5, &(0x7f0000002900)=""/51, 0x33}, 0x21) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000002f80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002a00)={0x534, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_FRAME={0x4fd, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @device_b, @device_b, @initial, {0x1, 0x3}}, 0x5b2, @default, 0x40, @val, @val={0x1, 0x5, [{0x6c, 0x1}, {0x60}, {0x4}, {0x3d944b20a3861925, 0x1}, {0x1b, 0x1}]}, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0x1, 0x3, 0x9c28, 0x9}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0x88, {0x87, 0xb, 0x6, "90e95262e495b81617a44377974d724f61e0df2115681b76eb941f55cfbf947d75ed467a2c5fef63b3f7598be8913573ccb56b58b40955ad5276526571e6db9f9efd797b0ad3d1b1c82f6ce263fc8f9fcb71fabae7162e0e035a9415b20512e6c7059f13f33422bd49cd66965becdb9a3a3ab428d58fc6a1bdca6741c838d681560e18b963"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0x2, 0x5, 0x1}}, @void, [{0xdd, 0xf1, "c5098c36f20facb2394b3e1c593ce5989eb0a92839824060d61a7c12b490b74128916ac55ae0d7ba69738bec3b81ddbed711ca7383fd9480cfae4c66c1045f6a3ae169d13937cf58d09f82b85a15038f3c8765a0b2d1f83738ee128c5ed6af663b9b64ba824f8b747435e1c9e582250ee9be471a41c0dc3d7c7f21700c927cdb3ac4a50682a28f8ff80867de60ed9a5b97bde698e183def5a045fec446601bf260eba19f780d82c6cdc9d779b07d06968ea3700918230d1652c49ce4033f0d9a7928b59cfe3a1d93043808a4458ac6eeb257d9aaab5d23b9150895f6072c3fcd5dc7ce83912581e3babe760616eb8732d0"}, {0xdd, 0xe1, "f77eea514ed8fec0dd2025a67f0eefcdee40d5f1435c52e179415b6ef44bd5b6006d73200151c447230dd1e873d92bbeafdafc95c3fa1a62b4b52dd3d60c1a3810a6af8ef8d35b6808d076512da5ad9c7d83c2b5900d76c112d4b9b751935f6bf0b14d218af4bceef9afa8df68899a31b8e5a9c1f724d98d04a7f47f38fdfb4f5a3b9077b1f6a951e8f8b352396c800fcfca9036b760b9ade29c7bcf3d1e5a5d1d9a46d3079056da2ec1cd797dad26020fcd18fd4a6f049341bb4e626c8d4a90032c05db51b55b0ced7c3371ee43adc6b76a99607cc4ab7883a23d871584fc874d"}, {0xdd, 0x45, "766735984411fcc0a9996e08b9afb8b8cfc70da7ddce31dee050fcf140dbf2e77a16ab51a050263b5aa6f89296b44951931710d541332f3d5fe343aba5b3d6a73f22f448b1"}, {0xdd, 0x98, "c87df023a8f3f617d8813dc294be00e81175d6b4cd5392f3856942457a5dc8a1b3c72b16c5ff58bf6bee649837d123de9b966dfbc0860122f437e675b8bcd67ec0ddca527b9d63866cc810162bde48469011b2d3b3f9467fdb74368d1ebbe91d11a2c3563031f6faeb3ce3e4d3c5b68b6403e0030d634b5fe504c67ab24107b6b0a7ef9394ecf217728949b0ef31510a01e24dd9d3070551"}, {0xdd, 0xc2, "6369f0228afdd048cce08ea07911337f418f128b1c2f365eef8693a716df9d34b80a007d774cba8a7e29dd576292de469585de6d947e9032508b97a458fdce8b5408f9c092ca81ef75fec3a1bfb151905bcfa6e7b5dfcbb010b6a4cb9b162ffb14144fcda866157f41e6c347dae048c73ad3776218ffa1279b80ccad0b1f6e7844eed38b5db0e0f867d94f374db1fb6f5931028f990a7fbc2395af51a7976aae41b85d78a2ec8b635c3c9578457f461960b6142bcaca9693cbbfeebe64d8310f3324"}, {0xdd, 0x9b, "20bbd062adb08e097af6d6eb424b8fbf292bdad4fcdfc0eecd47a4ebb44a16e330119f5d86d018db6c5bc5d94f6bf9584a1013e044e10e7d0b2f7842609711b9939b1306be7cc9fd75c5ea000b5e705b87f820a20771065170bb8467394365c489af452dba16c95f76984b175586d0bb95a618a71870b15ef2e9b874575358ea41a492411da395efc80261cd0f575b2d201412f3a1049ff3750c5e"}, {0xdd, 0x8, "17d5f88d91677b50"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x534}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) 15.969836978s ago: executing program 3 (id=559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x7, 0x3, 0x0, {{0x1b, 0x4, 0x1, 0x9, 0x6c, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @local, {[@end, @generic={0x7, 0x3, '\t'}, @rr={0x7, 0x1b, 0xc9, [@empty, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0xb, 0x2, [{0x6, 0x5, "f346f3"}]}, @lsrr={0x83, 0x7, 0xd8, [@private=0xa010102]}, @rr={0x7, 0x17, 0xb2, [@dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2, @loopback]}, @timestamp={0x44, 0xc, 0xbe, 0x0, 0x3, [0x0, 0xff]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0x6, 0xfffffff9}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807a3127ee1c785e1e36ed20000001d0000000040", 0x24) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @xdp={0x2c, 0x0, 0x0, 0x5}, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x2}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4d, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x80000025a5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) 15.919622666s ago: executing program 4 (id=560): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet(0x2, 0x80001, 0x84) listen(r2, 0x3a5) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000e80)="646fdb3e0d4c2ac13b8605d354206c1b51939d52eedf4e1e5670e7fd52a7c4994912c0011ce7b9ea5b9524e062116b21ce3e82d2779aa3591914c706d6c0cc9fdbb626b793eaecb17d454df1a3b10ab06560a2b93cd971b0c2533f7f611eb8343fec05a3ed3de2320c502193bb8b29285386b2e010b4fa7cb9e93a1ebd3471d61b3e9d94db46338095522deb045213c29630839597127dc86b79a469680d55220088f328c8e361a288e4afbdc94c1746e2517472425166413f1dca878d97fe0bf7f30d1ed45123512b335c1c5348e01b5dfdce1e995bd4dcd9bf04fef07f94f00fc67111ac7ed8af7d399388296e48c76d359d7382e2fa2c6fee3ca9374bdcc4135973fc893da8306f5558391169c3d05f32d33bf1d35ea85f80f1c9955c8d922011fbe855dc156a4dd795de562370641b662b0afc7813f27829cac95413f2930180e7b6c9f4f72b682abb0fbdb5bc0fa1bf6731171454320688fd9227a9e5746d10e6d7b8599cfd3dae7dd0dae8495279b55e0dab33613b600558fe7ae0a3e79e745ecc5ff37453c94327c40b2b23d87ffd5a49c2247d69d059a07d30c4315f7b964d6b83317e94574931ee05c5b49917d635527ae5fdb6b1ee53b146bf6fca977134451fbdb720028b2bcddd617f696de321ad161d816005b02509739f59537a8043077497c3aba8294fbef0f169b431383913ef91823ee4cd7339a158646d87b6ec46d8b91decbb446fd98f9bda40140fce213c61780ec259b7ec838ccc5d43cab2be440f608a8740fd7de05c1fc17b8ec4b12b1ae74cac14144c6785dc85b593099d0e40c7f2dc1d264adb96e706deaf145da49ce2e627f8e28f49592e217e7cfd757e41d690b90b5c51b394c537070a62d5b60777f36e24acd0789e81936539b67af5651ebcd084e5ba0fe50272262146d667024c8d67904afd85d7cbff8ea5b4ed33afd5fbae1d4a432e3b7496bf1e508a44f5e141e796c8920dbef9f4851c79228f5d170a07d3820e3c70e7c251495245fa193971093daae8024e379ba70a78fdf34a9e16b2329c2a5c8761ef83fd16db1af25f2e254d93b8cc45146a3d256101f651330b22948a3c85b99e46bffb292f973ffb5c0a85cbfd718da6d133212ea3725fb3a3411f750a3563a82a5b12e84c1919ec39498c3fedfc744d2f88eda0712f04c964853f9d3ebaaf4d49ba53078b80096d36e118c75d96b85bfb5f52ab9d9a4ccc523c7f31f3f80c2a8e5452b8ef48ddea3510abd5f2ae4127e64903f3b8b2cc71c4cb030302f3e8029cf99143b2f2085797e69b4e39ce017904f20dd80fca5e2eb4b823a008b241e66cbff6d7cc0288e1db83acb072ed14afe2a7a5f509e3e1f31ef06567a27a561173aae32a2555f09878105fd1fceee0588636af16b1386f6d02b53002b5142626b69801543a2171b36e7053b0ccee8de6dd86d1699a0c9987b777563c987d81de2b407277dbe7f407e5f97545d1fcf48335b7f44148ec4f5ffde83653a95ef0f613b555cf44c0f4c0b8546729e9aa8eb722ab9f1a5ce3ddc49463994a2fdf65287f67c2008f02b242ae32f9793e961f1dd400a799e0459df6297b51f256f971f86f0b2e73e7ff125b8fabf36cb580c56a6d580710fdffa96871750e28b54fce03a3740db41fd299181dd9df506b88cf6db830022f52f3b9fb34b50ce52ad0b60858b3066a7dabad4555ac9ab2ea61e06365e9bc6b550ed8189be7e0fe6407b24cb6ec0a7bac105bd461439c35df41fce976ac605d1f8a74ad69fdf51ae1e2f0537ea87d867db385fcd593ff2e878ce025b55b4cef88eaf66d628cbb96df076224a6fbd75bad8fedda6e4e40e8495677756448b9940639ffff0eb87c838242e3b7d57f0a3a3b6226c0693a921f55f7958b9d1e2e52c28e5e0a73ebf19185710c7e3a1fc17a344f430ceae2f6511675f3d066a4c8c4f7e036bd6542bd36fff73565ddd029d6312041f900ae474e63e3a0432b9039d1e647b2b69cae21fea11828f0c68040532a16ebe3b1feb5fc25299cfd8c90157ee4249bfe9d5d771d0b1ad619280b378eaf5b61f0dd4c7c6a7ce22bb167aa5ea305ca78ff82d5de8eabf78c6eb8b7a2abb433f80e2946bcd2ada62f9895bae0c22d7882209f65469f29c84498e208f0135028e10b93044b2ee9e35cf4458c808d50dce139b4f83407e1c9734ce4ac3318f210cbd1f00e3d2e84f3b745cb4bf1e03f8f820bcad4b5e3629f68ea204772dfeaf7d1770f6e8a7972639a6aee8496bb73aad028759a3c47347c1e4c239f7368733441cd7bc69bbe801357e9040c885b86ced6fb84401e8ecf97541f10d81ca4abece81bb7db888f32f47b6b1dd11172c380803ee13702f0ac54d9b4f9815f7d92da076a0a04d80aa92fd04a9b659a9d3707db80464b48e4db8a521c644e90a58196674a3197d7b6b42a37ab19cfa518d44d518a6b2e3ed263eeda9abc951e46a2182508ab7541930f7061fac7bfc89fab5e9b6a84376f72217baad20da36eff94c690a0f97fb5b128f835fcc9e53842070a2415c0a0ea75fe9febb4a74cf7fd39fe2137e64fab1e69c22cd936a1178926cb2867b9d10ca235363f6e31d5c79df19b64e34e670995245e89df9780a492695ea43b7405896b5b63b619126b0a146ef8a7a5bc75c8c4d414a1d3a8708ffb526aa1a35a365d7ac6e237fde4dc6836ea74a94549c42868e5470db867ca6c22deabebf7d4335f0ad116ab50ea270c4cd5e941e979735658e742e077d227d3220cf0e57b56fc955d7bb5ad0b6a5de0ceec7b14c5623c9d5f5acf5ab8c02d138886b854cc8deecdd6aee990147b43a6d63815465239b27da2b50331062af567048e55cec1b6cc74e3ac3760287a0712f2b696414d683934949bbe7836622221532330c52efd719dc0ccfe125d070174e89e68fa01623d0a67572a50525f06effdc7b1fea30cc4de5615f531e490d84dccbc1fd951ad76a3ba4865cfd5281298f41673bb04499507325d68f76ce78894f5bb4b6a383fc034734fb857fba693f85bf050325c9df07ca98d4861867fdb88820b1e3c92b29764e16e7d270349d5bca8c66d7f7419ffa78b084e322dffdaa95719b022fb665eacd16d6c8099d581e27ff7a512b783b6bb8ad4058e0417468f47574ebe6041f1ba1571d39eb217f3b8679dc376980681cb6df7aeef6b91dcd1bf746ed40ba7157d00ca2954ade68cb66957b85428893ba229f68fb72a878a73f9df96c0d9c58ed71d127c82fc8e14a449fa92168799b11d0f1feedadc85f3c8a3e98a7af6c5d52751ea04a92b2dac194835f0f36630a10f6d5532c40de87d4d9215ecb9a9194e57edc777eff8a35978f82b588a5d891ce8c535f237dc7897112cbba713b583fe472f2b9365c1521fcb9cffdf612bd82a3533123a6cff479e903259128818ac490ee56bb92197289764af4d3485f563bf3a9a18aeeb59d91073ae432a51cedc2394ccea912dc9aea46d12b5beeb9700efca083423869305e09551789f4ace2c4c7a8f9e76d93774a641e2b2f8f218979f6c80f8a9d1828e7f2aa3db4608c05c2fe9b1b404675735fdffaf6a6066a83f06204f17767a3fd5f2d98b5298a2cd9ce0948a6cd6078a515bad80eac41116d55bec53d3c087ed596ee291c50f5879c3361078df7aa79a09987b4e5b3e5708e493abd53b7b19246fd383525d7c432c18ad43c5718638ef035082dbe7e3ae70768e310325289f69ffb64c2e8e6ca5f396bdb18483ad299aff9aea355d80d5112620bf132e3df16dc2c6076a05fae1c368e2918d5d638dcb06379b58e357b694dc8a9f24db9c9eb270766420cf2686336b077982ffe883146c71058922fe2e9a64e356f235e2fe14524399285d20f62b57346219c08c1f2d26fe3c86a2aafbe8bea8f608d800fd5912fd294d01ee8ba4b0fc81dafd20ac1b584b27f0115bba22bf04baf2ffe6326631df55195f8d5bcc07ecd88dbb981050c0b872d130644f2684576a6990fbda1ed0e1a304cea82553078f715d2771729ee012d680543ba75efa8fa30726cee53877db58efbd3049fe1d629476ff9028ffb1253dda0ab1a4cd68bbd7395429b1c07a77496171a7bc74ff4dac4480a8242e7da30047c1a5f43fa4b4cdd0725d8aae8dc83dd4c0d7779be64d72a917d7691e1adc0e3d5af86012647750e6bf2171764954cab1459d01d0e23477669ccb95420be86e8f7959830f5054cdaf7537c4fbab7d9ec03035b3b298ab1282859aa350341ddf9908be4bce558c6875542d8c67ccb63095982ac2a831cd8e62c1f99726f176ad768187e4ef64ea969988e97a862ccbfa6a1a622a964654d1a5832cb0e00b9ef10bd74b245cbbd2f50cb1422b15315609ea707b337b72ffe709e069324fc512c455fdc1c0bcf2730f6a06f9f4011e0ab6b2c65dfb048de440580c8e261b36778bc25023d889053db1abec79d0fdf28ab08f72ad7f40adfc4543105bb4021b27f7332683be92cfeca17f0407957e9d6035c556191eb875b52cad4a19f894470816991217e05c2f9222ae2431fcd9f29d2e6cb99e2479c0a83dc16df81074c6cb2fb195f40e775e14389d8e3c3594f85817fdfc1f4c1acd01d8505c9ed1c49696b3fb410547dad357bf41c0760865173c87e593ea82b4b0e61ac5d8e1f9929e670f14ed4fbf9f32d1f26aff60ab079c55977c9c07bb50f6de6d96810bfde6f831551c6949fc8e7a9c46068781410223a5c74f2bcd767b911eebb699d16f51146ddcac946c63f1246907bf09ddc3444cee5fc644896570b8734e0d8ab3144c4d46fbc70e817fba0948d6403f3ef557fa8b90eb4fabefe075ddcb6d43fcca90b5645be1f4c2d304971865d53feb7a85e4be2cc6dc4cd6c621414ac8f077a6769073e18900fd78184719bd537c305270709ff8d3c95c15febec308223e4d30adfe2f77381e5d6b8d3497e191eb1eb88aeb0f2da15951680ec50b58b845b36ab338f99fd8a2f05ef1ce9bd24aaee74d5e8cd36a73d3b8a12d274601d7182a9522412679e2ddf4fde72c00cdd9e6495742e7681955b2ef1fa2d4aa388e3594a2b7ef0ae510d520170ba4c38de2cd4607a86496f185521dfb953a8d1fcca12ad27620033fcf0e779bcb08f99340e325383b08440375d6571495bfb3ccc9b8a103b4bbf964e04d2978ca5b4f0dd6f6053a401847b116293818c50edaed5a6def1f00f6eb9668377308abb26aea7daf6e12fbe7bf4ecb5c273e46037f22463f713a3f97a8132a879d09c93a31ab51c1e578c5814625a7e6fc0105fd8871cae1a24b88e8fc6248f7a2e51b3c706ff49c0e4b2338afbfeae59d9e19897adbf2ed9f21d3b2e243542518e438fa668a5cbfda3107136dbef5f2c0a8d3a7fb481c64a77b9567a36d7c8ab314d0bf4af42608150387bf70923380026dbd8f69c23ad1f7be1d0e171aae49c0667eb60c47c6ca6a299b0f0708e130223ae40d7c14ea819e0b9d3e1891328b99f7cfedfacedf42a990e9b2a7e8d3ba902b4cb222be6c21ddb8d6a31758f0c496f74667b11dcb2964a89f09527501e808796fa8c8e58fe1f3ec32726d631a5f26c7926255e174dcaef243a6bd3bc135adef99c99e20834e1ec02668c46ce338c01962af0a3e2b2302b5862df66e58b3ed0ec23d883e3604d632c60b7c0e342966b70a4dd3c8b008d6fa451478e7b2f4e7825bf807ddb3f0669f01879390b4adb9a23631ef501add67240591dfa820a0fbde0579442e7bd46651c17bf5f7bff26ad9efed654ec44db717ec35607736d9a0b1d394c76c337439c302b7", 0x1000}, {&(0x7f00000000c0)="91eb8fa25471fbae588982a92d3cb87400b2ce2b890ec48c7a351d6194aedfaad28e14097fdfc7c3d1cffc9871a98b65eb2cc71f15efd2e709d8cbd20f2c89c6c7b778574d7ffca5b679209f3fbc6d0be0e438cbf19f3f5360cc1c98aaef634b21ff141e3336abb3d6e99c51c863f3b5385bbb02208121829fae241246e58d4938d178f7925dde04a8875ac86a6c39423a4c55d8167cd3f7cd27b7718092d7bc812cb769114b5e353b3e164a0dbd9237", 0xb0}], 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.756255587s ago: executing program 1 (id=561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$tun(r1, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b1ff033168440372b89ec8020000", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.734050589s ago: executing program 2 (id=562): pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x8001, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) 15.685881085s ago: executing program 0 (id=563): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0xf8ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000a80)="28deeb01d387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 15.510606228s ago: executing program 1 (id=564): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x3, 0x33) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xa1ffffff, 0x0, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x50) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, 0x0, 0x111, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.419339505s ago: executing program 3 (id=565): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="e166cb11ef099a5a6dc3978fcf7ee07a8577ba9469cf073acafaa01a6d3c2fa1b5f3855b7647e50cc56150b61044a6e140e9ca16b45a642854e26a1db0f8d94c6c80f3f08c11b9e0fe9a0fc6cfeb6d071b89611994", 0x55}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x48}}, {{&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)="cd3a5588856fb7e2209cdca0389e266db82eac899050c4ac42050e75ff8df0fe9a13f1126a017649a9b81eca6551496906d9a1", 0x33}, {&(0x7f0000000300)="410050661d7608d0b06197894bc0e55a8c9a09cdaaf7", 0x16}, {&(0x7f0000000340)="3d5f1abe27e06b04a1f88139d6b6cbaace08afa2fbc636cbfdd5936868aa549f6c8599a21a85db2ce344d3a483480bdf5866067c9245936c5f3b2c5656a31eb2a1062ce2650bfd50189254b8223c925b72535637520530d216216cfa69c93b83c80d69f4b6bde70d08d66a1df7fc8ec937f4b45e35ebcb2dd0add3a9073da7c42d71febc438b88c0fe04183bf54793be1b3ccd37d573ef399ac4f4c80c905e3af1d21817f923baae522e19ff91e3924bc44de4f57f6363870911ce404fb8774489dbf201e6af3a8a49728ce1624321fe84065a6f843cb156f00a619d5a2296af1090c7bec42517920957", 0xea}, {&(0x7f0000000440)="c8c1a505b1dbffcadb478a4bb7b84291c9a355936542", 0x16}], 0x4, &(0x7f00000004c0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x48}}], 0x3, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18987}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20048084) 15.339589578s ago: executing program 0 (id=566): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit], {0x95, 0x0, 0x300}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 364.736922ms ago: executing program 32 (id=564): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0x3, 0x33) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xa1ffffff, 0x0, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x50) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x14, 0x0, 0x111, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 290.068496ms ago: executing program 33 (id=562): pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x8001, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) 188.475277ms ago: executing program 34 (id=565): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000000)={0x400, 0xff, 0x630, 0x243, 0x2, 0x2, 0x9, 0xfb33}, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="e166cb11ef099a5a6dc3978fcf7ee07a8577ba9469cf073acafaa01a6d3c2fa1b5f3855b7647e50cc56150b61044a6e140e9ca16b45a642854e26a1db0f8d94c6c80f3f08c11b9e0fe9a0fc6cfeb6d071b89611994", 0x55}], 0x1, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x48}}, {{&(0x7f0000000180)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x60}}, {{&(0x7f0000000280)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)="cd3a5588856fb7e2209cdca0389e266db82eac899050c4ac42050e75ff8df0fe9a13f1126a017649a9b81eca6551496906d9a1", 0x33}, {&(0x7f0000000300)="410050661d7608d0b06197894bc0e55a8c9a09cdaaf7", 0x16}, {&(0x7f0000000340)="3d5f1abe27e06b04a1f88139d6b6cbaace08afa2fbc636cbfdd5936868aa549f6c8599a21a85db2ce344d3a483480bdf5866067c9245936c5f3b2c5656a31eb2a1062ce2650bfd50189254b8223c925b72535637520530d216216cfa69c93b83c80d69f4b6bde70d08d66a1df7fc8ec937f4b45e35ebcb2dd0add3a9073da7c42d71febc438b88c0fe04183bf54793be1b3ccd37d573ef399ac4f4c80c905e3af1d21817f923baae522e19ff91e3924bc44de4f57f6363870911ce404fb8774489dbf201e6af3a8a49728ce1624321fe84065a6f843cb156f00a619d5a2296af1090c7bec42517920957", 0xea}, {&(0x7f0000000440)="c8c1a505b1dbffcadb478a4bb7b84291c9a355936542", 0x16}], 0x4, &(0x7f00000004c0)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x48}}], 0x3, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18987}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20048084) 103.770972ms ago: executing program 35 (id=560): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet(0x2, 0x80001, 0x84) listen(r2, 0x3a5) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f00000000c0)="91eb8fa25471fbae588982a92d3cb87400b2ce2b890ec48c7a351d6194aedfaad28e14097fdfc7c3d1cffc9871a98b65eb2cc71f15efd2e709d8cbd20f2c89c6c7b778574d7ffca5b679209f3fbc6d0be0e438cbf19f3f5360cc1c98aaef634b21ff141e3336abb3d6e99c51c863f3b5385bbb02208121829fae241246e58d4938d178f7925dde04a8875ac86a6c39423a4c55d8167cd3f7cd27b7718092d7bc812cb769114b5e353b3e164a0dbd9237", 0xb0}], 0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 36 (id=566): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit], {0x95, 0x0, 0x300}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) kernel console output (not intermixed with test programs): _page+0x1231/0x5800 [ 105.591959][ T6190] ? __pfx_do_wp_page+0x10/0x10 [ 105.591984][ T6190] ? do_raw_spin_lock+0x121/0x290 [ 105.592017][ T6190] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.592058][ T6190] __handle_mm_fault+0x1033/0x5400 [ 105.592113][ T6190] ? __pfx___handle_mm_fault+0x10/0x10 [ 105.592159][ T6190] ? follow_page_pte+0xd03/0x13e0 [ 105.592199][ T6190] handle_mm_fault+0x40a/0x8e0 [ 105.592241][ T6190] __get_user_pages+0x165c/0x2a00 [ 105.592309][ T6190] __gup_longterm_locked+0xde4/0x1660 [ 105.592354][ T6190] ? sanity_check_pinned_pages+0x1241/0x1300 [ 105.592384][ T6190] ? gup_fast_fallback+0x1b86/0x22d0 [ 105.592417][ T6190] gup_fast_fallback+0x1d65/0x22d0 [ 105.592443][ T6190] ? is_bpf_text_address+0x26/0x2b0 [ 105.592508][ T6190] ? __pfx_gup_fast_fallback+0x10/0x10 [ 105.592534][ T6190] ? stack_trace_save+0x9c/0xe0 [ 105.592565][ T6190] ? stack_depot_save_flags+0x40/0x860 [ 105.592607][ T6190] ? pin_user_pages_fast+0x4d/0xb0 [ 105.592637][ T6190] iov_iter_extract_pages+0x35f/0x5e0 [ 105.592668][ T6190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.592728][ T6190] extract_iter_to_sg+0xe46/0x24e0 [ 105.592769][ T6190] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 105.592814][ T6190] ? __asan_memset+0x22/0x50 [ 105.592845][ T6190] af_alg_get_rsgl+0x436/0x810 [ 105.592893][ T6190] skcipher_recvmsg+0x3d1/0x11d0 [ 105.592944][ T6190] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 105.592974][ T6190] ? skcipher_check_key+0x173/0x1e0 [ 105.593002][ T6190] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 105.593033][ T6190] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 105.593063][ T6190] sock_recvmsg+0x22c/0x270 [ 105.593107][ T6190] __sys_recvfrom+0x1f6/0x340 [ 105.593132][ T6190] ? __pfx___sys_recvfrom+0x10/0x10 [ 105.593151][ T6190] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 105.593189][ T6190] ? __fget_files+0x3a0/0x420 [ 105.593223][ T6190] ? ksys_write+0x22a/0x250 [ 105.593255][ T6190] ? __pfx_ksys_write+0x10/0x10 [ 105.593288][ T6190] __x64_sys_recvfrom+0xde/0x100 [ 105.593315][ T6190] do_syscall_64+0xfa/0xfa0 [ 105.593334][ T6190] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.593354][ T6190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.593374][ T6190] ? clear_bhb_loop+0x60/0xb0 [ 105.593399][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.593419][ T6190] RIP: 0033:0x7f90c538f6c9 [ 105.593437][ T6190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.593453][ T6190] RSP: 002b:00007f90c615e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 105.593476][ T6190] RAX: ffffffffffffffda RBX: 00007f90c55e5fa0 RCX: 00007f90c538f6c9 [ 105.593491][ T6190] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 105.593505][ T6190] RBP: 00007f90c615e090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 105.593518][ T6190] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 105.593530][ T6190] R13: 00007f90c55e6038 R14: 00007f90c55e5fa0 R15: 00007ffe12b16b38 [ 105.593566][ T6190] [ 106.163983][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 106.292901][ T6208] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.355303][ T6202] veth3: entered promiscuous mode [ 106.478575][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 106.596843][ T5898] tipc: Node number set to 2886997162 [ 106.611227][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.775772][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.797860][ T6226] Can't find ip_set type zitmap:port [ 116.986901][ T6237] FAULT_INJECTION: forcing a failure. [ 116.986901][ T6237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 117.036536][ T6237] CPU: 0 UID: 0 PID: 6237 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT(full) [ 117.036565][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.036577][ T6237] Call Trace: [ 117.036585][ T6237] [ 117.036593][ T6237] dump_stack_lvl+0x189/0x250 [ 117.036628][ T6237] ? __pfx____ratelimit+0x10/0x10 [ 117.036659][ T6237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.036687][ T6237] ? __pfx__printk+0x10/0x10 [ 117.036710][ T6237] ? fs_reclaim_acquire+0x7d/0x100 [ 117.036738][ T6237] should_fail_ex+0x414/0x560 [ 117.036776][ T6237] prepare_alloc_pages+0x213/0x610 [ 117.036805][ T6237] __alloc_frozen_pages_noprof+0x123/0x370 [ 117.036831][ T6237] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 117.036863][ T6237] ? policy_nodemask+0x27c/0x720 [ 117.036890][ T6237] alloc_pages_mpol+0x232/0x4a0 [ 117.036917][ T6237] vma_alloc_folio_noprof+0xe4/0x200 [ 117.036941][ T6237] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 117.036977][ T6237] folio_prealloc+0x30/0x180 [ 117.037011][ T6237] do_wp_page+0x1231/0x5800 [ 117.037064][ T6237] ? __pfx_do_wp_page+0x10/0x10 [ 117.037096][ T6237] ? do_raw_spin_lock+0x121/0x290 [ 117.037128][ T6237] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 117.037169][ T6237] __handle_mm_fault+0x1033/0x5400 [ 117.037216][ T6237] ? __pfx___handle_mm_fault+0x10/0x10 [ 117.037260][ T6237] ? follow_page_pte+0xd03/0x13e0 [ 117.037299][ T6237] handle_mm_fault+0x40a/0x8e0 [ 117.037340][ T6237] __get_user_pages+0x165c/0x2a00 [ 117.037406][ T6237] __gup_longterm_locked+0xde4/0x1660 [ 117.037450][ T6237] ? sanity_check_pinned_pages+0x1241/0x1300 [ 117.037479][ T6237] ? gup_fast_fallback+0x1b86/0x22d0 [ 117.037510][ T6237] gup_fast_fallback+0x1d65/0x22d0 [ 117.037535][ T6237] ? is_bpf_text_address+0x26/0x2b0 [ 117.037606][ T6237] ? __pfx_gup_fast_fallback+0x10/0x10 [ 117.037630][ T6237] ? stack_trace_save+0x9c/0xe0 [ 117.037660][ T6237] ? stack_depot_save_flags+0x40/0x860 [ 117.037701][ T6237] ? pin_user_pages_fast+0x4d/0xb0 [ 117.037730][ T6237] iov_iter_extract_pages+0x35f/0x5e0 [ 117.037760][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.037787][ T6237] extract_iter_to_sg+0xe46/0x24e0 [ 117.037827][ T6237] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 117.037871][ T6237] ? __asan_memset+0x22/0x50 [ 117.037901][ T6237] af_alg_get_rsgl+0x436/0x810 [ 117.037948][ T6237] skcipher_recvmsg+0x3d1/0x11d0 [ 117.037999][ T6237] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 117.038029][ T6237] ? skcipher_check_key+0x173/0x1e0 [ 117.038058][ T6237] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 117.038095][ T6237] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 117.038126][ T6237] sock_recvmsg+0x22c/0x270 [ 117.038161][ T6237] __sys_recvfrom+0x1f6/0x340 [ 117.038187][ T6237] ? __pfx___sys_recvfrom+0x10/0x10 [ 117.038206][ T6237] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 117.038244][ T6237] ? __fget_files+0x3a0/0x420 [ 117.038276][ T6237] ? ksys_write+0x22a/0x250 [ 117.038308][ T6237] ? __pfx_ksys_write+0x10/0x10 [ 117.038341][ T6237] __x64_sys_recvfrom+0xde/0x100 [ 117.038368][ T6237] do_syscall_64+0xfa/0xfa0 [ 117.038387][ T6237] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.038407][ T6237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.038427][ T6237] ? clear_bhb_loop+0x60/0xb0 [ 117.038451][ T6237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.038470][ T6237] RIP: 0033:0x7f90c538f6c9 [ 117.038488][ T6237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.038512][ T6237] RSP: 002b:00007f90c615e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 117.038533][ T6237] RAX: ffffffffffffffda RBX: 00007f90c55e5fa0 RCX: 00007f90c538f6c9 [ 117.038547][ T6237] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 117.038560][ T6237] RBP: 00007f90c615e090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 117.038572][ T6237] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 117.038584][ T6237] R13: 00007f90c55e6038 R14: 00007f90c55e5fa0 R15: 00007ffe12b16b38 [ 117.038620][ T6237] [ 117.513586][ T6242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 117.686029][ T6253] pim6reg: entered allmulticast mode [ 117.709226][ T6257] tipc: Enabling of bearer rejected, failed to enable media [ 117.837024][ T6251] pim6reg: left allmulticast mode [ 118.130641][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 118.148193][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 118.225163][ T6277] tipc: Started in network mode [ 118.242652][ T6277] tipc: Node identity 9e5ce06ec235, cluster identity 4711 [ 118.279471][ T6277] tipc: Enabled bearer , priority 0 [ 118.324557][ T6278] syzkaller0: entered promiscuous mode [ 118.352152][ T6278] syzkaller0: entered allmulticast mode [ 119.411275][ T5915] tipc: Node number set to 1550442606 [ 119.720048][ T6271] tipc: Resetting bearer [ 119.774433][ T6271] tipc: Disabling bearer [ 120.072146][ T6301] netlink: 140 bytes leftover after parsing attributes in process `syz.4.90'. [ 120.102215][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 120.242993][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 120.378471][ T6311] Cannot find add_set index 0 as target [ 120.496653][ T6306] bridge_slave_1: left allmulticast mode [ 120.513206][ T6306] bridge_slave_1: left promiscuous mode [ 120.521312][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.572951][ T6306] bridge_slave_0: left allmulticast mode [ 120.610188][ T6320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.94'. [ 120.616752][ T6306] bridge_slave_0: left promiscuous mode [ 120.642213][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.857344][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 120.945423][ T6332] tipc: Started in network mode [ 120.950507][ T6332] tipc: Node identity 16a3fbb7eeba, cluster identity 4711 [ 120.975487][ T6332] tipc: Enabled bearer , priority 0 [ 121.201638][ T6320] veth1_macvtap: left promiscuous mode [ 121.957147][ T6332] netlink: 44 bytes leftover after parsing attributes in process `syz.1.96'. [ 121.967293][ T6334] syzkaller0: entered promiscuous mode [ 121.973521][ T6334] syzkaller0: entered allmulticast mode [ 121.986294][ T6323] tipc: Resetting bearer [ 121.998507][ T5950] tipc: Node number set to 4162452407 [ 122.145653][ T6322] tipc: Resetting bearer [ 122.172385][ T6322] tipc: Disabling bearer [ 122.206973][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 122.276261][ T6350] tipc: Started in network mode [ 122.298726][ T6350] tipc: Node identity 0ac9b87b9b36, cluster identity 4711 [ 122.333414][ T6350] tipc: Enabled bearer , priority 0 [ 122.363474][ T6354] syzkaller0: entered promiscuous mode [ 122.371343][ T6354] syzkaller0: entered allmulticast mode [ 122.379876][ T6357] netlink: 'syz.4.102': attribute type 4 has an invalid length. [ 122.512843][ T6348] tipc: Resetting bearer [ 122.642733][ T6348] tipc: Disabling bearer [ 122.727244][ T6362] vlan2: entered allmulticast mode [ 123.576183][ T6380] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 123.818398][ T12] tipc: Subscription rejected, illegal request [ 123.936375][ T6388] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 124.723892][ T6408] __nla_validate_parse: 1 callbacks suppressed [ 124.723913][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 124.784880][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 124.865493][ T6408] tipc: Started in network mode [ 124.882106][ T6408] tipc: Node identity aaa9cd1e7f5d, cluster identity 4711 [ 124.902809][ T6408] tipc: Enabled bearer , priority 0 [ 124.915839][ T6408] syzkaller0: entered promiscuous mode [ 124.921673][ T6408] syzkaller0: entered allmulticast mode [ 125.004997][ T6407] tipc: Resetting bearer [ 125.038629][ T6407] tipc: Disabling bearer [ 125.054937][ T6420] netlink: 120 bytes leftover after parsing attributes in process `syz.4.125'. [ 125.067185][ T6420] netlink: 120 bytes leftover after parsing attributes in process `syz.4.125'. [ 125.181085][ T6420] bond2: option lacp_rate: invalid value (255) [ 125.212855][ T6420] bond2 (unregistering): Released all slaves [ 125.400073][ T6437] Cannot find set identified by id 0 to match [ 125.437501][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 125.603484][ T6438] hsr_slave_0: left promiscuous mode [ 125.626866][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 125.643198][ T6438] hsr_slave_1: left promiscuous mode [ 125.878263][ T6447] netlink: 'syz.4.133': attribute type 10 has an invalid length. [ 125.962744][ T6447] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.972865][ T6447] bond0: (slave team0): Enslaving as an active interface with an up link [ 126.280386][ T6458] FAULT_INJECTION: forcing a failure. [ 126.280386][ T6458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 126.305754][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.4.137 Not tainted syzkaller #0 PREEMPT(full) [ 126.305783][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.305795][ T6458] Call Trace: [ 126.305803][ T6458] [ 126.305812][ T6458] dump_stack_lvl+0x189/0x250 [ 126.305846][ T6458] ? __pfx____ratelimit+0x10/0x10 [ 126.305879][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.305907][ T6458] ? __pfx__printk+0x10/0x10 [ 126.305931][ T6458] ? fs_reclaim_acquire+0x7d/0x100 [ 126.305962][ T6458] should_fail_ex+0x414/0x560 [ 126.306000][ T6458] prepare_alloc_pages+0x213/0x610 [ 126.306030][ T6458] __alloc_frozen_pages_noprof+0x123/0x370 [ 126.306057][ T6458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 126.306090][ T6458] ? policy_nodemask+0x27c/0x720 [ 126.306117][ T6458] alloc_pages_mpol+0x232/0x4a0 [ 126.306159][ T6458] vma_alloc_folio_noprof+0xe4/0x200 [ 126.306183][ T6458] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 126.306220][ T6458] folio_prealloc+0x30/0x180 [ 126.306253][ T6458] do_wp_page+0x1231/0x5800 [ 126.306306][ T6458] ? __pfx_do_wp_page+0x10/0x10 [ 126.306330][ T6458] ? do_raw_spin_lock+0x121/0x290 [ 126.306362][ T6458] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 126.306404][ T6458] __handle_mm_fault+0x1033/0x5400 [ 126.306456][ T6458] ? __pfx___handle_mm_fault+0x10/0x10 [ 126.306502][ T6458] ? follow_page_pte+0xd03/0x13e0 [ 126.306541][ T6458] handle_mm_fault+0x40a/0x8e0 [ 126.306582][ T6458] __get_user_pages+0x165c/0x2a00 [ 126.306648][ T6458] __gup_longterm_locked+0xde4/0x1660 [ 126.306692][ T6458] ? sanity_check_pinned_pages+0x1241/0x1300 [ 126.306721][ T6458] ? gup_fast_fallback+0x1b86/0x22d0 [ 126.306752][ T6458] gup_fast_fallback+0x1d65/0x22d0 [ 126.306784][ T6458] ? __kernel_text_address+0xd/0x40 [ 126.306817][ T6458] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.306882][ T6458] ? __pfx_gup_fast_fallback+0x10/0x10 [ 126.306907][ T6458] ? kasan_save_track+0x4f/0x80 [ 126.306935][ T6458] ? __kasan_kmalloc+0x93/0xb0 [ 126.306950][ T6458] ? __kmalloc_noprof+0x411/0x7f0 [ 126.306978][ T6458] ? sock_kmalloc+0xd6/0x160 [ 126.307001][ T6458] ? skcipher_recvmsg+0x3d1/0x11d0 [ 126.307028][ T6458] ? sock_recvmsg+0x22c/0x270 [ 126.307053][ T6458] ? __sys_recvfrom+0x1f6/0x340 [ 126.307073][ T6458] ? do_syscall_64+0xfa/0xfa0 [ 126.307091][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.307118][ T6458] ? pin_user_pages_fast+0x4d/0xb0 [ 126.307148][ T6458] iov_iter_extract_pages+0x35f/0x5e0 [ 126.307194][ T6458] extract_iter_to_sg+0xe46/0x24e0 [ 126.307235][ T6458] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 126.307261][ T6458] ? rcu_is_watching+0x15/0xb0 [ 126.307285][ T6458] ? trace_kmalloc+0x1f/0xd0 [ 126.307312][ T6458] ? sock_kmalloc+0xd6/0x160 [ 126.307342][ T6458] ? __asan_memset+0x22/0x50 [ 126.307370][ T6458] af_alg_get_rsgl+0x436/0x810 [ 126.307415][ T6458] skcipher_recvmsg+0x3d1/0x11d0 [ 126.307460][ T6458] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 126.307488][ T6458] ? skcipher_check_key+0x173/0x1e0 [ 126.307514][ T6458] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 126.307543][ T6458] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 126.307570][ T6458] sock_recvmsg+0x22c/0x270 [ 126.307601][ T6458] __sys_recvfrom+0x1f6/0x340 [ 126.307626][ T6458] ? __pfx___sys_recvfrom+0x10/0x10 [ 126.307645][ T6458] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 126.307683][ T6458] ? __fget_files+0x3a0/0x420 [ 126.307717][ T6458] ? ksys_write+0x22a/0x250 [ 126.307749][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 126.307783][ T6458] __x64_sys_recvfrom+0xde/0x100 [ 126.307810][ T6458] do_syscall_64+0xfa/0xfa0 [ 126.307831][ T6458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.307850][ T6458] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 126.307871][ T6458] ? clear_bhb_loop+0x60/0xb0 [ 126.307896][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.307916][ T6458] RIP: 0033:0x7fd03298f6c9 [ 126.307935][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.307952][ T6458] RSP: 002b:00007fd033831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 126.307975][ T6458] RAX: ffffffffffffffda RBX: 00007fd032be5fa0 RCX: 00007fd03298f6c9 [ 126.307989][ T6458] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 126.308003][ T6458] RBP: 00007fd033831090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 126.308016][ T6458] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 126.308028][ T6458] R13: 00007fd032be6038 R14: 00007fd032be5fa0 R15: 00007ffd726112c8 [ 126.308064][ T6458] [ 126.790158][ T5150] Bluetooth: hci2: command 0x0405 tx timeout [ 127.500634][ T6485] FAULT_INJECTION: forcing a failure. [ 127.500634][ T6485] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.514619][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.2.142 Not tainted syzkaller #0 PREEMPT(full) [ 127.514646][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.514658][ T6485] Call Trace: [ 127.514666][ T6485] [ 127.514674][ T6485] dump_stack_lvl+0x189/0x250 [ 127.514708][ T6485] ? __pfx____ratelimit+0x10/0x10 [ 127.514740][ T6485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.514768][ T6485] ? __pfx__printk+0x10/0x10 [ 127.514790][ T6485] ? __might_fault+0xb0/0x130 [ 127.514844][ T6485] should_fail_ex+0x414/0x560 [ 127.514880][ T6485] _copy_from_iter+0x1de/0x1790 [ 127.514906][ T6485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 127.514935][ T6485] ? policy_nodemask+0x27c/0x720 [ 127.514954][ T6485] ? __pfx__copy_from_iter+0x10/0x10 [ 127.514985][ T6485] ? set_page_refcounted+0xa0/0x1e0 [ 127.515005][ T6485] ? page_copy_sane+0x4e/0x280 [ 127.515030][ T6485] copy_page_from_iter+0xdd/0x170 [ 127.515059][ T6485] tun_get_user+0x1d7b/0x3e90 [ 127.515094][ T6485] ? tun_get_user+0x6f6/0x3e90 [ 127.515129][ T6485] ? aa_file_perm+0x44d/0x1550 [ 127.515148][ T6485] ? __pfx_tun_get_user+0x10/0x10 [ 127.515173][ T6485] ? _parse_integer_limit+0x1ae/0x1f0 [ 127.515203][ T6485] ? __lock_acquire+0xab9/0xd20 [ 127.515231][ T6485] ? ref_tracker_alloc+0x318/0x460 [ 127.515249][ T6485] ? __lock_acquire+0xab9/0xd20 [ 127.515272][ T6485] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 127.515298][ T6485] ? tun_get+0x1c/0x2f0 [ 127.515329][ T6485] ? tun_get+0x1c/0x2f0 [ 127.515353][ T6485] ? tun_get+0x1c/0x2f0 [ 127.515383][ T6485] tun_chr_write_iter+0x113/0x200 [ 127.515411][ T6485] vfs_write+0x5c9/0xb30 [ 127.515446][ T6485] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 127.515472][ T6485] ? __pfx_vfs_write+0x10/0x10 [ 127.515512][ T6485] ? __fget_files+0x2a/0x420 [ 127.515542][ T6485] ksys_write+0x145/0x250 [ 127.515574][ T6485] ? __pfx_ksys_write+0x10/0x10 [ 127.515607][ T6485] ? do_syscall_64+0xbe/0xfa0 [ 127.515630][ T6485] do_syscall_64+0xfa/0xfa0 [ 127.515647][ T6485] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.515667][ T6485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.515687][ T6485] ? clear_bhb_loop+0x60/0xb0 [ 127.515712][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.515731][ T6485] RIP: 0033:0x7fd13738e17f [ 127.515749][ T6485] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 127.515765][ T6485] RSP: 002b:00007fd1382c6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 127.515786][ T6485] RAX: ffffffffffffffda RBX: 00007fd1375e6090 RCX: 00007fd13738e17f [ 127.515809][ T6485] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 127.515821][ T6485] RBP: 00007fd1382c6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.515832][ T6485] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 127.515843][ T6485] R13: 00007fd1375e6128 R14: 00007fd1375e6090 R15: 00007fff7d85d098 [ 127.515875][ T6485] [ 127.998065][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 128.148022][ T6506] netlink: 'syz.0.146': attribute type 1 has an invalid length. [ 128.171913][ T6506] netlink: 'syz.0.146': attribute type 7 has an invalid length. [ 128.185996][ T6506] netlink: 'syz.0.146': attribute type 8 has an invalid length. [ 128.194498][ T6506] netlink: 208 bytes leftover after parsing attributes in process `syz.0.146'. [ 128.236619][ T6506] NCSI netlink: No device for ifindex 65584 [ 128.307089][ T6506] Bluetooth: MGMT ver 1.23 [ 128.444336][ T6514] syz_tun: entered allmulticast mode [ 128.567627][ T6514] syz_tun: left allmulticast mode [ 128.603141][ T6524] netlink: 'syz.2.148': attribute type 13 has an invalid length. [ 128.621554][ T6524] netlink: 'syz.2.148': attribute type 17 has an invalid length. [ 128.658718][ T6525] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 128.729007][ T6528] netlink: 'syz.1.150': attribute type 16 has an invalid length. [ 128.757247][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'. [ 128.997870][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 129.063053][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.125032][ T6524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.233705][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.251523][ T6538] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 129.307514][ T6538] bond0: (slave sit0): Error -95 calling set_mac_address [ 129.357615][ T6547] wg1: entered allmulticast mode [ 130.260181][ T6582] xt_hashlimit: overflow, rate too high: 0 [ 130.305073][ T6586] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 130.332846][ T6023] tipc: Subscription rejected, illegal request [ 130.351201][ T6586] __nla_validate_parse: 1 callbacks suppressed [ 130.351219][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 130.422580][ T6585] netlink: 'syz.0.158': attribute type 4 has an invalid length. [ 130.700283][ T6604] netlink: 'syz.2.162': attribute type 3 has an invalid length. [ 130.741097][ T6604] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.162'. [ 130.870195][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 130.884571][ T6616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 130.909530][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 131.017493][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 131.394103][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 131.649518][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 131.739276][ T6629] netlink: 76 bytes leftover after parsing attributes in process `syz.3.165'. [ 131.832511][ T6646] gretap0: entered promiscuous mode [ 131.839359][ T6646] vlan2: entered promiscuous mode [ 132.095849][ T6661] FAULT_INJECTION: forcing a failure. [ 132.095849][ T6661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.112672][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 132.159288][ T6661] CPU: 0 UID: 0 PID: 6661 Comm: syz.1.173 Not tainted syzkaller #0 PREEMPT(full) [ 132.159316][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.159329][ T6661] Call Trace: [ 132.159337][ T6661] [ 132.159346][ T6661] dump_stack_lvl+0x189/0x250 [ 132.159380][ T6661] ? __pfx____ratelimit+0x10/0x10 [ 132.159411][ T6661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.159438][ T6661] ? __pfx__printk+0x10/0x10 [ 132.159458][ T6661] ? __might_fault+0xb0/0x130 [ 132.159499][ T6661] should_fail_ex+0x414/0x560 [ 132.159535][ T6661] _copy_from_user+0x2d/0xb0 [ 132.159562][ T6661] ___sys_sendmsg+0x158/0x2a0 [ 132.159590][ T6661] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.159662][ T6661] ? __fget_files+0x2a/0x420 [ 132.159681][ T6661] ? __fget_files+0x3a0/0x420 [ 132.159711][ T6661] __x64_sys_sendmsg+0x19b/0x260 [ 132.159738][ T6661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.159771][ T6661] ? __pfx_ksys_write+0x10/0x10 [ 132.159803][ T6661] ? do_syscall_64+0xbe/0xfa0 [ 132.159827][ T6661] do_syscall_64+0xfa/0xfa0 [ 132.159846][ T6661] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.159866][ T6661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.159885][ T6661] ? clear_bhb_loop+0x60/0xb0 [ 132.159910][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.159930][ T6661] RIP: 0033:0x7f90c538f6c9 [ 132.159948][ T6661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.159965][ T6661] RSP: 002b:00007f90c615e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.159986][ T6661] RAX: ffffffffffffffda RBX: 00007f90c55e5fa0 RCX: 00007f90c538f6c9 [ 132.160000][ T6661] RDX: 00000000400048d0 RSI: 0000200000000000 RDI: 0000000000000003 [ 132.160012][ T6661] RBP: 00007f90c615e090 R08: 0000000000000000 R09: 0000000000000000 [ 132.160023][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.160035][ T6661] R13: 00007f90c55e6038 R14: 00007f90c55e5fa0 R15: 00007ffe12b16b38 [ 132.160068][ T6661] [ 132.569358][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'. [ 132.998027][ T6688] FAULT_INJECTION: forcing a failure. [ 132.998027][ T6688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.039232][ T6688] CPU: 1 UID: 0 PID: 6688 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT(full) [ 133.039259][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.039271][ T6688] Call Trace: [ 133.039277][ T6688] [ 133.039286][ T6688] dump_stack_lvl+0x189/0x250 [ 133.039316][ T6688] ? __pfx____ratelimit+0x10/0x10 [ 133.039344][ T6688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.039367][ T6688] ? __pfx__printk+0x10/0x10 [ 133.039388][ T6688] ? fs_reclaim_acquire+0x7d/0x100 [ 133.039413][ T6688] should_fail_ex+0x414/0x560 [ 133.039448][ T6688] prepare_alloc_pages+0x213/0x610 [ 133.039476][ T6688] __alloc_frozen_pages_noprof+0x123/0x370 [ 133.039501][ T6688] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.039533][ T6688] ? policy_nodemask+0x27c/0x720 [ 133.039559][ T6688] alloc_pages_mpol+0x232/0x4a0 [ 133.039597][ T6688] vma_alloc_folio_noprof+0xe4/0x200 [ 133.039621][ T6688] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 133.039657][ T6688] folio_prealloc+0x30/0x180 [ 133.039690][ T6688] do_wp_page+0x1231/0x5800 [ 133.039743][ T6688] ? __pfx_do_wp_page+0x10/0x10 [ 133.039767][ T6688] ? do_raw_spin_lock+0x121/0x290 [ 133.039800][ T6688] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.039840][ T6688] __handle_mm_fault+0x1033/0x5400 [ 133.039888][ T6688] ? __pfx___handle_mm_fault+0x10/0x10 [ 133.039930][ T6688] ? follow_page_pte+0xd03/0x13e0 [ 133.039967][ T6688] handle_mm_fault+0x40a/0x8e0 [ 133.040006][ T6688] __get_user_pages+0x165c/0x2a00 [ 133.040070][ T6688] __gup_longterm_locked+0xde4/0x1660 [ 133.040118][ T6688] ? sanity_check_pinned_pages+0x1241/0x1300 [ 133.040146][ T6688] ? gup_fast_fallback+0x1b86/0x22d0 [ 133.040175][ T6688] gup_fast_fallback+0x1d65/0x22d0 [ 133.040202][ T6688] ? __kernel_text_address+0xd/0x40 [ 133.040234][ T6688] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 133.040298][ T6688] ? __pfx_gup_fast_fallback+0x10/0x10 [ 133.040322][ T6688] ? kasan_save_track+0x4f/0x80 [ 133.040351][ T6688] ? __kasan_kmalloc+0x93/0xb0 [ 133.040366][ T6688] ? __kmalloc_noprof+0x411/0x7f0 [ 133.040392][ T6688] ? sock_kmalloc+0xd6/0x160 [ 133.040415][ T6688] ? skcipher_recvmsg+0x3d1/0x11d0 [ 133.040442][ T6688] ? sock_recvmsg+0x22c/0x270 [ 133.040469][ T6688] ? __sys_recvfrom+0x1f6/0x340 [ 133.040489][ T6688] ? do_syscall_64+0xfa/0xfa0 [ 133.040507][ T6688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.040534][ T6688] ? pin_user_pages_fast+0x4d/0xb0 [ 133.040564][ T6688] iov_iter_extract_pages+0x35f/0x5e0 [ 133.040610][ T6688] extract_iter_to_sg+0xe46/0x24e0 [ 133.040651][ T6688] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 133.040676][ T6688] ? rcu_is_watching+0x15/0xb0 [ 133.040701][ T6688] ? trace_kmalloc+0x1f/0xd0 [ 133.040728][ T6688] ? sock_kmalloc+0xd6/0x160 [ 133.040759][ T6688] ? __asan_memset+0x22/0x50 [ 133.040790][ T6688] af_alg_get_rsgl+0x436/0x810 [ 133.040839][ T6688] skcipher_recvmsg+0x3d1/0x11d0 [ 133.040891][ T6688] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 133.040925][ T6688] ? skcipher_check_key+0x173/0x1e0 [ 133.040952][ T6688] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 133.040982][ T6688] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 133.041011][ T6688] sock_recvmsg+0x22c/0x270 [ 133.041044][ T6688] __sys_recvfrom+0x1f6/0x340 [ 133.041069][ T6688] ? __pfx___sys_recvfrom+0x10/0x10 [ 133.041088][ T6688] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 133.041126][ T6688] ? __fget_files+0x3a0/0x420 [ 133.041159][ T6688] ? ksys_write+0x22a/0x250 [ 133.041189][ T6688] ? __pfx_ksys_write+0x10/0x10 [ 133.041223][ T6688] __x64_sys_recvfrom+0xde/0x100 [ 133.041250][ T6688] do_syscall_64+0xfa/0xfa0 [ 133.041269][ T6688] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.041288][ T6688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.041308][ T6688] ? clear_bhb_loop+0x60/0xb0 [ 133.041333][ T6688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.041353][ T6688] RIP: 0033:0x7fa191f8f6c9 [ 133.041372][ T6688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.041389][ T6688] RSP: 002b:00007fa192e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 133.041410][ T6688] RAX: ffffffffffffffda RBX: 00007fa1921e5fa0 RCX: 00007fa191f8f6c9 [ 133.041426][ T6688] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 133.041439][ T6688] RBP: 00007fa192e77090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 133.041452][ T6688] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 133.041464][ T6688] R13: 00007fa1921e6038 R14: 00007fa1921e5fa0 R15: 00007ffddc7740b8 [ 133.041501][ T6688] [ 133.794192][ T6705] FAULT_INJECTION: forcing a failure. [ 133.794192][ T6705] name failslab, interval 1, probability 0, space 0, times 1 [ 133.807256][ T6705] CPU: 1 UID: 0 PID: 6705 Comm: syz.2.187 Not tainted syzkaller #0 PREEMPT(full) [ 133.807283][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.807295][ T6705] Call Trace: [ 133.807303][ T6705] [ 133.807312][ T6705] dump_stack_lvl+0x189/0x250 [ 133.807345][ T6705] ? __pfx____ratelimit+0x10/0x10 [ 133.807378][ T6705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.807405][ T6705] ? __pfx__printk+0x10/0x10 [ 133.807440][ T6705] ? __pfx___might_resched+0x10/0x10 [ 133.807461][ T6705] ? fs_reclaim_acquire+0x7d/0x100 [ 133.807486][ T6705] should_fail_ex+0x414/0x560 [ 133.807523][ T6705] should_failslab+0xa8/0x100 [ 133.807546][ T6705] kmem_cache_alloc_node_noprof+0x77/0x710 [ 133.807575][ T6705] ? __alloc_skb+0x112/0x2d0 [ 133.807594][ T6705] ? netlink_autobind+0xdb/0x300 [ 133.807622][ T6705] __alloc_skb+0x112/0x2d0 [ 133.807653][ T6705] netlink_sendmsg+0x5c6/0xb30 [ 133.807685][ T6705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.807711][ T6705] ? aa_sock_msg_perm+0xf1/0x1d0 [ 133.807744][ T6705] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.807764][ T6705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.807786][ T6705] __sock_sendmsg+0x21c/0x270 [ 133.807818][ T6705] ____sys_sendmsg+0x505/0x830 [ 133.807847][ T6705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.807880][ T6705] ? import_iovec+0x74/0xa0 [ 133.807909][ T6705] ___sys_sendmsg+0x21f/0x2a0 [ 133.807935][ T6705] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.807992][ T6705] ? __fget_files+0x2a/0x420 [ 133.808011][ T6705] ? __fget_files+0x3a0/0x420 [ 133.808039][ T6705] __x64_sys_sendmsg+0x19b/0x260 [ 133.808065][ T6705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.808096][ T6705] ? __pfx_ksys_write+0x10/0x10 [ 133.808128][ T6705] ? do_syscall_64+0xbe/0xfa0 [ 133.808152][ T6705] do_syscall_64+0xfa/0xfa0 [ 133.808171][ T6705] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.808191][ T6705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.808211][ T6705] ? clear_bhb_loop+0x60/0xb0 [ 133.808235][ T6705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.808254][ T6705] RIP: 0033:0x7fd13738f6c9 [ 133.808273][ T6705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.808288][ T6705] RSP: 002b:00007fd1382e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.808309][ T6705] RAX: ffffffffffffffda RBX: 00007fd1375e5fa0 RCX: 00007fd13738f6c9 [ 133.808323][ T6705] RDX: 00000000400048d0 RSI: 0000200000000000 RDI: 0000000000000003 [ 133.808336][ T6705] RBP: 00007fd1382e7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.808348][ T6705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.808360][ T6705] R13: 00007fd1375e6038 R14: 00007fd1375e5fa0 R15: 00007fff7d85d098 [ 133.808394][ T6705] [ 134.263535][ T6701] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 134.705744][ T6734] FAULT_INJECTION: forcing a failure. [ 134.705744][ T6734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.723322][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.2.197 Not tainted syzkaller #0 PREEMPT(full) [ 134.723350][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.723363][ T6734] Call Trace: [ 134.723371][ T6734] [ 134.723380][ T6734] dump_stack_lvl+0x189/0x250 [ 134.723413][ T6734] ? __pfx____ratelimit+0x10/0x10 [ 134.723453][ T6734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.723481][ T6734] ? __pfx__printk+0x10/0x10 [ 134.723506][ T6734] ? fs_reclaim_acquire+0x7d/0x100 [ 134.723536][ T6734] should_fail_ex+0x414/0x560 [ 134.723573][ T6734] prepare_alloc_pages+0x213/0x610 [ 134.723603][ T6734] __alloc_frozen_pages_noprof+0x123/0x370 [ 134.723630][ T6734] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 134.723662][ T6734] ? policy_nodemask+0x27c/0x720 [ 134.723689][ T6734] alloc_pages_mpol+0x232/0x4a0 [ 134.723716][ T6734] vma_alloc_folio_noprof+0xe4/0x200 [ 134.723740][ T6734] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 134.723776][ T6734] folio_prealloc+0x30/0x180 [ 134.723809][ T6734] do_wp_page+0x1231/0x5800 [ 134.723863][ T6734] ? __pfx_do_wp_page+0x10/0x10 [ 134.723886][ T6734] ? do_raw_spin_lock+0x121/0x290 [ 134.723919][ T6734] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 134.723960][ T6734] __handle_mm_fault+0x1033/0x5400 [ 134.724008][ T6734] ? __pfx___handle_mm_fault+0x10/0x10 [ 134.724052][ T6734] ? follow_page_pte+0xd03/0x13e0 [ 134.724091][ T6734] handle_mm_fault+0x40a/0x8e0 [ 134.724131][ T6734] __get_user_pages+0x165c/0x2a00 [ 134.724198][ T6734] __gup_longterm_locked+0xde4/0x1660 [ 134.724241][ T6734] ? sanity_check_pinned_pages+0x1241/0x1300 [ 134.724274][ T6734] ? gup_fast_fallback+0x1b86/0x22d0 [ 134.724305][ T6734] gup_fast_fallback+0x1d65/0x22d0 [ 134.724332][ T6734] ? __kernel_text_address+0xd/0x40 [ 134.724364][ T6734] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.724435][ T6734] ? __pfx_gup_fast_fallback+0x10/0x10 [ 134.724460][ T6734] ? kasan_save_track+0x4f/0x80 [ 134.724488][ T6734] ? __kasan_kmalloc+0x93/0xb0 [ 134.724502][ T6734] ? __kmalloc_noprof+0x411/0x7f0 [ 134.724525][ T6734] ? sock_kmalloc+0xd6/0x160 [ 134.724545][ T6734] ? skcipher_recvmsg+0x3d1/0x11d0 [ 134.724567][ T6734] ? sock_recvmsg+0x22c/0x270 [ 134.724589][ T6734] ? __sys_recvfrom+0x1f6/0x340 [ 134.724608][ T6734] ? do_syscall_64+0xfa/0xfa0 [ 134.724626][ T6734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.724652][ T6734] ? pin_user_pages_fast+0x4d/0xb0 [ 134.724681][ T6734] iov_iter_extract_pages+0x35f/0x5e0 [ 134.724719][ T6734] extract_iter_to_sg+0xe46/0x24e0 [ 134.724759][ T6734] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 134.724786][ T6734] ? rcu_is_watching+0x15/0xb0 [ 134.724811][ T6734] ? trace_kmalloc+0x1f/0xd0 [ 134.724839][ T6734] ? sock_kmalloc+0xd6/0x160 [ 134.724870][ T6734] ? __asan_memset+0x22/0x50 [ 134.724900][ T6734] af_alg_get_rsgl+0x436/0x810 [ 134.724949][ T6734] skcipher_recvmsg+0x3d1/0x11d0 [ 134.725000][ T6734] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 134.725030][ T6734] ? skcipher_check_key+0x173/0x1e0 [ 134.725058][ T6734] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 134.725089][ T6734] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 134.725118][ T6734] sock_recvmsg+0x22c/0x270 [ 134.725153][ T6734] __sys_recvfrom+0x1f6/0x340 [ 134.725178][ T6734] ? __pfx___sys_recvfrom+0x10/0x10 [ 134.725197][ T6734] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 134.725235][ T6734] ? __fget_files+0x3a0/0x420 [ 134.725268][ T6734] ? ksys_write+0x22a/0x250 [ 134.725301][ T6734] ? __pfx_ksys_write+0x10/0x10 [ 134.725335][ T6734] __x64_sys_recvfrom+0xde/0x100 [ 134.725361][ T6734] do_syscall_64+0xfa/0xfa0 [ 134.725379][ T6734] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.725399][ T6734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.725418][ T6734] ? clear_bhb_loop+0x60/0xb0 [ 134.725449][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.725468][ T6734] RIP: 0033:0x7fd13738f6c9 [ 134.725486][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.725502][ T6734] RSP: 002b:00007fd1382e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 134.725524][ T6734] RAX: ffffffffffffffda RBX: 00007fd1375e5fa0 RCX: 00007fd13738f6c9 [ 134.725537][ T6734] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 134.725550][ T6734] RBP: 00007fd1382e7090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 134.725564][ T6734] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 134.725575][ T6734] R13: 00007fd1375e6038 R14: 00007fd1375e5fa0 R15: 00007fff7d85d098 [ 134.725609][ T6734] [ 134.729071][ T6735] IPv6: addrconf: prefix option has invalid lifetime [ 135.365675][ T6751] bond0: entered promiscuous mode [ 135.371032][ T6751] bond_slave_0: entered promiscuous mode [ 135.378742][ T6751] bond_slave_1: entered promiscuous mode [ 135.387519][ T6751] gretap0: entered promiscuous mode [ 135.395124][ T6751] debugfs: 'hsr0' already exists in 'hsr' [ 135.404014][ T6751] Cannot create hsr debugfs directory [ 135.409451][ T6751] hsr0: entered promiscuous mode [ 135.609607][ T6756] validate_nla: 2 callbacks suppressed [ 135.609627][ T6756] netlink: 'syz.4.202': attribute type 3 has an invalid length. [ 135.648160][ T6765] netlink: 'syz.0.205': attribute type 4 has an invalid length. [ 135.656211][ T6765] __nla_validate_parse: 8 callbacks suppressed [ 135.656230][ T6765] netlink: 152 bytes leftover after parsing attributes in process `syz.0.205'. [ 135.673973][ T6756] syz_tun: entered allmulticast mode [ 135.775403][ T6756] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.809513][ T6756] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 136.031631][ T6755] syz_tun: left allmulticast mode [ 136.149613][ T6775] batman_adv: batadv0: Adding interface: dummy0 [ 136.156231][ T6775] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.182551][ T6775] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 136.413070][ T6784] trusted_key: syz.0.212 sent an empty control message without MSG_MORE. [ 136.507390][ T6786] netlink: 56 bytes leftover after parsing attributes in process `syz.2.211'. [ 136.601942][ T6792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.607613][ T6795] netlink: 'syz.1.215': attribute type 2 has an invalid length. [ 136.709226][ T6795] : entered promiscuous mode [ 137.552435][ T6830] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 137.849438][ T6838] netlink: 'syz.1.227': attribute type 11 has an invalid length. [ 137.857976][ T6837] netlink: 'syz.2.228': attribute type 10 has an invalid length. [ 137.874551][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.227'. [ 137.896317][ T6837] netlink: 'syz.2.228': attribute type 10 has an invalid length. [ 137.913592][ T6837] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.261848][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.268490][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.410823][ T6859] netlink: 'syz.0.232': attribute type 5 has an invalid length. [ 138.467270][ T6862] netlink: 504 bytes leftover after parsing attributes in process `syz.0.232'. [ 138.780458][ T6875] FAULT_INJECTION: forcing a failure. [ 138.780458][ T6875] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.783524][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 138.805145][ T6875] CPU: 1 UID: 0 PID: 6875 Comm: syz.4.238 Not tainted syzkaller #0 PREEMPT(full) [ 138.805173][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.805192][ T6875] Call Trace: [ 138.805200][ T6875] [ 138.805208][ T6875] dump_stack_lvl+0x189/0x250 [ 138.805242][ T6875] ? __pfx____ratelimit+0x10/0x10 [ 138.805271][ T6875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.805299][ T6875] ? __pfx__printk+0x10/0x10 [ 138.805326][ T6875] ? fs_reclaim_acquire+0x7d/0x100 [ 138.805355][ T6875] should_fail_ex+0x414/0x560 [ 138.805393][ T6875] prepare_alloc_pages+0x213/0x610 [ 138.805422][ T6875] __alloc_frozen_pages_noprof+0x123/0x370 [ 138.805448][ T6875] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.805480][ T6875] ? policy_nodemask+0x27c/0x720 [ 138.805506][ T6875] alloc_pages_mpol+0x232/0x4a0 [ 138.805532][ T6875] vma_alloc_folio_noprof+0xe4/0x200 [ 138.805557][ T6875] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 138.805591][ T6875] folio_prealloc+0x30/0x180 [ 138.805624][ T6875] do_wp_page+0x1231/0x5800 [ 138.805676][ T6875] ? __pfx_do_wp_page+0x10/0x10 [ 138.805698][ T6875] ? do_raw_spin_lock+0x121/0x290 [ 138.805730][ T6875] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.805770][ T6875] __handle_mm_fault+0x1033/0x5400 [ 138.805817][ T6875] ? __pfx___handle_mm_fault+0x10/0x10 [ 138.805860][ T6875] ? follow_page_pte+0xd03/0x13e0 [ 138.805899][ T6875] handle_mm_fault+0x40a/0x8e0 [ 138.805938][ T6875] __get_user_pages+0x165c/0x2a00 [ 138.806034][ T6875] __gup_longterm_locked+0xde4/0x1660 [ 138.806076][ T6875] ? sanity_check_pinned_pages+0x1241/0x1300 [ 138.806103][ T6875] ? gup_fast_fallback+0x1b86/0x22d0 [ 138.806132][ T6875] gup_fast_fallback+0x1d65/0x22d0 [ 138.806159][ T6875] ? __kernel_text_address+0xd/0x40 [ 138.806190][ T6875] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 138.806254][ T6875] ? __pfx_gup_fast_fallback+0x10/0x10 [ 138.806277][ T6875] ? kasan_save_track+0x4f/0x80 [ 138.806305][ T6875] ? __kasan_kmalloc+0x93/0xb0 [ 138.806331][ T6875] ? __kmalloc_noprof+0x411/0x7f0 [ 138.806358][ T6875] ? sock_kmalloc+0xd6/0x160 [ 138.806382][ T6875] ? skcipher_recvmsg+0x3d1/0x11d0 [ 138.806410][ T6875] ? sock_recvmsg+0x22c/0x270 [ 138.806436][ T6875] ? __sys_recvfrom+0x1f6/0x340 [ 138.806455][ T6875] ? do_syscall_64+0xfa/0xfa0 [ 138.806475][ T6875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.806502][ T6875] ? pin_user_pages_fast+0x4d/0xb0 [ 138.806531][ T6875] iov_iter_extract_pages+0x35f/0x5e0 [ 138.806569][ T6875] extract_iter_to_sg+0xe46/0x24e0 [ 138.806609][ T6875] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 138.806636][ T6875] ? rcu_is_watching+0x15/0xb0 [ 138.806661][ T6875] ? trace_kmalloc+0x1f/0xd0 [ 138.806689][ T6875] ? sock_kmalloc+0xd6/0x160 [ 138.806719][ T6875] ? __asan_memset+0x22/0x50 [ 138.806749][ T6875] af_alg_get_rsgl+0x436/0x810 [ 138.806798][ T6875] skcipher_recvmsg+0x3d1/0x11d0 [ 138.806850][ T6875] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 138.806878][ T6875] ? skcipher_check_key+0x173/0x1e0 [ 138.806923][ T6875] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 138.806955][ T6875] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 138.806985][ T6875] sock_recvmsg+0x22c/0x270 [ 138.807025][ T6875] __sys_recvfrom+0x1f6/0x340 [ 138.807050][ T6875] ? __pfx___sys_recvfrom+0x10/0x10 [ 138.807069][ T6875] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 138.807112][ T6875] ? __fget_files+0x3a0/0x420 [ 138.807145][ T6875] ? ksys_write+0x22a/0x250 [ 138.807177][ T6875] ? __pfx_ksys_write+0x10/0x10 [ 138.807211][ T6875] __x64_sys_recvfrom+0xde/0x100 [ 138.807238][ T6875] do_syscall_64+0xfa/0xfa0 [ 138.807256][ T6875] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.807276][ T6875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.807295][ T6875] ? clear_bhb_loop+0x60/0xb0 [ 138.807320][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.807338][ T6875] RIP: 0033:0x7fd03298f6c9 [ 138.807357][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.807373][ T6875] RSP: 002b:00007fd033831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 138.807394][ T6875] RAX: ffffffffffffffda RBX: 00007fd032be5fa0 RCX: 00007fd03298f6c9 [ 138.807408][ T6875] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 138.807421][ T6875] RBP: 00007fd033831090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 138.807434][ T6875] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 138.807445][ T6875] R13: 00007fd032be6038 R14: 00007fd032be5fa0 R15: 00007ffd726112c8 [ 138.807479][ T6875] [ 140.573995][ T6910] FAULT_INJECTION: forcing a failure. [ 140.573995][ T6910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.601148][ T6910] CPU: 1 UID: 0 PID: 6910 Comm: syz.2.248 Not tainted syzkaller #0 PREEMPT(full) [ 140.601176][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.601188][ T6910] Call Trace: [ 140.601196][ T6910] [ 140.601205][ T6910] dump_stack_lvl+0x189/0x250 [ 140.601239][ T6910] ? __pfx____ratelimit+0x10/0x10 [ 140.601270][ T6910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.601299][ T6910] ? __pfx__printk+0x10/0x10 [ 140.601322][ T6910] ? fs_reclaim_acquire+0x7d/0x100 [ 140.601352][ T6910] should_fail_ex+0x414/0x560 [ 140.601390][ T6910] prepare_alloc_pages+0x213/0x610 [ 140.601420][ T6910] __alloc_frozen_pages_noprof+0x123/0x370 [ 140.601447][ T6910] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 140.601485][ T6910] ? policy_nodemask+0x27c/0x720 [ 140.601512][ T6910] alloc_pages_mpol+0x232/0x4a0 [ 140.601540][ T6910] vma_alloc_folio_noprof+0xe4/0x200 [ 140.601573][ T6910] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 140.601610][ T6910] folio_prealloc+0x30/0x180 [ 140.601642][ T6910] do_wp_page+0x1231/0x5800 [ 140.601696][ T6910] ? __pfx_do_wp_page+0x10/0x10 [ 140.601719][ T6910] ? do_raw_spin_lock+0x121/0x290 [ 140.601752][ T6910] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.601793][ T6910] __handle_mm_fault+0x1033/0x5400 [ 140.601840][ T6910] ? __pfx___handle_mm_fault+0x10/0x10 [ 140.601886][ T6910] ? follow_page_pte+0xd03/0x13e0 [ 140.601925][ T6910] handle_mm_fault+0x40a/0x8e0 [ 140.601966][ T6910] __get_user_pages+0x165c/0x2a00 [ 140.602033][ T6910] __gup_longterm_locked+0xde4/0x1660 [ 140.602077][ T6910] ? sanity_check_pinned_pages+0x1241/0x1300 [ 140.602106][ T6910] ? gup_fast_fallback+0x1b86/0x22d0 [ 140.602137][ T6910] gup_fast_fallback+0x1d65/0x22d0 [ 140.602164][ T6910] ? __kernel_text_address+0xd/0x40 [ 140.602196][ T6910] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 140.602260][ T6910] ? __pfx_gup_fast_fallback+0x10/0x10 [ 140.602285][ T6910] ? kasan_save_track+0x4f/0x80 [ 140.602312][ T6910] ? __kasan_kmalloc+0x93/0xb0 [ 140.602328][ T6910] ? __kmalloc_noprof+0x411/0x7f0 [ 140.602356][ T6910] ? sock_kmalloc+0xd6/0x160 [ 140.602379][ T6910] ? skcipher_recvmsg+0x3d1/0x11d0 [ 140.602405][ T6910] ? sock_recvmsg+0x22c/0x270 [ 140.602431][ T6910] ? __sys_recvfrom+0x1f6/0x340 [ 140.602450][ T6910] ? do_syscall_64+0xfa/0xfa0 [ 140.602469][ T6910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.602496][ T6910] ? pin_user_pages_fast+0x4d/0xb0 [ 140.602526][ T6910] iov_iter_extract_pages+0x35f/0x5e0 [ 140.602571][ T6910] extract_iter_to_sg+0xe46/0x24e0 [ 140.602613][ T6910] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 140.602640][ T6910] ? rcu_is_watching+0x15/0xb0 [ 140.602665][ T6910] ? trace_kmalloc+0x1f/0xd0 [ 140.602735][ T6910] ? sock_kmalloc+0xd6/0x160 [ 140.602767][ T6910] ? __asan_memset+0x22/0x50 [ 140.602797][ T6910] af_alg_get_rsgl+0x436/0x810 [ 140.602846][ T6910] skcipher_recvmsg+0x3d1/0x11d0 [ 140.602898][ T6910] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 140.602927][ T6910] ? skcipher_check_key+0x173/0x1e0 [ 140.602956][ T6910] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 140.602987][ T6910] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 140.603017][ T6910] sock_recvmsg+0x22c/0x270 [ 140.603052][ T6910] __sys_recvfrom+0x1f6/0x340 [ 140.603077][ T6910] ? __pfx___sys_recvfrom+0x10/0x10 [ 140.603095][ T6910] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 140.603133][ T6910] ? __fget_files+0x3a0/0x420 [ 140.603167][ T6910] ? ksys_write+0x22a/0x250 [ 140.603199][ T6910] ? __pfx_ksys_write+0x10/0x10 [ 140.603233][ T6910] __x64_sys_recvfrom+0xde/0x100 [ 140.603260][ T6910] do_syscall_64+0xfa/0xfa0 [ 140.603278][ T6910] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.603298][ T6910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.603318][ T6910] ? clear_bhb_loop+0x60/0xb0 [ 140.603344][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.603363][ T6910] RIP: 0033:0x7fd13738f6c9 [ 140.603382][ T6910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.603398][ T6910] RSP: 002b:00007fd1382e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 140.603420][ T6910] RAX: ffffffffffffffda RBX: 00007fd1375e5fa0 RCX: 00007fd13738f6c9 [ 140.603434][ T6910] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 140.603448][ T6910] RBP: 00007fd1382e7090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 140.603462][ T6910] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 140.603473][ T6910] R13: 00007fd1375e6038 R14: 00007fd1375e5fa0 R15: 00007fff7d85d098 [ 140.603510][ T6910] [ 141.207868][ T6919] Bluetooth: MGMT ver 1.23 [ 141.401287][ T6912] syzkaller0: entered promiscuous mode [ 141.406919][ T6912] syzkaller0: entered allmulticast mode [ 141.468008][ T6924] wg1 speed is unknown, defaulting to 1000 [ 141.530535][ T6924] wg1 speed is unknown, defaulting to 1000 [ 141.543057][ T6924] wg1 speed is unknown, defaulting to 1000 [ 141.590294][ T6924] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 141.662797][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 141.678139][ T6927] xt_TCPMSS: Only works on TCP SYN packets [ 141.850846][ T6930] tipc: Enabled bearer , priority 0 [ 141.858590][ T6924] wg1 speed is unknown, defaulting to 1000 [ 141.865158][ T6934] syzkaller0: entered promiscuous mode [ 141.876388][ T6934] syzkaller0: entered allmulticast mode [ 141.894939][ T6924] wg1 speed is unknown, defaulting to 1000 [ 141.947867][ T6924] wg1 speed is unknown, defaulting to 1000 [ 141.958848][ T6930] tipc: Resetting bearer [ 141.992109][ T6924] wg1 speed is unknown, defaulting to 1000 [ 142.000314][ T6924] wg1 speed is unknown, defaulting to 1000 [ 142.014064][ T6929] tipc: Resetting bearer [ 142.062354][ T6929] tipc: Disabling bearer [ 142.209189][ T6940] netlink: 'syz.2.255': attribute type 13 has an invalid length. [ 142.327011][ T5907] IPVS: starting estimator thread 0... [ 142.353054][ T6952] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 142.431171][ T6950] IPVS: using max 27 ests per chain, 64800 per kthread [ 142.739620][ T6943] wg1 speed is unknown, defaulting to 1000 [ 142.764454][ T6966] FAULT_INJECTION: forcing a failure. [ 142.764454][ T6966] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.800359][ T6966] CPU: 1 UID: 0 PID: 6966 Comm: syz.3.260 Not tainted syzkaller #0 PREEMPT(full) [ 142.800388][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.800399][ T6966] Call Trace: [ 142.800408][ T6966] [ 142.800416][ T6966] dump_stack_lvl+0x189/0x250 [ 142.800451][ T6966] ? __pfx____ratelimit+0x10/0x10 [ 142.800483][ T6966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.800511][ T6966] ? __pfx__printk+0x10/0x10 [ 142.800534][ T6966] ? fs_reclaim_acquire+0x7d/0x100 [ 142.800564][ T6966] should_fail_ex+0x414/0x560 [ 142.800602][ T6966] prepare_alloc_pages+0x213/0x610 [ 142.800631][ T6966] __alloc_frozen_pages_noprof+0x123/0x370 [ 142.800656][ T6966] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.800705][ T6966] ? policy_nodemask+0x27c/0x720 [ 142.800731][ T6966] alloc_pages_mpol+0x232/0x4a0 [ 142.800758][ T6966] vma_alloc_folio_noprof+0xe4/0x200 [ 142.800783][ T6966] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 142.800818][ T6966] folio_prealloc+0x30/0x180 [ 142.800851][ T6966] do_wp_page+0x1231/0x5800 [ 142.800908][ T6966] ? __pfx_do_wp_page+0x10/0x10 [ 142.800931][ T6966] ? do_raw_spin_lock+0x121/0x290 [ 142.800962][ T6966] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.801002][ T6966] __handle_mm_fault+0x1033/0x5400 [ 142.801049][ T6966] ? __pfx___handle_mm_fault+0x10/0x10 [ 142.801094][ T6966] ? follow_page_pte+0xd03/0x13e0 [ 142.801132][ T6966] handle_mm_fault+0x40a/0x8e0 [ 142.801174][ T6966] __get_user_pages+0x165c/0x2a00 [ 142.801240][ T6966] __gup_longterm_locked+0xde4/0x1660 [ 142.801284][ T6966] ? sanity_check_pinned_pages+0x1241/0x1300 [ 142.801312][ T6966] ? gup_fast_fallback+0x1b86/0x22d0 [ 142.801343][ T6966] gup_fast_fallback+0x1d65/0x22d0 [ 142.801369][ T6966] ? __kernel_text_address+0xd/0x40 [ 142.801398][ T6966] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 142.801456][ T6966] ? __pfx_gup_fast_fallback+0x10/0x10 [ 142.801480][ T6966] ? kasan_save_track+0x4f/0x80 [ 142.801507][ T6966] ? __kasan_kmalloc+0x93/0xb0 [ 142.801523][ T6966] ? __kmalloc_noprof+0x411/0x7f0 [ 142.801550][ T6966] ? sock_kmalloc+0xd6/0x160 [ 142.801574][ T6966] ? skcipher_recvmsg+0x3d1/0x11d0 [ 142.801599][ T6966] ? sock_recvmsg+0x22c/0x270 [ 142.801625][ T6966] ? __sys_recvfrom+0x1f6/0x340 [ 142.801644][ T6966] ? do_syscall_64+0xfa/0xfa0 [ 142.801663][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.801699][ T6966] ? pin_user_pages_fast+0x4d/0xb0 [ 142.801729][ T6966] iov_iter_extract_pages+0x35f/0x5e0 [ 142.801768][ T6966] extract_iter_to_sg+0xe46/0x24e0 [ 142.801809][ T6966] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 142.801836][ T6966] ? rcu_is_watching+0x15/0xb0 [ 142.801861][ T6966] ? trace_kmalloc+0x1f/0xd0 [ 142.801888][ T6966] ? sock_kmalloc+0xd6/0x160 [ 142.801918][ T6966] ? __asan_memset+0x22/0x50 [ 142.801949][ T6966] af_alg_get_rsgl+0x436/0x810 [ 142.801998][ T6966] skcipher_recvmsg+0x3d1/0x11d0 [ 142.802050][ T6966] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 142.802080][ T6966] ? skcipher_check_key+0x173/0x1e0 [ 142.802108][ T6966] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 142.802139][ T6966] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 142.802170][ T6966] sock_recvmsg+0x22c/0x270 [ 142.802203][ T6966] __sys_recvfrom+0x1f6/0x340 [ 142.802229][ T6966] ? __pfx___sys_recvfrom+0x10/0x10 [ 142.802248][ T6966] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 142.802286][ T6966] ? __fget_files+0x3a0/0x420 [ 142.802320][ T6966] ? ksys_write+0x22a/0x250 [ 142.802352][ T6966] ? __pfx_ksys_write+0x10/0x10 [ 142.802386][ T6966] __x64_sys_recvfrom+0xde/0x100 [ 142.802413][ T6966] do_syscall_64+0xfa/0xfa0 [ 142.802432][ T6966] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.802452][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.802471][ T6966] ? clear_bhb_loop+0x60/0xb0 [ 142.802497][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.802516][ T6966] RIP: 0033:0x7fa191f8f6c9 [ 142.802535][ T6966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.802552][ T6966] RSP: 002b:00007fa192e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 142.802574][ T6966] RAX: ffffffffffffffda RBX: 00007fa1921e5fa0 RCX: 00007fa191f8f6c9 [ 142.802589][ T6966] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 142.802603][ T6966] RBP: 00007fa192e77090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 142.802616][ T6966] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 142.802628][ T6966] R13: 00007fa1921e6038 R14: 00007fa1921e5fa0 R15: 00007ffddc7740b8 [ 142.802665][ T6966] [ 143.506835][ T6972] wg1 speed is unknown, defaulting to 1000 [ 143.565035][ T6976] tipc: Enabled bearer , priority 0 [ 143.579788][ T6978] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 143.593211][ T6976] syzkaller0: entered promiscuous mode [ 143.598898][ T6976] syzkaller0: entered allmulticast mode [ 143.645506][ T6976] netlink: 44 bytes leftover after parsing attributes in process `syz.3.263'. [ 143.658626][ T6976] tipc: Resetting bearer [ 143.683591][ T6981] netlink: 56 bytes leftover after parsing attributes in process `syz.2.265'. [ 143.704889][ T6975] tipc: Resetting bearer [ 143.724598][ T6975] tipc: Disabling bearer [ 143.907217][ T6985] wg1 speed is unknown, defaulting to 1000 [ 144.066797][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 144.102214][ T6989] tipc: Enabled bearer , priority 0 [ 144.121408][ T6989] syzkaller0: entered promiscuous mode [ 144.133648][ T6989] syzkaller0: entered allmulticast mode [ 144.203664][ T6989] tipc: Resetting bearer [ 144.232832][ T6988] tipc: Resetting bearer [ 144.262739][ T6988] tipc: Disabling bearer [ 144.629641][ T7011] xt_TCPMSS: Only works on TCP SYN packets [ 144.688720][ T7008] FAULT_INJECTION: forcing a failure. [ 144.688720][ T7008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.735132][ T7011] syz.3.272 (7011) used obsolete PPPIOCDETACH ioctl [ 144.758794][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.0.273 Not tainted syzkaller #0 PREEMPT(full) [ 144.758823][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.758836][ T7008] Call Trace: [ 144.758844][ T7008] [ 144.758854][ T7008] dump_stack_lvl+0x189/0x250 [ 144.758888][ T7008] ? __pfx____ratelimit+0x10/0x10 [ 144.758921][ T7008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.758949][ T7008] ? __pfx__printk+0x10/0x10 [ 144.758973][ T7008] ? fs_reclaim_acquire+0x7d/0x100 [ 144.759004][ T7008] should_fail_ex+0x414/0x560 [ 144.759042][ T7008] prepare_alloc_pages+0x213/0x610 [ 144.759072][ T7008] __alloc_frozen_pages_noprof+0x123/0x370 [ 144.759098][ T7008] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 144.759131][ T7008] ? policy_nodemask+0x27c/0x720 [ 144.759158][ T7008] alloc_pages_mpol+0x232/0x4a0 [ 144.759184][ T7008] vma_alloc_folio_noprof+0xe4/0x200 [ 144.759209][ T7008] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 144.759245][ T7008] folio_prealloc+0x30/0x180 [ 144.759278][ T7008] do_wp_page+0x1231/0x5800 [ 144.759332][ T7008] ? __pfx_do_wp_page+0x10/0x10 [ 144.759357][ T7008] ? do_raw_spin_lock+0x121/0x290 [ 144.759390][ T7008] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.759432][ T7008] __handle_mm_fault+0x1033/0x5400 [ 144.759486][ T7008] ? __pfx___handle_mm_fault+0x10/0x10 [ 144.759532][ T7008] ? follow_page_pte+0xd03/0x13e0 [ 144.759571][ T7008] handle_mm_fault+0x40a/0x8e0 [ 144.759612][ T7008] __get_user_pages+0x165c/0x2a00 [ 144.759680][ T7008] __gup_longterm_locked+0xde4/0x1660 [ 144.759723][ T7008] ? sanity_check_pinned_pages+0x1241/0x1300 [ 144.759752][ T7008] ? gup_fast_fallback+0x1b86/0x22d0 [ 144.759784][ T7008] gup_fast_fallback+0x1d65/0x22d0 [ 144.759811][ T7008] ? __kernel_text_address+0xd/0x40 [ 144.759844][ T7008] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 144.759909][ T7008] ? __pfx_gup_fast_fallback+0x10/0x10 [ 144.759933][ T7008] ? kasan_save_track+0x4f/0x80 [ 144.759962][ T7008] ? __kasan_kmalloc+0x93/0xb0 [ 144.759977][ T7008] ? __kmalloc_noprof+0x411/0x7f0 [ 144.760005][ T7008] ? sock_kmalloc+0xd6/0x160 [ 144.760028][ T7008] ? skcipher_recvmsg+0x3d1/0x11d0 [ 144.760054][ T7008] ? sock_recvmsg+0x22c/0x270 [ 144.760081][ T7008] ? __sys_recvfrom+0x1f6/0x340 [ 144.760101][ T7008] ? do_syscall_64+0xfa/0xfa0 [ 144.760119][ T7008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.760146][ T7008] ? pin_user_pages_fast+0x4d/0xb0 [ 144.760174][ T7008] iov_iter_extract_pages+0x35f/0x5e0 [ 144.760211][ T7008] extract_iter_to_sg+0xe46/0x24e0 [ 144.760250][ T7008] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 144.760276][ T7008] ? rcu_is_watching+0x15/0xb0 [ 144.760301][ T7008] ? trace_kmalloc+0x1f/0xd0 [ 144.760330][ T7008] ? sock_kmalloc+0xd6/0x160 [ 144.760362][ T7008] ? __asan_memset+0x22/0x50 [ 144.760392][ T7008] af_alg_get_rsgl+0x436/0x810 [ 144.760442][ T7008] skcipher_recvmsg+0x3d1/0x11d0 [ 144.760501][ T7008] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 144.760531][ T7008] ? skcipher_check_key+0x173/0x1e0 [ 144.760558][ T7008] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 144.760588][ T7008] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 144.760619][ T7008] sock_recvmsg+0x22c/0x270 [ 144.760654][ T7008] __sys_recvfrom+0x1f6/0x340 [ 144.760679][ T7008] ? __pfx___sys_recvfrom+0x10/0x10 [ 144.760698][ T7008] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 144.760736][ T7008] ? __fget_files+0x3a0/0x420 [ 144.760769][ T7008] ? ksys_write+0x22a/0x250 [ 144.760801][ T7008] ? __pfx_ksys_write+0x10/0x10 [ 144.760835][ T7008] __x64_sys_recvfrom+0xde/0x100 [ 144.760861][ T7008] do_syscall_64+0xfa/0xfa0 [ 144.760881][ T7008] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.760906][ T7008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.760925][ T7008] ? clear_bhb_loop+0x60/0xb0 [ 144.760950][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.760968][ T7008] RIP: 0033:0x7f4652d8f6c9 [ 144.760986][ T7008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.761003][ T7008] RSP: 002b:00007f4653be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 144.761024][ T7008] RAX: ffffffffffffffda RBX: 00007f4652fe5fa0 RCX: 00007f4652d8f6c9 [ 144.761039][ T7008] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 144.761053][ T7008] RBP: 00007f4653be7090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 144.761066][ T7008] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 144.761077][ T7008] R13: 00007f4652fe6038 R14: 00007f4652fe5fa0 R15: 00007ffdb2c70a88 [ 144.761113][ T7008] [ 145.436890][ T5916] IPVS: starting estimator thread 0... [ 145.475821][ T7021] netlink: 68 bytes leftover after parsing attributes in process `syz.1.275'. [ 145.556914][ T7023] netlink: 14 bytes leftover after parsing attributes in process `syz.0.276'. [ 145.581041][ T7018] IPVS: using max 25 ests per chain, 60000 per kthread [ 145.809451][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.280'. [ 145.910102][ T7031] wg1 speed is unknown, defaulting to 1000 [ 146.029471][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 146.307044][ T7068] tipc: Enabled bearer , priority 0 [ 146.315125][ T7068] syzkaller0: entered promiscuous mode [ 146.320773][ T7068] syzkaller0: entered allmulticast mode [ 146.487531][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 146.490725][ T7068] tipc: Resetting bearer [ 146.501732][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 146.527386][ T5916] IPVS: starting estimator thread 0... [ 146.537008][ T7067] tipc: Resetting bearer [ 146.569448][ T7067] tipc: Disabling bearer [ 146.631763][ T7080] IPVS: using max 24 ests per chain, 57600 per kthread [ 146.676852][ T7081] hsr_slave_0: left promiscuous mode [ 146.705017][ T7081] hsr_slave_1: left promiscuous mode [ 147.269822][ T7117] __nla_validate_parse: 3 callbacks suppressed [ 147.269841][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.297'. [ 147.336279][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.301'. [ 147.502430][ T7125] netlink: 'syz.0.304': attribute type 16 has an invalid length. [ 147.510477][ T7125] netlink: 'syz.0.304': attribute type 17 has an invalid length. [ 147.568727][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 147.602964][ T7126] netlink: 64 bytes leftover after parsing attributes in process `syz.0.304'. [ 147.719342][ T7125] batman_adv: batadv0: Interface activated: dummy0 [ 147.731215][ T7125] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.761683][ T5898] IPVS: starting estimator thread 0... [ 147.772431][ T7134] FAULT_INJECTION: forcing a failure. [ 147.772431][ T7134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.788815][ T7134] CPU: 1 UID: 0 PID: 7134 Comm: syz.1.307 Not tainted syzkaller #0 PREEMPT(full) [ 147.788842][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.788854][ T7134] Call Trace: [ 147.788862][ T7134] [ 147.788871][ T7134] dump_stack_lvl+0x189/0x250 [ 147.788904][ T7134] ? __pfx____ratelimit+0x10/0x10 [ 147.788919][ T7126] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 147.788937][ T7134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.788974][ T7134] ? __pfx__printk+0x10/0x10 [ 147.788998][ T7134] ? fs_reclaim_acquire+0x7d/0x100 [ 147.789031][ T7134] should_fail_ex+0x414/0x560 [ 147.789077][ T7134] prepare_alloc_pages+0x213/0x610 [ 147.789111][ T7134] __alloc_frozen_pages_noprof+0x123/0x370 [ 147.789141][ T7134] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.789180][ T7134] ? policy_nodemask+0x27c/0x720 [ 147.789207][ T7134] alloc_pages_mpol+0x232/0x4a0 [ 147.789238][ T7134] vma_alloc_folio_noprof+0xe4/0x200 [ 147.789265][ T7134] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 147.789306][ T7134] folio_prealloc+0x30/0x180 [ 147.789343][ T7134] do_wp_page+0x1231/0x5800 [ 147.789401][ T7134] ? __pfx_do_wp_page+0x10/0x10 [ 147.789428][ T7134] ? do_raw_spin_lock+0x121/0x290 [ 147.789465][ T7134] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.789512][ T7134] __handle_mm_fault+0x1033/0x5400 [ 147.789563][ T7134] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.789614][ T7134] ? follow_page_pte+0xd03/0x13e0 [ 147.789658][ T7134] handle_mm_fault+0x40a/0x8e0 [ 147.789702][ T7134] __get_user_pages+0x165c/0x2a00 [ 147.789775][ T7134] __gup_longterm_locked+0xde4/0x1660 [ 147.789822][ T7134] ? sanity_check_pinned_pages+0x1241/0x1300 [ 147.789855][ T7134] ? gup_fast_fallback+0x1b86/0x22d0 [ 147.789890][ T7134] gup_fast_fallback+0x1d65/0x22d0 [ 147.789920][ T7134] ? __kernel_text_address+0xd/0x40 [ 147.789963][ T7134] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.790035][ T7134] ? __pfx_gup_fast_fallback+0x10/0x10 [ 147.790062][ T7134] ? kasan_save_track+0x4f/0x80 [ 147.790093][ T7134] ? __kasan_kmalloc+0x93/0xb0 [ 147.790111][ T7134] ? __kmalloc_noprof+0x411/0x7f0 [ 147.790141][ T7134] ? sock_kmalloc+0xd6/0x160 [ 147.790167][ T7134] ? skcipher_recvmsg+0x3d1/0x11d0 [ 147.790199][ T7134] ? sock_recvmsg+0x22c/0x270 [ 147.790228][ T7134] ? __sys_recvfrom+0x1f6/0x340 [ 147.790249][ T7134] ? do_syscall_64+0xfa/0xfa0 [ 147.790270][ T7134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.790301][ T7134] ? pin_user_pages_fast+0x4d/0xb0 [ 147.790333][ T7134] iov_iter_extract_pages+0x35f/0x5e0 [ 147.790377][ T7134] extract_iter_to_sg+0xe46/0x24e0 [ 147.790422][ T7134] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 147.790453][ T7134] ? rcu_is_watching+0x15/0xb0 [ 147.790483][ T7134] ? trace_kmalloc+0x1f/0xd0 [ 147.790515][ T7134] ? sock_kmalloc+0xd6/0x160 [ 147.790552][ T7134] ? __asan_memset+0x22/0x50 [ 147.790585][ T7134] af_alg_get_rsgl+0x436/0x810 [ 147.790638][ T7134] skcipher_recvmsg+0x3d1/0x11d0 [ 147.790696][ T7134] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 147.790728][ T7134] ? skcipher_check_key+0x173/0x1e0 [ 147.790760][ T7134] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 147.790794][ T7134] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 147.790828][ T7134] sock_recvmsg+0x22c/0x270 [ 147.790866][ T7134] __sys_recvfrom+0x1f6/0x340 [ 147.790894][ T7134] ? __pfx___sys_recvfrom+0x10/0x10 [ 147.790921][ T7134] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 147.790970][ T7134] ? __fget_files+0x3a0/0x420 [ 147.791008][ T7134] ? ksys_write+0x22a/0x250 [ 147.791044][ T7134] ? __pfx_ksys_write+0x10/0x10 [ 147.791082][ T7134] __x64_sys_recvfrom+0xde/0x100 [ 147.791111][ T7134] do_syscall_64+0xfa/0xfa0 [ 147.791131][ T7134] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.791154][ T7134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.791176][ T7134] ? clear_bhb_loop+0x60/0xb0 [ 147.791204][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.791225][ T7134] RIP: 0033:0x7f90c538f6c9 [ 147.791246][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.791264][ T7134] RSP: 002b:00007f90c615e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 147.791289][ T7134] RAX: ffffffffffffffda RBX: 00007f90c55e5fa0 RCX: 00007f90c538f6c9 [ 147.791306][ T7134] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 147.791322][ T7134] RBP: 00007f90c615e090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 147.791336][ T7134] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 147.791349][ T7134] R13: 00007f90c55e6038 R14: 00007f90c55e5fa0 R15: 00007ffe12b16b38 [ 147.791389][ T7134] [ 147.923557][ T7135] IPVS: using max 28 ests per chain, 67200 per kthread [ 148.262362][ T7126] netlink: 224 bytes leftover after parsing attributes in process `syz.0.304'. [ 148.427470][ T7149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.311'. [ 148.756837][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'. [ 148.783628][ T7164] sctp: [Deprecated]: syz.1.316 (pid 7164) Use of int in maxseg socket option. [ 148.783628][ T7164] Use struct sctp_assoc_value instead [ 148.932549][ T7176] IPv6: sit1: Disabled Multicast RS [ 149.170363][ T7185] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 149.246397][ T7185] bond1: entered promiscuous mode [ 149.272264][ T7185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.599841][ T7196] bond1: (slave veth5): making interface the new active one [ 149.639016][ T7196] veth5: entered promiscuous mode [ 149.666110][ T7196] bond1: (slave veth5): Enslaving as an active interface with an up link [ 149.828043][ T7200] syz_tun: entered promiscuous mode [ 149.842775][ T7200] macvtap1: entered promiscuous mode [ 149.849633][ T7200] macvtap1: entered allmulticast mode [ 149.859915][ T7200] syz_tun: entered allmulticast mode [ 149.889058][ T7200] syz_tun: left allmulticast mode [ 149.931580][ T7200] syz_tun: left promiscuous mode [ 150.108953][ T7207] x_tables: unsorted entry at hook 1 [ 150.717896][ T7237] netlink: 'syz.2.332': attribute type 16 has an invalid length. [ 150.754518][ T7237] netlink: 'syz.2.332': attribute type 17 has an invalid length. [ 151.110639][ T7245] tipc: Enabled bearer , priority 0 [ 151.127991][ T7245] syzkaller0: entered promiscuous mode [ 151.156397][ T7245] syzkaller0: entered allmulticast mode [ 151.271612][ T7246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.334'. [ 151.320803][ T7245] tipc: Resetting bearer [ 151.338786][ T7244] tipc: Resetting bearer [ 151.362784][ T7244] tipc: Disabling bearer [ 151.443450][ T7248] wg1 speed is unknown, defaulting to 1000 [ 151.466004][ T7255] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 151.598156][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'. [ 151.772541][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 152.018426][ T7275] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 152.112398][ T7277] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 152.185439][ T7277] .`: renamed from bond0 (while UP) [ 152.268280][ T7265] wg1 speed is unknown, defaulting to 1000 [ 152.288216][ T7270] wg1 speed is unknown, defaulting to 1000 [ 153.282315][ T7311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.568296][ T7318] wg1 speed is unknown, defaulting to 1000 [ 153.782266][ T7323] wg1 speed is unknown, defaulting to 1000 [ 155.312678][ T7370] FAULT_INJECTION: forcing a failure. [ 155.312678][ T7370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.326347][ T7370] CPU: 0 UID: 0 PID: 7370 Comm: syz.4.373 Not tainted syzkaller #0 PREEMPT(full) [ 155.326375][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.326388][ T7370] Call Trace: [ 155.326396][ T7370] [ 155.326406][ T7370] dump_stack_lvl+0x189/0x250 [ 155.326441][ T7370] ? __pfx____ratelimit+0x10/0x10 [ 155.326474][ T7370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.326502][ T7370] ? __pfx__printk+0x10/0x10 [ 155.326526][ T7370] ? fs_reclaim_acquire+0x7d/0x100 [ 155.326557][ T7370] should_fail_ex+0x414/0x560 [ 155.326595][ T7370] prepare_alloc_pages+0x213/0x610 [ 155.326625][ T7370] __alloc_frozen_pages_noprof+0x123/0x370 [ 155.326652][ T7370] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 155.326686][ T7370] ? policy_nodemask+0x27c/0x720 [ 155.326713][ T7370] alloc_pages_mpol+0x232/0x4a0 [ 155.326740][ T7370] vma_alloc_folio_noprof+0xe4/0x200 [ 155.326765][ T7370] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 155.326801][ T7370] folio_prealloc+0x30/0x180 [ 155.326834][ T7370] do_wp_page+0x1231/0x5800 [ 155.326887][ T7370] ? __pfx_do_wp_page+0x10/0x10 [ 155.326911][ T7370] ? do_raw_spin_lock+0x121/0x290 [ 155.326944][ T7370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.326986][ T7370] __handle_mm_fault+0x1033/0x5400 [ 155.327033][ T7370] ? __pfx___handle_mm_fault+0x10/0x10 [ 155.327079][ T7370] ? follow_page_pte+0xd03/0x13e0 [ 155.327118][ T7370] handle_mm_fault+0x40a/0x8e0 [ 155.327159][ T7370] __get_user_pages+0x165c/0x2a00 [ 155.327233][ T7370] __gup_longterm_locked+0xde4/0x1660 [ 155.327280][ T7370] ? sanity_check_pinned_pages+0x1241/0x1300 [ 155.327310][ T7370] ? gup_fast_fallback+0x1b86/0x22d0 [ 155.327341][ T7370] gup_fast_fallback+0x1d65/0x22d0 [ 155.327369][ T7370] ? __kernel_text_address+0xd/0x40 [ 155.327401][ T7370] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.327465][ T7370] ? __pfx_gup_fast_fallback+0x10/0x10 [ 155.327489][ T7370] ? kasan_save_track+0x4f/0x80 [ 155.327517][ T7370] ? __kasan_kmalloc+0x93/0xb0 [ 155.327533][ T7370] ? __kmalloc_noprof+0x411/0x7f0 [ 155.327560][ T7370] ? sock_kmalloc+0xd6/0x160 [ 155.327584][ T7370] ? skcipher_recvmsg+0x3d1/0x11d0 [ 155.327611][ T7370] ? sock_recvmsg+0x22c/0x270 [ 155.327638][ T7370] ? __sys_recvfrom+0x1f6/0x340 [ 155.327657][ T7370] ? do_syscall_64+0xfa/0xfa0 [ 155.327676][ T7370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.327702][ T7370] ? pin_user_pages_fast+0x4d/0xb0 [ 155.327733][ T7370] iov_iter_extract_pages+0x35f/0x5e0 [ 155.327771][ T7370] extract_iter_to_sg+0xe46/0x24e0 [ 155.327813][ T7370] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 155.327840][ T7370] ? rcu_is_watching+0x15/0xb0 [ 155.327865][ T7370] ? trace_kmalloc+0x1f/0xd0 [ 155.327893][ T7370] ? sock_kmalloc+0xd6/0x160 [ 155.327924][ T7370] ? __asan_memset+0x22/0x50 [ 155.327955][ T7370] af_alg_get_rsgl+0x436/0x810 [ 155.328003][ T7370] skcipher_recvmsg+0x3d1/0x11d0 [ 155.328075][ T7370] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 155.328105][ T7370] ? skcipher_check_key+0x173/0x1e0 [ 155.328134][ T7370] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 155.328165][ T7370] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 155.328195][ T7370] sock_recvmsg+0x22c/0x270 [ 155.328236][ T7370] __sys_recvfrom+0x1f6/0x340 [ 155.328262][ T7370] ? __pfx___sys_recvfrom+0x10/0x10 [ 155.328281][ T7370] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 155.328319][ T7370] ? __fget_files+0x3a0/0x420 [ 155.328353][ T7370] ? ksys_write+0x22a/0x250 [ 155.328385][ T7370] ? __pfx_ksys_write+0x10/0x10 [ 155.328419][ T7370] __x64_sys_recvfrom+0xde/0x100 [ 155.328445][ T7370] do_syscall_64+0xfa/0xfa0 [ 155.328465][ T7370] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.328485][ T7370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.328505][ T7370] ? clear_bhb_loop+0x60/0xb0 [ 155.328531][ T7370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.328551][ T7370] RIP: 0033:0x7fd03298f6c9 [ 155.328569][ T7370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.328586][ T7370] RSP: 002b:00007fd033831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 155.328608][ T7370] RAX: ffffffffffffffda RBX: 00007fd032be5fa0 RCX: 00007fd03298f6c9 [ 155.328623][ T7370] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 155.328637][ T7370] RBP: 00007fd033831090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 155.328650][ T7370] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 155.328662][ T7370] R13: 00007fd032be6038 R14: 00007fd032be5fa0 R15: 00007ffd726112c8 [ 155.328699][ T7370] [ 156.084811][ T7388] __nla_validate_parse: 2 callbacks suppressed [ 156.084830][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 156.326781][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.381'. [ 156.514405][ T7389] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 156.546735][ T7389] team0: Port device syz_tun added [ 156.656296][ T7410] wg1 speed is unknown, defaulting to 1000 [ 156.783312][ T7418] netlink: zone id is out of range [ 156.788794][ T7418] netlink: zone id is out of range [ 156.800224][ T7418] netlink: zone id is out of range [ 156.803377][ T7419] FAULT_INJECTION: forcing a failure. [ 156.803377][ T7419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.806338][ T7418] netlink: zone id is out of range [ 156.821419][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: syz.4.387 Not tainted syzkaller #0 PREEMPT(full) [ 156.821448][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.821461][ T7419] Call Trace: [ 156.821469][ T7419] [ 156.821478][ T7419] dump_stack_lvl+0x189/0x250 [ 156.821513][ T7419] ? __pfx____ratelimit+0x10/0x10 [ 156.821545][ T7419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.821573][ T7419] ? __pfx__printk+0x10/0x10 [ 156.821597][ T7419] ? fs_reclaim_acquire+0x7d/0x100 [ 156.821628][ T7419] should_fail_ex+0x414/0x560 [ 156.821666][ T7419] prepare_alloc_pages+0x213/0x610 [ 156.821695][ T7419] __alloc_frozen_pages_noprof+0x123/0x370 [ 156.821722][ T7419] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 156.821755][ T7419] ? policy_nodemask+0x27c/0x720 [ 156.821781][ T7419] alloc_pages_mpol+0x232/0x4a0 [ 156.821809][ T7419] vma_alloc_folio_noprof+0xe4/0x200 [ 156.821833][ T7419] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 156.821868][ T7419] folio_prealloc+0x30/0x180 [ 156.821899][ T7419] do_wp_page+0x1231/0x5800 [ 156.821952][ T7419] ? __pfx_do_wp_page+0x10/0x10 [ 156.821982][ T7419] ? do_raw_spin_lock+0x121/0x290 [ 156.822020][ T7419] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 156.822064][ T7419] __handle_mm_fault+0x1033/0x5400 [ 156.822118][ T7419] ? __pfx___handle_mm_fault+0x10/0x10 [ 156.822167][ T7419] ? follow_page_pte+0xd03/0x13e0 [ 156.822211][ T7419] handle_mm_fault+0x40a/0x8e0 [ 156.822257][ T7419] __get_user_pages+0x165c/0x2a00 [ 156.822339][ T7419] __gup_longterm_locked+0xde4/0x1660 [ 156.822387][ T7419] ? sanity_check_pinned_pages+0x1241/0x1300 [ 156.822420][ T7419] ? gup_fast_fallback+0x1b86/0x22d0 [ 156.822455][ T7419] gup_fast_fallback+0x1d65/0x22d0 [ 156.822485][ T7419] ? __kernel_text_address+0xd/0x40 [ 156.822522][ T7419] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 156.822594][ T7419] ? __pfx_gup_fast_fallback+0x10/0x10 [ 156.822621][ T7419] ? kasan_save_track+0x4f/0x80 [ 156.822654][ T7419] ? __kasan_kmalloc+0x93/0xb0 [ 156.822672][ T7419] ? __kmalloc_noprof+0x411/0x7f0 [ 156.822701][ T7419] ? sock_kmalloc+0xd6/0x160 [ 156.822729][ T7419] ? skcipher_recvmsg+0x3d1/0x11d0 [ 156.822759][ T7419] ? sock_recvmsg+0x22c/0x270 [ 156.822788][ T7419] ? __sys_recvfrom+0x1f6/0x340 [ 156.822811][ T7419] ? do_syscall_64+0xfa/0xfa0 [ 156.822831][ T7419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.822861][ T7419] ? pin_user_pages_fast+0x4d/0xb0 [ 156.822894][ T7419] iov_iter_extract_pages+0x35f/0x5e0 [ 156.822937][ T7419] extract_iter_to_sg+0xe46/0x24e0 [ 156.822983][ T7419] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 156.823012][ T7419] ? rcu_is_watching+0x15/0xb0 [ 156.823040][ T7419] ? trace_kmalloc+0x1f/0xd0 [ 156.823070][ T7419] ? sock_kmalloc+0xd6/0x160 [ 156.823104][ T7419] ? __asan_memset+0x22/0x50 [ 156.823137][ T7419] af_alg_get_rsgl+0x436/0x810 [ 156.823191][ T7419] skcipher_recvmsg+0x3d1/0x11d0 [ 156.823248][ T7419] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 156.823281][ T7419] ? skcipher_check_key+0x173/0x1e0 [ 156.823321][ T7419] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 156.823356][ T7419] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 156.823391][ T7419] sock_recvmsg+0x22c/0x270 [ 156.823433][ T7419] __sys_recvfrom+0x1f6/0x340 [ 156.823461][ T7419] ? __pfx___sys_recvfrom+0x10/0x10 [ 156.823484][ T7419] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 156.823526][ T7419] ? __fget_files+0x3a0/0x420 [ 156.823563][ T7419] ? ksys_write+0x22a/0x250 [ 156.823600][ T7419] ? __pfx_ksys_write+0x10/0x10 [ 156.823638][ T7419] __x64_sys_recvfrom+0xde/0x100 [ 156.823667][ T7419] do_syscall_64+0xfa/0xfa0 [ 156.823688][ T7419] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.823710][ T7419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.823732][ T7419] ? clear_bhb_loop+0x60/0xb0 [ 156.823760][ T7419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.823783][ T7419] RIP: 0033:0x7fd03298f6c9 [ 156.823804][ T7419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.823822][ T7419] RSP: 002b:00007fd033831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 156.823848][ T7419] RAX: ffffffffffffffda RBX: 00007fd032be5fa0 RCX: 00007fd03298f6c9 [ 156.823863][ T7419] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 156.823879][ T7419] RBP: 00007fd033831090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 156.823899][ T7419] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 156.823913][ T7419] R13: 00007fd032be6038 R14: 00007fd032be5fa0 R15: 00007ffd726112c8 [ 156.823952][ T7419] [ 157.176410][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.390'. [ 157.242387][ T7418] netlink: get zone limit has 4 unknown bytes [ 157.463840][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.392'. [ 157.555191][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.642917][ T7453] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.395'. [ 157.672514][ T7439] bond0 (unregistering): Released all slaves [ 157.702513][ T7445] tipc: Enabled bearer , priority 0 [ 157.727554][ T7434] syzkaller0: entered promiscuous mode [ 157.739859][ T7434] syzkaller0: entered allmulticast mode [ 157.762988][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 157.784759][ T7455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.391'. [ 157.797398][ T7440] vcan0: entered promiscuous mode [ 157.810781][ T7440] vcan0: entered allmulticast mode [ 157.831987][ T7445] tipc: Resetting bearer [ 157.845957][ T7432] tipc: Resetting bearer [ 157.883467][ T7432] tipc: Disabling bearer [ 157.937108][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 158.024931][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 158.065968][ T7467] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 158.102607][ T7467] netlink: 'syz.0.397': attribute type 7 has an invalid length. [ 158.131938][ T7467] netlink: 'syz.0.397': attribute type 8 has an invalid length. [ 158.170211][ T7467] netlink: 208 bytes leftover after parsing attributes in process `syz.0.397'. [ 158.441607][ T7479] netlink: 'syz.2.404': attribute type 10 has an invalid length. [ 158.738731][ T7504] netlink: 'syz.4.407': attribute type 11 has an invalid length. [ 158.751290][ T7504] netlink: 'syz.4.407': attribute type 11 has an invalid length. [ 158.901879][ T7513] xt_HMARK: spi-set and port-set can't be combined [ 158.973830][ T7511] wg1 speed is unknown, defaulting to 1000 [ 159.917380][ T7560] batadv0: entered promiscuous mode [ 159.938469][ T7560] macvtap1: entered promiscuous mode [ 159.967370][ T7560] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 159.987316][ T7560] batadv0: left promiscuous mode [ 160.339467][ T7572] tipc: Enabled bearer , priority 0 [ 160.358301][ T7581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.417728][ T7576] syzkaller0: entered promiscuous mode [ 160.434432][ T7576] syzkaller0: entered allmulticast mode [ 160.466719][ T7562] tipc: Resetting bearer [ 160.542439][ T7562] tipc: Disabling bearer [ 160.768581][ T7595] nbd: couldn't find device at index 536870912 [ 160.874396][ T7599] FAULT_INJECTION: forcing a failure. [ 160.874396][ T7599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 160.960841][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.1.429 Not tainted syzkaller #0 PREEMPT(full) [ 160.960871][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.960884][ T7599] Call Trace: [ 160.960897][ T7599] [ 160.960906][ T7599] dump_stack_lvl+0x189/0x250 [ 160.960939][ T7599] ? __pfx____ratelimit+0x10/0x10 [ 160.960972][ T7599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.960999][ T7599] ? __pfx__printk+0x10/0x10 [ 160.961023][ T7599] ? fs_reclaim_acquire+0x7d/0x100 [ 160.961053][ T7599] should_fail_ex+0x414/0x560 [ 160.961091][ T7599] prepare_alloc_pages+0x213/0x610 [ 160.961119][ T7599] __alloc_frozen_pages_noprof+0x123/0x370 [ 160.961144][ T7599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 160.961177][ T7599] ? policy_nodemask+0x27c/0x720 [ 160.961203][ T7599] alloc_pages_mpol+0x232/0x4a0 [ 160.961230][ T7599] vma_alloc_folio_noprof+0xe4/0x200 [ 160.961255][ T7599] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 160.961290][ T7599] folio_prealloc+0x30/0x180 [ 160.961323][ T7599] do_wp_page+0x1231/0x5800 [ 160.961365][ T7599] ? __pfx_do_wp_page+0x10/0x10 [ 160.961384][ T7599] ? do_raw_spin_lock+0x121/0x290 [ 160.961411][ T7599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 160.961443][ T7599] __handle_mm_fault+0x1033/0x5400 [ 160.961481][ T7599] ? __pfx___handle_mm_fault+0x10/0x10 [ 160.961523][ T7599] ? follow_page_pte+0xd03/0x13e0 [ 160.961562][ T7599] handle_mm_fault+0x40a/0x8e0 [ 160.961595][ T7599] __get_user_pages+0x165c/0x2a00 [ 160.961652][ T7599] __gup_longterm_locked+0xde4/0x1660 [ 160.961686][ T7599] ? sanity_check_pinned_pages+0x1241/0x1300 [ 160.961709][ T7599] ? gup_fast_fallback+0x1b86/0x22d0 [ 160.961734][ T7599] gup_fast_fallback+0x1d65/0x22d0 [ 160.961756][ T7599] ? __kernel_text_address+0xd/0x40 [ 160.961782][ T7599] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 160.961832][ T7599] ? __pfx_gup_fast_fallback+0x10/0x10 [ 160.961852][ T7599] ? kasan_save_track+0x4f/0x80 [ 160.961876][ T7599] ? __kasan_kmalloc+0x93/0xb0 [ 160.961889][ T7599] ? __kmalloc_noprof+0x411/0x7f0 [ 160.961911][ T7599] ? sock_kmalloc+0xd6/0x160 [ 160.961930][ T7599] ? skcipher_recvmsg+0x3d1/0x11d0 [ 160.961952][ T7599] ? sock_recvmsg+0x22c/0x270 [ 160.961974][ T7599] ? __sys_recvfrom+0x1f6/0x340 [ 160.961990][ T7599] ? do_syscall_64+0xfa/0xfa0 [ 160.962004][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.962026][ T7599] ? pin_user_pages_fast+0x4d/0xb0 [ 160.962050][ T7599] iov_iter_extract_pages+0x35f/0x5e0 [ 160.962080][ T7599] extract_iter_to_sg+0xe46/0x24e0 [ 160.962112][ T7599] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 160.962129][ T7599] ? sock_kmalloc+0xd6/0x160 [ 160.962151][ T7599] ? rcu_is_watching+0x15/0xb0 [ 160.962171][ T7599] ? trace_kmalloc+0x1f/0xd0 [ 160.962200][ T7599] ? sock_kmalloc+0xd6/0x160 [ 160.962224][ T7599] ? __asan_memset+0x22/0x50 [ 160.962249][ T7599] af_alg_get_rsgl+0x436/0x810 [ 160.962287][ T7599] skcipher_recvmsg+0x3d1/0x11d0 [ 160.962327][ T7599] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 160.962350][ T7599] ? skcipher_check_key+0x173/0x1e0 [ 160.962373][ T7599] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 160.962399][ T7599] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 160.962423][ T7599] sock_recvmsg+0x22c/0x270 [ 160.962451][ T7599] __sys_recvfrom+0x1f6/0x340 [ 160.962471][ T7599] ? __pfx___sys_recvfrom+0x10/0x10 [ 160.962486][ T7599] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 160.962516][ T7599] ? __fget_files+0x3a0/0x420 [ 160.962542][ T7599] ? ksys_write+0x22a/0x250 [ 160.962568][ T7599] ? __pfx_ksys_write+0x10/0x10 [ 160.962601][ T7599] __x64_sys_recvfrom+0xde/0x100 [ 160.962632][ T7599] do_syscall_64+0xfa/0xfa0 [ 160.962647][ T7599] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.962663][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.962679][ T7599] ? clear_bhb_loop+0x60/0xb0 [ 160.962700][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.962715][ T7599] RIP: 0033:0x7f90c538f6c9 [ 160.962731][ T7599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.962744][ T7599] RSP: 002b:00007f90c615e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 160.962762][ T7599] RAX: ffffffffffffffda RBX: 00007f90c55e5fa0 RCX: 00007f90c538f6c9 [ 160.962774][ T7599] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 160.962786][ T7599] RBP: 00007f90c615e090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 160.962797][ T7599] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 160.962807][ T7599] R13: 00007f90c55e6038 R14: 00007f90c55e5fa0 R15: 00007ffe12b16b38 [ 160.962835][ T7599] [ 162.259844][ T7630] __nla_validate_parse: 9 callbacks suppressed [ 162.259864][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 162.435517][ T7642] tipc: Enabled bearer , priority 0 [ 162.462142][ T7642] syzkaller0: entered promiscuous mode [ 162.478025][ T7642] syzkaller0: entered allmulticast mode [ 162.545511][ T7642] tipc: Resetting bearer [ 162.575467][ T7629] tipc: Resetting bearer [ 162.612127][ T7652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 162.632763][ T7629] tipc: Disabling bearer [ 163.021268][ T7660] netlink: 'syz.1.441': attribute type 11 has an invalid length. [ 163.163572][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.445'. [ 163.230840][ T6045] udevd[6045]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 163.382107][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'. [ 163.565307][ T7682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.605818][ T7688] bond0: option ad_select: unable to set because the bond device is up [ 163.625600][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.448'. [ 163.890232][ T7701] gre1: entered allmulticast mode [ 163.901196][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 164.035771][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 164.044737][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.056865][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.071451][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.083552][ T7714] FAULT_INJECTION: forcing a failure. [ 164.083552][ T7714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.093780][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.098847][ T7714] CPU: 0 UID: 0 PID: 7714 Comm: syz.2.456 Not tainted syzkaller #0 PREEMPT(full) [ 164.098882][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.098896][ T7714] Call Trace: [ 164.098906][ T7714] [ 164.098915][ T7714] dump_stack_lvl+0x189/0x250 [ 164.098956][ T7714] ? __pfx____ratelimit+0x10/0x10 [ 164.098993][ T7714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.099032][ T7714] ? __pfx__printk+0x10/0x10 [ 164.099059][ T7714] ? fs_reclaim_acquire+0x7d/0x100 [ 164.099094][ T7714] should_fail_ex+0x414/0x560 [ 164.099138][ T7714] prepare_alloc_pages+0x213/0x610 [ 164.099170][ T7714] __alloc_frozen_pages_noprof+0x123/0x370 [ 164.099202][ T7714] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 164.099239][ T7714] ? policy_nodemask+0x27c/0x720 [ 164.099269][ T7714] alloc_pages_mpol+0x232/0x4a0 [ 164.099299][ T7714] vma_alloc_folio_noprof+0xe4/0x200 [ 164.099327][ T7714] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 164.099366][ T7714] folio_prealloc+0x30/0x180 [ 164.099402][ T7714] do_wp_page+0x1231/0x5800 [ 164.099463][ T7714] ? __pfx_do_wp_page+0x10/0x10 [ 164.099491][ T7714] ? do_raw_spin_lock+0x121/0x290 [ 164.099527][ T7714] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 164.099574][ T7714] __handle_mm_fault+0x1033/0x5400 [ 164.099627][ T7714] ? __pfx___handle_mm_fault+0x10/0x10 [ 164.099686][ T7714] ? follow_page_pte+0xd03/0x13e0 [ 164.099732][ T7714] handle_mm_fault+0x40a/0x8e0 [ 164.099780][ T7714] __get_user_pages+0x165c/0x2a00 [ 164.099864][ T7714] __gup_longterm_locked+0xde4/0x1660 [ 164.099912][ T7714] ? sanity_check_pinned_pages+0x1241/0x1300 [ 164.099945][ T7714] ? gup_fast_fallback+0x1b86/0x22d0 [ 164.099981][ T7714] gup_fast_fallback+0x1d65/0x22d0 [ 164.100011][ T7714] ? __kernel_text_address+0xd/0x40 [ 164.100047][ T7714] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 164.100119][ T7714] ? __pfx_gup_fast_fallback+0x10/0x10 [ 164.100153][ T7714] ? kasan_save_track+0x4f/0x80 [ 164.100187][ T7714] ? __kasan_kmalloc+0x93/0xb0 [ 164.100205][ T7714] ? __kmalloc_noprof+0x411/0x7f0 [ 164.100236][ T7714] ? sock_kmalloc+0xd6/0x160 [ 164.100264][ T7714] ? skcipher_recvmsg+0x3d1/0x11d0 [ 164.100293][ T7714] ? sock_recvmsg+0x22c/0x270 [ 164.100325][ T7714] ? __sys_recvfrom+0x1f6/0x340 [ 164.100346][ T7714] ? do_syscall_64+0xfa/0xfa0 [ 164.100367][ T7714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.100397][ T7714] ? pin_user_pages_fast+0x4d/0xb0 [ 164.100431][ T7714] iov_iter_extract_pages+0x35f/0x5e0 [ 164.100473][ T7714] extract_iter_to_sg+0xe46/0x24e0 [ 164.100518][ T7714] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 164.100555][ T7714] ? rcu_is_watching+0x15/0xb0 [ 164.100583][ T7714] ? trace_kmalloc+0x1f/0xd0 [ 164.100615][ T7714] ? sock_kmalloc+0xd6/0x160 [ 164.100655][ T7714] ? __asan_memset+0x22/0x50 [ 164.100690][ T7714] af_alg_get_rsgl+0x436/0x810 [ 164.100744][ T7714] skcipher_recvmsg+0x3d1/0x11d0 [ 164.100802][ T7714] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 164.100835][ T7714] ? skcipher_check_key+0x173/0x1e0 [ 164.100866][ T7714] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 164.100902][ T7714] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 164.100935][ T7714] sock_recvmsg+0x22c/0x270 [ 164.100975][ T7714] __sys_recvfrom+0x1f6/0x340 [ 164.101004][ T7714] ? __pfx___sys_recvfrom+0x10/0x10 [ 164.101025][ T7714] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 164.101067][ T7714] ? __fget_files+0x3a0/0x420 [ 164.101106][ T7714] ? ksys_write+0x22a/0x250 [ 164.101145][ T7714] ? __pfx_ksys_write+0x10/0x10 [ 164.101184][ T7714] __x64_sys_recvfrom+0xde/0x100 [ 164.101214][ T7714] do_syscall_64+0xfa/0xfa0 [ 164.101234][ T7714] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.101258][ T7714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.101280][ T7714] ? clear_bhb_loop+0x60/0xb0 [ 164.101310][ T7714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.101332][ T7714] RIP: 0033:0x7fd13738f6c9 [ 164.101352][ T7714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.101374][ T7714] RSP: 002b:00007fd1382e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 164.101399][ T7714] RAX: ffffffffffffffda RBX: 00007fd1375e5fa0 RCX: 00007fd13738f6c9 [ 164.101415][ T7714] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 164.101432][ T7714] RBP: 00007fd1382e7090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 164.101448][ T7714] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 164.101461][ T7714] R13: 00007fd1375e6038 R14: 00007fd1375e5fa0 R15: 00007fff7d85d098 [ 164.101503][ T7714] [ 164.571708][ T7708] batman_adv: batadv0: Removing interface: bond1 [ 164.819120][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.826936][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.973325][ T7696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.015012][ T30] audit: type=1107 audit(1763391988.117:2): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 165.199346][ T6029] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.242263][ T6029] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.339167][ T6029] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.354347][ T6029] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.746002][ T7763] wg1 speed is unknown, defaulting to 1000 [ 166.148124][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 166.180399][ T7784] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 166.408220][ T7793] gretap1: entered promiscuous mode [ 166.424497][ T7793] gretap1: entered allmulticast mode [ 166.609179][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.625538][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.775929][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.801110][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.848431][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.873423][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.922389][ T7808] FAULT_INJECTION: forcing a failure. [ 166.922389][ T7808] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.948960][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.2.480 Not tainted syzkaller #0 PREEMPT(full) [ 166.948990][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.949003][ T7808] Call Trace: [ 166.949011][ T7808] [ 166.949020][ T7808] dump_stack_lvl+0x189/0x250 [ 166.949055][ T7808] ? __pfx____ratelimit+0x10/0x10 [ 166.949085][ T7808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.949114][ T7808] ? __pfx__printk+0x10/0x10 [ 166.949138][ T7808] ? fs_reclaim_acquire+0x7d/0x100 [ 166.949168][ T7808] should_fail_ex+0x414/0x560 [ 166.949206][ T7808] prepare_alloc_pages+0x213/0x610 [ 166.949234][ T7808] __alloc_frozen_pages_noprof+0x123/0x370 [ 166.949260][ T7808] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 166.949293][ T7808] ? policy_nodemask+0x27c/0x720 [ 166.949319][ T7808] alloc_pages_mpol+0x232/0x4a0 [ 166.949347][ T7808] vma_alloc_folio_noprof+0xe4/0x200 [ 166.949381][ T7808] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 166.949417][ T7808] folio_prealloc+0x30/0x180 [ 166.949451][ T7808] do_wp_page+0x1231/0x5800 [ 166.949505][ T7808] ? __pfx_do_wp_page+0x10/0x10 [ 166.949530][ T7808] ? do_raw_spin_lock+0x121/0x290 [ 166.949562][ T7808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 166.949604][ T7808] __handle_mm_fault+0x1033/0x5400 [ 166.949652][ T7808] ? __pfx___handle_mm_fault+0x10/0x10 [ 166.949697][ T7808] ? follow_page_pte+0xd03/0x13e0 [ 166.949736][ T7808] handle_mm_fault+0x40a/0x8e0 [ 166.949778][ T7808] __get_user_pages+0x165c/0x2a00 [ 166.949845][ T7808] __gup_longterm_locked+0xde4/0x1660 [ 166.949889][ T7808] ? sanity_check_pinned_pages+0x1241/0x1300 [ 166.949919][ T7808] ? gup_fast_fallback+0x1b86/0x22d0 [ 166.949949][ T7808] gup_fast_fallback+0x1d65/0x22d0 [ 166.949977][ T7808] ? __kernel_text_address+0xd/0x40 [ 166.950010][ T7808] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 166.950074][ T7808] ? __pfx_gup_fast_fallback+0x10/0x10 [ 166.950099][ T7808] ? kasan_save_track+0x4f/0x80 [ 166.950128][ T7808] ? __kasan_kmalloc+0x93/0xb0 [ 166.950144][ T7808] ? __kmalloc_noprof+0x411/0x7f0 [ 166.950171][ T7808] ? sock_kmalloc+0xd6/0x160 [ 166.950194][ T7808] ? skcipher_recvmsg+0x3d1/0x11d0 [ 166.950222][ T7808] ? sock_recvmsg+0x22c/0x270 [ 166.950249][ T7808] ? __sys_recvfrom+0x1f6/0x340 [ 166.950268][ T7808] ? do_syscall_64+0xfa/0xfa0 [ 166.950287][ T7808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.950315][ T7808] ? pin_user_pages_fast+0x4d/0xb0 [ 166.950344][ T7808] iov_iter_extract_pages+0x35f/0x5e0 [ 166.950389][ T7808] extract_iter_to_sg+0xe46/0x24e0 [ 166.950431][ T7808] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 166.950458][ T7808] ? rcu_is_watching+0x15/0xb0 [ 166.950483][ T7808] ? trace_kmalloc+0x1f/0xd0 [ 166.950510][ T7808] ? sock_kmalloc+0xd6/0x160 [ 166.950542][ T7808] ? __asan_memset+0x22/0x50 [ 166.950572][ T7808] af_alg_get_rsgl+0x436/0x810 [ 166.950621][ T7808] skcipher_recvmsg+0x3d1/0x11d0 [ 166.950673][ T7808] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 166.950703][ T7808] ? skcipher_check_key+0x173/0x1e0 [ 166.950731][ T7808] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 166.950762][ T7808] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 166.950792][ T7808] sock_recvmsg+0x22c/0x270 [ 166.950827][ T7808] __sys_recvfrom+0x1f6/0x340 [ 166.950852][ T7808] ? __pfx___sys_recvfrom+0x10/0x10 [ 166.950871][ T7808] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 166.950913][ T7808] ? __fget_files+0x3a0/0x420 [ 166.950945][ T7808] ? ksys_write+0x22a/0x250 [ 166.950976][ T7808] ? __pfx_ksys_write+0x10/0x10 [ 166.951009][ T7808] __x64_sys_recvfrom+0xde/0x100 [ 166.951034][ T7808] do_syscall_64+0xfa/0xfa0 [ 166.951052][ T7808] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.951071][ T7808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.951091][ T7808] ? clear_bhb_loop+0x60/0xb0 [ 166.951117][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.951138][ T7808] RIP: 0033:0x7fd13738f6c9 [ 166.951156][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.951175][ T7808] RSP: 002b:00007fd1382e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 166.951197][ T7808] RAX: ffffffffffffffda RBX: 00007fd1375e5fa0 RCX: 00007fd13738f6c9 [ 166.951213][ T7808] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000007 [ 166.951226][ T7808] RBP: 00007fd1382e7090 R08: 0000000000000000 R09: ffffffffffffffb5 [ 166.951241][ T7808] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 166.951253][ T7808] R13: 00007fd1375e6038 R14: 00007fd1375e5fa0 R15: 00007fff7d85d098 [ 166.951289][ T7808] [ 167.506541][ T7819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.483'. [ 167.510807][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.482'. [ 167.515845][ T7814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.483'. [ 167.524695][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.482'. [ 167.524720][ T7807] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 167.604867][ T7813] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 167.630837][ T7822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.482'. [ 167.761192][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 167.886807][ T7835] Unsupported ieee802154 address type: 0 [ 167.973215][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.488'. [ 168.030072][ T7842] tipc: Enabled bearer , priority 0 [ 168.042823][ T7827] wg1 speed is unknown, defaulting to 1000 [ 168.119127][ T7837] syzkaller0: entered promiscuous mode [ 168.125974][ T7837] syzkaller0: entered allmulticast mode [ 168.170774][ T7837] tipc: Resetting bearer [ 168.190767][ T7836] tipc: Resetting bearer [ 168.212798][ T7836] tipc: Disabling bearer [ 168.286708][ T7862] x_tables: unsorted entry at hook 3 [ 168.617622][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'. [ 168.649278][ T7878] netlink: 48 bytes leftover after parsing attributes in process `syz.1.499'. [ 168.666796][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 168.755675][ T7880] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 168.792205][ T7876] wg1 speed is unknown, defaulting to 1000 [ 169.181169][ T7889] wg1 speed is unknown, defaulting to 1000 [ 169.273569][ T7900] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.341383][ T7906] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 170.341147][ T5150] Bluetooth: hci2: command 0x0405 tx timeout [ 170.466505][ T7916] tipc: Enabled bearer , priority 0 [ 170.566011][ T7921] syzkaller0: entered promiscuous mode [ 170.581176][ T7921] syzkaller0: entered allmulticast mode [ 170.610738][ T7915] tipc: Resetting bearer [ 170.622845][ T7913] tipc: Resetting bearer [ 170.637943][ T7913] tipc: Disabling bearer [ 170.870360][ T7952] tipc: Enabled bearer , priority 0 [ 170.893441][ T7952] syzkaller0: entered promiscuous mode [ 170.909347][ T7952] syzkaller0: entered allmulticast mode [ 170.966484][ T7952] tipc: Resetting bearer [ 171.201170][ T7931] tipc: Resetting bearer [ 171.265400][ T7931] tipc: Disabling bearer [ 171.527843][ T7990] tipc: Enabled bearer , priority 0 [ 171.560044][ T7990] syzkaller0: entered promiscuous mode [ 171.583632][ T7990] syzkaller0: entered allmulticast mode [ 171.622367][ T7988] tipc: Resetting bearer [ 171.656636][ T7988] tipc: Disabling bearer [ 171.667668][ T7996] netlink: 'syz.2.525': attribute type 18 has an invalid length. [ 171.848614][ T8008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.856370][ T8008] IPv6: NLM_F_CREATE should be set when creating new route [ 171.863730][ T8008] IPv6: NLM_F_CREATE should be set when creating new route [ 173.225751][ T8067] tipc: Enabled bearer , priority 0 [ 173.282968][ T8075] syzkaller0: entered promiscuous mode [ 173.288500][ T8075] syzkaller0: entered allmulticast mode [ 173.307427][ T8070] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 173.345332][ T8070] __nla_validate_parse: 13 callbacks suppressed [ 173.345354][ T8070] netlink: 248 bytes leftover after parsing attributes in process `syz.3.540'. [ 173.377590][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'. [ 173.404024][ T8075] netlink: 44 bytes leftover after parsing attributes in process `syz.2.539'. [ 173.431725][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.542'. [ 173.471301][ T8066] tipc: Resetting bearer [ 173.550735][ T8066] tipc: Disabling bearer [ 173.602625][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 173.823925][ T8078] wg1 speed is unknown, defaulting to 1000 [ 173.864759][ T8097] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 173.966210][ T8100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'. [ 174.031614][ T8097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.048235][ T8099] vlan0: entered allmulticast mode [ 174.054076][ T8099] bond1: entered allmulticast mode [ 174.196119][ T8097] bond1: (slave gretap2): making interface the new active one [ 174.258868][ T8097] gretap2: entered allmulticast mode [ 174.290208][ T8097] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 174.519898][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'. [ 174.997717][ T8141] wg1 speed is unknown, defaulting to 1000 [ 175.107661][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.557'. [ 175.172433][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.195403][ T8155] macvlan2: entered promiscuous mode [ 175.239083][ T8155] macvlan2: entered allmulticast mode [ 175.249512][ T8155] bond0: entered promiscuous mode [ 175.256615][ T8155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.266914][ T8155] team0: Port device macvlan2 added [ 175.384300][ T8153] ip6gretap1: entered promiscuous mode [ 175.393506][ T8153] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 175.902253][ T8165] wg1 speed is unknown, defaulting to 1000 [ 176.523668][ T8181] tipc: Enabled bearer , priority 10 [ 192.411821][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.422022][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.430138][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.438467][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.446335][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.602264][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.611615][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.620177][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.628770][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.636673][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.714871][ T8197] wg1 speed is unknown, defaulting to 1000 [ 192.742944][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.751987][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.761841][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.770085][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.778416][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.871951][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 192.884983][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 192.900571][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 192.916441][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 192.928352][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 193.059048][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.080112][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.095773][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.110751][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.118777][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.166489][ T8201] wg1 speed is unknown, defaulting to 1000 [ 193.194577][ T5831] team0: Port device syz_tun removed [ 193.208510][ T8199] wg1 speed is unknown, defaulting to 1000 [ 193.328005][ T8203] wg1 speed is unknown, defaulting to 1000 [ 193.370364][ T8205] wg1 speed is unknown, defaulting to 1000 [ 193.877929][ T8197] chnl_net:caif_netlink_parms(): no params data found [ 193.928798][ T8199] chnl_net:caif_netlink_parms(): no params data found [ 194.039318][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 194.366718][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.375088][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.384120][ T8197] bridge_slave_0: entered allmulticast mode [ 194.395744][ T8197] bridge_slave_0: entered promiscuous mode [ 194.421427][ T8199] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.428696][ T8199] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.436406][ T8199] bridge_slave_0: entered allmulticast mode [ 194.444561][ T8199] bridge_slave_0: entered promiscuous mode [ 194.473352][ T8205] chnl_net:caif_netlink_parms(): no params data found [ 194.486652][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.496131][ T5841] Bluetooth: hci5: command tx timeout [ 194.505369][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.512749][ T8197] bridge_slave_1: entered allmulticast mode [ 194.520735][ T8197] bridge_slave_1: entered promiscuous mode [ 194.535844][ T8199] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.546499][ T8199] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.553959][ T8199] bridge_slave_1: entered allmulticast mode [ 194.562006][ T8199] bridge_slave_1: entered promiscuous mode [ 194.596350][ T194] bridge_slave_1: left allmulticast mode [ 194.602831][ T194] bridge_slave_1: left promiscuous mode [ 194.623183][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.644190][ T194] bridge_slave_0: left allmulticast mode [ 194.649897][ T194] bridge_slave_0: left promiscuous mode [ 194.660217][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.816821][ T194] bond1 (unregistering): (slave gretap2): Releasing active interface [ 194.825054][ T194] gretap2 (unregistering): left allmulticast mode [ 194.891058][ T5841] Bluetooth: hci6: command tx timeout [ 194.971331][ T5841] Bluetooth: hci8: command tx timeout [ 194.971522][ T5150] Bluetooth: hci7: command tx timeout [ 195.024747][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.035098][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.045288][ T194] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 195.055889][ T194] bond0 (unregistering): Released all slaves [ 195.148891][ T194] bond1 (unregistering): Released all slaves [ 195.211203][ T5150] Bluetooth: hci2: command tx timeout [ 195.280811][ T8199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.290678][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 195.303817][ T194] tipc: Left network mode [ 195.326436][ T8197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.350081][ T8199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.390033][ T8197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.485661][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.493251][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.500473][ T8201] bridge_slave_0: entered allmulticast mode [ 195.508865][ T8201] bridge_slave_0: entered promiscuous mode [ 195.532798][ T8199] team0: Port device team_slave_0 added [ 195.585874][ T8197] team0: Port device team_slave_0 added [ 195.593133][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.600278][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.608220][ T8201] bridge_slave_1: entered allmulticast mode [ 195.615946][ T8201] bridge_slave_1: entered promiscuous mode [ 195.656760][ T8199] team0: Port device team_slave_1 added [ 195.668177][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.675481][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.682821][ T8205] bridge_slave_0: entered allmulticast mode [ 195.690367][ T8205] bridge_slave_0: entered promiscuous mode [ 195.700471][ T8197] team0: Port device team_slave_1 added [ 195.737955][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.754872][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.783805][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.791141][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.798369][ T8205] bridge_slave_1: entered allmulticast mode [ 195.806143][ T8205] bridge_slave_1: entered promiscuous mode [ 195.827705][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.834781][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.861420][ T8197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.941573][ T194] hsr_slave_0: left promiscuous mode [ 195.947887][ T194] hsr_slave_1: left promiscuous mode [ 195.953944][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.961990][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.528067][ T8197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.536589][ T8197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.563095][ T8197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.581004][ T5150] Bluetooth: hci5: command tx timeout [ 196.615368][ T8201] team0: Port device team_slave_0 added [ 196.631104][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.638103][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.668535][ T8199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.706338][ T8205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.740253][ T8201] team0: Port device team_slave_1 added [ 196.766587][ T8199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.774525][ T8199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.802608][ T8199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.834613][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.851159][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.859891][ T8203] bridge_slave_0: entered allmulticast mode [ 196.868269][ T8203] bridge_slave_0: entered promiscuous mode [ 196.877220][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.888542][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.896244][ T8203] bridge_slave_1: entered allmulticast mode [ 196.904805][ T8203] bridge_slave_1: entered promiscuous mode [ 196.916956][ T8205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.971282][ T5150] Bluetooth: hci6: command tx timeout [ 196.977644][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.985749][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.011998][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.053634][ T5150] Bluetooth: hci7: command tx timeout [ 197.061395][ T5150] Bluetooth: hci8: command tx timeout [ 197.169126][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.176774][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.205410][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.249544][ T8205] team0: Port device team_slave_0 added [ 197.270160][ T8205] team0: Port device team_slave_1 added [ 197.291187][ T5150] Bluetooth: hci2: command tx timeout [ 197.300230][ T8197] hsr_slave_0: entered promiscuous mode [ 197.307017][ T8197] hsr_slave_1: entered promiscuous mode [ 197.313662][ T8197] debugfs: 'hsr0' already exists in 'hsr' [ 197.319520][ T8197] Cannot create hsr debugfs directory [ 197.349714][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.365322][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.412939][ T8199] hsr_slave_0: entered promiscuous mode [ 197.419471][ T8199] hsr_slave_1: entered promiscuous mode [ 197.426576][ T8199] debugfs: 'hsr0' already exists in 'hsr' [ 197.432419][ T8199] Cannot create hsr debugfs directory [ 197.474727][ T8201] hsr_slave_0: entered promiscuous mode [ 197.481971][ T8201] hsr_slave_1: entered promiscuous mode [ 197.488321][ T8201] debugfs: 'hsr0' already exists in 'hsr' [ 197.494661][ T8201] Cannot create hsr debugfs directory [ 197.525985][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.533369][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.559512][ T8205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.573996][ T8205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.581419][ T8205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.607794][ T8205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.649714][ T8203] team0: Port device team_slave_0 added [ 197.660452][ T8203] team0: Port device team_slave_1 added [ 197.757881][ T194] IPVS: stop unused estimator thread 0... [ 197.760450][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.771892][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.799080][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.828746][ T8205] hsr_slave_0: entered promiscuous mode [ 197.836019][ T8205] hsr_slave_1: entered promiscuous mode [ 197.842516][ T8205] debugfs: 'hsr0' already exists in 'hsr' [ 197.848299][ T8205] Cannot create hsr debugfs directory [ 197.889886][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.897166][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.923875][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.129107][ T8203] hsr_slave_0: entered promiscuous mode [ 198.136118][ T8203] hsr_slave_1: entered promiscuous mode [ 198.143499][ T8203] debugfs: 'hsr0' already exists in 'hsr' [ 198.149254][ T8203] Cannot create hsr debugfs directory [ 198.276434][ T194] ================================================================== [ 198.284568][ T194] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 198.292781][ T194] Read of size 8 at addr ffff888055d98108 by task kworker/u8:5/194 [ 198.300883][ T194] [ 198.303259][ T194] CPU: 0 UID: 0 PID: 194 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 198.303287][ T194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.303302][ T194] Workqueue: netns cleanup_net [ 198.303341][ T194] Call Trace: [ 198.303350][ T194] [ 198.303358][ T194] dump_stack_lvl+0x189/0x250 [ 198.303389][ T194] ? rcu_is_watching+0x15/0xb0 [ 198.303411][ T194] ? __kasan_check_byte+0x12/0x40 [ 198.303431][ T194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.303465][ T194] ? rcu_is_watching+0x15/0xb0 [ 198.303487][ T194] ? lock_release+0x4b/0x3e0 [ 198.303510][ T194] ? __virt_addr_valid+0x1c8/0x5c0 [ 198.303538][ T194] ? __virt_addr_valid+0x4a5/0x5c0 [ 198.303568][ T194] print_report+0xca/0x240 [ 198.303592][ T194] ? nf_hook_entry_head+0x1f1/0x2c0 [ 198.303616][ T194] kasan_report+0x118/0x150 [ 198.303636][ T194] ? nf_hook_entry_head+0x1f1/0x2c0 [ 198.303665][ T194] nf_hook_entry_head+0x1f1/0x2c0 [ 198.303689][ T194] __nf_unregister_net_hook+0x74/0x700 [ 198.303716][ T194] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 198.303741][ T194] __nft_release_hook+0x180/0x350 [ 198.303773][ T194] nf_tables_pre_exit_net+0xa7/0x110 [ 198.303803][ T194] ops_undo_list+0x187/0x990 [ 198.303826][ T194] ? __pfx_ops_undo_list+0x10/0x10 [ 198.303848][ T194] ? do_raw_spin_unlock+0x122/0x240 [ 198.303878][ T194] cleanup_net+0x4d8/0x820 [ 198.303897][ T194] ? __pfx_cleanup_net+0x10/0x10 [ 198.303917][ T194] ? _raw_spin_unlock_irq+0x23/0x50 [ 198.303947][ T194] ? process_scheduled_works+0x9ef/0x17b0 [ 198.303970][ T194] ? process_scheduled_works+0x9ef/0x17b0 [ 198.304011][ T194] process_scheduled_works+0xae1/0x17b0 [ 198.304047][ T194] ? __pfx_process_scheduled_works+0x10/0x10 [ 198.304077][ T194] worker_thread+0x8a0/0xda0 [ 198.304099][ T194] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 198.304132][ T194] ? __kthread_parkme+0x7b/0x200 [ 198.304161][ T194] kthread+0x711/0x8a0 [ 198.304189][ T194] ? __pfx_worker_thread+0x10/0x10 [ 198.304211][ T194] ? __pfx_kthread+0x10/0x10 [ 198.304238][ T194] ? _raw_spin_unlock_irq+0x23/0x50 [ 198.304266][ T194] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.304284][ T194] ? __pfx_kthread+0x10/0x10 [ 198.304309][ T194] ret_from_fork+0x4bc/0x870 [ 198.304331][ T194] ? __pfx_ret_from_fork+0x10/0x10 [ 198.304353][ T194] ? __switch_to_asm+0x39/0x70 [ 198.304370][ T194] ? __switch_to_asm+0x33/0x70 [ 198.304386][ T194] ? __pfx_kthread+0x10/0x10 [ 198.304412][ T194] ret_from_fork_asm+0x1a/0x30 [ 198.304438][ T194] [ 198.304447][ T194] [ 198.553080][ T194] Allocated by task 8205: [ 198.557421][ T194] kasan_save_track+0x3e/0x80 [ 198.562116][ T194] __kasan_slab_alloc+0x6c/0x80 [ 198.566981][ T194] kmem_cache_alloc_node_noprof+0x433/0x710 [ 198.572899][ T194] kmalloc_reserve+0xbd/0x290 [ 198.577580][ T194] __alloc_skb+0x142/0x2d0 [ 198.582002][ T194] netlink_ack+0x146/0xa50 [ 198.586455][ T194] netlink_rcv_skb+0x28c/0x470 [ 198.591310][ T194] netlink_unicast+0x82f/0x9e0 [ 198.596088][ T194] netlink_sendmsg+0x805/0xb30 [ 198.601047][ T194] __sock_sendmsg+0x21c/0x270 [ 198.605797][ T194] __sys_sendto+0x3bd/0x520 [ 198.610826][ T194] __x64_sys_sendto+0xde/0x100 [ 198.615590][ T194] do_syscall_64+0xfa/0xfa0 [ 198.620110][ T194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.626011][ T194] [ 198.628340][ T194] Freed by task 8205: [ 198.632382][ T194] kasan_save_track+0x3e/0x80 [ 198.637086][ T194] __kasan_save_free_info+0x46/0x50 [ 198.642306][ T194] __kasan_slab_free+0x5c/0x80 [ 198.647093][ T194] kmem_cache_free+0x19b/0x690 [ 198.651866][ T194] skb_release_data+0x62d/0x7c0 [ 198.656721][ T194] consume_skb+0x9e/0xf0 [ 198.661061][ T194] netlink_recvmsg+0x5b2/0xa30 [ 198.665830][ T194] sock_recvmsg+0x22c/0x270 [ 198.670353][ T194] __sys_recvfrom+0x1f6/0x340 [ 198.675034][ T194] __x64_sys_recvfrom+0xde/0x100 [ 198.679997][ T194] do_syscall_64+0xfa/0xfa0 [ 198.684507][ T194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.690405][ T194] [ 198.692736][ T194] The buggy address belongs to the object at ffff888055d98000 [ 198.692736][ T194] which belongs to the cache skbuff_small_head of size 704 [ 198.707433][ T194] The buggy address is located 264 bytes inside of [ 198.707433][ T194] freed 704-byte region [ffff888055d98000, ffff888055d982c0) [ 198.721415][ T194] [ 198.723749][ T194] The buggy address belongs to the physical page: [ 198.730264][ T194] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55d98 [ 198.739060][ T194] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 198.747572][ T194] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 198.755310][ T194] page_type: f5(slab) [ 198.759301][ T194] raw: 00fff00000000040 ffff88801e2bdb40 ffffea00016a4500 dead000000000004 [ 198.767906][ T194] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 198.776580][ T194] head: 00fff00000000040 ffff88801e2bdb40 ffffea00016a4500 dead000000000004 [ 198.785271][ T194] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 198.793956][ T194] head: 00fff00000000002 ffffea0001576601 00000000ffffffff 00000000ffffffff [ 198.802638][ T194] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 198.811308][ T194] page dumped because: kasan: bad access detected [ 198.817742][ T194] page_owner tracks the page as allocated [ 198.823463][ T194] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7889, tgid 7887 (syz.1.501), ts 170086705939, free_ts 168636632220 [ 198.844744][ T194] post_alloc_hook+0x240/0x2a0 [ 198.849530][ T194] get_page_from_freelist+0x2365/0x2440 [ 198.855194][ T194] __alloc_frozen_pages_noprof+0x181/0x370 [ 198.861100][ T194] alloc_pages_mpol+0x232/0x4a0 [ 198.865952][ T194] allocate_slab+0x96/0x350 [ 198.870457][ T194] ___slab_alloc+0xf56/0x1990 [ 198.875150][ T194] __slab_alloc+0x65/0x100 [ 198.879567][ T194] kmem_cache_alloc_node_noprof+0x4c5/0x710 [ 198.885558][ T194] kmalloc_reserve+0xbd/0x290 [ 198.890242][ T194] __alloc_skb+0x142/0x2d0 [ 198.894670][ T194] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 198.900570][ T194] addrconf_ifdown+0x1543/0x1880 [ 198.905521][ T194] addrconf_notify+0x1bc/0x1010 [ 198.910379][ T194] notifier_call_chain+0x1b6/0x3e0 [ 198.915499][ T194] unregister_netdevice_many_notify+0x1860/0x2390 [ 198.921940][ T194] ops_undo_list+0x3dc/0x990 [ 198.926541][ T194] page last free pid 7870 tgid 7865 stack trace: [ 198.932865][ T194] __free_frozen_pages+0xbc4/0xd30 [ 198.937986][ T194] stack_depot_save_flags+0x436/0x860 [ 198.943367][ T194] kasan_save_track+0x4f/0x80 [ 198.948066][ T194] __kasan_kmalloc+0x93/0xb0 [ 198.952696][ T194] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 198.958100][ T194] __request_module+0x2b5/0x5e0 [ 198.962975][ T194] inet_create+0x3a8/0x1000 [ 198.967496][ T194] __sock_create+0x4b3/0x9f0 [ 198.972098][ T194] __sys_socket+0xd7/0x1b0 [ 198.976526][ T194] __x64_sys_socket+0x7a/0x90 [ 198.981215][ T194] do_syscall_64+0xfa/0xfa0 [ 198.985723][ T194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.991626][ T194] [ 198.993958][ T194] Memory state around the buggy address: [ 198.999602][ T194] ffff888055d98000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.007678][ T194] ffff888055d98080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.015752][ T194] >ffff888055d98100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.023818][ T194] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 199.028161][ T194] ffff888055d98180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.036228][ T194] ffff888055d98200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 199.044460][ T194] ================================================================== [ 199.079257][ T5150] Bluetooth: hci5: command tx timeout [ 199.080747][ T5841] Bluetooth: hci6: command tx timeout [ 199.085388][ T194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 199.085412][ T194] CPU: 0 UID: 0 PID: 194 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 199.085440][ T194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.085458][ T194] Workqueue: netns cleanup_net [ 199.085488][ T194] Call Trace: [ 199.085498][ T194] [ 199.085509][ T194] dump_stack_lvl+0x99/0x250 [ 199.085545][ T194] ? __asan_memcpy+0x40/0x70 [ 199.085578][ T194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.085608][ T194] ? __pfx__printk+0x10/0x10 [ 199.085639][ T194] vpanic+0x237/0x6d0 [ 199.085671][ T194] ? __pfx_vpanic+0x10/0x10 [ 199.085701][ T194] ? preempt_schedule+0xae/0xc0 [ 199.085737][ T194] ? __pfx_preempt_schedule+0x10/0x10 [ 199.085776][ T194] panic+0xb9/0xc0 [ 199.085807][ T194] ? __pfx_panic+0x10/0x10 [ 199.085842][ T194] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 199.085882][ T194] ? nf_hook_entry_head+0x1f1/0x2c0 [ 199.085910][ T194] check_panic_on_warn+0x89/0xb0 [ 199.085946][ T194] ? nf_hook_entry_head+0x1f1/0x2c0 [ 199.085973][ T194] end_report+0x78/0x160 [ 199.085994][ T194] kasan_report+0x129/0x150 [ 199.086017][ T194] ? nf_hook_entry_head+0x1f1/0x2c0 [ 199.086051][ T194] nf_hook_entry_head+0x1f1/0x2c0 [ 199.086080][ T194] __nf_unregister_net_hook+0x74/0x700 [ 199.086112][ T194] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 199.086141][ T194] __nft_release_hook+0x180/0x350 [ 199.086178][ T194] nf_tables_pre_exit_net+0xa7/0x110 [ 199.086211][ T194] ops_undo_list+0x187/0x990 [ 199.086238][ T194] ? __pfx_ops_undo_list+0x10/0x10 [ 199.086262][ T194] ? do_raw_spin_unlock+0x122/0x240 [ 199.086299][ T194] cleanup_net+0x4d8/0x820 [ 199.086325][ T194] ? __pfx_cleanup_net+0x10/0x10 [ 199.086357][ T194] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.086391][ T194] ? process_scheduled_works+0x9ef/0x17b0 [ 199.086418][ T194] ? process_scheduled_works+0x9ef/0x17b0 [ 199.086445][ T194] process_scheduled_works+0xae1/0x17b0 [ 199.086486][ T194] ? __pfx_process_scheduled_works+0x10/0x10 [ 199.086522][ T194] worker_thread+0x8a0/0xda0 [ 199.086550][ T194] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.086591][ T194] ? __kthread_parkme+0x7b/0x200 [ 199.086623][ T194] kthread+0x711/0x8a0 [ 199.086655][ T194] ? __pfx_worker_thread+0x10/0x10 [ 199.086681][ T194] ? __pfx_kthread+0x10/0x10 [ 199.086712][ T194] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.086746][ T194] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.086768][ T194] ? __pfx_kthread+0x10/0x10 [ 199.086798][ T194] ret_from_fork+0x4bc/0x870 [ 199.086825][ T194] ? __pfx_ret_from_fork+0x10/0x10 [ 199.086853][ T194] ? __switch_to_asm+0x39/0x70 [ 199.086872][ T194] ? __switch_to_asm+0x33/0x70 [ 199.086891][ T194] ? __pfx_kthread+0x10/0x10 [ 199.086924][ T194] ret_from_fork_asm+0x1a/0x30 [ 199.086953][ T194] [ 199.090530][ T194] Kernel Offset: disabled