last executing test programs: 1m4.044913472s ago: executing program 3 (id=1921): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="143cfea4118d69000000000000000000000000b9"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r11, 0x0, 0x0) sendmsg$can_bcm(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc47318ccc3455"], 0x48}}, 0x0) 1m3.793765944s ago: executing program 3 (id=1927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x10000}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r8) sendmsg$NL80211_CMD_START_NAN(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4f106eb1, 0x56}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x240040a5}, 0xc004) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}], 0x1c) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}}) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000440)={0x1f, 0x400, @none, 0x0, 0x2}, 0xe) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xe, 0xf}, {0x10, 0xb}}}, 0x24}}, 0x44004) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000e3aa11bcfa8ca297ccff583641992806d8289f6e1eb1adc0741979059007daf7b9a8fa1f52dd2d795c01b40116e1536ba94653d2c9ad93c39a75284374d4b94be613d45b971501da3e90ca09942bcd1070f910e1b392d5aeb9beac5d094eb93e62fe6ac1eae479515c5da5baa13fa2526d38c2efee0bab2b5146bc411d09985bdb03b9654440d98899d0998274f66bfad7ab036ce2cf28f9526323bd9088248487e9cc98580943be39c721994f5002ab13af181a", @ANYRES16=r1, @ANYBLOB="000028bd7000fcdbdf2509000000080004000100000008000500530a0000"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, r10, 0x121, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x84, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x391}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfaa9}], @NL80211_ATTR_DURATION={0x8}]}, 0x84}}, 0x20000001) 1m2.936974118s ago: executing program 3 (id=1941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(r5, 0x0, 0x4804) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r5) setsockopt$sock_int(r5, 0x1, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78) write(r6, &(0x7f0000000000)="c0", 0x1) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) close(0x3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) 1m2.470903858s ago: executing program 3 (id=1945): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) (fail_nth: 1) 1m1.887253836s ago: executing program 3 (id=1947): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x28, 0x1, 0x1, 0x200, 0x0, 0x0, {0x4, 0x0, 0x5}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5512c2490ab7172b}, 0x80) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x48) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x40) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x3}}}]}, 0x24}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000081}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0x6b1, @mcast2, 0x4}, 0x76) (async, rerun: 64) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38e8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c77a96733b2c18bf7adbe30f66959119bbed4e063dbbad441", 0xa6}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc429446bc2ddb467d972c56938e24", 0xca}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d020203535947f6cf823", 0x60}, {0x0}, {&(0x7f0000000300)="d4eb0cb9b5", 0x5}], 0x6, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a120000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000107321ff9f855a3d248a8ea8eef"], 0x7c}}, 0x4008880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1m1.708122182s ago: executing program 3 (id=1951): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xe, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket(0x1a, 0x5, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x16, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbac, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0xa, 0x1f, 0x1, 0xc78f66b1e53dffbd, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x6, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x2, 0x19, &(0x7f00000004c0)=""/25, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r7], &(0x7f0000000600)=[{0x3, 0x4, 0x8, 0x6}, {0x2, 0x4, 0x8, 0x4}, {0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x5, 0xc}], 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) 53.232301609s ago: executing program 4 (id=2023): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESOCT], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2c}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="05000000010001", 0x7) close(0x4) pipe(0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000021401"], 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="c903e52e000000007b538c7700"/24]) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r6, 0x1, 0x6, @random="28b5522532a5"}, 0x63) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x40010) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 50.15803064s ago: executing program 4 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x5, 0x1, {0xb, 0x1ffe3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000340)={r5, 0x3, 0x3b7, 0x9}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc37}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @ldst={0x0, 0x0, 0x3, 0x6, 0x9, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x9f, &(0x7f0000000580)=""/159, 0x41100, 0x4a, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xa, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0xffffffffffffffff, r8, r9], &(0x7f0000000700)=[{0x5, 0x4, 0xe, 0x7}], 0x10, 0x3}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r12, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r11, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r14, 0xb4807000) ioctl$FS_IOC_RESVSP(r13, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15}}, 0x24}}, 0x10) 49.923841208s ago: executing program 4 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000d000000080026000816"], 0x40}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket(0x1e, 0x1, 0x0) shutdown(r7, 0x2) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000bf03000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000041000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000018001680140001801000020001000000670a00001252000014000300736974300000000000000000000000000a000100aaaaaaaaaa24000008001300", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0c001980050006000f00000008000f00fbffffff"], 0x84}}, 0x0) 49.456226921s ago: executing program 4 (id=2062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$nl_route(r0, 0x0, 0xc800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtfilter={0x1094, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x1064, 0x2, [@TCA_BASIC_POLICE={0x1060, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x6, 0x81, 0x4, 0x1, 0x401, 0x8, 0x7f, 0x1, 0x2, 0x8, 0xa, 0x6, 0x6, 0x10001, 0x3b9a14ea, 0xd, 0x0, 0x40, 0x9, 0x3ff, 0x10000, 0x0, 0x5, 0x100, 0x80000001, 0x10, 0x1, 0x0, 0x1, 0x0, 0x400, 0x9, 0xffff, 0x8, 0x4, 0x7, 0xc, 0x7, 0xfffffffe, 0xd, 0x9, 0x1, 0x6, 0x7, 0x9, 0x61b5, 0x0, 0x7ff, 0xd406, 0x400, 0xa6b1f2a, 0xe, 0x673, 0xe35e, 0x100, 0x6, 0x2, 0x9, 0xa, 0x3, 0x5, 0x6, 0x10, 0x1, 0x3, 0x8, 0x9, 0x1, 0x6, 0x1ff, 0x200, 0x2, 0x0, 0x400, 0x1, 0xad8, 0x9, 0xf7, 0xa4, 0x5, 0x1, 0x9, 0x8, 0xb, 0x7, 0x9, 0x325860c1, 0x6, 0x7fff, 0x6, 0xffffffff, 0x2, 0x2, 0x2, 0xfffffff9, 0x9, 0x10001, 0x6, 0x7, 0x8, 0x913, 0x1, 0xe, 0x400, 0x81, 0x14a, 0x7, 0x8001, 0x0, 0x0, 0x2, 0x3ff, 0x5, 0x5, 0x7, 0x9, 0x1, 0x8, 0x2, 0x1, 0x79, 0x0, 0x7fff, 0xab, 0x40bd96d8, 0x8, 0x4, 0x480, 0x0, 0x3, 0x1, 0xfffffffa, 0x1, 0xffffff81, 0x8, 0x100, 0x101, 0xfd8, 0x4, 0x6, 0x7, 0x0, 0x460, 0xfffffff8, 0x6, 0x1a40, 0x2, 0x4, 0x0, 0x7, 0x9, 0x9, 0x101, 0x10000, 0x6fc, 0x0, 0x4, 0x9, 0x3ff, 0x5, 0x0, 0x3, 0x3, 0x1c2cb28e, 0x4, 0xba, 0x23, 0x7, 0x3, 0x78, 0x7fff, 0x2, 0x63, 0xffffff5f, 0x3, 0x50, 0x1000000, 0x8, 0x2, 0xd, 0x40, 0x8, 0x7, 0x10001, 0x1ff, 0x2, 0x1, 0x1000, 0x3, 0x9, 0x1, 0x1, 0xf, 0x8, 0xd75, 0x5, 0x7, 0xe, 0x100, 0x2, 0x5, 0x3, 0x4, 0x1, 0xfff, 0x80000001, 0x7, 0x8d, 0x1, 0x1, 0x7, 0x6, 0x7, 0x6, 0x3, 0x9, 0x0, 0xc, 0xa, 0x4, 0x9, 0x3, 0x9, 0x800, 0x80, 0x80, 0x1, 0x3, 0x2, 0xe43, 0x200, 0x0, 0x3, 0x80000000, 0x81, 0x9, 0x2, 0x7fffffff, 0x401, 0xf009, 0x2, 0x3ff, 0x5, 0x1ff, 0x0, 0xfffffff7, 0x9, 0xccb4, 0x0, 0x6, 0x5, 0x1, 0x7ff, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0xfffffffd, 0x6, 0x7, 0x7, 0x1, 0xa, 0x1, 0x0, 0x2, 0x79, 0xb, 0x6, 0x9, 0x1, 0x80000001, 0x3, 0x3, 0xe9, 0x5, 0xfffffffc, 0x1, 0x0, 0xfffff7bc, 0x246, 0x3, 0x40, 0x50, 0xe, 0x10, 0x0, 0x8000, 0x74, 0x7ff, 0x0, 0x2b, 0x6, 0xc9c, 0x4, 0x6, 0x2, 0x2, 0x0, 0x17, 0x5, 0x7, 0x549, 0xfffffff9, 0x101, 0x1, 0x6, 0x9, 0x1800000, 0xffff, 0x84d6e000, 0x7, 0x1, 0x7, 0x10001, 0x6, 0x1, 0x9, 0x101, 0x6, 0x0, 0x0, 0x80000000, 0x0, 0xe, 0x438, 0x2, 0x10, 0x4, 0x1ff, 0x0, 0x1, 0x401, 0x5, 0x3, 0x80000001, 0x79, 0x10000, 0x4, 0x6, 0x2, 0x80000000, 0x3, 0x0, 0x6b, 0x400, 0x7, 0x0, 0x2, 0x8001, 0x5, 0x7ff, 0xffff0000, 0x2, 0xc000, 0x0, 0x3, 0x8, 0x3, 0xd86, 0x8, 0xfffffff9, 0xf1, 0x5d25, 0x1, 0x6, 0x3, 0xfffffffe, 0x9, 0x2, 0x3ff, 0xdffb, 0x401, 0x80000000, 0x4, 0x7, 0x0, 0x6a4, 0x4, 0x7, 0xfffffffc, 0x7, 0x7a, 0x1, 0x0, 0x80000000, 0x2, 0xffffffff, 0xf53, 0x0, 0xfffffffb, 0xeb, 0xe, 0x4, 0xfffff801, 0x44, 0xfffffff6, 0xae, 0x2, 0x8, 0x9, 0x4, 0x7, 0xf, 0xa1b, 0x81c3, 0x2, 0x7e, 0x5, 0x7, 0x3, 0x2, 0x6, 0x1ba5, 0x7ff, 0x81, 0x100, 0x1, 0x8000, 0x8001, 0xb, 0x8, 0xb95, 0x0, 0xfffffff8, 0x7fffffff, 0x1, 0x10000, 0x6, 0xfffffffa, 0xffffffff, 0x2, 0x0, 0xc13c, 0xc7, 0x7fff, 0xffffffff, 0x2, 0xab, 0x5, 0xfffffffe, 0x2, 0x9, 0x3, 0x5, 0x5, 0xffff, 0x9, 0x10001, 0x6, 0xfffffffa, 0x5, 0x0, 0xf82, 0xe28b, 0x9, 0xb3, 0x7, 0xffffff44, 0xb, 0xf9933fd, 0x6, 0xc69, 0xff, 0x7, 0x8000, 0x0, 0x8, 0x8000, 0x8001, 0x3, 0x0, 0x9, 0x1ff, 0x6, 0x5, 0x401, 0x5, 0x2, 0x2a42, 0x2, 0xd, 0x401, 0x1, 0x5, 0x60000000, 0x8, 0x1000, 0x3, 0x1ff, 0x6, 0x6, 0x2, 0x0, 0x0, 0x4, 0x877, 0x2, 0x946, 0x1ff, 0x8, 0x8, 0x9, 0x74163d69, 0x4, 0x7, 0x1ff, 0x6f, 0x9, 0x6, 0x100, 0xa]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1c00, 0x20000005, 0x7, 0x1, 0x8, {0x7, 0x0, 0x5, 0x7, 0x69e0, 0x65e}, {0xf1, 0x1, 0x800, 0x5f3, 0xae24, 0x8001}, 0x5, 0x7be, 0x7f}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x59bf06fe, 0x9, 0x9, 0x4, 0x6, 0x6, 0x81, 0xd2, 0x4, 0x7fff, 0x9, 0xb56, 0x40, 0x5, 0xe, 0x4, 0x1bf, 0x7, 0x5c9, 0x6, 0x7f, 0x10000, 0x40, 0x7fffffff, 0x1, 0x2, 0x8, 0x7, 0x1, 0x6, 0x1ab, 0xfffffff7, 0x4, 0x0, 0x1, 0x7fff, 0x6, 0x1, 0x1f, 0x7, 0xffffff01, 0x8, 0x7, 0xf, 0x1ff, 0x5, 0x10001, 0x6, 0x9, 0x0, 0x2, 0x80000000, 0x6, 0x5, 0x40, 0x7, 0x5, 0x8001, 0x7, 0x403, 0xba, 0x4, 0xbed9, 0x40000, 0x4, 0x9, 0x8, 0x7, 0x6, 0x7, 0x80, 0x100, 0x7f, 0x0, 0x46, 0xab8, 0x7, 0x3, 0x2, 0xa, 0xfe21, 0x5, 0xd, 0x8, 0x4, 0x2b, 0x0, 0x80000000, 0x3, 0x0, 0x7, 0xdb, 0x6, 0x1ff, 0x8, 0xfffffff7, 0x4, 0xfffffff9, 0x0, 0xfffffee0, 0x7, 0x7, 0x9, 0x80000000, 0x680000, 0x7fff, 0xfffff18a, 0x3, 0x2, 0xe957, 0x6, 0x3, 0x7, 0x10, 0x8, 0x8001, 0x7, 0x3, 0x40a356e6, 0x9, 0x3, 0xb4e2, 0x8, 0x4f6, 0x6, 0x1, 0x2f0, 0x4, 0x400, 0x1ff, 0xf, 0x4cfd, 0x7, 0x8, 0x8000, 0x6, 0x1, 0xa, 0x3ff, 0x837, 0x10000, 0x9, 0x0, 0x1000, 0x2, 0xff, 0x9, 0x7ff, 0x5, 0x10001, 0x40000000, 0x0, 0x0, 0x6e3, 0x9, 0x20, 0x40, 0xfc4, 0xfffffff8, 0xfffffff7, 0x0, 0x7, 0x6, 0x8, 0x0, 0x1, 0xfffffffe, 0x10000, 0x4, 0xe, 0x3, 0x1000, 0x7, 0x8e4, 0x3, 0x5, 0xaa, 0xffff, 0xffff, 0x9, 0xd00, 0xdd14, 0x3, 0x6, 0x9, 0xd5, 0x1, 0x6, 0xfe1a8d5c, 0x6, 0x9b, 0x0, 0x19, 0x8, 0x3, 0x2400000, 0x8, 0x10001, 0x7, 0x8, 0x6, 0x0, 0x7, 0x2, 0x8, 0xc8b, 0x0, 0x3, 0x5, 0x3ff, 0x5, 0x1, 0xfffff651, 0x9, 0x698, 0x609b, 0x8889, 0x100, 0x10001, 0x6, 0x3ff, 0x0, 0x8, 0x4, 0x0, 0xf, 0x10000, 0x99d, 0xfffff570, 0x10001, 0x93, 0x80000001, 0x82, 0x8001, 0x49b, 0x2, 0x9, 0xe, 0x6, 0x8, 0x100, 0x5, 0xa, 0x9, 0x7fff, 0x5, 0x55, 0x7ff, 0x0, 0xadcc, 0xfd, 0x1, 0x8, 0x101, 0x1, 0x93]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x81, 0x4, 0x5, 0xe3e1, 0x80000001, 0x6, 0x0, 0x4, 0x7572, 0xffff, 0x8, 0x3db, 0xff, 0x0, 0xc4, 0x3, 0x3, 0x3, 0x7, 0x4, 0x80000000, 0xfff, 0xfffffffb, 0x4, 0x7, 0x2f, 0x1, 0x80000001, 0x8, 0xfffff83f, 0xfffffff7, 0x2, 0xfffffffc, 0x7, 0x6, 0x9, 0x655, 0x1, 0x7, 0x7, 0x7, 0x3d8e661f, 0x3, 0xc, 0x7ff, 0x8000, 0x1, 0xfaa, 0x8, 0xc0e, 0xba63, 0x401, 0x7f, 0x10001, 0x38, 0xe, 0x6, 0x3d38, 0x8, 0x80000000, 0x9, 0x0, 0x3ff, 0x1, 0x9, 0x5, 0xa1c, 0xd, 0x101, 0x7, 0xb8c4, 0xfffffffe, 0x0, 0x0, 0x8, 0xc, 0x793, 0x4, 0xfbd, 0xaca, 0x7fffffff, 0x9, 0x2, 0xffffffff, 0x7, 0xb8, 0x5, 0x1, 0x8, 0x28, 0x0, 0x401, 0x5, 0x81, 0x7, 0x7, 0x1ff, 0x3, 0x8, 0x7, 0x1, 0xe, 0x3, 0x2, 0x8, 0x0, 0x4, 0x5, 0x9, 0xe, 0x5, 0x8, 0x291d, 0x200, 0x7, 0x3, 0xa633, 0xfffffffd, 0x8, 0x2, 0x800, 0xd, 0x9, 0x7fffffff, 0x9ac3, 0x7, 0x7, 0xd, 0x200, 0x3, 0x9, 0x6, 0x1, 0x401, 0x10, 0xeed, 0x81, 0x5, 0x6, 0x62, 0x0, 0x3, 0x1ff, 0xd26e, 0x6, 0x4, 0x2, 0x1, 0x0, 0x0, 0x77, 0x7fff, 0x400, 0x0, 0x8001, 0x40, 0x4, 0x0, 0x8, 0x5, 0x5, 0x0, 0x3, 0x1, 0x4, 0x6, 0x9dc6, 0x40, 0x7fffffff, 0x0, 0x4, 0xfffffff0, 0x1, 0xfffffff1, 0x14f4, 0x8000, 0xe, 0x66, 0x10, 0x6, 0x0, 0x8, 0x7f, 0x7, 0x3, 0x0, 0x0, 0x9, 0x0, 0x1, 0xd809, 0x2, 0x4, 0x8, 0x8, 0x0, 0x4, 0x35ea, 0x1ff, 0x0, 0x3, 0xffffffff, 0x9, 0xffff8000, 0x8, 0x100, 0x800, 0x2, 0x2, 0x80000000, 0x8000, 0x3, 0x9c5c, 0x0, 0x6fe, 0x8, 0x1, 0xfa2, 0x2, 0x9, 0x5, 0x7f, 0x2, 0x7ff, 0x3, 0xffffffff, 0x5, 0x31ef1b39, 0x0, 0x0, 0xfffffff8, 0x5, 0x82a, 0x1, 0xfa01, 0x6, 0x81, 0x6, 0xc, 0x252, 0x909f, 0x8, 0xfffffffe, 0x9, 0x5, 0x10, 0x3, 0x5, 0x7, 0x6, 0x3, 0xffff, 0xffff, 0x2, 0x1]}]}]}}]}, 0x1094}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001940)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001980)={0x14, r9, 0x809, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r13, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) close(r11) 48.525282533s ago: executing program 4 (id=2072): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, 0x0) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x88f8}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88fb}}}}, 0x16) close(0x3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63aa66cdb3646a37626de7361b5338c197dd3e6844dafcb4338dce0b79ee41da150eca12fbd36b4873ce8e4747b63e8830ee6c32f254d37792053e2b77cc86279ea843600"/297, 0x3accf8d5) close(r5) close(0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x54, r8, 0x1, 0x80000000, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x40050) 47.983840328s ago: executing program 4 (id=2077): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="7fe2c1b5e0120269bea6c36f97689e925df1f02ff4ea3f037d1304ad6ef2bc2d62c10683083a59dba0d8f96799e15910555edda892093b42a0ccf6a35b6e877a2df8a8d099e9e930f6ea23e750e9a0b410728f9c0559a761c4a9c052f7547bdcef0eec5c16dd73f07fb613e0210df72e411e18aa81c5800bca01ba2c5c29b11225353c11", 0x84}, {&(0x7f0000000340)="9947f99175432a7f1a17365462ffec298d3d3dd7750624f6223657622d652fa7dd41423967d4d5acb99bc25a1fd4f257f4489b2a72a4fa99ca266671b3e3e1d91a7c2757625cf97ba8dbee0209676e478373c077d24a208810f7dbb6743792c72fd55a23b68cabbff584929ba50cf153157d1ad8c8cd52c57eed80d7538d4a94275a43f47e7f3635baeb2a", 0x8b}, {&(0x7f00000000c0)="b731d8443c1860cee7d16667efc6a5d37a473d827fb4069193e3a3b29b39ffbcf03dd414fe279260fb6ab695ef2d393e845c359d7d96b33c1ffe81bd4a2f1ede15185cdd51cbc50cf6ee4a34ddd8740115c355a12d", 0x55}, {&(0x7f00000001c0)="bdab5d367d3fc0bfb9c96e0de9e2ebfcae69840fe5793b2f50d38b55e1ec6a0f52569c9eb27ccc2b48c880876543fc34eb", 0x31}, {&(0x7f0000000400)="6176ab69802b6316d6adeae77b3d0a52d68893e695f083977583b3276bd70254f11a9a75869ba6bafd5699a60753ac6119858cb906a853f1b93d7198ef9527870e3a46985c646220e9ee82b5ae7f2784a229308aec2c6f61f63f7f784a306e", 0x5f}, {&(0x7f0000000540)="811b342f7cd657c002f1d58f1b1156d76c98c16f03fe084435470251ec9e3fc51807ab76f1c846f0c01096416f4f8303d2e3d14acfc3196d8bbb22ca7b2d4b5255d2d44094d0b6b090332a8d8f11431c4143e791d32979c828859aa47e647fff0f30", 0x62}], 0x7) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) 46.67166492s ago: executing program 32 (id=1951): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xe, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket(0x1a, 0x5, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x16, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbac, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0xa, 0x1f, 0x1, 0xc78f66b1e53dffbd, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x6, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x2, 0x19, &(0x7f00000004c0)=""/25, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000500)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r7], &(0x7f0000000600)=[{0x3, 0x4, 0x8, 0x6}, {0x2, 0x4, 0x8, 0x4}, {0x3, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x5, 0xc}], 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) 32.941123223s ago: executing program 33 (id=2077): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}, {&(0x7f0000000280)="7fe2c1b5e0120269bea6c36f97689e925df1f02ff4ea3f037d1304ad6ef2bc2d62c10683083a59dba0d8f96799e15910555edda892093b42a0ccf6a35b6e877a2df8a8d099e9e930f6ea23e750e9a0b410728f9c0559a761c4a9c052f7547bdcef0eec5c16dd73f07fb613e0210df72e411e18aa81c5800bca01ba2c5c29b11225353c11", 0x84}, {&(0x7f0000000340)="9947f99175432a7f1a17365462ffec298d3d3dd7750624f6223657622d652fa7dd41423967d4d5acb99bc25a1fd4f257f4489b2a72a4fa99ca266671b3e3e1d91a7c2757625cf97ba8dbee0209676e478373c077d24a208810f7dbb6743792c72fd55a23b68cabbff584929ba50cf153157d1ad8c8cd52c57eed80d7538d4a94275a43f47e7f3635baeb2a", 0x8b}, {&(0x7f00000000c0)="b731d8443c1860cee7d16667efc6a5d37a473d827fb4069193e3a3b29b39ffbcf03dd414fe279260fb6ab695ef2d393e845c359d7d96b33c1ffe81bd4a2f1ede15185cdd51cbc50cf6ee4a34ddd8740115c355a12d", 0x55}, {&(0x7f00000001c0)="bdab5d367d3fc0bfb9c96e0de9e2ebfcae69840fe5793b2f50d38b55e1ec6a0f52569c9eb27ccc2b48c880876543fc34eb", 0x31}, {&(0x7f0000000400)="6176ab69802b6316d6adeae77b3d0a52d68893e695f083977583b3276bd70254f11a9a75869ba6bafd5699a60753ac6119858cb906a853f1b93d7198ef9527870e3a46985c646220e9ee82b5ae7f2784a229308aec2c6f61f63f7f784a306e", 0x5f}, {&(0x7f0000000540)="811b342f7cd657c002f1d58f1b1156d76c98c16f03fe084435470251ec9e3fc51807ab76f1c846f0c01096416f4f8303d2e3d14acfc3196d8bbb22ca7b2d4b5255d2d44094d0b6b090332a8d8f11431c4143e791d32979c828859aa47e647fff0f30", 0x62}], 0x7) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) 18.331374924s ago: executing program 1 (id=2272): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket(0xa, 0x3, 0x3a) (async) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a000000020000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x4000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20028000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x8800) sendfile(r4, r5, 0x0, 0xffffffff000) (async) sendfile(r4, r5, 0x0, 0xffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000010c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0xa, 0x17, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8ca6, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query, @tail_call, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x117f}]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0x3c, &(0x7f0000000500)=""/60, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x66, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r8], 0x0, 0x10, 0xe41a}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r10 = socket$inet(0x2, 0x2, 0x1) connect$inet(r10, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r10, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4) 17.959762202s ago: executing program 1 (id=2274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0504274dbe00fedbdf250100000000000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000300680c03e500006c9f7e51a5dc82a7080001000200065e"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYRESHEX=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 9.392978592s ago: executing program 1 (id=2322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}, "d8"}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r6, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) epoll_wait(r6, &(0x7f00000001c0)=[{}], 0x1, 0x80000001) r7 = accept4$unix(r1, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x800) connect$unix(r7, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @mcast1, 0xc}}, 0x24) 8.215391735s ago: executing program 1 (id=2334): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYBLOB="8ac4be2eb852ac31df373c9210e942ca4e950dfbf94f8f24615a358ce32aa0a501b4063c7bce20e5f81cb5a577f287", @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) listen(0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x64000600) 5.330704009s ago: executing program 6 (id=2356): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b70500000000000061108a0000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9805837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8afef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb246ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4030b34c27a2f7fcd66ddde687c1255d0779ffec72ada8598e222d66bc90dacf240fe12755f780048804400f49d77b81534a8f1b0de80c49c7d9c87888801d819daaddb0c57513fdf7d0e942a799143dccc213cac7e8092d691a7894678472ba1970b4d6e393158dafeebae0a9d89e6e639115ddc7b54139b5b47f3d583c16b4d2da0a5c7b5ea751d03cc71fdd61140d66ff1ccfcbe83e40156854900"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x13, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x2, 0x84) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xc51e000) socket$inet_sctp(0x2, 0x5, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4.896931417s ago: executing program 0 (id=2357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000400000000eca35b729a22608d0002000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]}) write$ppp(r3, &(0x7f0000000300)='\x00\x00', 0x2) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40004) socket$can_raw(0x1d, 0x3, 0x1) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x8004) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x0, 0x0, 0x3a}, {0x3, 0xd4, 0x6, 0x8, 0x3, 0x3, 0x5, 0x8001}, {0x7f, 0x10000, 0x8000000000000000}, 0xc, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x3, 0x3, 0x1, 0xa9, 0x8001, 0x1}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000400040002000000a000000046d74d9b80dab30138d3d4e2cb6695215317bae63eaea648ff3aab3d7ce9d2ba9059ae2cf3127a83ed122808f551999ebd7866b05081b20500000055a9f079da5c5cc7ba3187acdc999d8070fe9f3b5a64f56da8655196373548a6bb4b245baa83c3e3f87c1b1c1c9bc3e2a8fad3a38702d07439786e4acd410ffb0b1cbd1619e09186115fcb0fbfdc0da701e2c01c63c4b1896ec5fdaffe0b07415bc095ab1562d2fa9ba8b0b7fd9cf69cb83ddd42c6a74e48d429b69e954036aec6ba2711613c6affab7fa7d48020a38c34f94677", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 4.672478697s ago: executing program 2 (id=2358): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe88, 0x30, 0x25, 0x0, 0x0, {}, [{0xe74, 0x1, [@m_pedit={0xe70, 0x1, 0x0, 0x0, {{0xa}, {0xe44, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {}, {0x606f}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x20000000}, {}, {0x0, 0x0, 0x5}, {0x0, 0x7}, {}, {}, {}, {0xfffffffe}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x80}, {0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x400}, {0x10000}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xc5}, {}, {}, {}, {}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {0x8000}, {}, {}, {}, {0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x9}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x200}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe88}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000108fdffff080000000000000000", @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000400)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x5, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default]}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r8 = accept4(r7, 0x0, 0x0, 0x80000) write(r8, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) 4.133269215s ago: executing program 6 (id=2359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x881) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x881) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) 1.916968334s ago: executing program 2 (id=2360): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x102}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 1.90134975s ago: executing program 2 (id=2361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$rds(0x15, 0x5, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) (async) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x7, 0x0, 0x0, 0xa, 0x2}, @const={0x1}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @datasec={0x6, 0x0, 0x0, 0xf, 0x0, [{0x5, 0x47, 0x4}], 't'}]}, {0x0, [0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0xfffffffffffffdaf) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@const={0x7, 0x0, 0x0, 0xa, 0x2}, @const={0x1}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @datasec={0x6, 0x0, 0x0, 0xf, 0x0, [{0x5, 0x47, 0x4}], 't'}]}, {0x0, [0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0xfffffffffffffdaf) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000001080)) (async) ioctl$sock_proto_private(r2, 0x89e1, &(0x7f0000001080)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x1, 0x4, 0xfffffffb, 0x40, @mcast1, @local, 0x80, 0x700, 0x8e5, 0x365a}}) connect$can_bcm(r5, &(0x7f0000000180)={0x1d, r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000300)=0xe9, 0x4) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYRES8=r4], 0xdd12}, {&(0x7f0000002a80)={0x10, 0x1d, 0x200, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x2}, 0x20040051) (async) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYRES8=r4], 0xdd12}, {&(0x7f0000002a80)={0x10, 0x1d, 0x200, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x2}, 0x20040051) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2b, 'perf_event'}, {0x2b, 'rlimit'}, {0x0, 'freezer'}, {0x2d, 'memory'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpuacct'}]}, 0x3d) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2b, 'perf_event'}, {0x2b, 'rlimit'}, {0x0, 'freezer'}, {0x2d, 'memory'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpuacct'}]}, 0x3d) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r13, 0x58, &(0x7f00000014c0)}, 0x10) sendmsg$nl_xfrm(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}}, 0x0) 1.879083085s ago: executing program 6 (id=2362): r0 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) listen(r0, 0x10000) (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x10705}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xa}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 1.74521772s ago: executing program 0 (id=2363): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 1.71410059s ago: executing program 6 (id=2364): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1.688791698s ago: executing program 0 (id=2365): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x41, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) (async) 1.640329037s ago: executing program 2 (id=2366): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r4, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000840)={0x608, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5ec, 0x11d, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x1}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x7, 0x9}, {0x4}, {0x7, 0x7}, {}, {0x6}, {0x0, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x7}, {0x3, 0x8}, {0x7, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x2}, {0x5}, {0x2, 0x1}, {0x5, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x9, 0x1, 0x0, 0x3, 0x0, 0x101, 0x7]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x3, 0x5}, {0x1, 0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x8}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x4, 0x7}, {0x3, 0xa}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x2}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x3, 0x7}, {0x4, 0x1}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x6, 0x8}, {0x0, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x8}, {0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x2, 0x8}, {0x1, 0x5}, {0x5, 0x2}, {0x2}, {0x5, 0x8}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x6}, {}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6, 0x48, 0x60, 0x3, 0x6, 0xb, 0x4, 0xc, 0x60, 0x3, 0x16, 0x18, 0x18, 0x18, 0x16, 0x12, 0x12, 0x5, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x5, 0x3, 0x4, 0xb502, 0x1c0, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x8, 0x6, 0x6, 0x7, 0xfff3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7a}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x66}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x71}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x398, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x384, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0xa}, {0x1, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x6, 0x3}, {0x2, 0x9}, {0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x7}, {0x3, 0x6}, {0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x95, 0x2, 0x3, 0xd6, 0x0, 0x6, 0x6]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x4}, {0x5}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x2}, {0x1, 0x8}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x1}, {0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x4}, {0x4, 0x3}, {0x2, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x78, 0x6, 0xfd, 0xdc, 0x7, 0x915]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xca8, 0x4, 0x5b5d, 0x7, 0xfff, 0x4, 0x7]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x18, 0x24, 0x0, 0x18, 0x4, 0x1b, 0x4, 0xc, 0x9, 0x12, 0x0, 0xc, 0x4, 0x24, 0x24, 0x16, 0x63]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x1, 0x12, 0x6e, 0x36, 0x6c, 0x1b, 0x6, 0xb, 0x16, 0x6, 0x2, 0x6c, 0x18, 0x6c, 0x60, 0x6, 0xc, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7, 0x9}, {0x5, 0x9}, {0x5, 0x3}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5098abc75f17ee31, 0x4, 0x6, 0x9, 0x5, 0x12, 0x6c, 0x3, 0x6c, 0x1b, 0x24, 0x9, 0xb, 0x12, 0x3834ceaf91043b90, 0x1b, 0x48, 0x2, 0x12, 0x6, 0x30, 0x4, 0x4, 0x6c, 0xb, 0xb, 0xc, 0xc, 0x36]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8, 0xf, 0xe, 0x2, 0x3, 0x47, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x4, 0x7, 0x7, 0x80, 0x4, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x3}, {0x7, 0x7}, {0x4}, {0x5, 0x2}, {0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x3}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x7}, {}, {0x7, 0x9}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x3, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x1, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x6, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b, 0x5, 0x3, 0x2fd, 0x8, 0x1, 0x100, 0x1]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x36, 0x0, 0x3ff, 0xe61, 0x0, 0x7f, 0x10]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x4, 0x9}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x5}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x3, 0xdf, 0x6, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4, 0x9, 0x8, 0x1, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x48, 0x36, 0x18, 0x4, 0x5, 0x16, 0x16, 0x6c, 0x6, 0x1b, 0x6, 0x0, 0x48, 0x6, 0x4, 0x3, 0x16, 0x4, 0x4d, 0x48, 0x12, 0x6, 0x6, 0x60, 0x6c, 0x6c, 0x1, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x100, 0x100, 0x9, 0xf, 0x4]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xb, 0x48, 0x1b, 0x0, 0xc, 0x60, 0x5, 0xb, 0xe, 0x53, 0x24, 0x50, 0x1b, 0x6, 0x42acac960eb9f4a5, 0x48, 0x6, 0xb, 0xa, 0x1b, 0x6, 0x2, 0x16, 0x48, 0x4, 0x30, 0x36, 0x6]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0xa}, {}, {0x5, 0x3}, {0x3, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x7, 0x5}, {0x5, 0x1}, {0x6}, {0x4}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x2, 0xa}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x5}, {0x2, 0x7}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x5}, {0x7, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x1, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x9}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdb}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x25}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.428825057s ago: executing program 0 (id=2367): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="7a2023e314c38b3b09a95c70d7f2dcdc415fa827efcb62088c5a39bcda357005f4777b1e6d15de83c97f86a45a4f029871f7ca08505b3b7424b1df3e4f02d65da83c6a31b475685f32a274aa811d94c288667bc318e9bf9539c18f64e783eda04662621b9a7067760a3a7b82b149a68c7587c2925436c3d8d581553235a1111013ec6a367b04f0cd675abdea5425ed025bfce90110f84d56a4b79baa149bb3f7f071b37a4fcacc1059e0ac89db101c88d99e8ae1a472cd108302f83a2b8f8d49ea57c34985b11a6547148529271036d32e93098308444437f726d93044b14683c75fbc36776e20e33dd7ba30fd8a", @ANYRES32=0x0, @ANYRESHEX=r3], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x8800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x202143, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000006c0)={'dvmrp1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x2, 0x8}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000040)=0xe7e, 0x4) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, &(0x7f0000000300), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4008840) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) write(r6, &(0x7f00000007c0)="f3dcf9657aea7328020b4a7abe15c22205b5fff833cbd7c3e24deabb6ed63d3ab70261e6ca67680fa9090c8986c2b79b1ef034c14829875a2c4163485d5f879470e600ab03f94341b7f75755445801aa2d533e1d35f8b9f1241e715479642b85d2a672c1602c9ddb549f243a70da27a56a238186785727c1ee2fd410c6d9b16f0b6aa9911179c56db592163f43dca8a2b9a856570a6c1d373244b2d4374c58a3efc04dfea8115be646542b5c4c94fd97a49fd459ca85c36ebee612985a987c0437839fcbc5faa6a83bda8a52b1134177ab1904567f7daff916174ef26659dfba73d855629368adeb6735f262f2da0a722f920cd067df", 0xf6) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7772ad514e3c214bc0b8ae3d981ba4f5dff47e02a23ef903b", @ANYRESDEC=r5, @ANYRES32=r7], 0x10448) mmap(&(0x7f0000cd1000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800a800000000e1ff00fbad00000083cf9e458f10f0fe000081abe4763b7261368c0407a40dd264da0eb9227e129f58b43a1378cddaeb29493f213662e8ed87f42029e24811346a14862f9737043fc676595bf72188a7f68cd21f7dc6ce2da623bd0a3648a07cda37e365c553236ea5a59e59fa49bd355ef285079c2ad4ba36fe2c90027074409c04aead2522cd8f296a48be422299af4406e43ec920a65d70b89b0bebe96874c3f991b6718d22d515603f95dbf4d1269f29bfbbab"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r11}, 0x18) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x6, 0x0, &(0x7f0000000100)=0xffffff83) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.38689828s ago: executing program 2 (id=2368): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x100, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0xa}, &(0x7f0000000140)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pwrite64(r1, &(0x7f0000001000)="2bfeaf946a94b20a34656b14bda1f928e37e5a3bb176dfbe7be5e2f4432d0c97a9049a113025194e5bd020078725b098b49a23c1c844d97b0931d76b00a4c602cea0c66f345ce8e8c2e2ab51e2d0a29db040982d3439c3f29264b77ef294e2ee756f43193456a8cfd8dcffaae5ead41c0095d6515755fb845cc98bd478803110c2acbe7702452f4fca45771c99f51b03219e2d", 0x93, 0xffffffff80000000) syz_emit_ethernet(0x3a, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa1408004503002c00000000002f907800000008ffff2f9710324484584490784107000075de8b1c7f39dd7f3731c0d0"], 0x0) 1.244910754s ago: executing program 5 (id=2369): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x0, 0x1}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000016c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x510, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x844) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r3, r2, 0x5}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1c, 0x16, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x28}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x6}, @ldst={0x2, 0x2, 0x4, 0xa, 0x4, 0x80, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @alu={0x7, 0x1, 0x5, 0x1, 0x2, 0x40, 0xffffffffffffffe7}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x25}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x52, &(0x7f0000000040)=""/82, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x1000, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3, 0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x3, 0xb, 0x5}, {0x5, 0x4, 0xe, 0x9}, {0x5, 0x1, 0xf, 0xb}], 0x10, 0x745}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0xd9, 0xab, &(0x7f0000000380)="095bae8cbde7e486ef02b63b72d8296e1658a68e4856ec17214009bef032d4c1ae146493fda7fd8f2616801435e329a14236ab1c40e4f8d45563f6f60f91355a5cdc3657789ed60d0009cefb2d0de1acd76d632336f62501d380a2a400a8a2fa88badbc8f1d553fc7d83ec8617636eeb3f7301a6ce84dc9723c9cd90d6469063b0921f6d0f818a16c59a05a6f9ffffff22c2eaa3f5bf1dbd292a7e03b706b9ea2fd3fb013f0e7b241b1fe912056f489e3fd615608aa28a7f5a9c2a8a19bd295207a40f7c94b57bd0dda5b9c4bb50d4fd1f369fa57aed5d458b", &(0x7f0000001740)=""/171, 0xfffffff8, 0x0, 0x85, 0x1000, &(0x7f0000000540)="9cafddc8527d1fc9734c5e36310d765e8ac2a65cb31b0ff606e28fc335b7c3be6dcefa44c140ec70994059983be659d464d3a7761a9dde9ecf0b6e7c7b077c7b163bba3a8662056f120bade2981351da4bb124681d0c92bf1f00fcf5abe4872001d0d2b13e6ce782bb84b4290fb03119a74f822c886c96fe7340c5e48af0967f53f4629349", &(0x7f0000000600)="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", 0x4, 0x0, 0x143}, 0x50) 1.23481619s ago: executing program 6 (id=2370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000002780)={'sit0\x00', &(0x7f0000002740)={@mcast1, @broadcast, 0x17, 0x17}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8, 0x8, 0x4, 0xdae7, {{0x1f, 0x4, 0x1, 0x15, 0x7c, 0x67, 0x0, 0x96, 0x29, 0x0, @multicast1, @multicast2, {[@noop, @rr={0x7, 0x17, 0x50, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0xa8, 0x3, 0xb, [{@local, 0xf}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@private=0xa010101, 0xaf7a}, {@rand_addr=0x64010102, 0x4}]}, @lsrr={0x83, 0x2b, 0x72, [@broadcast, @private=0xa010100, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @private=0xa010102, @private=0xa010100, @remote]}, @noop]}}}}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) r13 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000001a80)={'vxcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000040)={0x1d, r14, 0x1, {0x0, 0x1, 0x2}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=@newtaction={0x237c, 0x30, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{0x2368, 0x1, [@m_mirred={0x1d0, 0x1f, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x87, 0x5, 0x3, 0x6}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000000, 0x4, 0x3}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x8, 0x1a3, 0xbd2f}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5, 0x0, 0x8f, 0x10}, 0x2, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x3, 0xffff, 0x4}, 0x2, r14}}]}, {0x103, 0x6, "967d3673803b16e69659c21bdc922d2ced4e511aefc7af63cccd5977cc42141af26920cc0e8e772ab320dac64fa106f67936916456413c7bfefdeba67d20cbd526ad6b9a56684e6da313da13fd80f1ae4aa0a28f068ed01fc706f74cb40c787c42b5c223951da16cce502b9cc3f21ecca78dd1a5f97d71d98d4e2e9305a45185719e2f697cf665c839aeaee63dc351ec462b7a8877965d3dbff36e07ca7f2b4f91dae1bdcba17a828ad832c8bc13411f9ebc44c81be76efa492e85e574e7bfd3421b03bd8f2f8eb0ae7175020539970bd88fd58d5110f6c5c5c86297ef733903bbc317400713310af3a757030668e3477aa92cc85ac73448233d34738fdf99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x11c, 0x15, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0xd, 0x6, 0xb0cf, 0x2}, @private=0xa010102, @private=0xa010102, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x3, 0xffffffffffffffff, 0x4, 0x9}, @private=0xa010102, @broadcast, 0xffffff00}}]}, {0xa3, 0x6, "bdce05b873f46020cdc66ec072d70cec60d6d99ea24133cdeb6d868df6d649991c427530b7fb9a37692a3b834574a16cb6c7a29785f28525a7aa68be3d7f8f5d46be9e6a60e8ef8028b56752b5eadf7f3968ea45ed442a6ee2a2cb8b96098b4318ff0c65670019e298c1e9182757983ec3ea743ded7316bafcda31c7a6bfe655bb7db0301230856d6df077740766faefd5390d9be74d2d99971d3d27a6a035"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0x5c, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}]}, {0x26, 0x6, "ef9d706297dba2e8ab05b0f3201403ad7dff85f398e7eeae328dff571c0084c8db08"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x94, 0xa, 0x0, 0x0, {{0x7}, {0x4}, {0x6a, 0x6, "9ed7c608febbadd8987f282b896a02b38e9a1b71fd219fd8242f0e082c99682bd050700bf04a175a1a0f22f72fa89246325f1a2d912f4a9c7949ca3f830c7fc2a3935e95331f597741c8701a43b7776198ce770ecede3650e33964411462e2bb5a729b3580cf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x138, 0x12, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xfff, 0x4, 0x10000000, 0x9, 0xffff}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8864}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xdf, 0x6, "59c351d0ef669edc89d1661f1badc560fb1cb457ce165d543615c4d4c927db1afc38768710d6e327acad5d298e0d3be1186cf4015663eaec144276a9ca184c77caa6a8bc8ab2900c74894c563171730071275d5ef87976c77042d61706efb9c727baa40d8d8c8bd20abd2f99d2cdca78d3bc9a47f7ec33fe3c50642ab7e880e113eef379def8e2a2b0609a6c6cdfb44db8578d08462095d17e8eb0f704ad46f07b267898ce0b443fee315bea21be18e3474c512ba4db2d622a54ad442476d05bb1beebd430d91555f736c33bbb367aaf98ef415eee6a8fcb3fc3bc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x1e50, 0xc, 0x0, 0x0, {{0xb}, {0x1d68, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x3, 0x1ff, 0x188, 0x5, 0xfffffff0, 0x4000000, 0xffffffff, 0xffff, 0x9, 0x2, 0x0, 0x9, 0xffffffff, 0x0, 0x4c97, 0x9, 0xfffffc01, 0x80000000, 0x5, 0xec0, 0x5, 0x7, 0x5, 0x8, 0xf0, 0x1, 0x5, 0x9, 0x7, 0x5, 0xb, 0x0, 0x3, 0x9, 0x2, 0x1, 0xfffffffa, 0x0, 0xe0000000, 0x7, 0x1611d655, 0xfffffb9f, 0x6, 0x200000, 0x80000001, 0x7, 0x1, 0x10001, 0x8813, 0x7, 0x0, 0x8, 0x30000, 0x0, 0x2, 0x200, 0x4, 0x7, 0xfffffe00, 0x3, 0x82, 0x0, 0x0, 0x0, 0x1, 0x17b9, 0x80000001, 0x88, 0x6, 0x2, 0x1, 0x8, 0x7ff, 0x5, 0x390f, 0x7fff, 0x5, 0x9a72, 0x937, 0x5, 0x3, 0xfff, 0x7, 0x4, 0x6, 0x3ff, 0x9, 0x3, 0x0, 0x2, 0x1, 0x8000, 0x5, 0x7ff, 0x5, 0x0, 0xd, 0x8, 0x1, 0x8, 0x2, 0x1, 0x9, 0x101, 0x7f, 0x1, 0x5, 0x6, 0xffffffff, 0x8, 0xe53, 0x1, 0x4, 0xfffffffe, 0x3, 0x5, 0xe, 0x5, 0x7, 0x8, 0x0, 0x2, 0x40, 0x7, 0x2, 0x3945, 0x5e, 0x3, 0x0, 0xfff, 0x6, 0x7, 0x80000001, 0x10000000, 0xbd, 0x3, 0x80000000, 0x6, 0x200, 0x8, 0x6, 0x9, 0x4, 0x5, 0xff, 0x2, 0x7fff, 0x10001, 0x2, 0x2, 0x7fffffff, 0x5, 0x8, 0xfffffffa, 0x81, 0x8, 0x1, 0xd, 0x1, 0xfffffffb, 0x8b, 0x80000001, 0xf, 0x397, 0x4, 0xe, 0x8, 0x8, 0x5, 0x4, 0x6, 0x6, 0x6, 0x3, 0x8, 0x6, 0x2, 0xffffffff, 0x1, 0x9, 0x3ff, 0x0, 0x1, 0x9, 0x1ff, 0x5, 0x1, 0x68, 0x6e, 0x5, 0xf, 0x1, 0x1ff, 0x67c6, 0x1, 0x49, 0x9, 0x8, 0x5, 0x6, 0x81, 0xf, 0x6, 0x2, 0x1000, 0x5, 0x5, 0xf, 0x8, 0x3, 0x3, 0x10001, 0x0, 0x8, 0x2, 0x8, 0x2, 0x10001, 0x5816, 0x1, 0xc9, 0x2, 0x1, 0x0, 0x4, 0x1ff, 0x7f, 0x91c, 0x7, 0xc, 0x8001, 0xd, 0x9, 0x5, 0xb, 0xfffffff9, 0x7ff, 0x8, 0x4, 0x8000, 0xfffffffa, 0xffffff98, 0x1, 0x81, 0xda, 0x4, 0x6, 0x1, 0xff, 0x7, 0x0, 0x0, 0xa3b2, 0xfffffff9, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x235}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x1, 0x34, 0x1ff, 0xe2c, {0xd, 0x0, 0x3, 0x8, 0x1, 0x9}, {0x7, 0x0, 0x6, 0x5e0f, 0x101, 0xd}, 0x10001, 0xfe, 0x400}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x10000000, 0x9, 0x1000, 0x4, {0x7, 0x1, 0xa000, 0x7, 0x3ff, 0x4}, {0x2, 0x1, 0x9e, 0x100, 0x4, 0xffff574b}, 0x2, 0x1ff, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xb57, 0x10000, 0x3, 0x6, 0x7, 0xde8, 0xd6, 0xfffffffc, 0x3, 0x9, 0xb, 0x5, 0x6, 0x4, 0x9, 0xe6aeff0, 0x8, 0x8, 0xb, 0xfffffffa, 0x1000, 0x5, 0xf, 0x10000, 0x4, 0x0, 0x1, 0x46, 0x4, 0x9, 0x1, 0xdbf, 0x101, 0x0, 0x100, 0x79d7, 0x4, 0x8, 0x0, 0x0, 0x6, 0x1ff, 0x9, 0x5, 0x9, 0x0, 0xeea, 0x0, 0x2, 0xc53d, 0x7, 0xffffffff, 0x2, 0x400, 0x9, 0x3, 0x6b28, 0x7, 0x1, 0x5, 0x8, 0x400, 0x0, 0x3, 0x10001, 0x4, 0x6, 0x7f, 0x1685, 0x3, 0x1, 0x1, 0x6, 0x4, 0xfff, 0xcb48, 0x80, 0x0, 0xfffffff9, 0xfffff000, 0x10000, 0x80000001, 0x9, 0xfffffff8, 0x2, 0xe5b, 0x400, 0x7, 0x5, 0x87c8, 0xa, 0x0, 0xf, 0x100, 0x1, 0x7, 0x2, 0xffff, 0xe, 0x1, 0x7, 0xb, 0x7ff, 0x6, 0xbb, 0x8, 0x7, 0x9, 0x6, 0x3, 0x372, 0xffff, 0x97b0, 0x1000, 0xa4, 0x7, 0x3, 0x8001, 0x800, 0x3, 0x4fa2, 0x1, 0x4, 0x1, 0x7fffffff, 0x9, 0x80000000, 0x9, 0x10, 0x7, 0x400, 0x6, 0x0, 0x200, 0x7, 0x3, 0x8, 0x100, 0x3, 0x9, 0x5, 0x5, 0xe, 0x7fff, 0x8, 0x6d, 0xc, 0xfff, 0x0, 0xf1bd, 0xc6, 0xfff, 0x7, 0x5, 0xa4, 0x4, 0xb5e, 0xd578, 0x6, 0x4, 0x2, 0x0, 0x7fffffff, 0x6, 0x5, 0x9, 0xffff, 0x81, 0x0, 0x3, 0x57, 0x0, 0xed, 0x12, 0x80, 0x6, 0x7, 0xffffffff, 0x8e, 0xbb5, 0xe70, 0xff23, 0x80, 0x5, 0xa372, 0x3, 0x1ff, 0x3, 0x0, 0x3e, 0x400, 0x1, 0x1, 0xfffffffc, 0x4, 0xfffffffa, 0x8, 0xc700000, 0xcb, 0xff, 0x1400, 0x80010000, 0x1c2, 0x40, 0x3, 0x5, 0xa5f, 0x6, 0x1, 0xfffffffb, 0x7fff, 0xfffffeff, 0x7, 0x6, 0x5, 0xffff, 0x0, 0xfffffffb, 0x1000, 0x1000, 0x3, 0x9, 0x401, 0x0, 0x90, 0xeb, 0x4, 0x6, 0x2, 0x9, 0x6, 0x1000, 0x7fff, 0x8001, 0x63, 0xfffffffe, 0xfffffffc, 0x10001, 0x1, 0x9, 0x6, 0x0, 0x3, 0xfff, 0x80000001, 0x3, 0x0, 0x7, 0xffffffff, 0x8, 0x400, 0x6, 0xffffffff, 0x1, 0x5]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x10000, 0x9, 0x1, 0x9c6, 0x6, 0x2, 0x7, 0x7, 0x200, 0x0, 0x4, 0x8001, 0xfff, 0x9, 0x6, 0x7, 0x1, 0x9, 0xcc, 0x3, 0x2, 0x6, 0xfffff5c7, 0x4, 0x0, 0x2, 0x6, 0x7fffffff, 0x6, 0x84, 0x0, 0x4, 0x8, 0x9, 0x3, 0xe6c, 0xf58, 0x3ff, 0xff, 0xf85, 0xbb35, 0xfff, 0x9, 0x2, 0x7, 0x7, 0x81, 0xd6, 0xffff, 0x800, 0x80000001, 0x9, 0x0, 0x1, 0x0, 0x3, 0x8, 0x81, 0xffffffff, 0xa1b, 0x7, 0xba, 0x4, 0x101, 0xffff, 0xa, 0x1, 0x8, 0x9, 0x8, 0xde, 0x40, 0x9, 0x6, 0x9, 0x0, 0xa, 0x7, 0x9da, 0x67a0, 0x6, 0x74c7, 0x6, 0x7, 0x3, 0x8, 0x562b27f3, 0x2, 0x4, 0xfffffff8, 0x3, 0x7fff, 0xa, 0x65, 0x7, 0x336ab84a, 0x7, 0xfffffffb, 0x2, 0x6, 0x7, 0x0, 0x80, 0x0, 0x8, 0x61c, 0xfffffc01, 0x5, 0x0, 0x9, 0x6, 0x2, 0x3, 0x3, 0x54, 0x40, 0x2, 0x4, 0x10001, 0x3, 0x1000, 0x6, 0x8, 0x7, 0x5, 0xc, 0xa, 0x0, 0xe, 0x90, 0xd, 0x8001, 0xd, 0x7, 0x4, 0x0, 0x6, 0x8000, 0x5, 0x3, 0x6, 0x9, 0x10, 0xb8c5, 0x6, 0x8, 0x800, 0xa6000000, 0x95b, 0x6, 0x6, 0x69f, 0x38c, 0xd07d7cb, 0xe9, 0xfffffffd, 0xffff5f3e, 0xc9d9, 0x5, 0x401, 0x2, 0x1b7a, 0x0, 0x6, 0xfffff6de, 0x7b8, 0x5, 0xfffffffa, 0x3, 0x1, 0xffffffff, 0x18f9, 0xb, 0x0, 0x101, 0x5, 0x5, 0x3279, 0x7, 0x9f, 0x9, 0xd, 0x58, 0x7, 0x2, 0x9, 0x0, 0x2cd, 0x0, 0x6, 0x5, 0x9, 0x7, 0xfff, 0x5, 0xfffffff9, 0xfff, 0x800, 0x7f, 0xf7, 0x9f5, 0xfff, 0x6, 0xb14f, 0x3557, 0x2, 0xc, 0x3, 0x7230, 0x7fff, 0x6, 0x3, 0x3ff, 0x8, 0x1ff, 0xd9a, 0x8, 0x10, 0x9, 0x5, 0x5, 0x100, 0xfffffffc, 0x8, 0x40, 0x1, 0x6c8b, 0x0, 0x8000, 0x7, 0x4, 0x1, 0x7ff, 0x8, 0x6, 0x3, 0x7fff, 0x81, 0xb797adda, 0xdf, 0x8, 0x1, 0x7, 0x9, 0x5, 0xf, 0xa, 0xde, 0x2, 0x80, 0x14b0d0fb, 0x200, 0x6, 0x4, 0x788]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4c, 0x800, 0x37, 0x100, 0x5, 0x7, 0x2784, 0x9, 0x3, 0x9, 0x101, 0xffffffff, 0xf, 0x900, 0x7f, 0x0, 0x9, 0x4, 0x1, 0x7, 0x6, 0x8, 0x4, 0x6, 0x101, 0x9, 0xb, 0xfff, 0x29a, 0x40, 0x43c, 0x7f, 0x3, 0x2, 0x9, 0x6, 0x8, 0x1a, 0x3ff, 0x6, 0x0, 0x4, 0x3, 0x6e09, 0x4, 0x6, 0x100, 0x122cf720, 0x5, 0x5, 0x0, 0x1, 0x0, 0x10000, 0x431, 0x6, 0x8, 0xb9, 0x9, 0xfffffffc, 0x7, 0x9, 0xaf, 0x7fffffff, 0x0, 0xfffc0000, 0x401, 0xf50, 0x7, 0xcf9c, 0x92f4, 0x0, 0x9, 0x708, 0x2, 0xfffffffc, 0x100, 0x2000, 0x1, 0x81, 0x800, 0xfffffffa, 0x9, 0x100, 0x6, 0x2, 0x0, 0x5, 0x4, 0x6799, 0xe9, 0x0, 0x8, 0x6, 0x3, 0x4, 0x0, 0x0, 0x8, 0x3, 0x7, 0x6, 0xfff, 0x0, 0x9c, 0x90000, 0x7, 0x6bc, 0x917, 0x7, 0x6, 0x8, 0xa03, 0x7, 0x80000000, 0x1, 0x8, 0x1, 0x8, 0xa456, 0xfff, 0x2, 0x1000, 0xd, 0xe, 0x6, 0xfff, 0x10001, 0x5, 0xffffffff, 0xe, 0x23c, 0x6, 0x3, 0xfffffff7, 0x8000, 0x2ce, 0x3, 0x7, 0x2, 0x97, 0x4, 0x8, 0x8000, 0x3, 0x80, 0x6, 0xb8, 0xfffffffa, 0x381f, 0x0, 0x62, 0x7, 0x8f, 0x4, 0x4, 0xfffffffa, 0x8000000, 0x7f, 0x7, 0x7, 0xffff7fff, 0x14, 0x65, 0xff, 0xd376, 0x8, 0x3, 0x7fffffff, 0x386, 0x0, 0x401, 0x6, 0x33cf, 0x5, 0x3, 0x9d, 0x0, 0x3, 0x7, 0x400, 0x3, 0x800, 0x4, 0x6, 0x80000000, 0x3, 0xfffffff8, 0x9, 0xfffffffe, 0x9, 0x2400000, 0x1, 0xa, 0x726, 0x8, 0xc, 0x5, 0xbf72, 0xede, 0x2, 0x37a06fae, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x10001, 0x0, 0x1, 0x2, 0x5, 0x3ff, 0x4b, 0x5, 0x9, 0x6, 0x9, 0x9, 0x7, 0x40, 0xa, 0x8, 0x1, 0xfffeffff, 0x400, 0x817, 0x1, 0x7, 0x4, 0xffffc487, 0xffffffff, 0xb7, 0x4, 0x5, 0x100, 0xa, 0x1, 0x7, 0x7, 0x3, 0x5, 0x800, 0xfff, 0x3ed6, 0x8, 0xcd, 0xd, 0x0, 0x7, 0x9, 0x3, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x7f, 0x3, 0x35, {0x2, 0x1, 0x7, 0x7, 0x1, 0x6}, {0x4, 0x1, 0x1, 0x8001, 0x6, 0x9}, 0x7fff, 0x814, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x9a0, 0x1, 0xfffff001, {0x10, 0x2, 0x6, 0x5, 0x3, 0x5}, {0x7, 0x0, 0x6, 0x2, 0x2}, 0x100, 0x34e5682a, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x2, 0x8, 0x200, 0x3, 0xb, 0x4, 0x63a0, 0x1ff, 0x6, 0x2, 0x5, 0x1ff, 0x6, 0x100, 0xf0d, 0x1, 0x6f000000, 0xfffffff9, 0x8001, 0xfffffffc, 0x8000, 0x6, 0xffffffff, 0x7, 0x6, 0x800, 0xd5, 0x7fff, 0x6, 0x5, 0x7, 0xe, 0x4f8b21d5, 0x4, 0x4, 0x5, 0xc, 0x8, 0xe2, 0x3, 0x53f0, 0x6, 0x4, 0x8000, 0x7, 0x6, 0x1, 0x8, 0x2, 0x8, 0xb4, 0x2, 0x76, 0x4af, 0x9, 0x3ff, 0x5, 0x5, 0x6, 0x3, 0xc0000000, 0xffffffff, 0x6, 0x7, 0x2, 0x6, 0x101, 0x75, 0x7, 0xd, 0x7f, 0x3, 0x401, 0x4, 0x1, 0x9, 0x9c46, 0xe, 0xf3, 0x0, 0xfffffff2, 0x400, 0x6, 0x2, 0x2, 0x8, 0xb, 0x9, 0x40, 0x3, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x9, 0x9, 0x1, 0x5, 0x7e58, 0x0, 0xe, 0x5e, 0x9, 0x0, 0x2, 0x401, 0x10, 0x10, 0x10000, 0xd, 0xfffffffc, 0x0, 0x80000000, 0x4, 0x9, 0x101, 0x6, 0x4194466b, 0xeef, 0x1, 0x0, 0xe, 0x1ff, 0x8, 0x1, 0xfa7, 0x80000000, 0x7ff, 0x0, 0x2dd6, 0xfff, 0xffff9a87, 0xfff, 0x8, 0x62, 0x7f, 0x8, 0x1, 0x6, 0x2, 0x1000, 0x3, 0x0, 0xa2f, 0x6, 0x8, 0x6, 0x1, 0x8000, 0xfffffffd, 0x3, 0xf, 0xffffffc0, 0x8, 0x1, 0x60ae, 0x6f0000, 0x2, 0x8, 0x6, 0x5, 0xd, 0x4, 0x80000001, 0x6, 0x10, 0x0, 0x6, 0x9, 0x5, 0x9, 0x8, 0x7, 0x4, 0x56b, 0x9, 0x6, 0x9, 0xfffffffd, 0x7b5, 0x80000001, 0x2, 0x6, 0x7, 0x2, 0x8, 0x0, 0x3, 0x1, 0xfffffffc, 0x20000000, 0x7fff, 0x8, 0xfffffffd, 0x2, 0x10000, 0x6, 0xc0, 0x1, 0x2, 0x5144, 0x9, 0x4, 0x9, 0x7, 0x5, 0x1, 0x0, 0x400000, 0xffff, 0x1, 0xfffff5d1, 0x6, 0x1, 0x7, 0x7fffffff, 0x1, 0xd1e, 0x7f, 0x10, 0x2, 0x99f3199c, 0x9, 0x8, 0x2, 0x10001, 0x202, 0x55d, 0x80, 0x0, 0xde, 0x4, 0xfff, 0x80000000, 0x4, 0x9, 0x4, 0x5, 0x5, 0x101, 0x1ad, 0x5, 0x4, 0x1, 0x5, 0x3, 0x6, 0x1ff, 0x3, 0x8001, 0x7, 0x6]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x200, 0xe50, 0x8, 0x1, 0x200, 0x7, 0x6, 0x1, 0x5, 0x5, 0x2, 0x1, 0xfffffd21, 0x7, 0x6, 0x70000000, 0x0, 0x80, 0x3, 0x8, 0x101, 0x4, 0x101, 0xffff0000, 0x4, 0x1, 0x2cea, 0x5, 0x8, 0x3, 0x1, 0x3, 0x9, 0x1, 0x0, 0xfffff02c, 0x7, 0x9, 0x6, 0x9e59, 0x5, 0x400, 0xa4, 0x1, 0x1, 0xfa, 0xfffffffb, 0xb, 0xca000000, 0x6, 0x1, 0x93f, 0x0, 0xc, 0x9, 0x1, 0xfffffff7, 0x5, 0x7, 0x3, 0xffff0000, 0x81, 0xfffffffb, 0x6, 0x3, 0x743b, 0x40, 0x9, 0x9, 0x9, 0x9, 0x2, 0x7fffffff, 0xe, 0x8, 0x7fff, 0x4, 0x800, 0xb, 0x8, 0x4, 0xafe, 0x0, 0x6, 0x100, 0x401, 0x10000, 0x3, 0x10000, 0x9, 0x100, 0x4, 0x9, 0x400, 0xfff, 0xf7, 0x10fa, 0x80000001, 0x87f, 0x7, 0x5, 0x7, 0x5, 0x3, 0xfffffffe, 0x9, 0xb62, 0x38e, 0xc, 0x9, 0x80000000, 0xa8, 0x5, 0x2, 0x2, 0x4, 0x9, 0x8, 0x77, 0x4, 0xf8, 0x9, 0x7df8, 0x1000, 0xf336, 0xa7, 0xffff0001, 0x2, 0x3, 0x0, 0x6, 0xffffffff, 0x7ff, 0x2, 0x3, 0x7, 0x4, 0x2, 0x80000000, 0x7, 0x80000000, 0x2, 0x0, 0x400, 0x8000, 0x6, 0x81, 0x5, 0xb, 0x579a52eb, 0xff, 0x5, 0x80, 0x4, 0x10, 0x5, 0x8001, 0x0, 0x6eed, 0x5, 0x7fffffff, 0x8, 0x2, 0x1000, 0x2, 0x4e000000, 0x7ff, 0xfffffffc, 0x5, 0x7e2, 0x1, 0x4d6c1738, 0x81, 0x0, 0x2, 0x1, 0x27, 0x6, 0x8bf, 0xd1e, 0x1, 0xfffff801, 0x5, 0x9, 0xd0000000, 0x501c, 0xffffffff, 0x0, 0xdf5f, 0x7f, 0x10000, 0x7, 0x6, 0x9, 0x7f6a, 0x1ff, 0x18dc, 0x6, 0x8, 0x6, 0x1, 0x1000, 0x0, 0x7fff, 0x7fff, 0xc0, 0xb9c, 0x6, 0x41, 0x1, 0x9, 0x6, 0x7ff, 0x5, 0x2, 0x69ba, 0x8, 0x3ff, 0x1, 0x4, 0x7700, 0x900, 0xfffffff9, 0x9, 0x4718, 0x80, 0xc, 0x8, 0x4, 0x7f, 0x9, 0x9, 0x7, 0x0, 0x7a5, 0xffff, 0x3, 0x6, 0x0, 0x6, 0x3, 0x2, 0x6, 0xfffffffc, 0x7, 0xfffff929, 0x3b5f, 0xd1, 0x5, 0x6, 0x1, 0x4, 0x8, 0xe, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x8000, 0x8, 0x5, 0x7, 0x8, 0xa4e8, 0x8, 0x101, 0x87e6, 0x8, 0xac9d, 0x3, 0xe38, 0x1, 0x0, 0x9, 0x0, 0x95, 0x6edf, 0xffffff81, 0x81, 0x1, 0x5, 0x65d2, 0x8, 0x7, 0x8, 0x6, 0x5, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x80000000, 0x1, 0x5, 0x10001, 0x7, 0x1b, 0x5, 0x3, 0x1, 0xbdc, 0xc2, 0x101, 0x5, 0x4, 0x401, 0x5, 0x6, 0x80, 0xffff9db9, 0x50ea, 0x8, 0x64ea, 0x8, 0xa6, 0x40, 0xd, 0x834c, 0x0, 0xbd, 0xfffffffe, 0xd01d, 0xca24, 0xe96, 0x6, 0x7, 0x3, 0x1, 0x7fc, 0x1, 0x3, 0xa, 0x3, 0x5, 0x1, 0xff, 0xfffffffb, 0xdf, 0x2, 0x10000, 0x7, 0xfffffff7, 0xff1, 0xe, 0x7fff, 0xbec, 0x690, 0xb, 0x6, 0x6, 0x5c, 0x7, 0x81, 0x77b, 0x8, 0x5, 0x3, 0x92, 0x6, 0x3, 0x2, 0x1, 0x0, 0x8, 0x9, 0x2, 0x4, 0x10000, 0x7, 0x38, 0x3, 0x1, 0x7, 0x1, 0x7ff, 0x45, 0xc278, 0x0, 0x1714, 0x7f, 0xf5a0, 0x4, 0x40, 0x2, 0x6, 0x0, 0x8, 0x86a, 0x5, 0x27218000, 0x40, 0xe53, 0x400, 0x0, 0x7f, 0x7ff, 0xb, 0x0, 0x2, 0x9, 0x200, 0x0, 0x6, 0x7, 0x10, 0x4, 0x4, 0x0, 0xff, 0x9, 0xe3, 0x3820, 0x1c, 0x0, 0x6, 0x3, 0x3b, 0x5, 0x0, 0x5, 0x5, 0x7, 0x4, 0x7, 0x800, 0x5, 0xc005, 0x9, 0xfffffff9, 0x4, 0x7ff, 0x10001, 0xffff8001, 0x1e0, 0x5, 0x3, 0x7, 0x4, 0x6, 0xe, 0xfffffffe, 0x7, 0x9, 0x37, 0x80000001, 0x3cb, 0xb, 0x2, 0x4, 0x4, 0x9, 0x4, 0x6, 0x0, 0x3f, 0x0, 0xe7, 0x103000, 0x7fffffff, 0x7, 0x40, 0x4b1, 0x2, 0x9, 0x9f, 0xfffffff7, 0x3, 0x401, 0x9, 0x6, 0x5, 0x38, 0x3, 0x2, 0x6fc1, 0xfff, 0x4, 0x8, 0x0, 0x364922ba, 0xd67, 0x0, 0x9, 0x0, 0x200, 0x4, 0x5, 0xce, 0x82e6, 0xe40, 0x8, 0x2, 0x180, 0x7, 0x3ff, 0x5, 0x3, 0x3, 0xfffffffe, 0x81, 0x5, 0x4, 0xfffffffd, 0x2, 0x8, 0x1, 0x8114, 0x6, 0x3, 0x10, 0x1, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0xbe, 0x6, "ac9623157d71c0348ee63e54be31bdae125ff87903f1353903a205df33a07a3b058e80d3794e3f4468ef6210b4a8ccd35e00428496e5856e07390a27b06b90faaff47b1f415b5176b58617c0ab862d02824cf5fe018c0757a8c11f8db851409e8c3673c8cb38c091bf57b6baf00d9344681662d14a7f8ae9101bfc782619888b462d7583fad2256d86546e43c1b0490648bf19dbc5599b59a8a3deebfa3d9b2d4fb982f373b332e9d5923f03416c0ff0764927e9dff687f7b304"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x237c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c810) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0) 1.090927283s ago: executing program 5 (id=2371): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0x0, 0x201}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) 1.01707921s ago: executing program 0 (id=2372): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) (async) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$kcm(0x10, 0x2, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) setsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r7, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r7, 0x1) (async) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040) (async) recvfrom(r2, 0x0, 0x600, 0x0, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x3c, 0x68, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x2, 0x0, 0x8}, [@NHA_GROUP={0x1c, 0x2, [{0x0, 0x6}, {0x1, 0x2}, {0x0, 0xb1}]}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x804c054) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r10, 0x103, 0x28f5c27, &(0x7f0000000000)=0x3, 0x4) 818.411092ms ago: executing program 5 (id=2373): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)="580211727d948e207049b89ab9d029c492590ac4244087ab20bf360cdbcbb84bbc032c1b40e5ae71fd4ae5ba44a33ce83683c5e0a078816479b03af964b64baea0d7b97cc8a94f207d05b7f7631e4648d560c5490100ffffffffffff59f579af8e3a42b12e129b43fd0a9540026128f8a15ab2d918626cfbde2f527dad3a755f2030130286d5c2f1281ceee9c383f615f1285871e44d416a3616c8caa6df485e82df557d696d9a8f07f713f17bb6cf81e8", 0xb1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x5e20, 0x0, @private0, 0x80000003}, 0x1c, &(0x7f0000000800)}}], 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x70, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@nested={0x43, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x401}, 0x8) 730.815741ms ago: executing program 0 (id=2374): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) accept$alg(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001600011c00000000fbdbdf250a0000001800ca80140006"], 0x2c}}, 0x40) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r4, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) shutdown(r2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 619.753949ms ago: executing program 6 (id=2375): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x1, 0x9, 0x40, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x5b}, @generic={0x5, 0x3, 0x5, 0x2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0x0, 0x1, 0x4, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) sendto$inet6(r8, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000004b80)) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) 481.083734ms ago: executing program 5 (id=2376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'wlan1\x00', 0x8000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x40, 0x80, 0xfff, 0x1d8c, {{0x14, 0x4, 0x2, 0x1f, 0xffffffffffffff73, 0x66, 0x6, 0x1, 0x4, 0x0, @empty, @empty, {[@timestamp={0x44, 0x18, 0x8, 0x0, 0xa}, @lsrr={0x83, 0x1f, 0xec, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @remote, @multicast1, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1}, 0x33) 373.662665ms ago: executing program 2 (id=2377): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000002) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x14f2b}]}, 0x38}}, 0x0) 350.162372ms ago: executing program 5 (id=2378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x41f, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000f00000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) 6.089629ms ago: executing program 1 (id=2379): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff8, 0x40000000}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 1.088865ms ago: executing program 5 (id=2380): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet(0x2, 0x4, 0xfffffffc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x2d0, 0x120, 0xffffffff, 0x2d0, 0x0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x1}}, @common=@addrtype={{0x30}, {0x4, 0x141, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @icmp_id=0x66, @port=0x4e21}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, '0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8dfe, @local}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x0, 0x81, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x20, r5, 0x1, 0x80, 0x25dfdbfe, {0xf, 0x0, 0x2d}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x0) kernel console output (not intermixed with test programs): 11000] ? rcu_is_watching+0x15/0xb0 [ 251.504416][T11000] ? do_syscall_64+0xbe/0x3b0 [ 251.504439][T11000] do_syscall_64+0xfa/0x3b0 [ 251.504456][T11000] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.504472][T11000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.504489][T11000] ? clear_bhb_loop+0x60/0xb0 [ 251.504511][T11000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.504527][T11000] RIP: 0033:0x7f220b98e9a9 [ 251.504544][T11000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.504560][T11000] RSP: 002b:00007f220c727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.504579][T11000] RAX: ffffffffffffffda RBX: 00007f220bbb5fa0 RCX: 00007f220b98e9a9 [ 251.504592][T11000] RDX: 0000000000004800 RSI: 0000200000001200 RDI: 0000000000000003 [ 251.504604][T11000] RBP: 00007f220c727090 R08: 0000000000000000 R09: 0000000000000000 [ 251.504616][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.504627][T11000] R13: 0000000000000000 R14: 00007f220bbb5fa0 R15: 00007ffdeb1271e8 [ 251.504659][T11000] [ 252.099811][T10997] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 252.137583][T11007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 252.398258][T11017] netlink: 'syz.0.1370': attribute type 4 has an invalid length. [ 252.813331][T11025] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1373'. [ 253.017650][T11035] netlink: 'syz.3.1373': attribute type 8 has an invalid length. [ 253.117031][T11037] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1374'. [ 253.196006][T11035] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 253.206024][T11035] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1373'. [ 253.236367][T11027] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1374'. [ 253.265421][T11027] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 253.282672][T11004] lo speed is unknown, defaulting to 1000 [ 253.499686][T11049] veth5: entered promiscuous mode [ 253.533029][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1378'. [ 253.571145][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 253.613041][T11051] netlink: 'syz.4.1378': attribute type 3 has an invalid length. [ 253.630123][T11051] netlink: 'syz.4.1378': attribute type 2 has an invalid length. [ 253.654747][T11051] netlink: 'syz.4.1378': attribute type 2 has an invalid length. [ 253.966474][T11070] openvswitch: netlink: IP tunnel dst address not specified [ 254.908782][T11095] syzkaller0: entered promiscuous mode [ 254.929497][T11095] syzkaller0: entered allmulticast mode [ 254.945375][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.257715][T11105] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 255.435317][T11113] sctp: [Deprecated]: syz.2.1396 (pid 11113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.435317][T11113] Use struct sctp_sack_info instead [ 256.229900][T11151] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 256.469596][T11164] __nla_validate_parse: 6 callbacks suppressed [ 256.469622][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1409'. [ 256.662970][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1411'. [ 256.728699][T11169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1413'. [ 256.832581][T11178] openvswitch: netlink: Key type 16144 is out of range max 32 [ 256.881900][T11163] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 256.945390][T11163] bond4: (slave vcan0): Error -95 calling set_mac_address [ 256.977612][T11186] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1416'. [ 256.999288][T11185] IPv6: Can't replace route, no match found [ 257.152854][T11190] bond0: (slave dummy0): Releasing backup interface [ 257.169942][T11190] bridge_slave_0: left allmulticast mode [ 257.192874][T11190] bridge_slave_0: left promiscuous mode [ 257.201735][T11190] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.238751][T11190] bridge_slave_1: left allmulticast mode [ 257.266687][T11190] bridge_slave_1: left promiscuous mode [ 257.282867][T11190] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.362269][T11200] netlink: 'syz.1.1420': attribute type 2 has an invalid length. [ 257.372792][T11190] bond0: (slave bond_slave_0): Releasing backup interface [ 257.389114][T11201] netlink: 'syz.1.1420': attribute type 2 has an invalid length. [ 257.402026][T11190] bond0: (slave bond_slave_1): Releasing backup interface [ 257.488613][T11190] team0: Port device team_slave_0 removed [ 257.539733][T11190] team0: Port device team_slave_1 removed [ 257.550870][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.562184][T11190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.587995][T11190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.598652][T11190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.640651][T11190] bond1: (slave gretap1): Releasing active interface [ 257.674767][T11190] team0: Port device bridge4 removed [ 257.682486][T11190] bond2: (slave bridge5): Releasing backup interface [ 257.689919][T11190] bridge5: left promiscuous mode [ 257.731210][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'. [ 257.751647][T11190] bond3: (slave gretap2): Releasing active interface [ 258.021684][T11195] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 258.484953][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 259.842164][T11277] tipc: Enabling of bearer rejected, failed to enable media [ 259.952254][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1442'. [ 260.007497][T11282] geneve2: entered promiscuous mode [ 260.012947][T11282] geneve2: entered allmulticast mode [ 260.279069][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1445'. [ 260.350172][T11298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1447'. [ 260.365899][T11298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1447'. [ 260.442754][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.450668][T11302] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.497666][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.532580][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.567191][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.605242][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.619575][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.642813][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.685156][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.697904][T11299] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.735329][T11303] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 260.969484][T11316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.141182][T11323] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 261.157978][T11323] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 261.299070][T11291] lo speed is unknown, defaulting to 1000 [ 261.740358][T11333] __nla_validate_parse: 3 callbacks suppressed [ 261.740377][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 262.440865][T11355] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.655750][T11310] lo speed is unknown, defaulting to 1000 [ 263.555202][T11392] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1466'. [ 263.566051][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1466'. [ 263.579674][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1466'. [ 263.605101][T11392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 263.852753][T11314] lo speed is unknown, defaulting to 1000 [ 264.806841][T11193] Set syz1 is full, maxelem 65536 reached [ 265.783034][T11435] veth3: entered promiscuous mode [ 266.184831][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 266.275639][T11459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.350577][T11443] syzkaller1: entered promiscuous mode [ 266.361203][T11443] syzkaller1: entered allmulticast mode [ 266.412937][T11464] validate_nla: 8 callbacks suppressed [ 266.412956][T11464] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 266.870911][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1485'. [ 266.939092][T11474] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1484'. [ 267.104520][T11485] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1487'. [ 267.207334][T11497] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1489'. [ 267.371080][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1487'. [ 267.486045][T11511] netlink: 'syz.0.1492': attribute type 2 has an invalid length. [ 267.541131][T11515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.649809][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 267.667520][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 267.739808][T11519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1493'. [ 268.148077][T11507] lo speed is unknown, defaulting to 1000 [ 268.188477][T11535] netlink: 'syz.2.1499': attribute type 21 has an invalid length. [ 268.234406][T11535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1499'. [ 268.950683][T11564] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1506'. [ 269.312726][T11541] lo speed is unknown, defaulting to 1000 [ 269.905023][T11589] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 270.065240][T11592] bond4: entered promiscuous mode [ 270.085556][T11592] bond4: entered allmulticast mode [ 270.091185][T11592] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.223286][T11594] bridge7: entered promiscuous mode [ 270.235555][T11594] bridge7: entered allmulticast mode [ 270.299186][T11594] bond4: (slave bridge7): Enslaving as a backup interface with an up link [ 270.311288][ T7462] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 270.385784][T11548] lo speed is unknown, defaulting to 1000 [ 270.446249][ T7452] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 272.485509][ T7180] lo speed is unknown, defaulting to 1000 [ 272.491287][ T7180] syz0: Port: 1 Link DOWN [ 272.545638][ T7463] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.570818][ T5926] lo speed is unknown, defaulting to 1000 [ 272.603282][ T7463] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.629882][ T7463] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.686437][ T7463] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.623240][T11618] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1521'. [ 273.653791][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 273.737664][T11618] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 273.808195][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1521'. [ 273.820461][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 274.290693][T11638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.305462][T11638] bond0: (slave rose0): Enslaving as an active interface with an up link [ 274.531723][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 274.649477][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1531'. [ 274.700145][T11658] tipc: Enabled bearer , priority 0 [ 274.709770][T11658] syzkaller0: entered promiscuous mode [ 274.720487][T11658] syzkaller0: entered allmulticast mode [ 274.736329][T11660] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 274.749834][T11658] tipc: Resetting bearer [ 274.788561][T11658] tipc: Enabling of bearer rejected, already enabled [ 274.833013][T11658] tipc: Resetting bearer [ 274.940913][T11658] tipc: Disabling bearer [ 274.978935][T11676] netlink: 'syz.3.1536': attribute type 3 has an invalid length. [ 274.987931][T11676] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1536'. [ 275.126602][ T7180] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 275.178120][ T7180] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0 [ 275.267454][ T7180] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 275.648542][T11716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1549'. [ 275.687225][T11714] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 275.709409][T11714] team0: Port device dummy0 added [ 275.730551][T11714] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 275.749223][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1551'. [ 275.765716][T11714] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 275.815632][T11714] team0: Failed to send options change via netlink (err -105) [ 275.829485][T11714] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 275.846796][T11714] team0: Port device dummy0 removed [ 275.889102][T11729] vlan2: entered promiscuous mode [ 275.906261][T11729] vlan2: entered allmulticast mode [ 276.054923][T11734] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1553'. [ 276.588522][T11754] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 276.909572][T11771] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.929521][T11771] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.988677][T11773] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 277.055936][T11771] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.068107][T11771] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.171554][T11771] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.182988][T11771] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.302319][T11771] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.323097][T11771] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.520145][ T7452] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.545006][ T7452] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.569830][ T7452] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.579590][ T7452] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.609472][T11804] netlink: 'syz.0.1578': attribute type 10 has an invalid length. [ 277.636640][ T7452] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.655579][ T7452] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.680900][T11808] netlink: 'syz.0.1578': attribute type 10 has an invalid length. [ 277.695936][ T7452] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.732851][ T7452] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.761931][T11804] bond0: (slave dummy0): Releasing backup interface [ 277.811441][T11804] team0: Port device dummy0 added [ 277.848262][T11807] macsec0: entered promiscuous mode [ 277.857152][T11807] macsec0: entered allmulticast mode [ 277.927618][T11808] team0: Port device dummy0 removed [ 277.951105][T11808] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 278.252615][T11832] syzkaller1: entered promiscuous mode [ 278.261166][T11832] syzkaller1: entered allmulticast mode [ 278.416836][T11837] tipc: Enabled bearer , priority 0 [ 278.435465][T11837] syzkaller0: entered promiscuous mode [ 278.440969][T11837] syzkaller0: entered allmulticast mode [ 278.546169][T11837] tipc: Resetting bearer [ 278.572869][T11836] tipc: Resetting bearer [ 278.611212][T11836] tipc: Disabling bearer [ 278.655391][T11848] tipc: Enabling of bearer rejected, failed to enable media [ 278.731328][T11851] team0: Port device gtp1 added [ 278.892381][T11860] __nla_validate_parse: 8 callbacks suppressed [ 278.892399][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 278.964381][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1595'. [ 278.998133][T11867] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1595'. [ 279.492004][T11867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1595'. [ 280.571349][T11863] lo speed is unknown, defaulting to 1000 [ 280.907875][T11910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1606'. [ 281.326728][T11909] lo speed is unknown, defaulting to 1000 [ 281.880485][T11933] unsupported nla_type 52263 [ 281.921180][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 282.081754][T11944] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 282.155858][T11933] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1617'. [ 282.322815][T11949] netlink: 23932 bytes leftover after parsing attributes in process `syz.3.1617'. [ 282.352324][T11944] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 282.519160][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1620'. [ 282.617628][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 282.799979][T11958] tipc: Cannot configure node identity twice [ 283.111782][T11973] netlink: 'syz.1.1626': attribute type 2 has an invalid length. [ 283.281566][T11973] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 283.961444][T11979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.000433][T11979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.555181][T11964] lo speed is unknown, defaulting to 1000 [ 284.559456][ T7467] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.591544][ T7467] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.631076][ T7467] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.647220][T11991] __nla_validate_parse: 1 callbacks suppressed [ 284.647238][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 284.656027][ T7467] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.678750][ T7467] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.691105][ T7467] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.700895][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 284.732655][ T7467] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.752488][ T7467] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.938537][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 285.091750][T12006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1634'. [ 285.163174][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1634'. [ 285.194978][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1634'. [ 285.208788][T12011] netlink: 'syz.4.1634': attribute type 3 has an invalid length. [ 285.323273][T12018] tipc: Failed to remove unknown binding: 66,1,1/0:418337369/418337371 [ 285.386742][T12019] tipc: Failed to remove unknown binding: 66,1,1/0:418337369/418337371 [ 285.397353][T12019] tipc: Failed to remove unknown binding: 66,1,1/0:418337369/418337371 [ 285.408735][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 285.427636][T12019] netlink: 'syz.1.1637': attribute type 5 has an invalid length. [ 285.439393][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'. [ 285.741035][T12023] tipc: Enabled bearer , priority 0 [ 285.749692][T12023] syzkaller0: entered promiscuous mode [ 285.755781][T12023] syzkaller0: entered allmulticast mode [ 285.775056][T12024] tipc: Resetting bearer [ 285.783272][T12022] tipc: Resetting bearer [ 285.804844][T12022] tipc: Disabling bearer [ 285.890714][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 285.908810][T12027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1640'. [ 285.967712][T12027] geneve3: entered promiscuous mode [ 285.972954][T12027] geneve3: entered allmulticast mode [ 286.000110][ T7462] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.009724][ T7462] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.034674][ T7462] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.061183][ T7462] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.207068][T12036] netlink: 'syz.3.1643': attribute type 1 has an invalid length. [ 286.238933][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 286.253619][T12040] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 286.425419][T12048] FAULT_INJECTION: forcing a failure. [ 286.425419][T12048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.500015][T12048] CPU: 0 UID: 0 PID: 12048 Comm: syz.3.1646 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 286.500044][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.500055][T12048] Call Trace: [ 286.500062][T12048] [ 286.500071][T12048] dump_stack_lvl+0x189/0x250 [ 286.500097][T12048] ? __pfx____ratelimit+0x10/0x10 [ 286.500123][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.500142][T12048] ? __pfx__printk+0x10/0x10 [ 286.500174][T12048] should_fail_ex+0x414/0x560 [ 286.500205][T12048] _copy_from_user+0x2d/0xb0 [ 286.500225][T12048] sctp_setsockopt+0x19f/0x1200 [ 286.500243][T12048] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 286.500271][T12048] do_sock_setsockopt+0x179/0x1b0 [ 286.500295][T12048] __x64_sys_setsockopt+0x13f/0x1b0 [ 286.500320][T12048] do_syscall_64+0xfa/0x3b0 [ 286.500336][T12048] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.500351][T12048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.500368][T12048] ? clear_bhb_loop+0x60/0xb0 [ 286.500390][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.500407][T12048] RIP: 0033:0x7f270ab8e9a9 [ 286.500423][T12048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.500439][T12048] RSP: 002b:00007f270b962038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.500459][T12048] RAX: ffffffffffffffda RBX: 00007f270adb6080 RCX: 00007f270ab8e9a9 [ 286.500472][T12048] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000003 [ 286.500483][T12048] RBP: 00007f270b962090 R08: 0000000000000010 R09: 0000000000000000 [ 286.500494][T12048] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 286.500507][T12048] R13: 0000000000000001 R14: 00007f270adb6080 R15: 00007ffe5e7cce68 [ 286.500538][T12048] [ 286.801444][T12032] lo speed is unknown, defaulting to 1000 [ 287.031874][T12055] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 287.460525][T12059] ipvlan2: entered promiscuous mode [ 287.470456][T12059] ipvlan2: entered allmulticast mode [ 287.482068][T12059] batadv0: entered allmulticast mode [ 287.492361][T12059] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 287.589685][T12069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.850497][T12082] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.205639][T12096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.091342][T12111] FAULT_INJECTION: forcing a failure. [ 289.091342][T12111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.114834][T12111] CPU: 1 UID: 0 PID: 12111 Comm: syz.1.1663 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 289.114862][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.114874][T12111] Call Trace: [ 289.114881][T12111] [ 289.114890][T12111] dump_stack_lvl+0x189/0x250 [ 289.114915][T12111] ? __pfx____ratelimit+0x10/0x10 [ 289.114942][T12111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.114962][T12111] ? __pfx__printk+0x10/0x10 [ 289.114998][T12111] should_fail_ex+0x414/0x560 [ 289.115030][T12111] _copy_to_user+0x31/0xb0 [ 289.115053][T12111] simple_read_from_buffer+0xe1/0x170 [ 289.115083][T12111] proc_fail_nth_read+0x1df/0x250 [ 289.115112][T12111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.115140][T12111] ? rw_verify_area+0x258/0x650 [ 289.115160][T12111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.115187][T12111] vfs_read+0x200/0x980 [ 289.115214][T12111] ? __pfx___mutex_lock+0x10/0x10 [ 289.115234][T12111] ? __pfx_vfs_read+0x10/0x10 [ 289.115257][T12111] ? __fget_files+0x2a/0x420 [ 289.115284][T12111] ? __fget_files+0x3a0/0x420 [ 289.115303][T12111] ? __fget_files+0x2a/0x420 [ 289.115332][T12111] ksys_read+0x145/0x250 [ 289.115362][T12111] ? __pfx_ksys_read+0x10/0x10 [ 289.115380][T12111] ? rcu_is_watching+0x15/0xb0 [ 289.115405][T12111] ? do_syscall_64+0xbe/0x3b0 [ 289.115428][T12111] do_syscall_64+0xfa/0x3b0 [ 289.115443][T12111] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.115460][T12111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.115477][T12111] ? clear_bhb_loop+0x60/0xb0 [ 289.115499][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.115515][T12111] RIP: 0033:0x7f220b98d3bc [ 289.115532][T12111] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 289.115547][T12111] RSP: 002b:00007f22097f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.115567][T12111] RAX: ffffffffffffffda RBX: 00007f220bbb6080 RCX: 00007f220b98d3bc [ 289.115580][T12111] RDX: 000000000000000f RSI: 00007f22097f60a0 RDI: 0000000000000004 [ 289.115592][T12111] RBP: 00007f22097f6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.115602][T12111] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 289.115613][T12111] R13: 0000000000000001 R14: 00007f220bbb6080 R15: 00007ffdeb1271e8 [ 289.115645][T12111] [ 289.120264][T12080] lo speed is unknown, defaulting to 1000 [ 289.130361][T12117] netlink: 'syz.4.1666': attribute type 12 has an invalid length. [ 289.435492][T12117] netlink: 'syz.4.1666': attribute type 14 has an invalid length. [ 289.477429][T12121] block nbd1: server does not support multiple connections per device. [ 289.487124][T12121] block nbd1: shutting down sockets [ 289.707089][T12125] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 289.725479][T12130] __nla_validate_parse: 6 callbacks suppressed [ 289.725496][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 289.961216][T12141] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1673'. [ 290.022838][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1673'. [ 290.075608][T12146] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1674'. [ 290.196532][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1675'. [ 290.528531][T12155] sctp: [Deprecated]: syz.4.1676 (pid 12155) Use of int in max_burst socket option deprecated. [ 290.528531][T12155] Use struct sctp_assoc_value instead [ 290.736686][T12131] lo speed is unknown, defaulting to 1000 [ 291.085013][T12170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.165644][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 291.192907][T12170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1680'. [ 291.532706][T12175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1681'. [ 291.934965][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1683'. [ 291.983228][T12182] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1684'. [ 292.225087][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 292.313099][T12182] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 293.408234][T12218] netlink: 'syz.3.1695': attribute type 10 has an invalid length. [ 294.221394][T12218] lo speed is unknown, defaulting to 1000 [ 294.831253][T12235] batman_adv: batadv0: Adding interface: ip6gretap1 [ 294.860840][T12235] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.895574][T12235] batman_adv: batadv0: Interface activated: ip6gretap1 [ 295.022631][T12220] lo speed is unknown, defaulting to 1000 [ 295.258359][T12246] syzkaller1: entered promiscuous mode [ 295.268454][T12246] syzkaller1: entered allmulticast mode [ 295.799280][T12222] lo speed is unknown, defaulting to 1000 [ 296.599218][T12297] __nla_validate_parse: 1 callbacks suppressed [ 296.599236][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 296.898934][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 297.211580][T12312] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 297.245483][T12312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 297.257192][T12312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 298.736332][T12342] netlink: 'syz.2.1731': attribute type 21 has an invalid length. [ 298.754468][T12342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1731'. [ 298.776564][T12342] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 298.841948][T12345] tipc: Enabled bearer , priority 10 [ 299.010599][T12350] netlink: 'syz.2.1736': attribute type 1 has an invalid length. [ 299.029703][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1736'. [ 299.058473][T12350] sctp: [Deprecated]: syz.2.1736 (pid 12350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.058473][T12350] Use struct sctp_sack_info instead [ 299.119876][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1737'. [ 299.275885][T12370] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 299.380080][T12373] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1741'. [ 299.819296][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 299.838038][ T7187] tipc: Node number set to 101974432 [ 299.839124][T12396] sctp: [Deprecated]: syz.0.1749 (pid 12396) Use of int in max_burst socket option. [ 299.839124][T12396] Use struct sctp_assoc_value instead [ 300.377067][T12382] lo speed is unknown, defaulting to 1000 [ 300.689506][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 300.699245][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 300.730850][T12431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1762'. [ 300.949621][T12442] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 300.987808][T12389] lo speed is unknown, defaulting to 1000 [ 301.174044][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 301.696959][T12449] lo speed is unknown, defaulting to 1000 [ 301.996723][T12463] __nla_validate_parse: 2 callbacks suppressed [ 301.996736][T12463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1772'. [ 302.531394][T12446] lo speed is unknown, defaulting to 1000 [ 304.257279][T12496] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 304.567889][T12500] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.596869][T12500] bond3: (slave bond4): Enslaving as an active interface with a down link [ 304.915755][T12521] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 305.069928][T12525] bond5: (slave gretap2): making interface the new active one [ 305.080694][T12525] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 305.499102][T12540] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1794'. [ 305.537901][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 305.686864][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 305.949599][T12549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1797'. [ 306.322323][T12573] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.420519][T12535] lo speed is unknown, defaulting to 1000 [ 306.462312][T12578] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.530436][T12585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.547777][T12578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.596532][T12578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.812780][T12587] netlink: 'syz.4.1809': attribute type 10 has an invalid length. [ 306.823177][T12587] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1809'. [ 306.839717][T12587] veth0_vlan: left promiscuous mode [ 306.847781][T12587] veth0_vlan: entered promiscuous mode [ 306.883025][T12587] veth0_vlan: entered allmulticast mode [ 306.912231][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1809'. [ 306.941433][T12587] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 307.298791][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1815'. [ 307.516533][T12624] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 307.816962][T12632] macsec1: entered promiscuous mode [ 307.822341][T12632] !: entered promiscuous mode [ 307.829457][T12632] macsec1: entered allmulticast mode [ 307.837264][T12632] !: entered allmulticast mode [ 307.899077][T12632] !: left allmulticast mode [ 307.908721][T12632] !: left promiscuous mode [ 308.057808][T12641] bridge0: port 1(erspan0) entered blocking state [ 308.068967][T12641] bridge0: port 1(erspan0) entered disabled state [ 308.075825][T12641] erspan0: entered allmulticast mode [ 308.082317][T12641] erspan0: entered promiscuous mode [ 308.109297][T12642] erspan0: left allmulticast mode [ 308.117628][T12642] erspan0: left promiscuous mode [ 308.128859][T12648] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 308.133062][T12642] bridge0: port 1(erspan0) entered disabled state [ 308.508077][T12643] lo speed is unknown, defaulting to 1000 [ 308.765633][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1830'. [ 308.787904][T12679] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1830'. [ 309.008828][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 309.356542][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 309.381569][T12704] 8021q: VLANs not supported on vcan0 [ 309.539797][T12712] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1842'. [ 309.683291][T12719] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1841'. [ 309.691899][T12720] syzkaller1: entered promiscuous mode [ 309.721485][T12720] syzkaller1: entered allmulticast mode [ 310.410244][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1850'. [ 310.435913][T12745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1850'. [ 310.436436][T12738] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 311.037404][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1857'. [ 311.158133][ T7466] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.223133][ T7466] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.239023][ T7466] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.268329][ T7466] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.507441][T12798] openvswitch: netlink: IPv4 tun info is not correct [ 311.589035][T12800] netlink: 'syz.1.1863': attribute type 1 has an invalid length. [ 312.241547][T12808] lo speed is unknown, defaulting to 1000 [ 312.333046][T12830] __nla_validate_parse: 8 callbacks suppressed [ 312.333063][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1875'. [ 312.839146][T12844] sctp: [Deprecated]: syz.2.1878 (pid 12844) Use of int in max_burst socket option. [ 312.839146][T12844] Use struct sctp_assoc_value instead [ 312.906724][T12848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1880'. [ 313.262767][T12859] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1883'. [ 313.302997][T12859] netlink: 'syz.1.1883': attribute type 3 has an invalid length. [ 313.552886][T12873] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 313.659677][T12873] ip6erspan0: entered promiscuous mode [ 313.712083][T12876] lo speed is unknown, defaulting to 1000 [ 313.730001][T12876] lo speed is unknown, defaulting to 1000 [ 313.790314][T12876] lo speed is unknown, defaulting to 1000 [ 313.819129][T12877] syzkaller1: entered promiscuous mode [ 313.826784][T12877] syzkaller1: entered allmulticast mode [ 313.836374][T12876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 313.863812][T12876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.992865][T12876] lo speed is unknown, defaulting to 1000 [ 314.038003][T12876] lo speed is unknown, defaulting to 1000 [ 314.080028][T12876] lo speed is unknown, defaulting to 1000 [ 314.103001][T12876] lo speed is unknown, defaulting to 1000 [ 314.118347][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1892'. [ 314.147627][T12876] lo speed is unknown, defaulting to 1000 [ 314.216212][T12889] TCP: TCP_TX_DELAY enabled [ 314.222476][T12889] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1894'. [ 314.897839][T12912] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 315.135733][T12925] syzkaller0: entered promiscuous mode [ 315.148104][T12925] syzkaller0: entered allmulticast mode [ 315.163115][T12926] tap0: tun_chr_ioctl cmd 1074025678 [ 315.272601][T12930] netlink: 'syz.2.1908': attribute type 2 has an invalid length. [ 315.323197][T12933] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 315.561543][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 315.571833][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 315.718883][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 315.898126][T12965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1919'. [ 315.924853][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 316.059511][T12972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.126268][T12977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.252285][T13037] netlink: 'syz.0.1943': attribute type 32 has an invalid length. [ 317.402496][T13041] tipc: Enabling of bearer rejected, failed to enable media [ 317.468146][T13021] lo speed is unknown, defaulting to 1000 [ 317.661404][T13056] FAULT_INJECTION: forcing a failure. [ 317.661404][T13056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.719089][T13056] CPU: 0 UID: 0 PID: 13056 Comm: syz.3.1945 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 317.719116][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.719138][T13056] Call Trace: [ 317.719146][T13056] [ 317.719153][T13056] dump_stack_lvl+0x189/0x250 [ 317.719178][T13056] ? __pfx____ratelimit+0x10/0x10 [ 317.719204][T13056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.719221][T13056] ? __pfx__printk+0x10/0x10 [ 317.719242][T13056] ? __might_fault+0xb0/0x130 [ 317.719276][T13056] should_fail_ex+0x414/0x560 [ 317.719307][T13056] _copy_from_user+0x2d/0xb0 [ 317.719330][T13056] __sys_bpf+0x1ed/0x860 [ 317.719355][T13056] ? __pfx___sys_bpf+0x10/0x10 [ 317.719390][T13056] ? ksys_write+0x22a/0x250 [ 317.719413][T13056] ? __pfx_ksys_write+0x10/0x10 [ 317.719431][T13056] ? rcu_is_watching+0x15/0xb0 [ 317.719456][T13056] __x64_sys_bpf+0x7c/0x90 [ 317.719478][T13056] do_syscall_64+0xfa/0x3b0 [ 317.719495][T13056] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.719510][T13056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.719526][T13056] ? clear_bhb_loop+0x60/0xb0 [ 317.719546][T13056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.719562][T13056] RIP: 0033:0x7f270ab8e9a9 [ 317.719577][T13056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.719591][T13056] RSP: 002b:00007f270b983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.719609][T13056] RAX: ffffffffffffffda RBX: 00007f270adb5fa0 RCX: 00007f270ab8e9a9 [ 317.719622][T13056] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 317.719634][T13056] RBP: 00007f270b983090 R08: 0000000000000000 R09: 0000000000000000 [ 317.719644][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.719654][T13056] R13: 0000000000000000 R14: 00007f270adb5fa0 R15: 00007ffe5e7cce68 [ 317.719684][T13056] [ 317.946723][T13058] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 317.956293][T13058] __nla_validate_parse: 7 callbacks suppressed [ 317.956309][T13058] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1946'. [ 318.242862][T13065] vlan3: entered promiscuous mode [ 318.274484][T13065] gretap0: entered promiscuous mode [ 318.429211][T13021] lo speed is unknown, defaulting to 1000 [ 318.476475][T13038] lo speed is unknown, defaulting to 1000 [ 319.291905][T13038] lo speed is unknown, defaulting to 1000 [ 319.301098][T13072] lo speed is unknown, defaulting to 1000 [ 319.332147][T13095] FAULT_INJECTION: forcing a failure. [ 319.332147][T13095] name failslab, interval 1, probability 0, space 0, times 0 [ 319.374064][T13095] CPU: 1 UID: 0 PID: 13095 Comm: syz.1.1958 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 319.374092][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.374104][T13095] Call Trace: [ 319.374112][T13095] [ 319.374120][T13095] dump_stack_lvl+0x189/0x250 [ 319.374145][T13095] ? __pfx____ratelimit+0x10/0x10 [ 319.374190][T13095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.374209][T13095] ? __pfx__printk+0x10/0x10 [ 319.374238][T13095] ? __pfx___might_resched+0x10/0x10 [ 319.374262][T13095] should_fail_ex+0x414/0x560 [ 319.374294][T13095] should_failslab+0xa8/0x100 [ 319.374319][T13095] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 319.374346][T13095] ? __get_vm_area_node+0x13f/0x300 [ 319.374381][T13095] __get_vm_area_node+0x13f/0x300 [ 319.374410][T13095] __vmalloc_node_range_noprof+0x301/0x12f0 [ 319.374434][T13095] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 319.374462][T13095] ? is_bpf_text_address+0x26/0x2b0 [ 319.374507][T13095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.374529][T13095] ? __might_fault+0xb0/0x130 [ 319.374550][T13095] ? __pfx_aa_get_newest_label+0x10/0x10 [ 319.374566][T13095] ? _parse_integer_limit+0x1ae/0x1f0 [ 319.374592][T13095] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 319.374615][T13095] __vmalloc_noprof+0xb1/0xf0 [ 319.374638][T13095] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 319.374666][T13095] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 319.374697][T13095] bpf_prog_alloc+0x3c/0x1a0 [ 319.374725][T13095] bpf_prog_load+0x735/0x1930 [ 319.374763][T13095] ? __pfx_bpf_prog_load+0x10/0x10 [ 319.374813][T13095] ? bpf_lsm_bpf+0x9/0x20 [ 319.374831][T13095] ? security_bpf+0x7e/0x300 [ 319.374859][T13095] __sys_bpf+0x5f1/0x860 [ 319.374886][T13095] ? __pfx___sys_bpf+0x10/0x10 [ 319.374924][T13095] ? ksys_write+0x22a/0x250 [ 319.374947][T13095] ? __pfx_ksys_write+0x10/0x10 [ 319.374966][T13095] ? rcu_is_watching+0x15/0xb0 [ 319.374994][T13095] __x64_sys_bpf+0x7c/0x90 [ 319.375017][T13095] do_syscall_64+0xfa/0x3b0 [ 319.375034][T13095] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.375050][T13095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.375068][T13095] ? clear_bhb_loop+0x60/0xb0 [ 319.375090][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.375105][T13095] RIP: 0033:0x7f220b98e9a9 [ 319.375121][T13095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.375134][T13095] RSP: 002b:00007f220c727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.375154][T13095] RAX: ffffffffffffffda RBX: 00007f220bbb5fa0 RCX: 00007f220b98e9a9 [ 319.375165][T13095] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 319.375177][T13095] RBP: 00007f220c727090 R08: 0000000000000000 R09: 0000000000000000 [ 319.375188][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.375199][T13095] R13: 0000000000000000 R14: 00007f220bbb5fa0 R15: 00007ffdeb1271e8 [ 319.375230][T13095] [ 319.375346][T13095] syz.1.1958: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 319.709058][T13095] CPU: 1 UID: 0 PID: 13095 Comm: syz.1.1958 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 319.709085][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.709096][T13095] Call Trace: [ 319.709103][T13095] [ 319.709110][T13095] dump_stack_lvl+0x189/0x250 [ 319.709137][T13095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.709156][T13095] ? __pfx__printk+0x10/0x10 [ 319.709177][T13095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 319.709197][T13095] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 319.709220][T13095] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 319.709243][T13095] warn_alloc+0x214/0x310 [ 319.709275][T13095] ? __pfx_warn_alloc+0x10/0x10 [ 319.709300][T13095] ? __get_vm_area_node+0x13f/0x300 [ 319.709327][T13095] ? __get_vm_area_node+0x2b5/0x300 [ 319.709364][T13095] __vmalloc_node_range_noprof+0x326/0x12f0 [ 319.709390][T13095] ? is_bpf_text_address+0x26/0x2b0 [ 319.709435][T13095] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 319.709456][T13095] ? __might_fault+0xb0/0x130 [ 319.709477][T13095] ? __pfx_aa_get_newest_label+0x10/0x10 [ 319.709495][T13095] ? _parse_integer_limit+0x1ae/0x1f0 [ 319.709520][T13095] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 319.709543][T13095] __vmalloc_noprof+0xb1/0xf0 [ 319.709566][T13095] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 319.709593][T13095] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 319.709623][T13095] bpf_prog_alloc+0x3c/0x1a0 [ 319.709650][T13095] bpf_prog_load+0x735/0x1930 [ 319.709688][T13095] ? __pfx_bpf_prog_load+0x10/0x10 [ 319.709737][T13095] ? bpf_lsm_bpf+0x9/0x20 [ 319.709755][T13095] ? security_bpf+0x7e/0x300 [ 319.709782][T13095] __sys_bpf+0x5f1/0x860 [ 319.709808][T13095] ? __pfx___sys_bpf+0x10/0x10 [ 319.709846][T13095] ? ksys_write+0x22a/0x250 [ 319.709869][T13095] ? __pfx_ksys_write+0x10/0x10 [ 319.709887][T13095] ? rcu_is_watching+0x15/0xb0 [ 319.709914][T13095] __x64_sys_bpf+0x7c/0x90 [ 319.709937][T13095] do_syscall_64+0xfa/0x3b0 [ 319.709954][T13095] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.709971][T13095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.709988][T13095] ? clear_bhb_loop+0x60/0xb0 [ 319.710010][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.710026][T13095] RIP: 0033:0x7f220b98e9a9 [ 319.710044][T13095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.710058][T13095] RSP: 002b:00007f220c727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.710077][T13095] RAX: ffffffffffffffda RBX: 00007f220bbb5fa0 RCX: 00007f220b98e9a9 [ 319.710090][T13095] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 319.710102][T13095] RBP: 00007f220c727090 R08: 0000000000000000 R09: 0000000000000000 [ 319.710113][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.710124][T13095] R13: 0000000000000000 R14: 00007f220bbb5fa0 R15: 00007ffdeb1271e8 [ 319.710154][T13095] [ 319.711282][T13095] Mem-Info: [ 320.033217][T13095] active_anon:7376 inactive_anon:0 isolated_anon:0 [ 320.033217][T13095] active_file:1862 inactive_file:39934 isolated_file:0 [ 320.033217][T13095] unevictable:768 dirty:273 writeback:0 [ 320.033217][T13095] slab_reclaimable:12277 slab_unreclaimable:192980 [ 320.033217][T13095] mapped:33010 shmem:4290 pagetables:949 [ 320.033217][T13095] sec_pagetables:0 bounce:0 [ 320.033217][T13095] kernel_misc_reclaimable:0 [ 320.033217][T13095] free:1208000 free_pcp:16736 free_cma:0 [ 320.088283][T13095] Node 0 active_anon:29504kB inactive_anon:0kB active_file:7448kB inactive_file:159532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132640kB dirty:1092kB writeback:0kB shmem:15624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13292kB pagetables:3656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.129176][T13095] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 320.166499][T13095] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 320.205893][T13095] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 320.211746][T13095] Node 0 DMA32 free:904824kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29456kB inactive_anon:0kB active_file:7448kB inactive_file:157964kB unevictable:1536kB writepending:1092kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:56488kB local_pcp:20764kB free_cma:0kB [ 320.247219][T13095] lowmem_reserve[]: 0 0 1 1 1 [ 320.252142][T13095] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 320.287315][T13095] lowmem_reserve[]: 0 0 0 0 0 [ 320.292132][T13095] Node 1 Normal free:3911804kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9780kB local_pcp:5844kB free_cma:0kB [ 320.326043][T13095] lowmem_reserve[]: 0 0 0 0 0 [ 320.330811][T13095] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 320.347038][T13095] Node 0 DMA32: 1516*4kB (UME) 469*8kB (UME) 276*16kB (UM) 855*32kB (UME) 434*64kB (UME) 65*128kB (UME) 19*256kB (UME) 8*512kB (UME) 5*1024kB (M) 3*2048kB (UME) 197*4096kB (M) = 904824kB [ 320.368858][T13095] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 320.371467][T13072] lo speed is unknown, defaulting to 1000 [ 320.394911][T13095] Node 1 Normal: 137*4kB (UME) 29*8kB (UME) 33*16kB (UME) 197*32kB (UME) 49*64kB (UME) 7*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 950*4096kB (M) = 3911804kB [ 320.422400][T13095] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.438359][T13095] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 320.448565][T13095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 320.470991][T13095] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 320.492902][T13095] 46083 total pagecache pages [ 320.498304][T13095] 0 pages in swap cache [ 320.502606][T13095] Free swap = 124996kB [ 320.529543][T13095] Total swap = 124996kB [ 320.534847][T13095] 2097051 pages RAM [ 320.538667][T13095] 0 pages HighMem/MovableOnly [ 320.551903][T13095] 425382 pages reserved [ 320.562952][T13095] 0 pages cma reserved [ 321.494052][T13115] netlink: 'syz.2.1962': attribute type 5 has an invalid length. [ 321.647921][T13117] netlink: 'syz.2.1963': attribute type 3 has an invalid length. [ 321.714435][T13117] netlink: 'syz.2.1963': attribute type 29 has an invalid length. [ 321.748214][T13117] netlink: 'syz.2.1963': attribute type 29 has an invalid length. [ 321.774746][T13117] netlink: 488 bytes leftover after parsing attributes in process `syz.2.1963'. [ 321.827439][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1965'. [ 321.901077][T13123] sctp: [Deprecated]: syz.4.1966 (pid 13123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.901077][T13123] Use struct sctp_sack_info instead [ 321.977641][T13127] IPv6: Can't replace route, no match found [ 322.095992][T13130] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1969'. [ 322.166113][T13135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1971'. [ 322.259348][T13142] veth0: entered promiscuous mode [ 322.376202][T13149] dummy0: entered promiscuous mode [ 322.381480][T13149] dummy0: entered allmulticast mode [ 322.402173][T13146] syzkaller0: entered promiscuous mode [ 322.421930][T13146] syzkaller0: entered allmulticast mode [ 322.951919][T13131] veth0: left promiscuous mode [ 323.205708][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'. [ 323.227034][T13182] chnl_net:caif_netlink_parms(): no params data found [ 323.440760][T13194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1986'. [ 323.544433][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 323.651327][T13207] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 323.667792][T13207] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1990'. [ 323.682798][ T30] audit: type=1800 audit(1753557458.675:7): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1990" name="memory.events" dev="tmpfs" ino=1961 res=0 errno=0 [ 323.710680][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 323.720431][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1990'. [ 323.738125][ T30] audit: type=1804 audit(1753557458.725:8): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1990" name="/newroot/382/memory.events" dev="tmpfs" ino=1961 res=1 errno=0 [ 324.158427][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 324.189031][T13225] macvlan0: entered promiscuous mode [ 324.197508][T13225] macvlan0: entered allmulticast mode [ 324.215465][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 324.226411][T13228] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 324.516533][T13246] sctp: [Deprecated]: syz.2.2006 (pid 13246) Use of int in max_burst socket option. [ 324.516533][T13246] Use struct sctp_assoc_value instead [ 324.935597][T13253] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.954095][T13245] lo speed is unknown, defaulting to 1000 [ 325.015248][T13257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2011'. [ 325.228732][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'. [ 325.242334][T13260] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2012'. [ 325.263145][T13263] batadv_slave_0: entered promiscuous mode [ 325.452701][T13263] batadv_slave_0 (unregistering): left promiscuous mode [ 325.474524][T13263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.535731][T13255] lo speed is unknown, defaulting to 1000 [ 325.544410][T13245] lo speed is unknown, defaulting to 1000 [ 326.077311][T13270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.108647][T13255] lo speed is unknown, defaulting to 1000 [ 326.502843][T13290] netlink: 'syz.2.2021': attribute type 7 has an invalid length. [ 326.896585][T13298] veth0: entered promiscuous mode [ 327.625637][T13294] veth0: left promiscuous mode [ 328.321966][T13337] af_packet: tpacket_rcv: packet too big, clamped from 260 to 4294967272. macoff=96 [ 328.370896][T13343] __nla_validate_parse: 6 callbacks suppressed [ 328.370949][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 328.785005][T13362] 8021q: VLANs not supported on gre0 [ 328.856053][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 329.141773][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2047'. [ 329.227910][T13384] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1301866418/1301866420 [ 329.250603][T13384] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1301866418/1301866420 [ 329.260653][T13384] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1301866418/1301866420 [ 329.350942][T13386] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 329.897020][T13404] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 329.910185][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 329.922519][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 329.976514][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2056'. [ 329.985581][T13409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.012512][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 330.102273][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 330.266669][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 330.274345][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2059'. [ 330.359390][T13420] vlan3: entered promiscuous mode [ 330.367139][T13420] team0: entered promiscuous mode [ 330.372187][T13420] C: entered promiscuous mode [ 330.377431][T13420] team_slave_1: entered promiscuous mode [ 330.383225][T13420] bond0: entered promiscuous mode [ 330.392494][T13420] bond_slave_0: entered promiscuous mode [ 330.550915][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'. [ 330.669629][T13438] IPVS: length: 209 != 24 [ 330.841983][T13419] lo speed is unknown, defaulting to 1000 [ 331.285031][T13419] lo speed is unknown, defaulting to 1000 [ 331.417518][T13458] tipc: Enabled bearer , priority 0 [ 331.511164][T13458] syzkaller0: entered promiscuous mode [ 331.519383][T13458] syzkaller0: entered allmulticast mode [ 331.527586][T13460] bond0: Unable to set up delay as MII monitoring is disabled [ 331.616992][T13458] tipc: Resetting bearer [ 331.636353][T13456] tipc: Resetting bearer [ 331.692620][T13456] tipc: Disabling bearer [ 331.704326][T13465] block nbd1: Unsupported socket: shutdown callout must be supported. [ 331.721808][T13465] block nbd1: shutting down sockets [ 331.932034][T13477] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 332.139284][T13473] syzkaller1: entered promiscuous mode [ 332.170223][T13473] syzkaller1: entered allmulticast mode [ 332.375927][T13484] syzkaller0: entered allmulticast mode [ 332.521536][T13484] bond0: entered promiscuous mode [ 332.544284][T13484] bond0: left promiscuous mode [ 333.785235][ T5168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.802813][ T5168] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.820621][ T5168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.840119][ T5168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.849036][ T5168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.455347][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 335.042464][T13534] __nla_validate_parse: 7 callbacks suppressed [ 335.042483][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 335.088694][T13538] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 335.102268][T13539] netlink: 'syz.2.2093': attribute type 23 has an invalid length. [ 335.276494][T13540] bond5: (slave gretap2): making interface the new active one [ 335.289440][T13540] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 335.299920][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 335.469395][T13531] lo speed is unknown, defaulting to 1000 [ 335.472313][T13557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2100'. [ 335.532792][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2100'. [ 335.788842][T13566] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2103'. [ 335.794282][T13569] netlink: 'syz.2.2104': attribute type 178 has an invalid length. [ 335.827309][T13531] lo speed is unknown, defaulting to 1000 [ 335.828817][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'. [ 335.896284][ T51] Bluetooth: hci5: command tx timeout [ 335.975566][ T7185] IPVS: starting estimator thread 0... [ 336.063488][T13577] IPVS: using max 33 ests per chain, 79200 per kthread [ 336.315990][T13531] chnl_net:caif_netlink_parms(): no params data found [ 336.514225][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 336.523122][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 336.534983][T13531] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.542143][T13531] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.556791][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 336.570503][T13531] bridge_slave_0: entered allmulticast mode [ 336.580438][T13531] bridge_slave_0: entered promiscuous mode [ 336.595639][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 336.611321][T13531] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.620287][T13531] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.628642][T13531] bridge_slave_1: entered allmulticast mode [ 336.638228][T13531] bridge_slave_1: entered promiscuous mode [ 336.780193][T13531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.825453][T13531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.907194][T13605] FAULT_INJECTION: forcing a failure. [ 336.907194][T13605] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 336.921744][T13605] CPU: 1 UID: 0 PID: 13605 Comm: syz.2.2114 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 336.921769][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.921781][T13605] Call Trace: [ 336.921788][T13605] [ 336.921796][T13605] dump_stack_lvl+0x189/0x250 [ 336.921812][T13605] ? __pfx____ratelimit+0x10/0x10 [ 336.921828][T13605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.921839][T13605] ? __pfx__printk+0x10/0x10 [ 336.921853][T13605] ? fs_reclaim_acquire+0x7d/0x100 [ 336.921873][T13605] should_fail_ex+0x414/0x560 [ 336.921892][T13605] prepare_alloc_pages+0x213/0x610 [ 336.921917][T13605] __alloc_frozen_pages_noprof+0x123/0x370 [ 336.921934][T13605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 336.921954][T13605] ? policy_nodemask+0x27c/0x720 [ 336.921970][T13605] alloc_pages_mpol+0x232/0x4a0 [ 336.921986][T13605] vma_alloc_folio_noprof+0xe4/0x200 [ 336.922002][T13605] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 336.922022][T13605] folio_prealloc+0x30/0x180 [ 336.922036][T13605] do_wp_page+0x1231/0x5800 [ 336.922060][T13605] ? __pfx_do_wp_page+0x10/0x10 [ 336.922070][T13605] ? do_raw_spin_lock+0x121/0x290 [ 336.922085][T13605] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 336.922103][T13605] __handle_mm_fault+0x1144/0x5620 [ 336.922126][T13605] ? __pfx___handle_mm_fault+0x10/0x10 [ 336.922146][T13605] ? follow_page_pte+0xe7e/0x14b0 [ 336.922163][T13605] handle_mm_fault+0x40a/0x8e0 [ 336.922181][T13605] __get_user_pages+0x1af4/0x30b0 [ 336.922212][T13605] ? __pfx___get_user_pages+0x10/0x10 [ 336.922223][T13605] ? __gup_longterm_locked+0xbf7/0x15b0 [ 336.922234][T13605] ? down_read_killable+0x1d1/0x350 [ 336.922248][T13605] __gup_longterm_locked+0xd66/0x15b0 [ 336.922267][T13605] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 336.922279][T13605] ? gup_fast_fallback+0x1afc/0x2260 [ 336.922292][T13605] gup_fast_fallback+0x1cd4/0x2260 [ 336.922303][T13605] ? __kernel_text_address+0xd/0x40 [ 336.922336][T13605] ? __pfx_gup_fast_fallback+0x10/0x10 [ 336.922347][T13605] ? kasan_save_track+0x4f/0x80 [ 336.922358][T13605] ? kasan_save_track+0x3e/0x80 [ 336.922367][T13605] ? __kasan_kmalloc+0x93/0xb0 [ 336.922378][T13605] ? sock_kmalloc+0xd6/0x160 [ 336.922390][T13605] ? af_alg_get_rsgl+0x236/0x810 [ 336.922403][T13605] ? skcipher_recvmsg+0x3c0/0x11c0 [ 336.922413][T13605] ? ____sys_recvmsg+0x1c9/0x460 [ 336.922423][T13605] ? ___sys_recvmsg+0x1b5/0x510 [ 336.922433][T13605] ? __x64_sys_recvmsg+0x198/0x260 [ 336.922447][T13605] ? pin_user_pages_fast+0x4d/0xb0 [ 336.922459][T13605] iov_iter_extract_pages+0x35a/0x5e0 [ 336.922478][T13605] extract_iter_to_sg+0xe46/0x24e0 [ 336.922498][T13605] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 336.922509][T13605] ? sock_kmalloc+0xd6/0x160 [ 336.922522][T13605] ? rcu_is_watching+0x15/0xb0 [ 336.922533][T13605] ? trace_kmalloc+0x1f/0xd0 [ 336.922544][T13605] ? __kmalloc_noprof+0x29b/0x4f0 [ 336.922559][T13605] ? __asan_memset+0x22/0x50 [ 336.922571][T13605] af_alg_get_rsgl+0x436/0x810 [ 336.922597][T13605] skcipher_recvmsg+0x3c0/0x11c0 [ 336.922609][T13605] ? aa_sk_perm+0x81e/0x950 [ 336.922631][T13605] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 336.922643][T13605] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 336.922652][T13605] ? security_socket_recvmsg+0x7e/0x2e0 [ 336.922667][T13605] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 336.922677][T13605] sock_recvmsg+0x22c/0x270 [ 336.922694][T13605] ____sys_recvmsg+0x1c9/0x460 [ 336.922712][T13605] ? __pfx_____sys_recvmsg+0x10/0x10 [ 336.922733][T13605] ? import_iovec+0x74/0xa0 [ 336.922747][T13605] ___sys_recvmsg+0x1b5/0x510 [ 336.922763][T13605] ? __pfx____sys_recvmsg+0x10/0x10 [ 336.922789][T13605] ? __fget_files+0x3a0/0x420 [ 336.922810][T13605] __x64_sys_recvmsg+0x198/0x260 [ 336.922823][T13605] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 336.922841][T13605] ? __pfx_ksys_write+0x10/0x10 [ 336.922852][T13605] ? rcu_is_watching+0x15/0xb0 [ 336.922865][T13605] ? do_syscall_64+0xbe/0x3b0 [ 336.922877][T13605] do_syscall_64+0xfa/0x3b0 [ 336.922886][T13605] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.922895][T13605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.922904][T13605] ? clear_bhb_loop+0x60/0xb0 [ 336.922920][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.922929][T13605] RIP: 0033:0x7f4b8378e9a9 [ 336.922940][T13605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.922948][T13605] RSP: 002b:00007f4b845f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 336.922960][T13605] RAX: ffffffffffffffda RBX: 00007f4b839b5fa0 RCX: 00007f4b8378e9a9 [ 336.922967][T13605] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 336.922973][T13605] RBP: 00007f4b845f9090 R08: 0000000000000000 R09: 0000000000000000 [ 336.922979][T13605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.922985][T13605] R13: 0000000000000000 R14: 00007f4b839b5fa0 R15: 00007ffc5acdd0f8 [ 336.923001][T13605] [ 337.421713][T13531] team0: Port device team_slave_0 added [ 337.432803][T13531] team0: Port device team_slave_1 added [ 337.590134][T13531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.601338][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.628759][T13531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.666922][T13617] macsec1: entered allmulticast mode [ 337.672304][T13617] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 337.689949][T13617] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 337.772321][T13531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.780198][T13531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.806653][T13531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.952228][T13531] hsr_slave_0: entered promiscuous mode [ 337.959755][T13531] hsr_slave_1: entered promiscuous mode [ 337.974052][ T51] Bluetooth: hci5: command tx timeout [ 337.981297][T13531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.989323][T13531] Cannot create hsr debugfs directory [ 338.118421][T13624] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 338.716583][T13531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.764412][T13531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.799640][T13531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 338.823284][T13531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 338.992278][T13531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.050831][T13531] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.080167][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.087387][ T7449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.127402][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.134597][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.552714][T13666] lo speed is unknown, defaulting to 1000 [ 339.602077][T13531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.055352][ T5168] Bluetooth: hci5: command tx timeout [ 340.139903][T13666] lo speed is unknown, defaulting to 1000 [ 340.175611][T13692] netlink: 'syz.0.2133': attribute type 6 has an invalid length. [ 340.194314][T13692] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.216871][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 340.230502][T13692] __nla_validate_parse: 6 callbacks suppressed [ 340.230521][T13692] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2133'. [ 340.419899][T13697] rdma_rxe: rxe_newlink: failed to add lo [ 340.440514][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 340.492966][T13531] veth0_vlan: entered promiscuous mode [ 340.613097][T13531] veth1_vlan: entered promiscuous mode [ 340.750005][T13531] veth0_macvtap: entered promiscuous mode [ 340.767096][T13531] veth1_macvtap: entered promiscuous mode [ 340.818689][T13531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.862445][T13531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.920286][ T7467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.946704][ T7467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.992507][ T7467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.035789][ T7467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.224070][T13710] FAULT_INJECTION: forcing a failure. [ 341.224070][T13710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 341.248462][T13710] CPU: 1 UID: 0 PID: 13710 Comm: syz.2.2139 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 341.248490][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.248501][T13710] Call Trace: [ 341.248508][T13710] [ 341.248516][T13710] dump_stack_lvl+0x189/0x250 [ 341.248541][T13710] ? __pfx____ratelimit+0x10/0x10 [ 341.248568][T13710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.248587][T13710] ? __pfx__printk+0x10/0x10 [ 341.248610][T13710] ? fs_reclaim_acquire+0x7d/0x100 [ 341.248644][T13710] should_fail_ex+0x414/0x560 [ 341.248675][T13710] prepare_alloc_pages+0x213/0x610 [ 341.248709][T13710] __alloc_frozen_pages_noprof+0x123/0x370 [ 341.248738][T13710] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 341.248774][T13710] ? policy_nodemask+0x27c/0x720 [ 341.248802][T13710] alloc_pages_mpol+0x232/0x4a0 [ 341.248830][T13710] vma_alloc_folio_noprof+0xe4/0x200 [ 341.248856][T13710] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 341.248889][T13710] folio_prealloc+0x30/0x180 [ 341.248910][T13710] do_wp_page+0x1231/0x5800 [ 341.248948][T13710] ? __pfx_do_wp_page+0x10/0x10 [ 341.248962][T13710] ? do_raw_spin_lock+0x121/0x290 [ 341.248983][T13710] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 341.249010][T13710] __handle_mm_fault+0x1144/0x5620 [ 341.249046][T13710] ? __pfx___handle_mm_fault+0x10/0x10 [ 341.249076][T13710] ? follow_page_pte+0xe7e/0x14b0 [ 341.249101][T13710] handle_mm_fault+0x40a/0x8e0 [ 341.249128][T13710] __get_user_pages+0x1af4/0x30b0 [ 341.249177][T13710] ? __pfx___get_user_pages+0x10/0x10 [ 341.249193][T13710] ? __gup_longterm_locked+0xbf7/0x15b0 [ 341.249209][T13710] ? down_read_killable+0x1d1/0x350 [ 341.249230][T13710] __gup_longterm_locked+0xd66/0x15b0 [ 341.249258][T13710] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 341.249276][T13710] ? gup_fast_fallback+0x1afc/0x2260 [ 341.249295][T13710] gup_fast_fallback+0x1cd4/0x2260 [ 341.249312][T13710] ? __kernel_text_address+0xd/0x40 [ 341.249364][T13710] ? __pfx_gup_fast_fallback+0x10/0x10 [ 341.249380][T13710] ? kasan_save_track+0x4f/0x80 [ 341.249395][T13710] ? kasan_save_track+0x3e/0x80 [ 341.249415][T13710] ? __kasan_kmalloc+0x93/0xb0 [ 341.249431][T13710] ? sock_kmalloc+0xd6/0x160 [ 341.249446][T13710] ? af_alg_get_rsgl+0x236/0x810 [ 341.249466][T13710] ? skcipher_recvmsg+0x3c0/0x11c0 [ 341.249479][T13710] ? ____sys_recvmsg+0x1c9/0x460 [ 341.249495][T13710] ? ___sys_recvmsg+0x1b5/0x510 [ 341.249509][T13710] ? __x64_sys_recvmsg+0x198/0x260 [ 341.249530][T13710] ? pin_user_pages_fast+0x4d/0xb0 [ 341.249549][T13710] iov_iter_extract_pages+0x35a/0x5e0 [ 341.249576][T13710] extract_iter_to_sg+0xe46/0x24e0 [ 341.249608][T13710] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 341.249629][T13710] ? rcu_is_watching+0x15/0xb0 [ 341.249646][T13710] ? trace_kmalloc+0x1f/0xd0 [ 341.249661][T13710] ? __kmalloc_noprof+0x29b/0x4f0 [ 341.249684][T13710] ? __asan_memset+0x22/0x50 [ 341.249702][T13710] af_alg_get_rsgl+0x436/0x810 [ 341.249742][T13710] skcipher_recvmsg+0x3c0/0x11c0 [ 341.249762][T13710] ? aa_sk_perm+0x81e/0x950 [ 341.249794][T13710] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 341.249813][T13710] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 341.249826][T13710] ? security_socket_recvmsg+0x7e/0x2e0 [ 341.249843][T13710] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 341.249859][T13710] sock_recvmsg+0x22c/0x270 [ 341.249884][T13710] ____sys_recvmsg+0x1c9/0x460 [ 341.249911][T13710] ? __pfx_____sys_recvmsg+0x10/0x10 [ 341.249945][T13710] ? import_iovec+0x74/0xa0 [ 341.249968][T13710] ___sys_recvmsg+0x1b5/0x510 [ 341.249991][T13710] ? __pfx____sys_recvmsg+0x10/0x10 [ 341.250035][T13710] ? __fget_files+0x3a0/0x420 [ 341.250066][T13710] __x64_sys_recvmsg+0x198/0x260 [ 341.250087][T13710] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 341.250115][T13710] ? __pfx_ksys_write+0x10/0x10 [ 341.250130][T13710] ? rcu_is_watching+0x15/0xb0 [ 341.250152][T13710] ? do_syscall_64+0xbe/0x3b0 [ 341.250172][T13710] do_syscall_64+0xfa/0x3b0 [ 341.250186][T13710] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.250200][T13710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.250214][T13710] ? clear_bhb_loop+0x60/0xb0 [ 341.250232][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.250246][T13710] RIP: 0033:0x7f4b8378e9a9 [ 341.250261][T13710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.250275][T13710] RSP: 002b:00007f4b845f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 341.250292][T13710] RAX: ffffffffffffffda RBX: 00007f4b839b5fa0 RCX: 00007f4b8378e9a9 [ 341.250303][T13710] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 341.250313][T13710] RBP: 00007f4b845f9090 R08: 0000000000000000 R09: 0000000000000000 [ 341.250322][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.250331][T13710] R13: 0000000000000000 R14: 00007f4b839b5fa0 R15: 00007ffc5acdd0f8 [ 341.250358][T13710] [ 341.753095][ T7467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.761809][ T7467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.852798][T13708] dvmrp8: entered allmulticast mode [ 341.902194][ T7467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.930636][T13707] dvmrp8: left allmulticast mode [ 341.935806][ T7467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.996238][T13714] tipc: Enabled bearer , priority 0 [ 342.013372][T13714] syzkaller0: entered promiscuous mode [ 342.020727][T13714] syzkaller0: entered allmulticast mode [ 342.108718][T13714] tipc: Resetting bearer [ 342.135200][ T51] Bluetooth: hci5: command tx timeout [ 342.240898][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 342.269827][T13725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.504234][T13738] FAULT_INJECTION: forcing a failure. [ 342.504234][T13738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.523081][T13738] CPU: 1 UID: 0 PID: 13738 Comm: syz.5.2149 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 342.523110][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.523122][T13738] Call Trace: [ 342.523129][T13738] [ 342.523137][T13738] dump_stack_lvl+0x189/0x250 [ 342.523162][T13738] ? __pfx____ratelimit+0x10/0x10 [ 342.523189][T13738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.523208][T13738] ? __pfx__printk+0x10/0x10 [ 342.523232][T13738] ? fs_reclaim_acquire+0x7d/0x100 [ 342.523267][T13738] should_fail_ex+0x414/0x560 [ 342.523299][T13738] prepare_alloc_pages+0x213/0x610 [ 342.523332][T13738] __alloc_frozen_pages_noprof+0x123/0x370 [ 342.523370][T13738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.523401][T13738] ? irqentry_exit+0x74/0x90 [ 342.523417][T13738] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.523434][T13738] ? policy_nodemask+0x27c/0x720 [ 342.523462][T13738] alloc_pages_mpol+0x232/0x4a0 [ 342.523492][T13738] vma_alloc_folio_noprof+0xe4/0x200 [ 342.523519][T13738] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 342.523557][T13738] folio_prealloc+0x30/0x180 [ 342.523582][T13738] do_wp_page+0x1231/0x5800 [ 342.523629][T13738] ? __pfx_do_wp_page+0x10/0x10 [ 342.523646][T13738] ? do_raw_spin_lock+0x121/0x290 [ 342.523673][T13738] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 342.523707][T13738] __handle_mm_fault+0x1144/0x5620 [ 342.523752][T13738] ? __pfx___handle_mm_fault+0x10/0x10 [ 342.523790][T13738] ? follow_page_pte+0xe7e/0x14b0 [ 342.523823][T13738] handle_mm_fault+0x40a/0x8e0 [ 342.523857][T13738] __get_user_pages+0x1af4/0x30b0 [ 342.523919][T13738] ? __pfx___get_user_pages+0x10/0x10 [ 342.523939][T13738] ? __gup_longterm_locked+0xbf7/0x15b0 [ 342.523959][T13738] ? down_read_killable+0x1d1/0x350 [ 342.523983][T13738] __gup_longterm_locked+0xd66/0x15b0 [ 342.524017][T13738] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 342.524040][T13738] ? gup_fast_fallback+0x1afc/0x2260 [ 342.524064][T13738] gup_fast_fallback+0x1cd4/0x2260 [ 342.524084][T13738] ? __kernel_text_address+0xd/0x40 [ 342.524149][T13738] ? __pfx_gup_fast_fallback+0x10/0x10 [ 342.524168][T13738] ? kasan_save_track+0x4f/0x80 [ 342.524186][T13738] ? kasan_save_track+0x3e/0x80 [ 342.524204][T13738] ? __kasan_kmalloc+0x93/0xb0 [ 342.524223][T13738] ? sock_kmalloc+0xd6/0x160 [ 342.524243][T13738] ? af_alg_get_rsgl+0x236/0x810 [ 342.524265][T13738] ? skcipher_recvmsg+0x3c0/0x11c0 [ 342.524282][T13738] ? ____sys_recvmsg+0x1c9/0x460 [ 342.524300][T13738] ? ___sys_recvmsg+0x1b5/0x510 [ 342.524318][T13738] ? __x64_sys_recvmsg+0x198/0x260 [ 342.524350][T13738] ? pin_user_pages_fast+0x4d/0xb0 [ 342.524374][T13738] iov_iter_extract_pages+0x35a/0x5e0 [ 342.524408][T13738] extract_iter_to_sg+0xe46/0x24e0 [ 342.524447][T13738] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 342.524473][T13738] ? rcu_is_watching+0x15/0xb0 [ 342.524493][T13738] ? trace_kmalloc+0x1f/0xd0 [ 342.524512][T13738] ? __kmalloc_noprof+0x29b/0x4f0 [ 342.524540][T13738] ? __asan_memset+0x22/0x50 [ 342.524561][T13738] af_alg_get_rsgl+0x436/0x810 [ 342.524610][T13738] skcipher_recvmsg+0x3c0/0x11c0 [ 342.524634][T13738] ? aa_sk_perm+0x81e/0x950 [ 342.524673][T13738] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 342.524696][T13738] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 342.524712][T13738] ? security_socket_recvmsg+0x7e/0x2e0 [ 342.524734][T13738] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 342.524753][T13738] sock_recvmsg+0x22c/0x270 [ 342.524783][T13738] ____sys_recvmsg+0x1c9/0x460 [ 342.524816][T13738] ? __pfx_____sys_recvmsg+0x10/0x10 [ 342.524857][T13738] ? import_iovec+0x74/0xa0 [ 342.524883][T13738] ___sys_recvmsg+0x1b5/0x510 [ 342.524912][T13738] ? __pfx____sys_recvmsg+0x10/0x10 [ 342.524964][T13738] ? __fget_files+0x3a0/0x420 [ 342.525002][T13738] __x64_sys_recvmsg+0x198/0x260 [ 342.525027][T13738] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 342.525057][T13738] ? __pfx_ksys_write+0x10/0x10 [ 342.525074][T13738] ? rcu_is_watching+0x15/0xb0 [ 342.525096][T13738] ? do_syscall_64+0xbe/0x3b0 [ 342.525116][T13738] do_syscall_64+0xfa/0x3b0 [ 342.525131][T13738] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.525145][T13738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.525161][T13738] ? clear_bhb_loop+0x60/0xb0 [ 342.525179][T13738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.525194][T13738] RIP: 0033:0x7fc0ded8e9a9 [ 342.525211][T13738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.525225][T13738] RSP: 002b:00007fc0dfc0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 342.525243][T13738] RAX: ffffffffffffffda RBX: 00007fc0defb5fa0 RCX: 00007fc0ded8e9a9 [ 342.525256][T13738] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 342.525267][T13738] RBP: 00007fc0dfc0b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.525279][T13738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.525289][T13738] R13: 0000000000000000 R14: 00007fc0defb5fa0 R15: 00007ffc265532f8 [ 342.525322][T13738] [ 343.012446][ T5853] tipc: Node number set to 3134052524 [ 343.239672][T13748] tipc: Enabling of bearer rejected, media not registered [ 343.323983][T13750] tun0: tun_chr_ioctl cmd 1074025675 [ 343.329357][T13750] tun0: persist enabled [ 343.355948][T13751] netlink: 'syz.1.2153': attribute type 13 has an invalid length. [ 343.365517][T13751] netlink: 'syz.1.2153': attribute type 17 has an invalid length. [ 343.375697][T13752] tun0: tun_chr_ioctl cmd 1074025675 [ 343.381291][T13752] tun0: persist enabled [ 343.609731][T13751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.638068][T13733] lo speed is unknown, defaulting to 1000 [ 343.650895][ T7183] lo speed is unknown, defaulting to 1000 [ 343.674483][T13758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.819610][T13748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.140782][T13742] lo speed is unknown, defaulting to 1000 [ 344.142180][T13733] lo speed is unknown, defaulting to 1000 [ 344.485460][T13747] lo speed is unknown, defaulting to 1000 [ 344.631096][T13753] lo speed is unknown, defaulting to 1000 [ 344.772540][T13753] lo speed is unknown, defaulting to 1000 [ 344.799643][T13742] lo speed is unknown, defaulting to 1000 [ 344.816871][T13747] lo speed is unknown, defaulting to 1000 [ 346.011489][T13768] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2155'. [ 346.637479][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 346.676254][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2158'. [ 346.826952][T13783] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2161'. [ 346.949054][T13792] FAULT_INJECTION: forcing a failure. [ 346.949054][T13792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.987187][T13792] CPU: 1 UID: 0 PID: 13792 Comm: syz.2.2163 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 346.987215][T13792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.987226][T13792] Call Trace: [ 346.987234][T13792] [ 346.987242][T13792] dump_stack_lvl+0x189/0x250 [ 346.987266][T13792] ? __pfx____ratelimit+0x10/0x10 [ 346.987292][T13792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.987312][T13792] ? __pfx__printk+0x10/0x10 [ 346.987336][T13792] ? fs_reclaim_acquire+0x7d/0x100 [ 346.987372][T13792] should_fail_ex+0x414/0x560 [ 346.987404][T13792] prepare_alloc_pages+0x213/0x610 [ 346.987439][T13792] __alloc_frozen_pages_noprof+0x123/0x370 [ 346.987469][T13792] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 346.987506][T13792] ? policy_nodemask+0x27c/0x720 [ 346.987535][T13792] alloc_pages_mpol+0x232/0x4a0 [ 346.987565][T13792] vma_alloc_folio_noprof+0xe4/0x200 [ 346.987591][T13792] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 346.987628][T13792] folio_prealloc+0x30/0x180 [ 346.987653][T13792] do_wp_page+0x1231/0x5800 [ 346.987701][T13792] ? __pfx_do_wp_page+0x10/0x10 [ 346.987717][T13792] ? do_raw_spin_lock+0x121/0x290 [ 346.987743][T13792] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.987778][T13792] __handle_mm_fault+0x1144/0x5620 [ 346.987823][T13792] ? __pfx___handle_mm_fault+0x10/0x10 [ 346.987867][T13792] ? follow_page_pte+0xe7e/0x14b0 [ 346.987900][T13792] handle_mm_fault+0x40a/0x8e0 [ 346.987935][T13792] __get_user_pages+0x1af4/0x30b0 [ 346.987997][T13792] ? __pfx___get_user_pages+0x10/0x10 [ 346.988017][T13792] ? __gup_longterm_locked+0xbf7/0x15b0 [ 346.988036][T13792] ? down_read_killable+0x1d1/0x350 [ 346.988063][T13792] __gup_longterm_locked+0xd66/0x15b0 [ 346.988098][T13792] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 346.988121][T13792] ? gup_fast_fallback+0x1afc/0x2260 [ 346.988145][T13792] gup_fast_fallback+0x1cd4/0x2260 [ 346.988165][T13792] ? __kernel_text_address+0xd/0x40 [ 346.988231][T13792] ? __pfx_gup_fast_fallback+0x10/0x10 [ 346.988250][T13792] ? kasan_save_track+0x4f/0x80 [ 346.988267][T13792] ? kasan_save_track+0x3e/0x80 [ 346.988284][T13792] ? __kasan_kmalloc+0x93/0xb0 [ 346.988303][T13792] ? sock_kmalloc+0xd6/0x160 [ 346.988323][T13792] ? af_alg_get_rsgl+0x236/0x810 [ 346.988344][T13792] ? skcipher_recvmsg+0x3c0/0x11c0 [ 346.988361][T13792] ? ____sys_recvmsg+0x1c9/0x460 [ 346.988379][T13792] ? ___sys_recvmsg+0x1b5/0x510 [ 346.988397][T13792] ? __x64_sys_recvmsg+0x198/0x260 [ 346.988422][T13792] ? pin_user_pages_fast+0x4d/0xb0 [ 346.988446][T13792] iov_iter_extract_pages+0x35a/0x5e0 [ 346.988479][T13792] extract_iter_to_sg+0xe46/0x24e0 [ 346.988519][T13792] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 346.988539][T13792] ? sock_kmalloc+0xd6/0x160 [ 346.988563][T13792] ? rcu_is_watching+0x15/0xb0 [ 346.988582][T13792] ? trace_kmalloc+0x1f/0xd0 [ 346.988600][T13792] ? __kmalloc_noprof+0x29b/0x4f0 [ 346.988629][T13792] ? __asan_memset+0x22/0x50 [ 346.988651][T13792] af_alg_get_rsgl+0x436/0x810 [ 346.988699][T13792] skcipher_recvmsg+0x3c0/0x11c0 [ 346.988723][T13792] ? aa_sk_perm+0x81e/0x950 [ 346.988763][T13792] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 346.988786][T13792] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 346.988802][T13792] ? security_socket_recvmsg+0x7e/0x2e0 [ 346.988824][T13792] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 346.988843][T13792] sock_recvmsg+0x22c/0x270 [ 346.988877][T13792] ____sys_recvmsg+0x1c9/0x460 [ 346.988910][T13792] ? __pfx_____sys_recvmsg+0x10/0x10 [ 346.988950][T13792] ? import_iovec+0x74/0xa0 [ 346.988977][T13792] ___sys_recvmsg+0x1b5/0x510 [ 346.989005][T13792] ? __pfx____sys_recvmsg+0x10/0x10 [ 346.989057][T13792] ? __fget_files+0x3a0/0x420 [ 346.989094][T13792] __x64_sys_recvmsg+0x198/0x260 [ 346.989119][T13792] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 346.989152][T13792] ? __pfx_ksys_write+0x10/0x10 [ 346.989170][T13792] ? rcu_is_watching+0x15/0xb0 [ 346.989195][T13792] ? do_syscall_64+0xbe/0x3b0 [ 346.989218][T13792] do_syscall_64+0xfa/0x3b0 [ 346.989234][T13792] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.989250][T13792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.989267][T13792] ? clear_bhb_loop+0x60/0xb0 [ 346.989290][T13792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.989307][T13792] RIP: 0033:0x7f4b8378e9a9 [ 346.989323][T13792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.989339][T13792] RSP: 002b:00007f4b845f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 346.989358][T13792] RAX: ffffffffffffffda RBX: 00007f4b839b5fa0 RCX: 00007f4b8378e9a9 [ 346.989372][T13792] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 346.989383][T13792] RBP: 00007f4b845f9090 R08: 0000000000000000 R09: 0000000000000000 [ 346.989394][T13792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.989405][T13792] R13: 0000000000000000 R14: 00007f4b839b5fa0 R15: 00007ffc5acdd0f8 [ 346.989438][T13792] [ 346.992230][T13795] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2165'. [ 347.765995][T13811] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2170'. [ 348.124172][ T5168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.139260][ T5168] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.150446][ T5168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.165795][ T5168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.175246][ T5168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.411608][T13811] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 348.429998][T13811] bond0 (unregistering): Released all slaves [ 348.450196][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'. [ 348.655032][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2176'. [ 348.973052][T13854] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.151238][T13854] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.202417][T13821] lo speed is unknown, defaulting to 1000 [ 349.209177][T13867] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2185'. [ 349.232900][T13861] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.258985][T13861] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 349.283068][T13861] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 349.351344][T13854] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.403598][T13867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2185'. [ 349.497101][T13867] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 349.507129][T13867] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 349.555752][T13854] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.816181][ T7463] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.878994][ T7462] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.892339][T13821] lo speed is unknown, defaulting to 1000 [ 349.919714][ T7462] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.036591][ T7467] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.083369][T13891] IPVS: Error joining to the multicast group [ 350.230104][T13896] netlink: 'syz.1.2194': attribute type 20 has an invalid length. [ 350.297393][ T5168] Bluetooth: hci6: command tx timeout [ 350.322905][T13900] netlink: 'syz.2.2196': attribute type 1 has an invalid length. [ 350.467421][T13900] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.722636][T13927] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 350.724908][T13821] chnl_net:caif_netlink_parms(): no params data found [ 350.861681][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 351.229713][T13960] __nla_validate_parse: 9 callbacks suppressed [ 351.229732][T13960] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2209'. [ 351.325127][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.375262][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.394657][T13821] bridge_slave_0: entered allmulticast mode [ 351.434183][T13821] bridge_slave_0: entered promiscuous mode [ 351.467830][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.493009][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.513647][T13821] bridge_slave_1: entered allmulticast mode [ 351.549382][T13821] bridge_slave_1: entered promiscuous mode [ 351.567908][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2211'. [ 351.626478][T13969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2211'. [ 351.719116][T13821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.795870][T13821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.936272][T13821] team0: Port device team_slave_0 added [ 351.947076][T13821] team0: Port device team_slave_1 added [ 351.985810][T13986] tipc: Enabled bearer , priority 0 [ 352.020764][T13986] syzkaller0: entered promiscuous mode [ 352.027660][T13986] syzkaller0: entered allmulticast mode [ 352.036419][T13821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.046263][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.073125][T13821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.134981][T13821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.148154][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.180026][T13821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.209204][T13986] tipc: Resetting bearer [ 352.259194][T13985] tipc: Resetting bearer [ 352.304549][T13985] tipc: Disabling bearer [ 352.375909][ T5168] Bluetooth: hci6: command tx timeout [ 352.411623][T13821] hsr_slave_0: entered promiscuous mode [ 352.425813][T13821] hsr_slave_1: entered promiscuous mode [ 352.437169][T13821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.449159][T13821] Cannot create hsr debugfs directory [ 353.255866][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 353.661223][T13821] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.730095][T13821] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 353.835923][T13821] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 353.908766][T13821] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 353.979298][T14054] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2236'. [ 354.192894][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2236'. [ 354.245544][T14045] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2236'. [ 354.454550][ T51] Bluetooth: hci6: command tx timeout [ 354.479769][T13821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.505293][T13821] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.549627][ T7452] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.556833][ T7452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.632099][T14031] lo speed is unknown, defaulting to 1000 [ 354.660729][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.667944][ T7463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.896848][T14071] netlink: 'syz.1.2239': attribute type 39 has an invalid length. [ 355.320559][T13821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.365723][T14079] geneve3: entered allmulticast mode [ 355.702193][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 355.715478][T14084] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2241'. [ 355.726646][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 355.805301][T14031] lo speed is unknown, defaulting to 1000 [ 355.805947][T14052] lo speed is unknown, defaulting to 1000 [ 356.162377][T13821] veth0_vlan: entered promiscuous mode [ 356.212958][T13821] veth1_vlan: entered promiscuous mode [ 356.311237][T13821] veth0_macvtap: entered promiscuous mode [ 356.329264][T13821] veth1_macvtap: entered promiscuous mode [ 356.537227][ T51] Bluetooth: hci6: command tx timeout [ 356.587491][T13821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.602364][T13821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.648394][T14052] lo speed is unknown, defaulting to 1000 [ 356.689253][T14053] lo speed is unknown, defaulting to 1000 [ 356.739915][T14093] macvlan1: entered allmulticast mode [ 356.760521][T14093] bridge0: entered allmulticast mode [ 356.798635][T14093] bridge0: left allmulticast mode [ 356.876463][ T7452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.970662][ T7452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.007114][ T7452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.076337][ T7452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.112838][ T7454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.137955][ T7454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.247037][T14053] lo speed is unknown, defaulting to 1000 [ 357.249105][ T7462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.312636][ T7462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.788622][T14140] FAULT_INJECTION: forcing a failure. [ 358.788622][T14140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.805970][T14140] CPU: 0 UID: 0 PID: 14140 Comm: syz.2.2257 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 358.805997][T14140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.806008][T14140] Call Trace: [ 358.806015][T14140] [ 358.806023][T14140] dump_stack_lvl+0x189/0x250 [ 358.806047][T14140] ? __pfx____ratelimit+0x10/0x10 [ 358.806072][T14140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.806090][T14140] ? __pfx__printk+0x10/0x10 [ 358.806113][T14140] ? fs_reclaim_acquire+0x7d/0x100 [ 358.806146][T14140] should_fail_ex+0x414/0x560 [ 358.806177][T14140] prepare_alloc_pages+0x213/0x610 [ 358.806209][T14140] __alloc_frozen_pages_noprof+0x123/0x370 [ 358.806238][T14140] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.806273][T14140] ? policy_nodemask+0x27c/0x720 [ 358.806300][T14140] alloc_pages_mpol+0x232/0x4a0 [ 358.806328][T14140] vma_alloc_folio_noprof+0xe4/0x200 [ 358.806353][T14140] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 358.806388][T14140] folio_prealloc+0x30/0x180 [ 358.806420][T14140] do_wp_page+0x1231/0x5800 [ 358.806464][T14140] ? __pfx_do_wp_page+0x10/0x10 [ 358.806480][T14140] ? do_raw_spin_lock+0x121/0x290 [ 358.806505][T14140] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.806537][T14140] __handle_mm_fault+0x1144/0x5620 [ 358.806579][T14140] ? __pfx___handle_mm_fault+0x10/0x10 [ 358.806615][T14140] ? follow_page_pte+0xe7e/0x14b0 [ 358.806645][T14140] handle_mm_fault+0x40a/0x8e0 [ 358.806676][T14140] __get_user_pages+0x1af4/0x30b0 [ 358.806734][T14140] ? __pfx___get_user_pages+0x10/0x10 [ 358.806752][T14140] ? __gup_longterm_locked+0xbf7/0x15b0 [ 358.806770][T14140] ? down_read_killable+0x1d1/0x350 [ 358.806796][T14140] __gup_longterm_locked+0xd66/0x15b0 [ 358.806829][T14140] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 358.806851][T14140] ? gup_fast_fallback+0x1afc/0x2260 [ 358.806873][T14140] gup_fast_fallback+0x1cd4/0x2260 [ 358.806892][T14140] ? __kernel_text_address+0xd/0x40 [ 358.806952][T14140] ? __pfx_gup_fast_fallback+0x10/0x10 [ 358.806970][T14140] ? kasan_save_track+0x4f/0x80 [ 358.806991][T14140] ? kasan_save_track+0x3e/0x80 [ 358.807008][T14140] ? __kasan_kmalloc+0x93/0xb0 [ 358.807026][T14140] ? sock_kmalloc+0xd6/0x160 [ 358.807048][T14140] ? af_alg_get_rsgl+0x236/0x810 [ 358.807069][T14140] ? skcipher_recvmsg+0x3c0/0x11c0 [ 358.807086][T14140] ? ____sys_recvmsg+0x1c9/0x460 [ 358.807106][T14140] ? ___sys_recvmsg+0x1b5/0x510 [ 358.807123][T14140] ? __x64_sys_recvmsg+0x198/0x260 [ 358.807147][T14140] ? pin_user_pages_fast+0x4d/0xb0 [ 358.807172][T14140] iov_iter_extract_pages+0x35a/0x5e0 [ 358.807204][T14140] extract_iter_to_sg+0xe46/0x24e0 [ 358.807240][T14140] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 358.807264][T14140] ? rcu_is_watching+0x15/0xb0 [ 358.807283][T14140] ? trace_kmalloc+0x1f/0xd0 [ 358.807300][T14140] ? __kmalloc_noprof+0x29b/0x4f0 [ 358.807326][T14140] ? __asan_memset+0x22/0x50 [ 358.807347][T14140] af_alg_get_rsgl+0x436/0x810 [ 358.807392][T14140] skcipher_recvmsg+0x3c0/0x11c0 [ 358.807435][T14140] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 358.807454][T14140] ? security_socket_recvmsg+0x285/0x2e0 [ 358.807475][T14140] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 358.807491][T14140] ? security_socket_recvmsg+0x7e/0x2e0 [ 358.807510][T14140] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 358.807528][T14140] sock_recvmsg+0x22c/0x270 [ 358.807556][T14140] ____sys_recvmsg+0x1c9/0x460 [ 358.807587][T14140] ? __pfx_____sys_recvmsg+0x10/0x10 [ 358.807625][T14140] ? import_iovec+0x74/0xa0 [ 358.807650][T14140] ___sys_recvmsg+0x1b5/0x510 [ 358.807676][T14140] ? __pfx____sys_recvmsg+0x10/0x10 [ 358.807725][T14140] ? __fget_files+0x3a0/0x420 [ 358.807759][T14140] __x64_sys_recvmsg+0x198/0x260 [ 358.807786][T14140] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 358.807818][T14140] ? __pfx_ksys_write+0x10/0x10 [ 358.807835][T14140] ? rcu_is_watching+0x15/0xb0 [ 358.807858][T14140] ? do_syscall_64+0xbe/0x3b0 [ 358.807880][T14140] do_syscall_64+0xfa/0x3b0 [ 358.807895][T14140] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.807910][T14140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.807927][T14140] ? clear_bhb_loop+0x60/0xb0 [ 358.807948][T14140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.807963][T14140] RIP: 0033:0x7f4b8378e9a9 [ 358.807979][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.807994][T14140] RSP: 002b:00007f4b845f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 358.808012][T14140] RAX: ffffffffffffffda RBX: 00007f4b839b5fa0 RCX: 00007f4b8378e9a9 [ 358.808025][T14140] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 358.808036][T14140] RBP: 00007f4b845f9090 R08: 0000000000000000 R09: 0000000000000000 [ 358.808047][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.808057][T14140] R13: 0000000000000000 R14: 00007f4b839b5fa0 R15: 00007ffc5acdd0f8 [ 358.808087][T14140] [ 359.419931][T14146] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 359.459289][T14146] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2259'. [ 360.105628][ T7178] IPVS: starting estimator thread 0... [ 360.197143][T14160] IPVS: using max 32 ests per chain, 76800 per kthread [ 360.281619][T14167] syzkaller1: entered promiscuous mode [ 360.314671][T14167] syzkaller1: entered allmulticast mode [ 361.141327][T14147] lo speed is unknown, defaulting to 1000 [ 361.149309][ T7466] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.179259][ T7466] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.478197][ T7466] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.521578][ T7466] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.917487][T14147] lo speed is unknown, defaulting to 1000 [ 362.063246][T14164] lo speed is unknown, defaulting to 1000 [ 362.256068][T14205] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2274'. [ 363.178644][T14210] netlink: 'syz.1.2274': attribute type 6 has an invalid length. [ 363.608244][T14226] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2280'. [ 363.766439][T14165] lo speed is unknown, defaulting to 1000 [ 363.777038][T14164] lo speed is unknown, defaulting to 1000 [ 363.859460][T14233] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2282'. [ 364.077920][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2283'. [ 364.106117][T14241] FAULT_INJECTION: forcing a failure. [ 364.106117][T14241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.156387][T14241] CPU: 1 UID: 0 PID: 14241 Comm: syz.0.2284 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 364.156416][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.156427][T14241] Call Trace: [ 364.156434][T14241] [ 364.156443][T14241] dump_stack_lvl+0x189/0x250 [ 364.156468][T14241] ? __pfx____ratelimit+0x10/0x10 [ 364.156493][T14241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.156512][T14241] ? __pfx__printk+0x10/0x10 [ 364.156535][T14241] ? fs_reclaim_acquire+0x7d/0x100 [ 364.156569][T14241] should_fail_ex+0x414/0x560 [ 364.156601][T14241] prepare_alloc_pages+0x213/0x610 [ 364.156632][T14241] __alloc_frozen_pages_noprof+0x123/0x370 [ 364.156660][T14241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 364.156699][T14241] ? policy_nodemask+0x27c/0x720 [ 364.156728][T14241] alloc_pages_mpol+0x232/0x4a0 [ 364.156757][T14241] vma_alloc_folio_noprof+0xe4/0x200 [ 364.156788][T14241] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 364.156825][T14241] folio_prealloc+0x30/0x180 [ 364.156854][T14241] do_wp_page+0x1231/0x5800 [ 364.156909][T14241] ? __pfx_do_wp_page+0x10/0x10 [ 364.156926][T14241] ? do_raw_spin_lock+0x121/0x290 [ 364.156952][T14241] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 364.156987][T14241] __handle_mm_fault+0x1144/0x5620 [ 364.157034][T14241] ? __pfx___handle_mm_fault+0x10/0x10 [ 364.157075][T14241] ? follow_page_pte+0xe7e/0x14b0 [ 364.157106][T14241] handle_mm_fault+0x40a/0x8e0 [ 364.157139][T14241] __get_user_pages+0x1af4/0x30b0 [ 364.157199][T14241] ? __pfx___get_user_pages+0x10/0x10 [ 364.157219][T14241] ? __gup_longterm_locked+0xbf7/0x15b0 [ 364.157239][T14241] ? down_read_killable+0x1d1/0x350 [ 364.157264][T14241] __gup_longterm_locked+0xd66/0x15b0 [ 364.157299][T14241] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 364.157322][T14241] ? gup_fast_fallback+0x1afc/0x2260 [ 364.157345][T14241] gup_fast_fallback+0x1cd4/0x2260 [ 364.157366][T14241] ? __kernel_text_address+0xd/0x40 [ 364.157434][T14241] ? __pfx_gup_fast_fallback+0x10/0x10 [ 364.157453][T14241] ? kasan_save_track+0x4f/0x80 [ 364.157472][T14241] ? kasan_save_track+0x3e/0x80 [ 364.157489][T14241] ? __kasan_kmalloc+0x93/0xb0 [ 364.157509][T14241] ? sock_kmalloc+0xd6/0x160 [ 364.157528][T14241] ? af_alg_get_rsgl+0x236/0x810 [ 364.157550][T14241] ? skcipher_recvmsg+0x3c0/0x11c0 [ 364.157567][T14241] ? ____sys_recvmsg+0x1c9/0x460 [ 364.157586][T14241] ? ___sys_recvmsg+0x1b5/0x510 [ 364.157603][T14241] ? __x64_sys_recvmsg+0x198/0x260 [ 364.157628][T14241] ? pin_user_pages_fast+0x4d/0xb0 [ 364.157651][T14241] iov_iter_extract_pages+0x35a/0x5e0 [ 364.157684][T14241] extract_iter_to_sg+0xe46/0x24e0 [ 364.157722][T14241] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 364.157748][T14241] ? rcu_is_watching+0x15/0xb0 [ 364.157768][T14241] ? trace_kmalloc+0x1f/0xd0 [ 364.157786][T14241] ? __kmalloc_noprof+0x29b/0x4f0 [ 364.157814][T14241] ? __asan_memset+0x22/0x50 [ 364.157835][T14241] af_alg_get_rsgl+0x436/0x810 [ 364.157882][T14241] skcipher_recvmsg+0x3c0/0x11c0 [ 364.157911][T14241] ? aa_sk_perm+0x81e/0x950 [ 364.157950][T14241] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 364.157973][T14241] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 364.157989][T14241] ? security_socket_recvmsg+0x7e/0x2e0 [ 364.158010][T14241] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 364.158029][T14241] sock_recvmsg+0x22c/0x270 [ 364.158059][T14241] ____sys_recvmsg+0x1c9/0x460 [ 364.158091][T14241] ? __pfx_____sys_recvmsg+0x10/0x10 [ 364.158131][T14241] ? import_iovec+0x74/0xa0 [ 364.158157][T14241] ___sys_recvmsg+0x1b5/0x510 [ 364.158185][T14241] ? __pfx____sys_recvmsg+0x10/0x10 [ 364.158236][T14241] ? __fget_files+0x3a0/0x420 [ 364.158273][T14241] __x64_sys_recvmsg+0x198/0x260 [ 364.158298][T14241] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 364.158330][T14241] ? __pfx_ksys_write+0x10/0x10 [ 364.158353][T14241] ? rcu_is_watching+0x15/0xb0 [ 364.158378][T14241] ? do_syscall_64+0xbe/0x3b0 [ 364.158401][T14241] do_syscall_64+0xfa/0x3b0 [ 364.158417][T14241] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.158433][T14241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.158450][T14241] ? clear_bhb_loop+0x60/0xb0 [ 364.158472][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.158489][T14241] RIP: 0033:0x7f775a98e9a9 [ 364.158505][T14241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.158520][T14241] RSP: 002b:00007f775b842038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 364.158544][T14241] RAX: ffffffffffffffda RBX: 00007f775abb5fa0 RCX: 00007f775a98e9a9 [ 364.158558][T14241] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 364.158569][T14241] RBP: 00007f775b842090 R08: 0000000000000000 R09: 0000000000000000 [ 364.158580][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.158591][T14241] R13: 0000000000000000 R14: 00007f775abb5fa0 R15: 00007ffcaa74cc58 [ 364.158627][T14241] [ 365.082396][T14261] syz_tun: entered allmulticast mode [ 365.139081][T14261] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 365.227372][T14165] lo speed is unknown, defaulting to 1000 [ 365.227399][T14205] lo speed is unknown, defaulting to 1000 [ 365.681533][T14276] netlink: 'syz.0.2291': attribute type 13 has an invalid length. [ 365.721717][T14276] netlink: 'syz.0.2291': attribute type 17 has an invalid length. [ 365.806215][T14276] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.905105][T14276] dummy0: left promiscuous mode [ 365.929584][T14276] dummy0: left allmulticast mode [ 365.988808][T14276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.052912][T14205] lo speed is unknown, defaulting to 1000 [ 366.062038][T14284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.275280][T14276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.785362][T14293] netlink: 'syz.6.2294': attribute type 4 has an invalid length. [ 367.886621][T14302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.937792][T14302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.997450][T14302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.027963][T14302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.131895][T14277] lo speed is unknown, defaulting to 1000 [ 368.761001][T14277] lo speed is unknown, defaulting to 1000 [ 368.889546][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 370.151889][T14356] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 370.160880][ T7188] IPVS: starting estimator thread 0... [ 370.415994][T14365] IPVS: using max 25 ests per chain, 60000 per kthread [ 370.650450][T14376] netlink: 'syz.5.2320': attribute type 10 has an invalid length. [ 370.667317][T14360] lo speed is unknown, defaulting to 1000 [ 370.668231][T14376] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2320'. [ 370.780735][T14376] team0: Port device geneve0 added [ 370.901242][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 371.208979][T14360] lo speed is unknown, defaulting to 1000 [ 371.759448][T14416] FAULT_INJECTION: forcing a failure. [ 371.759448][T14416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 371.799278][T14416] CPU: 1 UID: 0 PID: 14416 Comm: syz.0.2332 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 371.799310][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.799333][T14416] Call Trace: [ 371.799344][T14416] [ 371.799352][T14416] dump_stack_lvl+0x189/0x250 [ 371.799375][T14416] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.799394][T14416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.799434][T14416] should_fail_ex+0x414/0x560 [ 371.799467][T14416] prepare_alloc_pages+0x213/0x610 [ 371.799502][T14416] __alloc_frozen_pages_noprof+0x123/0x370 [ 371.799533][T14416] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 371.799563][T14416] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 371.799593][T14416] ? policy_nodemask+0x27c/0x720 [ 371.799622][T14416] alloc_pages_mpol+0x232/0x4a0 [ 371.799651][T14416] vma_alloc_folio_noprof+0xe4/0x200 [ 371.799674][T14416] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 371.799699][T14416] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 371.799736][T14416] folio_prealloc+0x30/0x180 [ 371.799761][T14416] do_wp_page+0x1231/0x5800 [ 371.799807][T14416] ? __pfx_do_wp_page+0x10/0x10 [ 371.799824][T14416] ? do_raw_spin_lock+0x121/0x290 [ 371.799850][T14416] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 371.799873][T14416] ? in_lock_functions+0x1d/0x30 [ 371.799902][T14416] __handle_mm_fault+0x1144/0x5620 [ 371.799946][T14416] ? __pfx___handle_mm_fault+0x10/0x10 [ 371.799983][T14416] ? follow_page_pte+0xe7e/0x14b0 [ 371.800015][T14416] handle_mm_fault+0x40a/0x8e0 [ 371.800049][T14416] __get_user_pages+0x1af4/0x30b0 [ 371.800110][T14416] ? __pfx___get_user_pages+0x10/0x10 [ 371.800137][T14416] ? __gup_longterm_locked+0xbf7/0x15b0 [ 371.800156][T14416] ? down_read_killable+0x1d1/0x350 [ 371.800181][T14416] __gup_longterm_locked+0xd66/0x15b0 [ 371.800215][T14416] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 371.800238][T14416] ? gup_fast_fallback+0x1afc/0x2260 [ 371.800261][T14416] gup_fast_fallback+0x1cd4/0x2260 [ 371.800282][T14416] ? __kernel_text_address+0xd/0x40 [ 371.800346][T14416] ? __pfx_gup_fast_fallback+0x10/0x10 [ 371.800365][T14416] ? kasan_save_track+0x4f/0x80 [ 371.800383][T14416] ? kasan_save_track+0x3e/0x80 [ 371.800400][T14416] ? __kasan_kmalloc+0x93/0xb0 [ 371.800420][T14416] ? sock_kmalloc+0xd6/0x160 [ 371.800439][T14416] ? af_alg_get_rsgl+0x236/0x810 [ 371.800463][T14416] ? skcipher_recvmsg+0x3c0/0x11c0 [ 371.800479][T14416] ? ____sys_recvmsg+0x1c9/0x460 [ 371.800498][T14416] ? ___sys_recvmsg+0x1b5/0x510 [ 371.800516][T14416] ? __x64_sys_recvmsg+0x198/0x260 [ 371.800541][T14416] ? pin_user_pages_fast+0x4d/0xb0 [ 371.800564][T14416] iov_iter_extract_pages+0x35a/0x5e0 [ 371.800597][T14416] extract_iter_to_sg+0xe46/0x24e0 [ 371.800636][T14416] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 371.800661][T14416] ? rcu_is_watching+0x15/0xb0 [ 371.800681][T14416] ? trace_kmalloc+0x1f/0xd0 [ 371.800699][T14416] ? __kmalloc_noprof+0x29b/0x4f0 [ 371.800727][T14416] ? __asan_memset+0x22/0x50 [ 371.800749][T14416] af_alg_get_rsgl+0x436/0x810 [ 371.800796][T14416] skcipher_recvmsg+0x3c0/0x11c0 [ 371.800819][T14416] ? aa_sk_perm+0x81e/0x950 [ 371.800858][T14416] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 371.800880][T14416] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 371.800896][T14416] ? security_socket_recvmsg+0x7e/0x2e0 [ 371.800917][T14416] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 371.800936][T14416] sock_recvmsg+0x22c/0x270 [ 371.800966][T14416] ____sys_recvmsg+0x1c9/0x460 [ 371.800998][T14416] ? __pfx_____sys_recvmsg+0x10/0x10 [ 371.801038][T14416] ? import_iovec+0x74/0xa0 [ 371.801064][T14416] ___sys_recvmsg+0x1b5/0x510 [ 371.801092][T14416] ? __pfx____sys_recvmsg+0x10/0x10 [ 371.801150][T14416] ? __fget_files+0x3a0/0x420 [ 371.801187][T14416] __x64_sys_recvmsg+0x198/0x260 [ 371.801212][T14416] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 371.801243][T14416] ? __pfx_ksys_write+0x10/0x10 [ 371.801260][T14416] ? rcu_is_watching+0x15/0xb0 [ 371.801285][T14416] ? do_syscall_64+0xbe/0x3b0 [ 371.801307][T14416] do_syscall_64+0xfa/0x3b0 [ 371.801323][T14416] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.801340][T14416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.801357][T14416] ? clear_bhb_loop+0x60/0xb0 [ 371.801378][T14416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.801395][T14416] RIP: 0033:0x7f775a98e9a9 [ 371.801412][T14416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.801427][T14416] RSP: 002b:00007f775b842038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 371.801446][T14416] RAX: ffffffffffffffda RBX: 00007f775abb5fa0 RCX: 00007f775a98e9a9 [ 371.801460][T14416] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 371.801472][T14416] RBP: 00007f775b842090 R08: 0000000000000000 R09: 0000000000000000 [ 371.801483][T14416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.801494][T14416] R13: 0000000000000000 R14: 00007f775abb5fa0 R15: 00007ffcaa74cc58 [ 371.801527][T14416] [ 372.911423][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 372.937658][T14419] lo speed is unknown, defaulting to 1000 [ 373.142124][T14441] veth11: entered promiscuous mode [ 373.176549][T14442] erspan0: entered allmulticast mode [ 373.522546][T14455] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2345'. [ 373.620713][T14422] lo speed is unknown, defaulting to 1000 [ 373.639469][T14419] lo speed is unknown, defaulting to 1000 [ 373.656336][T14463] netlink: 'syz.6.2344': attribute type 23 has an invalid length. [ 373.687863][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2346'. [ 373.709440][T14462] veth1_macvtap: default FDB implementation only supports local addresses [ 374.101179][T14470] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2348'. [ 374.230418][T14473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2347'. [ 374.409105][T14481] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2352'. [ 374.426546][T14481] tipc: Enabling of bearer rejected, failed to enable media [ 374.647723][T14422] lo speed is unknown, defaulting to 1000 [ 374.679309][T14423] lo speed is unknown, defaulting to 1000 [ 377.097649][ T7183] page_pool_release_retry() stalled pool shutdown: id 97, 1 inflight 60 sec [ 377.650967][T14423] lo speed is unknown, defaulting to 1000 [ 377.751455][T14501] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 377.777396][T14501] bond1: left promiscuous mode [ 377.806280][T14501] ip6tnl1: left promiscuous mode [ 377.811560][T14501] ip6tnl1: left allmulticast mode [ 377.829053][T14501] gretap1: left promiscuous mode [ 377.836396][T14501] gretap1: left allmulticast mode [ 377.889127][T14501] tipc: Resetting bearer [ 377.897074][T14501] syzkaller0: left promiscuous mode [ 377.902368][T14501] syzkaller0: left allmulticast mode [ 377.912020][T14501] geneve2: left promiscuous mode [ 377.918941][T14501] geneve2: left allmulticast mode [ 377.927775][T14501] veth3: left promiscuous mode [ 377.932994][T14501] macsec0: left promiscuous mode [ 377.942948][T14501] macsec0: left allmulticast mode [ 377.956696][T14501] macvlan0: left promiscuous mode [ 377.963223][T14501] macvlan0: left allmulticast mode [ 378.142248][ T7449] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.153149][ T7449] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.200644][T14519] nbd: couldn't find a device at index 0 [ 378.351455][ T7449] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.367621][ T7449] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.406137][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2364'. [ 378.416723][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2364'. [ 378.820938][T14537] netlink: 'syz.6.2370': attribute type 1 has an invalid length. [ 378.837997][T14539] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2367'. [ 378.960770][T14537] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.111789][T14541] bond1: (slave gretap1): making interface the new active one [ 379.137992][T14541] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 379.345281][T14556] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 379.798485][T14573] nftables ruleset with unbound chain [ 380.171804][T14564] lo speed is unknown, defaulting to 1000 [ 380.319603][T14586] netlink: 'syz.0.2383': attribute type 2 has an invalid length. [ 380.342547][T14586] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2383'. [ 380.370679][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2382'. [ 380.682166][T14564] lo speed is unknown, defaulting to 1000 [ 442.135492][ T5168] Bluetooth: hci4: command 0x0405 tx timeout [ 467.737545][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 472.854402][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 479.734296][ T31] INFO: task syz.4.2077:13482 blocked for more than 143 seconds. [ 479.742060][ T31] Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 [ 479.750168][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.759463][ T31] task:syz.4.2077 state:D stack:27272 pid:13482 tgid:13481 ppid:5856 task_flags:0x400140 flags:0x00004004 [ 479.771986][ T31] Call Trace: [ 479.776591][ T31] [ 479.779544][ T31] __schedule+0x16fd/0x4cf0 [ 479.784794][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.789697][ T31] ? schedule+0x165/0x360 [ 479.795163][ T31] ? __pfx___schedule+0x10/0x10 [ 479.800291][ T31] ? schedule+0x91/0x360 [ 479.805105][ T31] schedule+0x165/0x360 [ 479.809255][ T31] schedule_preempt_disabled+0x13/0x30 [ 479.815820][ T31] __mutex_lock+0x724/0xe80 [ 479.820358][ T31] ? __mutex_lock+0x51b/0xe80 [ 479.825626][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 479.831344][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 479.836916][ T31] ? __nlmsg_put+0xef/0x1b0 [ 479.841435][ T31] ? genlmsg_put+0x137/0x2e0 [ 479.846678][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 479.852265][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 479.858650][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 479.864431][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 479.870008][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 479.876805][ T31] ? stack_trace_save+0x9c/0xe0 [ 479.881669][ T31] genl_rcv_msg+0x60e/0x790 [ 479.886833][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.891849][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 479.899119][ T31] netlink_rcv_skb+0x205/0x470 [ 479.905438][ T31] ? __lock_acquire+0xab9/0xd20 [ 479.910324][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 479.916463][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.921785][ T31] ? down_read+0x1ad/0x2e0 [ 479.927361][ T31] genl_rcv+0x28/0x40 [ 479.931354][ T31] netlink_unicast+0x82c/0x9e0 [ 479.936660][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 479.941936][ T31] ? netlink_sendmsg+0x642/0xb30 [ 479.947528][ T31] ? skb_put+0x11b/0x210 [ 479.951762][ T31] netlink_sendmsg+0x805/0xb30 [ 479.957618][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.962928][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 479.968481][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.974936][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.980506][ T31] __sock_sendmsg+0x21c/0x270 [ 479.985737][ T31] ____sys_sendmsg+0x505/0x830 [ 479.990506][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.996444][ T31] ? import_iovec+0x74/0xa0 [ 480.000962][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 480.007155][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.012400][ T31] ? __fget_files+0x2a/0x420 [ 480.017322][ T31] ? __fget_files+0x3a0/0x420 [ 480.021997][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 480.027224][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.032679][ T31] ? rcu_is_watching+0x15/0xb0 [ 480.038021][ T31] ? do_syscall_64+0xbe/0x3b0 [ 480.042725][ T31] do_syscall_64+0xfa/0x3b0 [ 480.047853][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.055008][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.061172][ T31] ? clear_bhb_loop+0x60/0xb0 [ 480.066389][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.072268][ T31] RIP: 0033:0x7ff91478e9a9 [ 480.077504][ T31] RSP: 002b:00007ff915648038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.087071][ T31] RAX: ffffffffffffffda RBX: 00007ff9149b5fa0 RCX: 00007ff91478e9a9 [ 480.096173][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 480.105132][ T31] RBP: 00007ff914810d69 R08: 0000000000000000 R09: 0000000000000000 [ 480.113192][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.121714][ T31] R13: 0000000000000000 R14: 00007ff9149b5fa0 R15: 00007ffe36e5d9e8 [ 480.130264][ T31] [ 480.134017][ T31] [ 480.134017][ T31] Showing all locks held in the system: [ 480.141751][ T31] 1 lock held by khungtaskd/31: [ 480.146898][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 480.157040][ T31] 2 locks held by getty/5611: [ 480.161788][ T31] #0: ffff88803592a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 480.172062][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 480.182712][ T31] 2 locks held by syz.3.1951/13073: [ 480.189001][ T31] #0: ffffffff8f584b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 480.197835][ T31] #1: ffffffff8e41bd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 480.209405][ T31] 2 locks held by syz.4.2077/13482: [ 480.215881][ T31] #0: ffffffff8f584b70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 480.224650][ T31] #1: ffffffff8e41bd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 480.235757][ T31] [ 480.238090][ T31] ============================================= [ 480.238090][ T31] [ 480.247042][ T31] NMI backtrace for cpu 1 [ 480.247055][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 480.247076][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.247087][ T31] Call Trace: [ 480.247095][ T31] [ 480.247105][ T31] dump_stack_lvl+0x189/0x250 [ 480.247128][ T31] ? __wake_up_klogd+0xd9/0x110 [ 480.247156][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.247178][ T31] ? __pfx__printk+0x10/0x10 [ 480.247218][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 480.247245][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 480.247256][ T31] ? _printk+0xcf/0x120 [ 480.247270][ T31] ? __pfx__printk+0x10/0x10 [ 480.247297][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 480.247313][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 480.247327][ T31] watchdog+0xfee/0x1030 [ 480.247343][ T31] ? watchdog+0x1de/0x1030 [ 480.247361][ T31] kthread+0x70e/0x8a0 [ 480.247375][ T31] ? __pfx_watchdog+0x10/0x10 [ 480.247388][ T31] ? __pfx_kthread+0x10/0x10 [ 480.247402][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.247416][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.247424][ T31] ? __pfx_kthread+0x10/0x10 [ 480.247436][ T31] ret_from_fork+0x3fc/0x770 [ 480.247447][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 480.247460][ T31] ? __switch_to_asm+0x39/0x70 [ 480.247471][ T31] ? __switch_to_asm+0x33/0x70 [ 480.247481][ T31] ? __pfx_kthread+0x10/0x10 [ 480.247494][ T31] ret_from_fork_asm+0x1a/0x30 [ 480.247513][ T31] [ 480.247517][ T31] Sending NMI from CPU 1 to CPUs 0: [ 480.416862][ C0] NMI backtrace for cpu 0 [ 480.416881][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 480.416899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.416909][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x20/0x90 [ 480.416935][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 d0 9f 92 65 8b 15 08 a3 df 10 81 e2 00 01 ff 00 74 11 <81> fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 [ 480.416949][ C0] RSP: 0018:ffffc90000007a88 EFLAGS: 00000206 [ 480.416964][ C0] RAX: ffffffff898ca37c RBX: 000000a7c5ac471b RCX: ffffffff8de95280 [ 480.416977][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 000000a7c5ac471b [ 480.416987][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 480.416996][ C0] R10: dffffc0000000000 R11: fffff52000000f54 R12: 00000015798ee228 [ 480.417008][ C0] R13: 0019999999999998 R14: ffffc9001e07c250 R15: 0000000225c17d04 [ 480.417020][ C0] FS: 0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 480.417033][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.417043][ C0] CR2: 0000200000346030 CR3: 000000000df38000 CR4: 00000000003526f0 [ 480.417057][ C0] Call Trace: [ 480.417064][ C0] [ 480.417070][ C0] pie_calculate_probability+0x23c/0x7e0 [ 480.417100][ C0] fq_pie_timer+0x288/0x5b0 [ 480.417120][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 480.417141][ C0] call_timer_fn+0x17b/0x5f0 [ 480.417155][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 480.417173][ C0] ? call_timer_fn+0xbe/0x5f0 [ 480.417186][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 480.417204][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.417225][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.417238][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 480.417257][ C0] __run_timer_base+0x61a/0x860 [ 480.417277][ C0] ? ktime_get+0x3e/0x1f0 [ 480.417301][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 480.417319][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 480.417346][ C0] run_timer_softirq+0xb7/0x180 [ 480.417366][ C0] handle_softirqs+0x286/0x870 [ 480.417385][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 480.417403][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 480.417421][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 480.417442][ C0] __irq_exit_rcu+0xca/0x1f0 [ 480.417457][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 480.417477][ C0] irq_exit_rcu+0x9/0x30 [ 480.417490][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 480.417510][ C0] [ 480.417521][ C0] [ 480.417527][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.417543][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 480.417563][ C0] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 0d 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 480.417575][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 480.417588][ C0] RAX: eed287c587210800 RBX: ffffffff81976a18 RCX: eed287c587210800 [ 480.417600][ C0] RDX: 0000000000000001 RSI: ffffffff8d99988c RDI: ffffffff8be28d00 [ 480.417612][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 480.417623][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1f6f0 [ 480.417635][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 480.417648][ C0] ? do_idle+0x1e8/0x510 [ 480.417668][ C0] default_idle+0x13/0x20 [ 480.417683][ C0] default_idle_call+0x74/0xb0 [ 480.417698][ C0] do_idle+0x1e8/0x510 [ 480.417717][ C0] ? __pfx_do_idle+0x10/0x10 [ 480.417740][ C0] cpu_startup_entry+0x44/0x60 [ 480.417756][ C0] rest_init+0x2de/0x300 [ 480.417772][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 480.417789][ C0] start_kernel+0x47d/0x500 [ 480.417809][ C0] x86_64_start_reservations+0x24/0x30 [ 480.417823][ C0] x86_64_start_kernel+0x143/0x1c0 [ 480.417837][ C0] common_startup_64+0x13e/0x147 [ 480.417864][ C0] [ 480.419784][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 480.810357][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4 #0 PREEMPT(full) [ 480.822142][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.832187][ T31] Call Trace: [ 480.835460][ T31] [ 480.838378][ T31] dump_stack_lvl+0x99/0x250 [ 480.842956][ T31] ? __asan_memcpy+0x40/0x70 [ 480.847529][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.852713][ T31] ? __pfx__printk+0x10/0x10 [ 480.857299][ T31] panic+0x2db/0x790 [ 480.861184][ T31] ? __pfx_panic+0x10/0x10 [ 480.865581][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 480.871374][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 480.876739][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 480.882893][ T31] watchdog+0x102d/0x1030 [ 480.887212][ T31] ? watchdog+0x1de/0x1030 [ 480.891623][ T31] kthread+0x70e/0x8a0 [ 480.895679][ T31] ? __pfx_watchdog+0x10/0x10 [ 480.900342][ T31] ? __pfx_kthread+0x10/0x10 [ 480.904917][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.910103][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.915282][ T31] ? __pfx_kthread+0x10/0x10 [ 480.919858][ T31] ret_from_fork+0x3fc/0x770 [ 480.924441][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 480.929557][ T31] ? __switch_to_asm+0x39/0x70 [ 480.934312][ T31] ? __switch_to_asm+0x33/0x70 [ 480.939061][ T31] ? __pfx_kthread+0x10/0x10 [ 480.943640][ T31] ret_from_fork_asm+0x1a/0x30 [ 480.948404][ T31] [ 480.951743][ T31] Kernel Offset: disabled [ 480.956082][ T31] Rebooting in 86400 seconds..