last executing test programs: 2m53.471651299s ago: executing program 2 (id=613): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x44, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x17, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f7950ba"]}]}, 0x44}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x468a, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000005e340000000000000002000004"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000005e340000000000000002000004"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) (async) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x0, {0x2, 0x0, 0x3}, 0xff}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000b040000000000000000000002020000000000000061"], 0x0, 0x52}, 0x20) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r3}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) 2m53.372596143s ago: executing program 2 (id=615): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0xf8, 0x720d, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x3, 0x0, 0x0, 0x3], 0x2, 0x1}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x6], 0x0, 0x1}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x7, [0x2d, 0x3f, 0x8036, 0xa, 0x2f, 0x27, 0x26, 0x39, 0xf, 0x28, 0x3f, 0x41, 0x22, 0x20, 0x19, 0x2e], 0x2, 0x1, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) (async) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', r3, 0x7, 0x20, 0x0, 0x10000, {{0x17, 0x4, 0x3, 0x4, 0x5c, 0x66, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @remote, {[@rr={0x7, 0x1f, 0x66, [@loopback, @empty, @local, @local, @local, @private=0xa010100, @private=0xa010100]}, @generic={0x44, 0x6, "96dc592c"}, @rr={0x7, 0x23, 0xac, [@empty, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x36}, @private=0xa010101, @multicast2, @private=0xa010102, @multicast1]}]}}}}}) connect$packet(r7, &(0x7f00000000c0)={0x11, 0x15, r8, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4004) 2m53.050535605s ago: executing program 2 (id=620): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x1000, 0x0, 0x0, {[@window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) 2m52.884812099s ago: executing program 2 (id=622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000d158f44d47100"/34], 0x48) (async) r1 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async) sendmmsg(r2, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="70840500"], 0x2e0}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffdff}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m52.856944271s ago: executing program 2 (id=625): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x1, 0x6, 0x4, 0x8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b80)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000bc0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000720121ff0000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) 2m52.708954649s ago: executing program 2 (id=626): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f00000000c0)='syzkaller\x00', 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m37.693520807s ago: executing program 32 (id=626): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1], &(0x7f00000000c0)='syzkaller\x00', 0x60, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r4, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m32.349819881s ago: executing program 4 (id=834): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000001800010400000000000000000200b408ff00fe0700060000060015000200000038001680340008803000038029"], 0x5c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000ca0003000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a030000000000ffffffffffffff7f140000001100010000000000000000000000000a"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000700)={r4}, 0xffffffffffffff7d) close(r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0x1b8, 0x2e0, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r6, @ANYRES32=r9, @ANYBLOB='7\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="7b17bd921059019dfdbd349b93112940ed0019083f46893729cc5d73832ee0285ba31f311069ba3519c4fb082ac1ecd2111e00"/65, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x1c, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711020000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x4f}, 0x9c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000b00)="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", &(0x7f0000000080)=@udp=r5, 0x1}, 0x20) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in=@private}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f00000000c0)=0xe8) 2m30.952705393s ago: executing program 4 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001400000000000faff4daa1beeff41a1", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x1405, 0x200, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2004c804}, 0x40891) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x1ff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000514020027bd7000fedbdf250800010000000000080003000000400008000100020000000800030004000000080001000000000008000300000000000800010001000000080003000100000008000100010000000800030003000000"], 0x60}}, 0x0) 2m29.600939498s ago: executing program 4 (id=842): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000180), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 2m29.464660067s ago: executing program 4 (id=847): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00010028bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f00000000f0"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r4, 0xc, 0x1, 0x2, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r5, r4, 0x6, 0x0, 0x0, @void, @value=r5, @void, @void, r6}, 0x20) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x1, 0x2, 0x8, 0xc}, {0x5, 0x4, 0x7, 0xa}, {0x3, 0x3, 0x0, 0x4}, {0x5, 0x4, 0x4, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r7, r3, 0x6, 0x4, 0x0, @void, @value, @void, @void, r6}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newtaction={0x124, 0x30, 0x307, 0x0, 0x0, {}, [{0x110, 0x1, [@m_gact={0x10c, 0x1, 0x0, 0x0, {{0x9}, {0x91, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b9b}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x3e9, 0x20000007, 0x28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x9, 0x8, 0x1, 0x7}}]}, {0xa1, 0x6, "158fec95e1f0bf0cdb8072be4db5e7bf98cf0f842d2e4829bd02e19453882d3dc74eade1c975a84e60dfe0b681fdbad4070bf3d787769d0ee94872bea82c58e48f7c2fa7bb02031780144909b6f6ba0571668820d158e90c47c59eac150123f96ee720467b9b0bfafffb8354107803b632db377da791a6a68fac5a667fb03d45e22e20e55d77dc59fae86e08aac753f7d8b76c51ed706935b36e2f41f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x124}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00010028bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f00000000f0"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r4, 0xc, 0x1, 0x2, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r5, r4, 0x6, 0x0, 0x0, @void, @value=r5, @void, @void, r6}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000000280)=""/184, 0x40f00, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x1, 0x2, 0x8, 0xc}, {0x5, 0x4, 0x7, 0xa}, {0x3, 0x3, 0x0, 0x4}, {0x5, 0x4, 0x4, 0x5}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r7, r3, 0x6, 0x4, 0x0, @void, @value, @void, @void, r6}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newtaction={0x124, 0x30, 0x307, 0x0, 0x0, {}, [{0x110, 0x1, [@m_gact={0x10c, 0x1, 0x0, 0x0, {{0x9}, {0x91, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b9b}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x3e9, 0x20000007, 0x28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x9, 0x8, 0x1, 0x7}}]}, {0xa1, 0x6, "158fec95e1f0bf0cdb8072be4db5e7bf98cf0f842d2e4829bd02e19453882d3dc74eade1c975a84e60dfe0b681fdbad4070bf3d787769d0ee94872bea82c58e48f7c2fa7bb02031780144909b6f6ba0571668820d158e90c47c59eac150123f96ee720467b9b0bfafffb8354107803b632db377da791a6a68fac5a667fb03d45e22e20e55d77dc59fae86e08aac753f7d8b76c51ed706935b36e2f41f6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x124}}, 0x0) (async) 2m29.02074237s ago: executing program 4 (id=851): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) unshare(0x6020480) (async) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) pipe(0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}, {}, {}, {0x6}]}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x4a, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10) (async) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000380)="cefc065cebbc67972e69c4533817a9c776e88e64fcc11fb9ce67d82d61638547960183c31f2ac6282e3a17ff16b459b6faff58736857c7d75b6fd97d4c36cce747783a9e041a3ad174b1bce6b17b3c61f3e8bfeb3411b60454112e082d83d831c2543b861931a2504482ed53cbc8b257d7e201cf8662b6bde9b60b6088cd5b882c8bd0d740461051a0816f3399149677f4a57f436083f70592013ce12616d5fc8103b37de794b50f7e4c6ac80196d3d64a0ec78d7c8cc96ae70f8e4b32dcd5f290516fa9dbae579fa721973196f08d68234204ded964d33638188ddb2a401913cb7f26c075efe40c", 0xe8}, {&(0x7f0000000100)}], 0x2, 0x0) 2m28.815177102s ago: executing program 4 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) 2m13.554632796s ago: executing program 33 (id=854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) 9.442828291s ago: executing program 0 (id=1689): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x19e, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) socket$inet6(0xa, 0x3, 0x100) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'macvlan1\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x0, 0xd, 0x4, {0x2, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, 0x9d, 0x9}, {0x0, @random="1333382d2fc3", 0x1, 0x3, [0xfffff9e1, 0x3]}, @esp_ip4_spec={@multicast1, @rand_addr=0x64010101, 0x9, 0x8}, {0x0, @broadcast, 0xff, 0x3, [0x5, 0xffffff28]}, 0x3}, 0x3, [0x7, 0x7, 0x100]}}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa}}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x0) unshare(0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ppoll(&(0x7f00000004c0)=[{r0, 0x4320}, {r0, 0x8000}, {r2, 0x1}, {r4, 0x18}], 0x4, &(0x7f0000000540)={r5, r6+60000000}, &(0x7f0000000580)={[0x8]}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x8040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004890}, 0x1) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000900), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r11, 0x2, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r12}, {0x4}}, {{0x8, 0x1, r13}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x44) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r9, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x84, r15, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "7980ea483512eb8d25b19427f0c1f83c"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1c}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x57}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "83a55813e90a407adb1f5000a169d736"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000d00)={0x1}) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000d40)={0x0, 0x0, 0x10}, &(0x7f0000000d80)=0xc) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r10, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44090}, 0x804) 8.490495181s ago: executing program 0 (id=1707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffb, 0x3000000, @mcast2, 0x5}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) sendto$l2tp(r4, &(0x7f00000000c0)="88446a550a5fb58cc4045368689a3fba96c2968d685ab1629675eb4b428aa257c15d6a31dfc7a6e9499914afec", 0x2d, 0x20000001, &(0x7f0000000140)={0x2, 0x0, @empty, 0x1}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000180)={0x0, 0x40000000, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r6, 0x701}, 0x14}}, 0x0) 7.552330621s ago: executing program 0 (id=1716): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000100)={0x82f, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000c5c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f000000c600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f000000c800)={&(0x7f000000c580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000000c7c0)={&(0x7f000000c640)={0x160, r2, 0x700, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x340000, 0xc}}}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x3, 0x1, 0x85, &(0x7f000000c840)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rxrpc(r5, &(0x7f000000c880)=""/179, 0xb3, 0x40000000, &(0x7f000000c940)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) r6 = syz_genetlink_get_family_id$team(&(0x7f000000c9c0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f000000ca00)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f000000ca40)=0x0, &(0x7f000000ca80)=0x4) getsockname$packet(r4, &(0x7f000000cac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000cb00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f000000cb40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000cb80)={'vxcan0\x00', 0x0}) getsockname$packet(r5, &(0x7f000000cbc0)={0x11, 0x0, 0x0}, &(0x7f000000cc00)=0x14) getpeername$packet(r5, &(0x7f000000cc40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f000000cc80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000ccc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000d140)={&(0x7f000000c980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000d100)={&(0x7f000000cd00)={0x3e4, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r9}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff9dd9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcee9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}]}}, {{0x8, 0x1, r12}, {0xdc, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0x24, 0xee, 0x4}, {0xfff8, 0x7f, 0x4, 0x100}, {0x3304, 0x5, 0x5, 0xf2bc}, {0x4, 0xa, 0x4, 0x4}, {0x3, 0xb3, 0x7, 0x6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2495}}, {0x8, 0x6, r14}}}]}}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f000000d180)) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f000000d200), r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f000000d2c0)={&(0x7f000000d1c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000d280)={&(0x7f000000d240)={0x20, r15, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f000000d3c0)={&(0x7f000000d300)={0x10, 0x0, 0x0, 0x12000008}, 0xc, &(0x7f000000d380)={&(0x7f000000d340)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [""]}, 0x14}}, 0xc1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f000000d400)={0x0, 0x40, 0x8}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f000000d800)={0x0, 0x1, 0x0, [0x1, 0x9, 0xf37c, 0xfffffffffffffffd, 0x1800000000], [0x8, 0x4, 0x6, 0x2, 0x5, 0xfffffffffffffffa, 0x3, 0x7ab1b666, 0x5, 0x4, 0x1, 0x3b4, 0xfffffffffffffeff, 0x2, 0x9, 0x7, 0x5, 0x79, 0x2, 0xd, 0x9, 0x3ff, 0xe6b, 0x0, 0xffff, 0x1, 0xffffffff, 0x4, 0xc083, 0x8, 0x7, 0x0, 0x8, 0x5ac1, 0x7, 0x8, 0x0, 0x14, 0xfff, 0x5, 0x0, 0x1, 0x0, 0x8001, 0x6, 0x3f, 0x7e200a76, 0x8000000000000000, 0xa, 0xfffffffffffffffa, 0x3, 0x8, 0x400, 0x3, 0x3, 0x6f8, 0x401, 0x800, 0xfff, 0x9, 0x8, 0x6, 0x5, 0x6, 0x7fffffffffffffff, 0xba2a, 0x9, 0x1000, 0x2, 0x329, 0x300000000, 0x6, 0x9, 0x0, 0x1, 0x7f, 0x1, 0xfffffffffffffff8, 0x200, 0x2, 0x6, 0x9, 0x3, 0x4, 0xeec1, 0x0, 0x5, 0x2, 0xff9b, 0x1, 0x7, 0xffffffff7fffffff, 0x7, 0xd, 0xffffffffffffffff, 0x3, 0x80000000, 0xffff, 0x3, 0x0, 0x5, 0x7, 0xffffffff, 0xfff, 0x2a, 0x36de25ce, 0x6, 0xaf1, 0x1, 0x10001, 0x1, 0x23, 0x3, 0x1, 0xd0, 0x40, 0x3, 0x0, 0xc, 0x8000000000000000, 0x8]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f000000dc40)={0x18, 0x2, {0x0, @struct={0x7ff, 0x5}, 0x0, 0x9, 0x5cce7174, 0x10, 0x4, 0x4, 0x0, @usage=0x4, 0x8, 0x200, [0x8, 0x8, 0xfff, 0x1ff, 0x9, 0x7]}, {0x7, @struct={0xd}, r16, 0x800, 0xf59, 0x5, 0x8, 0x3, 0x1, @usage=0x95, 0x7, 0xc, [0x2, 0x80, 0xb7, 0x3618, 0x7, 0xe00000000]}, {0x8, @usage=0x8, r17, 0x7, 0x0, 0x8001, 0xffffffff, 0xb, 0x10, @usage=0xffffffffffffffff, 0x80000, 0x7, [0x8, 0x8, 0x89, 0xfffffffffffffff7, 0x800, 0x2]}, {0x4, 0xfff, 0x28b1}}) bind$bt_hci(r4, &(0x7f000000e040)={0x1f, 0x0, 0x2}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f000000e0c0)={&(0x7f000000e080)='br_fdb_external_learn_add\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) recvfrom$rose(r5, &(0x7f000000e100)=""/158, 0x9e, 0x40010022, &(0x7f000000e1c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f000000e200)) 7.389001124s ago: executing program 0 (id=1718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000000a0a03000000000000000000200000060900020073790c96000000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x24002840) 7.328436957s ago: executing program 0 (id=1721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000023c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x400c000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r4) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) recvmmsg$unix(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000400)={r7, 0xf021, 0x8a, 0x3}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) 7.073036661s ago: executing program 0 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073113300000000008510000002000000b7000000000000009500c200000000009500001200000000b609c5d8cc5a475dd466048a2af0057092bcc1631cb63d7cdb"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) close(r1) 6.089326837s ago: executing program 5 (id=1733): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x58}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x58}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) 5.720831626s ago: executing program 5 (id=1734): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000180), 0x180800) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x800, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x4}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5c}]}}]}, 0x44}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000111410002abd708700fcdbdf2508004a000200000008000100050000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x880) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}, @in6={0xa, 0x4e23, 0x200, @remote}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x7fffffff, @local, 0x375f}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc76}, @in6={0xa, 0x4e23, 0x8, @remote, 0x4}, @in6={0xa, 0x4e23, 0x1, @loopback}, @in6={0xa, 0x4e21, 0x0, @mcast1, 0x8}], 0xf4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001280)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd7", 0x12}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af67571", 0x1a}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) (async) sendmmsg$inet6(r5, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="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", 0x171}], 0x1}, 0x10) 5.324862936s ago: executing program 5 (id=1738): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32], 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.233457596s ago: executing program 5 (id=1739): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x36, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES8=r0, @ANYBLOB="003a8c30924f88be8d15e0848ee6fac003d1d8efad3d50bd3f5bd80b6d997f4ff731985d9deb985a413bd7fbd5bfd8dc", @ANYRESOCT=0x0], 0x74}}, 0x2044890) 4.834612766s ago: executing program 5 (id=1743): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x6}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="8304000000000000000001000000100002800c000180080001000000000004000180"], 0x28}}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) (async) r7 = socket$kcm(0x29, 0x2, 0x0) (async) r8 = socket$inet6(0xa, 0x803, 0x7) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000240)={r8, r5}) (async, rerun: 64) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) r9 = accept4(r4, 0x0, 0x0, 0x800) ppoll(&(0x7f0000000200)=[{r9, 0x801a}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000340)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000500000000000000000000000095000096020ee900"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8001) (rerun: 64) 4.61998105s ago: executing program 3 (id=1745): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1, 0x180000, 0x4, 0x4, 0xa, 0x5, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x5, 0x6, 0x1, 0xffffffff}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e22, @empty}}, 0x77, 0x502, 0x8, 0x88, 0xcb, 0x0, 0x4}, 0x9c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 4.593352405s ago: executing program 5 (id=1746): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2}, 0x18) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xb, 0xffff}, {0xb, 0xffe8}}}, 0x24}}, 0x4000) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000240)={0x80}) r6 = socket(0x10, 0x803, 0x0) (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000009c0)='ns/ipc\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r9 = getpid() syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r9], 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c929407", @ANYRES16=0x0, @ANYBLOB="ed4d00000000fbdbdf253100000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001d00)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000008c0)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r13 = accept4$x25(r6, &(0x7f0000000980), &(0x7f0000000a40)=0x12, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="a4000000210000042cbd70005e7fdf2592004e800800fc00000000002ff8f7f107f4852fe09f05daf364c4af50029f6c8ca897a27cc95b520af13f6daa5176db543fb767fe67c193c94dad9eeecb0e291c04002b80ed6f899bebfb154603a64b49a533f64a504b9871ad62c66d40aba8d0e1cae981a89c5da6f9be4675454ab32f96a356944400c7615efce288dee43c54cd6630c2808685e679adf1e0fdeef118ee0000"], 0xa4}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000004800002000100002102000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r6, @ANYRES32=r13], 0x68, 0x4040800}, 0x800) (async) vmsplice(r7, &(0x7f0000000b80)=[{&(0x7f0000000a00)="76cfd52d", 0x4}], 0x1, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x884) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) sendmsg$nl_xfrm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e00)=ANY=[@ANYBLOB="500100001000000129bd700000000000ac1414bb00000000000000000000000020010000000000000000000000000000000000004e240000020000202f040000763ef2f39404cec63b7f72b14cac32ff58e1f2818c7f5ab47a90b8f0089ac8e81a5f9a62ead0fba62f09cfd38d26b7e275e2132a72db187e3259cd0b987e4796efdc6b4600d4a5fdb6f63846aad47b528afd5f5baa", @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="e000000100000000000000000000000000000000320000000100000000000000000000000000000100000000000000000000000000000000fcffffffffffffff00000000000000000800000000000000000008000000000081000000000000000000000000000000000000000000000005000000000000000400000000000000060000040000000000000000f9ffffff00000800000000000000000002000181680000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000008000000025cac5216d3c8af0aa76902918bf448c5d9f5459"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000000) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)=@ipv6_getroute={0x1114, 0x1a, 0x4, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xc, 0x0, 0x1, 0x0, 0x6, 0x800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_UID={0x8, 0x19, r16}, @RTA_METRICS={0xbd, 0x8, 0x0, 0x1, "1b1fb9c5bc46b04f9c98472fb2be2b3f115cd2e72058186286d3b655fa60cc5e112633a3abb45ef210723c0a22ec092155f5a3123a0cae889529eb8b1661e3c5344e93bc58aed058808c84c351c0dca9839291561e2d337fe77a28d3e530dfee955f22ab7058f99a0998c813873cfdf9a5bcfcc16992011591781015fa606c47479e3d0c50c6ca726ef80b1c256c45a200de9b83ff5e5e7c3f2abdf746f69a33b90c3ea95766c0f6dace23e7ce9a4c4e88dcb1ea7e76bfa04b"}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "daaa99b92fefab2dbd3ed2f3398fffd41fec5b7c62381bcdb13d4cbb2740ce40ff6e9c51167ec833015a3bb36c9da69e5970ae9d07ca0f3f27981f1ff6a8bb8b1cdb5689a49503cf9203df35c5b5afec04b3f380220dbcf010054fba75de17c0949dc5f93cfd887dbd0d6fb45d3ea6eca150ec58978ae972de061853c430bf7d736bcb9b341cb1f0f0209e0b5f8355f2d552c3117879af0a8de349b2c5d8947014c8e59cfc3ec0224d42b7c8e6ec9561422d73f50df4d7e945d96e44a04cd93511abda736ade53e6a4c7a9c800a7944c83c16aa0bcb93a4672d99a930cf6b506803e87a301f8574ad095694cea0d3a27458a80b7a430020a041d51ba30a127100c8c447889820ba773ae2b0377046a618c7c0e59064db6a0079c9f83c483e1070b72c16faaede5bf6484812e85385c5b71580c9e8b738fa0ddcd104b0e2ef25606b8c7fad904247d3a3dd580754a8824d23be617fa54810f9e95daa4eebfc4dee5a7ccee23b0e66308c5dfdbfe91dd437814c2f4534bd16fadc56b0bf776a8a5cbfdf7c49aea9ea76a46bb2ab786a4551cc60ef1361b16e460dc6f2fdf7f740f0ef50b89cdbe2afea7252a79648304d382709bcdbc555622a821f90cc247b9f473686116a0c253caf9b71678668d56fa8a074eedae768ddc7cceb335de618a5980d25526f96a8993c7fe5e5de4cdd35f8913d0ddc12e2bd6314abe3d311aed29bda5ac2b28fd2a9d149ce564426d9e21b5c88905e21b842038ebbf40fed870b1a92bb91ba9cd17280e00a8bba830c98307e90e446f084b61fe8f4178757cd390147e97b5f5f134867aacf1f719a97b41dee369b17850c4c4c86303aeac65ba63ce6cf51606a5813e4e70881434ee94e4ca41242e273e7d97a15481061cccd1ddb11566d8731b7ed3cae979d7a89d1401167a9bfe8ea929c53f8966b1d27211c1317350b3873aeaa9e7401135e58e6c79c302752e968aae3a04f7df9f577c449970476ad8ca45d2142f18d6564b69335b455fc1f9a08a3431d0120adaa8260bc96655a3820960667dfc1ada12b934545fac43e3cda0a875177610b02336783de7286fafcd1b82507919e813a52ac77b2f57309ab92000e66f7782e186b11ba2afcd8f3cf4e4360228e8e2b3bfe89224f47314cb76d5e4148a02a893b5b25e3649c28e8d0f3cc7521cf767db2c86b0a3181b94353ce5f8fb39a4cc66219941b987ce235bf23484f73773f4677bb216c646dfdcc5fb64bc4589dbedf34d9815f6a0568bb1ce1c0cfee11c2283063f78274336beb3f14c03bc5ca0da3488069bf31bb9dd747502b32764031409dcfc5b96e3fd178a4a08084a893ec2e400f5aa6d52218ff198de7dedb700e3d3de3135bfbdad323bbd239bb580d99a23cdcdf40eff593c245be33e329e788b3cc2614d7c27907547da9e1f45c75a6b4ab9922e436354b8ccb18bcba71c3ca18914a73a4cbf57c33c6c2272a4f89b12f5d6ece3bcee98b8473b7b74cadf278dfb481307152cb71b7cea6a71127ef79c17912172eba4c6c83bc5e15e77db886105788285bdc05c936c4f3e689e8466b6a50d4673d961bec7c05e3910960fd68931a88e37636f5058283e0eb9a52f223235655322c8707199f86ec87ce5538a83a99c7d6199fd8964d021d7686dfc705e9bf98312093cc1ce73a9e28089370891d24e3181ddd2fe238fedc5c678efc807c2b641b6bf644ff22e91f08a4798fac7d618ef898e379445bd18d75b158f0b81eaefaa021371d2140bafd9a26e806a5372cc6ae1f62479f43bb2050d047228de3d0f34720ead9ae029cf1489c82c076ba12f48ffa70766c9e6633c3a05ab131c40e191ebd4bd07c29b06b2f586d4107169413f203f014e5ab2e7c6b0a59bf23168a46e1fd17c825a9e864bd1ef0e98d1afd0c675d298e8aa96db6e5675edeb38853cf1bf6ce62f0b6088d18fe2b76c795bcfd4c2a331915981e15e1f7f0d92b70fe2c431e730ff8c4c0d7410e18e12d5f11df778163b853d0fcd52dc06e8fc1d385cfab4aa5b8c17740de82a8465644b8a21a9272b24d0f70a59a1deba2d036fb26c90eb09acf55a16c371bcfeebe32f8374cd08fd9f4114ee924d36142286ed146f2de529e4c34614da24d53d31b28f882968d2464a2f850557b295ff0e5b9edb78685efcb002ee693d652c72088632ba396bca560bc5252b31d75f1207efec6c96d9b552c9965762c4e02af1068fe6fa711750a882f0437fbfa26776606e343f36354e1f983e72b69626f94f1e272ff4c9f1ea4661f1ca343ca59099497ae38b42fe0ad92650b55c22a61573b28e754d2c773d7fc4a96c7883fb75887ec9624f48b391b03be9d995fd5529ffa69b8dff23eada5d9f4c7c77b67e878ed92a2967138fe31cdd04c003f02ccab88e490296bae2b87506eef866b37686aeea1b0958d1958388eaec9156436938ee90b7351841a4f45a59041e98247d16ec201e1894d69795796f383983b70e33899ea6308a92d0c7e2b3499367eb4292d1ad904e890b3c710e0718a32ee8d83ccc08a02ded0dfa4630fbd391db2e04dd1c3a0f49e8fbf02a2fa6fef3b61cbb1ff70ccfc6045b2068ece70e546f3920f6b9fd8779d6a4742ac27b96fbf2596211e8e0b4e101aa172b73998c7925bba32b6b78fc643e283c0097e1421a9949c56ebda1b51c12d342a6113ff03618985dacc187cecf57de184bfb868744722a79814a99f032a38f69f293ff969bc05caefbc4f1d803316d42bc56e0f9ea02c2886e9527abdafa2e88617b05879b9b7147a1b7a4c6ce3e877a4f9ea5124f813742593e1b6477d82d9338b41a446e73b463e8458047c718dd728b245ae6502b0d355fa4fef60f358c4faed1fead4707d694141b86bcde8c84477a236fcbbea15015c6f736f91b7032326796dfff22fcd0c69269d078529a7df903f22555ea554ceb02c9006a92beb504eec971bbed850452d0417efae33532404a4cb02d222e930e5d286c8d0fa33e77ba75f2009c53a4ee6120437f8f59690814db7687f5b78ae81633f2aab79eaaf3930c5d066e4c70a8d876ac8d21b2ec88946fa79652fbf9c24eb2506ec8416e2fc1cdebc906041592efe2b9cd2f69d8de898ad1714c32e755fe19eb20cccd2358891e47aa2d26a75322b8100a361cf8386288ccbae3bd4287ba54461914fbb5c5fa1347118ad27cadcad7087db4bf8bbe43739ef3d96bc8de628ee00e46ea02b7cf2a70d65d07aa94c338cf285e22c5706b8bd6beb03833a04ca2658852996e3dbc811168317117d7c4b1133f52ec05b5bb51837155666508b522210590933e71545df743ee0ed263d823e718ff69564a7d5e02ab3ea49437db6ee7ae847505fa23fe9644950e7025e00bb8ba161bdfb086c28d952f842be0bb6ac0706c9d53af3810af076224bc680550423b92b38ed423390a50bd8a0890a0e44573927dd355757b7dfb068b1bef7c4c3ac9446db599f23c64e7bc6066267acf969acfd980045222164b9608d513c076164f5ff40923f06b60624377ec1611c36d2c1d095e9e49a27802d27c1aef4841221571f21300c1809b8c84b54bfef763c73b2043287d51430a3ab4351ac4a25466e440b42dbe0db0245bd82090182aebe3a9228cab27ec7013715a227fd558f06934c6da14bddb629361e969b47016df158a177f7f3d6ad596f1e40ac94d4e3569e81d6d05c996ae43486ffc433108d719f74e8bb8041c7b0b49b21538a853622ac63b09bc801d92c955e5e624361d1604d32a494e474765c1b091004bbe4a8ce2130ae99657a25e66995daf10be3105bad5fa47b77c9e94f4f7d6c1dcd8d21fdf28a8c5bd1ea226a9a02a9a9a7817e8da496d83e46f0fe43d003a604fc746bd4e26f438e195e0c8aa0c0221f1eb46b220ceee0ae89c2f4d71cfafb41fc48cbe518fdf0a92f20ef138cbfecc3f69a198b0ea56e022d4ceac4aa19099483be0b031f6a4f922b10823b4566c9c8b18dd8e7532b1630cb6dc555a52828074b2d03af51ac51bc40eafb82af62e9da93a299e0a7e2f7ba00ed123731e3465167e471e5cc94aa33ec3b108c96f5dade92cdc2e43b0d22024d5f40784a14f1990076ad800771a14fc2490f23abc82e5b6854bb8ea7d60aa4779012ffafbc7fdbee8e7315556bf2ffe0999cad71716f60800e06c9273a6495beab599a254a82f13e9e1191eb93e509234daa03f339c6af9b846b9cd639eaec0e11c386a3fae9abf7b83d0a3f0654c336a329c796c8566410b31072ebbc448e81aa58fd00c31be8af63c89eeb3817cde0bd63a9d2f59b744c0a9d131e40cb25f076e8ced3f5719bbbcb6db62f4580c7a141032930601f6bfc20a774a00d025fd74d41f6e4b5e42af4b8ef4ded527bb87fd213db79dc96e9685763e67132424ba0eb028bbfd73498cf17c4bb47c71427c618f6cb0f7d47f640de10e597d0d73209006bb427da577718b814212836400df328619625cc1e031baf24e812303c53be895a36395de02ba0e75b5edb058746723db9590e4647b6dd4c8fdbc6dd63f6d69df2fbbbc22e04456364a54b0e1ac12f198f9e11150eb611cc1fb106d45f655aeb0e6eaf249d4134c1a7180096d5b2edd73e68e5025d3d1dd9188a4cd39b3947ad0f44d0b6cd1248c97131a39a45a9f8b790b282dbc427dbcfcf75ee9fa39f97d9fca3274f1358f16df88fad9aacad1012d182c17d9f291d3a49025cf773c7b89f84e33ce6751be0680599e3f39b2badd3d7e2b706c4f2df6feafc2ccdf0f58b64a930c6752e9332243c7cd461eb616c8ffe9f3b9c9b2b32e8a2c360b5c93174a0ed90e40901cba44be1305fd762f2428b3ba11ae19308f4f1af675c4e771b7bc87e06be4dc359202f5e868473ec8d4eaa0bf9a9232883ce3ad80331c2cf98339464fb4c44a7af9b5f224c6061015021e71a99f19690b0d20857afa27d1068207f81d9a312ae1f3cbf4c1732a81411ae5a1eaa26cd7ff5a5f0504efe0b3b4d5300c6ee2554de3bbb90fe7df63fd38bd2d45a80b640275d204f82a86c182004555241b60d05dd02c5fd51ab09d398d6ed41ddffecedfeaeed6d0adec98886aabee3a9857dbb1996d15a448818b1caba7ae2672bab834a85cef0eaf14628721cc606c0d8b5d2ff6456a7fec624449be1a2ef1e8c3661e96a9dcf474acdaf97dbe8555ec284bd2856f690aec218e17d6a7287da2df103750dfc5bc0913d52273a4f947220570f0c97c1e43f8cc9d7f6e6ed9fa3f7e355373bb08405cfc8c6bf9d684135bbd0ddcbe79b92f62fca45fa85a12a6f7468844ae88dbc34ba2d47931a608d9b3264490db978e6398fe5f27b03808215b795c115c9ce61976e576f0bd29af88047f806f920dd014f3b548551bd7b0c69d5346d0bab783b6cb55b6a36aa19c5d01642e4446cc084e4ddb686e95f1de4e062db1bcbeeced5ae588f6948e3c1eba08d247a3f237084850b659f4b6471fd4c8e87caf8376ff9d4815ba3eb02578a2737e27895935f30328e9b9bd26ac466c953b47a0acb24261ded55d7d423bbaf9235cb49caead8964ee4e56a4ca7feb9d8104013d645914f930bc99cb9360a076b0704661f557601f5a484c87dd51e277739372bf1ebf7acd05c5abacd725b96c06a6d01e8696fed00da21a4282c1d66d061587c08fec04e6666e583877f368ebb537d7a5fff347eec94918039e5a59c3eb624075202ab185d95ce5d0de6dbfe98c405692a45e92cf82bd233fc4a7ca6f2297b108ac76bb50480fe141d8541eff7a619dc1ca6faaa87cd166cba5881346fc1a"}, @RTA_PRIORITY={0x8, 0x6, 0x5754}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xe}}]}, 0x1114}, 0x1, 0x0, 0x0, 0x20048091}, 0x40) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x4c}}, 0x4000) 4.498296125s ago: executing program 3 (id=1747): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) pipe(&(0x7f00000000c0)) 3.483550901s ago: executing program 3 (id=1752): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = socket(0x10, 0x803, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x8000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000001980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=@newpolicy={0x12f4, 0x13, 0x918, 0x70bd26, 0x25dfdbfd, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x6, 0xa, 0x80, 0x80, 0x89, 0x0, 0xee01}, {0x800, 0x6, 0x4f8, 0x38, 0x6, 0x7, 0xfffffffffffffff4, 0x8000}, {0x0, 0x4, 0xaf88, 0x6}, 0x6, 0x6e6bb5, 0x0, 0x0, 0x1}, [@address_filter={0x28, 0x1a, {@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0x8}}, @sa={0xe4, 0x6, {{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e20, 0x4, 0x4e20, 0x9d5, 0x2, 0x0, 0x30, 0x6, r10, r12}, {@in=@empty, 0x2, 0x6c}, @in=@empty, {0xc318, 0x6, 0x5, 0xa, 0x8, 0x2, 0xf, 0x2}, {0x9, 0xc, 0x7, 0x3}, {0xfffffff7, 0xfffffff0, 0x8001}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x4, 0xbe}}, @sa={0xe4, 0x6, {{@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0xb782, 0x4e21, 0xc, 0x2, 0x40, 0x80, 0x62, r13, r14}, {@in=@remote, 0x4d5, 0x3c}, @in=@multicast2, {0x7, 0x42b, 0x400, 0xffffffffffff1310, 0x47, 0x5, 0x1ff, 0x17}, {0x7f, 0x6, 0x6, 0x388}, {0x6, 0x6, 0x8}, 0x70bd2b, 0x3502, 0xa, 0x4, 0x3, 0x40}}, @algo_auth_trunc={0x104c, 0x14, {{'blake2s-224-generic\x00'}, 0x8000, 0x0, "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"}}]}, 0x12f4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r15, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.404950553s ago: executing program 3 (id=1754): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)="0003", 0x2}], 0x2}}], 0x1, 0x8084) setsockopt(r0, 0x1, 0x0, &(0x7f00000000c0)="a927e6e2fc9bcfd56ceab2843df61b60fb6cda4ffb214429e5cb858452246fef31e2666aa70a9bfca85fcddd1cf4e0b1edc06673bde913b3b4badfc7ab8b8f34db6255d41957b43ded147a", 0x4b) (async) r2 = socket$kcm(0x2, 0x5, 0x84) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448f0, &(0x7f00000001c0)="2e4fda40f3b52b50a8f96ba0382d7302a5ac309cc285cd7b7d18b5afb6b5266dd419d03735db28a8f4ee4ace700e5230b06cdf9e34e04ac53450ff0f59672bd99911e4e6ab56468fd4072889e928eb0c4cd2af2b8ef87eb4cbbcd174d8db4c5a15a9c25c994d1606d2b8ab5a1b8a3f4e75a98b806dbfafe4bc2108f3d4e50133780790a90bef79a2") (async) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65b60f807ea7ae23fc0f30db3fe9a2ef5641b99632610557bf8460", 0x1f}], 0x1}, 0x448e4) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 2.089188434s ago: executing program 6 (id=1758): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x1) (async) ioctl$PPPIOCGNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0x21}) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x368, 0x98, 0x0, 0x1d0, 0x98, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'lo\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000002030d0e000000000000000002080002a01b6e27b0e8e6b6293aeb6af896c5d073919fc1ca1712208d0bbe9271a63ca6a300cfb8d507f030cf42e0225601425b"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000) (async) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10, 0x800) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x2, 0x7, [0xcd, 0x8, 0x0, 0xfff, 0x7c, 0xb, 0x6]}, &(0x7f0000000140)=0x16) (async) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f0000005800)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0xd78, @private2, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000e00)="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", 0x1ae}], 0x1}}], 0x1, 0x2804c811) shutdown(r9, 0x1) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10) close(r2) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000180), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r8, @ANYRES32=r7, @ANYRESHEX=r2], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='kvm_age_hva\x00', r12}, 0x18) 1.98058819s ago: executing program 3 (id=1759): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x30000000}) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth0_to_team\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000840)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x8000, 0x700, 0x8000, 0xffff, {{0x20, 0x4, 0x1, 0x1c, 0x80, 0x64, 0x0, 0xbe, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0xc, 0x77, 0x1, 0x6, [{@remote, 0xfffffffd}]}, @end, @timestamp_prespec={0x44, 0x44, 0x8f, 0x3, 0xe, [{@multicast1, 0x2}, {@broadcast, 0x4}, {@private=0xa010101, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@loopback, 0x1}, {@multicast1, 0x3}, {@multicast2, 0xc3c}, {@local, 0x9}]}, @rr={0x7, 0xf, 0xe8, [@multicast1, @rand_addr=0x64010102, @rand_addr=0x64010100]}, @generic={0x88, 0x5, '(h.'}, @ra={0x94, 0x4}]}}}}}) sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000700)="be149803657464fd9b4a1c4a2e61502d0af61bde031df2713f259b05c62cce8986216de6ccd4302ec5538b91f8f1732e3e84a7eaf0edba0db35c4c88eda6ae3014aebe8bf30ff3dc108301acacc9d98aa6f4aa8ffbb17eb05bb9fb943ea7180df61780fcf1da5081221267470001fc80815455c79a7a5bfd609f3e0138cfe19b499bf7b7cfcc2c57409546c2367a1b7cf2974671db3385a7c22d498ccb48e98840c6ed99aec61e8e180a44812f8867ef80426b3e58e57f79678b03071ef6db5475c6", 0xc2}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x43c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @private=0xa010102}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x19, [@dev={0xac, 0x14, 0x14, 0x18}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x2c, 0x93, 0x0, 0x7, [0x0, 0x4, 0x8, 0x4, 0x1, 0x3, 0x8, 0x80000000, 0x3, 0x576]}, @cipso={0x86, 0x6}, @ssrr={0x89, 0x17, 0xde, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x34}, @local]}, @noop, @cipso={0x86, 0x30, 0x3, [{0x1, 0xa, "117d4a04c4e86597"}, {0x5, 0xe, "04c8af50f67fc472cde09749"}, {0x2, 0x10, "607cc1647b20d9d73ebe3a1c7ce1"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0x3, [{@remote, 0x80000000}, {@empty, 0xad}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb}, {@rand_addr=0x64010100, 0x2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010102, @remote}}}], 0x180}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r10, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) sendfile(r10, r11, 0x0, 0xffffffff000) socket(0xa, 0x3, 0x3a) 1.976551075s ago: executing program 1 (id=1760): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32], 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000d9bb000085000000b500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.905918935s ago: executing program 6 (id=1761): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000880)=0x3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001c80), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfdfc, 0x0, 0x1, 0x4}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000001c0), 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r11, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) 1.846600515s ago: executing program 1 (id=1762): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) pipe(&(0x7f00000000c0)) 1.70480381s ago: executing program 6 (id=1763): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000140)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fcffffff000000001e0000000e0001006e65746465000400000000000f0002006e657464657673696d3000005a003e00000000000c008f0000000000000000000c009000000000000000000000000100706398f06407353517d67ed9e473c4047e690000000200303030303a30303a31302e300000000000008e007946dabc00008f00090000000000000000009000f601000000000000aa1ddeb3da32ace03146fa89fe67eddf09cf99d6b2ff7258565a10"], 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.573372274s ago: executing program 6 (id=1764): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYBLOB="ff5aa60e942f7e22ac2975d519fc3b96d7f99b5b54d0744297a39ac23d76df3129a825cc88883049a3b2ed47ba073f390acce2b9b412a70e23e50500ff25e40de8c68d129bef45e7c34214", @ANYRES32, @ANYBLOB="62c2ed2b8801727e358a2cb370a1537fd9aa60583c1c89b90e3e75b17cc58ff0a4df1af2617456a69abb091f71445a4f71697fcb278fdbfa0ba7fe299b74674257773691f6867fe6cfca8250620050261025acf46e92b7082b17e369e380f3a843dc1f0ae0df6ec0007b7b7ae874a5a04f442c3fdadecd454e9761728fa740ba504497e9de99fcbf94b759ad33c1edafe623cd2e3a12fe5b", @ANYRES64=0x0], 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000131bef8d9b8af0db6e5861357be920418ca7fddb2ecedeac16de97e472ffc8f81f3160", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf2507000000040001800c0002800800030004000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x400c000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r3], 0x38}, 0x1, 0x0, 0x0, 0x448c1}, 0x24004050) unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1410, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x48}, 0x4000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$kcm(0x28, 0x1, 0x0) 1.074767465s ago: executing program 6 (id=1765): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x2777, 0x0, 0x3, 0x4, 0x0, 0x1, 0x400, 0x1, 0x4, 0x20000000, 0x6f8, 0xc9, 0x6, 0xffffff81, 0x0, 0x6e, 0x81, 0x3, 0x2, 0x0, 0xd1ff1cf, 0x3aa6}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 906.7101ms ago: executing program 1 (id=1766): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000081"], 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r4 = socket$netlink(0x10, 0x3, 0xb) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="27be7b2799001e74396a8d50d1"], 0x24}, 0x1, 0x0, 0x0, 0x24000811}, 0x40000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5dd9c550f6dcd3292218a5deed26074ea54c7beef915d564c90c200", 0x1f) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387db3b8691d2c0e201", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x4040800) recvmsg$qrtr(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x10020) 414.575836ms ago: executing program 1 (id=1767): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad000000660000000000000016000000000000009500000000010000"], &(0x7f0000000140)='GPL\x00', 0x8, 0xb, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x24002840) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x47c, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x14c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0xe8, 0x5, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31740d25}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2793378b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x55d0da86}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x5c, 0xc, "404bef6120d912c19127d62d4df46911532dead84415b9e1dca13b5c47fac973829ed4a18dc399b661a6f189cebaf97925dfc2940192b60adc91e845d669f97ef9b2c36998f0f371cd0f418f58e8229c00951619698b8b5d"}, @NFTA_CHAIN_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x6, 0x6, "f58c"}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x16, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5d8c}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x94c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x690}, 0x1, 0x0, 0x0, 0x40}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x550, 0xffffffff, 0x0, 0x258, 0x328, 0xffffffff, 0xffffffff, 0x480, 0x480, 0x480, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [0xffffffff, 0xffffffff, 0xffffff00], @ipv6=@mcast2, [0xff000000, 0x0, 0xff000000], 0x4d5, 0x3504, 0x33, 0x1, 0x10, 0x2}, {@ipv6=@loopback, [0x0, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}, [0x0, 0x0, 0xffffff00, 0xff000000], 0x4d6, 0x3504, 0x33, 0x0, 0x2}, {@ipv6=@local, [0xffffff00, 0xff0000ff], @ipv6=@mcast1, [0xff, 0xffffff00, 0xffffffff, 0xff], 0x4d2, 0x34ff, 0x1d, 0x1, 0x4, 0x4}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff000000, 0xfefffeff, 0xff], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffffff, 0xffffff00, 0xffffff00], 0x4d5, 0x34ff, 0x32, 0x0, 0x5, 0xc}], 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x2, 0xa2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0x0, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x87, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xffffffff, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0xffffffff, 0xff], 'vlan0\x00', 'pimreg1\x00', {}, {0x8ce54ac3ddbe66d8}, 0x2, 0x10, 0x6, 0x12}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@ipv6header={{0x28}, {0x40, 0x10, 0x1}}, @common=@hbh={{0x48}, {0x1, 0x6, 0x0, [0x3679, 0x7, 0x2, 0x6, 0x8f, 0x1ff, 0x8, 0x5, 0x9, 0xba9, 0x1ff, 0xf5a, 0xff8f, 0x0, 0x7, 0xffff], 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x18, "26b6247945341815d11dc70580eb038bdf45e6ef536ab296fe8468ba7bff"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 329.318841ms ago: executing program 3 (id=1768): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x68040200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000000001) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x8810}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, 0x0, 0x20004011) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b65241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) unshare(0x24060400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xa3}, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) unshare(0x20000400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="08f2a473cd2e97c525fccdd6286bc637660e1833fce0f037674709fafc608f6f161cc996ba96c651ff68fa8370c94f775cd63a55b607fc20d104e0ba3c8bd2fc265133b40780edc8c3b2948ba2cd633d5a0aaa7e50d07015ad11861f8519976fd5f78edb56eac302176a83420c45a079d91631622b199a6ad0c07f01adf17c15fccc71a06b8a2ad6ce1129427ccb85d044c3e317e49dc38b334ba60fe51c72f30e20a9975ac9625df7619426344a70eff955f8427ae8", 0xb6, 0x8080, 0x0, 0x0) 148.745815ms ago: executing program 1 (id=1769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x803, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001806000000000000000000009c00000095"], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000000000000028d284ae5beea3fe00000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000280), &(0x7f0000000600)=""/98}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) getsockname$packet(r0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) sendmsg$nl_route(r4, 0x0, 0x4048000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0xea, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x80, 0x8f}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x20000000) socket(0xa, 0x3, 0x20000000) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) r11 = socket(0x1, 0x6, 0x3) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(r11, 0x0, 0x41) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES32=r12, @ANYBLOB="f9ffff1679e62b8b9e7bffffffffff0000000000", @ANYRESHEX, @ANYRES8=r2, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r13}, 0x18) 33.736269ms ago: executing program 1 (id=1770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600894f00"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="bc030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3bc}}, 0x24040004) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x83cff000) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f00000002c0)=r6, 0x4) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000280)) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) 0s ago: executing program 6 (id=1771): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tm\nm'], 0xa) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000040000000000000000000000000000000000a000407c60000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c00000000000000ffffffff0000df158d3247ff000000000000000000000000000000030000000000000000"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x9c, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, @in=@private=0xa010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@mcast1, @in=@private=0xa010102, @in=@loopback, 0x33, 0x1, 0x0, 0x3506, 0xa, 0x8}]}]}, 0xec}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x218, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x1e8, 0x2, [@TCA_BASIC_ACT={0xa8, 0x3, [@m_police={0xa4, 0xc, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[], []]}, {0x77, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x13c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x3, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7fc, 0x0, 0x4}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x1ff, 0x80, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xde, 0x1}, {0x58, 0x5, 0x1}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="e2b7b69007ff8b0b", @TCF_META_TYPE_VAR="a425a57fefdb9168"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="9cb2232a929395"]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x401}, {{0x3, 0x0, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xa70, 0x8, 0x5}, {0x0, 0x1, 0x2}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x19, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc9a8, 0xe, 0x2}, {0x8}}}]}}]}]}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000001300)=@newtfilter={0xc6c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x4, 0xc}, {0xf, 0xfff2}, {0x2, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc34, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe1f}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13659}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x40}, @TCA_FLOW_POLICE={0xc18, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x3ff, 0x53, 0x84, 0x8, 0x8, 0x45, 0x7, 0xffffffff, 0xfffff80e, 0xd7, 0x8, 0x1, 0x1ff, 0x2, 0x80000000, 0x1, 0x9, 0x4, 0x2, 0x100, 0xfffffff6, 0x9, 0xfffffffb, 0x7, 0xfff, 0xffffffc6, 0x9f, 0x32, 0x541b, 0x5, 0x7, 0xd, 0x9aed, 0x156e, 0x101, 0x8, 0xaa3, 0x7, 0x2, 0x2, 0x6, 0x3, 0x80, 0x1, 0x80, 0x0, 0x6, 0x6, 0x3, 0x9, 0xfffffff8, 0x40, 0x9, 0x4334be24, 0x14, 0x6, 0x9, 0x990, 0x9, 0xfffff083, 0x9, 0x3, 0x53, 0x10001, 0x7, 0x2, 0x909, 0x8, 0x2, 0xb, 0xc, 0x5, 0x3, 0x2, 0x1, 0xfffff001, 0x7fffffff, 0x0, 0x5, 0x6, 0x0, 0xffffc544, 0xa08a, 0x71c, 0x1, 0x1000000, 0x9, 0xfff, 0x1000, 0x9a1, 0xad0, 0x7, 0x98e1, 0x4, 0x3941, 0x9, 0x9, 0x5, 0x10000, 0xf, 0x10001, 0x2, 0x8, 0x140, 0x4, 0x40, 0xfffffffa, 0x1, 0x10, 0x3, 0xa, 0x8, 0xc106dd6, 0x6, 0x7f, 0x5, 0x0, 0xffff, 0x5, 0x2, 0x5, 0xfff, 0x1, 0x8, 0x94, 0x8, 0x6, 0x80000001, 0x8, 0xb, 0x7, 0x9, 0xffff0000, 0x9, 0x2, 0x0, 0x5, 0x1000, 0xb58, 0x9, 0xff, 0x9, 0x4, 0x6, 0x101, 0xe, 0x9, 0x72b, 0x101, 0x7fffffff, 0xe82, 0x5, 0xf4d, 0x2, 0x0, 0x2, 0x7ff, 0x9, 0x7, 0x6, 0x0, 0x7, 0xfffffffe, 0xffffffc0, 0x401, 0xe, 0xfffffffd, 0x7, 0x8, 0x3, 0x1, 0x1, 0x1, 0x3, 0xb, 0x4, 0x3, 0x1, 0x7, 0x1, 0x8, 0x4, 0x3a, 0x7ff, 0xd, 0x0, 0xfffffffa, 0x5, 0x8, 0x6, 0x2, 0xb2, 0x1, 0xa47f, 0x47a, 0x5da8, 0x1, 0xa1e, 0x8, 0x6966, 0xff, 0x5, 0xa5, 0x5, 0x6, 0x80000000, 0x5, 0x7, 0x10, 0x0, 0xd, 0x1, 0x1, 0x8, 0xfff, 0x4, 0xfffffffa, 0x3, 0x0, 0x0, 0xf146, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0xff, 0xffffea48, 0x7, 0x7, 0xffff, 0x157, 0x18a1, 0x6542, 0x2d88, 0x1, 0x8, 0xfffffe00, 0x9, 0x1000, 0x80000000, 0x3, 0x2, 0xa, 0x136, 0xfc, 0x5, 0x7d8, 0x4, 0x4, 0xf5ec, 0x0, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xf17e, 0xffffff01, 0x100, 0x10001, 0xffffffff, 0xa, 0x0, 0x3029, 0x5, 0x5, 0x10dc0873, 0x8, 0xb2, 0x1, 0xfffffffe, 0xffffffff, 0xf26f, 0x3, 0x3, 0x22, 0xfffffffe, 0x0, 0x4, 0x8, 0x2, 0x7f4d, 0x40, 0x380, 0xe, 0x0, 0x1, 0xfffffffa, 0x40, 0x6b18, 0x2, 0x6, 0x5, 0xfffffffe, 0x2, 0x2c51, 0xb, 0x8, 0x1, 0x1, 0x8, 0x101, 0x9, 0x7f, 0x10001, 0x80000000, 0x2, 0xffff, 0x5, 0x2, 0x8, 0x10001, 0x2, 0xd, 0x7, 0x8001, 0x8, 0x8000, 0x1, 0x2, 0x7ff, 0x7, 0x9, 0x8, 0x8109, 0x6, 0x9, 0x4, 0x9, 0x49889f8a, 0x4, 0x0, 0x6, 0x3ff, 0x3ff, 0x2, 0x7ff, 0x80000001, 0x1, 0x9, 0x5, 0x3, 0x8, 0x6, 0x8d, 0x1, 0x4, 0x4, 0x5, 0x0, 0x8, 0xfc7c, 0xb32, 0x5, 0xb, 0x2, 0x2, 0x9, 0x200, 0x9ca, 0xa, 0x2, 0xf3, 0x9, 0x5, 0x3, 0x1, 0x2a9a, 0x7fff, 0x0, 0x0, 0x17, 0x0, 0x6, 0xfffffffb, 0x4, 0x3, 0x40, 0xffffffff, 0x1ec, 0x480, 0x3, 0x9, 0x7, 0x4, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x2, 0xfd, 0x2, 0x5, 0xcc7, 0x81, 0x9, 0x0, 0x7, 0x4, 0x8001, 0x100, 0x8, 0x1, 0x1, 0x6, 0x8eff, 0xfff, 0x4, 0x9, 0x1, 0xd484, 0xff, 0x260c2041, 0x5, 0x7, 0x2, 0x7f, 0x5, 0xfffffffe, 0x8, 0xf, 0x10, 0x6, 0x5, 0x8, 0x8, 0xf0, 0x7f8, 0x6, 0x7ff, 0x7ff, 0x4382, 0x4, 0xfffffff7, 0x5, 0x7fffffff, 0x5, 0x9, 0x119, 0x8, 0x1000, 0x3, 0x4, 0x0, 0x6, 0xc, 0xdf, 0x8, 0x80000000, 0x1ff, 0x8, 0x6, 0xf14, 0x5, 0x5, 0x80000001, 0x6, 0x6, 0x7fff, 0x1, 0x5, 0xd, 0x7, 0x8, 0x1, 0xe5c, 0x9, 0xc, 0x0, 0x6, 0xffff, 0xffffffff, 0x6, 0x6d, 0xffffffd8, 0x8c4d, 0x80, 0x80000000, 0x7, 0x5, 0x3, 0x2, 0x5, 0xf, 0x5, 0x3, 0x7ff, 0xf25, 0x5eb1f22f, 0xfffffff9, 0x9, 0x4, 0x7, 0x37b, 0xbd, 0x10, 0xafc9, 0x200, 0x58000, 0x2, 0x39b9, 0x100, 0x9, 0x5, 0x8a99, 0x100, 0x5, 0x401, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x4, 0x10000, 0x3, 0x200, 0xffffff00, 0x9, 0x3, 0x80000000, 0xe29, 0xd, 0x9, 0x5, 0x800, 0x6, 0x8, 0x9, 0x9, 0x8, 0x0, 0x2, 0x2, 0x40, 0xffffffff, 0x2, 0x7, 0x2, 0xfff, 0x3, 0x5, 0x9, 0xfffffffb, 0xe0cc6ea, 0x400, 0x907, 0xcc16, 0x992, 0x3, 0x3, 0x4, 0xd6c, 0x0, 0x1, 0x4, 0x4, 0x1ff, 0xc8, 0x9, 0x9, 0x58, 0x5, 0x7, 0x5, 0x1ff, 0x1, 0x0, 0x3, 0x5, 0x0, 0x7, 0x8000, 0x5, 0x2, 0x7, 0x2, 0x0, 0x2, 0x5, 0x0, 0x2, 0xfa240000, 0xffff, 0x4a, 0x2, 0x80, 0x8, 0x4, 0x6, 0x9, 0x9, 0x6, 0xffffffff, 0xfffffffc, 0x7, 0x917, 0x0, 0xffff87a6, 0x4, 0x12, 0xfffffffc, 0x5a8, 0x4efa8d31, 0xb, 0x6, 0x1, 0x1, 0xa2, 0x2, 0x4, 0x3ff, 0x10, 0x4, 0x5, 0x101, 0x101, 0x4, 0x8, 0x0, 0x81, 0x5869, 0xff, 0x3, 0x800, 0x3, 0x4, 0x3, 0x1, 0x0, 0x7, 0x2, 0x81, 0x4, 0x2, 0xfffff5b6, 0x8000, 0x7fff, 0xfffff001, 0x1ff, 0x2ec2b57, 0x7f, 0x19620414, 0x5, 0x0, 0x6, 0x8, 0x8, 0x0, 0x3ff, 0x6, 0xb7, 0x32, 0x2, 0x401, 0x3, 0x8, 0x1ff, 0x1, 0xc6, 0x1, 0x3, 0x3, 0xe3, 0x5, 0x31e3, 0x8, 0x6, 0x20000000, 0x81, 0xf88, 0x10001, 0xfff, 0x7, 0xd1, 0xfffffffd, 0x5, 0x7fff, 0x8, 0x8, 0x3, 0x9, 0x1, 0xfffffffd, 0x2, 0x7, 0x2, 0x0, 0x0, 0x1, 0x1, 0x7fffffff, 0x1, 0xb3, 0x7ff, 0x7, 0x9, 0xfffffff9, 0x9, 0x6, 0xffff0000, 0x9, 0x2, 0x101, 0x8, 0x8, 0x96, 0x7, 0x64f9, 0x7ff, 0x1, 0x6d2b, 0xb, 0x10001, 0x10001, 0x0, 0xb51d, 0x7e7, 0x3, 0x2, 0x3, 0xfffffffa, 0x9, 0xa, 0x3, 0x400, 0x4, 0x1, 0x7, 0x0, 0x5, 0x6, 0x101, 0x3, 0x53a, 0x7, 0x4, 0x1ff, 0x46b, 0x2, 0x5, 0x1a54ddef, 0x0, 0x80000000, 0x800, 0x3, 0x7ff, 0x0, 0x0, 0x8, 0x81, 0x7, 0x6, 0x18c000, 0x4, 0x618, 0x200, 0xcb1, 0x1, 0x1, 0x7, 0x7f, 0x5, 0x3, 0x6, 0x80000001, 0xf0]}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0xc6c}, 0x1, 0x0, 0x0, 0x40824}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): 000000000 [ 197.118483][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.118493][ T9755] R13: 0000000000000000 R14: 00007f6fe5db5fa0 R15: 00007fffbad904b8 [ 197.118527][ T9755] [ 197.175201][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 197.362610][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.403456][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.434496][ T9649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.448740][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 197.523650][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.531766][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.561359][ T9649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.758709][ T9649] hsr_slave_0: entered promiscuous mode [ 197.777839][ T9649] hsr_slave_1: entered promiscuous mode [ 197.786346][ T9649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.795492][ T9649] Cannot create hsr debugfs directory [ 197.995340][ T5842] Bluetooth: hci6: command tx timeout [ 198.325951][ T9649] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.357417][ T9649] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.432650][ T9801] FAULT_INJECTION: forcing a failure. [ 198.432650][ T9801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.450732][ T9649] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.466609][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.5.1026 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 198.466635][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.466645][ T9801] Call Trace: [ 198.466652][ T9801] [ 198.466660][ T9801] dump_stack_lvl+0x189/0x250 [ 198.466690][ T9801] ? __pfx____ratelimit+0x10/0x10 [ 198.466711][ T9801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.466734][ T9801] ? __pfx__printk+0x10/0x10 [ 198.466753][ T9801] ? __might_fault+0xb0/0x130 [ 198.466780][ T9801] should_fail_ex+0x414/0x560 [ 198.466807][ T9801] _copy_from_user+0x2d/0xb0 [ 198.466825][ T9801] generic_map_update_batch+0x572/0x7f0 [ 198.466856][ T9801] ? __pfx_generic_map_update_batch+0x10/0x10 [ 198.466874][ T9801] ? __fget_files+0x2a/0x420 [ 198.466899][ T9801] ? __pfx_generic_map_update_batch+0x10/0x10 [ 198.466916][ T9801] bpf_map_do_batch+0x36c/0x5f0 [ 198.466953][ T9801] __sys_bpf+0x384/0x860 [ 198.466976][ T9801] ? __pfx___sys_bpf+0x10/0x10 [ 198.467009][ T9801] ? ksys_write+0x22a/0x250 [ 198.467035][ T9801] ? __pfx_ksys_write+0x10/0x10 [ 198.467056][ T9801] ? rcu_is_watching+0x15/0xb0 [ 198.467088][ T9801] __x64_sys_bpf+0x7c/0x90 [ 198.467108][ T9801] do_syscall_64+0xfa/0x3b0 [ 198.467126][ T9801] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.467145][ T9801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.467161][ T9801] ? clear_bhb_loop+0x60/0xb0 [ 198.467181][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.467197][ T9801] RIP: 0033:0x7f6fe5b8e929 [ 198.467222][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.467236][ T9801] RSP: 002b:00007f6fe39f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.467254][ T9801] RAX: ffffffffffffffda RBX: 00007f6fe5db5fa0 RCX: 00007f6fe5b8e929 [ 198.467266][ T9801] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 198.467276][ T9801] RBP: 00007f6fe39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.467353][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.467364][ T9801] R13: 0000000000000000 R14: 00007f6fe5db5fa0 R15: 00007fffbad904b8 [ 198.467392][ T9801] [ 198.767047][ T9649] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.893788][ T9806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8 [ 199.280532][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.317875][ T9821] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 199.345921][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.372000][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.379213][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.456178][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.463397][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.541274][ T9827] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004 [ 199.668630][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 199.690123][ T9836] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 199.698015][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1034'. [ 199.707486][ T9836] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1033'. [ 199.878033][ T9841] FAULT_INJECTION: forcing a failure. [ 199.878033][ T9841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.921016][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.0.1036 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 199.921046][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.921055][ T9841] Call Trace: [ 199.921063][ T9841] [ 199.921081][ T9841] dump_stack_lvl+0x189/0x250 [ 199.921112][ T9841] ? __pfx____ratelimit+0x10/0x10 [ 199.921131][ T9841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.921155][ T9841] ? __pfx__printk+0x10/0x10 [ 199.921174][ T9841] ? __might_fault+0xb0/0x130 [ 199.921202][ T9841] should_fail_ex+0x414/0x560 [ 199.921228][ T9841] _copy_from_user+0x2d/0xb0 [ 199.921245][ T9841] generic_map_update_batch+0x572/0x7f0 [ 199.921278][ T9841] ? __pfx_generic_map_update_batch+0x10/0x10 [ 199.921296][ T9841] ? __fget_files+0x2a/0x420 [ 199.921320][ T9841] ? __pfx_generic_map_update_batch+0x10/0x10 [ 199.921336][ T9841] bpf_map_do_batch+0x36c/0x5f0 [ 199.921363][ T9841] __sys_bpf+0x384/0x860 [ 199.921387][ T9841] ? __pfx___sys_bpf+0x10/0x10 [ 199.921421][ T9841] ? ksys_write+0x22a/0x250 [ 199.921448][ T9841] ? __pfx_ksys_write+0x10/0x10 [ 199.921469][ T9841] ? rcu_is_watching+0x15/0xb0 [ 199.921499][ T9841] __x64_sys_bpf+0x7c/0x90 [ 199.921520][ T9841] do_syscall_64+0xfa/0x3b0 [ 199.921538][ T9841] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.921566][ T9841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.921583][ T9841] ? clear_bhb_loop+0x60/0xb0 [ 199.921603][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.921619][ T9841] RIP: 0033:0x7f001c98e929 [ 199.921634][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.921647][ T9841] RSP: 002b:00007f001a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.921666][ T9841] RAX: ffffffffffffffda RBX: 00007f001cbb5fa0 RCX: 00007f001c98e929 [ 199.921678][ T9841] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 199.921688][ T9841] RBP: 00007f001a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.921698][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.921708][ T9841] R13: 0000000000000000 R14: 00007f001cbb5fa0 R15: 00007ffefcd06938 [ 199.921736][ T9841] [ 200.179506][ T5842] Bluetooth: hci6: command tx timeout [ 200.225001][ T9850] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1037'. [ 200.243868][ T9850] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 200.418058][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.476635][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1042'. [ 200.554462][ T9864] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.597913][ T9864] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 200.628368][ T9872] netlink: 'syz.0.1043': attribute type 10 has an invalid length. [ 200.647735][ T9873] netlink: 'syz.5.1046': attribute type 1 has an invalid length. [ 200.652423][ T9872] dummy0: entered promiscuous mode [ 200.661370][ T9872] dummy0: entered allmulticast mode [ 200.669849][ T9872] team0: Port device dummy0 added [ 200.684999][ T9864] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.695501][ T9864] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 200.711808][ T9873] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1046'. [ 200.773447][ T9875] netlink: 'syz.1.1045': attribute type 10 has an invalid length. [ 200.781703][ T9875] team0: Device 0! is up. Set it down before adding it as a team port [ 200.843759][ T9864] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.857137][ T9864] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 200.982448][ T9884] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1048'. [ 200.992995][ T9864] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.002962][ T9864] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 201.055189][ T9884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 201.128726][ T9895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1050'. [ 201.451455][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'. [ 201.568852][ T62] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.587928][ T62] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 201.600412][ T9911] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 201.683376][ T9911] bond3: entered promiscuous mode [ 201.688967][ T9911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.697893][ T59] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.706720][ T59] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 201.801318][ T9916] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.810602][ T9916] bond3: (slave bond4): making interface the new active one [ 201.817985][ T9916] bond4: entered promiscuous mode [ 201.824022][ T9916] bond3: (slave bond4): Enslaving as an active interface with an up link [ 201.836676][ T4209] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.856644][ T4209] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 201.938583][ T4209] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 201.963834][ T4209] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.049892][ T9649] veth0_vlan: entered promiscuous mode [ 202.117109][ T9649] veth1_vlan: entered promiscuous mode [ 202.159660][ T9934] netlink: 'syz.3.1064': attribute type 13 has an invalid length. [ 202.240487][ T5842] Bluetooth: hci6: command tx timeout [ 202.259745][ T9935] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 202.371890][ T9649] veth0_macvtap: entered promiscuous mode [ 202.414167][ T9649] veth1_macvtap: entered promiscuous mode [ 202.503826][ T9949] FAULT_INJECTION: forcing a failure. [ 202.503826][ T9949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.506168][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.548703][ T9949] CPU: 1 UID: 0 PID: 9949 Comm: syz.1.1069 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 202.548729][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.548738][ T9949] Call Trace: [ 202.548745][ T9949] [ 202.548752][ T9949] dump_stack_lvl+0x189/0x250 [ 202.548782][ T9949] ? __pfx____ratelimit+0x10/0x10 [ 202.548803][ T9949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.548825][ T9949] ? __pfx__printk+0x10/0x10 [ 202.548842][ T9949] ? __might_fault+0xb0/0x130 [ 202.548868][ T9949] should_fail_ex+0x414/0x560 [ 202.548894][ T9949] _copy_from_user+0x2d/0xb0 [ 202.548909][ T9949] generic_map_update_batch+0x51b/0x7f0 [ 202.548940][ T9949] ? __pfx_generic_map_update_batch+0x10/0x10 [ 202.548957][ T9949] ? __fget_files+0x2a/0x420 [ 202.548981][ T9949] ? __pfx_generic_map_update_batch+0x10/0x10 [ 202.548997][ T9949] bpf_map_do_batch+0x36c/0x5f0 [ 202.549025][ T9949] __sys_bpf+0x384/0x860 [ 202.549048][ T9949] ? __pfx___sys_bpf+0x10/0x10 [ 202.549150][ T9949] ? ksys_write+0x22a/0x250 [ 202.549175][ T9949] ? __pfx_ksys_write+0x10/0x10 [ 202.549194][ T9949] ? rcu_is_watching+0x15/0xb0 [ 202.549223][ T9949] __x64_sys_bpf+0x7c/0x90 [ 202.549242][ T9949] do_syscall_64+0xfa/0x3b0 [ 202.549260][ T9949] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.549278][ T9949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.549294][ T9949] ? clear_bhb_loop+0x60/0xb0 [ 202.549314][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.549330][ T9949] RIP: 0033:0x7f408718e929 [ 202.549346][ T9949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.549360][ T9949] RSP: 002b:00007f40880d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.549378][ T9949] RAX: ffffffffffffffda RBX: 00007f40873b5fa0 RCX: 00007f408718e929 [ 202.549389][ T9949] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 202.549406][ T9949] RBP: 00007f40880d3090 R08: 0000000000000000 R09: 0000000000000000 [ 202.549416][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.549426][ T9949] R13: 0000000000000000 R14: 00007f40873b5fa0 R15: 00007ffea7dd0f78 [ 202.549452][ T9949] [ 202.552006][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.796606][ T7033] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.841081][ T7033] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.879901][ T7033] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.901853][ T7033] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.996747][ T9961] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 203.097680][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.107182][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.201584][ T7033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.218441][ T7033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.490270][ T9972] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 203.919015][ T9989] FAULT_INJECTION: forcing a failure. [ 203.919015][ T9989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.977878][ T9989] CPU: 1 UID: 0 PID: 9989 Comm: syz.1.1080 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 203.977907][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.977917][ T9989] Call Trace: [ 203.977924][ T9989] [ 203.977932][ T9989] dump_stack_lvl+0x189/0x250 [ 203.977962][ T9989] ? __pfx____ratelimit+0x10/0x10 [ 203.977983][ T9989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.978006][ T9989] ? __pfx__printk+0x10/0x10 [ 203.978024][ T9989] ? __might_fault+0xb0/0x130 [ 203.978052][ T9989] should_fail_ex+0x414/0x560 [ 203.978079][ T9989] _copy_from_user+0x2d/0xb0 [ 203.978096][ T9989] generic_map_update_batch+0x572/0x7f0 [ 203.978126][ T9989] ? __pfx_generic_map_update_batch+0x10/0x10 [ 203.978144][ T9989] ? __fget_files+0x2a/0x420 [ 203.978170][ T9989] ? __pfx_generic_map_update_batch+0x10/0x10 [ 203.978185][ T9989] bpf_map_do_batch+0x36c/0x5f0 [ 203.978212][ T9989] __sys_bpf+0x384/0x860 [ 203.978236][ T9989] ? __pfx___sys_bpf+0x10/0x10 [ 203.978268][ T9989] ? ksys_write+0x22a/0x250 [ 203.978292][ T9989] ? __pfx_ksys_write+0x10/0x10 [ 203.978311][ T9989] ? rcu_is_watching+0x15/0xb0 [ 203.978341][ T9989] __x64_sys_bpf+0x7c/0x90 [ 203.978361][ T9989] do_syscall_64+0xfa/0x3b0 [ 203.978379][ T9989] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.978397][ T9989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.978413][ T9989] ? clear_bhb_loop+0x60/0xb0 [ 203.978434][ T9989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.978448][ T9989] RIP: 0033:0x7f408718e929 [ 203.978478][ T9989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.978496][ T9989] RSP: 002b:00007f40880d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.978515][ T9989] RAX: ffffffffffffffda RBX: 00007f40873b5fa0 RCX: 00007f408718e929 [ 203.978526][ T9989] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 203.978537][ T9989] RBP: 00007f40880d3090 R08: 0000000000000000 R09: 0000000000000000 [ 203.978547][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.978556][ T9989] R13: 0000000000000000 R14: 00007f40873b5fa0 R15: 00007ffea7dd0f78 [ 203.978585][ T9989] [ 204.270503][ T9992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.288253][ T9983] "syz.6.1078" (9983) uses obsolete ecb(arc4) skcipher [ 204.503517][ T9999] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 204.620057][ T9999] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 204.654950][ T9999] veth9: entered promiscuous mode [ 204.665302][ T9999] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 204.770530][T10008] ip6_vti0: Master is either lo or non-ether device [ 204.828689][T10010] __nla_validate_parse: 4 callbacks suppressed [ 204.828709][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1085'. [ 204.931160][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1085'. [ 205.177511][T10026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.781782][T10046] bond6: entered promiscuous mode [ 205.789795][T10046] bond6: entered allmulticast mode [ 205.808490][T10046] 8021q: adding VLAN 0 to HW filter on device bond6 [ 205.876317][T10054] netlink: 'syz.0.1098': attribute type 4 has an invalid length. [ 205.998609][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1100'. [ 206.170207][T10063] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1101'. [ 206.179614][T10063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1101'. [ 206.485296][T10082] !: renamed from dummy0 (while UP) [ 206.719963][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1107'. [ 206.843811][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1110'. [ 208.640239][T10134] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 210.031612][T10149] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1118'. [ 210.168471][T10156] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 210.312081][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 210.318178][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 210.325155][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 210.412839][T10166] netlink: 'syz.1.1122': attribute type 10 has an invalid length. [ 210.502588][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1124'. [ 210.655485][T10173] netlink: 'syz.6.1126': attribute type 1 has an invalid length. [ 210.811680][T10166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.827150][T10166] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 210.844000][T10177] xfrm0: entered promiscuous mode [ 210.859026][T10177] xfrm0: entered allmulticast mode [ 210.985826][T10183] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1130'. [ 210.998847][T10185] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.077710][T10185] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.141627][T10185] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.170392][T10199] netlink: 'syz.5.1135': attribute type 1 has an invalid length. [ 211.184085][T10199] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1135'. [ 211.233960][T10197] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.275931][T10185] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.407736][T10197] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.508878][T10197] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.548441][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.587086][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.660584][T10217] FAULT_INJECTION: forcing a failure. [ 211.660584][T10217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.673922][T10217] CPU: 1 UID: 0 PID: 10217 Comm: syz.3.1140 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 211.673949][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.673960][T10217] Call Trace: [ 211.673967][T10217] [ 211.673975][T10217] dump_stack_lvl+0x189/0x250 [ 211.674005][T10217] ? __pfx____ratelimit+0x10/0x10 [ 211.674025][T10217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.674047][T10217] ? __pfx__printk+0x10/0x10 [ 211.674073][T10217] ? __might_fault+0xb0/0x130 [ 211.674099][T10217] should_fail_ex+0x414/0x560 [ 211.674123][T10217] _copy_from_user+0x2d/0xb0 [ 211.674139][T10217] generic_map_update_batch+0x51b/0x7f0 [ 211.674167][T10217] ? __pfx_generic_map_update_batch+0x10/0x10 [ 211.674184][T10217] ? __fget_files+0x2a/0x420 [ 211.674208][T10217] ? __pfx_generic_map_update_batch+0x10/0x10 [ 211.674224][T10217] bpf_map_do_batch+0x36c/0x5f0 [ 211.674250][T10217] __sys_bpf+0x384/0x860 [ 211.674272][T10217] ? __pfx___sys_bpf+0x10/0x10 [ 211.674304][T10217] ? ksys_write+0x22a/0x250 [ 211.674329][T10217] ? __pfx_ksys_write+0x10/0x10 [ 211.674349][T10217] ? rcu_is_watching+0x15/0xb0 [ 211.674380][T10217] __x64_sys_bpf+0x7c/0x90 [ 211.674398][T10217] do_syscall_64+0xfa/0x3b0 [ 211.674413][T10217] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.674431][T10217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.674447][T10217] ? clear_bhb_loop+0x60/0xb0 [ 211.674467][T10217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.674483][T10217] RIP: 0033:0x7f2186b8e929 [ 211.674498][T10217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.674512][T10217] RSP: 002b:00007f2187aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.674530][T10217] RAX: ffffffffffffffda RBX: 00007f2186db5fa0 RCX: 00007f2186b8e929 [ 211.674541][T10217] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 211.674551][T10217] RBP: 00007f2187aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 211.674562][T10217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.674571][T10217] R13: 0000000000000000 R14: 00007f2186db5fa0 R15: 00007ffe68ea8dc8 [ 211.674599][T10217] [ 211.676659][T10197] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.838038][T10223] netlink: 'syz.3.1141': attribute type 2 has an invalid length. [ 211.937921][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.014938][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.076718][T10227] netlink: 'syz.1.1142': attribute type 23 has an invalid length. [ 212.129468][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.181919][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.208287][ T62] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.262730][ T4209] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.766452][T10256] FAULT_INJECTION: forcing a failure. [ 212.766452][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.780325][T10256] CPU: 1 UID: 0 PID: 10256 Comm: syz.3.1151 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 212.780352][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.780363][T10256] Call Trace: [ 212.780370][T10256] [ 212.780377][T10256] dump_stack_lvl+0x189/0x250 [ 212.780407][T10256] ? __pfx____ratelimit+0x10/0x10 [ 212.780428][T10256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.780452][T10256] ? __pfx__printk+0x10/0x10 [ 212.780471][T10256] ? __might_fault+0xb0/0x130 [ 212.780499][T10256] should_fail_ex+0x414/0x560 [ 212.780529][T10256] _copy_from_user+0x2d/0xb0 [ 212.780547][T10256] generic_map_update_batch+0x572/0x7f0 [ 212.780580][T10256] ? __pfx_generic_map_update_batch+0x10/0x10 [ 212.780598][T10256] ? __fget_files+0x2a/0x420 [ 212.780628][T10256] ? __pfx_generic_map_update_batch+0x10/0x10 [ 212.780645][T10256] bpf_map_do_batch+0x36c/0x5f0 [ 212.780674][T10256] __sys_bpf+0x384/0x860 [ 212.780696][T10256] ? __pfx___sys_bpf+0x10/0x10 [ 212.780730][T10256] ? ksys_write+0x22a/0x250 [ 212.780757][T10256] ? __pfx_ksys_write+0x10/0x10 [ 212.780778][T10256] ? rcu_is_watching+0x15/0xb0 [ 212.780810][T10256] __x64_sys_bpf+0x7c/0x90 [ 212.780831][T10256] do_syscall_64+0xfa/0x3b0 [ 212.780849][T10256] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.780874][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.780891][T10256] ? clear_bhb_loop+0x60/0xb0 [ 212.780913][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.780929][T10256] RIP: 0033:0x7f2186b8e929 [ 212.780945][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.780967][T10256] RSP: 002b:00007f2187aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.780986][T10256] RAX: ffffffffffffffda RBX: 00007f2186db5fa0 RCX: 00007f2186b8e929 [ 212.780999][T10256] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 212.781010][T10256] RBP: 00007f2187aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 212.781020][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.781030][T10256] R13: 0000000000000000 R14: 00007f2186db5fa0 R15: 00007ffe68ea8dc8 [ 212.781059][T10256] [ 213.011786][T10258] netlink: 'syz.6.1152': attribute type 1 has an invalid length. [ 213.215242][T10268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1154'. [ 213.273142][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1154'. [ 213.633310][T10293] openvswitch: netlink: Actions may not be safe on all matching packets [ 213.753144][T10296] netlink: 'syz.3.1161': attribute type 3 has an invalid length. [ 213.790922][T10296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1161'. [ 213.840112][T10298] Cannot find map_set index 0 as target [ 213.917805][T10298] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 214.092391][T10303] FAULT_INJECTION: forcing a failure. [ 214.092391][T10303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.115931][T10303] CPU: 1 UID: 0 PID: 10303 Comm: syz.6.1164 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 214.115958][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.115968][T10303] Call Trace: [ 214.115976][T10303] [ 214.115984][T10303] dump_stack_lvl+0x189/0x250 [ 214.116014][T10303] ? __pfx____ratelimit+0x10/0x10 [ 214.116034][T10303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.116057][T10303] ? __pfx__printk+0x10/0x10 [ 214.116075][T10303] ? __might_fault+0xb0/0x130 [ 214.116103][T10303] should_fail_ex+0x414/0x560 [ 214.116129][T10303] _copy_from_user+0x2d/0xb0 [ 214.116146][T10303] generic_map_update_batch+0x51b/0x7f0 [ 214.116175][T10303] ? __pfx_generic_map_update_batch+0x10/0x10 [ 214.116192][T10303] ? __fget_files+0x2a/0x420 [ 214.116214][T10303] ? __pfx_generic_map_update_batch+0x10/0x10 [ 214.116231][T10303] bpf_map_do_batch+0x36c/0x5f0 [ 214.116259][T10303] __sys_bpf+0x384/0x860 [ 214.116281][T10303] ? __pfx___sys_bpf+0x10/0x10 [ 214.116315][T10303] ? ksys_write+0x22a/0x250 [ 214.116340][T10303] ? __pfx_ksys_write+0x10/0x10 [ 214.116360][T10303] ? rcu_is_watching+0x15/0xb0 [ 214.116391][T10303] __x64_sys_bpf+0x7c/0x90 [ 214.116411][T10303] do_syscall_64+0xfa/0x3b0 [ 214.116429][T10303] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.116448][T10303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.116464][T10303] ? clear_bhb_loop+0x60/0xb0 [ 214.116484][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.116500][T10303] RIP: 0033:0x7f5e77f8e929 [ 214.116516][T10303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.116529][T10303] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.116548][T10303] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 214.116560][T10303] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 214.116571][T10303] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 214.116581][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.116592][T10303] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 214.116627][T10303] [ 214.812237][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1175'. [ 214.836619][T10332] vlan2: entered promiscuous mode [ 214.850184][T10333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.867408][T10332] dummy0: entered promiscuous mode [ 214.936418][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1176'. [ 215.237064][T10353] FAULT_INJECTION: forcing a failure. [ 215.237064][T10353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.279418][T10353] CPU: 1 UID: 0 PID: 10353 Comm: syz.6.1180 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 215.279447][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.279457][T10353] Call Trace: [ 215.279465][T10353] [ 215.279472][T10353] dump_stack_lvl+0x189/0x250 [ 215.279501][T10353] ? __pfx____ratelimit+0x10/0x10 [ 215.279533][T10353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.279558][T10353] ? __pfx__printk+0x10/0x10 [ 215.279576][T10353] ? __might_fault+0xb0/0x130 [ 215.279605][T10353] should_fail_ex+0x414/0x560 [ 215.279631][T10353] _copy_from_user+0x2d/0xb0 [ 215.279649][T10353] generic_map_update_batch+0x572/0x7f0 [ 215.279683][T10353] ? __pfx_generic_map_update_batch+0x10/0x10 [ 215.279701][T10353] ? __fget_files+0x2a/0x420 [ 215.279727][T10353] ? __pfx_generic_map_update_batch+0x10/0x10 [ 215.279744][T10353] bpf_map_do_batch+0x36c/0x5f0 [ 215.279771][T10353] __sys_bpf+0x384/0x860 [ 215.279795][T10353] ? __pfx___sys_bpf+0x10/0x10 [ 215.279825][T10353] ? ksys_write+0x22a/0x250 [ 215.279851][T10353] ? __pfx_ksys_write+0x10/0x10 [ 215.279871][T10353] ? rcu_is_watching+0x15/0xb0 [ 215.279902][T10353] __x64_sys_bpf+0x7c/0x90 [ 215.279923][T10353] do_syscall_64+0xfa/0x3b0 [ 215.279942][T10353] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.279962][T10353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.279978][T10353] ? clear_bhb_loop+0x60/0xb0 [ 215.279998][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.280025][T10353] RIP: 0033:0x7f5e77f8e929 [ 215.280041][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.280055][T10353] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.280075][T10353] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 215.280087][T10353] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 215.280098][T10353] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 215.280109][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.280119][T10353] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 215.280148][T10353] [ 216.035430][T10365] syzkaller0: entered promiscuous mode [ 216.062226][T10378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'. [ 216.064013][T10365] syzkaller0: entered allmulticast mode [ 216.092848][T10379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'. [ 216.138736][T10380] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 217.486496][T10410] netlink: 'syz.3.1197': attribute type 21 has an invalid length. [ 217.515108][T10410] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1197'. [ 217.536018][T10410] netlink: 'syz.3.1197': attribute type 5 has an invalid length. [ 217.548209][T10410] netlink: 'syz.3.1197': attribute type 6 has an invalid length. [ 217.564823][T10407] unsupported nlmsg_type 40 [ 217.609559][T10410] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1197'. [ 217.666886][T10414] xt_socket: unknown flags 0xd0 [ 217.726383][T10416] xt_socket: unknown flags 0xd0 [ 217.767676][T10420] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.842940][T10422] bridge_slave_0: left allmulticast mode [ 217.863362][T10422] bridge_slave_0: left promiscuous mode [ 217.879439][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.929096][T10422] bridge_slave_1: left allmulticast mode [ 217.960243][T10422] bridge_slave_1: left promiscuous mode [ 217.969604][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.062412][T10422] bond0: (slave 0@ÿ): Releasing backup interface [ 218.093099][T10422] bond0: (slave bond_slave_1): Releasing backup interface [ 218.106323][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.122723][T10422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.138100][T10422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.149082][T10422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.177667][T10422] bond1: left allmulticast mode [ 218.190881][T10422] bond1: left promiscuous mode [ 218.209791][T10422] bridge0: port 3(bond1) entered disabled state [ 218.309917][ T5842] Bluetooth: hci6: command 0x0405 tx timeout [ 218.665649][T10454] netlink: 1343 bytes leftover after parsing attributes in process `syz.3.1210'. [ 218.690188][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1211'. [ 218.733796][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1211'. [ 218.772362][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1211'. [ 218.832057][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1211'. [ 219.201989][T10470] netlink: 'syz.5.1215': attribute type 1 has an invalid length. [ 219.219374][T10470] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1215'. [ 219.396943][T10476] FAULT_INJECTION: forcing a failure. [ 219.396943][T10476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.450197][T10476] CPU: 1 UID: 0 PID: 10476 Comm: syz.0.1217 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 219.450226][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.450237][T10476] Call Trace: [ 219.450245][T10476] [ 219.450253][T10476] dump_stack_lvl+0x189/0x250 [ 219.450282][T10476] ? __pfx____ratelimit+0x10/0x10 [ 219.450303][T10476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.450327][T10476] ? __pfx__printk+0x10/0x10 [ 219.450346][T10476] ? __might_fault+0xb0/0x130 [ 219.450375][T10476] should_fail_ex+0x414/0x560 [ 219.450401][T10476] _copy_from_user+0x2d/0xb0 [ 219.450425][T10476] generic_map_update_batch+0x572/0x7f0 [ 219.450458][T10476] ? __pfx_generic_map_update_batch+0x10/0x10 [ 219.450476][T10476] ? __fget_files+0x2a/0x420 [ 219.450502][T10476] ? __pfx_generic_map_update_batch+0x10/0x10 [ 219.450519][T10476] bpf_map_do_batch+0x36c/0x5f0 [ 219.450547][T10476] __sys_bpf+0x384/0x860 [ 219.450580][T10476] ? __pfx___sys_bpf+0x10/0x10 [ 219.450614][T10476] ? ksys_write+0x22a/0x250 [ 219.450641][T10476] ? __pfx_ksys_write+0x10/0x10 [ 219.450662][T10476] ? rcu_is_watching+0x15/0xb0 [ 219.450694][T10476] __x64_sys_bpf+0x7c/0x90 [ 219.450714][T10476] do_syscall_64+0xfa/0x3b0 [ 219.450733][T10476] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.450752][T10476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.450769][T10476] ? clear_bhb_loop+0x60/0xb0 [ 219.450790][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.450807][T10476] RIP: 0033:0x7f001c98e929 [ 219.450822][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.450836][T10476] RSP: 002b:00007f001a7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.450855][T10476] RAX: ffffffffffffffda RBX: 00007f001cbb5fa0 RCX: 00007f001c98e929 [ 219.450867][T10476] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 219.450878][T10476] RBP: 00007f001a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.450888][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.450898][T10476] R13: 0000000000000000 R14: 00007f001cbb5fa0 R15: 00007ffefcd06938 [ 219.450927][T10476] [ 219.739336][T10487] tipc: Enabled bearer , priority 0 [ 219.747410][T10487] syzkaller0: entered promiscuous mode [ 219.753060][T10487] syzkaller0: entered allmulticast mode [ 219.764189][T10487] tipc: Resetting bearer [ 219.866581][T10484] tipc: Resetting bearer [ 219.958511][T10484] tipc: Disabling bearer [ 219.991379][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.020535][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.030245][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.089669][T10500] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 220.109552][T10510] wg1 speed is unknown, defaulting to 1000 [ 220.222296][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.244653][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.279924][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.287566][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.343946][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.452409][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.461669][T10500] wg1 speed is unknown, defaulting to 1000 [ 220.499330][T10515] syz.6.1229 (10515) used greatest stack depth: 15960 bytes left [ 220.532719][T10530] FAULT_INJECTION: forcing a failure. [ 220.532719][T10530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.568967][T10530] CPU: 1 UID: 0 PID: 10530 Comm: syz.5.1236 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 220.568996][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.569006][T10530] Call Trace: [ 220.569014][T10530] [ 220.569022][T10530] dump_stack_lvl+0x189/0x250 [ 220.569052][T10530] ? __pfx____ratelimit+0x10/0x10 [ 220.569080][T10530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.569114][T10530] ? __pfx__printk+0x10/0x10 [ 220.569130][T10530] ? __might_fault+0xb0/0x130 [ 220.569155][T10530] should_fail_ex+0x414/0x560 [ 220.569180][T10530] _copy_from_user+0x2d/0xb0 [ 220.569197][T10530] generic_map_update_batch+0x51b/0x7f0 [ 220.569228][T10530] ? __pfx_generic_map_update_batch+0x10/0x10 [ 220.569245][T10530] ? __fget_files+0x2a/0x420 [ 220.569268][T10530] ? __pfx_generic_map_update_batch+0x10/0x10 [ 220.569284][T10530] bpf_map_do_batch+0x36c/0x5f0 [ 220.569311][T10530] __sys_bpf+0x384/0x860 [ 220.569334][T10530] ? __pfx___sys_bpf+0x10/0x10 [ 220.569367][T10530] ? ksys_write+0x22a/0x250 [ 220.569393][T10530] ? __pfx_ksys_write+0x10/0x10 [ 220.569413][T10530] ? rcu_is_watching+0x15/0xb0 [ 220.569445][T10530] __x64_sys_bpf+0x7c/0x90 [ 220.569464][T10530] do_syscall_64+0xfa/0x3b0 [ 220.569483][T10530] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.569501][T10530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.569517][T10530] ? clear_bhb_loop+0x60/0xb0 [ 220.569537][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.569553][T10530] RIP: 0033:0x7f6fe5b8e929 [ 220.569569][T10530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.569581][T10530] RSP: 002b:00007f6fe39f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 220.569600][T10530] RAX: ffffffffffffffda RBX: 00007f6fe5db5fa0 RCX: 00007f6fe5b8e929 [ 220.569612][T10530] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 220.569622][T10530] RBP: 00007f6fe39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.569632][T10530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.569643][T10530] R13: 0000000000000000 R14: 00007f6fe5db5fa0 R15: 00007fffbad904b8 [ 220.569671][T10530] [ 220.813260][T10531] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 220.855810][T10531] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.876571][T10534] tipc: Enabled bearer , priority 0 [ 220.952721][T10539] netlink: 'syz.5.1240': attribute type 10 has an invalid length. [ 220.979846][T10539] openvswitch: netlink: Flow key attr not present in new flow. [ 220.983720][T10531] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.005656][T10531] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 221.036128][T10538] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.127313][T10542] wg1 speed is unknown, defaulting to 1000 [ 221.162111][T10538] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.273124][T10531] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.283774][T10531] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 221.366427][T10538] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.444731][T10531] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.459416][T10531] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 221.508860][T10538] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.678618][T10544] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.040342][ T7033] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.048666][ T7033] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.144620][T10565] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 222.154457][ T7033] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.174469][ T7033] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.205285][T10566] netlink: 'syz.1.1244': attribute type 10 has an invalid length. [ 222.232181][T10571] sctp: [Deprecated]: syz.5.1246 (pid 10571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.232181][T10571] Use struct sctp_sack_info instead [ 222.295563][T10565] team0: Port device 0! added [ 222.377256][ T7033] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.386697][ T7033] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.413275][T10566] team0: Port device 0! removed [ 222.423092][T10566] bond0: (slave 0!): Enslaving as an active interface with an up link [ 222.517263][ T59] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.551600][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 222.570506][ T59] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 222.603486][ T62] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.620664][ T62] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.679681][ T7033] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.693201][T10581] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 222.704313][T10583] FAULT_INJECTION: forcing a failure. [ 222.704313][T10583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.717725][T10583] CPU: 0 UID: 0 PID: 10583 Comm: syz.1.1250 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 222.717750][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.717759][T10583] Call Trace: [ 222.717767][T10583] [ 222.717774][T10583] dump_stack_lvl+0x189/0x250 [ 222.717805][T10583] ? __pfx____ratelimit+0x10/0x10 [ 222.717826][T10583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.717850][T10583] ? __pfx__printk+0x10/0x10 [ 222.717868][T10583] ? __might_fault+0xb0/0x130 [ 222.717894][T10583] should_fail_ex+0x414/0x560 [ 222.717920][T10583] _copy_from_user+0x2d/0xb0 [ 222.717937][T10583] generic_map_update_batch+0x572/0x7f0 [ 222.717968][T10583] ? __pfx_generic_map_update_batch+0x10/0x10 [ 222.717986][T10583] ? __fget_files+0x2a/0x420 [ 222.718012][T10583] ? __pfx_generic_map_update_batch+0x10/0x10 [ 222.718029][T10583] bpf_map_do_batch+0x36c/0x5f0 [ 222.718056][T10583] __sys_bpf+0x384/0x860 [ 222.718078][T10583] ? __pfx___sys_bpf+0x10/0x10 [ 222.718111][T10583] ? ksys_write+0x22a/0x250 [ 222.718144][T10583] ? __pfx_ksys_write+0x10/0x10 [ 222.718165][T10583] ? rcu_is_watching+0x15/0xb0 [ 222.718195][T10583] __x64_sys_bpf+0x7c/0x90 [ 222.718215][T10583] do_syscall_64+0xfa/0x3b0 [ 222.718232][T10583] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.718252][T10583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.718269][T10583] ? clear_bhb_loop+0x60/0xb0 [ 222.718288][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.718319][T10583] RIP: 0033:0x7f408718e929 [ 222.718335][T10583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.718349][T10583] RSP: 002b:00007f40880d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.718369][T10583] RAX: ffffffffffffffda RBX: 00007f40873b5fa0 RCX: 00007f408718e929 [ 222.718381][T10583] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 222.718393][T10583] RBP: 00007f40880d3090 R08: 0000000000000000 R09: 0000000000000000 [ 222.718403][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.718414][T10583] R13: 0000000000000000 R14: 00007f40873b5fa0 R15: 00007ffea7dd0f78 [ 222.718442][T10583] [ 222.751780][T10574] __nla_validate_parse: 1 callbacks suppressed [ 222.751797][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 223.068409][T10577] bond5 (unregistering): Released all slaves [ 223.313174][T10597] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1253'. [ 223.338081][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1254'. [ 223.497108][T10603] wg1 speed is unknown, defaulting to 1000 [ 223.912168][T10630] wg1 speed is unknown, defaulting to 1000 [ 224.423931][T10603] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 224.785062][T10667] wg1 speed is unknown, defaulting to 1000 [ 224.813028][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1273'. [ 224.890753][T10664] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 273.449563][T10675] xt_TCPMSS: Only works on TCP SYN packets [ 273.862424][ T62] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.892476][ T62] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.958162][ T62] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.985006][ T62] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.176290][T10709] wg1 speed is unknown, defaulting to 1000 [ 274.210256][T10713] FAULT_INJECTION: forcing a failure. [ 274.210256][T10713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.230248][T10713] CPU: 1 UID: 0 PID: 10713 Comm: syz.6.1286 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 274.230276][T10713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.230287][T10713] Call Trace: [ 274.230295][T10713] [ 274.230304][T10713] dump_stack_lvl+0x189/0x250 [ 274.230339][T10713] ? __pfx____ratelimit+0x10/0x10 [ 274.230363][T10713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.230385][T10713] ? __pfx__printk+0x10/0x10 [ 274.230402][T10713] ? __might_fault+0xb0/0x130 [ 274.230430][T10713] should_fail_ex+0x414/0x560 [ 274.230467][T10713] _copy_from_user+0x2d/0xb0 [ 274.230486][T10713] generic_map_update_batch+0x51b/0x7f0 [ 274.230516][T10713] ? __pfx_generic_map_update_batch+0x10/0x10 [ 274.230533][T10713] ? __fget_files+0x2a/0x420 [ 274.230559][T10713] ? __pfx_generic_map_update_batch+0x10/0x10 [ 274.230575][T10713] bpf_map_do_batch+0x36c/0x5f0 [ 274.230602][T10713] __sys_bpf+0x384/0x860 [ 274.230624][T10713] ? __pfx___sys_bpf+0x10/0x10 [ 274.230657][T10713] ? ksys_write+0x22a/0x250 [ 274.230697][T10713] ? __pfx_ksys_write+0x10/0x10 [ 274.230717][T10713] ? rcu_is_watching+0x15/0xb0 [ 274.230750][T10713] __x64_sys_bpf+0x7c/0x90 [ 274.230771][T10713] do_syscall_64+0xfa/0x3b0 [ 274.230789][T10713] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.230811][T10713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.230829][T10713] ? clear_bhb_loop+0x60/0xb0 [ 274.230848][T10713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.230864][T10713] RIP: 0033:0x7f5e77f8e929 [ 274.230881][T10713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.230896][T10713] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.230919][T10713] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 274.230932][T10713] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 274.230943][T10713] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 274.230954][T10713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.230964][T10713] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 274.231000][T10713] [ 274.767642][T10725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1289'. [ 274.812064][T10709] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 274.894027][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1291'. [ 275.675232][T10748] IPVS: Scheduler module ip_vs_sip not found [ 275.728670][T10753] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1296'. [ 275.750391][T10756] FAULT_INJECTION: forcing a failure. [ 275.750391][T10756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.780944][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1296'. [ 275.807331][T10756] CPU: 1 UID: 0 PID: 10756 Comm: syz.3.1297 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 275.807358][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.807369][T10756] Call Trace: [ 275.807376][T10756] [ 275.807385][T10756] dump_stack_lvl+0x189/0x250 [ 275.807414][T10756] ? __pfx____ratelimit+0x10/0x10 [ 275.807435][T10756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.807459][T10756] ? __pfx__printk+0x10/0x10 [ 275.807477][T10756] ? __might_fault+0xb0/0x130 [ 275.807507][T10756] should_fail_ex+0x414/0x560 [ 275.807534][T10756] _copy_from_user+0x2d/0xb0 [ 275.807552][T10756] generic_map_update_batch+0x572/0x7f0 [ 275.807585][T10756] ? __pfx_generic_map_update_batch+0x10/0x10 [ 275.807604][T10756] ? __fget_files+0x2a/0x420 [ 275.807636][T10756] ? __pfx_generic_map_update_batch+0x10/0x10 [ 275.807654][T10756] bpf_map_do_batch+0x36c/0x5f0 [ 275.807683][T10756] __sys_bpf+0x384/0x860 [ 275.807706][T10756] ? __pfx___sys_bpf+0x10/0x10 [ 275.807740][T10756] ? ksys_write+0x22a/0x250 [ 275.807767][T10756] ? __pfx_ksys_write+0x10/0x10 [ 275.807788][T10756] ? rcu_is_watching+0x15/0xb0 [ 275.807818][T10756] __x64_sys_bpf+0x7c/0x90 [ 275.807846][T10756] do_syscall_64+0xfa/0x3b0 [ 275.807865][T10756] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.807884][T10756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.807901][T10756] ? clear_bhb_loop+0x60/0xb0 [ 275.807922][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.807939][T10756] RIP: 0033:0x7f2186b8e929 [ 275.807954][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.807969][T10756] RSP: 002b:00007f2187aa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.807989][T10756] RAX: ffffffffffffffda RBX: 00007f2186db5fa0 RCX: 00007f2186b8e929 [ 275.808002][T10756] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 275.808013][T10756] RBP: 00007f2187aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 275.808024][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.808034][T10756] R13: 0000000000000000 R14: 00007f2186db5fa0 R15: 00007ffe68ea8dc8 [ 275.808063][T10756] [ 276.116816][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.160618][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.167590][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.174536][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.210298][T10764] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 276.306974][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.350840][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.363229][T10766] wg1 speed is unknown, defaulting to 1000 [ 276.381327][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.409430][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.433639][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.462732][T10762] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.593715][T10781] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1306'. [ 276.603699][T10781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'. [ 276.695904][T10785] pim6reg1: entered promiscuous mode [ 276.713620][T10785] pim6reg1: entered allmulticast mode [ 276.806235][ T30] audit: type=1800 audit(1751623861.186:10): pid=10779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1304" name="memory.events" dev="tmpfs" ino=1553 res=0 errno=0 [ 277.026131][ T5842] Bluetooth: hci6: link tx timeout [ 277.032760][ T5842] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 277.042957][ T5842] Bluetooth: hci6: link tx timeout [ 277.048676][ T5842] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.105687][T10796] FAULT_INJECTION: forcing a failure. [ 277.105687][T10796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.133731][T10796] CPU: 1 UID: 0 PID: 10796 Comm: syz.6.1311 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 277.133760][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.133771][T10796] Call Trace: [ 277.133779][T10796] [ 277.133785][T10796] dump_stack_lvl+0x189/0x250 [ 277.133812][T10796] ? __pfx____ratelimit+0x10/0x10 [ 277.133829][T10796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.133847][T10796] ? __pfx__printk+0x10/0x10 [ 277.133862][T10796] ? __might_fault+0xb0/0x130 [ 277.133892][T10796] should_fail_ex+0x414/0x560 [ 277.133913][T10796] _copy_from_user+0x2d/0xb0 [ 277.133930][T10796] generic_map_update_batch+0x51b/0x7f0 [ 277.133955][T10796] ? __pfx_generic_map_update_batch+0x10/0x10 [ 277.133969][T10796] ? __fget_files+0x2a/0x420 [ 277.133988][T10796] ? __pfx_generic_map_update_batch+0x10/0x10 [ 277.134002][T10796] bpf_map_do_batch+0x36c/0x5f0 [ 277.134024][T10796] __sys_bpf+0x384/0x860 [ 277.134042][T10796] ? __pfx___sys_bpf+0x10/0x10 [ 277.134068][T10796] ? ksys_write+0x22a/0x250 [ 277.134089][T10796] ? __pfx_ksys_write+0x10/0x10 [ 277.134105][T10796] ? rcu_is_watching+0x15/0xb0 [ 277.134130][T10796] __x64_sys_bpf+0x7c/0x90 [ 277.134146][T10796] do_syscall_64+0xfa/0x3b0 [ 277.134160][T10796] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.134176][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.134189][T10796] ? clear_bhb_loop+0x60/0xb0 [ 277.134205][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.134218][T10796] RIP: 0033:0x7f5e77f8e929 [ 277.134233][T10796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.134245][T10796] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.134261][T10796] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 277.134271][T10796] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 277.134280][T10796] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 277.134288][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.134296][T10796] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 277.134319][T10796] [ 277.422043][T10771] delete_channel: no stack [ 277.451292][T10799] netlink: 'syz.6.1312': attribute type 64 has an invalid length. [ 277.493371][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1312'. [ 277.830573][T10804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1314'. [ 277.915498][T10801] wg1 speed is unknown, defaulting to 1000 [ 277.937642][T10817] netlink: 'syz.3.1314': attribute type 12 has an invalid length. [ 278.051597][T10824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1319'. [ 278.096778][T10804] wg1 speed is unknown, defaulting to 1000 [ 278.276108][T10835] SET target dimension over the limit! [ 278.316187][T10840] netlink: 'syz.6.1321': attribute type 15 has an invalid length. [ 278.351876][T10818] syzkaller1: entered promiscuous mode [ 278.357402][T10818] syzkaller1: entered allmulticast mode [ 278.366609][T10832] netlink: 'syz.6.1321': attribute type 10 has an invalid length. [ 278.374694][T10832] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 278.435689][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1321'. [ 279.110147][ T5842] Bluetooth: hci6: command 0x0405 tx timeout [ 279.139842][T10861] wg1 speed is unknown, defaulting to 1000 [ 279.363634][T10870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.564360][T10856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.627025][T10899] netlink: 'syz.5.1336': attribute type 10 has an invalid length. [ 279.678599][T10870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.748355][T10899] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.059023][T10924] __nla_validate_parse: 1 callbacks suppressed [ 280.059042][T10924] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1343'. [ 280.606731][T10938] netlink: 'syz.5.1347': attribute type 1 has an invalid length. [ 280.761095][T10938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.825105][T10945] bond4: (slave bridge1): making interface the new active one [ 280.902125][T10945] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 280.984298][T10938] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 281.010740][T10956] sctp: [Deprecated]: syz.6.1351 (pid 10956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.010740][T10956] Use struct sctp_sack_info instead [ 281.149912][T10962] wg1 speed is unknown, defaulting to 1000 [ 281.274900][ T5835] Bluetooth: hci6: command 0x0405 tx timeout [ 281.496835][ T4209] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.536729][ T4209] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.578711][ T4209] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.602109][ T4209] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.990645][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 282.219814][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1363'. [ 282.532550][T11016] wg1 speed is unknown, defaulting to 1000 [ 282.686644][T11022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1369'. [ 282.720604][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1369'. [ 283.253312][T11045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'. [ 283.381936][T11051] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1375'. [ 283.622877][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 283.688853][T11060] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 283.898453][T11072] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1381'. [ 284.161768][T11076] !: renamed from dummy0 (while UP) [ 284.224428][T11078] tipc: Enabled bearer , priority 0 [ 284.282972][T11078] tipc: Resetting bearer [ 284.335300][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 284.399019][T11078] tipc: Disabling bearer [ 284.438824][T11084] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 284.458140][T11087] netlink: 'syz.0.1387': attribute type 5 has an invalid length. [ 284.613018][T11096] erspan0: entered promiscuous mode [ 284.650153][T11096] batman_adv: batadv0: Adding interface: macvlan2 [ 284.656622][T11096] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 284.759942][T11096] batman_adv: batadv0: Interface activated: macvlan2 [ 284.775071][T11086] wg1 speed is unknown, defaulting to 1000 [ 284.992756][T11113] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 285.016391][T11113] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 285.197315][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 285.273460][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 285.544249][T11126] team0: Port device vlan0 removed [ 286.744644][T11153] FAULT_INJECTION: forcing a failure. [ 286.744644][T11153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.758758][T11153] CPU: 1 UID: 0 PID: 11153 Comm: syz.6.1401 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 286.758786][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.758797][T11153] Call Trace: [ 286.758804][T11153] [ 286.758824][T11153] dump_stack_lvl+0x189/0x250 [ 286.758853][T11153] ? __pfx____ratelimit+0x10/0x10 [ 286.758873][T11153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.758896][T11153] ? __pfx__printk+0x10/0x10 [ 286.758915][T11153] ? __might_fault+0xb0/0x130 [ 286.758942][T11153] should_fail_ex+0x414/0x560 [ 286.758969][T11153] _copy_from_user+0x2d/0xb0 [ 286.758986][T11153] generic_map_update_batch+0x572/0x7f0 [ 286.759017][T11153] ? __pfx_generic_map_update_batch+0x10/0x10 [ 286.759034][T11153] ? __fget_files+0x2a/0x420 [ 286.759057][T11153] ? __pfx_generic_map_update_batch+0x10/0x10 [ 286.759073][T11153] bpf_map_do_batch+0x36c/0x5f0 [ 286.759098][T11153] __sys_bpf+0x384/0x860 [ 286.759122][T11153] ? __pfx___sys_bpf+0x10/0x10 [ 286.759153][T11153] ? ksys_write+0x22a/0x250 [ 286.759177][T11153] ? __pfx_ksys_write+0x10/0x10 [ 286.759196][T11153] ? rcu_is_watching+0x15/0xb0 [ 286.759226][T11153] __x64_sys_bpf+0x7c/0x90 [ 286.759244][T11153] do_syscall_64+0xfa/0x3b0 [ 286.759263][T11153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.759278][T11153] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.759294][T11153] ? clear_bhb_loop+0x60/0xb0 [ 286.759313][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.759329][T11153] RIP: 0033:0x7f5e77f8e929 [ 286.759344][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.759356][T11153] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.759372][T11153] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 286.759383][T11153] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 286.759392][T11153] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 286.759401][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.759422][T11153] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 286.759447][T11153] [ 288.476683][T11157] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.583687][T11161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.651769][T11157] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.710498][T11161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.725612][T11174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1406'. [ 288.748560][T11157] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.827390][T11161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.866765][T11181] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 288.878539][T11157] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.916205][T11185] netlink: 'syz.0.1408': attribute type 10 has an invalid length. [ 288.934292][T11185] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1408'. [ 288.982070][T11161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.025752][T11181] bridge0: port 3(team0) entered disabled state [ 289.034437][T11181] team0: left allmulticast mode [ 289.039476][T11181] team_slave_0: left allmulticast mode [ 289.051008][T11181] team_slave_1: left allmulticast mode [ 289.066958][T11181] batadv1: left allmulticast mode [ 289.077852][T11181] batadv2: left allmulticast mode [ 289.085154][T11181] dummy0: left allmulticast mode [ 289.092008][T11181] team0: left promiscuous mode [ 289.097430][T11181] team_slave_0: left promiscuous mode [ 289.106597][T11181] team_slave_1: left promiscuous mode [ 289.113867][T11186] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1409'. [ 289.126043][T11181] batadv1: left promiscuous mode [ 289.131411][T11181] batadv2: left promiscuous mode [ 289.136835][T11181] dummy0: left promiscuous mode [ 289.142484][T11181] bridge0: port 3(team0) entered disabled state [ 289.158546][T11181] batman_adv: batadv0: Adding interface: team0 [ 289.164996][T11181] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.191295][T11181] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 289.204023][T11185] team0: entered promiscuous mode [ 289.214798][T11185] team_slave_0: entered promiscuous mode [ 289.221268][T11185] team_slave_1: entered promiscuous mode [ 289.227203][T11185] batadv1: entered promiscuous mode [ 289.232759][T11185] batadv2: entered promiscuous mode [ 289.238218][T11185] dummy0: entered promiscuous mode [ 289.259970][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.273581][T11185] batman_adv: batadv0: Interface activated: team0 [ 289.281266][T11185] batman_adv: batadv0: Interface deactivated: team0 [ 289.287994][T11185] batman_adv: batadv0: Removing interface: team0 [ 289.295648][T11185] bridge0: port 3(team0) entered blocking state [ 289.302577][T11185] bridge0: port 3(team0) entered disabled state [ 289.308982][T11185] team0: entered allmulticast mode [ 289.314330][T11185] team_slave_0: entered allmulticast mode [ 289.321310][T11185] team_slave_1: entered allmulticast mode [ 289.327044][T11185] batadv1: entered allmulticast mode [ 289.332597][T11185] batadv2: entered allmulticast mode [ 289.337890][T11185] dummy0: entered allmulticast mode [ 289.345188][T11185] bridge0: port 3(team0) entered blocking state [ 289.351596][T11185] bridge0: port 3(team0) entered forwarding state [ 289.444485][ T62] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.483855][T11188] wg1 speed is unknown, defaulting to 1000 [ 289.513639][T11198] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 289.575995][ T62] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.613162][ T62] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.675305][ T13] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.746009][ T4209] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.951218][T11219] nbd: socks must be embedded in a SOCK_ITEM attr [ 289.965412][T11219] block nbd2: shutting down sockets [ 289.982433][T11219] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1415'. [ 289.995492][T11219] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1415'. [ 289.999729][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1416'. [ 290.022903][T11221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.025343][ T4209] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.030225][T11221] IPv6: NLM_F_CREATE should be set when creating new route [ 290.051593][ T4209] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.072682][ T4209] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.364801][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1420'. [ 290.428655][T11234] vlan0: entered promiscuous mode [ 290.435004][T11234] erspan0: entered promiscuous mode [ 290.470033][T11242] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1421'. [ 290.489220][T11236] wg1 speed is unknown, defaulting to 1000 [ 290.496584][T11239] syzkaller0: entered promiscuous mode [ 290.502032][T11245] netlink: 'syz.3.1423': attribute type 1 has an invalid length. [ 290.546373][T11239] syzkaller0: entered allmulticast mode [ 290.587247][T11245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.661306][T11242] team0: left allmulticast mode [ 290.666211][T11242] team_slave_0: left allmulticast mode [ 290.683736][T11242] team_slave_1: left allmulticast mode [ 290.695844][T11242] batadv1: left allmulticast mode [ 290.733416][T11242] batadv2: left allmulticast mode [ 290.738883][T11242] dummy0: left allmulticast mode [ 290.744462][T11242] bridge0: port 3(team0) entered disabled state [ 290.756603][T11242] dummy0: left promiscuous mode [ 290.777614][T11242] team0: Port device dummy0 removed [ 290.811096][T11242] bridge_slave_0: left allmulticast mode [ 290.816904][T11242] bridge_slave_0: left promiscuous mode [ 290.823027][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.844612][T11258] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1426'. [ 290.854286][T11242] bridge_slave_1: left allmulticast mode [ 290.861107][T11242] bridge_slave_1: left promiscuous mode [ 290.867007][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.900177][T11242] bond0: (slave bond_slave_0): Releasing backup interface [ 290.915152][T11242] bond0: (slave bond_slave_1): Releasing backup interface [ 290.928786][T11242] team_slave_0: left promiscuous mode [ 290.953202][T11242] team0: Port device team_slave_0 removed [ 290.960757][T11242] team_slave_1: left promiscuous mode [ 290.981531][T11242] team0: Port device team_slave_1 removed [ 290.987899][T11242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.018281][T11242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.028388][T11242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.035933][T11242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.053848][T11242] batadv1: left promiscuous mode [ 291.074920][T11242] team0: Port device batadv1 removed [ 291.082907][T11242] batadv2: left promiscuous mode [ 291.098235][T11242] team0: Port device batadv2 removed [ 291.138736][T11242] bond3: (slave bond4): Releasing backup interface [ 291.145738][T11242] bond4: left promiscuous mode [ 291.194902][T11245] gretap1: entered promiscuous mode [ 291.216739][ T5897] wg1 speed is unknown, defaulting to 1000 [ 291.336777][T11265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1428'. [ 291.476635][T11269] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.498024][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1427'. [ 291.556305][T11277] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1431'. [ 291.568267][T11277] xt_hashlimit: size too large, truncated to 1048576 [ 291.580832][T11277] xt_hashlimit: overflow, try lower: 3/0 [ 291.619801][T11269] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.689014][T11280] wg1 speed is unknown, defaulting to 1000 [ 291.697706][T11282] netlink: 'syz.3.1434': attribute type 4 has an invalid length. [ 291.705660][T11282] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1434'. [ 291.719677][T11282] : renamed from bond0 (while UP) [ 291.827794][T11269] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.965662][T11289] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 291.973943][T11289] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1435'. [ 292.023778][T11269] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.210881][T11298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.218216][T11298] IPv6: NLM_F_CREATE should be set when creating new route [ 292.225503][T11298] IPv6: NLM_F_CREATE should be set when creating new route [ 292.416825][T11305] netlink: 'syz.1.1438': attribute type 1 has an invalid length. [ 292.439476][T11305] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1438'. [ 292.626705][T11305] netlink: 'syz.1.1438': attribute type 4 has an invalid length. [ 292.654432][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1438'. [ 293.059370][ T59] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.059960][ T4209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.089709][T11317] wg1 speed is unknown, defaulting to 1000 [ 293.260283][T11328] netlink: 'syz.3.1446': attribute type 21 has an invalid length. [ 293.268133][T11328] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.299521][ T4209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.309866][T11328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.317086][T11328] IPv6: NLM_F_CREATE should be set when creating new route [ 293.324464][T11328] IPv6: NLM_F_CREATE should be set when creating new route [ 293.331735][T11328] IPv6: NLM_F_CREATE should be set when creating new route [ 293.396954][ T4209] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.445996][ T4209] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.475786][ T4209] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.905425][ T5897] IPVS: starting estimator thread 0... [ 294.009792][T11364] IPVS: using max 36 ests per chain, 86400 per kthread [ 294.192060][T11381] wg1 speed is unknown, defaulting to 1000 [ 294.610847][T11394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.649254][T11394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.765022][T11394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.799364][T11394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.907896][T11394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.918077][T11394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.954903][T11381] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 294.987565][T11394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 294.998221][T11394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 295.093747][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.120052][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.156654][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.177719][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.200782][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.217805][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.237353][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 295.246766][ T36] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.356004][T11411] FAULT_INJECTION: forcing a failure. [ 295.356004][T11411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.379237][T11411] CPU: 1 UID: 0 PID: 11411 Comm: syz.5.1467 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 295.379266][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.379277][T11411] Call Trace: [ 295.379284][T11411] [ 295.379293][T11411] dump_stack_lvl+0x189/0x250 [ 295.379323][T11411] ? __pfx____ratelimit+0x10/0x10 [ 295.379345][T11411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.379369][T11411] ? __pfx__printk+0x10/0x10 [ 295.379389][T11411] ? __might_fault+0xb0/0x130 [ 295.379415][T11411] should_fail_ex+0x414/0x560 [ 295.379443][T11411] _copy_from_user+0x2d/0xb0 [ 295.379461][T11411] generic_map_update_batch+0x572/0x7f0 [ 295.379491][T11411] ? __pfx_generic_map_update_batch+0x10/0x10 [ 295.379508][T11411] ? __fget_files+0x2a/0x420 [ 295.379531][T11411] ? __pfx_generic_map_update_batch+0x10/0x10 [ 295.379548][T11411] bpf_map_do_batch+0x36c/0x5f0 [ 295.379576][T11411] __sys_bpf+0x384/0x860 [ 295.379599][T11411] ? __pfx___sys_bpf+0x10/0x10 [ 295.379632][T11411] ? ksys_write+0x22a/0x250 [ 295.379658][T11411] ? __pfx_ksys_write+0x10/0x10 [ 295.379677][T11411] ? rcu_is_watching+0x15/0xb0 [ 295.379709][T11411] __x64_sys_bpf+0x7c/0x90 [ 295.379730][T11411] do_syscall_64+0xfa/0x3b0 [ 295.379749][T11411] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.379769][T11411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.379787][T11411] ? clear_bhb_loop+0x60/0xb0 [ 295.379807][T11411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.379824][T11411] RIP: 0033:0x7f6fe5b8e929 [ 295.379840][T11411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.379854][T11411] RSP: 002b:00007f6fe39f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.379874][T11411] RAX: ffffffffffffffda RBX: 00007f6fe5db5fa0 RCX: 00007f6fe5b8e929 [ 295.379887][T11411] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 295.379898][T11411] RBP: 00007f6fe39f6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.379909][T11411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.379937][T11411] R13: 0000000000000000 R14: 00007f6fe5db5fa0 R15: 00007fffbad904b8 [ 295.379967][T11411] [ 295.947384][ T5882] IPVS: starting estimator thread 0... [ 296.073144][T11426] IPVS: using max 33 ests per chain, 79200 per kthread [ 296.267495][T11445] __nla_validate_parse: 4 callbacks suppressed [ 296.267515][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.374303][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.439890][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.466699][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.501052][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.523745][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.540147][T11453] FAULT_INJECTION: forcing a failure. [ 296.540147][T11453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.578174][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.592375][T11453] CPU: 1 UID: 0 PID: 11453 Comm: syz.6.1478 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 296.592415][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.592426][T11453] Call Trace: [ 296.592433][T11453] [ 296.592441][T11453] dump_stack_lvl+0x189/0x250 [ 296.592470][T11453] ? __pfx____ratelimit+0x10/0x10 [ 296.592489][T11453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.592510][T11453] ? __pfx__printk+0x10/0x10 [ 296.592528][T11453] ? __might_fault+0xb0/0x130 [ 296.592555][T11453] should_fail_ex+0x414/0x560 [ 296.592590][T11453] _copy_from_user+0x2d/0xb0 [ 296.592607][T11453] generic_map_update_batch+0x51b/0x7f0 [ 296.592638][T11453] ? __pfx_generic_map_update_batch+0x10/0x10 [ 296.592655][T11453] ? __fget_files+0x2a/0x420 [ 296.592679][T11453] ? __pfx_generic_map_update_batch+0x10/0x10 [ 296.592696][T11453] bpf_map_do_batch+0x36c/0x5f0 [ 296.592723][T11453] __sys_bpf+0x384/0x860 [ 296.592746][T11453] ? __pfx___sys_bpf+0x10/0x10 [ 296.592780][T11453] ? ksys_write+0x22a/0x250 [ 296.592806][T11453] ? __pfx_ksys_write+0x10/0x10 [ 296.592826][T11453] ? rcu_is_watching+0x15/0xb0 [ 296.592857][T11453] __x64_sys_bpf+0x7c/0x90 [ 296.592877][T11453] do_syscall_64+0xfa/0x3b0 [ 296.592895][T11453] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.592914][T11453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.592931][T11453] ? clear_bhb_loop+0x60/0xb0 [ 296.592952][T11453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.592968][T11453] RIP: 0033:0x7f5e77f8e929 [ 296.592982][T11453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.592997][T11453] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.593015][T11453] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 296.593027][T11453] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 296.593038][T11453] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 296.593055][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.593064][T11453] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 296.593092][T11453] [ 296.593770][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.802124][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1479'. [ 296.809581][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 296.933622][T11466] geneve1: entered promiscuous mode [ 296.951358][T11466] geneve1: left promiscuous mode [ 297.221331][T11481] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.431923][T11481] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.518797][T11496] FAULT_INJECTION: forcing a failure. [ 297.518797][T11496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.547813][T11496] CPU: 0 UID: 0 PID: 11496 Comm: syz.6.1490 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 297.547843][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.547853][T11496] Call Trace: [ 297.547861][T11496] [ 297.547867][T11496] dump_stack_lvl+0x189/0x250 [ 297.547896][T11496] ? __pfx____ratelimit+0x10/0x10 [ 297.547916][T11496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.547939][T11496] ? __pfx__printk+0x10/0x10 [ 297.547957][T11496] ? __might_fault+0xb0/0x130 [ 297.547985][T11496] should_fail_ex+0x414/0x560 [ 297.548012][T11496] _copy_from_user+0x2d/0xb0 [ 297.548029][T11496] generic_map_update_batch+0x572/0x7f0 [ 297.548060][T11496] ? __pfx_generic_map_update_batch+0x10/0x10 [ 297.548079][T11496] ? __fget_files+0x2a/0x420 [ 297.548105][T11496] ? __pfx_generic_map_update_batch+0x10/0x10 [ 297.548122][T11496] bpf_map_do_batch+0x36c/0x5f0 [ 297.548151][T11496] __sys_bpf+0x384/0x860 [ 297.548175][T11496] ? __pfx___sys_bpf+0x10/0x10 [ 297.548209][T11496] ? ksys_write+0x22a/0x250 [ 297.548235][T11496] ? __pfx_ksys_write+0x10/0x10 [ 297.548255][T11496] ? rcu_is_watching+0x15/0xb0 [ 297.548286][T11496] __x64_sys_bpf+0x7c/0x90 [ 297.548306][T11496] do_syscall_64+0xfa/0x3b0 [ 297.548324][T11496] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.548343][T11496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.548359][T11496] ? clear_bhb_loop+0x60/0xb0 [ 297.548379][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.548396][T11496] RIP: 0033:0x7f5e77f8e929 [ 297.548412][T11496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.548426][T11496] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.548445][T11496] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 297.548457][T11496] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 297.548468][T11496] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 297.548479][T11496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.548489][T11496] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 297.548518][T11496] [ 297.932098][T11481] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.037440][T11481] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.195835][ T4209] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.241754][ T4209] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.279404][ T59] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.311681][ T4209] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.324930][T11520] syzkaller1: entered promiscuous mode [ 298.358829][T11516] wg1 speed is unknown, defaulting to 1000 [ 298.367451][T11520] syzkaller1: entered allmulticast mode [ 298.636568][T11534] netlink: 'syz.1.1502': attribute type 4 has an invalid length. [ 299.011527][T11554] FAULT_INJECTION: forcing a failure. [ 299.011527][T11554] name failslab, interval 1, probability 0, space 0, times 0 [ 299.034134][T11554] CPU: 0 UID: 0 PID: 11554 Comm: syz.3.1510 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 299.034160][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.034170][T11554] Call Trace: [ 299.034177][T11554] [ 299.034184][T11554] dump_stack_lvl+0x189/0x250 [ 299.034211][T11554] ? __pfx____ratelimit+0x10/0x10 [ 299.034230][T11554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.034254][T11554] ? __pfx__printk+0x10/0x10 [ 299.034275][T11554] ? __pfx___might_resched+0x10/0x10 [ 299.034301][T11554] ? fs_reclaim_acquire+0x7d/0x100 [ 299.034325][T11554] should_fail_ex+0x414/0x560 [ 299.034350][T11554] should_failslab+0xa8/0x100 [ 299.034370][T11554] __kmalloc_noprof+0xcb/0x4f0 [ 299.034385][T11554] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 299.034425][T11554] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 299.034454][T11554] genl_family_rcv_msg_doit+0xb8/0x300 [ 299.034483][T11554] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 299.034508][T11554] ? rcu_is_watching+0x15/0xb0 [ 299.034532][T11554] ? apparmor_capable+0x137/0x1b0 [ 299.034559][T11554] ? bpf_lsm_capable+0x9/0x20 [ 299.034575][T11554] ? security_capable+0x7e/0x2e0 [ 299.034604][T11554] genl_rcv_msg+0x60e/0x790 [ 299.034633][T11554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.034651][T11554] ? ref_tracker_free+0x63a/0x7d0 [ 299.034672][T11554] ? __pfx_l2tp_nl_cmd_session_get+0x10/0x10 [ 299.034693][T11554] ? __pfx_ref_tracker_free+0x10/0x10 [ 299.034726][T11554] netlink_rcv_skb+0x208/0x470 [ 299.034745][T11554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.034768][T11554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.034803][T11554] ? down_read+0x1ad/0x2e0 [ 299.034825][T11554] genl_rcv+0x28/0x40 [ 299.034845][T11554] netlink_unicast+0x75b/0x8d0 [ 299.034876][T11554] netlink_sendmsg+0x805/0xb30 [ 299.034910][T11554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.034942][T11554] ? aa_sock_msg_perm+0x94/0x160 [ 299.034965][T11554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.034984][T11554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.035004][T11554] __sock_sendmsg+0x21c/0x270 [ 299.035027][T11554] ____sys_sendmsg+0x505/0x830 [ 299.035057][T11554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.035086][T11554] ? import_iovec+0x74/0xa0 [ 299.035106][T11554] ___sys_sendmsg+0x21f/0x2a0 [ 299.035129][T11554] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.035188][T11554] ? __fget_files+0x2a/0x420 [ 299.035205][T11554] ? __fget_files+0x3a0/0x420 [ 299.035234][T11554] __x64_sys_sendmsg+0x19b/0x260 [ 299.035259][T11554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.035291][T11554] ? __pfx_ksys_write+0x10/0x10 [ 299.035313][T11554] ? rcu_is_watching+0x15/0xb0 [ 299.035343][T11554] ? do_syscall_64+0xbe/0x3b0 [ 299.035367][T11554] do_syscall_64+0xfa/0x3b0 [ 299.035386][T11554] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.035411][T11554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.035428][T11554] ? clear_bhb_loop+0x60/0xb0 [ 299.035448][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.035464][T11554] RIP: 0033:0x7f2186b8e929 [ 299.035480][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.035493][T11554] RSP: 002b:00007f2187aa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.035512][T11554] RAX: ffffffffffffffda RBX: 00007f2186db5fa0 RCX: 00007f2186b8e929 [ 299.035524][T11554] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 299.035535][T11554] RBP: 00007f2187aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 299.035545][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.035553][T11554] R13: 0000000000000000 R14: 00007f2186db5fa0 R15: 00007ffe68ea8dc8 [ 299.035583][T11554] [ 299.792015][T11563] veth0: entered promiscuous mode [ 299.812676][T11575] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 299.861094][T11575] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 299.900150][T11575] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 299.936011][T11564] veth0 (unregistering): left promiscuous mode [ 300.011308][T11577] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 300.024810][T11577] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 300.042324][T11577] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 300.056442][T11567] wg1 speed is unknown, defaulting to 1000 [ 300.144005][T11581] lo: entered promiscuous mode [ 300.156160][T11581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.217410][T11588] bridge0: entered allmulticast mode [ 300.272700][T11593] addrtype_mt_checkentry_v1: 23 callbacks suppressed [ 300.272731][T11593] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 300.401034][T11602] FAULT_INJECTION: forcing a failure. [ 300.401034][T11602] name failslab, interval 1, probability 0, space 0, times 0 [ 300.414703][T11602] CPU: 1 UID: 0 PID: 11602 Comm: syz.6.1522 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 300.414728][T11602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.414744][T11602] Call Trace: [ 300.414750][T11602] [ 300.414757][T11602] dump_stack_lvl+0x189/0x250 [ 300.414783][T11602] ? __pfx____ratelimit+0x10/0x10 [ 300.414800][T11602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.414821][T11602] ? __pfx__printk+0x10/0x10 [ 300.414845][T11602] ? __pfx___might_resched+0x10/0x10 [ 300.414865][T11602] ? fs_reclaim_acquire+0x7d/0x100 [ 300.414889][T11602] should_fail_ex+0x414/0x560 [ 300.414915][T11602] should_failslab+0xa8/0x100 [ 300.414935][T11602] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 300.414960][T11602] ? __alloc_skb+0x112/0x2d0 [ 300.414986][T11602] __alloc_skb+0x112/0x2d0 [ 300.415010][T11602] l2tp_nl_cmd_session_get+0x40/0x1f0 [ 300.415033][T11602] genl_family_rcv_msg_doit+0x215/0x300 [ 300.415066][T11602] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.415105][T11602] ? bpf_lsm_capable+0x9/0x20 [ 300.415119][T11602] ? security_capable+0x7e/0x2e0 [ 300.415148][T11602] genl_rcv_msg+0x60e/0x790 [ 300.415179][T11602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.415200][T11602] ? ref_tracker_free+0x63a/0x7d0 [ 300.415220][T11602] ? __pfx_l2tp_nl_cmd_session_get+0x10/0x10 [ 300.415239][T11602] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.415271][T11602] netlink_rcv_skb+0x208/0x470 [ 300.415293][T11602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.415318][T11602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.415358][T11602] ? down_read+0x1ad/0x2e0 [ 300.415382][T11602] genl_rcv+0x28/0x40 [ 300.415404][T11602] netlink_unicast+0x75b/0x8d0 [ 300.415434][T11602] netlink_sendmsg+0x805/0xb30 [ 300.415466][T11602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.415496][T11602] ? aa_sock_msg_perm+0x94/0x160 [ 300.415519][T11602] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.415539][T11602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.415560][T11602] __sock_sendmsg+0x21c/0x270 [ 300.415583][T11602] ____sys_sendmsg+0x505/0x830 [ 300.415612][T11602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.415650][T11602] ? import_iovec+0x74/0xa0 [ 300.415672][T11602] ___sys_sendmsg+0x21f/0x2a0 [ 300.415697][T11602] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.415761][T11602] ? __fget_files+0x2a/0x420 [ 300.415779][T11602] ? __fget_files+0x3a0/0x420 [ 300.415809][T11602] __x64_sys_sendmsg+0x19b/0x260 [ 300.415835][T11602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.415868][T11602] ? __pfx_ksys_write+0x10/0x10 [ 300.415889][T11602] ? rcu_is_watching+0x15/0xb0 [ 300.415920][T11602] ? do_syscall_64+0xbe/0x3b0 [ 300.415949][T11602] do_syscall_64+0xfa/0x3b0 [ 300.415967][T11602] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.415986][T11602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.416003][T11602] ? clear_bhb_loop+0x60/0xb0 [ 300.416025][T11602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.416041][T11602] RIP: 0033:0x7f5e77f8e929 [ 300.416057][T11602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.416071][T11602] RSP: 002b:00007f5e78e83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.416090][T11602] RAX: ffffffffffffffda RBX: 00007f5e781b5fa0 RCX: 00007f5e77f8e929 [ 300.416103][T11602] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 300.416113][T11602] RBP: 00007f5e78e83090 R08: 0000000000000000 R09: 0000000000000000 [ 300.416125][T11602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.416135][T11602] R13: 0000000000000000 R14: 00007f5e781b5fa0 R15: 00007ffd7b836a38 [ 300.416166][T11602] [ 300.977638][T11616] netlink: 'syz.6.1525': attribute type 10 has an invalid length. [ 300.997152][T11610] wg1 speed is unknown, defaulting to 1000 [ 301.013416][T11618] netlink: 'syz.6.1525': attribute type 10 has an invalid length. [ 301.077737][T11618] team0: entered promiscuous mode [ 301.085471][T11618] team_slave_0: entered promiscuous mode [ 301.100828][T11618] team_slave_1: entered promiscuous mode [ 301.121332][T11618] bridge0: port 3(team0) entered blocking state [ 301.128388][T11618] bridge0: port 3(team0) entered disabled state [ 301.134957][T11618] team0: entered allmulticast mode [ 301.140125][T11618] team_slave_0: entered allmulticast mode [ 301.145847][T11618] team_slave_1: entered allmulticast mode [ 301.159141][T11618] bridge0: port 3(team0) entered blocking state [ 301.165537][T11618] bridge0: port 3(team0) entered forwarding state [ 301.183174][T11616] bridge0: port 3(team0) entered disabled state [ 301.205730][T11616] team0: left allmulticast mode [ 301.222285][T11616] team_slave_0: left allmulticast mode [ 301.238079][T11616] team_slave_1: left allmulticast mode [ 301.267426][T11616] team0: left promiscuous mode [ 301.287912][T11616] team_slave_0: left promiscuous mode [ 301.303855][T11616] team_slave_1: left promiscuous mode [ 301.318275][T11616] bridge0: port 3(team0) entered disabled state [ 301.338498][T11616] batman_adv: batadv0: Adding interface: team0 [ 301.345433][T11616] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.372286][T11616] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 301.413751][T11626] netlink: 'syz.0.1527': attribute type 21 has an invalid length. [ 301.468865][T11629] __nla_validate_parse: 92 callbacks suppressed [ 301.468883][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 301.530880][T11626] netlink: 'syz.0.1527': attribute type 6 has an invalid length. [ 301.548799][T11626] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1527'. [ 301.599577][ T30] audit: type=1800 audit(1751623885.976:11): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1528" name="memory.events" dev="tmpfs" ino=847 res=0 errno=0 [ 301.623534][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 301.765714][T11625] wg1 speed is unknown, defaulting to 1000 [ 302.168792][T11650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1532'. [ 302.271230][T11659] xt_bpf: check failed: parse error [ 302.379772][T11648] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 302.393052][T11648] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 302.418916][T11648] bond0 (unregistering): Released all slaves [ 302.695169][T11673] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1536'. [ 302.729954][T11675] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1535'. [ 303.091646][T11693] bridge0: port 1(gretap0) entered blocking state [ 303.104731][T11695] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1538'. [ 303.128641][T11693] bridge0: port 1(gretap0) entered disabled state [ 303.148312][T11693] gretap0: entered allmulticast mode [ 303.157739][T11693] gretap0: entered promiscuous mode [ 303.324455][T11707] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 303.329336][T11708] wg1 speed is unknown, defaulting to 1000 [ 303.481192][T11716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 303.596412][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1549'. [ 303.647343][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1549'. [ 304.037675][T11732] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 304.171295][T11746] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.357372][T11746] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.453874][T11746] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.573581][T11746] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.671250][T11765] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 304.738200][T11760] syzkaller0: entered promiscuous mode [ 304.745567][T11760] syzkaller0: entered allmulticast mode [ 304.834662][ T3555] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.874216][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.906794][ T3555] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.964209][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.998053][T11779] netlink: zone id is out of range [ 305.020735][T11779] netlink: zone id is out of range [ 305.035088][T11779] netlink: zone id is out of range [ 305.098931][T11779] netlink: zone id is out of range [ 305.164347][T11786] wg1 speed is unknown, defaulting to 1000 [ 305.210206][T11779] netlink: zone id is out of range [ 305.269583][T11779] netlink: zone id is out of range [ 305.274886][T11779] netlink: zone id is out of range [ 305.437549][T11779] netlink: zone id is out of range [ 305.470726][T11779] netlink: zone id is out of range [ 305.489836][T11779] netlink: zone id is out of range [ 305.497702][T11779] netlink: zone id is out of range [ 305.523756][T11779] netlink: zone id is out of range [ 305.539236][T11779] netlink: zone id is out of range [ 305.545247][T11779] netlink: zone id is out of range [ 307.494565][T11812] syz.0.1572: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.516927][T11812] CPU: 1 UID: 0 PID: 11812 Comm: syz.0.1572 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 307.516955][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.516973][T11812] Call Trace: [ 307.516982][T11812] [ 307.516990][T11812] dump_stack_lvl+0x189/0x250 [ 307.517026][T11812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.517053][T11812] ? __pfx__printk+0x10/0x10 [ 307.517073][T11812] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.517094][T11812] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.517115][T11812] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 307.517138][T11812] warn_alloc+0x214/0x310 [ 307.517166][T11812] ? __pfx_warn_alloc+0x10/0x10 [ 307.517196][T11812] ? __get_vm_area_node+0x28f/0x300 [ 307.517215][T11812] ? veth_dev_init+0x363/0x570 [ 307.517243][T11812] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 307.517295][T11812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.517310][T11812] ? __kasan_kmalloc_large+0x1c/0xa0 [ 307.517332][T11812] ? rcu_is_watching+0x15/0xb0 [ 307.517355][T11812] ? veth_dev_init+0x363/0x570 [ 307.517372][T11812] ? veth_dev_init+0x363/0x570 [ 307.517391][T11812] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 307.517409][T11812] ? veth_dev_init+0x363/0x570 [ 307.517439][T11812] veth_dev_init+0x363/0x570 [ 307.517469][T11812] register_netdevice+0x6bc/0x1ae0 [ 307.517505][T11812] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 307.517528][T11812] ? __pfx_register_netdevice+0x10/0x10 [ 307.517557][T11812] ? __asan_memset+0x22/0x50 [ 307.517578][T11812] ? dev_addr_mod+0x2ce/0x3d0 [ 307.517602][T11812] ? netif_inherit_tso_max+0x1ec/0x340 [ 307.517629][T11812] veth_newlink+0x42f/0xa50 [ 307.517653][T11812] ? __pfx_veth_newlink+0x10/0x10 [ 307.517691][T11812] ? __pfx_css_rstat_updated+0x10/0x10 [ 307.517784][T11812] ? validate_linkmsg+0x765/0x950 [ 307.517813][T11812] ? __pfx_veth_newlink+0x10/0x10 [ 307.517838][T11812] rtnl_newlink_create+0x30d/0xb00 [ 307.517867][T11812] ? __mutex_lock+0x51b/0xe80 [ 307.517901][T11812] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 307.517921][T11812] ? rtnl_newlink+0x8db/0x1c70 [ 307.517944][T11812] ? __pfx___mutex_lock+0x10/0x10 [ 307.517972][T11812] ? ns_capable+0x8a/0xf0 [ 307.518003][T11812] rtnl_newlink+0x16d6/0x1c70 [ 307.518026][T11812] ? netlink_sendmsg+0x805/0xb30 [ 307.518062][T11812] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.518167][T11812] ? __lock_acquire+0xab9/0xd20 [ 307.518220][T11812] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.518240][T11812] rtnetlink_rcv_msg+0x7cc/0xb70 [ 307.518266][T11812] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 307.518286][T11812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.518310][T11812] ? ref_tracker_free+0x63a/0x7d0 [ 307.518331][T11812] ? __copy_skb_header+0xa7/0x550 [ 307.518359][T11812] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.518392][T11812] netlink_rcv_skb+0x208/0x470 [ 307.518415][T11812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.518438][T11812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.518475][T11812] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.518496][T11812] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.518523][T11812] netlink_unicast+0x75b/0x8d0 [ 307.518556][T11812] netlink_sendmsg+0x805/0xb30 [ 307.518587][T11812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.518613][T11812] ? aa_sock_msg_perm+0x94/0x160 [ 307.518636][T11812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.518657][T11812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.518678][T11812] __sock_sendmsg+0x21c/0x270 [ 307.518702][T11812] ____sys_sendmsg+0x505/0x830 [ 307.518733][T11812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.518768][T11812] ? import_iovec+0x74/0xa0 [ 307.518789][T11812] ___sys_sendmsg+0x21f/0x2a0 [ 307.518816][T11812] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.518880][T11812] ? __fget_files+0x2a/0x420 [ 307.518905][T11812] ? __fget_files+0x3a0/0x420 [ 307.518937][T11812] __x64_sys_sendmsg+0x19b/0x260 [ 307.518966][T11812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.519003][T11812] ? rcu_is_watching+0x15/0xb0 [ 307.519035][T11812] ? do_syscall_64+0xbe/0x3b0 [ 307.519060][T11812] do_syscall_64+0xfa/0x3b0 [ 307.519077][T11812] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.519095][T11812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.519118][T11812] ? clear_bhb_loop+0x60/0xb0 [ 307.519139][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.519156][T11812] RIP: 0033:0x7f001c98e929 [ 307.519173][T11812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.519188][T11812] RSP: 002b:00007f001a7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.519206][T11812] RAX: ffffffffffffffda RBX: 00007f001cbb6080 RCX: 00007f001c98e929 [ 307.519219][T11812] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000006 [ 307.519231][T11812] RBP: 00007f001ca10b39 R08: 0000000000000000 R09: 0000000000000000 [ 307.519242][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.519253][T11812] R13: 0000000000000000 R14: 00007f001cbb6080 R15: 00007ffefcd06938 [ 307.519285][T11812] [ 308.025224][T11812] Mem-Info: [ 308.028377][T11812] active_anon:8267 inactive_anon:0 isolated_anon:0 [ 308.028377][T11812] active_file:1552 inactive_file:39915 isolated_file:0 [ 308.028377][T11812] unevictable:768 dirty:98 writeback:0 [ 308.028377][T11812] slab_reclaimable:12622 slab_unreclaimable:121278 [ 308.028377][T11812] mapped:42520 shmem:1367 pagetables:1067 [ 308.028377][T11812] sec_pagetables:0 bounce:0 [ 308.028377][T11812] kernel_misc_reclaimable:0 [ 308.028377][T11812] free:1278456 free_pcp:17553 free_cma:0 [ 308.074971][T11812] Node 0 active_anon:33068kB inactive_anon:0kB active_file:6208kB inactive_file:159460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170080kB dirty:392kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12980kB pagetables:4148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.113887][T11812] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.153103][T11812] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.188749][T11812] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 308.196552][T11812] Node 0 DMA32 free:1192676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33124kB inactive_anon:0kB active_file:6208kB inactive_file:157624kB unevictable:1536kB writepending:392kB present:3129332kB managed:2560924kB mlocked:0kB bounce:0kB free_pcp:53304kB local_pcp:20440kB free_cma:0kB [ 308.239357][T11812] lowmem_reserve[]: 0 0 1 1 1 [ 308.244141][T11812] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1836kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 308.273399][T11812] lowmem_reserve[]: 0 0 0 0 0 [ 308.278133][T11812] Node 1 Normal free:3905784kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16704kB local_pcp:6592kB free_cma:0kB [ 308.315595][T11812] lowmem_reserve[]: 0 0 0 0 0 [ 308.320395][T11812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.333442][T11812] Node 0 DMA32: 287*4kB (UME) 107*8kB (UME) 97*16kB (ME) 378*32kB (UM) 161*64kB (UME) 51*128kB (UE) 30*256kB (UM) 31*512kB (UM) 24*1024kB (UM) 13*2048kB (UME) 265*4096kB (UM) = 1192676kB [ 308.352170][T11812] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 308.364107][T11812] Node 1 Normal: 194*4kB (UME) 36*8kB (UME) 37*16kB (UME) 136*32kB (UME) 40*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3905784kB [ 308.382490][T11812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.392510][T11812] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 308.405532][T11812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.418397][T11812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.435389][T11812] 42831 total pagecache pages [ 308.441141][T11812] 0 pages in swap cache [ 308.445297][T11812] Free swap = 124996kB [ 308.449648][T11812] Total swap = 124996kB [ 308.453800][T11812] 2097051 pages RAM [ 308.457591][T11812] 0 pages HighMem/MovableOnly [ 308.462950][T11812] 424714 pages reserved [ 308.467105][T11812] 0 pages cma reserved [ 308.855207][T11827] geneve1: entered promiscuous mode [ 308.862588][T11827] geneve1: left promiscuous mode [ 309.402380][T11859] __nla_validate_parse: 7 callbacks suppressed [ 309.402399][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 309.499427][T11866] netlink: 'syz.3.1585': attribute type 2 has an invalid length. [ 309.538283][T11866] k›*·]‘: entered promiscuous mode [ 309.755748][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 309.813362][T11885] netlink: 'syz.0.1592': attribute type 10 has an invalid length. [ 309.963188][T11895] netlink: 'syz.6.1596': attribute type 42 has an invalid length. [ 310.049026][T11902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1596'. [ 310.092262][T11889] batadv_slave_0: entered promiscuous mode [ 310.131416][T11897] tipc: Enabled bearer , priority 0 [ 310.144818][T11897] syzkaller0: entered promiscuous mode [ 310.151604][T11897] syzkaller0: entered allmulticast mode [ 310.160881][T11884] batadv_slave_0: left promiscuous mode [ 310.206530][T11897] tipc: Resetting bearer [ 310.228784][T11896] tipc: Resetting bearer [ 310.280902][T11896] tipc: Disabling bearer [ 310.487225][T11914] wg1 speed is unknown, defaulting to 1000 [ 310.623119][T11926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1605'. [ 310.825449][T11925] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'. [ 310.844419][T11925] net_ratelimit: 2 callbacks suppressed [ 310.844445][T11925] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 310.990683][ T3555] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.024333][ T3555] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.113844][ T3555] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.211355][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1606'. [ 311.298221][ T3555] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.458222][T11963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1612'. [ 311.468570][T11963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1612'. [ 311.582747][T11968] netlink: 'syz.6.1615': attribute type 12 has an invalid length. [ 311.590962][T11968] netlink: 'syz.6.1615': attribute type 29 has an invalid length. [ 311.599283][T11968] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1615'. [ 311.608348][T11968] netlink: 59 bytes leftover after parsing attributes in process `syz.6.1615'. [ 311.641964][T11968] pim6reg1: entered promiscuous mode [ 311.647305][T11968] pim6reg1: entered allmulticast mode [ 311.649511][ T30] audit: type=1800 audit(1751623896.016:12): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1606" name="cgroup.controllers" dev="tmpfs" ino=898 res=0 errno=0 [ 311.882124][T11974] bond0: entered promiscuous mode [ 311.888254][T11974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.986350][T11994] netlink: 'syz.6.1624': attribute type 12 has an invalid length. [ 312.057516][T11974] bond0 (unregistering): Released all slaves [ 312.102250][T11972] bond0: entered promiscuous mode [ 312.107603][T11972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.233544][T11972] bond0 (unregistering): Released all slaves [ 312.340571][T11995] netlink: 'syz.6.1624': attribute type 12 has an invalid length. [ 312.423266][T12002] wg1 speed is unknown, defaulting to 1000 [ 312.709531][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 312.776988][T12012] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 312.825368][T12018] xt_hashlimit: size too large, truncated to 1048576 [ 312.868587][T12022] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 313.047178][T12022] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.305976][T12033] bond5: (slave veth5): Enslaving as an active interface with a down link [ 313.439856][T12022] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 313.455791][T12022] bond5: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 313.519339][ T5842] Bluetooth: hci6: command 0x0405 tx timeout [ 313.644980][T12057] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 313.679532][T12058] netlink: 'syz.1.1636': attribute type 15 has an invalid length. [ 313.820549][T12065] bond5: (slave veth5): Releasing active interface [ 314.002556][T12079] netlink: 'syz.0.1642': attribute type 2 has an invalid length. [ 314.276843][T12061] wg1 speed is unknown, defaulting to 1000 [ 314.967679][T12120] x_tables: duplicate underflow at hook 1 [ 314.988969][T12120] x_tables: duplicate underflow at hook 1 [ 315.309550][T12147] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 315.825989][T12177] __nla_validate_parse: 13 callbacks suppressed [ 315.826007][T12177] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1666'. [ 316.097259][T12197] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.150431][T12197] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.382882][T12209] netlink: 'syz.1.1676': attribute type 2 has an invalid length. [ 316.522464][T12197] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.554744][T12197] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.576660][T12216] netlink: 'syz.6.1679': attribute type 1 has an invalid length. [ 316.594643][T12216] netlink: 'syz.6.1679': attribute type 1 has an invalid length. [ 316.627959][T12197] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.653777][T12197] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.808585][T12197] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.832731][T12197] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.026654][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1686'. [ 317.032909][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.055531][ T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.093014][T12232] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1686'. [ 317.110020][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.124883][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1686'. [ 317.134891][ T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.143418][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.153537][ T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.167876][ T4209] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.176955][ T4209] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.293579][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1690'. [ 317.549091][T12265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.592377][T12268] netlink: 'syz.3.1696': attribute type 11 has an invalid length. [ 317.598176][T12265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.608715][T12268] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1696'. [ 317.615989][T12267] wg1 speed is unknown, defaulting to 1000 [ 317.651007][T12265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.220499][T12294] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1702'. [ 319.324639][T12334] wg1 speed is unknown, defaulting to 1000 [ 319.446519][T12347] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 320.246500][T12382] wg1 speed is unknown, defaulting to 1000 [ 320.422341][T12389] wg1: entered promiscuous mode [ 320.443756][T12389] wg1: entered allmulticast mode [ 320.492249][T12389] netlink: 'syz.5.1731': attribute type 1 has an invalid length. [ 321.075390][T12417] netlink: 'syz.5.1734': attribute type 1 has an invalid length. [ 321.456432][T12430] wg1 speed is unknown, defaulting to 1000 [ 321.638710][T12437] wg1 speed is unknown, defaulting to 1000 [ 321.760842][T12449] netlink: 'syz.1.1742': attribute type 2 has an invalid length. [ 321.768844][T12449] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1742'. [ 321.837153][T12451] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 321.903671][T12451] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 322.211108][T12466] wg1 speed is unknown, defaulting to 1000 [ 322.337065][T12474] netlink: 'syz.6.1748': attribute type 10 has an invalid length. [ 322.398892][T12474] team0: Port device 0! added [ 322.415097][T12476] netlink: 'syz.6.1748': attribute type 10 has an invalid length. [ 322.447804][T12476] team0: Port device 0! removed [ 323.390237][T12484] netlink: 'syz.6.1750': attribute type 21 has an invalid length. [ 323.398736][T12484] netlink: 'syz.6.1750': attribute type 6 has an invalid length. [ 323.455921][T12484] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1750'. [ 323.497191][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1750'. [ 323.535133][T12483] wg1 speed is unknown, defaulting to 1000 [ 323.542356][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1751'. [ 323.565943][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1750'. [ 323.572634][T12491] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 323.587634][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1751'. [ 323.620220][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1750'. [ 323.641458][T12490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 323.648442][T12489] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1750'. [ 323.723721][T12495] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 323.859905][T12493] dummy0: entered promiscuous mode [ 323.992781][T12495] bond0: entered promiscuous mode [ 323.998559][T12495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.059914][T12496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.068223][T12496] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 324.089066][T12496] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 324.112359][T12496] bond0: (slave vcan1): making interface the new active one [ 324.120152][T12496] vcan1: entered promiscuous mode [ 324.126843][T12496] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 325.013161][T12536] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1763'. [ 325.230599][T12539] wg1 speed is unknown, defaulting to 1000 [ 325.431360][T12543] wg1 speed is unknown, defaulting to 1000 [ 325.846926][T12550] netlink: 'syz.1.1766': attribute type 11 has an invalid length. [ 325.987442][T12552] wg1 speed is unknown, defaulting to 1000 [ 326.411429][T12557] x_tables: duplicate underflow at hook 2 [ 326.534882][T12559] bridge_slave_0: entered promiscuous mode [ 326.631282][ T31] INFO: task syz.4.854:9162 blocked for more than 143 seconds. [ 326.639361][ T31] Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 [ 326.647092][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.657735][ T31] task:syz.4.854 state:D stack:25352 pid:9162 tgid:9161 ppid:5838 task_flags:0x400140 flags:0x00004004 [ 326.670400][ T31] Call Trace: [ 326.681208][ T31] [ 326.684173][ T31] __schedule+0x16f5/0x4d00 [ 326.688701][ T31] ? __lock_acquire+0xab9/0xd20 [ 326.694353][ T31] ? schedule+0x165/0x360 [ 326.698709][ T31] ? __pfx___schedule+0x10/0x10 [ 326.707179][ T31] ? schedule+0x91/0x360 [ 326.713823][ T31] schedule+0x165/0x360 [ 326.718015][ T31] schedule_preempt_disabled+0x13/0x30 [ 326.723946][ T31] __mutex_lock+0x724/0xe80 [ 326.730171][ T31] ? __mutex_lock+0x51b/0xe80 [ 326.735084][ T31] ? nfsd_nl_listener_set_doit+0x137/0x1690 [ 326.741322][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 326.746727][ T31] ? __asan_memset+0x22/0x50 [ 326.752376][ T31] ? ____sys_sendmsg+0x505/0x830 [ 326.756842][T12567] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 326.763973][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 326.770119][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 326.775387][ T31] nfsd_nl_listener_set_doit+0x137/0x1690 [ 326.781314][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 326.787086][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 326.794047][ T31] ? __nla_parse+0x40/0x60 [ 326.798467][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 326.804887][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 326.810514][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.816603][ T31] ? bpf_lsm_capable+0x9/0x20 [ 326.821933][ T31] ? security_capable+0x7e/0x2e0 [ 326.826890][ T31] genl_rcv_msg+0x60e/0x790 [ 326.832018][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.837411][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 326.844360][ T31] netlink_rcv_skb+0x208/0x470 [ 326.850036][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.855566][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.860949][ T31] ? down_read+0x1ad/0x2e0 [ 326.865617][ T31] genl_rcv+0x28/0x40 [ 326.869843][ T31] netlink_unicast+0x75b/0x8d0 [ 326.874625][ T31] netlink_sendmsg+0x805/0xb30 [ 326.880123][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.885428][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 326.890404][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.895675][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.900973][ T31] __sock_sendmsg+0x21c/0x270 [ 326.905993][ T31] ____sys_sendmsg+0x505/0x830 [ 326.911300][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.916611][ T31] ? import_iovec+0x74/0xa0 [ 326.921474][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 326.926351][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.939696][ T31] ? __fget_files+0x2a/0x420 [ 326.944310][ T31] ? __fget_files+0x3a0/0x420 [ 326.948996][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 326.961925][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.978880][ T31] ? rcu_is_watching+0x15/0xb0 [ 326.988306][ T31] ? do_syscall_64+0xbe/0x3b0 [ 326.993464][ T31] do_syscall_64+0xfa/0x3b0 [ 326.998212][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.003929][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.010311][ T31] ? clear_bhb_loop+0x60/0xb0 [ 327.015206][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.021396][ T31] RIP: 0033:0x7fb89498e929 [ 327.026001][ T31] RSP: 002b:00007fb895865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.036055][ T31] RAX: ffffffffffffffda RBX: 00007fb894bb5fa0 RCX: 00007fb89498e929 [ 327.044345][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 327.068524][ T31] RBP: 00007fb894a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 327.087244][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.104571][ T31] R13: 0000000000000000 R14: 00007fb894bb5fa0 R15: 00007ffe07b08e38 [ 327.119430][ T31] [ 327.122834][ T31] [ 327.122834][ T31] Showing all locks held in the system: [ 327.133283][ T31] 1 lock held by khungtaskd/31: [ 327.139655][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 327.153268][ T31] 3 locks held by kworker/u8:2/36: [ 327.158710][ T31] 2 locks held by kworker/u8:7/3555: [ 327.164663][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 327.168594][T12561] wg1 speed is unknown, defaulting to 1000 [ 327.176842][ T31] #1: ffffc9000c287bc0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 327.195535][ T31] 2 locks held by getty/5592: [ 327.227269][ T31] #0: ffff88802ffaf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 327.246689][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 327.257659][ T31] 3 locks held by kworker/0:3/5834: [ 327.263069][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 327.274679][ T31] #1: ffffc9000410fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 327.286752][ T31] #2: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 327.363291][ T31] 2 locks held by syz.2.626/8354: [ 327.368577][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 327.384749][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 327.397349][ T31] 2 locks held by syz.4.854/9162: [ 327.407802][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 327.425279][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 327.438751][ T31] 2 locks held by syz.0.1724/12358: [ 327.456191][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 327.482274][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 327.497562][ T31] 2 locks held by syz.5.1746/12464: [ 327.506098][ T31] #0: ffffffff8f5772f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 327.522934][ T31] #1: ffffffff8e41cdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 327.556250][ T31] 1 lock held by syz.3.1768/12561: [ 327.574313][ T31] #0: ffffffff8f505930 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 327.605641][ T31] 1 lock held by syz.3.1768/12566: [ 327.617482][ T31] #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 327.636359][ T31] 1 lock held by syz.6.1771/12563: [ 327.642175][ T31] #0: ffffffff8f512588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 327.679153][ T31] [ 327.681531][ T31] ============================================= [ 327.681531][ T31] [ 327.693168][ T31] NMI backtrace for cpu 0 [ 327.693186][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 327.693207][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.693217][ T31] Call Trace: [ 327.693224][ T31] [ 327.693236][ T31] dump_stack_lvl+0x189/0x250 [ 327.693262][ T31] ? __wake_up_klogd+0xd9/0x110 [ 327.693290][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.693314][ T31] ? __pfx__printk+0x10/0x10 [ 327.693345][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 327.693375][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 327.693396][ T31] ? _printk+0xcf/0x120 [ 327.693419][ T31] ? __pfx__printk+0x10/0x10 [ 327.693439][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.693469][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 327.693496][ T31] watchdog+0xfee/0x1030 [ 327.693521][ T31] ? watchdog+0x1de/0x1030 [ 327.693551][ T31] kthread+0x70e/0x8a0 [ 327.693573][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.693593][ T31] ? __pfx_kthread+0x10/0x10 [ 327.693613][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.693631][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.693648][ T31] ? __pfx_kthread+0x10/0x10 [ 327.693667][ T31] ret_from_fork+0x3fc/0x770 [ 327.693693][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 327.693721][ T31] ? __switch_to_asm+0x39/0x70 [ 327.693737][ T31] ? __switch_to_asm+0x33/0x70 [ 327.693753][ T31] ? __pfx_kthread+0x10/0x10 [ 327.693772][ T31] ret_from_fork_asm+0x1a/0x30 [ 327.693804][ T31] [ 327.693834][ T31] Sending NMI from CPU 0 to CPUs 1: [ 327.856841][ C1] NMI backtrace for cpu 1 [ 327.856857][ C1] CPU: 1 UID: 0 PID: 12571 Comm: syz.6.1771 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 327.856876][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.856886][ C1] RIP: 0010:reg_bounds_sync+0x16a/0xa00 [ 327.856940][ C1] Code: 44 89 73 50 48 8d 7b 54 49 89 f8 49 c1 e8 03 41 0f b6 0c 28 84 c9 48 89 7c 24 08 0f 85 5a 06 00 00 8b 0f 09 d0 39 c1 0f 42 c1 <4c> 89 44 24 50 41 0f b6 0c 28 84 c9 0f 85 73 06 00 00 89 43 54 4c [ 327.856953][ C1] RSP: 0018:ffffc90003ceecc0 EFLAGS: 00000293 [ 327.856967][ C1] RAX: 00000000e7030006 RBX: ffff88804af7f000 RCX: 00000000e7030006 [ 327.856978][ C1] RDX: 00000000ffffffff RSI: 000000007fffffff RDI: ffff88804af7f054 [ 327.856989][ C1] RBP: dffffc0000000000 R08: 1ffff110095efe0a R09: ffff88804af7f000 [ 327.857000][ C1] R10: 000000000000000c R11: 0000000000000002 R12: 0000000000000000 [ 327.857009][ C1] R13: ffff88804af7f018 R14: 0000000000000006 R15: ffff88804af7f020 [ 327.857020][ C1] FS: 00007f5e78e206c0(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 327.857033][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.857044][ C1] CR2: 00007f673a386e9c CR3: 000000007c9be000 CR4: 00000000003526f0 [ 327.857057][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.857066][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.857075][ C1] Call Trace: [ 327.857081][ C1] [ 327.857100][ C1] adjust_reg_min_max_vals+0x50ce/0x8370 [ 327.857132][ C1] ? check_cond_jmp_op+0x17ec/0x2340 [ 327.857154][ C1] ? __pfx_adjust_reg_min_max_vals+0x10/0x10 [ 327.857183][ C1] ? __check_reg_arg+0x21f/0x4a0 [ 327.857212][ C1] do_check+0x763a/0xd450 [ 327.857270][ C1] ? __pfx_do_check+0x10/0x10 [ 327.857286][ C1] ? __asan_memset+0x22/0x50 [ 327.857305][ C1] ? init_func_state+0x1ddf/0x2d20 [ 327.857328][ C1] do_check_common+0x168d/0x20b0 [ 327.857356][ C1] bpf_check+0x13664/0x19c60 [ 327.857379][ C1] ? __lock_acquire+0xab9/0xd20 [ 327.857405][ C1] ? __lock_acquire+0xab9/0xd20 [ 327.857434][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 327.857457][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 327.857476][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 327.857500][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 327.857523][ C1] ? __pfx_bpf_check+0x10/0x10 [ 327.857541][ C1] ? __lock_acquire+0xab9/0xd20 [ 327.857567][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 327.857580][ C1] ? css_rstat_updated+0x1a5/0xca0 [ 327.857604][ C1] ? pcpu_block_update+0x3c6/0x8d0 [ 327.857628][ C1] ? __lock_acquire+0xab9/0xd20 [ 327.857654][ C1] ? ktime_get_with_offset+0x8c/0x2a0 [ 327.857675][ C1] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 327.857690][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.857707][ C1] ? ktime_get_with_offset+0x8c/0x2a0 [ 327.857722][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 327.857737][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 327.857761][ C1] ? bpf_obj_name_cpy+0x194/0x1e0 [ 327.857774][ C1] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 327.857787][ C1] ? security_bpf_prog_load+0x7f/0x310 [ 327.857808][ C1] bpf_prog_load+0x1318/0x1930 [ 327.857832][ C1] ? __pfx_bpf_prog_load+0x10/0x10 [ 327.857863][ C1] ? bpf_lsm_bpf+0x9/0x20 [ 327.857882][ C1] ? security_bpf+0x7e/0x300 [ 327.857898][ C1] __sys_bpf+0x5f1/0x860 [ 327.857916][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 327.857945][ C1] ? rcu_is_watching+0x15/0xb0 [ 327.857965][ C1] __x64_sys_bpf+0x7c/0x90 [ 327.857980][ C1] do_syscall_64+0xfa/0x3b0 [ 327.857997][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.858012][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.858027][ C1] ? clear_bhb_loop+0x60/0xb0 [ 327.858043][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.858057][ C1] RIP: 0033:0x7f5e77f8e929 [ 327.858071][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.858083][ C1] RSP: 002b:00007f5e78e20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.858098][ C1] RAX: ffffffffffffffda RBX: 00007f5e781b6240 RCX: 00007f5e77f8e929 [ 327.858109][ C1] RDX: 0000000000000094 RSI: 0000200000000a40 RDI: 0000000000000005 [ 327.858118][ C1] RBP: 00007f5e78010b39 R08: 0000000000000000 R09: 0000000000000000 [ 327.858128][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.858141][ C1] R13: 0000000000000000 R14: 00007f5e781b6240 R15: 00007ffd7b836a38 [ 327.858160][ C1] [ 327.859298][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 327.859314][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 327.859336][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.859346][ T31] Call Trace: [ 327.859354][ T31] [ 327.859362][ T31] dump_stack_lvl+0x99/0x250 [ 327.859390][ T31] ? __asan_memcpy+0x40/0x70 [ 327.859413][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.859437][ T31] ? __pfx__printk+0x10/0x10 [ 327.859468][ T31] panic+0x2db/0x790 [ 327.859497][ T31] ? __pfx_panic+0x10/0x10 [ 327.859519][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 327.859548][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 327.859570][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 327.859602][ T31] watchdog+0x102d/0x1030 [ 327.859625][ T31] ? watchdog+0x1de/0x1030 [ 327.859654][ T31] kthread+0x70e/0x8a0 [ 327.859676][ T31] ? __pfx_watchdog+0x10/0x10 [ 327.859696][ T31] ? __pfx_kthread+0x10/0x10 [ 327.859717][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.859735][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.859750][ T31] ? __pfx_kthread+0x10/0x10 [ 327.859769][ T31] ret_from_fork+0x3fc/0x770 [ 327.859794][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 327.859822][ T31] ? __switch_to_asm+0x39/0x70 [ 327.859838][ T31] ? __switch_to_asm+0x33/0x70 [ 327.859854][ T31] ? __pfx_kthread+0x10/0x10 [ 327.859873][ T31] ret_from_fork_asm+0x1a/0x30 [ 327.859905][ T31] [ 328.448589][ T31] Kernel Offset: disabled [ 328.452894][ T31] Rebooting in 86400 seconds..