last executing test programs: 3m16.015170826s ago: executing program 1 (id=1357): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x7, 0x3, 0x3, 0x100, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) ioctl$FIONCLEX(r2, 0x5450) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r4, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x0, 0xb56039c214c1041d, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02221e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af268c900a756e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32bf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b577243152374d7b367337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fb2469d6cbf857a137b542045d203e43874fe17720a05d3bc42bde811dcf97732108f5cb5943e609856876c2108491e88875ead76331822c8f0151a1cf06e634ac0933487716484f30f17d8f29af19784814192b4677759b781fc1a6726b154bbf3f30c48f0b829397acb9b337a6929d1158492e49bfe9a1158a57b6a422c8d1a3c476487a736a74d01bf48e05ac030092c66a502a8a5c9ef0a29582b6fef6d0dcd6a3a277887134f98291d79a2ed48adb3086b7c1c7340e0998036686b1919d25c3aa9591f4135fdad46003d76b366b81e50fdefeecf3b5d17e946059e2883ca43d61e14e725f0acaff73e0922319b6ea7b09b7b9ea691f5598f014f362e033ba9bc2a64f1c2ed591ef9c6f1a7a08e8e2842c0a592dd82d72e141db440000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0xfffffffffffffffd) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x7, 0x3, 0x3, 0x100, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) (async) ioctl$FIONCLEX(r2, 0x5450) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) connect$nfc_raw(r4, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x0, 0xb56039c214c1041d, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) 3m15.867392788s ago: executing program 1 (id=1361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r1, 0x1, 0xffffff80}, 0x14}}, 0x0) 3m15.866730953s ago: executing program 3 (id=1362): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000005000000140000001100010000000000000000000000000a353d4e46414366d915e757a651b1db41d0b1356bb40c1b6fa9062cf0e6de9c4af635e159c6dddafa597e96c9628c5767dcaafc709cc06ff0b4af492054846420de8740cdd620985c9a26604893eda0fd9ec9abf1a1c9f3dec8836f02e383bc790f15f834b2e6831b18c3b21788877d17012c5c497f542f7f4cdca41138675be6e5799244fe50eb48a00a22d062210f5bbc17cadbc72fb466591f61269a72b6db6c0dccfa4ab74014933030d7b848006a53f600"/253], 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a"], 0x34}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) getpid() (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x4, 0x10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000fcdbdf251900000008000300", @ANYRES32=r6, @ANYBLOB="05001c00050000000500a30001000000050060000400006f0d00000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20044000) 3m15.826288125s ago: executing program 3 (id=1364): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}}, [0x2, 0x8, 0x400, 0x100000001, 0x6, 0x7, 0x9, 0x6, 0x1000, 0x3, 0x8f, 0x8, 0x5, 0x0, 0x400]}, &(0x7f0000000000)=0x100) setsockopt(r0, 0x4, 0x10000, &(0x7f0000000140)="752fa1a62f957f74ce5e69ce16704f7b2ba434b590b6f28b342b1895508785e061d36da792fe337c4dff8f9fab3c253812c5838063b66a88bb6bb28c3b936c647bb94cba6f6903afaca0fc2fd1516df104fd33b74a", 0x55) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r1, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0xfffffffe, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x2, 0x0, 0xfffffd01}, 0xc000) 3m15.743384927s ago: executing program 3 (id=1365): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x28, 0x5, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xac}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000020000000000000000000114000400fc00000000000000000000000000000108000740000000012c00068014000500fe800000000000000000000400000031140004"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000040)='\")\x00'/12) 3m15.735374544s ago: executing program 1 (id=1366): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000009640)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r1, 0x3) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0) 3m15.713900927s ago: executing program 3 (id=1367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x81}]}]}, @TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x8804) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000110000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r5}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) 3m15.641518028s ago: executing program 1 (id=1369): r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100080039fc000000000000cab9b2772c43f39f2d5b7c8254000000000500000002000000000041c61cedcc10669b6850015ee2d9acce3b7460a5b505e3f0a70c526ca5739940a1ddc72a6190147e909dbb0874ca09b5f404fe615ed604bde6dbe5f474ec804553bd98c751d6294ee9a438b043c4caf23aabef8d7a9fbba42f9c37966d83e72cb26d870fcd6c6dd7cb0fe3276c9e5b237bb0913fdd6bf27fc43484620bc82ad3aa023487071ceb28f161cb8f925407805316f429cde240a39bc14538a49e7563f96a"], 0x0, 0xfc5f}, 0x20) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) clock_gettime(0xa, 0x0) listen(r2, 0xfffffffc) recvmmsg(r0, &(0x7f0000003f40), 0x0, 0x100, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x9, 0x0, &(0x7f0000000340)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc81, 0x100, 0x1, 0x2}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 3m15.579041093s ago: executing program 3 (id=1370): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x6, 0x9}, {0x0, 0x9}, {0x9, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x94) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) write$tun(r1, 0x0, 0x0) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, 0x0, 0x275a, 0x0) 3m15.503197667s ago: executing program 1 (id=1371): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1900"/12, @ANYRES32, @ANYBLOB="976355d6815fdda92c2f21da311eff2c4ceeb83fa5a81511cd2693e586a341de39b010397b815be6650546af49125519322fc0111a6b6c949f9b9735916ceca62c0f983024920a3f905f19f62d760a87d5a97b027d8976d7bf40ca477da69952944de30db0ea69ebcb28f8254ebaa8c63d15a65191732eef519eafe7052df8d5251ed237185dc42fc02b3346f6ad165875b8c25e73ece911dabc0801d2eb36886781967eef28afc4e1445c3160daf9fb", @ANYRES64=0x0], 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4c23, @rand_addr=0x64010102}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0xe20, @empty}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 3m15.175371659s ago: executing program 1 (id=1373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r1, 0x1, 0xffffff80}, 0x14}}, 0x0) 3m15.174042187s ago: executing program 3 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/60, 0x3c}], 0x5}, 0x10020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x7d}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0x7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0xfffffffd}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x4}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x2, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x400, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xdffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x16, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x7, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0, 0x41}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000480)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000140)=0x9) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 3m14.864892596s ago: executing program 32 (id=1373): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r1, 0x1, 0xffffff80}, 0x14}}, 0x0) 3m14.845415491s ago: executing program 33 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)=@tipc=@id, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000240)=""/3, 0x3}, {&(0x7f0000000280)=""/60, 0x3c}], 0x5}, 0x10020) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x7d}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0x7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x81, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0xfffffffd}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x4}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x2, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x400, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xdffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x16, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x7, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0, 0x41}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000480)=0x1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000140)=0x9) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 3.539262752s ago: executing program 4 (id=2966): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x20, 0x40844}}], 0x1, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x1000, 0x7}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000206010400000000000000000000000505000100070000003c0007800500150009885e82ea0005400007000008000b4000000008050003000700000008001340000000070800064000007fff08000a4080000001"], 0x58}}, 0x20000840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) (rerun: 32) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r10}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000001400)="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", 0x0, 0x8, 0x60000000, 0xa5, 0x0, &(0x7f0000001300)="5200c2c9dec619fd43b5c99762b9ddc8f0a0df060efe176d8caa112a239e8043ab59518a86fe5640667ca011b1f302f7b3745470ec834905cabc0e3cfb077307898e6ca82f9237aadc02c2b7ea44f37d805a73a7fd03c7e3d4436c1260f1f6c9a1c19b3332fc5d29eba6a87176882e375950561df8b72aeb71a9876b9ad48ed66133fcd9062997ef5021f70100000004771f603f75b9b620c3fd51f6d796008fe01fba25c2"}, 0x50) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000150081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=@newchain={0x454, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x8, 0xffff}, {0xb, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x428, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x280000}, @TCA_POLICE_RATE={0x404, 0x2, [0x201, 0x80, 0x9, 0x1, 0xce, 0x5, 0x7, 0x80000000, 0xf6b, 0x4, 0x7, 0x7, 0x0, 0xa, 0x4, 0x8, 0x9, 0x1, 0x7, 0x2, 0x9, 0x4, 0x0, 0xc67, 0x80000000, 0x4, 0x5, 0xffffffff, 0x1, 0x0, 0x3, 0x80000001, 0x3, 0x2, 0x10, 0x5, 0x9, 0x3, 0x3, 0x10001, 0x9, 0x4, 0xffff, 0x0, 0x7, 0x40, 0xffff7fff, 0x6, 0xff, 0x7db, 0x4, 0x7a, 0x7fff, 0x7fffffff, 0xffffffff, 0x9, 0x4, 0x5, 0x0, 0x7, 0x7, 0x0, 0x8, 0x1, 0x2d2a, 0x3, 0x6, 0x6, 0x5, 0x200, 0x7fff, 0x5, 0xffff8001, 0x74, 0x2, 0x0, 0x101, 0xa00, 0xf, 0xf03, 0xc53, 0x7, 0x2, 0x2, 0x7, 0x9c0f, 0x0, 0x6, 0x2, 0x4, 0x10000, 0xe9, 0x832, 0x7, 0x6f1, 0x9, 0x140, 0x5, 0x0, 0x6, 0x0, 0x3, 0x9, 0x1000, 0x3, 0x3, 0xffff, 0x1, 0x3, 0x580, 0xfffffffa, 0xffffffc0, 0x2, 0x80000000, 0x1ff, 0xd, 0x3, 0x800, 0x9, 0xfffffff2, 0x7, 0xe, 0x8, 0x3, 0xfffffff8, 0xcc, 0x5, 0x4, 0x4, 0x6, 0x4, 0x5, 0x4, 0x0, 0x3e, 0xfffffff8, 0x45d, 0x8, 0x3f3898ed, 0x2, 0x8, 0x3, 0x1, 0x1, 0x6, 0xffffff62, 0xfffffffc, 0x4c72, 0x7, 0x5, 0xa, 0xfffffbf5, 0xa4, 0x101, 0x9, 0x1, 0x7, 0x38, 0x8, 0x401, 0x5, 0x2, 0x7, 0x0, 0x3, 0x6, 0x1ff, 0x2, 0x6, 0x2, 0x3, 0x8, 0x7, 0x9, 0x7, 0x0, 0x6b, 0x7, 0x5, 0xb, 0x1ff, 0xe00000, 0x6, 0x9, 0x6, 0x3, 0x81, 0x5, 0x1, 0x3fe, 0x9, 0x6, 0x804, 0xfffffff9, 0x4, 0x3ff, 0x2017, 0x82, 0x5, 0x9c64, 0x623, 0x4, 0xe, 0x6, 0x2, 0x0, 0x593, 0x4, 0x7, 0x4, 0x4f2eb6dd, 0x7fffffff, 0x3ff, 0x401, 0x4, 0x0, 0x22d, 0x1, 0x4d17, 0x7, 0x3, 0x4, 0x6da, 0x7, 0x1, 0xb400000, 0x4, 0x9, 0x800, 0x4, 0x2, 0x4, 0x7, 0x6, 0x5, 0x2, 0x3ff, 0xffffff7f, 0x5, 0x0, 0x3, 0x2, 0x6, 0x80000001, 0x7, 0x3b5, 0x400, 0x7, 0x0, 0x2, 0x8, 0x400, 0xbbc2, 0x3, 0x2, 0x2]}]}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r14 = gettid() syz_open_procfs$namespace(r14, &(0x7f0000000040)) (async) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r15, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f00000000c0)={r16, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 3.405938783s ago: executing program 4 (id=2969): socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', r3, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5], 0x48) socket$rds(0x15, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x2000000000000080, &(0x7f0000000680)=ANY=[@ANYRES64=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x8, 0x1, 0x80000001, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYRES32=r7, @ANYRESDEC=r0, @ANYRES32=r7, @ANYRESHEX=r4, @ANYRES64=r1], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r11 = accept4(r10, 0x0, 0x0, 0x80000) setsockopt(r11, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) 3.404777231s ago: executing program 6 (id=2970): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1c, 0x0, 0x2, 0x4, 0x1c060, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0xc, 0xc}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0x1, 0x4, {{0xc, 0x4, 0x0, 0xa, 0x30, 0x66, 0x0, 0x3, 0x2f, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x26, [@empty, @multicast1]}, @ssrr={0x89, 0xf, 0xdc, [@multicast1, @multicast2, @private=0xa010101]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x30, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x1, 0xd, 0x4, 0x4, 0xfffffffffffffff4, 0x10}, @tail_call, @exit, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xf0}, @ldst={0x0, 0x2, 0x0, 0x1, 0xb, 0x0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0xe1, &(0x7f00000003c0)=""/225, 0x41000, 0x15, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x9, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)=[{0x4, 0x4, 0xa, 0x3}, {0x1, 0x5, 0x0, 0x9}], 0x10, 0x6b}, 0x94) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r5, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001900)=[{}, {}], 0x10, 0x10, &(0x7f0000001940), &(0x7f0000001980), 0x8, 0x53, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x12, 0x401, 0x1, 0x6, 0x2000, r3, 0x10000, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{r2, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)='%pS \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c80)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x2, 0x5, &(0x7f0000000740)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x0, 0x1, 0x7, 0x8, 0x8, 0xfffffffffffffff6, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}], &(0x7f0000000780)='GPL\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x1, '\x00', r4, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x0, 0x10, 0x0, 0x2}, 0x10, r8, r5, 0x2, &(0x7f0000001d00)=[r9, r0, r2, r3, r10, r11], &(0x7f0000001d40)=[{0x5, 0x2, 0x10, 0x6}, {0x4, 0x1, 0x4, 0x2}], 0x10, 0xfffffffb}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001ec0)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r12, &(0x7f0000002080)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x130, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x810) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r14, 0x84, 0x6b, &(0x7f00000020c0)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x1, @remote, 0x38}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e22, @empty}], 0x98) r15 = epoll_create(0xfffffffe) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r9, &(0x7f0000002180)={0xc0002010}) r16 = accept4(r14, 0x0, &(0x7f00000021c0), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r16, 0x6, 0xd, &(0x7f0000002200)='yeah\x00', 0x5) sendmsg$NFNL_MSG_CTHELPER_GET(r16, &(0x7f00000024c0)={&(0x7f0000002240), 0xc, &(0x7f0000002480)={&(0x7f0000002280)={0x1d4, 0x1, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @NFCTH_TUPLE={0xd0, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x7f}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x88, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20004043}, 0x81) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r10, 0x50009417, &(0x7f00000025c0)={{r9}, 0x0, 0x8, @inherit={0x98, &(0x7f0000002500)={0x0, 0xa, 0x8, 0x8, {0x3, 0x100000001, 0xe, 0x5, 0x80000000}, [0x3e1e, 0x0, 0x2, 0x5, 0x1, 0x1, 0x9, 0x8000000000000001, 0x1, 0x8]}}, @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000035c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003640)={'syztnl2\x00', &(0x7f0000003600)={'erspan0\x00', r17, 0x700, 0x8, 0x8, 0x992c, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x23}, {[@lsrr={0x83, 0x7, 0xc6, [@dev={0xac, 0x14, 0x14, 0x3b}]}]}}}}}) r18 = getuid() sendmsg$SOCK_DIAG_BY_FAMILY(r16, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000037c0)={&(0x7f00000036c0)={0xe4, 0x14, 0x800, 0x70bd28, 0x25dfdbfc, {0x11, 0x41}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "3d3980e07e5b486519b53574e6f66ae146b21224bfd4fda707cc0595f74099ff4c14a0b180c6db640206ab1ab447ba2e0781b9d8c6808b18df76950321315ecf1fdd5437a6790b8b0b8fc93f7f6d99a6f7c277196b71b81020c1439aca3af56fd3b055263e6331750c248137865983dc1e0dce32e74d3f31cff9ceee7f15b23bae9592b08fbedd0cc59e24fb660d349102fd1c9e10e670bdd69346577a24"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "25cd10b66c53877e036e9fa5dced9402b1adf42e236139e2993fd193ccffff0b93323d924b799d21"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SIOCAX25GETUID(r16, 0x89e0, &(0x7f0000003840)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r18}) sendmsg$NFT_BATCH(r14, &(0x7f0000004d40)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004d00)={&(0x7f00000038c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x140, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x88, 0x8, "3d3c1d6691561789bcb674c8313f10866fa9c552abf779a897bb2bff0113873eb04b7a9e3aff169472834881328cfe1c4e2e96881d2878fed81a70fccae1ef7d2bcee96d6f447ea73b084b2ae80e83e7d1cb40749ca9345f815d9fb765b4e506537e9bbd6ee4f8a354472edff1b055ecad46e8d2c27e776e079cf390c82774fd3c0ca4f7"}, @NFTA_OBJ_USERDATA={0x9b, 0x8, "17aeb3efce036ed871f480e8c1147451335a84835030ef94e22de7d0f9ff3bfca478752ee163634e4f6a73a9466074d071d96bb3e96c4be18bdab3cfd70944d52d6a52e57510c2592730f0703b25c0457d60395bbe76b6222e565ba403918778a810179c9ced7b8bfc219dc1de702310847a23c2499f1d12c2e66f54e9c4dd6956bd13a7a6eedddb2f1b4bbb97305aa237e23a156d3e07"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x148, 0x16, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_USERDATA={0xed, 0xd, 0x1, 0x0, "7c7c46eb3e45b8c931651db3e75e2ce1eb1256e3d96f9597b5f53acb2d8478b0bb99734fc398b18c58265d34eefc96cbf605915d163150c15f1acd7ed2b747ed6d14dfa3f35d739215450b45d2645e2aba59269cd5db776d27a403c39360bed03c7669fc9cce854bfdfaa7896f2b523dc1b4a3667eb19870b959e7ea26973c49efce4b1cd57321ef1060bf071fb9f293c8aa8251e3d1c67dca97f0e7aec6600bd158c6b164e289dfd69f4d6729389dbcaa91f4eed78628ac1330e0d258a4d6fd72509dfc9fe2821cb5a2c35b56ae6369d141b6034ac83e307f1c3358d6fb9f37aae1dce2579c7ef1cb"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x174}]}, @NFT_MSG_NEWRULE={0xd4c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xc2c, 0x4, 0x0, 0x1, [{0xb4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xb3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0x1c0, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x34, 0x1, "0d4d2acee9030082476102b6e2e41dbfc9fe108854302d650f582910b4d37f499979bef4020284cd6baa64c2a378ed3a"}, @NFTA_DATA_VALUE={0x9b, 0x1, "732fa73f29e84ed1d47b436c3ac9094a3acfc6b6e6b4e97b481c96178e8ea149b71a68e7710695a754847bcbff2da8b540e325daa7835cba6f766b62224d0451020344ccfb046d0d15ffcf97717b62ba8b92169782abce479ffb7d6e68b8fa78dd2fd7b4277cce3bc3eb5d3c170dc0250bdb059cdcb19fae8e11943a3b041d7871855958d4d6c40d988b1fade9209547aac604e7bd7cc2"}, @NFTA_DATA_VALUE={0xea, 0x1, "0ee69e3b8dfcc7492bed0febf99bedfb0a0f09d781831448247b0d512dfbff65b31b03b9d414fe9ccf0a00476edb109d6003209dd2446962daa5cf6ed74a324af58bcad9e0cda5dd7ffccd226278933076a508178c92f0433b6698acefde312fb32ece2f09451b66fe36f23b86eb624c7781e1866fc573362e7aabe805cb04cb5596871cf216b424fb948c6ea590282cd49ae61c1c7893a2ca2d317c30fce8f3a4316b48a1a2f5161eed59573efbb7601df58dc02d55828dafa7d38bc6974051cb634ce122cf5f8751f7eb1d121c6d7ec878019796226b7cd1ff1f1f94b1da06affda7d3d13c"}]}, @NFTA_BITWISE_MASK={0x120, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "5285a2aa22160366cab3e41eb4cbc11a0067a04f9c02590e19bf1ddfea69ce88d241f5eaf165998ae2f05ab337cc6d183d67dfd321bbbf29005e64edaceccb212b0b4feef16f6a89c485108c82654d2d5bdae872d5c9109e3c0fa8d970c5f2986a08205db1fab767b430038004f48f55d65e3d21a803fd801a0b82f2438e834a974d58255f1a23aa3f66d955c5c2d095d56f5f65c046391d9785dbf553f5d2b559970a6353196a06e0b14c37a4a0b18104c84b2c74a1a3569dad7b16a9badcf6a6b639b34c06b8b996db932d314cdb0eb468bc686c7e6bdc817c4f"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_DATA={0x270, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "f256d4d837a6961d25fa26a4779f299f6d00fe9e5eade0c036f127798e6b397df2a8429f4d51226d24fcea2daa87d4b5666322d4b67342a3ce2321deec055c25279deb5d7f3278d709319867d30213c5cad416568a1c54dd1db8dd0aee4a9c5a47d86e0bc4d6bf7eceb305eeacd1617f907dc35df03bd882dba2ade58769811ad3fe27a0e33190325cfdb1a8fd3ae597dd567e96052e4c9492205d9f43f684a08253553a1aaddf2deec20282244725c23534dbb7a2ed81dd6904cec144ffa64af408f1aa70b6aec9156d71a41373ccd608cd1b99cb984793371ceae287e63a8e93f6fed6d5111a7ff5de33e5afeb010b6d38c2436e"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x51, 0x1, "97d78318b9592aecb5c73dfde11a38f715713de0e9cb2205591cfc1f99f25e445486272741611399cc4fa099c915bf446a635ed510a6b48038ed95e34cc70391594a7289388ed8825e515ac036"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "2b809a409ca562146009c66389a823cc7669d5c9304dee97f623bdd1d9baa0f0942f32eb44205a1144cb3c5d9ddbf7194dd567b6808a"}]}, @NFTA_BITWISE_XOR={0x224, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "8a44b0440856854922f0ffe954f2b747eb80cc5ca6640a3b4786d923bd1d0bc3eb4ec2a09605844f8d3faab3b2de96668bd123bff26dfcfcbdb424f76411ecc077f018b8f8889a958873ee0893c7624eef2f892b6b70577c8a211c832009cc293b8e8a6336ca0c0ef26fbceaf3ac49c789"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x13, 0x1, "3d5e4fe4629eb32f787813406546e9"}, @NFTA_DATA_VALUE={0x12, 0x1, "d3b0d12fdf3a94286abf3705d5d3"}, @NFTA_DATA_VALUE={0x35, 0x1, "9009ba68b9bfaea1d9449e4638d9bfba8430d1db77c9b3044dff9bf35c157b2be684497259bbcb03ee96d6c010f48ef788"}, @NFTA_DATA_VALUE={0x3d, 0x1, "9f09a4e7efdb19d38cc19f9bffa097df243adcee9011c00de1aace41ef6ae623dd34d11a55789e1f314c8a47ad32e8ff1d3baf1bdd679fc917"}, @NFTA_DATA_VALUE={0xbd, 0x1, "5359b88e9f14a051ee06d006349f998788e74a4826e01ada8c7cf34b134518afc9ea9203660c9a8d844073aa00fae34022e3cb31f5fec61b97036909306bb9bb335aec5399160e969067afa332d3c4df7f56411ae2e46af2265f4f7e48e2422894759faa526ad443d9965eae32c5af1785c996883b992adbb11092b10b55d783c9031f29cec42bd0d06b223d7ee9ae91e67867e96c3b826c92a9464f4e24cb1895be478dc5d733cebd0b8187c22b26e952eb922581fa44b7d6"}, @NFTA_DATA_VALUE={0x35, 0x1, "66e925623893c7137020c39e04fe6985df4a48b14c35074e31062f61a1efd9926e71fc229ee3371d6f478c0b880b250a91"}]}, @NFTA_BITWISE_XOR={0x2ac, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "7aed7ed9b28340b9e012303e71652da177569b7b478e1d89057d370ac30ec0df8ba72534c9b9732b6aa33724e617e91ace422c92ed16806a1ce3bd9794bd24a59af6ae6b6d84d327d3887a47e80b96ecbdfce8b3a53bffb693b7a351551c6a8a6dc03d97b02d42f6d71f6733f732d013025ddf49cdf9b83491184f6791f8fe8dc3bf1e8626089d828e11d62fb24fa01826786ea3c6b2522e8b9a2540b5f1ecee42464b12ea1f71dc9db4794a75dc4f943afc98ec559d09bb4bc17987f86cd2f0b05f56983526b13a77881fad732f4ec5a1c4c6804bbaf0eecd4666"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x28, 0x1, "cc69ee93ad45c18eb4e798c271f55950de50d0607b8a47bc13edf4501afbb4f832c8c2b7"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xf0, 0x1, "d16ca88ebea25fa809d3cf778cd7f1c6b6b8aa49913229d7219fa6c7a1a8bbd11ca18f21160a2a9240618bbe821e6c70d42bcddd1c3ec080ca3db30db595bc618ecb8022750e6d1dffbd397610b3fb5f83c100d0f79b494a4eda19bc9271374750c23d7c1cdbfa10354c09885b016d93d9a8e78740d5c12e0057d8069818eacde9ac547f078a6d42a9285025775813d0689da94bbc1ead23c918aa6957b493459007f39217caa1d8fd99e4f779438a570db1714f541db62e0f10923452182440bfd34ac381c93ef05bad6c5169ae6dc0fda0859d6c21db1aac449f9574ee61803ea25220563c22302388f90c"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_DATA={0x108, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "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"}]}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8c9f8609b8714c9f}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0x64, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xffe2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x13f5}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_USERDATA={0xdd, 0x7, 0x1, 0x0, "1c45b00b1f16cf6421051931f6078ccebc66246c7b4856eddc5c3610ca6975eaac2a5dd270a3ed41e04293e947a88c23632946b575a204705f5172bc8ccf6334963dc5495dcea26216b38ea6ce07c12019b7b9615005f20be7ee93f2a2c4d31a7027a6e677f4842070f1e1ebaee23b62bf7a5019bf83cc495acea0b0fb5b76dfead914bfc9494b963cb5b9f522f20d5633a2db09662f99e5f46bb6247655f0e0bcb3613ecdf6b978419e76a7f0f28b84ecec993dd16b592436a9e1574c8a304b2afc05d185c111d2cebdbfa5badbafefb979baed3b7c195419"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x1ec, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xf0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1428}, 0x1, 0x0, 0x0, 0x20}, 0x100080c0) 3.36811031s ago: executing program 6 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0x9, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x2}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0xc, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt(r5, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000) socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x34, &(0x7f0000009000), 0x4) unshare(0x62040200) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x80) 2.959794177s ago: executing program 6 (id=2978): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0xe, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000cc000000cc000000060000000a0000000000000c02000000000000000002000000020000000f0000000000000901000000000000000300000d00000000000000000500000004080000010000000200000004000000010000000000000a00000000090000000000000202000000010000000000000c030000000800000006000085000000000200000000000000810000000300000002000000a50000000800000001000000030000000100000002000000050000000e00000000000000070000001000000002000000050000000000305f2e00"], &(0x7f0000000240)=""/204, 0xea, 0xcc, 0x0, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000000000006911b90000000000850000006d000000000000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x6}, 0x94) 2.879249686s ago: executing program 6 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x890c, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) unshare(0x26020480) r3 = socket(0x8000000010, 0x2, 0x0) unshare(0x22020400) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)) write(r3, &(0x7f00000002c0), 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @union]}}, 0x0, 0x3e}, 0x28) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000190001002bbd7000fcdbdf251c2080070001fd000001000046fa0619255abfd29e9cd10298b77a61721943c949afc3fef80a51eb9e72fbae1cd6b426e7ca"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x88, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x6a, 0x33, @beacon={{{}, {0xde1}}, 0x3, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0xf8, 0x97, 0x0, 0x2}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0xf30, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xf6}}, @void}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.50729103s ago: executing program 6 (id=2982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x1014, &(0x7f0000000fc0)=""/4116, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0xf1a6, 0x8000000000000001) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001900010000000000000000008020800000110005"], 0x1c}}, 0x0) 2.473198435s ago: executing program 6 (id=2984): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x1) 2.363310357s ago: executing program 4 (id=2985): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x202, 0x1, 0xfffffefc, 0x2f, 0x7, 0x0, 0x7]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4f22, @local}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"aee35ac8449bddd6fd63aa0d25e8ea1e", 0x0, 0x0, {0x5, 0xa}, {0xdd93, 0x4e}, 0x3, [0x2, 0x4, 0x8, 0x7fff, 0x4, 0x10001, 0x98d, 0x100, 0x4, 0x23f3, 0x465, 0x7fffffff, 0x101, 0x6, 0x4]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000600)={{r1}, r4, 0x8, @unused=[0x3c6c, 0x9, 0x8, 0xb7], @subvolid=0x8c}) 2.277452645s ago: executing program 4 (id=2987): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x14, 0x30, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x24, 0x5a, 0x1, 0x0, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}}, 0x20000450) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x9}) 2.138027972s ago: executing program 4 (id=2989): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000b, 0x4010, r0, 0x80000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r3, @ANYRESHEX=r3], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0203000000d870503e3f00000000006f7904001f00"/34, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000050000000500"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r5, &(0x7f00000003c0)="271a1485a872b4e835b4522d9180fc1b5fc2d2555d65aa39815f8efe41f5fb88e9729296be9a8897c31b924c8ad18213c74c6b36b14fd96082295588d15167c8c5a7139481d41845", 0x0}, 0x20) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000500)={0x0, 0x8000000000000000, 0x6}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf253000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffff000180000000060036002500000006003600200000000600360015000000159e9abd88035ed13cd02876812bb256ab042f31969b2627fb1dd58ff8d8a912fd56f0a81c8ce2eaec3ffa7c248930897de42616d654719d3722d690baca8a66f57e5920bc9f91caa1255834ce861a7eaf2bbc1a3f70498b65e8a05699929ef67fe75d8e6c61263040a6d8fed31aa88ac0d7"], 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x1) accept$nfc_llcp(r0, 0x0, &(0x7f00000000c0)) ioctl$int_in(r4, 0x5421, &(0x7f0000000280)=0x8000000000000000) r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, 0x0) r10 = openat$cgroup_procs(r7, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000100), 0x12) r11 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r11, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r12 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r12, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000900)={r6, 0x8, 0x2}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bind$inet6(r13, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.04307734s ago: executing program 4 (id=2990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1.720411245s ago: executing program 5 (id=2993): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) vmsplice(r2, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x2e6}], 0x1, 0x9) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.451154731s ago: executing program 5 (id=2997): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f62f186a8159da13d681a1e89f16ea4e2db653746a75c45d557be31a53be492b8ec072d1a3706019bfca34846d797bce24c2390ca4cc3c91fc2e7c6eb4", 0x3d) 1.337415897s ago: executing program 5 (id=3000): socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x2000000, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x8000) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r6, @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4881}, 0x0) 1.099127032s ago: executing program 5 (id=3002): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, 0x0, 0x81) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x2, 0x80805, 0x0) close(0x3) socket(0x2, 0x5, 0xfffffffd) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r3], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xd}, 0x8) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) unshare(0x22020600) r8 = socket(0x10, 0x3, 0x0) recvmmsg(r8, 0x0, 0x0, 0x1a000, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x44}}, 0x40000c4) 1.047192517s ago: executing program 5 (id=3005): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000400000007ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, 0xffffffffffffffff, 0x80000000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 531.161544ms ago: executing program 0 (id=3009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000300)=[{}, {}, {@fixed}, {@none}, {}, {}, {@fixed}, {@fixed}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r8, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="100000000d14040029bd0100fcefdf56a9533429841e5897fe0fd389941225"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x703}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 489.48906ms ago: executing program 2 (id=3010): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe7c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe68, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {0x800000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe7c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00a0009400"/16, @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 450.449484ms ago: executing program 2 (id=3011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) 343.3167ms ago: executing program 2 (id=3012): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2", 0x9d}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) syz_emit_ethernet(0x16b, &(0x7f0000000480)={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x25, 0x4, 0x2, 0xa, 0x155, 0x66, 0x0, 0xff, 0x6c, 0x0, @local, @private=0xa010101, {[@timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0x1, [{@loopback, 0x200}, {@private=0xa010100, 0x3}, {@multicast2, 0x4}, {@loopback, 0x3800}]}, @lsrr={0x83, 0xb, 0xb8, [@loopback, @empty]}, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0x5d, 0x3, 0xe, [{@multicast2, 0xdb19}, {@remote, 0x24}, {@broadcast}, {@loopback, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa625d06e}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @noop, @noop, @timestamp={0x44, 0x10, 0x36, 0x0, 0x5, [0x40, 0xf2a6, 0x5]}]}}, "738e84ffbfe500bfc95660ac613fc60792377dfdb75ec5cb606736839834236f1c9ea1b6acab18c0d98a20be1151f057913a18d2b9b686f375aa1ad30c97e9e84969e151aba2472dc58a74160944a9df84954dd428f24b9f28d709b0a13ba8393e39ac47f98fcc88fcc9759c411017d9654bc0e39ccc893f3bd17a4928a61d3aeb24254acaaa83ddcc076ad6575b69df824a68b34fc1c4f3c3cc682f0c06f52746478135a1fbc975e57568299ccc085ae236e64a4d54850a38256f7aeb8bf6e63e"}}}}, &(0x7f0000000100)={0x0, 0x3, [0x30e, 0x98d, 0xaa9, 0xffffffff]}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028005000300c4000000080002400000000009000100"], 0xb4}}, 0x0) 342.129215ms ago: executing program 2 (id=3013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000800000000000000e218d1ddf66ed538f2523250", 0x78, 0x4804, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e80)=@newchain={0x454, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x8, 0xffff}, {0xb, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x428, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x410, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x280000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1fe, 0x80, 0x9, 0x1, 0xce, 0x5, 0xbf1a, 0x80000000, 0xf6b, 0x0, 0x7, 0x7, 0x0, 0x2, 0x4, 0x8, 0x9, 0x1, 0x7, 0x2, 0x9, 0x4, 0x0, 0xc67, 0x80000000, 0x4, 0x5, 0xffffffff, 0x1, 0x0, 0x3, 0x80000001, 0x3, 0x2, 0x10, 0x5, 0x9, 0x3, 0x3, 0x10001, 0x9, 0x4, 0x5, 0x0, 0x7, 0x40, 0xffff7fff, 0xb5, 0xff, 0x7db, 0x4, 0x7a, 0x7fff, 0x7fffffff, 0xffffffff, 0x9, 0x4, 0x5, 0x0, 0x7, 0x7, 0x0, 0x8, 0x1, 0x2d2a, 0x3, 0x6, 0x6, 0x5, 0x200, 0x7fff, 0x5, 0xffff8001, 0x74, 0x2, 0x0, 0x101, 0xa00, 0xf, 0xf03, 0xc53, 0x7, 0x2, 0x4, 0x7, 0x9c0f, 0x0, 0x6, 0x2, 0x4, 0x10000, 0xe9, 0x3, 0x7, 0x6f1, 0x9, 0x140, 0x5, 0x0, 0x6, 0x5, 0x3, 0x9, 0x1000, 0x3, 0x3, 0xffff, 0x1, 0x3, 0x580, 0xfffffffa, 0xffffffc0, 0x2, 0x80000000, 0x1ff, 0xd, 0x3, 0x800, 0x9, 0xfffffff6, 0x7, 0xe, 0x8, 0x3, 0xfffffff8, 0xcc, 0x5, 0x4, 0x4, 0x6, 0x4, 0x5, 0x4, 0x0, 0x3e, 0xfffffff8, 0x45d, 0x8, 0x3f3898ed, 0x2, 0x8, 0x3, 0x1, 0x1, 0x6, 0xffffff62, 0xfffffffc, 0x4c72, 0x7, 0x5, 0xa, 0xfffffbf5, 0xa4, 0x101, 0x9, 0x1, 0x7, 0x38, 0x8, 0x401, 0x5, 0x2, 0x7, 0x0, 0x3, 0x6, 0x1ff, 0x2, 0x6, 0x2, 0x3, 0x8, 0x7, 0x9, 0x7, 0x0, 0x6b, 0x7, 0x5, 0xb, 0x1ff, 0xe00000, 0x6, 0x9, 0x6, 0x3, 0x81, 0x5, 0x1, 0x401, 0x9, 0x6, 0x804, 0xfffffff9, 0x4, 0x3ff, 0x2017, 0x82, 0x5, 0x9c64, 0x623, 0x4, 0xe, 0x6, 0x2, 0x0, 0x593, 0x4, 0x7, 0x4, 0x4f2eb6dd, 0x7fffffff, 0x3ff, 0x401, 0x4, 0x0, 0x22d, 0x1, 0x4d17, 0x7, 0x3, 0x4, 0x6da, 0x7, 0x1, 0xb400000, 0x4, 0x9, 0x800, 0x4, 0x2, 0x4, 0x7, 0x6, 0x5, 0x2, 0x3ff, 0xffffff7f, 0x5, 0x0, 0x3, 0x2, 0x6, 0x80000001, 0x7, 0x3b5, 0x400, 0x7, 0x0, 0x2, 0x8, 0x400, 0xbbc2, 0x3, 0x2, 0x2]}]}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f0000000040)) write$cgroup_pid(r6, &(0x7f0000000080)=r7, 0x12) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 336.947245ms ago: executing program 0 (id=3014): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async, rerun: 64) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32=r5, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x2}]}}}]}, 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000480001002abd7000fddbdf250a002000", @ANYRES32=0x0, @ANYBLOB="02000000080002e00000180014000100ffd3868a52088827ac389706e6acca4bd8006a03aa64670a06098b3cca3783fc9983c355835e3b2b932d570c6d078a"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) (rerun: 32) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 297.115663ms ago: executing program 0 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, r3, 0x20800}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008805}, 0x2000000) 215.224557ms ago: executing program 0 (id=3016): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x2004890) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) vmsplice(r2, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x2e6}], 0x1, 0x9) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 175.622316ms ago: executing program 0 (id=3017): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5f03", 0x2}], 0x1}}], 0x2, 0x20040140) listen(r0, 0xfff) accept(r0, 0xfffffffffffffffd, &(0x7f0000000680)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80), 0x0, 0x931766f6159aa5c1) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xa5, 0x1}, {0xa, 0x2, 0x3}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000085}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x74, r3, 0x1, 0x7, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="100000001000001000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e0000634e2b5a0d4b1c000280080002400000010140010000000900010473797a30000000000900020073797a3200000000140000001100010000000000000000000000000a42288d7996982f5f72deec52512bfb665e87dc063f20594ebc9f43a700951e24ace3e5f6ff19ba96e5ba9fe904b46392d9e2823de3d607e06bf202cfb5d95097a9c2e7d5b5861a0b69be"], 0x84}}, 0x0) close(r7) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x80, 0x80, 0x8000}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000630000010000000900010073797a30000000003c000000090a010400000000000000000100000708000a40000040000900020000010073797a3000000000080005400000000c4c00007f0c0a010300000000000000000100000008000440000000000900010073797a300000008024000380200000800400018018000b80140001800c000100636f756e7465720004000280140000000000000000000005000af1987f88811511a891cec9cc03c6cedb38a97c512267239550eec5d7cb1b34f27a5beffff2af09c7cb1b8db4cb1c667d05e38cb7d8e3e6d2819a8b52d86d45ad37f0935c90df974e7c4c3543250cab2fe3f642b9ecf1fd2ccd8b57c031f6b9a861c446e96372bd1818dece8d372a3b181a2562e03fad"], 0xd0}}, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) 159.627144ms ago: executing program 2 (id=3018): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x29, 0xff, 0x5, 0x0, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x3e7, 0x20, 0x500, 0x5}}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @generic={0x40, 0x5, 0x4, 0x1fc, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x62}, 0x94) (async) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000001cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x224, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xf7, 0x8, "20479e73c0a61719c96d437cd2bb2996fdf14ec7662bcaf794526bf61d7fcb97984a698391934153dbca25db2ca97b773e70f38f3fdb3a66b811b87fd4b3b233a7f2173cd8fe7ac5e8b879e269b15d747e008a73bd14274be418bc387c1fda05141024deb618d612bda8c48a062ee350d0a467e72570c9d68728c69e5c64da371a30dc11e89802fa2b1861d96d5e40d067d851bd138e1d74c4ef593247d7a745f28243ad519f119ffca4e9a88464d5c3eaa4646f1dcb9e6f52bf4bd05876b1a8ea5f0e27222a100ba3568cb9e091de20ad9b9d4292317d1d81272f5b828d633916e29f3d4c8c0b6990c2e4ce1ca55300ed0bb7"}, @NFTA_OBJ_USERDATA={0xd3, 0x8, "a1ee02badee6f5d8e0c7af90416d47b26d6be9bb2c808e813aaaee5be5e08ac7d44165fba3023f474755db103ce9373c23a9e615ed205add71de486f1ce287148b511af7c1c7e84f37fe4df3168e4028350ce43b751f214b8d6d0183fad70f47ff9ee63b95ea7ad63866154b18cc59d83dfa2479ff417dcd9bde884ad4d5474a7f294c2b34267ba77eec17d56da4861888f7dd376510c4f71d8235a95d7d1897d5fb0a02e76fd8e96f5529a69297c7e148144c981a5cab59de8e0c8189d0fd221ec02349ad405e3cbb47f4c2f55e6f"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x180, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xe5, 0x6, "78666008b31dd655ad5c9237fee8ffd61c164d9e086667c712488813a7c1c0c491fda440f3766f2a65bc99258b40a0156252cbe3069666bfbf4d14199dc44453c4d25a10d192dcc99e9e91e042ac1ec5cf5b7af010988ce6502c71c99eafa06c26abd2c7a272966f37bdc8523c25b63f975cab8f6a0c03db34f581b06e4636917a3fad6876666f635c2c6a50f277af841ac433279d2e6dcf3794a7e2944679c2ad24ef06997ee5c624e1b8be997c87355c7dd76d403fa248798a539ae66f6383ff1b3380353ba0ea6c4b6621c7efa63c3e014b3099ad9cd02da9cb5c933a17665e"}, @NFTA_TABLE_USERDATA={0x61, 0x6, "292c005980ef6c81efa1cee617bf63e8444fd1fdc082e1496f67ce0b4476978ae9c14b4f39c52da1affaf3c442caff7592f9e99da18faae4a538bca09ef5711fd67bc59885812d61b293b78327e94f50f1144cdb92d3f20d814b0df763"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x440}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09082cbd4d48bb04d0d496b8000008000300", @ANYRES32=r5, @ANYBLOB="2800508011"], 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0xd3) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mmap_lock_acquire_returned\x00', r9, 0x0, 0x40000000000d}, 0xfffffca0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 111.18673ms ago: executing program 5 (id=3019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000280)={0x1, 0x4, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000001c0)={{0xf15e993dbd56637b, @local, 0x4e24, 0x1, 'dh\x00', 0x0, 0x2, 0x17}, {@broadcast, 0x4e23, 0x0, 0xfffffffc, 0x0, 0x6}}, 0x44) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0xfc, 0x1}]}]}, 0x13c}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000a0000000100000080ec00002a964b0d07c582c3f0502d64282af4d5af7d88b28ab232d32d5f34694abecf767aaf195c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 72.980156ms ago: executing program 2 (id=3020): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r4 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x10, 0x80, 0x8, 0x5, {{0x2c, 0x4, 0x1, 0x2, 0xb0, 0x67, 0x0, 0xe5, 0x2f, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xce, 0x1, 0x1, [{@broadcast, 0xffffff80}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7000000}, {@remote, 0x4}, {@multicast1, 0x9}, {@rand_addr=0x64010100, 0x6a}]}, @lsrr={0x83, 0x13, 0x11, [@rand_addr=0x64010102, @multicast1, @broadcast, @rand_addr=0x64010100]}, @rr={0x7, 0x7, 0x98, [@rand_addr=0x64010100]}, @rr={0x7, 0x7, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x45, 0x3, [{0x7, 0xe, "64dbf23fe8a20c83ab00185e"}, {0x1, 0xd, "c01f97b7b74ad83167d1c2"}, {0x7, 0x2}, {0x0, 0x8, "f1035f6cf8b1"}, {0x1, 0x4, "a71e"}, {0x6, 0xf, "66926443a0a346c3b6c98d6576"}, {0x0, 0x2}, {0x6, 0x5, "31d34b"}]}]}}}}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x3, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c861}, 0x4008000) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x70, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x2004c041}, 0x0) 0s ago: executing program 0 (id=3021): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0x1f}}) (async) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x0, @empty=0x1f}}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="00012cbd7000ffdbdf25460000000800010070636900e8ff0200303030303a30303a31302e300000000008008e008bac14d30c008f004d050000000000000c00900005000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0004000000000000000c00900006000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f00a60a0000000000000c0090000300000000000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000c008f00ffff0000000000000c00900071e70000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c008f0005000000000000000c0090000e00000000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="02000000", @ANYRES16=r2, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x4e20, 0x3, 0xa}, {0x0, 0x800000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYRES32=r4], 0x10}}, 0x4000010) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) (async) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="64000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x64}}, 0x0) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x7, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37c65be26732ee88, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500020e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000001002100000005000500002000000a0000000000000004000000000000000000000000000001fcffffff00000000"], 0x70}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000680)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000008c0)="651b3764e734dc7e428f499b5628f776def367ea844af182f98f1b443740b78c7f9db8a4cc506f9db5dfed6be372b911774a0440ddadca56e4a18e91fdb10f1d74c17750aae1ed35c4fe6bfce1af00fbed241ce2771d5533176bd1c914ec505ad98ee14648d7129e0c050a7c94964fbcd3973234d02e01062b42f82749bd71bfca26b80d0a702fa34c7d497c56113fced525", 0x92}], 0x1}, 0x20008001) (async) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000680)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000008c0)="651b3764e734dc7e428f499b5628f776def367ea844af182f98f1b443740b78c7f9db8a4cc506f9db5dfed6be372b911774a0440ddadca56e4a18e91fdb10f1d74c17750aae1ed35c4fe6bfce1af00fbed241ce2771d5533176bd1c914ec505ad98ee14648d7129e0c050a7c94964fbcd3973234d02e01062b42f82749bd71bfca26b80d0a702fa34c7d497c56113fced525", 0x92}], 0x1}, 0x20008001) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r9], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)="c982c521654fcb34a7cf37", 0xb}, 0x1, 0x0, 0x0, 0x20000000}, 0x850) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="18000027bfb2098734c470000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bfbf5a58cf78bf84f40901000000000095000000000000001865000005000000000000000300000018410000fcffffff0000000000000000850000000000000018650000070000000000000008000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x10, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x8002, 0x3, 0x2, 0xa}, {0x4, 0x3, 0xd, 0xa}, {0x3, 0x2, 0xd, 0xb}, {0x4, 0x4, 0x3, 0xb}], 0x10, 0x9}, 0x94) kernel console output (not intermixed with test programs): 0/0x420 [ 174.322985][T11049] __x64_sys_sendmsg+0x19b/0x260 [ 174.323004][T11049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.323027][T11049] ? __pfx_ksys_write+0x10/0x10 [ 174.323048][T11049] ? rcu_is_watching+0x15/0xb0 [ 174.323067][T11049] ? rcu_is_watching+0x15/0xb0 [ 174.323084][T11049] do_syscall_64+0xfa/0x3b0 [ 174.323101][T11049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.323118][T11049] ? clear_bhb_loop+0x60/0xb0 [ 174.323137][T11049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.323154][T11049] RIP: 0033:0x7f63bcb8ebe9 [ 174.323170][T11049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.323187][T11049] RSP: 002b:00007f63bda66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.323214][T11049] RAX: ffffffffffffffda RBX: 00007f63bcdb5fa0 RCX: 00007f63bcb8ebe9 [ 174.323227][T11049] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 174.323239][T11049] RBP: 00007f63bda66090 R08: 0000000000000000 R09: 0000000000000000 [ 174.323250][T11049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.323261][T11049] R13: 00007f63bcdb6038 R14: 00007f63bcdb5fa0 R15: 00007ffeee58f7e8 [ 174.323281][T11049] [ 174.357187][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.401986][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.403662][ T5872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.408842][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.415100][T11051] bridge: RTM_NEWNEIGH with invalid ether address [ 174.425943][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.426582][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.451075][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.458547][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.491416][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.545179][T11054] lo speed is unknown, defaulting to 1000 [ 174.546345][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.843489][T11052] lo speed is unknown, defaulting to 1000 [ 174.953908][T11091] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 175.037150][T11054] chnl_net:caif_netlink_parms(): no params data found [ 175.104865][T11052] chnl_net:caif_netlink_parms(): no params data found [ 175.164046][T11054] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.171850][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.179116][T11054] bridge_slave_0: entered allmulticast mode [ 175.186094][T11054] bridge_slave_0: entered promiscuous mode [ 175.207465][T11054] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.215056][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.222632][T11054] bridge_slave_1: entered allmulticast mode [ 175.229207][T11054] bridge_slave_1: entered promiscuous mode [ 175.263313][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.277155][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.287832][ T5859] tipc: Node number set to 3754005434 [ 175.321569][T11054] team0: Port device team_slave_0 added [ 175.327559][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.334977][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.342485][T11052] bridge_slave_0: entered allmulticast mode [ 175.349113][T11052] bridge_slave_0: entered promiscuous mode [ 175.359730][T11054] team0: Port device team_slave_1 added [ 175.366195][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.374978][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.383081][T11052] bridge_slave_1: entered allmulticast mode [ 175.390877][T11052] bridge_slave_1: entered promiscuous mode [ 175.425844][T11052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.438779][T11052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.448901][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.456595][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.483726][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.503237][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.510758][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.537315][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.564724][T11052] team0: Port device team_slave_0 added [ 175.572460][T11052] team0: Port device team_slave_1 added [ 175.623761][T11054] hsr_slave_0: entered promiscuous mode [ 175.635261][T11054] hsr_slave_1: entered promiscuous mode [ 175.661524][T11112] FAULT_INJECTION: forcing a failure. [ 175.661524][T11112] name failslab, interval 1, probability 0, space 0, times 0 [ 175.663339][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.676249][T11112] CPU: 0 UID: 0 PID: 11112 Comm: syz.2.1391 Not tainted syzkaller #0 PREEMPT(full) [ 175.676275][T11112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.676287][T11112] Call Trace: [ 175.676294][T11112] [ 175.676301][T11112] dump_stack_lvl+0x189/0x250 [ 175.676328][T11112] ? __pfx____ratelimit+0x10/0x10 [ 175.676353][T11112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.676373][T11112] ? __pfx__printk+0x10/0x10 [ 175.676396][T11112] ? genl_family_rcv_msg_doit+0x267/0x300 [ 175.676419][T11112] ? __pfx___might_resched+0x10/0x10 [ 175.676436][T11112] ? lock_acquire+0x5f/0x360 [ 175.676469][T11112] should_fail_ex+0x414/0x560 [ 175.676494][T11112] should_failslab+0xa8/0x100 [ 175.676520][T11112] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 175.676543][T11112] ? __alloc_skb+0x112/0x2d0 [ 175.676561][T11112] __alloc_skb+0x112/0x2d0 [ 175.676578][T11112] netlink_ack+0x146/0xa50 [ 175.676601][T11112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.676620][T11112] ? __kasan_slab_alloc+0x6c/0x80 [ 175.676643][T11112] ? __netlink_lookup+0xbd/0x810 [ 175.676659][T11112] ? rcu_is_watching+0x15/0xb0 [ 175.676680][T11112] netlink_rcv_skb+0x28c/0x470 [ 175.676705][T11112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.676726][T11112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.676755][T11112] ? lock_release+0x4b/0x3e0 [ 175.676781][T11112] ? down_read+0x1ad/0x2e0 [ 175.676800][T11112] genl_rcv+0x28/0x40 [ 175.676818][T11112] netlink_unicast+0x82f/0x9e0 [ 175.676844][T11112] ? __pfx_netlink_unicast+0x10/0x10 [ 175.676868][T11112] ? netlink_sendmsg+0x642/0xb30 [ 175.676883][T11112] ? skb_put+0x11b/0x210 [ 175.676900][T11112] netlink_sendmsg+0x805/0xb30 [ 175.676920][T11112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.676938][T11112] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.676955][T11112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.676974][T11112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.676991][T11112] __sock_sendmsg+0x21c/0x270 [ 175.677015][T11112] ____sys_sendmsg+0x505/0x830 [ 175.677035][T11112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.677057][T11112] ? import_iovec+0x74/0xa0 [ 175.677078][T11112] ___sys_sendmsg+0x21f/0x2a0 [ 175.677096][T11112] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.677128][T11112] ? __fget_files+0x2a/0x420 [ 175.677143][T11112] ? __fget_files+0x3a0/0x420 [ 175.677162][T11112] __x64_sys_sendmsg+0x19b/0x260 [ 175.677182][T11112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.677204][T11112] ? __pfx_ksys_write+0x10/0x10 [ 175.677226][T11112] ? rcu_is_watching+0x15/0xb0 [ 175.677245][T11112] ? rcu_is_watching+0x15/0xb0 [ 175.677263][T11112] do_syscall_64+0xfa/0x3b0 [ 175.677280][T11112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.677297][T11112] ? clear_bhb_loop+0x60/0xb0 [ 175.677317][T11112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.677333][T11112] RIP: 0033:0x7ff731b8ebe9 [ 175.677350][T11112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.677362][T11112] RSP: 002b:00007ff732ad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.677379][T11112] RAX: ffffffffffffffda RBX: 00007ff731db5fa0 RCX: 00007ff731b8ebe9 [ 175.677393][T11112] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 175.677404][T11112] RBP: 00007ff732ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 175.677416][T11112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.677427][T11112] R13: 00007ff731db6038 R14: 00007ff731db5fa0 R15: 00007ffee212ada8 [ 175.677454][T11112] [ 175.709601][T11111] siw: device registration error -23 [ 175.715300][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.062325][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.074887][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.082418][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.108820][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.134791][T11111] macvtap2: entered allmulticast mode [ 176.140331][T11111] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 176.148689][T11111] batman_adv: batadv0: Adding interface: macvtap2 [ 176.155561][T11111] batman_adv: batadv0: Interface activated: macvtap2 [ 176.271505][T11123] "syz.2.1395" (11123) uses obsolete ecb(arc4) skcipher [ 176.290217][T11052] hsr_slave_0: entered promiscuous mode [ 176.303679][T11052] hsr_slave_1: entered promiscuous mode [ 176.309831][T11052] debugfs: 'hsr0' already exists in 'hsr' [ 176.316738][T11052] Cannot create hsr debugfs directory [ 176.356395][ T148] hsr_slave_0: left promiscuous mode [ 176.374985][ T148] hsr_slave_1: left promiscuous mode [ 176.530918][ T5864] Bluetooth: hci4: command tx timeout [ 176.688735][T11140] syzkaller1: entered promiscuous mode [ 176.699932][T11140] syzkaller1: entered allmulticast mode [ 176.858208][ T5864] Bluetooth: hci1: command tx timeout [ 176.894662][T11170] netlink: 'syz.2.1407': attribute type 10 has an invalid length. [ 176.905315][T11170] __nla_validate_parse: 31 callbacks suppressed [ 176.905335][T11170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1407'. [ 176.949393][T11054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.963076][T11170] veth0_vlan: left promiscuous mode [ 176.968438][T11170] veth0_vlan: entered promiscuous mode [ 176.985400][T11170] veth0_vlan: entered allmulticast mode [ 176.999249][T11170] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 177.024631][T11176] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 177.052748][T11176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.060218][T11054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 177.076530][T11179] netlink: 'syz.2.1410': attribute type 12 has an invalid length. [ 177.080493][T11054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 177.084728][T11179] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1410'. [ 177.123483][T11054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 177.145737][ T148] IPVS: stop unused estimator thread 0... [ 177.177990][T11052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.220391][T11052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.232826][T11052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.266503][ T9276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.293669][ T9276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.317380][T11052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.364400][ T9276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.375585][ T9276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.449814][ T9276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.464671][ T9276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.509828][T11054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.534267][ T9276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.561196][ T9276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.618529][T11052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.630841][T11054] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.648487][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.655643][ T9279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.684439][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.691689][ T9279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.816492][T11052] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.854803][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.861982][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.885405][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.892592][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.909090][T11234] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 177.918256][T11234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1423'. [ 177.932881][T11234] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 178.610762][ T5864] Bluetooth: hci4: command 0x041b tx timeout [ 178.622692][ T9276] bond1 (unregistering): Released all slaves [ 178.632770][ T9276] bond2 (unregistering): Released all slaves [ 178.642108][ T9276] bond0 (unregistering): Released all slaves [ 178.651706][ T9276] bond3 (unregistering): Released all slaves [ 178.877066][T11054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.892978][T11054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.921729][ T9276] : left promiscuous mode [ 178.930853][ T5872] Bluetooth: hci1: command tx timeout [ 179.028366][T11272] netlink: 'syz.2.1432': attribute type 13 has an invalid length. [ 179.041001][T11272] netlink: 'syz.2.1432': attribute type 17 has an invalid length. [ 179.096927][ T9276] tipc: Disabling bearer [ 179.108346][ T9276] tipc: Disabling bearer [ 179.113990][ T9276] tipc: Disabling bearer [ 179.119952][ T9276] tipc: Left network mode [ 179.189614][T11251] lo speed is unknown, defaulting to 1000 [ 179.221891][ T9276] IPVS: stopping master sync thread 9167 ... [ 179.244681][ T9276] IPVS: stopping backup sync thread 7451 ... [ 179.251603][T11272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'. [ 179.285502][T11273] lo speed is unknown, defaulting to 1000 [ 179.302521][T11272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.397431][T11272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.443017][T11277] tipc: Resetting bearer [ 179.503105][T11277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.518005][T11277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.574200][T11277] bridge1: left promiscuous mode [ 179.579487][T11277] bond0: left promiscuous mode [ 179.585420][T11277] bond_slave_0: left promiscuous mode [ 179.592092][T11277] bond_slave_1: left promiscuous mode [ 179.597933][T11277] dummy0: left promiscuous mode [ 179.604190][T11277] macvlan2: left promiscuous mode [ 179.635149][T11277] vlan2: left allmulticast mode [ 179.640376][T11277] veth1: left allmulticast mode [ 179.649019][T11277] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 179.657858][T11277] macvtap1: left promiscuous mode [ 179.732660][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.742068][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.751674][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.760054][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.792523][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.801158][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.809678][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.818164][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.832900][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 179.877481][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.901588][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.247182][T11318] nbd: device at index 4 is going down [ 180.255858][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1439'. [ 180.279224][T11318] veth0_to_bond: entered allmulticast mode [ 180.318345][T11052] veth0_vlan: entered promiscuous mode [ 180.333520][T11054] veth0_vlan: entered promiscuous mode [ 180.352790][T11321] netlink: 'syz.4.1440': attribute type 13 has an invalid length. [ 180.369494][T11052] veth1_vlan: entered promiscuous mode [ 180.396304][T11054] veth1_vlan: entered promiscuous mode [ 180.410040][T11323] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 180.418561][T11323] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1441'. [ 180.488101][T11054] veth0_macvtap: entered promiscuous mode [ 180.513775][T11054] veth1_macvtap: entered promiscuous mode [ 180.526602][T11052] veth0_macvtap: entered promiscuous mode [ 180.547813][T11052] veth1_macvtap: entered promiscuous mode [ 180.557872][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'. [ 180.568949][T11327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1443'. [ 180.593262][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.605302][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.639366][ T76] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.649489][T11052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.660365][T11052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.672107][T11330] netlink: 'syz.2.1444': attribute type 12 has an invalid length. [ 180.680368][T11330] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1444'. [ 180.691062][ T5872] Bluetooth: hci4: command 0x041b tx timeout [ 180.697814][ T9276] hsr_slave_0: left promiscuous mode [ 180.703646][ T9276] hsr_slave_1: left promiscuous mode [ 180.713261][ T9276] veth1_macvtap: left promiscuous mode [ 180.718764][ T9276] veth0_macvtap: left promiscuous mode [ 180.724959][ T9276] veth1_vlan: left promiscuous mode [ 180.730253][ T9276] veth0_vlan: left promiscuous mode [ 180.917284][ T76] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.927871][ T76] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.938520][ T24] lo speed is unknown, defaulting to 1000 [ 180.960090][ T76] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.961789][ T24] infiniband syz1: ib_query_port failed (-19) [ 180.980089][ T76] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.010694][ T5872] Bluetooth: hci1: command tx timeout [ 181.014315][ T76] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.041346][ T76] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.079211][T11338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.089114][ T9274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.089136][ T9274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.095027][ T76] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.175895][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.193242][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.230371][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.239771][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.247281][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.247302][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.288505][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.296624][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.478319][T11362] netlink: 'syz.4.1454': attribute type 4 has an invalid length. [ 181.557186][T11367] netlink: 'syz.4.1457': attribute type 12 has an invalid length. [ 181.577223][T11369] openvswitch: netlink: IPv4 tun info is not correct [ 181.832900][T11384] syz_tun: left allmulticast mode [ 181.905198][T11386] netlink: 'syz.4.1462': attribute type 12 has an invalid length. [ 182.012770][T11378] __nla_validate_parse: 6 callbacks suppressed [ 182.012790][T11378] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1459'. [ 182.382871][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 182.770746][ T5872] Bluetooth: hci4: command 0x041b tx timeout [ 183.090927][ T5872] Bluetooth: hci1: command tx timeout [ 183.235543][T11440] netlink: 'syz.6.1476': attribute type 4 has an invalid length. [ 183.384579][T11452] lo speed is unknown, defaulting to 1000 [ 183.390399][T11452] lo speed is unknown, defaulting to 1000 [ 183.470024][T11452] lo speed is unknown, defaulting to 1000 [ 183.471030][T11461] netlink: 'syz.5.1481': attribute type 83 has an invalid length. [ 183.477860][T11463] bridge0: port 3(erspan0) entered blocking state [ 183.527174][T11452] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 183.530680][T11463] bridge0: port 3(erspan0) entered disabled state [ 183.589738][T11463] erspan0: entered allmulticast mode [ 183.652841][T11463] erspan0: entered promiscuous mode [ 183.659485][T11463] bridge0: port 3(erspan0) entered blocking state [ 183.666042][T11463] bridge0: port 3(erspan0) entered forwarding state [ 183.700075][T11470] erspan0: left allmulticast mode [ 183.724770][T11470] erspan0: left promiscuous mode [ 183.733612][T11470] bridge0: port 3(erspan0) entered disabled state [ 183.783409][T11452] lo speed is unknown, defaulting to 1000 [ 183.790202][T11452] lo speed is unknown, defaulting to 1000 [ 183.913646][T11471] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.921221][T11471] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.994414][T11471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.015102][T11471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.123235][T11452] lo speed is unknown, defaulting to 1000 [ 184.143015][ T9276] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.161287][ T3021] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.207590][T11452] lo speed is unknown, defaulting to 1000 [ 184.207590][ T3021] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.207629][ T3021] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.247521][T11452] lo speed is unknown, defaulting to 1000 [ 184.260194][T11489] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.296369][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1488'. [ 184.340353][T11489] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.427648][T11498] tipc: Invalid UDP bearer configuration [ 184.427691][T11498] tipc: Enabling of bearer rejected, failed to enable media [ 184.461426][T11491] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1487'. [ 184.522406][T11506] netlink: 'syz.2.1493': attribute type 10 has an invalid length. [ 184.524646][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 184.547360][T11489] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.556958][T11509] netlink: 'syz.2.1493': attribute type 10 has an invalid length. [ 184.575926][T11508] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1492'. [ 184.583225][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1493'. [ 184.587764][T11506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.605381][T11506] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 184.628512][ T12] bond0: (slave batadv0): interface is now down [ 184.641065][T11508] IPv6: NLM_F_CREATE should be specified when creating new route [ 184.655401][T11489] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.660670][ T12] bond0: (slave batadv0): interface is now down [ 184.692682][ T12] bond0: (slave batadv0): interface is now down [ 184.710133][T11509] batadv0: entered promiscuous mode [ 184.715623][T11509] batadv0: entered allmulticast mode [ 184.720990][ T12] bond0: (slave batadv0): interface is now down [ 184.740558][ T12] bond0: (slave batadv0): interface is now down [ 184.773498][ T12] bond0: (slave batadv0): interface is now down [ 184.794764][T11509] bond0: (slave batadv0): Releasing backup interface [ 184.805843][T11509] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 184.850800][ T5872] Bluetooth: hci4: command 0x041b tx timeout [ 184.896089][ T3021] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.919685][ T9274] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.952241][ T9274] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.971040][ T9274] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.979631][T11520] siw: device registration error -23 [ 185.177326][T11544] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1500'. [ 185.227693][T11549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1504'. [ 185.419047][T11557] macsec1: entered promiscuous mode [ 185.438880][T11557] team0: entered promiscuous mode [ 185.450525][T11557] team_slave_0: entered promiscuous mode [ 185.457008][T11557] team_slave_1: entered promiscuous mode [ 185.536796][T11569] tipc: Enabling of bearer rejected, failed to enable media [ 185.632906][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'. [ 185.657693][T11574] sctp: [Deprecated]: syz.2.1512 (pid 11574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.657693][T11574] Use struct sctp_sack_info instead [ 185.685803][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.693392][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.824159][T11589] validate_nla: 2 callbacks suppressed [ 185.824181][T11589] netlink: 'syz.2.1515': attribute type 39 has an invalid length. [ 185.857511][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.874074][ T8367] IPVS: starting estimator thread 0... [ 185.900220][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.000805][T11592] IPVS: using max 42 ests per chain, 100800 per kthread [ 186.655746][ T9276] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.666223][ T9276] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.751694][ T9276] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.781495][ T9276] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.836725][T11618] lo speed is unknown, defaulting to 1000 [ 186.878008][T11620] lo speed is unknown, defaulting to 1000 [ 187.066172][T11636] __nla_validate_parse: 1 callbacks suppressed [ 187.066193][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 187.379916][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1528'. [ 187.497490][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1535'. [ 187.574595][T11670] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1537'. [ 187.883965][T11685] lo speed is unknown, defaulting to 1000 [ 187.924168][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'. [ 188.010319][T11700] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 188.066118][T11703] pim6reg9: entered allmulticast mode [ 188.135618][T11706] syzkaller0: entered promiscuous mode [ 188.146586][T11706] syzkaller0: entered allmulticast mode [ 188.260156][T11708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1550'. [ 188.461401][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1554'. [ 188.478221][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1554'. [ 188.624835][T11734] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1555'. [ 188.791303][T11748] netlink: 'syz.2.1561': attribute type 12 has an invalid length. [ 188.797007][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1560'. [ 188.809472][T11747] netlink: 'syz.6.1560': attribute type 7 has an invalid length. [ 188.819083][T11747] netlink: 'syz.6.1560': attribute type 8 has an invalid length. [ 188.859734][T11750] macsec0: entered allmulticast mode [ 188.974779][T11757] netlink: 'syz.0.1565': attribute type 2 has an invalid length. [ 189.023452][T11768] netlink: 'syz.2.1566': attribute type 11 has an invalid length. [ 189.034230][T11756] lo speed is unknown, defaulting to 1000 [ 189.041023][T11768] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 189.050324][T11767] netlink: 'syz.2.1566': attribute type 11 has an invalid length. [ 189.051751][T11773] geneve2: entered promiscuous mode [ 189.062115][T11767] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 189.065767][T11773] geneve2: entered allmulticast mode [ 189.073753][T11768] "syz.2.1566" (11768) uses obsolete ecb(arc4) skcipher [ 189.181749][T11783] syzkaller0: entered promiscuous mode [ 189.187292][T11783] syzkaller0: entered allmulticast mode [ 189.421392][T11792] tipc: Enabled bearer , priority 0 [ 189.432636][T11791] tipc: Disabling bearer [ 189.641207][T11794] nbd0: detected capacity change from 0 to 63 [ 189.648022][T11799] block nbd0: NBD_DISCONNECT [ 189.654661][T11799] block nbd0: Disconnected due to user request. [ 189.661215][T11799] block nbd0: shutting down sockets [ 189.738907][T11804] netlink: 'syz.2.1576': attribute type 12 has an invalid length. [ 190.127426][T11833] lo speed is unknown, defaulting to 1000 [ 190.171554][T11838] team0: No ports can be present during mode change [ 190.178434][T11840] team0: No ports can be present during mode change [ 190.202632][T11838] netlink: 'syz.5.1587': attribute type 2 has an invalid length. [ 190.216041][T11837] netlink: 'syz.5.1587': attribute type 2 has an invalid length. [ 190.278855][T11842] lo speed is unknown, defaulting to 1000 [ 190.949762][T11878] tipc: Enabling of bearer rejected, failed to enable media [ 191.059009][T11881] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 191.074074][T11881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.102050][ T30] audit: type=1800 audit(1756466362.515:5): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1601" name="memory.events" dev="tmpfs" ino=1686 res=0 errno=0 [ 191.103446][T11881] batadv_slave_1: entered promiscuous mode [ 191.409004][T11882] batadv_slave_1: left promiscuous mode [ 191.639037][T11896] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 191.758419][T11900] lo speed is unknown, defaulting to 1000 [ 192.189938][T11930] __nla_validate_parse: 19 callbacks suppressed [ 192.189972][T11930] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1613'. [ 192.212587][T11927] netlink: 'syz.6.1614': attribute type 11 has an invalid length. [ 192.233824][T11931] netlink: 'syz.6.1614': attribute type 11 has an invalid length. [ 192.248422][T11927] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1614'. [ 192.257660][T11931] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1614'. [ 192.351271][T11942] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 192.373184][T11942] geneve3: entered promiscuous mode [ 192.447947][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 192.501092][T11963] netlink: 'syz.6.1623': attribute type 1 has an invalid length. [ 192.576982][T11963] syzkaller0: entered promiscuous mode [ 192.582721][T11963] syzkaller0: entered allmulticast mode [ 192.598886][T11945] netlink: 'syz.4.1618': attribute type 10 has an invalid length. [ 192.766346][T11977] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.840360][T11980] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1628'. [ 192.931302][T11987] ip6tnl2: entered promiscuous mode [ 192.960346][T11982] lo speed is unknown, defaulting to 1000 [ 193.000062][T11993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1634'. [ 193.072306][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 193.095830][T11998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1635'. [ 193.254080][T12008] rdma_rxe: rxe_newlink: failed to add lo [ 193.401844][T12014] bridge0: port 1(erspan0) entered disabled state [ 193.419835][T12014] batadv0: left allmulticast mode [ 193.432371][T12014] veth0_vlan: left allmulticast mode [ 193.445721][T12014] hsr1: left allmulticast mode [ 193.456440][T12014] syz_tun: left allmulticast mode [ 193.484269][T12023] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1640'. [ 193.490629][T12014] batadv_slave_0: left allmulticast mode [ 193.499488][T12014] geneve2: left allmulticast mode [ 193.508912][T12014] bridge3: left allmulticast mode [ 193.523504][ T5990] lo speed is unknown, defaulting to 1000 [ 193.549158][T12025] lo speed is unknown, defaulting to 1000 [ 193.593834][T12027] netlink: 'syz.4.1642': attribute type 13 has an invalid length. [ 193.667226][T12027] netlink: 'syz.4.1642': attribute type 17 has an invalid length. [ 193.695128][T12033] netlink: 'syz.6.1645': attribute type 10 has an invalid length. [ 193.766381][T12027] syz_tun: left promiscuous mode [ 193.793225][T12027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.802526][T12027] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.827064][T12027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.864923][T12044] v: renamed from ip6_vti0 [ 193.961771][T12048] veth3: entered allmulticast mode [ 193.970294][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 194.160433][T12058] lo speed is unknown, defaulting to 1000 [ 194.692830][T12100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.742264][T12105] bridge_slave_0: left allmulticast mode [ 194.747971][T12105] bridge_slave_0: left promiscuous mode [ 194.753948][T12105] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.762422][T12105] bridge_slave_1: left allmulticast mode [ 194.768359][T12105] bridge_slave_1: left promiscuous mode [ 194.774393][T12105] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.784366][T12105] bond0: (slave bond_slave_0): Releasing backup interface [ 194.794793][T12105] bond0: (slave bond_slave_1): Releasing backup interface [ 194.803598][T12105] team_slave_0: left promiscuous mode [ 194.809880][T12105] team0: Port device team_slave_0 removed [ 194.817151][T12105] team_slave_1: left promiscuous mode [ 194.824945][T12105] team0: Port device team_slave_1 removed [ 194.831303][T12105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.839239][T12105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.854249][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.860850][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.928567][T12115] FAULT_INJECTION: forcing a failure. [ 194.928567][T12115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.929518][T12105] team0: Mode changed to "loadbalance" [ 194.961028][T12115] CPU: 1 UID: 0 PID: 12115 Comm: syz.2.1671 Not tainted syzkaller #0 PREEMPT(full) [ 194.961059][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.961071][T12115] Call Trace: [ 194.961078][T12115] [ 194.961086][T12115] dump_stack_lvl+0x189/0x250 [ 194.961115][T12115] ? __pfx____ratelimit+0x10/0x10 [ 194.961143][T12115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.961166][T12115] ? __pfx__printk+0x10/0x10 [ 194.961195][T12115] ? rcu_is_watching+0x15/0xb0 [ 194.961216][T12115] should_fail_ex+0x414/0x560 [ 194.961244][T12115] _copy_to_user+0x31/0xb0 [ 194.961267][T12115] simple_read_from_buffer+0xe1/0x170 [ 194.961297][T12115] proc_fail_nth_read+0x1b3/0x220 [ 194.961321][T12115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.961343][T12115] ? rw_verify_area+0x2a6/0x4d0 [ 194.961366][T12115] ? tun_chr_write_iter+0x18a/0x200 [ 194.961384][T12115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.961406][T12115] vfs_read+0x1fd/0xa30 [ 194.961429][T12115] ? fdget_pos+0x247/0x320 [ 194.961448][T12115] ? __pfx___mutex_lock+0x10/0x10 [ 194.961467][T12115] ? __pfx_vfs_read+0x10/0x10 [ 194.961495][T12115] ? __fget_files+0x3a0/0x420 [ 194.961512][T12115] ? __fget_files+0x2a/0x420 [ 194.961533][T12115] ksys_read+0x145/0x250 [ 194.961558][T12115] ? __pfx_ksys_read+0x10/0x10 [ 194.961581][T12115] ? rcu_is_watching+0x15/0xb0 [ 194.961601][T12115] ? rcu_is_watching+0x15/0xb0 [ 194.961621][T12115] do_syscall_64+0xfa/0x3b0 [ 194.961640][T12115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.961658][T12115] ? clear_bhb_loop+0x60/0xb0 [ 194.961678][T12115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.961695][T12115] RIP: 0033:0x7ff731b8d5fc [ 194.961713][T12115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 194.961730][T12115] RSP: 002b:00007ff732ad5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.961753][T12115] RAX: ffffffffffffffda RBX: 00007ff731db5fa0 RCX: 00007ff731b8d5fc [ 194.961767][T12115] RDX: 000000000000000f RSI: 00007ff732ad50a0 RDI: 0000000000000007 [ 194.961778][T12115] RBP: 00007ff732ad5090 R08: 0000000000000000 R09: 0000000000000000 [ 194.961790][T12115] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000001 [ 194.961801][T12115] R13: 00007ff731db6038 R14: 00007ff731db5fa0 R15: 00007ffee212ada8 [ 194.961822][T12115] [ 195.357643][T12133] batadv1: entered promiscuous mode [ 195.375641][T12133] batadv1: entered allmulticast mode [ 196.101623][T12196] validate_nla: 4 callbacks suppressed [ 196.101645][T12196] netlink: 'syz.0.1691': attribute type 4 has an invalid length. [ 196.453809][T12225] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 196.467342][T12217] bond2: entered promiscuous mode [ 196.483016][T12217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.224425][T12233] netlink: 'syz.5.1706': attribute type 9 has an invalid length. [ 197.234491][T12233] netlink: 'syz.5.1706': attribute type 6 has an invalid length. [ 197.341307][T12241] __nla_validate_parse: 10 callbacks suppressed [ 197.341328][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 197.507263][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 199.637547][T12261] tipc: Started in network mode [ 199.643043][T12261] tipc: Node identity 2a76f5ae66bd, cluster identity 4711 [ 199.653237][T12261] tipc: Enabled bearer , priority 0 [ 199.674365][T12261] syzkaller0: entered promiscuous mode [ 199.683787][T12261] syzkaller0: entered allmulticast mode [ 199.704315][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1714'. [ 199.715657][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 199.725795][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 199.735813][T12261] tipc: Resetting bearer [ 199.754986][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 199.757784][T12272] ip6tnl4: entered promiscuous mode [ 199.770151][T12272] ip6tnl4: entered allmulticast mode [ 199.770324][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 199.787345][T12273] tipc: Started in network mode [ 199.792518][T12273] tipc: Node identity ee4557ec2109, cluster identity 4711 [ 199.799873][T12273] tipc: Enabled bearer , priority 0 [ 199.807740][T12257] tipc: Resetting bearer [ 199.817442][T12257] tipc: Disabling bearer [ 199.825796][T12266] 8021q: adding VLAN 0 to HW filter on device bond7 [ 199.834596][T12273] tipc: Disabling bearer [ 199.864831][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1717'. [ 199.882510][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1717'. [ 200.094393][T12290] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1720'. [ 200.368364][T12312] netlink: 'syz.5.1727': attribute type 10 has an invalid length. [ 200.383490][T12311] netlink: 'syz.5.1727': attribute type 10 has an invalid length. [ 200.400047][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.429502][T12312] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 200.442762][T12311] batadv0: entered promiscuous mode [ 200.452512][T12311] batadv0: entered allmulticast mode [ 200.532825][T12311] bond0: (slave batadv0): Releasing backup interface [ 200.551292][T12311] bridge0: port 1(batadv0) entered blocking state [ 200.568133][T12311] bridge0: port 1(batadv0) entered disabled state [ 200.667012][T12327] netlink: 'syz.2.1730': attribute type 13 has an invalid length. [ 200.676652][T12327] netlink: 'syz.2.1730': attribute type 17 has an invalid length. [ 200.871584][T12343] netlink: 'syz.5.1737': attribute type 11 has an invalid length. [ 200.880664][ T76] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 200.889907][ T76] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 200.943876][T12352] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 201.142778][T12371] lo speed is unknown, defaulting to 1000 [ 201.495652][T12400] netlink: 'syz.2.1756': attribute type 31 has an invalid length. [ 201.824782][T12440] sctp: [Deprecated]: syz.6.1764 (pid 12440) Use of int in max_burst socket option deprecated. [ 201.824782][T12440] Use struct sctp_assoc_value instead [ 202.056223][ T5864] Bluetooth: hci0: command 0x0c20 tx timeout [ 202.056246][ T5858] Bluetooth: hci2: command 0x0401 tx timeout [ 202.068565][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 202.441811][T12490] netlink: 'syz.4.1781': attribute type 1 has an invalid length. [ 202.449852][T12490] __nla_validate_parse: 14 callbacks suppressed [ 202.449882][T12490] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1781'. [ 202.466709][T12490] NCSI netlink: No device for ifindex 0 [ 202.506062][T12492] netlink: 'syz.4.1782': attribute type 1 has an invalid length. [ 202.524819][T12492] 8021q: adding VLAN 0 to HW filter on device bond8 [ 202.796211][T12508] netlink: 'syz.6.1788': attribute type 7 has an invalid length. [ 202.810751][T12508] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1788'. [ 202.839903][T12509] lo speed is unknown, defaulting to 1000 [ 203.163344][T12554] netlink: 'syz.0.1797': attribute type 3 has an invalid length. [ 203.185574][T12546] netlink: 'syz.0.1797': attribute type 13 has an invalid length. [ 203.194430][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 203.199929][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1799'. [ 203.235869][T12570] gtp1: entered promiscuous mode [ 203.250355][T12583] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 203.257201][T12570] gtp1: entered allmulticast mode [ 203.267214][T12583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.288216][T12573] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 203.375598][T12593] netlink: 'syz.6.1803': attribute type 2 has an invalid length. [ 203.378830][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'. [ 203.385185][T12593] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1803'. [ 203.595990][T12600] lo speed is unknown, defaulting to 1000 [ 203.629468][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 203.885926][T12624] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1809'. [ 203.886224][T12623] netlink: 'syz.6.1808': attribute type 1 has an invalid length. [ 203.903909][T12623] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1808'. [ 204.142624][T12631] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 204.160961][T12631] bond3: entered promiscuous mode [ 204.166045][T12631] bond3: entered allmulticast mode [ 204.171978][T12631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.234106][T12631] bridge0: port 1(erspan0) entered disabled state [ 204.285151][T12631] batman_adv: batadv0: Interface deactivated: dummy0 [ 204.654090][ T9274] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.660209][ T8367] lo speed is unknown, defaulting to 1000 [ 204.676891][ T9274] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.688364][ T8367] syz2: Port: 1 Link DOWN [ 204.732287][ T9274] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.749388][ T9274] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.777653][T12645] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 204.786390][T12645] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 204.809897][T12649] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1817'. [ 205.123471][T12671] lo speed is unknown, defaulting to 1000 [ 205.397876][T12689] lo speed is unknown, defaulting to 1000 [ 206.265454][T12749] macsec1: entered promiscuous mode [ 206.310779][T12749] bridge0: entered promiscuous mode [ 206.326574][T12749] bridge0: port 3(macsec1) entered blocking state [ 206.353552][T12749] bridge0: port 3(macsec1) entered disabled state [ 206.372720][T12749] macsec1: entered allmulticast mode [ 206.388142][T12749] bridge0: entered allmulticast mode [ 206.402709][T12749] macsec1: left allmulticast mode [ 206.407887][T12749] bridge0: left allmulticast mode [ 206.415441][ T5990] IPVS: starting estimator thread 0... [ 206.424470][T12749] bridge0: left promiscuous mode [ 206.476993][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.522902][T12773] IPVS: using max 40 ests per chain, 96000 per kthread [ 206.526625][T12774] lo speed is unknown, defaulting to 1000 [ 206.638363][T12790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.845877][T12804] lo speed is unknown, defaulting to 1000 [ 206.955914][T12793] ip6gretap0: entered promiscuous mode [ 206.961750][T12793] ip6gretap0: entered allmulticast mode [ 207.008871][T12818] sctp: [Deprecated]: syz.6.1859 (pid 12818) Use of int in max_burst socket option. [ 207.008871][T12818] Use struct sctp_assoc_value instead [ 207.030357][T12819] validate_nla: 2 callbacks suppressed [ 207.030377][T12819] netlink: 'syz.0.1857': attribute type 3 has an invalid length. [ 207.045689][T12819] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 207.091804][T12821] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 207.349778][T12839] tipc: Enabled bearer , priority 0 [ 207.368431][T12838] tipc: Resetting bearer [ 207.416679][T12838] tipc: Disabling bearer [ 207.604855][T12861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.638735][T12862] tipc: Enabled bearer , priority 0 [ 207.650209][T12862] syzkaller0: entered promiscuous mode [ 207.657709][T12862] syzkaller0: entered allmulticast mode [ 207.667904][T12862] tipc: Resetting bearer [ 207.681451][T12862] tipc: Disabling bearer [ 207.984251][T12891] tipc: Enabled bearer , priority 0 [ 208.011430][T12892] lo speed is unknown, defaulting to 1000 [ 208.134173][T12889] tipc: Disabling bearer [ 208.210110][T12900] __nla_validate_parse: 14 callbacks suppressed [ 208.210131][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1878'. [ 208.312437][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1880'. [ 208.691771][T12929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1887'. [ 208.905699][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.961474][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 209.106452][T12958] "syz.2.1894" (12958) uses obsolete ecb(arc4) skcipher [ 209.249706][T12970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1897'. [ 209.274306][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 209.293048][T12970] veth0_to_bridge: entered promiscuous mode [ 209.299076][T12970] veth0_to_bridge: entered allmulticast mode [ 209.478497][T12980] lo speed is unknown, defaulting to 1000 [ 209.635053][T12988] netlink: 'syz.0.1901': attribute type 2 has an invalid length. [ 209.669727][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1902'. [ 209.679138][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1902'. [ 209.841877][T13001] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1904'. [ 209.961960][T13003] tipc: Enabled bearer , priority 0 [ 210.004115][T13003] syzkaller0: entered promiscuous mode [ 210.009637][T13003] syzkaller0: entered allmulticast mode [ 210.037712][T13005] tipc: Resetting bearer [ 210.086170][T13005] tipc: Disabling bearer [ 210.276042][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1911'. [ 210.286713][T13030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.348129][T13035] tipc: Enabled bearer , priority 0 [ 210.355696][T13035] syzkaller0: entered promiscuous mode [ 210.361751][T13035] syzkaller0: entered allmulticast mode [ 210.374749][T13035] tipc: Resetting bearer [ 210.392961][T13034] tipc: Resetting bearer [ 210.401192][T13034] tipc: Disabling bearer [ 210.866285][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.876146][T13057] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 210.957453][T13062] lo speed is unknown, defaulting to 1000 [ 211.137010][T13085] tipc: Enabled bearer , priority 0 [ 211.293885][T13085] tipc: Disabling bearer [ 211.384797][T13111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 211.498783][T13112] tipc: Enabling of bearer rejected, failed to enable media [ 211.508214][T13121] lo speed is unknown, defaulting to 1000 [ 211.537068][T13128] netlink: 'syz.6.1940': attribute type 13 has an invalid length. [ 211.555563][T13128] netlink: 'syz.6.1940': attribute type 17 has an invalid length. [ 211.778354][T13128] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.792978][T13128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.023289][T13174] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 212.055988][T13174] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.086616][T13174] veth7: entered promiscuous mode [ 212.100031][T13174] bond6: (slave veth7): Enslaving as an active interface with a down link [ 212.187765][T13189] tipc: Enabling of bearer rejected, failed to enable media [ 212.463905][T13200] lo speed is unknown, defaulting to 1000 [ 212.947615][T13233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.987744][T13231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.054102][T13242] vlan2: entered allmulticast mode [ 213.059315][T13242] veth1: entered allmulticast mode [ 213.074374][T13244] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 213.176201][T13247] netlink: 'syz.5.1975': attribute type 10 has an invalid length. [ 213.186157][T13247] team0: Cannot enslave team device to itself [ 213.200587][T13247] hsr_slave_0: left promiscuous mode [ 213.213905][T13247] hsr_slave_1: left promiscuous mode [ 213.224071][T13250] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 213.234836][T13250] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 213.274208][T13256] __nla_validate_parse: 18 callbacks suppressed [ 213.274232][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1978'. [ 213.340319][T13256] macsec1: entered promiscuous mode [ 213.345777][T13256] team0: entered promiscuous mode [ 213.552966][T13262] lo speed is unknown, defaulting to 1000 [ 213.597692][T13268] lo speed is unknown, defaulting to 1000 [ 213.626069][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1984'. [ 213.883814][T13299] netlink: 'syz.6.1988': attribute type 2 has an invalid length. [ 214.180683][T13314] block nbd0: server does not support multiple connections per device. [ 214.199535][T13314] block nbd0: shutting down sockets [ 214.255921][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 214.291490][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 214.305081][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 214.316181][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 214.322562][T13319] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1996'. [ 214.325256][T13307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 214.373096][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 214.387281][T13324] siw: device registration error -23 [ 214.397817][T13324] tipc: Enabled bearer , priority 0 [ 214.405796][T13324] syzkaller0: entered promiscuous mode [ 214.411629][T13324] syzkaller0: entered allmulticast mode [ 214.424936][T13324] tipc: Resetting bearer [ 214.432739][T13323] tipc: Resetting bearer [ 214.442177][T13323] tipc: Disabling bearer [ 214.623844][T13333] lo speed is unknown, defaulting to 1000 [ 214.838720][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 215.056483][T13357] lo speed is unknown, defaulting to 1000 [ 215.283365][T13371] "syz.0.2011" (13371) uses obsolete ecb(arc4) skcipher [ 215.343621][T13371] pimreg3: entered allmulticast mode [ 215.412105][T13375] tipc: Enabling of bearer rejected, failed to enable media [ 215.589886][T13383] lo speed is unknown, defaulting to 1000 [ 215.605752][T13390] tipc: Enabled bearer , priority 0 [ 215.694306][T13390] syzkaller0: entered promiscuous mode [ 215.699829][T13390] syzkaller0: entered allmulticast mode [ 215.777711][T13391] lo speed is unknown, defaulting to 1000 [ 215.799797][T13390] tipc: Resetting bearer [ 215.822569][T13390] netlink: 'syz.6.2018': attribute type 5 has an invalid length. [ 215.855519][T13389] tipc: Resetting bearer [ 215.867437][T13389] tipc: Disabling bearer [ 216.048042][ T30] audit: type=1800 audit(1756466387.455:6): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2021" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=514 res=0 errno=0 [ 216.096728][ T30] audit: type=1800 audit(1756466387.465:7): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2021" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=514 res=0 errno=0 [ 216.558027][T13429] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 216.639510][T13429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 216.760359][T13439] 8021q: adding VLAN 0 to HW filter on device bond9 [ 216.791204][T13439] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 216.884089][T13439] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 217.332961][T13476] netlink: 'syz.4.2044': attribute type 1 has an invalid length. [ 217.406740][T13476] 8021q: adding VLAN 0 to HW filter on device bond10 [ 217.633214][T13494] nbd: device at index 0 is going down [ 218.201858][T13540] netlink: 'syz.2.2064': attribute type 7 has an invalid length. [ 218.209645][T13540] netlink: 'syz.2.2064': attribute type 8 has an invalid length. [ 218.309507][T13553] netlink: 'syz.6.2070': attribute type 11 has an invalid length. [ 218.337928][T13562] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 218.427010][T13566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.448116][T13566] __nla_validate_parse: 18 callbacks suppressed [ 218.448135][T13566] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2073'. [ 218.472546][T13566] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 218.485141][T13569] netlink: 20824 bytes leftover after parsing attributes in process `syz.6.2074'. [ 218.498456][T13569] batadv_slave_0: entered promiscuous mode [ 218.527841][T13571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2075'. [ 218.548915][T13576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2077'. [ 218.567550][T13571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2075'. [ 218.592259][T13571] bridge3: entered promiscuous mode [ 218.597605][T13571] bridge3: entered allmulticast mode [ 218.622703][T13583] netlink: 'syz.4.2079': attribute type 1 has an invalid length. [ 218.631497][T13583] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2079'. [ 218.667640][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2080'. [ 218.732428][T13581] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2080'. [ 218.757911][T13581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.989617][T13614] netlink: 'syz.6.2086': attribute type 13 has an invalid length. [ 219.006577][T13614] netlink: 'syz.6.2086': attribute type 17 has an invalid length. [ 219.035543][T13614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.107721][T13617] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.165020][T13617] batman_adv: batadv0: Interface deactivated: macvtap2 [ 219.173976][T13617] batman_adv: batadv0: Removing interface: macvtap2 [ 219.185408][T13604] lo speed is unknown, defaulting to 1000 [ 219.269794][T13630] syzkaller1: entered promiscuous mode [ 219.278916][T13630] syzkaller1: entered allmulticast mode [ 219.301247][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2091'. [ 219.367547][T13640] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2092'. [ 219.744498][T13670] nbd: couldn't find a device at index 0 [ 219.788879][T13664] lo speed is unknown, defaulting to 1000 [ 219.896888][T13685] netlink: 'syz.6.2106': attribute type 2 has an invalid length. [ 219.918564][T13685] netlink: 'syz.6.2106': attribute type 2 has an invalid length. [ 220.140305][T13710] macvtap3: entered allmulticast mode [ 220.149656][T13710] batman_adv: batadv0: Adding interface: macvtap3 [ 220.165841][T13710] batman_adv: batadv0: Interface activated: macvtap3 [ 220.217889][T13713] syzkaller0: entered promiscuous mode [ 220.223883][T13713] syzkaller0: entered allmulticast mode [ 220.255022][T13713] tipc: Enabled bearer , priority 0 [ 220.265427][T13713] tipc: Enabling of bearer rejected, already enabled [ 220.327775][T13712] tipc: Resetting bearer [ 220.341393][T13712] tipc: Disabling bearer [ 220.481110][T13738] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 220.498234][T13740] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 220.499596][T13738] tipc: Enabled bearer , priority 0 [ 220.515324][T13740] sch_fq: defrate 3 ignored. [ 220.521197][T13738] syzkaller0: entered promiscuous mode [ 220.526802][T13738] syzkaller0: entered allmulticast mode [ 220.540435][T13738] tipc: Resetting bearer [ 220.549365][T13737] tipc: Resetting bearer [ 220.558055][T13737] tipc: Disabling bearer [ 220.756180][T13756] lo speed is unknown, defaulting to 1000 [ 220.935201][T13771] netlink: 'syz.5.2130': attribute type 2 has an invalid length. [ 220.983128][T13771] _ÐZ`Ô€@: entered promiscuous mode [ 220.988684][T13769] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 221.049947][T13775] syzkaller0: entered promiscuous mode [ 221.057032][T13775] syzkaller0: entered allmulticast mode [ 221.241967][T13783] lo speed is unknown, defaulting to 1000 [ 221.548329][T13800] lo speed is unknown, defaulting to 1000 [ 222.117785][T13807] veth7: entered promiscuous mode [ 222.640386][T13848] lo speed is unknown, defaulting to 1000 [ 222.981852][T13859] openvswitch: netlink: ufid size 22 bytes exceeds the range (1, 16) [ 222.998015][T13859] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.008204][T13862] xt_socket: unknown flags 0xd0 [ 223.406398][T13877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.540263][T13881] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 223.607850][T13883] lo speed is unknown, defaulting to 1000 [ 223.722002][T13883] __nla_validate_parse: 24 callbacks suppressed [ 223.722025][T13883] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2162'. [ 224.033854][T13892] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2165'. [ 224.288996][T13911] validate_nla: 25 callbacks suppressed [ 224.289017][T13911] netlink: 'syz.6.2169': attribute type 10 has an invalid length. [ 224.297062][T13915] netlink: 'syz.0.2171': attribute type 37 has an invalid length. [ 224.334611][T13911] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.344450][T13911] bond0: (slave team0): Enslaving as an active interface with an up link [ 224.437460][T13924] netlink: 11908 bytes leftover after parsing attributes in process `syz.2.2175'. [ 224.558135][T13931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2176'. [ 224.813615][T13949] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 224.979489][T13970] IPVS: set_ctl: invalid protocol: 128 172.20.20.11:21 [ 225.065017][T13973] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2187'. [ 225.123389][T13978] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2188'. [ 225.689618][T14002] netlink: 'syz.6.2192': attribute type 4 has an invalid length. [ 226.027018][T14031] netlink: 'syz.5.2201': attribute type 7 has an invalid length. [ 226.038158][T14031] netlink: 'syz.5.2201': attribute type 8 has an invalid length. [ 226.076499][T14031] netlink: 'syz.5.2201': attribute type 15 has an invalid length. [ 226.144796][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2202'. [ 226.164259][T14037] netlink: 'syz.5.2201': attribute type 1 has an invalid length. [ 226.180754][T14037] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2201'. [ 226.192643][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 226.468499][T14069] netlink: 'syz.2.2213': attribute type 4 has an invalid length. [ 226.491570][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2210'. [ 226.501935][T14069] netlink: 'syz.2.2213': attribute type 4 has an invalid length. [ 226.514722][ T8366] lo speed is unknown, defaulting to 1000 [ 226.520782][ T8366] syz2: Port: 1 Link ACTIVE [ 227.446210][T14133] lo speed is unknown, defaulting to 1000 [ 227.593088][T14144] macvlan2: entered allmulticast mode [ 227.599196][T14144] veth1_vlan: entered allmulticast mode [ 227.615462][T14144] veth1_vlan: left allmulticast mode [ 227.640857][T14142] macvlan2: entered allmulticast mode [ 227.646547][T14142] veth1_vlan: entered allmulticast mode [ 227.665055][T14142] veth1_vlan: left allmulticast mode [ 227.864057][T14138] lo speed is unknown, defaulting to 1000 [ 227.936222][T14145] lo speed is unknown, defaulting to 1000 [ 227.998347][T14160] lo speed is unknown, defaulting to 1000 [ 228.085837][T14178] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 228.248441][T14184] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 228.638496][T14216] team0: Mode changed to "activebackup" [ 228.844451][T14226] lo speed is unknown, defaulting to 1000 [ 228.972190][T14240] __nla_validate_parse: 7 callbacks suppressed [ 228.972213][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 229.009839][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2255'. [ 229.113893][T14248] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2252'. [ 229.139846][T14247] lo speed is unknown, defaulting to 1000 [ 229.514560][T14260] netlink: 724 bytes leftover after parsing attributes in process `syz.0.2259'. [ 229.525661][T14260] netlink: 83 bytes leftover after parsing attributes in process `syz.0.2259'. [ 229.881804][T14268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2263'. [ 229.926343][T14268] bridge: RTM_NEWNEIGH with invalid ether address [ 230.044428][T14273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.053920][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 230.072405][T12578] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.096517][T12578] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.154825][T12578] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.167116][T14284] bridge0: port 1(batadv0) entered disabled state [ 230.182739][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2271'. [ 230.193650][T12578] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.238996][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2271'. [ 230.246129][T14292] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.401298][T14307] netlink: 576 bytes leftover after parsing attributes in process `syz.5.2278'. [ 230.460662][T14308] pim6reg1: entered promiscuous mode [ 230.468001][T14308] pim6reg1: entered allmulticast mode [ 230.514105][T14319] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 230.527914][T14319] syzkaller1: linktype set to 6 [ 230.645637][T14331] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.665879][T14331] team0: Port device bond3 added [ 230.772763][T14345] syzkaller1: entered promiscuous mode [ 230.778813][T14345] syzkaller1: entered allmulticast mode [ 230.985345][T14367] FAULT_INJECTION: forcing a failure. [ 230.985345][T14367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.002519][T14367] CPU: 1 UID: 0 PID: 14367 Comm: syz.0.2291 Not tainted syzkaller #0 PREEMPT(full) [ 231.002550][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.002562][T14367] Call Trace: [ 231.002568][T14367] [ 231.002577][T14367] dump_stack_lvl+0x189/0x250 [ 231.002606][T14367] ? __pfx____ratelimit+0x10/0x10 [ 231.002634][T14367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.002656][T14367] ? __pfx__printk+0x10/0x10 [ 231.002691][T14367] ? __might_fault+0xb0/0x130 [ 231.002720][T14367] ? rcu_is_watching+0x15/0xb0 [ 231.002740][T14367] should_fail_ex+0x414/0x560 [ 231.002767][T14367] _copy_from_user+0x2d/0xb0 [ 231.002788][T14367] ___sys_sendmsg+0x158/0x2a0 [ 231.002811][T14367] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.002846][T14367] ? __fget_files+0x2a/0x420 [ 231.002861][T14367] ? __fget_files+0x3a0/0x420 [ 231.002882][T14367] __x64_sys_sendmsg+0x19b/0x260 [ 231.002903][T14367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.002928][T14367] ? __pfx_ksys_write+0x10/0x10 [ 231.002951][T14367] ? rcu_is_watching+0x15/0xb0 [ 231.002971][T14367] ? rcu_is_watching+0x15/0xb0 [ 231.002991][T14367] do_syscall_64+0xfa/0x3b0 [ 231.003010][T14367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.003029][T14367] ? clear_bhb_loop+0x60/0xb0 [ 231.003051][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.003070][T14367] RIP: 0033:0x7f63bcb8ebe9 [ 231.003087][T14367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.003105][T14367] RSP: 002b:00007f63bda66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.003128][T14367] RAX: ffffffffffffffda RBX: 00007f63bcdb5fa0 RCX: 00007f63bcb8ebe9 [ 231.003143][T14367] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 231.003156][T14367] RBP: 00007f63bda66090 R08: 0000000000000000 R09: 0000000000000000 [ 231.003169][T14367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.003180][T14367] R13: 00007f63bcdb6038 R14: 00007f63bcdb5fa0 R15: 00007ffeee58f7e8 [ 231.003203][T14367] [ 231.322779][T14378] bond0: entered promiscuous mode [ 231.330195][T14378] debugfs: 'hsr0' already exists in 'hsr' [ 231.337316][T14378] Cannot create hsr debugfs directory [ 231.344473][T14378] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 231.355696][T14378] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 231.366527][T14378] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 231.780849][T14429] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 231.802348][ T30] audit: type=1800 audit(1756466403.215:8): pid=14428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2312" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=985 res=0 errno=0 [ 231.835636][ T30] audit: type=1804 audit(1756466403.215:9): pid=14428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2312" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=985 res=1 errno=0 [ 232.072205][T14460] pim6reg: entered allmulticast mode [ 232.078819][T14460] pim6reg: left allmulticast mode [ 232.614100][T14499] netlink: 'syz.4.2333': attribute type 9 has an invalid length. [ 232.737204][T14511] netlink: 'syz.5.2334': attribute type 1 has an invalid length. [ 232.756170][T14503] lo speed is unknown, defaulting to 1000 [ 232.894708][T14525] netlink: 'syz.5.2334': attribute type 4 has an invalid length. [ 232.927603][T14526] netlink: 'syz.4.2340': attribute type 12 has an invalid length. [ 233.378287][T14552] nbd: must specify a size in bytes for the device [ 233.430249][T14575] netlink: 'syz.0.2352': attribute type 3 has an invalid length. [ 233.441583][T14575] netlink: 'syz.0.2352': attribute type 2 has an invalid length. [ 233.457160][T14575] netlink: 'syz.0.2352': attribute type 2 has an invalid length. [ 233.520823][T14577] Unsupported ieee802154 address type: 0 [ 233.550941][T14583] netlink: 'syz.5.2355': attribute type 1 has an invalid length. [ 233.619704][T14583] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 233.636156][T12576] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 233.649842][T14583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.687226][T14583] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 233.697241][T14583] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 233.723166][T14583] bond3 (unregistering): Released all slaves [ 234.125082][T14626] netlink: 'syz.5.2370': attribute type 12 has an invalid length. [ 234.150397][T14626] __nla_validate_parse: 36 callbacks suppressed [ 234.150419][T14626] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.2370'. [ 234.167387][T14632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2372'. [ 234.249304][T14645] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2377'. [ 234.271599][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2377'. [ 234.285091][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2374'. [ 234.391639][T14655] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2379'. [ 234.445613][T14658] bond4 (unregistering): Released all slaves [ 234.483147][T14670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 234.631836][T14663] openvswitch: netlink: IP tunnel dst address not specified [ 234.856957][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2388'. [ 235.148560][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2394'. [ 235.442106][T14726] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2396'. [ 235.568900][T14733] lo speed is unknown, defaulting to 1000 [ 236.252736][T14760] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 236.265002][ T5929] IPVS: starting estimator thread 0... [ 236.272123][T14765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.308926][T14765] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.317348][T14765] batman_adv: batadv0: Interface activated: dummy0 [ 236.346406][T14765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.391102][T14768] IPVS: using max 37 ests per chain, 88800 per kthread [ 236.459530][T14772] lo speed is unknown, defaulting to 1000 [ 236.497952][T14765] lo speed is unknown, defaulting to 1000 [ 236.788748][T14809] tipc: Enabled bearer , priority 0 [ 236.796130][T14808] syzkaller0: entered promiscuous mode [ 236.804262][T14808] syzkaller0: entered allmulticast mode [ 236.818043][T14812] tipc: Enabled bearer , priority 0 [ 236.843149][T14809] tipc: Resetting bearer [ 236.863542][T14809] tipc: Disabling bearer [ 236.923903][T14812] syzkaller0: entered promiscuous mode [ 236.929510][T14812] syzkaller0: entered allmulticast mode [ 236.936101][T14812] tipc: Resetting bearer [ 236.974310][T14823] validate_nla: 10 callbacks suppressed [ 236.974328][T14823] netlink: 'syz.6.2423': attribute type 12 has an invalid length. [ 236.989576][T14823] FAULT_INJECTION: forcing a failure. [ 236.989576][T14823] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 237.005610][T14806] tipc: Resetting bearer [ 237.015224][T14823] CPU: 0 UID: 0 PID: 14823 Comm: syz.6.2423 Not tainted syzkaller #0 PREEMPT(full) [ 237.015254][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.015265][T14823] Call Trace: [ 237.015272][T14823] [ 237.015279][T14823] dump_stack_lvl+0x189/0x250 [ 237.015317][T14823] ? __pfx____ratelimit+0x10/0x10 [ 237.015345][T14823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.015365][T14823] ? __pfx__printk+0x10/0x10 [ 237.015391][T14823] ? lock_acquire+0x5f/0x360 [ 237.015420][T14823] should_fail_ex+0x414/0x560 [ 237.015446][T14823] prepare_alloc_pages+0x213/0x610 [ 237.015466][T14823] __alloc_frozen_pages_noprof+0x123/0x370 [ 237.015487][T14823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.015514][T14823] alloc_pages_mpol+0x232/0x4a0 [ 237.015541][T14823] ___kmalloc_large_node+0x5f/0x1b0 [ 237.015568][T14823] __kmalloc_large_node_noprof+0x18/0x90 [ 237.015595][T14823] __kmalloc_noprof+0x36f/0x4f0 [ 237.015618][T14823] ? wiphy_new_nm+0x625/0x19e0 [ 237.015645][T14823] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 237.015669][T14823] wiphy_new_nm+0x625/0x19e0 [ 237.015694][T14823] ? ieee80211_alloc_hw_nm+0x8ea/0x1f20 [ 237.015717][T14823] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 237.015739][T14823] ieee80211_alloc_hw_nm+0x3f3/0x1f20 [ 237.015762][T14823] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 237.015788][T14823] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 237.015815][T14823] ? __pfx____ratelimit+0x10/0x10 [ 237.015843][T14823] ? __pfx__printk+0x10/0x10 [ 237.015867][T14823] ? netlink_unicast+0x7a1/0x9e0 [ 237.015895][T14823] ? rcu_is_watching+0x15/0xb0 [ 237.015914][T14823] ? do_trace_netlink_extack+0x7e/0x1d0 [ 237.015939][T14823] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 237.015962][T14823] ? __nla_validate_parse+0x251c/0x2d40 [ 237.015987][T14823] ? __sock_sendmsg+0x21c/0x270 [ 237.016010][T14823] ? ____sys_sendmsg+0x505/0x830 [ 237.016035][T14823] hwsim_new_radio_nl+0xea4/0x1b10 [ 237.016060][T14823] ? __pfx___nla_validate_parse+0x10/0x10 [ 237.016095][T14823] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 237.016124][T14823] ? __nla_parse+0x40/0x60 [ 237.016152][T14823] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 237.016180][T14823] genl_family_rcv_msg_doit+0x212/0x300 [ 237.016206][T14823] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.016236][T14823] ? bpf_lsm_capable+0x9/0x20 [ 237.016261][T14823] ? security_capable+0x7e/0x2e0 [ 237.016291][T14823] genl_rcv_msg+0x60e/0x790 [ 237.016327][T14823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.016348][T14823] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 237.016373][T14823] ? __asan_memcpy+0x40/0x70 [ 237.016394][T14823] ? __pfx_ref_tracker_free+0x10/0x10 [ 237.016424][T14823] netlink_rcv_skb+0x205/0x470 [ 237.016450][T14823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.016472][T14823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.016505][T14823] ? lock_release+0x4b/0x3e0 [ 237.016532][T14823] ? down_read+0x1ad/0x2e0 [ 237.016552][T14823] genl_rcv+0x28/0x40 [ 237.016572][T14823] netlink_unicast+0x82f/0x9e0 [ 237.016601][T14823] ? __pfx_netlink_unicast+0x10/0x10 [ 237.016627][T14823] ? netlink_sendmsg+0x642/0xb30 [ 237.016643][T14823] ? skb_put+0x11b/0x210 [ 237.016661][T14823] netlink_sendmsg+0x805/0xb30 [ 237.016683][T14823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.016701][T14823] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.016720][T14823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.016740][T14823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.016757][T14823] __sock_sendmsg+0x21c/0x270 [ 237.016784][T14823] ____sys_sendmsg+0x505/0x830 [ 237.016807][T14823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.016831][T14823] ? import_iovec+0x74/0xa0 [ 237.016854][T14823] ___sys_sendmsg+0x21f/0x2a0 [ 237.016876][T14823] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.016912][T14823] ? __fget_files+0x2a/0x420 [ 237.016928][T14823] ? __fget_files+0x3a0/0x420 [ 237.016949][T14823] __x64_sys_sendmsg+0x19b/0x260 [ 237.016969][T14823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.016994][T14823] ? __pfx_ksys_write+0x10/0x10 [ 237.017017][T14823] ? rcu_is_watching+0x15/0xb0 [ 237.017038][T14823] ? rcu_is_watching+0x15/0xb0 [ 237.017057][T14823] do_syscall_64+0xfa/0x3b0 [ 237.017077][T14823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.017096][T14823] ? clear_bhb_loop+0x60/0xb0 [ 237.017116][T14823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.017133][T14823] RIP: 0033:0x7f3fb1f8ebe9 [ 237.017150][T14823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.017168][T14823] RSP: 002b:00007f3fb01f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.017190][T14823] RAX: ffffffffffffffda RBX: 00007f3fb21b5fa0 RCX: 00007f3fb1f8ebe9 [ 237.017205][T14823] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 237.017218][T14823] RBP: 00007f3fb01f6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.017230][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.017242][T14823] R13: 00007f3fb21b6038 R14: 00007f3fb21b5fa0 R15: 00007ffe21fe2e88 [ 237.017264][T14823] [ 237.595924][T14806] tipc: Disabling bearer [ 237.844208][T14835] netlink: 'syz.6.2426': attribute type 10 has an invalid length. [ 237.863787][T14834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.995965][T14843] netlink: 'syz.0.2429': attribute type 21 has an invalid length. [ 238.013205][T14848] netlink: 'syz.5.2430': attribute type 12 has an invalid length. [ 238.019851][T14828] macsec2: entered promiscuous mode [ 238.026314][T14828] syzkaller0: entered promiscuous mode [ 238.033683][T14828] batman_adv: batadv0: Adding interface: macsec2 [ 238.040041][T14828] batman_adv: batadv0: Interface activated: macsec2 [ 238.115804][T14826] batman_adv: batadv0: Interface deactivated: macsec2 [ 238.122994][T14826] syzkaller0 (unregistering): left promiscuous mode [ 238.154210][T14826] batman_adv: batadv0: Removing interface: macsec2 [ 238.228520][T14865] bridge3: port 1(veth5) entered blocking state [ 238.257179][T14865] bridge3: port 1(veth5) entered disabled state [ 238.293174][T14865] veth5: entered allmulticast mode [ 238.329978][T14865] veth5: entered promiscuous mode [ 238.394278][T14870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.412259][T14870] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.431008][T14870] tipc: Resetting bearer [ 238.436635][T14870] tipc: Resetting bearer [ 238.460869][T14870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.484228][T14876] bridge3: port 2(veth0_to_bond) entered blocking state [ 238.492410][T14876] bridge3: port 2(veth0_to_bond) entered disabled state [ 238.499869][T14876] veth0_to_bond: entered allmulticast mode [ 238.506612][T14876] veth0_to_bond: entered promiscuous mode [ 238.519388][T14859] vlan2: entered allmulticast mode [ 238.526996][T14859] veth1: entered allmulticast mode [ 238.533721][T14859] bridge3: port 3(vlan2) entered blocking state [ 238.540231][T14859] bridge3: port 3(vlan2) entered disabled state [ 238.545489][T14889] netlink: 'syz.4.2438': attribute type 6 has an invalid length. [ 238.548585][T14859] vlan2: entered promiscuous mode [ 238.561557][T14859] veth1: entered promiscuous mode [ 238.572398][T14887] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 238.609700][T14892] netlink: 'syz.4.2438': attribute type 1 has an invalid length. [ 238.654330][T14892] NCSI netlink: No device for ifindex 0 [ 238.770421][T14903] lo speed is unknown, defaulting to 1000 [ 238.904108][T14918] veth1_to_hsr: mtu greater than device maximum [ 238.936959][T14916] lo speed is unknown, defaulting to 1000 [ 256.293075][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.476054][T14929] __nla_validate_parse: 19 callbacks suppressed [ 284.476077][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 284.523022][T14935] sctp: [Deprecated]: syz.4.2452 (pid 14935) Use of int in maxseg socket option. [ 284.523022][T14935] Use struct sctp_assoc_value instead [ 284.596144][T14941] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2448'. [ 284.611114][T14941] 0ªX¹¦À: renamed from caif0 [ 284.623503][T14941] 0ªX¹¦À: entered allmulticast mode [ 284.628929][T14941] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 284.641866][T14940] netlink: 'syz.5.2453': attribute type 7 has an invalid length. [ 284.653785][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2453'. [ 284.706047][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 284.791932][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2456'. [ 284.819387][T14953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2457'. [ 284.935001][T14962] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2459'. [ 285.062296][T14966] lo speed is unknown, defaulting to 1000 [ 285.064930][T14953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'. [ 285.129807][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2462'. [ 285.168147][T14970] netlink: 'syz.5.2462': attribute type 13 has an invalid length. [ 285.399581][T14989] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2468'. [ 285.467516][T15000] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.513428][T15000] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.596126][T15010] tipc: Enabled bearer , priority 0 [ 285.618464][T15017] IPVS: Error connecting to the multicast addr [ 285.627530][T15020] netlink: 'syz.5.2477': attribute type 10 has an invalid length. [ 285.630403][T15010] syzkaller0: entered promiscuous mode [ 285.641716][T15010] syzkaller0: entered allmulticast mode [ 285.648536][T15020] veth0_vlan: left promiscuous mode [ 285.651145][T15013] openvswitch: netlink: Flow key attr not present in new flow. [ 285.662846][T15020] veth0_vlan: entered promiscuous mode [ 285.668360][T15020] veth0_vlan: entered allmulticast mode [ 285.681381][T15020] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 285.715829][T15010] tipc: Resetting bearer [ 285.726742][T15026] tipc: Enabled bearer , priority 0 [ 285.758458][T15026] syzkaller0: entered promiscuous mode [ 285.765054][T15026] syzkaller0: entered allmulticast mode [ 285.777909][T15009] tipc: Resetting bearer [ 285.789787][T15009] tipc: Disabling bearer [ 285.891244][T15026] tipc: Resetting bearer [ 285.930403][T15025] tipc: Resetting bearer [ 285.964840][T15025] tipc: Disabling bearer [ 285.983170][T15044] netlink: 'syz.4.2485': attribute type 9 has an invalid length. [ 286.016925][T15048] netlink: zone id is out of range [ 286.022926][T15048] netlink: zone id is out of range [ 286.028540][T15048] netlink: zone id is out of range [ 286.034557][T15048] netlink: zone id is out of range [ 286.040027][T15048] netlink: zone id is out of range [ 286.046649][T15048] netlink: zone id is out of range [ 286.056753][T15048] netlink: zone id is out of range [ 286.074096][T15053] syz_tun: entered allmulticast mode [ 286.108449][T15055] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 286.137174][T15055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 286.154695][T15057] IPVS: set_ctl: invalid protocol: 11265 255.255.255.255:20004 [ 286.227600][T15055] ipvlan3: entered allmulticast mode [ 286.236190][T15055] bond7: entered allmulticast mode [ 286.259941][T15055] bond7: (slave gretap1): making interface the new active one [ 286.267752][T15055] gretap1: entered allmulticast mode [ 286.274516][T15055] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 286.402932][T15069] lo speed is unknown, defaulting to 1000 [ 286.519618][T15072] lo speed is unknown, defaulting to 1000 [ 286.737641][T15086] lo speed is unknown, defaulting to 1000 [ 287.162326][T15103] lo speed is unknown, defaulting to 1000 [ 287.362733][T15116] bridge_slave_1: left allmulticast mode [ 287.368458][T15116] bridge_slave_1: left promiscuous mode [ 287.404406][T15116] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.447639][T15116] bridge_slave_0: left allmulticast mode [ 287.471768][T15116] bridge_slave_0: left promiscuous mode [ 287.477678][T15116] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.816486][T15144] tipc: Enabling of bearer rejected, failed to enable media [ 288.232602][T15170] batadv_slave_1: entered promiscuous mode [ 288.422847][T15179] netlink: 'syz.2.2520': attribute type 16 has an invalid length. [ 288.433276][T15179] netlink: 'syz.2.2520': attribute type 17 has an invalid length. [ 288.482132][T15183] IPv6: NLM_F_REPLACE set, but no existing node found! [ 288.512160][T15185] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 288.543690][T15179] batman_adv: batadv0: Interface deactivated: dummy0 [ 288.560599][T15185] nbd: socks must be embedded in a SOCK_ITEM attr [ 288.567252][T15185] block nbd2: shutting down sockets [ 288.621751][ T8362] lo speed is unknown, defaulting to 1000 [ 288.630516][ T8362] syz2: Port: 1 Link DOWN [ 288.643203][T15187] netlink: 'syz.4.2522': attribute type 10 has an invalid length. [ 288.658263][T12574] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.673667][T12574] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.697587][T12574] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.723238][T12574] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.908258][T15202] lo speed is unknown, defaulting to 1000 [ 289.082846][T15218] pim6reg1: entered allmulticast mode [ 289.441337][T15234] mac80211_hwsim hwsim90 wlan1: entered allmulticast mode [ 289.564320][T15234] bond0: (slave team0): Releasing backup interface [ 289.603365][T15234] veth0_to_bond: left allmulticast mode [ 289.609686][T15234] veth0_to_bond: left promiscuous mode [ 289.609963][T15242] netlink: 'syz.6.2539': attribute type 10 has an invalid length. [ 289.624018][T15234] bridge3: port 2(veth0_to_bond) entered disabled state [ 289.648640][T15234] bond0: (slave bond_slave_0): Releasing backup interface [ 289.663039][T15246] __nla_validate_parse: 31 callbacks suppressed [ 289.663061][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'. [ 289.698288][T15234] bond0: (slave bond_slave_1): Releasing backup interface [ 289.726774][T15234] team0: Port device team_slave_0 removed [ 290.065361][T15234] team0: Port device team_slave_1 removed [ 290.075201][T15234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.095311][T15234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.121371][T15234] team0: Port device bond3 removed [ 290.127511][T15234] veth5: left allmulticast mode [ 290.134879][T15234] veth5: left promiscuous mode [ 290.140086][T15234] bridge3: port 1(veth5) entered disabled state [ 290.149657][T15234] vlan2: left promiscuous mode [ 290.156694][T15234] veth1: left promiscuous mode [ 290.162289][T15234] bridge3: port 3(vlan2) entered disabled state [ 290.181490][T15246] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2542'. [ 290.209602][T15256] batadv0: left allmulticast mode [ 290.216101][T15256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.434024][T15259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2544'. [ 290.656283][T15279] netlink: 'syz.4.2549': attribute type 3 has an invalid length. [ 290.656317][T15280] netlink: 'syz.4.2549': attribute type 3 has an invalid length. [ 290.703425][T15282] lo speed is unknown, defaulting to 1000 [ 290.765430][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2551'. [ 290.798924][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2551'. [ 290.817140][T15288] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2552'. [ 290.979436][T15298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2556'. [ 290.995764][T15301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2556'. [ 291.064879][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 291.076215][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2555'. [ 291.339288][T15295] batman_adv: batadv0: Interface deactivated: macvtap3 [ 291.373266][T15295] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 291.714321][T15324] net_ratelimit: 785 callbacks suppressed [ 291.714344][T15324] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 291.793574][T15326] netlink: 'syz.5.2563': attribute type 12 has an invalid length. [ 291.916781][T15328] GUP no longer grows the stack in syz.4.2564 (15328): 200000006000-20000000a000 (200000005000) [ 291.940108][T15328] CPU: 0 UID: 0 PID: 15328 Comm: syz.4.2564 Not tainted syzkaller #0 PREEMPT(full) [ 291.940141][T15328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.940153][T15328] Call Trace: [ 291.940161][T15328] [ 291.940170][T15328] dump_stack_lvl+0x189/0x250 [ 291.940200][T15328] ? __pfx_css_rstat_updated+0x10/0x10 [ 291.940220][T15328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.940242][T15328] ? __pfx__printk+0x10/0x10 [ 291.940265][T15328] ? find_vma+0xe7/0x160 [ 291.940295][T15328] __get_user_pages+0x24d0/0x2ce0 [ 291.940321][T15328] ? __gup_longterm_locked+0xc68/0x1660 [ 291.940354][T15328] ? __gup_longterm_locked+0xc68/0x1660 [ 291.940379][T15328] __gup_longterm_locked+0xde9/0x1660 [ 291.940404][T15328] ? try_grab_folio_fast+0x1be/0x4f0 [ 291.940436][T15328] ? rcu_is_watching+0x15/0xb0 [ 291.940457][T15328] ? rcu_is_watching+0x15/0xb0 [ 291.940477][T15328] gup_fast_fallback+0x1e6a/0x2010 [ 291.940519][T15328] ? __pfx_gup_fast_fallback+0x10/0x10 [ 291.940540][T15328] ? __mutex_lock+0x335/0x1350 [ 291.940562][T15328] ? is_valid_gup_args+0x11f/0x200 [ 291.940587][T15328] ? get_user_pages_fast+0x4d/0xb0 [ 291.940612][T15328] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 291.940638][T15328] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 291.940668][T15328] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 291.940693][T15328] ? wait_for_space+0x24d/0x2d0 [ 291.940723][T15328] iov_iter_get_pages2+0x5e/0xa0 [ 291.940745][T15328] __se_sys_vmsplice+0x548/0x10d0 [ 291.940794][T15328] ? futex_private_hash_put+0x4b/0x280 [ 291.940821][T15328] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 291.940850][T15328] ? __pfx_futex_wake+0x10/0x10 [ 291.940900][T15328] ? rcu_is_watching+0x15/0xb0 [ 291.940922][T15328] ? rcu_is_watching+0x15/0xb0 [ 291.940943][T15328] do_syscall_64+0xfa/0x3b0 [ 291.940961][T15328] ? rcu_is_watching+0x15/0xb0 [ 291.940979][T15328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.940999][T15328] ? clear_bhb_loop+0x60/0xb0 [ 291.941021][T15328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.941040][T15328] RIP: 0033:0x7f106958ebe9 [ 291.941060][T15328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.941077][T15328] RSP: 002b:00007f106a3aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 291.941101][T15328] RAX: ffffffffffffffda RBX: 00007f10697b5fa0 RCX: 00007f106958ebe9 [ 291.941116][T15328] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 291.941129][T15328] RBP: 00007f1069611e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.941140][T15328] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 291.941151][T15328] R13: 00007f10697b6038 R14: 00007f10697b5fa0 R15: 00007ffc26b24b68 [ 291.941174][T15328] [ 292.446574][T15352] syzkaller1: entered promiscuous mode [ 292.488563][T15352] syzkaller1: entered allmulticast mode [ 292.562369][T15362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.017306][T15391] netlink: 'syz.0.2584': attribute type 11 has an invalid length. [ 293.259440][T15398] vlan0: entered promiscuous mode [ 293.462887][T15407] ieee802154 phy0 wpan0: encryption failed: -90 [ 293.482815][T15407] netlink: 'syz.2.2590': attribute type 21 has an invalid length. [ 293.501833][T15407] netlink: 'syz.2.2590': attribute type 4 has an invalid length. [ 293.592260][T15413] erspan0: left allmulticast mode [ 293.605275][T15413] erspan0: left promiscuous mode [ 293.610641][T15413] bridge0: port 1(erspan0) entered disabled state [ 293.626269][T15413] batman_adv: batadv0: Removing interface: dummy0 [ 293.639708][T15386] lo speed is unknown, defaulting to 1000 [ 293.646266][T15418] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 293.699508][T15413] team0: Failed to send options change via netlink (err -105) [ 293.707559][T15413] team0: Mode changed to "loadbalance" [ 293.925512][T15434] netlink: 'syz.0.2600': attribute type 1 has an invalid length. [ 294.260247][T15458] lo speed is unknown, defaulting to 1000 [ 294.503466][T15473] lo speed is unknown, defaulting to 1000 [ 294.772061][ T5868] Bluetooth: hci4: command 0x041b tx timeout [ 294.899838][T15493] __nla_validate_parse: 16 callbacks suppressed [ 294.899862][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2614'. [ 294.941715][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2614'. [ 294.998848][T15493] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2614'. [ 295.043949][T15497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2615'. [ 295.355148][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2618'. [ 295.404141][T15514] netlink: 'syz.6.2618': attribute type 1 has an invalid length. [ 295.404310][T15517] tipc: Enabled bearer , priority 0 [ 295.446006][T15524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2622'. [ 295.451151][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2621'. [ 295.463626][T15514] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.471686][T15517] syzkaller0: entered promiscuous mode [ 295.477322][T15517] syzkaller0: entered allmulticast mode [ 295.489233][T15525] bond4: (slave ip6gretap1): making interface the new active one [ 295.498317][T15525] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 295.526898][T15518] tipc: Resetting bearer [ 295.542887][T15516] tipc: Resetting bearer [ 295.568223][T15516] tipc: Disabling bearer [ 295.604037][T15527] bond0: (slave vlan3): Opening slave failed [ 295.743620][T15534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2625'. [ 295.755166][T15534] bridge0: entered allmulticast mode [ 295.763522][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2625'. [ 295.871340][T15542] lo speed is unknown, defaulting to 1000 [ 296.126688][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2630'. [ 296.265443][T15561] netlink: 'syz.5.2632': attribute type 2 has an invalid length. [ 296.339910][T15565] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 296.818173][T15590] lo speed is unknown, defaulting to 1000 [ 297.598361][T15628] lo speed is unknown, defaulting to 1000 [ 297.715744][T15652] tipc: Resetting bearer [ 297.952818][T15675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.308158][T15699] lo speed is unknown, defaulting to 1000 [ 299.230975][T15737] netlink: 'syz.6.2681': attribute type 12 has an invalid length. [ 299.330566][ T5182] Bluetooth: hci1: command 0x0406 tx timeout [ 299.364272][T15743] tipc: Enabled bearer , priority 0 [ 299.382852][T15743] syzkaller0: entered promiscuous mode [ 299.388502][T15743] syzkaller0: entered allmulticast mode [ 299.413657][T15745] tipc: Enabled bearer , priority 0 [ 299.430738][T15743] tipc: Resetting bearer [ 299.442807][T15742] tipc: Resetting bearer [ 299.459742][T15742] tipc: Disabling bearer [ 299.473597][T15745] syzkaller0: entered promiscuous mode [ 299.479522][T15745] syzkaller0: entered allmulticast mode [ 299.493309][T15744] tipc: Resetting bearer [ 299.552825][T15744] tipc: Disabling bearer [ 299.567234][T15758] netlink: 'syz.6.2688': attribute type 10 has an invalid length. [ 299.582760][T15758] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 299.629133][T15752] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 299.661030][T15762] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 299.828053][T15788] netlink: 'syz.6.2696': attribute type 12 has an invalid length. [ 300.158612][T15812] __nla_validate_parse: 22 callbacks suppressed [ 300.158633][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2702'. [ 300.429462][T15829] netlink: 'syz.4.2707': attribute type 4 has an invalid length. [ 300.440051][T15829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2707'. [ 300.449547][T15829] nbd: couldn't find a device at index 0 [ 300.458800][T15829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2707'. [ 300.468195][T15829] nbd: couldn't find a device at index 0 [ 300.474550][T15829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2707'. [ 300.485834][T15829] nbd: couldn't find a device at index 0 [ 300.493272][T15829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2707'. [ 300.515646][T15829] nbd: couldn't find a device at index 0 [ 300.522770][T15829] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2707'. [ 300.533585][T15829] nbd: couldn't find a device at index 0 [ 300.580321][T15836] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2708'. [ 300.696761][T15850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 300.710577][T15849] geneve3: entered promiscuous mode [ 300.717271][T12578] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.725906][T12578] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.738285][T15850] vlan2: entered allmulticast mode [ 300.743708][T12578] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.752554][T12578] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.773007][T15855] netlink: 'syz.2.2715': attribute type 1 has an invalid length. [ 300.794624][T15855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.813130][T15855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.820138][T15855] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 300.832101][T15855] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 300.869730][T15859] veth11: entered promiscuous mode [ 300.879067][T15859] bond4: (slave veth11): Enslaving as an active interface with a down link [ 301.096720][T15867] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2719'. [ 301.124026][T15865] tipc: Enabled bearer , priority 0 [ 301.131889][T15865] syzkaller0: entered promiscuous mode [ 301.137406][T15865] syzkaller0: entered allmulticast mode [ 301.155348][T15865] tipc: Resetting bearer [ 301.164838][T15864] tipc: Resetting bearer [ 301.173174][T15864] tipc: Disabling bearer [ 301.195434][T15872] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 301.328179][T15881] tipc: Enabled bearer , priority 0 [ 301.349402][T15884] netlink: 'syz.6.2721': attribute type 16 has an invalid length. [ 301.357777][T15884] netlink: 'syz.6.2721': attribute type 17 has an invalid length. [ 301.394140][T15884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.455644][T15881] syzkaller0: entered promiscuous mode [ 301.461797][T15881] syzkaller0: entered allmulticast mode [ 301.473793][T15881] tipc: Resetting bearer [ 301.508227][T15881] tipc: Resetting bearer [ 301.565220][T15881] tipc: Disabling bearer [ 301.639858][T15899] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 301.653168][T15899] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 301.664016][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2729'. [ 301.856692][T15910] lo speed is unknown, defaulting to 1000 [ 302.347677][T15954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.382581][T15956] netlink: 'syz.5.2746': attribute type 13 has an invalid length. [ 302.392958][T15956] netlink: 'syz.5.2746': attribute type 17 has an invalid length. [ 302.495432][T15956] syz_tun: left allmulticast mode [ 302.518120][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.528263][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.542492][T15956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.567550][T15962] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 302.701828][T15961] lo speed is unknown, defaulting to 1000 [ 304.089284][T16016] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 304.104483][T16016] bridge7: entered promiscuous mode [ 304.111417][T16016] bridge7: entered allmulticast mode [ 304.277462][T16031] lo speed is unknown, defaulting to 1000 [ 317.732918][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.797269][T16042] lo speed is unknown, defaulting to 1000 [ 354.843882][T16053] __nla_validate_parse: 5 callbacks suppressed [ 354.843904][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 355.017866][T16068] netlink: 'syz.2.2782': attribute type 1 has an invalid length. [ 355.145431][T16071] syzkaller1: entered allmulticast mode [ 355.189274][T16075] tap0: tun_chr_ioctl cmd 1074025675 [ 355.197778][T16075] tap0: persist disabled [ 355.233931][T16083] tipc: Enabled bearer , priority 0 [ 355.271760][T16083] syzkaller0: entered promiscuous mode [ 355.281110][T16083] syzkaller0: entered allmulticast mode [ 355.321673][T16083] tipc: Resetting bearer [ 355.339131][T16079] tipc: Resetting bearer [ 355.362364][T16079] tipc: Disabling bearer [ 355.384907][T16093] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 355.395660][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 355.536293][T16105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2792'. [ 355.602377][T16112] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 355.602648][T16113] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.2794'. [ 355.628897][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 355.738769][T16124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2798'. [ 355.743060][T16126] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2798'. [ 355.757633][T16122] veth13: entered promiscuous mode [ 355.992269][T16140] lo speed is unknown, defaulting to 1000 [ 356.007865][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2801'. [ 356.167501][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2804'. [ 356.179875][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2804'. [ 356.386049][T16175] ieee802154 phy0 wpan0: encryption failed: -22 [ 356.579947][T16181] can: request_module (can-proto-0) failed. [ 356.634459][T16192] vlan0: entered promiscuous mode [ 356.670507][T16192] bridge0: entered promiscuous mode [ 356.738035][T16199] lo speed is unknown, defaulting to 1000 [ 356.997350][T16207] lo speed is unknown, defaulting to 1000 [ 357.755693][T16246] openvswitch: netlink: Flow key attr not present in new flow. [ 358.074071][T16269] lo speed is unknown, defaulting to 1000 [ 358.095346][T16262] netlink: 'syz.4.2835': attribute type 1 has an invalid length. [ 358.107204][T16262] netlink: 'syz.4.2835': attribute type 3 has an invalid length. [ 358.969655][T16309] geneve3: entered promiscuous mode [ 358.981403][T16309] geneve3: entered allmulticast mode [ 358.997415][T16313] netlink: 'syz.6.2846': attribute type 13 has an invalid length. [ 359.015638][T12578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 43960 - 0 [ 359.051773][T12578] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53147 - 0 [ 359.063207][T12578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 43960 - 0 [ 359.083387][T12578] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53147 - 0 [ 359.114023][T12578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 43960 - 0 [ 359.131282][T12578] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53147 - 0 [ 359.149216][T12578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 43960 - 0 [ 359.158721][T12578] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53147 - 0 [ 359.179751][T16317] lo speed is unknown, defaulting to 1000 [ 359.238064][T16325] lo speed is unknown, defaulting to 1000 [ 359.276869][T16320] lo speed is unknown, defaulting to 1000 [ 359.981166][T16372] __nla_validate_parse: 11 callbacks suppressed [ 359.981187][T16372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2863'. [ 360.321186][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2876'. [ 360.361980][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2876'. [ 360.371429][T16410] netlink: 'syz.6.2876': attribute type 11 has an invalid length. [ 360.438759][T16419] netlink: 'syz.4.2877': attribute type 1 has an invalid length. [ 360.450878][T16419] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2877'. [ 360.624245][T16429] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2879'. [ 360.774216][T16431] netlink: 'syz.6.2878': attribute type 3 has an invalid length. [ 360.839134][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2883'. [ 361.270019][T16453] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2886'. [ 361.476728][T16451] lo speed is unknown, defaulting to 1000 [ 361.720116][T16466] veth0_vlan: left allmulticast mode [ 361.748707][T16466] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 361.770313][T16466] bridge3: left promiscuous mode [ 361.775978][T16466] bridge3: left allmulticast mode [ 362.270306][T16527] netlink: 'syz.0.2903': attribute type 4 has an invalid length. [ 362.286747][T16527] netlink: 'syz.0.2903': attribute type 4 has an invalid length. [ 362.340182][T16532] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 362.415258][T16536] netlink: 'syz.0.2905': attribute type 10 has an invalid length. [ 362.469131][T16536] tipc: Resetting bearer [ 362.491251][T16536] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.503313][T16536] bond0: (slave team0): Enslaving as an active interface with an up link [ 362.532289][T16540] siw: device registration error -23 [ 362.541392][T16540] tipc: Enabled bearer , priority 0 [ 362.550174][T16540] syzkaller0: entered promiscuous mode [ 362.556182][T16540] syzkaller0: entered allmulticast mode [ 362.673067][T16540] tipc: Resetting bearer [ 362.688879][T16539] tipc: Resetting bearer [ 362.830289][T16539] tipc: Disabling bearer [ 363.045524][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2915'. [ 363.062546][T16569] netlink: 'syz.5.2917': attribute type 2 has an invalid length. [ 363.074897][T16567] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 363.091268][T16567] netlink: 'syz.4.2915': attribute type 2 has an invalid length. [ 363.112703][T16567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2915'. [ 363.143941][T16574] netlink: 410 bytes leftover after parsing attributes in process `syz.0.2918'. [ 363.265969][T16583] lo speed is unknown, defaulting to 1000 [ 363.348018][T16593] veth0: entered promiscuous mode [ 363.481074][T16591] veth0: left promiscuous mode [ 363.537527][T16606] openvswitch: netlink: Flow key attr not present in new flow. [ 364.200317][T16670] tipc: Enabled bearer , priority 0 [ 364.254208][T16677] netlink: 'syz.5.2943': attribute type 2 has an invalid length. [ 364.278751][T16670] syzkaller0: entered promiscuous mode [ 364.287710][T16670] syzkaller0: entered allmulticast mode [ 364.294390][T16670] tipc: Resetting bearer [ 364.363189][T16668] tipc: Resetting bearer [ 364.414990][T16668] tipc: Disabling bearer [ 364.456087][T16688] lo speed is unknown, defaulting to 1000 [ 364.640872][T16705] k›*·]‘: entered promiscuous mode [ 364.709042][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.723458][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.754988][T16705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.775276][T16488] lo speed is unknown, defaulting to 1000 [ 364.785329][T16488] syz2: Port: 1 Link ACTIVE [ 364.838146][T16705] veth0_to_team: entered promiscuous mode [ 364.846902][T16705] veth0_to_team: entered allmulticast mode [ 364.861658][T16727] tipc: Enabled bearer , priority 0 [ 364.869375][T16726] lo speed is unknown, defaulting to 1000 [ 364.886159][T16727] syzkaller0: entered promiscuous mode [ 364.895056][T16727] syzkaller0: entered allmulticast mode [ 364.994198][T16727] tipc: Resetting bearer [ 365.007518][T16725] tipc: Resetting bearer [ 365.050203][T16725] tipc: Disabling bearer [ 365.066398][T16737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 43960 - 0 [ 365.077921][T16737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53147 - 0 [ 365.085453][T16746] __nla_validate_parse: 10 callbacks suppressed [ 365.085479][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'. [ 365.106522][T16746] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2961'. [ 365.117417][T16747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 365.145552][T16746] geneve4: entered promiscuous mode [ 365.146642][T16747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2963'. [ 365.160154][T16746] geneve4: entered allmulticast mode [ 365.170211][T12565] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 365.184440][T12565] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 365.217678][T16747] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 365.228353][T16747] gretap1: entered promiscuous mode [ 365.248301][T16737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 43960 - 0 [ 365.276431][T16737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53147 - 0 [ 365.303517][T16757] tipc: Enabled bearer , priority 0 [ 365.312987][T16753] syzkaller0: entered promiscuous mode [ 365.318495][T16753] syzkaller0: entered allmulticast mode [ 365.399435][T16753] tipc: Resetting bearer [ 365.441752][T16753] tipc: Disabling bearer [ 365.519200][T16774] macvlan2: entered allmulticast mode [ 365.529123][T16774] veth1_vlan: entered allmulticast mode [ 365.540322][T16774] veth1_vlan: left allmulticast mode [ 365.559782][T16779] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 365.564547][T16772] lo speed is unknown, defaulting to 1000 [ 365.587783][T16777] lo speed is unknown, defaulting to 1000 [ 365.896981][T16802] lo speed is unknown, defaulting to 1000 [ 366.299841][T16815] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.300737][T12563] bond0: (slave syz_tun): interface is now down [ 366.361282][T12578] bond0: (slave syz_tun): interface is now down [ 366.378304][T12578] bond0: now running without any active interface! [ 366.437879][T16822] syzkaller1: entered promiscuous mode [ 366.444491][T16822] syzkaller1: entered allmulticast mode [ 366.606276][T16830] validate_nla: 3 callbacks suppressed [ 366.606297][T16830] netlink: 'syz.4.2987': attribute type 1 has an invalid length. [ 366.648948][T16830] veth1_macvtap: mtu less than device minimum [ 366.727170][T16737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 43960 - 0 [ 366.750537][T16737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53147 - 0 [ 366.761811][T16737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 366.796491][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 366.810133][T16837] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.836864][T16737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 43960 - 0 [ 366.851586][T16737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53147 - 0 [ 366.866695][T16737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 366.903550][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2991'. [ 366.928346][T16839] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2991'. [ 366.999679][T12578] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 367.017111][T12578] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 53147 - 0 [ 367.038072][T12578] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 43960 - 0 [ 367.058576][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2991'. [ 367.078129][T12578] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 367.096840][T12578] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 53147 - 0 [ 367.115460][T12578] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 43960 - 0 [ 367.148670][T12571] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 367.158806][T12571] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 53147 - 0 [ 367.179107][T12571] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 43960 - 0 [ 367.257538][T12571] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 367.262208][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.290282][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.292508][T12571] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 53147 - 0 [ 367.307675][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.316599][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.324606][T12571] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 43960 - 0 [ 367.338445][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 367.415276][T16849] lo speed is unknown, defaulting to 1000 [ 367.598321][T16849] chnl_net:caif_netlink_parms(): no params data found [ 367.783002][T16849] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.790370][T16849] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.797882][T16849] bridge_slave_0: entered allmulticast mode [ 367.807906][T16849] bridge_slave_0: entered promiscuous mode [ 367.814572][T16897] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 367.818773][T16849] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.828910][T16849] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.836772][T16849] bridge_slave_1: entered allmulticast mode [ 367.844460][T16849] bridge_slave_1: entered promiscuous mode [ 367.908337][T16849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.923004][T16849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.952356][T16849] team0: Port device team_slave_0 added [ 367.962349][T16849] team0: Port device team_slave_1 added [ 367.996137][T16849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.008408][T16849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.035001][T16849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.048027][T16849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.055509][T16849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.082018][T16849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.116729][T16905] veth0_vlan: left promiscuous mode [ 368.123141][T16905] veth0_vlan: entered promiscuous mode [ 368.134419][T16849] hsr_slave_0: entered promiscuous mode [ 368.140886][T16849] hsr_slave_1: entered promiscuous mode [ 368.147080][T16849] debugfs: 'hsr0' already exists in 'hsr' [ 368.153332][T16849] Cannot create hsr debugfs directory [ 368.163017][T16905] veth0_to_bridge: entered promiscuous mode [ 368.179509][T16905] netlink: 'syz.0.3007': attribute type 10 has an invalid length. [ 368.193654][T16904] veth0_to_bridge: left promiscuous mode [ 368.267418][T16849] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.286871][T16910] siw: device registration error -23 [ 368.323980][T16849] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.341196][T16910] tipc: Enabled bearer , priority 0 [ 368.349182][T16910] syzkaller0: entered promiscuous mode [ 368.355151][T16910] syzkaller0: entered allmulticast mode [ 368.382869][T16910] tipc: Resetting bearer [ 368.391700][T16849] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.404316][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'. [ 368.414273][T16909] tipc: Resetting bearer [ 368.427081][T16909] tipc: Disabling bearer [ 368.444233][T16849] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.594009][T16849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 368.605448][T16849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 368.618934][T16849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.632123][T16849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.768829][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3017'. [ 368.811501][T16952] IPVS: set_ctl: invalid protocol: 25467 172.20.20.170:20004 [ 368.813437][T16849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.848551][T16849] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.863792][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.870963][T12574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.896125][T16957] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.917360][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.924551][T12565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.930423][ C1] ================================================================== [ 368.940008][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 368.948009][ C1] Read of size 2 at addr ffff88801dfd802a by task syz.5.3019/16959 [ 368.955903][ C1] [ 368.958246][ C1] CPU: 1 UID: 0 PID: 16959 Comm: syz.5.3019 Not tainted syzkaller #0 PREEMPT(full) [ 368.958266][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.958276][ C1] Call Trace: [ 368.958282][ C1] [ 368.958288][ C1] dump_stack_lvl+0x189/0x250 [ 368.958310][ C1] ? rcu_is_watching+0x15/0xb0 [ 368.958326][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.958343][ C1] ? rcu_is_watching+0x15/0xb0 [ 368.958357][ C1] ? lock_release+0x4b/0x3e0 [ 368.958379][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 368.958399][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 368.958424][ C1] print_report+0xca/0x240 [ 368.958439][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 368.958457][ C1] kasan_report+0x118/0x150 [ 368.958479][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 368.958501][ C1] rose_timer_expiry+0x471/0x4b0 [ 368.958522][ C1] call_timer_fn+0x17e/0x5f0 [ 368.958542][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 368.958561][ C1] ? call_timer_fn+0xbe/0x5f0 [ 368.958581][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 368.958604][ C1] ? rcu_is_watching+0x15/0xb0 [ 368.958618][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 368.958638][ C1] __run_timer_base+0x61a/0x860 [ 368.958656][ C1] ? ktime_get+0x3e/0x1f0 [ 368.958677][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 368.958694][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 368.958717][ C1] run_timer_softirq+0xb7/0x180 [ 368.958735][ C1] handle_softirqs+0x283/0x870 [ 368.958751][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 368.958767][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 368.958783][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 368.958803][ C1] __irq_exit_rcu+0xca/0x1f0 [ 368.958818][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 368.958835][ C1] irq_exit_rcu+0x9/0x30 [ 368.958848][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 368.958869][ C1] [ 368.958874][ C1] [ 368.958880][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.958896][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 368.958918][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ea dc 20 f6 48 89 df e8 42 74 21 f6 e8 0d c6 4a f6 fb bf 01 00 00 00 a2 6e 13 f6 65 8b 05 6b d1 23 07 85 c0 74 07 5b e9 51 4c 00 00 [ 368.958931][ C1] RSP: 0018:ffffc9000bb17430 EFLAGS: 00000286 [ 368.958947][ C1] RAX: 5cab8169ea983a00 RBX: ffff888030b85208 RCX: 5cab8169ea983a00 [ 368.958958][ C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: 0000000000000001 [ 368.958968][ C1] RBP: ffffc9000bb17570 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 368.958979][ C1] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffffc9000bb174c0 [ 368.958990][ C1] R13: 00000003fffffffc R14: 0000000000000000 R15: ffff88804a42c840 [ 368.959008][ C1] shmem_add_to_page_cache+0x8ee/0xba0 [ 368.959030][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 368.959046][ C1] ? lock_release+0x4b/0x3e0 [ 368.959071][ C1] shmem_alloc_and_add_folio+0x846/0xf60 [ 368.959094][ C1] ? filemap_get_entry+0xad/0x2f0 [ 368.959106][ C1] ? filemap_get_entry+0xad/0x2f0 [ 368.959121][ C1] ? shmem_huge_global_enabled+0x174/0x3a0 [ 368.959138][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 368.959159][ C1] ? shmem_allowable_huge_orders+0x414/0x420 [ 368.959180][ C1] shmem_get_folio_gfp+0x59d/0x1660 [ 368.959204][ C1] shmem_fault+0x179/0x390 [ 368.959227][ C1] __do_fault+0x138/0x390 [ 368.959249][ C1] __handle_mm_fault+0x3611/0x5440 [ 368.959273][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 368.959292][ C1] ? rcu_is_watching+0x15/0xb0 [ 368.959310][ C1] ? follow_page_pte+0x7ef/0x13e0 [ 368.959331][ C1] handle_mm_fault+0x40a/0x8e0 [ 368.959353][ C1] __get_user_pages+0x1699/0x2ce0 [ 368.959382][ C1] populate_vma_page_range+0x29f/0x3a0 [ 368.959400][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 368.959427][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 368.959449][ C1] ? down_read+0x1ad/0x2e0 [ 368.959463][ C1] __mm_populate+0x24c/0x380 [ 368.959481][ C1] ? __pfx___mm_populate+0x10/0x10 [ 368.959498][ C1] ? up_write+0x1c4/0x420 [ 368.959515][ C1] vm_mmap_pgoff+0x387/0x4d0 [ 368.959531][ C1] ? __se_sys_futex+0x36f/0x400 [ 368.959550][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 368.959568][ C1] ? rcu_is_watching+0x15/0xb0 [ 368.959582][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 368.959600][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 368.959617][ C1] do_syscall_64+0xfa/0x3b0 [ 368.959630][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.959645][ C1] ? clear_bhb_loop+0x60/0xb0 [ 368.959662][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.959676][ C1] RIP: 0033:0x7fea3318ebe9 [ 368.959690][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.959703][ C1] RSP: 002b:00007fea313ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 368.959718][ C1] RAX: ffffffffffffffda RBX: 00007fea333b6180 RCX: 00007fea3318ebe9 [ 368.959729][ C1] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 368.959739][ C1] RBP: 00007fea33211e19 R08: ffffffffffffffff R09: 0000000000000000 [ 368.959749][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 368.959758][ C1] R13: 00007fea333b6218 R14: 00007fea333b6180 R15: 00007fffff1ed818 [ 368.959776][ C1] [ 368.959781][ C1] [ 369.481660][ C1] Allocated by task 16726: [ 369.486073][ C1] kasan_save_track+0x3e/0x80 [ 369.490754][ C1] __kasan_kmalloc+0x93/0xb0 [ 369.495346][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 369.500720][ C1] rpc_mkpipe_data+0x59/0x390 [ 369.505393][ C1] rpc_pipefs_init_net+0x54/0x110 [ 369.510528][ C1] sunrpc_init_net+0x85/0x160 [ 369.515206][ C1] ops_init+0x359/0x5c0 [ 369.519357][ C1] setup_net+0x10c/0x320 [ 369.523696][ C1] copy_net_ns+0x31b/0x4d0 [ 369.528116][ C1] create_new_namespaces+0x3f3/0x720 [ 369.533404][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 369.539121][ C1] ksys_unshare+0x4c8/0x8c0 [ 369.543623][ C1] __x64_sys_unshare+0x38/0x50 [ 369.548481][ C1] do_syscall_64+0xfa/0x3b0 [ 369.552983][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.558890][ C1] [ 369.561233][ C1] Freed by task 12563: [ 369.565308][ C1] kasan_save_track+0x3e/0x80 [ 369.570014][ C1] kasan_save_free_info+0x46/0x50 [ 369.575034][ C1] __kasan_slab_free+0x5b/0x80 [ 369.579801][ C1] kfree+0x18e/0x440 [ 369.583696][ C1] sunrpc_exit_net+0x28/0x90 [ 369.588292][ C1] ops_undo_list+0x49a/0x990 [ 369.592878][ C1] cleanup_net+0x4c5/0x800 [ 369.597286][ C1] process_scheduled_works+0xae1/0x17b0 [ 369.602827][ C1] worker_thread+0x8a0/0xda0 [ 369.607412][ C1] kthread+0x70e/0x8a0 [ 369.611476][ C1] ret_from_fork+0x3f9/0x770 [ 369.616061][ C1] ret_from_fork_asm+0x1a/0x30 [ 369.620825][ C1] [ 369.623157][ C1] The buggy address belongs to the object at ffff88801dfd8000 [ 369.623157][ C1] which belongs to the cache kmalloc-512 of size 512 [ 369.637322][ C1] The buggy address is located 42 bytes inside of [ 369.637322][ C1] freed 512-byte region [ffff88801dfd8000, ffff88801dfd8200) [ 369.651162][ C1] [ 369.653504][ C1] The buggy address belongs to the physical page: [ 369.659913][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1dfd8 [ 369.668673][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 369.677165][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 369.684712][ C1] page_type: f5(slab) [ 369.688701][ C1] raw: 00fff00000000040 ffff88801a441c80 ffffea0001570100 dead000000000002 [ 369.697291][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 369.705871][ C1] head: 00fff00000000040 ffff88801a441c80 ffffea0001570100 dead000000000002 [ 369.714622][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 369.723290][ C1] head: 00fff00000000002 ffffea000077f601 00000000ffffffff 00000000ffffffff [ 369.731959][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 369.740624][ C1] page dumped because: kasan: bad access detected [ 369.747029][ C1] page_owner tracks the page as allocated [ 369.752753][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5231, tgid 5231 (udevd), ts 46005319521, free_ts 45935692773 [ 369.774545][ C1] post_alloc_hook+0x240/0x2a0 [ 369.779333][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 369.784895][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 369.790704][ C1] alloc_pages_mpol+0x232/0x4a0 [ 369.795559][ C1] allocate_slab+0x8a/0x370 [ 369.800073][ C1] ___slab_alloc+0xbeb/0x1410 [ 369.804863][ C1] __kmalloc_cache_noprof+0x296/0x3d0 [ 369.810276][ C1] kernfs_fop_open+0x397/0xca0 [ 369.815075][ C1] do_dentry_open+0x950/0x13f0 [ 369.819856][ C1] vfs_open+0x3b/0x340 [ 369.823935][ C1] path_openat+0x2ee5/0x3830 [ 369.828542][ C1] do_filp_open+0x1fa/0x410 [ 369.833065][ C1] do_sys_openat2+0x121/0x1c0 [ 369.837752][ C1] __x64_sys_openat+0x138/0x170 [ 369.842610][ C1] do_syscall_64+0xfa/0x3b0 [ 369.847132][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.853023][ C1] page last free pid 5231 tgid 5231 stack trace: [ 369.859344][ C1] __free_frozen_pages+0xbc4/0xd30 [ 369.864462][ C1] __put_partials+0x156/0x1a0 [ 369.869138][ C1] put_cpu_partial+0x17c/0x250 [ 369.873984][ C1] __slab_free+0x2d5/0x3c0 [ 369.878404][ C1] qlist_free_all+0x97/0x140 [ 369.883026][ C1] kasan_quarantine_reduce+0x148/0x160 [ 369.888508][ C1] __kasan_slab_alloc+0x22/0x80 [ 369.893387][ C1] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 369.898783][ C1] seq_read_iter+0x1fd/0xe10 [ 369.903385][ C1] vfs_read+0x55a/0xa30 [ 369.907555][ C1] ksys_read+0x145/0x250 [ 369.911799][ C1] do_syscall_64+0xfa/0x3b0 [ 369.916302][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.922217][ C1] [ 369.924541][ C1] Memory state around the buggy address: [ 369.930166][ C1] ffff88801dfd7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 369.938225][ C1] ffff88801dfd7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 369.946368][ C1] >ffff88801dfd8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.954419][ C1] ^ [ 369.959873][ C1] ffff88801dfd8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.967926][ C1] ffff88801dfd8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.975978][ C1] ================================================================== [ 369.984102][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 369.991307][ C1] CPU: 1 UID: 0 PID: 16959 Comm: syz.5.3019 Not tainted syzkaller #0 PREEMPT(full) [ 370.000676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.010732][ C1] Call Trace: [ 370.014034][ C1] [ 370.016878][ C1] dump_stack_lvl+0x99/0x250 [ 370.021478][ C1] ? __asan_memcpy+0x40/0x70 [ 370.026073][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.031341][ C1] ? __pfx__printk+0x10/0x10 [ 370.035952][ C1] vpanic+0x281/0x750 [ 370.039950][ C1] ? __pfx_vpanic+0x10/0x10 [ 370.044456][ C1] ? rcu_is_watching+0x15/0xb0 [ 370.049222][ C1] panic+0xb9/0xc0 [ 370.052943][ C1] ? __pfx_panic+0x10/0x10 [ 370.057361][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 370.063274][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 370.069270][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 370.074391][ C1] check_panic_on_warn+0x89/0xb0 [ 370.079363][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 370.084589][ C1] end_report+0x78/0x160 [ 370.088846][ C1] kasan_report+0x129/0x150 [ 370.093351][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 370.098489][ C1] rose_timer_expiry+0x471/0x4b0 [ 370.103532][ C1] call_timer_fn+0x17e/0x5f0 [ 370.108127][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 370.113593][ C1] ? call_timer_fn+0xbe/0x5f0 [ 370.118369][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 370.123490][ C1] ? rcu_is_watching+0x15/0xb0 [ 370.128255][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 370.133720][ C1] __run_timer_base+0x61a/0x860 [ 370.138668][ C1] ? ktime_get+0x3e/0x1f0 [ 370.143001][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 370.148374][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 370.154623][ C1] run_timer_softirq+0xb7/0x180 [ 370.159487][ C1] handle_softirqs+0x283/0x870 [ 370.164250][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 370.169027][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 370.174309][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 370.179508][ C1] __irq_exit_rcu+0xca/0x1f0 [ 370.184097][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 370.189297][ C1] irq_exit_rcu+0x9/0x30 [ 370.193542][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 370.199179][ C1] [ 370.202107][ C1] [ 370.205034][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 370.211030][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 370.216925][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ea dc 20 f6 48 89 df e8 42 74 21 f6 e8 0d c6 4a f6 fb bf 01 00 00 00 a2 6e 13 f6 65 8b 05 6b d1 23 07 85 c0 74 07 5b e9 51 4c 00 00 [ 370.236614][ C1] RSP: 0018:ffffc9000bb17430 EFLAGS: 00000286 [ 370.242788][ C1] RAX: 5cab8169ea983a00 RBX: ffff888030b85208 RCX: 5cab8169ea983a00 [ 370.250757][ C1] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: 0000000000000001 [ 370.258728][ C1] RBP: ffffc9000bb17570 R08: ffffffff8fa38537 R09: 1ffffffff1f470a6 [ 370.266700][ C1] R10: dffffc0000000000 R11: fffffbfff1f470a7 R12: ffffc9000bb174c0 [ 370.274673][ C1] R13: 00000003fffffffc R14: 0000000000000000 R15: ffff88804a42c840 [ 370.282655][ C1] shmem_add_to_page_cache+0x8ee/0xba0 [ 370.288122][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 370.294100][ C1] ? lock_release+0x4b/0x3e0 [ 370.298704][ C1] shmem_alloc_and_add_folio+0x846/0xf60 [ 370.304340][ C1] ? filemap_get_entry+0xad/0x2f0 [ 370.309363][ C1] ? filemap_get_entry+0xad/0x2f0 [ 370.314403][ C1] ? shmem_huge_global_enabled+0x174/0x3a0 [ 370.320213][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 370.326461][ C1] ? shmem_allowable_huge_orders+0x414/0x420 [ 370.332447][ C1] shmem_get_folio_gfp+0x59d/0x1660 [ 370.337658][ C1] shmem_fault+0x179/0x390 [ 370.342080][ C1] __do_fault+0x138/0x390 [ 370.346416][ C1] __handle_mm_fault+0x3611/0x5440 [ 370.351535][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 370.357081][ C1] ? rcu_is_watching+0x15/0xb0 [ 370.361851][ C1] ? follow_page_pte+0x7ef/0x13e0 [ 370.366878][ C1] handle_mm_fault+0x40a/0x8e0 [ 370.371650][ C1] __get_user_pages+0x1699/0x2ce0 [ 370.376686][ C1] populate_vma_page_range+0x29f/0x3a0 [ 370.382152][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 370.388219][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 370.394120][ C1] ? down_read+0x1ad/0x2e0 [ 370.398623][ C1] __mm_populate+0x24c/0x380 [ 370.403221][ C1] ? __pfx___mm_populate+0x10/0x10 [ 370.408337][ C1] ? up_write+0x1c4/0x420 [ 370.412666][ C1] vm_mmap_pgoff+0x387/0x4d0 [ 370.417254][ C1] ? __se_sys_futex+0x36f/0x400 [ 370.422104][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 370.427218][ C1] ? rcu_is_watching+0x15/0xb0 [ 370.431997][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 370.436848][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 370.441625][ C1] do_syscall_64+0xfa/0x3b0 [ 370.446165][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.452231][ C1] ? clear_bhb_loop+0x60/0xb0 [ 370.456913][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.462808][ C1] RIP: 0033:0x7fea3318ebe9 [ 370.467312][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.486914][ C1] RSP: 002b:00007fea313ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 370.495328][ C1] RAX: ffffffffffffffda RBX: 00007fea333b6180 RCX: 00007fea3318ebe9 [ 370.503302][ C1] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 370.511272][ C1] RBP: 00007fea33211e19 R08: ffffffffffffffff R09: 0000000000000000 [ 370.519240][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 370.527207][ C1] R13: 00007fea333b6218 R14: 00007fea333b6180 R15: 00007fffff1ed818 [ 370.535271][ C1] [ 370.538560][ C1] Kernel Offset: disabled [ 370.542974][ C1] Rebooting in 86400 seconds..