last executing test programs: 2m44.938925581s ago: executing program 0 (id=1643): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x8, 0x0, 0x0, 0x4000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xffffffffbffffffc}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="88010000210000022dbd7000ffdbdf250e8000000000000500000000000000aaac0000000000000007000000080000004e2100004e21000f0200030000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x188}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x703d2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c0c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x3c}}, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2m43.953392444s ago: executing program 0 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) 2m43.80567737s ago: executing program 0 (id=1654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0xe, 0x0, @void}, 0x10) 2m43.588884343s ago: executing program 0 (id=1657): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010e29bd7000ffdbdf251a00000005009200770000000700210061610000100022800400008004"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0xfc, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xec, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3"]}]}, 0xfc}, {0x0}], 0x2}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 2m42.74955438s ago: executing program 0 (id=1666): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 2m42.461962977s ago: executing program 0 (id=1669): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="c0189fba04116d326974a1a48d61c8cc8350a1af2d06ef0b3eee9b18a8d72eafd706a7103d79536deef6ba5487c2a4bed7b4f1b4d0bfba2cc8feea39ecd4c849ebf500f4a1723167b5eff353e49796352782a4b7bd7bccd32069b796f7e277c5b9b88c928449c01b1418249ee839bb43a4706c804cb634c18914e25b5d12f0af6855d8040bc16c2e9bd052f972131090d305a4aa9bd734381c56dcd27704e9089e23f01a09867c11d7e9c97c4f274e249d7df1190d9574a8e444145ef2172b4f1639fa07b0cb34a49485970f3376e0ca2d54e30ca63217", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r13, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r11, 0xffffffffffffffff, 0x17, 0x1, r12, @void, @value=r12, @void, @void, r14}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r9, r10, 0x34, 0x0, @val=@tcx={@void, @value=r15, @void, @void, r14}}, 0x1c) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)='\'\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r16, r5, 0x30, 0x24, 0x0, @void, @void, @void, @value=r17, r14}, 0x20) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180), &(0x7f0000000240)=0x4) 2m27.267990241s ago: executing program 32 (id=1669): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="c0189fba04116d326974a1a48d61c8cc8350a1af2d06ef0b3eee9b18a8d72eafd706a7103d79536deef6ba5487c2a4bed7b4f1b4d0bfba2cc8feea39ecd4c849ebf500f4a1723167b5eff353e49796352782a4b7bd7bccd32069b796f7e277c5b9b88c928449c01b1418249ee839bb43a4706c804cb634c18914e25b5d12f0af6855d8040bc16c2e9bd052f972131090d305a4aa9bd734381c56dcd27704e9089e23f01a09867c11d7e9c97c4f274e249d7df1190d9574a8e444145ef2172b4f1639fa07b0cb34a49485970f3376e0ca2d54e30ca63217", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r13, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r11, 0xffffffffffffffff, 0x17, 0x1, r12, @void, @value=r12, @void, @void, r14}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r9, r10, 0x34, 0x0, @val=@tcx={@void, @value=r15, @void, @void, r14}}, 0x1c) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)='\'\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r16, r5, 0x30, 0x24, 0x0, @void, @void, @void, @value=r17, r14}, 0x20) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180), &(0x7f0000000240)=0x4) 46.346056042s ago: executing program 1 (id=2963): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80, 0x0) unshare(0x6020400) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7976, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000005c0)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 45.788263219s ago: executing program 1 (id=2968): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32], 0x50}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 45.571342026s ago: executing program 1 (id=2972): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000fe00000000000000000000000001e0000002000000000000000000000000ffff00000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000004d22b000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000000000000000000000000000000fcffffff0a000200700000000000000014000e00e000000200"/188], 0x104}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000000000000000000a0000060900020073797a31000000000900010073797a31000000001800038014000080040001800900090073797a3100000000140000001100010000000000000000000700000a"], 0x6c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[@ANYRES64=r5], 0x148}}, 0x0) (async, rerun: 32) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x7, 0x2, 0xd, 0x2}, {0x0, 0x2, 0x0, 0x2}, {0x66d7, 0x80, 0x2, 0x7}, {0x7, 0x0, 0x97, 0x8001}, {0xe, 0x5, 0xc, 0x7}]}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async, rerun: 64) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000680)={0x6, 'netpci0\x00', {0x2}, 0x7}) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x88}, 0x0, 0x0, 0x0, 0x56, 0x0, 0xfffffffd, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2, 0x40, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in6=@mcast2, 0x0, 0x7}]}]}, 0x23c}}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000740)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x12, r8, 0x0) (rerun: 32) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r12, 0x6, 0x24, 0xffffffffffffffff, &(0x7f00000002c0)) 45.032887739s ago: executing program 1 (id=2974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="50000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00150000e08c6048a4386f0012050000000000000000000000001800d2e6080001001000000004000580080003000300000008000500e7f551e8bb554ea3255f62215170e55bc674a4867f5756ef109ca838b0bdb905a9701b18ef90bdbf93905392c4c9317b25093ba108c10577aa79e3f35051485a12b34ba426e6227bfc625dd62efabe505844523a36b162d9cc56f592ba5e8f96403e62fb1c987d43554bb4c1f4befde65a7c3e4b265ccfc04174da5ae33317d59b0a62414a72ae299ad5f35b", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x800) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'ovf\x00', 0x4, 0x8, 0x77}, {@multicast2, 0x4e23, 0x12002, 0xc5, 0x12d5f, 0x3}}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, 0x0) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r9 = accept(0xffffffffffffffff, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x4000804) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xf86) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a01080000000000000000050000090900010073797a310000080008000240000000012c000000030a010300000000000000000500ffff0900010073797a31000000000900030073797a320000000020000000020a01010000000000000000010000020c0004400000000000000003140000001100010000000000000000000200000a"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) 44.386653132s ago: executing program 1 (id=2980): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c0022000000000400000000050024000100000006000800a8880000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a42804000000000014003500626f6e6430000000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000119ac9560183432742500000000", @ANYRES32=r2, @ANYBLOB="0804000000000000"], 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@newtfilter={0x40, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x25}, @TCA_FLOW_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) setsockopt$inet_tcp_int(r5, 0x6, 0x7, &(0x7f00000000c0)=0x7, 0x4) 43.600885272s ago: executing program 1 (id=2984): unshare(0x6a040000) socket$inet(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0xfff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x7], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x401, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xa4}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="94010000100001000000000000000000ac1414bb0000000000000000000000000001fff920000041020000206700"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010100000000000000000000000000fffffffe6c000000fe8000000000000000000000000000aa00000000000000000000000000000000008000000000000000000000000000000100000000000000fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000002000000000000000025bd7000000000000a0000010000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a0012"], 0x194}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44) 28.495977281s ago: executing program 33 (id=2984): unshare(0x6a040000) socket$inet(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0xfff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x7], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x401, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xa4}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="94010000100001000000000000000000ac1414bb0000000000000000000000000001fff920000041020000206700"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010100000000000000000000000000fffffffe6c000000fe8000000000000000000000000000aa00000000000000000000000000000000008000000000000000000000000000000100000000000000fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000002000000000000000025bd7000000000000a0000010000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a0012"], 0x194}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44) 4.924387282s ago: executing program 5 (id=3365): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a000000050001000200000006000640000200005ae033e897f55021607b7ad85d"], 0x24}}, 0x0) (async, rerun: 32) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='cpuset.effective_mems\x00', 0x275a, 0x0) (async, rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x4010, r1, 0xced6b000) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2], &(0x7f0000001f80)=""/190, 0x1a, 0xbe, 0xa, 0x60000}, 0x28) unshare(0x28000600) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x1, 0x0, 0x5d) (async) r5 = openat$cgroup_type(r3, &(0x7f0000000540), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) (async) r6 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) (async) r7 = socket(0x3, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x400c891) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0xfffffffffffffffc, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x7, 0x0, 0x1, 0x1}, 0x20) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x2}, 0x94) accept4$unix(r7, &(0x7f0000000400), &(0x7f0000000340)=0x6e, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='wbt_lat\x00', r8}, 0x18) (rerun: 64) connect$netrom(0xffffffffffffffff, 0x0, 0x0) (async) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r9, 0x80) accept$netrom(r9, 0x0, 0x0) 4.681003444s ago: executing program 5 (id=3368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="25715afa3a7216594f1b12ada77d", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.505819566s ago: executing program 5 (id=3370): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) epoll_create1(0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r4, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 4.325308943s ago: executing program 5 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (fail_nth: 22) 4.205517054s ago: executing program 5 (id=3373): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r4, 0x0, 0x8}, 0x18) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x45, 0x9, 0x0, 0x5, 0x75, 0xf0, 0x8}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r7) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r5, 0x0, 0x1100000000f336, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885) 3.21998828s ago: executing program 5 (id=3386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x50e, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f0000000a40)={0x966, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x28, 0x5, 0xf) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r10], 0x3c}}, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="02000000", @ANYRES16=r9, @ANYBLOB="020026bd7000fbdbdf257a00000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4040}, 0x4840) 3.219477427s ago: executing program 3 (id=3387): syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008"], 0xe0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x95}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 2.899737415s ago: executing program 3 (id=3389): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffffffffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r4, 0x7fffffffffffffff, 0x6, 0xff}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c) recvmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f00000001c0)=@vsock, 0x80, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/212, 0xd4}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f00000008c0)=""/232, 0xe8}, {&(0x7f0000000540)=""/117, 0x75}], 0x4, &(0x7f0000000380)=""/10, 0xa}, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000080)={@dev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, r10, 0x7}, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffff9, 0xff, 0x0, 0x11244, r5, 0x7, '\x00', r10, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x1, @void, @value, @value=r5}, 0x50) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r14, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r11, &(0x7f0000000480), &(0x7f0000000280)=@udp=r12, 0x1}, 0x20) 2.673672932s ago: executing program 6 (id=3393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010ff8f0400"/20, @ANYRES32=0x0, @ANYBLOB="2084040000000000240012800b0001006d6163736563000014000280050003000800000005000a"], 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/67, 0x43}, 0x4}], 0x2, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x33) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x6, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x5, 0x1, 0xb, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000ac0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 2.510196075s ago: executing program 4 (id=3394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x298, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xc, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x25c, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_gact={0x124, 0xa, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x4}}]}, {0xdd, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c995030329bc7513206fbbbaff80269acd40d48bee53c5d29ae26ac4f4be644348ff30d97b9cb02360266994fa3a862b1418bc3eaede1bb9463c1926a947cf619ae9e30d95e4fafecf091aba5ad491096d09ff089a4344e72ae7c5fcb84862d7cba26dd8f3a4c326a5596ea8ea92c0ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x118, 0x1, [@m_tunnel_key={0x74, 0xd, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}]}, {0x9, 0x6, "67a638128a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa0, 0xc05, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x10000000, 0x4, 0x7fffffff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4b02, 0x4, 0x3, 0x1, 0x6}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xea, 0x6, 0x1, 0x1, 0x2}, 0x301}}]}, {0x19, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@private, @in6=@dev}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='rdma.current\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a802000018014000300000006000600020001000700010005000500040036"], 0x40}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c80)={0x14c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3e}, @NL80211_ATTR_IE={0x106, 0x2a, [@erp={0x2a, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x81, 0xffffffffffffffff, 0x1, 0xfb, 0x9}}, @challenge={0x10, 0x1, 0x92}, @tim={0x5, 0xf1, {0x8, 0x45, 0x2, "e697a2ca306137e712e14cc0281968a2b28c3dd39673d213b774dd487c580a71cfbaf4f6e84cd1ffb51196aa939c33da552e74035a1819456aaa3140032c688c45779eb6129d88c3a400edb0b562ecb8491da27d0e3c66fa7cefac5c58b7507a5b60e3841c9fd7380968a9e10e242f65178377c9d2a1041753bef28a090ee1dc86ae0ac21b953143ca9c064ec24972821374e7494141e3bb5901b9da503b52dd7e5d998b8a238c5a2d89ea668526082e4d94302b47ffcded0c36a3952e5745ca50e6265d655cc443e148d28ddc9b92f96675e535fe534b30fe2b1f77392a927e0835add1b19a37e3115f4704317b"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40408c0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.140955933s ago: executing program 4 (id=3395): bind$inet6(0xffffffffffffffff, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x10, 0x1b, 0x1}, 0x10}], 0x1}, 0x0) r1 = epoll_create1(0x0) unshare(0x24020400) (async, rerun: 64) r2 = socket(0x1e, 0x5, 0x0) (rerun: 64) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) (async, rerun: 32) read(r0, &(0x7f0000000380)=""/46, 0xfffffeb4) (rerun: 32) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r0, 0x0, 0x843) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async) accept$inet6(r2, 0x0, &(0x7f0000000240)) (async) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000002c0)=0x5, 0x1) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0xffffffffffffff1d, 0x1404, 0x800, 0x70fd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x60048854) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, @tail_call, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x738e545224d46410, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0xffffffff}, 0x1c) 2.042551543s ago: executing program 4 (id=3398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendto$packet(r3, &(0x7f0000000880)="c7cc9fe66ce5e57f33456dd384ee7deeb80ed3b48ea7a20eb7b46b4eab3654fc91ccd2f7cfe05c7c7b0ae12121c335f09feac5bfb702d195380dcc71590aee091757a52cb4f48d7927b8773135f4c530ca382a2ee2bd382ed8180db3643abf57c5b41775133d820e59bcc3fea6fe29ba0e150776d2382318b5d6d2c43362ff98ccc160485ee9533b2b5bbfb0ed1154dd2a99da3cedec8b5436e10cf007e430b8382d340428335f07e829e39e3a5e5de67b751b2a1d32b8c5cae52d630e63469c3c8b69dd1dc5ef2082f9ade508f9ae28dd5094d91a4edc5a58f516fbe94ffc34a255247977be3f716c7ab3", 0xeb, 0x400c0, &(0x7f00000000c0)={0x11, 0x17, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x22c, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1f0, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_gact={0x124, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0xdd, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de4e78cdbcf73ddf84c995030329bc7513206fbbbaff80269acd40d48bee53c5d29ae26ac4f4be644348ff30d97b9cb02360266994fa3a862b1418bc3eaede1bb9463c1926a947cf619ae9e30d95e4fafecf091aba5ad491096d09ff089a4344e72ae7c5fcb84862d7cba26dd8f3a4c326a5596ea8ea92c0ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xac, 0x1, [@m_tunnel_key={0x74, 0x5, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}}]}, {0x9, 0x6, "67a638128a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x34, 0xc05, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x0) 1.748605089s ago: executing program 6 (id=3402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet(0xa, 0x806, 0x84) socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x0, 0x48b0, 0x3, 0x945b, 0x7]}, &(0x7f0000000400)=0x78) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket(0x21, 0x6, 0x81) bind$bt_l2cap(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x7}, 0xc) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x1000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.746432382s ago: executing program 3 (id=3403): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)="4fd9611ae6ed127ab99164d712eb", 0xe}], 0x1}}], 0x1, 0x0) 1.676311532s ago: executing program 4 (id=3405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf251700000044000600"], 0x58}, 0x1, 0x0, 0x0, 0x400800d}, 0x20000000) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, &(0x7f0000002340)) 1.621214682s ago: executing program 3 (id=3406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfda8, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 12) 1.536598005s ago: executing program 4 (id=3407): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000a00)={{}, 0x0, 0x6, @inherit={0x0, 0x0}, @name="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"}) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) r7 = socket(0xa, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x9}}, 0x0, 0x9}, &(0x7f0000000080)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.253238289s ago: executing program 3 (id=3409): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fb", 0x42}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/81, 0x51}], 0x1}, 0x0) close(r4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.099991917s ago: executing program 2 (id=3411): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f80)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900010073797a31000000540001010000000000000180450001005b93d7b3c32c32c00a50a6e3bc88e483cd89c995dfdb48c32927f864593de4e270904bab48d3493b0863e63f7fee3ac4ce44d73436c400e68e5c5a2860a87cea27000000"], 0x80}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0xf, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x194, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x60}, {0x6, 0x11, 0xcc7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0xf66f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x62e}, {0x6, 0x11, 0x9dc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xd}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0x18) socket(0x400000000010, 0x4, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e22, 0x0, @local, 0x7}, 0x1c) listen(0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r7, 0x1) 1.099006882s ago: executing program 3 (id=3412): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) unshare(0x62040200) (async) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async) writev(r3, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) (async, rerun: 64) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0xe73, 0x4) shutdown(r3, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="020300030b0000000007000000000000010009000000000003000600000000000200000000000000000000000000000100008000000000000000ff0d00000000030005000a00000002000000ac14140000000000000000003b89168e2ce29cfd53bdf6b7b63583d24bd348768f68a9da913ea1e16effb2b4833cb71d8c5041a8bd1934c239163004e956f718a1a4f16a050a5e15620e33a86fe81a58fad377749ded60a70169e8fa0b221a22db3d9dd0e108bfe6db434bfef11b2b293f161fb3b43b69b15be3dc1984974ba1a290d1e6149f2a2e5b96133cd27cf101a03c993b4915c6a11e6a944e2310a5227fe7ea63715c229da6477a66757d6c5d8e41cf32ed44550129ba4a8eca4d56f92a35155b4a3c7af7eb7132cdbf79b994de8165fec6b44ca5403761000000000000a9571a7981568c22f13834"], 0x58}, 0x1, 0x7}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20008805) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x77}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}], 0x2c) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) (rerun: 64) 1.063182351s ago: executing program 2 (id=3413): socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0xfffffebc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x2, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007b114b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket(0x11, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f00000000c0)={0xfffffffffffffffe, 0x48, '\x00', 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x1, 0x4, 0x10, @private1, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x40, 0x0, 0x400, 0x200}}) r9 = socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmmsg$inet(r9, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="a905000007007464000100000000000000e5c0", 0x13}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24004044) 930.233441ms ago: executing program 2 (id=3414): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) 854.86229ms ago: executing program 6 (id=3415): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000640)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000600)='svc_alloc_arg_err\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ppoll(&(0x7f0000000100)=[{r10, 0x181}, {r9, 0x5d6c}], 0x4d, 0x0, 0x0, 0x0) close(r8) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r13, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000030400000000040000000000740027", @ANYRES32=r6, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c0002800600270020000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 785.402211ms ago: executing program 2 (id=3416): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="b9c412130599e3f65c8a2bcb2e018d0ab18969dbe8e30a3ea2116bde645728258402d7d26363c086a21d511b2771f45818bc8e72e93ff5ca7554d118c0dc49100685c8a8716d724a1e598d3b376e5e9edec642d96b326011a6b84f3a0f2f9401d1921bf27c5003ff375749418cd915c6bcb22bcd5c7777385466b844e551bb1e1898d50d8b465b1e903879f74d69ce8e0c1d3cdcd8ea57d1f4b3ccabaf5af44c86901c27c9dddea5f5ca082b3b0304941a27706616af7a4e06f3757bc4ea"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000c0300000f024e0500"/23], 0x0, 0x26}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x3) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xd6f, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0800000004000000040000000200090000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3], 0x50) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec030187127003404db132000400000a14000000f803010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) getsockopt$inet6_opts(r7, 0x29, 0x39, &(0x7f0000000380)=""/134, &(0x7f00000002c0)=0x86) 748.794182ms ago: executing program 2 (id=3417): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x6, 0x800, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r3}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x60800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r6}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r8, &(0x7f0000001140)=[{&(0x7f0000000100)="89e7ee2c78da", 0x6}, {&(0x7f0000000440)="9c74dfbf", 0x4}, {&(0x7f0000000580)="9faa4305", 0x4}, {&(0x7f0000001040)="7de11d54554c95ae5e301a251c40c00210650c92e6fd287bb9ad", 0x1a}], 0x4) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r9 = accept4(r7, 0x0, 0x0, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) pwritev(r10, &(0x7f0000000900)=[{&(0x7f0000000380)="b23edb79a42a311303a399127e11339639dbbdff97b450daedf63646f36aed807523cbeeb910700506fdca86a3130dd94fc8660fb09f3d5557c23c8b37806a99c650b1a9227bb52465e8fe1dbe4cf7ba050ed589617ebe780a1d1b7eeadfeef3683bd9248c91de798142f74f2c4f43072bc65691d463c995899d82e8b997185427b896", 0x83}, {&(0x7f0000000280)="7c0c703b5221c92c23f4f28473d35ac3d88665038581b08c70a24fea877e9c3efedb06cde2a719aca143f5526115e1da7c06f7f7d14e5047e68de401ea3fe391ad707586d9806063af7d88e680ab866886d7314d9ffcea4e", 0x58}, {&(0x7f0000000440)="f60295a9b9b64b6f1fb4d307cb0c2fae54de42db25262339bcf542d65a2ccf3dc4a61d14bb4effeaae6b418aafa06c392ff08dd4a369c955ed16555b9d3ea79820ab7ccfec6fb2828582ee48e714775d0049c9854d8bafd4151ab149e3b1748d45c0a8b4bda0dc331f2038375ffd34f690c8b510d79a1ff3093fab018093a0c680794d2aaad645c892ba6b50b9623479830b8685cf4757e9a26b2361d4e46be689616f32eb8c88194ac6c751dde2032423eeb2db9ebf33b4ea3c76716bbea2d58709fa", 0xc3}, {&(0x7f0000000540)="7f0eed7609827dac850a984c204d5b3a529c8beb7a9d76411350a4302b601ac51f70436249d82408b3e65d236bc57d129d93fc1a2d172c363b972889f97b47ed4d523f5113c4b2c09f6d4eaa9b5cfb9e89ddee8a4c9867f40de719581124d398bd9be2ce6e171af0d7f8a2edc1f2ec4bd076bb5d43ae828f1f", 0x79}, {&(0x7f00000005c0)="0470d41c383f5768257fcf27b1deb24b0976a50566fb82895ffecb96c91cbabbe23aa8fc3b9a516a02cbfe69352e38025907defc27a1366aadeb98e3b073d20a6ce041eb9dc28d1cbebc3516cc7c847f11027a85c43cfed9add63d3ad7574472c497f6d54d54b3290f366eae34334d99110e7041e34a55d6fe48bb77a854d6cd102d90c2251cb308fb", 0x89}, {&(0x7f0000000200)="c4b1ab116b79ac6f839d2a6b61e9717115c0e3bdd8b12cd5bb9593db17c9e17e6dd9a63605", 0x25}, {&(0x7f0000000680)="4fbdf32b1be1f178306b7d6bcdc4418983d8e61de4593a2029bf0bfce4bc54cd5250d7c001a034541089f5cd46d95bd7a456bf95a3f839abea60492f3aeca0d98fb46c311fb6fea7d5d8e2e1d1529f5cc0564f3bbea75dff1805e4570f6cf7ac4e86df535274abc1eba8e147f4c22df17586b056902b0bfb451efafc960860cb36f78f94415cf8cea7fad455161556dde7d60d77f55c8c041ddf6460de10490a418ad8e2775bfbdcafec28004efe712c", 0xb0}, {&(0x7f0000000740)="ed2195eab597d8a10ef81223a6aa636f6473f3e8e23b79f4f64dcfae4c74036b8e0d5e45ef6e391c8bdde7c7afb62e5b5e0a7c5509eb442bf83c1550f137165796bb1a4ba5ea99cc6a43a8f983be5e01b73cecae4c65f73a1568f01ab2ca9984ba7df9c3f59c53592f466c83743e6e155c8e5018ddf6b1c906e9db36d4dc3fc7e0437f4cba5ea9d5151ba214ae73304239331a3a4cfb8e90748f55b1c049d217b60943beb18e32fb4ea74e653defbc717c52eade9897408fddd3565a44fe", 0xbe}, {&(0x7f0000000800)="1704354b2f3a537ca4f060b6ce6410fceff81f18e25e760c206aa01e6619c6feac5b4dd0c649e7954703602654a233512678ebab67c96868d1b32d814998f3fe614683adbb61373177f403d8288ad21debec2cb4d152938448a00f5e40fcce7130715c1d11747c4dfd2ccbd6edaa6d187aa541f6634043896c1ed36572444a191b3f93228570c43dfab79a142e36ef056df85523fd2e0b9002397d47d8718710edaa9ae280b2914c24d832fefd1f6f830238716c4972216a5cd72fa991f176111ff775dd8fa1c2347f954ab97107ab28c9b4f0617b4266aec74777cf43070b5a031598a726a2c49603b905007e3cfe3397fb", 0xf2}], 0x9, 0x7701, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000c5000000ebffffff02"], 0x1c}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r9) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[], 0x11f8}, 0x1, 0x0, 0x0, 0x8004}, 0x480d0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r12, 0x11c, 0x3, &(0x7f0000000a40)=""/34, &(0x7f0000000a80)=0x22) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0x7, 0x11, 0x0, 0x0, @str='@}\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 678.903918ms ago: executing program 6 (id=3418): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) (fail_nth: 4) 277.565068ms ago: executing program 6 (id=3419): socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af3650400410038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x600, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 276.679262ms ago: executing program 4 (id=3420): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001900010000000000000000008020004000041a050024000008"], 0x24}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) read(r1, &(0x7f0000000240)=""/212, 0xd4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) unshare(0x6020400) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250500000032d846107d63c66f3e45afc30efff7ff6433aabbb9d3768fbf3b9a0f27f589b068419c0b6d3c2af5a0ba7fd2f1c9c60f579920cb1e29d4088071701123a6273a0b6a03ad185c0c9eb55498855154605a32114c7b72ad90df88b95543b78b09c418848269d1a956b2db43372147d0f08f65f04d4e464a242bb1b23700c89cbad8a263dba8518c09219c7b6d101322584ead1af0a367fc7521f68583dbe0a6f8fbaf26b7e080b8a82152347180eed1b6dd6e56771ff9b269d9ad6a604d59106381500217c64a6fdc1a20d695bf0b4070c1c1227b67cd680498bc68d71873a024b8e137bf79847777d4"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c000000150a01010000000000000000040000043f040800ce9ed4fcb239dc3685bb946ef761060000e372e36ccb9b207a955f3ac9a4dee1d373fc9e7e08d009339b107f5b140ae9727c6f49efec8a5a73ff1f792a33a0291e0522693ce28003000000000000000900010073797a31000000000c00064000"], 0x6c}, 0x1, 0x0, 0x0, 0x8140}, 0xc140) write$cgroup_pid(r8, &(0x7f0000000080)=r3, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='pwc_handler_enter\x00', r7, 0x0, 0x1}, 0xfffffffffffffcf2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'pimreg0\x00', {0x5d2}, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 69.007167ms ago: executing program 2 (id=3421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="50000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00150000e08c6048a4386f0012050000000000000000000000001800d2e6080001001000000004000580080003000300000008000500e7f551e8bb554ea3255f62215170e55bc674a4867f5756ef109ca838b0bdb905a9701b18ef90bdbf93905392c4c9317b25093ba108c10577aa79e3f35051485a12b34ba426e6227bfc625dd62efabe505844523a36b162d9cc56f592ba5e8f96403e62fb1c987d43554bb4c1f4befde65a7c3e4b265ccfc04174da5ae33317d59b0a62414a72ae299ad5f35b", @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x800) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'ovf\x00', 0x4, 0x8, 0x77}, {@multicast2, 0x4e23, 0x12002, 0xc5, 0x12d5f, 0x3}}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, 0x0) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r9 = accept(0xffffffffffffffff, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000890}, 0x4000804) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xf86) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010000002d0900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800807034000000002140000001100010000000000000000000100000a00"/160], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) 0s ago: executing program 6 (id=3422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x41) kernel console output (not intermixed with test programs): h. [ 373.435520][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 373.480706][T14758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.489848][T14758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.493068][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 373.499471][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 373.585580][T14759] IPVS: sh: FWM 3 0x00000003 - no destination available [ 373.634089][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 373.659022][T14759] IPVS: sh: FWM 3 0x00000003 - no destination available [ 373.687529][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 373.772604][T14771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.920731][T14766] "syz.1.2674" (14766) uses obsolete ecb(arc4) skcipher [ 374.050179][T14787] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 374.364970][T14809] netlink: 'syz.5.2684': attribute type 1 has an invalid length. [ 374.374369][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2684'. [ 374.421606][T14809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.447841][T14809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.723720][T14827] FAULT_INJECTION: forcing a failure. [ 374.723720][T14827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.739995][T14811] IPVS: sh: FWM 3 0x00000003 - no destination available [ 374.740941][T14827] CPU: 1 UID: 0 PID: 14827 Comm: syz.5.2691 Not tainted syzkaller #0 PREEMPT(full) [ 374.740969][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.740981][T14827] Call Trace: [ 374.740989][T14827] [ 374.740997][T14827] dump_stack_lvl+0x189/0x250 [ 374.741026][T14827] ? __pfx____ratelimit+0x10/0x10 [ 374.741052][T14827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.741074][T14827] ? __pfx__printk+0x10/0x10 [ 374.741093][T14827] ? __might_fault+0xb0/0x130 [ 374.741137][T14827] should_fail_ex+0x414/0x560 [ 374.741166][T14827] _copy_from_user+0x2d/0xb0 [ 374.741189][T14827] ___sys_sendmsg+0x158/0x2a0 [ 374.741213][T14827] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.741268][T14827] ? __fget_files+0x2a/0x420 [ 374.741284][T14827] ? __fget_files+0x3a0/0x420 [ 374.741310][T14827] __x64_sys_sendmsg+0x19b/0x260 [ 374.741333][T14827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.741363][T14827] ? __pfx_ksys_write+0x10/0x10 [ 374.741390][T14827] ? do_syscall_64+0xbe/0xfa0 [ 374.741411][T14827] do_syscall_64+0xfa/0xfa0 [ 374.741426][T14827] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.741443][T14827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.741459][T14827] ? clear_bhb_loop+0x60/0xb0 [ 374.741480][T14827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.741496][T14827] RIP: 0033:0x7fe2aeb8f749 [ 374.741512][T14827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.741525][T14827] RSP: 002b:00007fe2afa88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.741551][T14827] RAX: ffffffffffffffda RBX: 00007fe2aede5fa0 RCX: 00007fe2aeb8f749 [ 374.741563][T14827] RDX: 0000000004008014 RSI: 0000200000000100 RDI: 0000000000000003 [ 374.741574][T14827] RBP: 00007fe2afa88090 R08: 0000000000000000 R09: 0000000000000000 [ 374.741583][T14827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.741590][T14827] R13: 00007fe2aede6038 R14: 00007fe2aede5fa0 R15: 00007ffd51dddc58 [ 374.741617][T14827] [ 374.992128][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 375.140092][T14834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.166179][T14838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.199843][T14838] bond3: (slave bond0): Enslaving as an active interface with an up link [ 375.450632][T14842] bond3 (unregistering): (slave bond0): Releasing backup interface [ 375.474047][T14842] bond3 (unregistering): Released all slaves [ 375.585672][T14858] netlink: 'syz.1.2701': attribute type 2 has an invalid length. [ 375.955162][T14877] __nla_validate_parse: 5 callbacks suppressed [ 375.955180][T14877] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2708'. [ 376.225822][T14894] tipc: Enabling of bearer rejected, already enabled [ 376.247170][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2716'. [ 376.267588][T14893] openvswitch: netlink: Flow key attr not present in new flow. [ 376.319938][T14898] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2718'. [ 376.372110][T14898] syzkaller1: entered promiscuous mode [ 376.375569][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 376.381789][T14898] syzkaller1: entered allmulticast mode [ 376.412828][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2719'. [ 376.447333][T14901] syzkaller0: entered promiscuous mode [ 376.460405][T14901] syzkaller0: entered allmulticast mode [ 376.512818][T14910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2718'. [ 376.812919][T14931] tipc: Enabling of bearer rejected, already enabled [ 376.819238][T14932] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2723'. [ 376.926097][T14934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2729'. [ 377.279273][T14948] netlink: 'syz.4.2734': attribute type 29 has an invalid length. [ 377.318893][T14952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2736'. [ 377.353883][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'. [ 377.686662][T14972] tipc: New replicast peer: 255.255.255.255 [ 377.735364][T14972] tipc: Enabled bearer , priority 10 [ 378.156664][T15007] FAULT_INJECTION: forcing a failure. [ 378.156664][T15007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.170518][T15007] CPU: 0 UID: 0 PID: 15007 Comm: syz.4.2755 Not tainted syzkaller #0 PREEMPT(full) [ 378.170542][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.170552][T15007] Call Trace: [ 378.170560][T15007] [ 378.170567][T15007] dump_stack_lvl+0x189/0x250 [ 378.170596][T15007] ? __pfx____ratelimit+0x10/0x10 [ 378.170620][T15007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.170642][T15007] ? __pfx__printk+0x10/0x10 [ 378.170660][T15007] ? __might_fault+0xb0/0x130 [ 378.170695][T15007] should_fail_ex+0x414/0x560 [ 378.170725][T15007] _copy_from_iter+0x1de/0x1790 [ 378.170743][T15007] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 378.170819][T15007] ? kmalloc_reserve+0xbd/0x290 [ 378.170850][T15007] ? __pfx__copy_from_iter+0x10/0x10 [ 378.170866][T15007] ? __alloc_skb+0x2f1/0x430 [ 378.170886][T15007] ? __pfx___alloc_skb+0x10/0x10 [ 378.170906][T15007] ? netlink_sendmsg+0x642/0xb30 [ 378.170923][T15007] ? skb_put+0x11b/0x210 [ 378.170944][T15007] netlink_sendmsg+0x6b2/0xb30 [ 378.170972][T15007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.170993][T15007] ? aa_sock_msg_perm+0xf1/0x1d0 [ 378.171016][T15007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.171032][T15007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.171049][T15007] __sock_sendmsg+0x21c/0x270 [ 378.171074][T15007] ____sys_sendmsg+0x505/0x830 [ 378.171099][T15007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.171128][T15007] ? import_iovec+0x74/0xa0 [ 378.171152][T15007] ___sys_sendmsg+0x21f/0x2a0 [ 378.171175][T15007] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.171231][T15007] ? __fget_files+0x2a/0x420 [ 378.171247][T15007] ? __fget_files+0x3a0/0x420 [ 378.171274][T15007] __x64_sys_sendmsg+0x19b/0x260 [ 378.171305][T15007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.171335][T15007] ? __pfx_ksys_write+0x10/0x10 [ 378.171361][T15007] ? do_syscall_64+0xbe/0xfa0 [ 378.171381][T15007] do_syscall_64+0xfa/0xfa0 [ 378.171396][T15007] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.171414][T15007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.171431][T15007] ? clear_bhb_loop+0x60/0xb0 [ 378.171452][T15007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.171469][T15007] RIP: 0033:0x7f5c13b8f749 [ 378.171486][T15007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.171500][T15007] RSP: 002b:00007f5c1495d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.171520][T15007] RAX: ffffffffffffffda RBX: 00007f5c13de5fa0 RCX: 00007f5c13b8f749 [ 378.171533][T15007] RDX: 0000000000044000 RSI: 0000200000000200 RDI: 0000000000000003 [ 378.171543][T15007] RBP: 00007f5c1495d090 R08: 0000000000000000 R09: 0000000000000000 [ 378.171553][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.171562][T15007] R13: 00007f5c13de6038 R14: 00007f5c13de5fa0 R15: 00007ffd4d6759f8 [ 378.171591][T15007] [ 378.649826][T15023] netlink: 'syz.5.2761': attribute type 1 has an invalid length. [ 378.671267][T15023] netlink: 'syz.5.2761': attribute type 3 has an invalid length. [ 378.680127][T15023] netlink: 'syz.5.2761': attribute type 1 has an invalid length. [ 378.691960][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.698870][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.727852][ T5937] tipc: Node number set to 3101450914 [ 378.735624][T15023] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 378.864771][T15025] syzkaller1: entered promiscuous mode [ 378.872084][T15025] syzkaller1: entered allmulticast mode [ 379.254331][T15046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.039065][T15089] netlink: 'syz.3.2783': attribute type 1 has an invalid length. [ 380.094392][T15089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.108134][T15089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.250035][T15099] netlink: 'syz.4.2786': attribute type 1 has an invalid length. [ 380.271552][T15099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.279591][T15099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.618034][T15123] netlink: 'syz.1.2792': attribute type 1 has an invalid length. [ 380.875191][T15134] ip6tnl1: entered allmulticast mode [ 380.942472][T15138] tunl0: left allmulticast mode [ 380.950559][T15138] gre0: left allmulticast mode [ 380.966872][T15138] gretap0: left allmulticast mode [ 380.975447][T15138] erspan0: left allmulticast mode [ 380.983617][T15138] ip_vti0: left allmulticast mode [ 380.992624][T15138] ip6_vti0: left allmulticast mode [ 381.006806][T15138] ip6tnl0: left allmulticast mode [ 381.024620][T15138] ip6gre0: left allmulticast mode [ 381.033559][T15138] syz_tun: left allmulticast mode [ 381.080132][T15138] ip6gretap0: left allmulticast mode [ 381.103010][T15138] bridge0: left allmulticast mode [ 381.112697][T15138] bond0: left allmulticast mode [ 381.123018][T15138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.164691][T15138] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 381.228246][T15146] __nla_validate_parse: 14 callbacks suppressed [ 381.228266][T15146] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2799'. [ 381.278635][T15150] tipc: Enabled bearer , priority 0 [ 381.439430][T15147] syzkaller0: entered promiscuous mode [ 381.447173][T15147] syzkaller0: entered allmulticast mode [ 381.454610][T15147] tipc: Resetting bearer [ 381.512948][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.523510][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.532625][T15149] tipc: Resetting bearer [ 381.542316][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.554195][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.564059][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.130844][T15149] tipc: Disabling bearer [ 383.370166][T15174] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 383.531252][T15182] netlink: 'syz.1.2811': attribute type 10 has an invalid length. [ 383.540448][T15182] bond0: (slave wlan1): Opening slave failed [ 383.584326][T15157] chnl_net:caif_netlink_parms(): no params data found [ 383.639440][ T5148] Bluetooth: hci1: command tx timeout [ 383.842174][T15157] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.850892][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.860339][T15157] bridge_slave_0: entered allmulticast mode [ 383.870635][T15157] bridge_slave_0: entered promiscuous mode [ 383.882151][T15157] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.890343][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.900773][T15157] bridge_slave_1: entered allmulticast mode [ 383.913286][T15157] bridge_slave_1: entered promiscuous mode [ 383.980686][T15157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.998701][T15157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.061598][T15157] team0: Port device team_slave_0 added [ 384.072948][T15157] team0: Port device team_slave_1 added [ 384.143128][T15157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.157524][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.185479][T15157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.201281][T15157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.208477][T15157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.245159][T15157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.434363][T15157] hsr_slave_0: entered promiscuous mode [ 384.451537][T15157] hsr_slave_1: entered promiscuous mode [ 384.470672][T15157] debugfs: 'hsr0' already exists in 'hsr' [ 384.485445][T15157] Cannot create hsr debugfs directory [ 384.834504][T15220] dummy0: entered promiscuous mode [ 384.841199][T15220] macsec1: entered promiscuous mode [ 384.852945][T15220] dummy0: left promiscuous mode [ 384.907273][T15223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2817'. [ 385.070864][T15157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.098469][T15229] netlink: 'syz.1.2818': attribute type 1 has an invalid length. [ 385.149962][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2819'. [ 385.212104][T15240] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 385.229631][T15229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 385.273444][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2820'. [ 385.324365][T15240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.333418][T15157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.347460][T15240] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 385.354950][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2820'. [ 385.388445][T15229] veth7: entered promiscuous mode [ 385.404099][T15229] bond3: (slave veth7): Enslaving as an active interface with a down link [ 385.481499][T15157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.593858][T15157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.609778][T15253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 385.718022][ T5148] Bluetooth: hci1: command tx timeout [ 385.980612][T15157] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.006629][T15157] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 386.020200][T15157] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.042103][T15157] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.202822][T15157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.239583][T15157] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.277224][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.284500][ T8650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.344444][ T8650] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.351694][ T8650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.358870][T15292] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 386.370300][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'. [ 386.385199][T15292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.385514][T15293] netlink: 'syz.4.2829': attribute type 1 has an invalid length. [ 386.395244][T15292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.418201][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'. [ 386.430143][T15157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.896855][T15295] dvmrp6: entered allmulticast mode [ 387.056161][T15305] 8021q: VLANs not supported on syzkaller1 [ 387.216644][T15313] netlink: 'syz.1.2835': attribute type 10 has an invalid length. [ 387.257053][T15157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.420304][T15157] veth0_vlan: entered promiscuous mode [ 387.454859][T15157] veth1_vlan: entered promiscuous mode [ 387.537091][T15157] veth0_macvtap: entered promiscuous mode [ 387.567000][T15157] veth1_macvtap: entered promiscuous mode [ 387.613064][T15157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.623657][T15337] netlink: 'syz.5.2842': attribute type 1 has an invalid length. [ 387.643343][T15157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.668161][T15337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.675654][T15337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.686184][ T3023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.706100][ T3023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.736962][ T3023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.765320][ T8650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.798901][ T5148] Bluetooth: hci1: command tx timeout [ 387.879329][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.895642][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.943254][T15344] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 387.955440][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.964200][T15346] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 387.968771][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.032681][T15349] tipc: Started in network mode [ 388.038749][T15349] tipc: Node identity ac14140f, cluster identity 4711 [ 388.045798][T15349] tipc: New replicast peer: 255.255.255.255 [ 388.053469][T15349] tipc: Enabled bearer , priority 10 [ 388.189111][T15356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2848'. [ 388.292507][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2849'. [ 388.528691][T15365] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2851'. [ 388.556594][T15365] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2851'. [ 388.605293][T15365] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 388.670270][T15368] FAULT_INJECTION: forcing a failure. [ 388.670270][T15368] name failslab, interval 1, probability 0, space 0, times 0 [ 388.686025][T15368] CPU: 0 UID: 0 PID: 15368 Comm: syz.1.2852 Not tainted syzkaller #0 PREEMPT(full) [ 388.686060][T15368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.686076][T15368] Call Trace: [ 388.686086][T15368] [ 388.686093][T15368] dump_stack_lvl+0x189/0x250 [ 388.686116][T15368] ? __pfx____ratelimit+0x10/0x10 [ 388.686137][T15368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.686157][T15368] ? __pfx__printk+0x10/0x10 [ 388.686177][T15368] ? __pfx___might_resched+0x10/0x10 [ 388.686196][T15368] ? fs_reclaim_acquire+0x7d/0x100 [ 388.686217][T15368] should_fail_ex+0x414/0x560 [ 388.686247][T15368] should_failslab+0xa8/0x100 [ 388.686267][T15368] kmem_cache_alloc_node_noprof+0x77/0x710 [ 388.686291][T15368] ? __alloc_skb+0x255/0x430 [ 388.686308][T15368] ? napi_skb_cache_get+0x4a5/0x790 [ 388.686324][T15368] ? napi_skb_cache_get+0x151/0x790 [ 388.686345][T15368] __alloc_skb+0x255/0x430 [ 388.686365][T15368] ? __pfx___alloc_skb+0x10/0x10 [ 388.686381][T15368] ? process_measurement+0x3d8/0x1a40 [ 388.686403][T15368] ? ima_match_policy+0x10b/0x2150 [ 388.686426][T15368] alloc_skb_with_frags+0xca/0x890 [ 388.686451][T15368] ? process_measurement+0x72d/0x1a40 [ 388.686476][T15368] sock_alloc_send_pskb+0x84d/0x980 [ 388.686527][T15368] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 388.686548][T15368] ? __pfx_process_measurement+0x10/0x10 [ 388.686566][T15368] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 388.686588][T15368] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 388.686615][T15368] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 388.686639][T15368] unix_dgram_sendmsg+0x454/0x1840 [ 388.686668][T15368] ? __lock_acquire+0xab9/0xd20 [ 388.686704][T15368] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 388.686726][T15368] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 388.686761][T15368] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 388.686784][T15368] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 388.686810][T15368] __sock_sendmsg+0x21c/0x270 [ 388.686837][T15368] ____sys_sendmsg+0x52d/0x830 [ 388.686863][T15368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.686892][T15368] ? import_iovec+0x74/0xa0 [ 388.686922][T15368] ___sys_sendmsg+0x21f/0x2a0 [ 388.686944][T15368] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.687000][T15368] ? __fget_files+0x2a/0x420 [ 388.687021][T15368] ? __fget_files+0x3a0/0x420 [ 388.687048][T15368] __sys_sendmmsg+0x227/0x430 [ 388.687074][T15368] ? __pfx___sys_sendmmsg+0x10/0x10 [ 388.687103][T15368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.687140][T15368] ? ksys_write+0x22a/0x250 [ 388.687166][T15368] ? __pfx_ksys_write+0x10/0x10 [ 388.687195][T15368] __x64_sys_sendmmsg+0xa0/0xc0 [ 388.687217][T15368] do_syscall_64+0xfa/0xfa0 [ 388.687234][T15368] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.687251][T15368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.687268][T15368] ? clear_bhb_loop+0x60/0xb0 [ 388.687290][T15368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.687306][T15368] RIP: 0033:0x7fd45538f749 [ 388.687323][T15368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.687337][T15368] RSP: 002b:00007fd45627a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.687360][T15368] RAX: ffffffffffffffda RBX: 00007fd4555e5fa0 RCX: 00007fd45538f749 [ 388.687373][T15368] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 388.687384][T15368] RBP: 00007fd45627a090 R08: 0000000000000000 R09: 0000000000000000 [ 388.687394][T15368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.687404][T15368] R13: 00007fd4555e6038 R14: 00007fd4555e5fa0 R15: 00007ffe89d0bad8 [ 388.687433][T15368] [ 389.133903][ T7674] tipc: Node number set to 2886997007 [ 389.186858][T15373] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 389.211847][T15373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.219940][T15373] IPv6: NLM_F_CREATE should be set when creating new route [ 389.227422][T15373] IPv6: NLM_F_CREATE should be set when creating new route [ 389.240662][T15373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.361991][T15382] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2854'. [ 389.776302][T15400] FAULT_INJECTION: forcing a failure. [ 389.776302][T15400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.792947][T15400] CPU: 1 UID: 0 PID: 15400 Comm: syz.1.2863 Not tainted syzkaller #0 PREEMPT(full) [ 389.792973][T15400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.792984][T15400] Call Trace: [ 389.792992][T15400] [ 389.793000][T15400] dump_stack_lvl+0x189/0x250 [ 389.793028][T15400] ? __pfx____ratelimit+0x10/0x10 [ 389.793054][T15400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.793077][T15400] ? __pfx__printk+0x10/0x10 [ 389.793096][T15400] ? __might_fault+0xb0/0x130 [ 389.793131][T15400] should_fail_ex+0x414/0x560 [ 389.793161][T15400] _copy_from_user+0x2d/0xb0 [ 389.793185][T15400] bpf_prog_test_run_xdp+0xd70/0x10e0 [ 389.793221][T15400] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 389.793245][T15400] ? __fget_files+0x2a/0x420 [ 389.793268][T15400] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 389.793288][T15400] bpf_prog_test_run+0x2c7/0x340 [ 389.793312][T15400] __sys_bpf+0x562/0x860 [ 389.793333][T15400] ? __pfx___sys_bpf+0x10/0x10 [ 389.793372][T15400] ? ksys_write+0x22a/0x250 [ 389.793475][T15400] ? __pfx_ksys_write+0x10/0x10 [ 389.793514][T15400] __x64_sys_bpf+0x7c/0x90 [ 389.793540][T15400] do_syscall_64+0xfa/0xfa0 [ 389.793558][T15400] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.793575][T15400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.793593][T15400] ? clear_bhb_loop+0x60/0xb0 [ 389.793615][T15400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.793631][T15400] RIP: 0033:0x7fd45538f749 [ 389.793649][T15400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.793664][T15400] RSP: 002b:00007fd45627a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.793684][T15400] RAX: ffffffffffffffda RBX: 00007fd4555e5fa0 RCX: 00007fd45538f749 [ 389.793698][T15400] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 389.793711][T15400] RBP: 00007fd45627a090 R08: 0000000000000000 R09: 0000000000000000 [ 389.793723][T15400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.793735][T15400] R13: 00007fd4555e6038 R14: 00007fd4555e5fa0 R15: 00007ffe89d0bad8 [ 389.793768][T15400] [ 389.799262][T15397] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 389.902999][ T5148] Bluetooth: hci1: command tx timeout [ 390.009160][T15412] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 390.022182][T15403] bridge_slave_0: left allmulticast mode [ 390.051116][T15403] bridge_slave_0: left promiscuous mode [ 390.057191][T15403] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.074759][T15403] bridge_slave_1: left allmulticast mode [ 390.080789][T15403] bridge_slave_1: left promiscuous mode [ 390.087205][T15403] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.110848][T15403] bond0: (slave bond_slave_0): Releasing backup interface [ 390.124417][T15417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.157876][T15403] bond0: (slave bond_slave_1): Releasing backup interface [ 390.165421][T15417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.208862][T15403] team0: Port device team_slave_0 removed [ 390.247317][T15403] team0: Port device team_slave_1 removed [ 390.254540][T15403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.262079][T15403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.274976][T15403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.286932][T15403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.298889][T15403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 390.505289][T15424] veth0_to_bridge: entered promiscuous mode [ 390.537777][T15423] veth0_to_bridge: left promiscuous mode [ 390.695344][T15429] FAULT_INJECTION: forcing a failure. [ 390.695344][T15429] name failslab, interval 1, probability 0, space 0, times 0 [ 390.727677][T15429] CPU: 0 UID: 0 PID: 15429 Comm: syz.1.2871 Not tainted syzkaller #0 PREEMPT(full) [ 390.727705][T15429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 390.727716][T15429] Call Trace: [ 390.727724][T15429] [ 390.727732][T15429] dump_stack_lvl+0x189/0x250 [ 390.727761][T15429] ? __pfx____ratelimit+0x10/0x10 [ 390.727786][T15429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.727809][T15429] ? __pfx__printk+0x10/0x10 [ 390.727834][T15429] ? __pfx___might_resched+0x10/0x10 [ 390.727852][T15429] ? fs_reclaim_acquire+0x7d/0x100 [ 390.727874][T15429] should_fail_ex+0x414/0x560 [ 390.727904][T15429] should_failslab+0xa8/0x100 [ 390.727924][T15429] __kmalloc_noprof+0xcb/0x7f0 [ 390.727946][T15429] ? stack_depot_save_flags+0x40/0x860 [ 390.727969][T15429] ? fib6_info_alloc+0x30/0xf0 [ 390.727997][T15429] fib6_info_alloc+0x30/0xf0 [ 390.728022][T15429] ip6_route_info_create+0x142/0x860 [ 390.728047][T15429] ? bpf_lsm_capable+0x9/0x20 [ 390.728068][T15429] ip6_route_add+0x49/0x1b0 [ 390.728093][T15429] ipv6_route_ioctl+0x35c/0x480 [ 390.728114][T15429] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 390.728163][T15429] inet6_ioctl+0x219/0x280 [ 390.728184][T15429] ? __pfx_inet6_ioctl+0x10/0x10 [ 390.728215][T15429] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 390.728245][T15429] sock_do_ioctl+0xdc/0x300 [ 390.728269][T15429] ? __pfx_sock_do_ioctl+0x10/0x10 [ 390.728307][T15429] sock_ioctl+0x576/0x790 [ 390.728332][T15429] ? __pfx_sock_ioctl+0x10/0x10 [ 390.728358][T15429] ? __fget_files+0x3a0/0x420 [ 390.728372][T15429] ? __fget_files+0x2a/0x420 [ 390.728391][T15429] ? bpf_lsm_file_ioctl+0x9/0x20 [ 390.728409][T15429] ? __pfx_sock_ioctl+0x10/0x10 [ 390.728431][T15429] __se_sys_ioctl+0xfc/0x170 [ 390.728455][T15429] do_syscall_64+0xfa/0xfa0 [ 390.728472][T15429] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.728490][T15429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.728508][T15429] ? clear_bhb_loop+0x60/0xb0 [ 390.728531][T15429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.728548][T15429] RIP: 0033:0x7fd45538f749 [ 390.728565][T15429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.728581][T15429] RSP: 002b:00007fd45627a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.728606][T15429] RAX: ffffffffffffffda RBX: 00007fd4555e5fa0 RCX: 00007fd45538f749 [ 390.728625][T15429] RDX: 0000200000000580 RSI: 000000000000890b RDI: 0000000000000003 [ 390.728637][T15429] RBP: 00007fd45627a090 R08: 0000000000000000 R09: 0000000000000000 [ 390.728648][T15429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.728658][T15429] R13: 00007fd4555e6038 R14: 00007fd4555e5fa0 R15: 00007ffe89d0bad8 [ 390.728690][T15429] [ 390.742053][T15434] netlink: 'syz.5.2873': attribute type 1 has an invalid length. [ 390.848754][T15437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2870'. [ 391.038804][T15440] netlink: 'syz.4.2872': attribute type 1 has an invalid length. [ 391.047461][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 391.061602][T15440] netlink: 16102 bytes leftover after parsing attributes in process `syz.4.2872'. [ 391.254018][T15448] netlink: 'syz.3.2876': attribute type 4 has an invalid length. [ 391.748328][ T7674] IPVS: starting estimator thread 0... [ 391.843996][T15463] veth0_to_bridge: entered promiscuous mode [ 391.851700][T15461] IPVS: using max 34 ests per chain, 81600 per kthread [ 391.863253][T15462] veth0_to_bridge: left promiscuous mode [ 392.221853][T15476] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 392.605941][T15491] __nla_validate_parse: 1 callbacks suppressed [ 392.605959][T15491] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2887'. [ 392.760854][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2888'. [ 392.798692][T15496] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 392.940168][T15500] netlink: 'syz.5.2890': attribute type 1 has an invalid length. [ 393.552002][ T5937] hid-generic 0005:0002:5508.000E: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 393.798728][ T5937] hid-generic 0005:0002:5508.000F: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 393.980944][T15535] netlink: 'syz.3.2901': attribute type 1 has an invalid length. [ 394.061765][T15538] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2902'. [ 394.281604][T15542] tipc: Enabled bearer , priority 0 [ 394.327249][T15542] syzkaller0: entered promiscuous mode [ 394.365541][T15542] syzkaller0: entered allmulticast mode [ 394.476891][ T5848] bridge0: port 3(syz_tun) entered disabled state [ 394.495685][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.518374][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.526303][ T5848] syz_tun (unregistering): left allmulticast mode [ 394.533140][ T5848] syz_tun (unregistering): left promiscuous mode [ 394.540020][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.548588][ T5848] bridge0: port 3(syz_tun) entered disabled state [ 394.556103][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.564836][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.634244][T15557] syzkaller0: mtu less than device minimum [ 394.654690][T15541] tipc: Resetting bearer [ 394.709692][T15541] tipc: Disabling bearer [ 394.824118][ T7671] hid-generic 0005:0002:5508.0010: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 394.893617][T15570] tipc: Enabling of bearer rejected, already enabled [ 394.992923][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'. [ 395.074117][T15578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.103050][T15585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.122049][T15585] bond5: (slave bond0): Enslaving as an active interface with an up link [ 395.391429][T15578] bond5 (unregistering): (slave bond0): Releasing backup interface [ 395.409254][T15578] bond5 (unregistering): Released all slaves [ 395.472142][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 395.561924][T15554] chnl_net:caif_netlink_parms(): no params data found [ 395.756032][T15554] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.769161][T15554] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.776643][T15554] bridge_slave_0: entered allmulticast mode [ 395.787950][T15554] bridge_slave_0: entered promiscuous mode [ 395.799782][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2923'. [ 395.817905][T15554] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.826531][T15554] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.834573][T15554] bridge_slave_1: entered allmulticast mode [ 395.842598][T15554] bridge_slave_1: entered promiscuous mode [ 395.889185][T15554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.903789][T15554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.948207][T15554] team0: Port device team_slave_0 added [ 395.960569][T15554] team0: Port device team_slave_1 added [ 396.000669][T15554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.008227][T15554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.056491][T15554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.072878][T15554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.080251][T15554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.127755][T15554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.254036][T15554] hsr_slave_0: entered promiscuous mode [ 396.275021][T15554] hsr_slave_1: entered promiscuous mode [ 396.292827][T15554] debugfs: 'hsr0' already exists in 'hsr' [ 396.306271][T15554] Cannot create hsr debugfs directory [ 396.583197][T15554] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.598158][ T5842] Bluetooth: hci4: command tx timeout [ 396.624608][T15554] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.708318][T15653] FAULT_INJECTION: forcing a failure. [ 396.708318][T15653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.749623][T15554] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.770407][T15554] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.780105][T15653] CPU: 0 UID: 0 PID: 15653 Comm: syz.3.2933 Not tainted syzkaller #0 PREEMPT(full) [ 396.780139][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.780150][T15653] Call Trace: [ 396.780157][T15653] [ 396.780166][T15653] dump_stack_lvl+0x189/0x250 [ 396.780194][T15653] ? __pfx____ratelimit+0x10/0x10 [ 396.780220][T15653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.780242][T15653] ? __pfx__printk+0x10/0x10 [ 396.780259][T15653] ? __might_fault+0xb0/0x130 [ 396.780290][T15653] should_fail_ex+0x414/0x560 [ 396.780317][T15653] _copy_from_user+0x2d/0xb0 [ 396.780339][T15653] kstrtouint_from_user+0xc4/0x170 [ 396.780359][T15653] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 396.780394][T15653] proc_fail_nth_write+0x88/0x200 [ 396.780415][T15653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 396.780441][T15653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 396.780463][T15653] vfs_write+0x27e/0xb30 [ 396.780497][T15653] ? __pfx_vfs_write+0x10/0x10 [ 396.780522][T15653] ? __fget_files+0x2a/0x420 [ 396.780544][T15653] ? __fget_files+0x3a0/0x420 [ 396.780560][T15653] ? __fget_files+0x2a/0x420 [ 396.780587][T15653] ksys_write+0x145/0x250 [ 396.780613][T15653] ? __pfx_ksys_write+0x10/0x10 [ 396.780640][T15653] ? do_syscall_64+0xbe/0xfa0 [ 396.780663][T15653] do_syscall_64+0xfa/0xfa0 [ 396.780679][T15653] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.780696][T15653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.780712][T15653] ? clear_bhb_loop+0x60/0xb0 [ 396.780732][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.780747][T15653] RIP: 0033:0x7fd10258e1ff [ 396.780764][T15653] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 396.780779][T15653] RSP: 002b:00007fd103496030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 396.780798][T15653] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd10258e1ff [ 396.780810][T15653] RDX: 0000000000000001 RSI: 00007fd1034960a0 RDI: 0000000000000004 [ 396.780821][T15653] RBP: 00007fd103496090 R08: 0000000000000000 R09: 0000000000000000 [ 396.780832][T15653] R10: 0000000002040000 R11: 0000000000000293 R12: 0000000000000001 [ 396.780843][T15653] R13: 00007fd1027e6128 R14: 00007fd1027e6090 R15: 00007ffc20a63fb8 [ 396.780874][T15653] [ 397.032378][T15663] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 397.044881][T15663] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 397.059545][T15663] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 397.094804][T15657] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 397.110106][T15554] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.120181][T15554] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.227184][T15554] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.246519][T15554] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.434179][T15554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.469513][T15554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.492478][T15675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2942'. [ 397.494418][T15554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.514521][T15554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.596853][T15684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2943'. [ 397.660935][T15554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.691173][T15554] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.715575][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.723088][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.756263][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.763532][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.943729][T15695] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2946'. [ 398.064587][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2948'. [ 398.133092][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2950'. [ 398.259851][T15554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.334048][T15717] netlink: 'syz.5.2952': attribute type 1 has an invalid length. [ 398.343205][T15717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2952'. [ 398.373939][T15717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.391250][T15717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.402510][T15717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2952'. [ 398.428949][T15721] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 398.562653][T15730] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2953'. [ 398.687608][ T5842] Bluetooth: hci4: command tx timeout [ 398.697194][T15554] veth0_vlan: entered promiscuous mode [ 398.723090][T15735] FAULT_INJECTION: forcing a failure. [ 398.723090][T15735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.725044][T15554] veth1_vlan: entered promiscuous mode [ 398.772518][T15735] CPU: 0 UID: 0 PID: 15735 Comm: syz.2.2956 Not tainted syzkaller #0 PREEMPT(full) [ 398.772543][T15735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.772554][T15735] Call Trace: [ 398.772562][T15735] [ 398.772570][T15735] dump_stack_lvl+0x189/0x250 [ 398.772599][T15735] ? __pfx____ratelimit+0x10/0x10 [ 398.772625][T15735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.772646][T15735] ? __pfx__printk+0x10/0x10 [ 398.772678][T15735] should_fail_ex+0x414/0x560 [ 398.772709][T15735] _copy_from_user+0x2d/0xb0 [ 398.772731][T15735] __copy_msghdr+0x3c5/0x5b0 [ 398.772753][T15735] ___sys_sendmsg+0x1a5/0x2a0 [ 398.772773][T15735] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.772821][T15735] ? __fget_files+0x2a/0x420 [ 398.772838][T15735] ? __fget_files+0x3a0/0x420 [ 398.772864][T15735] __x64_sys_sendmsg+0x19b/0x260 [ 398.772887][T15735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.772916][T15735] ? __pfx_ksys_write+0x10/0x10 [ 398.772944][T15735] ? do_syscall_64+0xbe/0xfa0 [ 398.772962][T15735] do_syscall_64+0xfa/0xfa0 [ 398.772985][T15735] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.773006][T15735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.773024][T15735] ? clear_bhb_loop+0x60/0xb0 [ 398.773044][T15735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.773061][T15735] RIP: 0033:0x7fcfcf38f749 [ 398.773077][T15735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.773093][T15735] RSP: 002b:00007fcfd0237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.773112][T15735] RAX: ffffffffffffffda RBX: 00007fcfcf5e5fa0 RCX: 00007fcfcf38f749 [ 398.773125][T15735] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 398.773137][T15735] RBP: 00007fcfd0237090 R08: 0000000000000000 R09: 0000000000000000 [ 398.773148][T15735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.773160][T15735] R13: 00007fcfcf5e6038 R14: 00007fcfcf5e5fa0 R15: 00007ffdc6907b98 [ 398.773190][T15735] [ 398.982373][T15554] veth0_macvtap: entered promiscuous mode [ 398.994893][T15554] veth1_macvtap: entered promiscuous mode [ 399.016126][T15554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.038056][T15554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.083063][ T3483] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.118878][ T3483] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.141262][ T3483] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.152494][T15738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.172136][ T3483] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.259805][T15738] bond1 (unregistering): Released all slaves [ 399.349730][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2959'. [ 399.437496][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.449476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.527120][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.536416][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.553344][T15754] netlink: 'syz.5.2964': attribute type 1 has an invalid length. [ 399.563149][T15749] syzkaller1: entered promiscuous mode [ 399.578362][T15749] syzkaller1: entered allmulticast mode [ 399.629444][T15757] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2964'. [ 399.680869][T15759] FAULT_INJECTION: forcing a failure. [ 399.680869][T15759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.689198][T15763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.703271][T15759] CPU: 1 UID: 0 PID: 15759 Comm: syz.4.2900 Not tainted syzkaller #0 PREEMPT(full) [ 399.703294][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.703303][T15759] Call Trace: [ 399.703311][T15759] [ 399.703318][T15759] dump_stack_lvl+0x189/0x250 [ 399.703343][T15759] ? __pfx____ratelimit+0x10/0x10 [ 399.703369][T15759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.703391][T15759] ? __pfx__printk+0x10/0x10 [ 399.703422][T15759] should_fail_ex+0x414/0x560 [ 399.703449][T15759] _copy_to_user+0x31/0xb0 [ 399.703470][T15759] bpf_test_finish+0x1ab/0x700 [ 399.703497][T15759] ? __pfx_bpf_test_finish+0x10/0x10 [ 399.703523][T15759] bpf_prog_test_run_xdp+0x88c/0x10e0 [ 399.703552][T15759] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 399.703576][T15759] ? __fget_files+0x2a/0x420 [ 399.703599][T15759] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 399.703619][T15759] bpf_prog_test_run+0x2c7/0x340 [ 399.703639][T15759] __sys_bpf+0x562/0x860 [ 399.703667][T15759] ? __pfx___sys_bpf+0x10/0x10 [ 399.703697][T15759] ? ksys_write+0x22a/0x250 [ 399.703721][T15759] ? __pfx_ksys_write+0x10/0x10 [ 399.703749][T15759] __x64_sys_bpf+0x7c/0x90 [ 399.703772][T15759] do_syscall_64+0xfa/0xfa0 [ 399.703788][T15759] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.703805][T15759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.703822][T15759] ? clear_bhb_loop+0x60/0xb0 [ 399.703844][T15759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.703860][T15759] RIP: 0033:0x7f9a45b8f749 [ 399.703876][T15759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.703890][T15759] RSP: 002b:00007f9a46a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.703909][T15759] RAX: ffffffffffffffda RBX: 00007f9a45de5fa0 RCX: 00007f9a45b8f749 [ 399.703922][T15759] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 399.703934][T15759] RBP: 00007f9a46a85090 R08: 0000000000000000 R09: 0000000000000000 [ 399.703946][T15759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.703957][T15759] R13: 00007f9a45de6038 R14: 00007f9a45de5fa0 R15: 00007ffc555a3a38 [ 399.703985][T15759] [ 399.704895][T15763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.980488][T15763] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2964'. [ 400.535453][T15783] netlink: 'syz.5.2973': attribute type 1 has an invalid length. [ 400.567301][T15783] netlink: 'syz.5.2973': attribute type 3 has an invalid length. [ 400.577656][T15783] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2973'. [ 400.591602][T15783] NCSI netlink: No device for ifindex 813332851 [ 400.758250][ T5842] Bluetooth: hci4: command tx timeout [ 400.952215][ T5148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 400.964470][ T5148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 400.973689][ T5148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 400.985186][T15791] syzkaller1: entered promiscuous mode [ 401.002461][ T5148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 401.020471][ T5148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 401.033927][T15791] syzkaller1: entered allmulticast mode [ 401.594146][T15813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.665465][T15816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.695094][T15816] bond4: (slave bond0): Enslaving as an active interface with an up link [ 401.935018][T15813] bond4 (unregistering): (slave bond0): Releasing backup interface [ 401.960689][T15813] bond4 (unregistering): Released all slaves [ 402.264335][T15792] chnl_net:caif_netlink_parms(): no params data found [ 402.334126][T15831] netlink: 'syz.5.2983': attribute type 21 has an invalid length. [ 402.534853][T15846] netlink: 'syz.2.2986': attribute type 3 has an invalid length. [ 402.838255][ T5148] Bluetooth: hci4: command tx timeout [ 402.989143][T15792] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.996330][T15792] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.047818][T15792] bridge_slave_0: entered allmulticast mode [ 403.055712][T15792] bridge_slave_0: entered promiscuous mode [ 403.078403][ T5148] Bluetooth: hci6: command tx timeout [ 403.116831][T15792] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.124489][T15792] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.132269][T15792] bridge_slave_1: entered allmulticast mode [ 403.140640][T15792] bridge_slave_1: entered promiscuous mode [ 403.246848][T15868] FAULT_INJECTION: forcing a failure. [ 403.246848][T15868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.261020][T15868] CPU: 0 UID: 0 PID: 15868 Comm: syz.5.2990 Not tainted syzkaller #0 PREEMPT(full) [ 403.261046][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.261056][T15868] Call Trace: [ 403.261064][T15868] [ 403.261072][T15868] dump_stack_lvl+0x189/0x250 [ 403.261101][T15868] ? __pfx____ratelimit+0x10/0x10 [ 403.261127][T15868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.261149][T15868] ? __pfx__printk+0x10/0x10 [ 403.261167][T15868] ? __might_fault+0xb0/0x130 [ 403.261200][T15868] should_fail_ex+0x414/0x560 [ 403.261230][T15868] _copy_to_iter+0x1de/0x1790 [ 403.261253][T15868] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 403.261281][T15868] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 403.261306][T15868] ? __pfx__copy_to_iter+0x10/0x10 [ 403.261330][T15868] ? skb_recv_datagram+0x145/0x190 [ 403.261358][T15868] j1939_sk_recvmsg+0x228/0x920 [ 403.261384][T15868] ? __pfx_j1939_sk_recvmsg+0x10/0x10 [ 403.261408][T15868] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 403.261425][T15868] ? security_socket_recvmsg+0x7e/0x2e0 [ 403.261445][T15868] ? __pfx_j1939_sk_recvmsg+0x10/0x10 [ 403.261465][T15868] sock_recvmsg+0x22c/0x270 [ 403.261493][T15868] ____sys_recvmsg+0x1c9/0x460 [ 403.261523][T15868] ? __pfx_____sys_recvmsg+0x10/0x10 [ 403.261559][T15868] ? import_iovec+0x74/0xa0 [ 403.261584][T15868] ___sys_recvmsg+0x1b5/0x510 [ 403.261610][T15868] ? __pfx____sys_recvmsg+0x10/0x10 [ 403.261667][T15868] ? __fget_files+0x3a0/0x420 [ 403.261695][T15868] do_recvmmsg+0x307/0x770 [ 403.261724][T15868] ? __pfx_do_recvmmsg+0x10/0x10 [ 403.261758][T15868] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.261791][T15868] __x64_sys_recvmmsg+0x190/0x240 [ 403.261814][T15868] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 403.261837][T15868] ? do_syscall_64+0xbe/0xfa0 [ 403.261856][T15868] do_syscall_64+0xfa/0xfa0 [ 403.261870][T15868] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.261882][T15868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.261897][T15868] ? clear_bhb_loop+0x60/0xb0 [ 403.261910][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.261920][T15868] RIP: 0033:0x7fe2aeb8f749 [ 403.261931][T15868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.261940][T15868] RSP: 002b:00007fe2afa88038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 403.261956][T15868] RAX: ffffffffffffffda RBX: 00007fe2aede5fa0 RCX: 00007fe2aeb8f749 [ 403.261963][T15868] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 403.261970][T15868] RBP: 00007fe2afa88090 R08: 0000000000000000 R09: 0000000000000000 [ 403.261977][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.261983][T15868] R13: 00007fe2aede6038 R14: 00007fe2aede5fa0 R15: 00007ffd51dddc58 [ 403.262000][T15868] [ 403.566751][T15858] __nla_validate_parse: 4 callbacks suppressed [ 403.566769][T15858] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2989'. [ 403.588084][T15792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.601344][T15792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.755768][T15792] team0: Port device team_slave_0 added [ 403.765227][T15792] team0: Port device team_slave_1 added [ 403.826780][ T5937] hid-generic 0005:0002:5508.0011: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 403.970687][T15792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.983964][T15792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.019168][T15886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2997'. [ 404.028887][T15792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.062653][T15792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.070452][T15792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.130155][T15891] FAULT_INJECTION: forcing a failure. [ 404.130155][T15891] name failslab, interval 1, probability 0, space 0, times 0 [ 404.143154][T15792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.155732][T15891] CPU: 1 UID: 0 PID: 15891 Comm: syz.4.2999 Not tainted syzkaller #0 PREEMPT(full) [ 404.155757][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.155768][T15891] Call Trace: [ 404.155776][T15891] [ 404.155784][T15891] dump_stack_lvl+0x189/0x250 [ 404.155812][T15891] ? __pfx____ratelimit+0x10/0x10 [ 404.155838][T15891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.155860][T15891] ? __pfx__printk+0x10/0x10 [ 404.155880][T15891] ? __pfx___might_resched+0x10/0x10 [ 404.155900][T15891] ? fs_reclaim_acquire+0x7d/0x100 [ 404.155922][T15891] should_fail_ex+0x414/0x560 [ 404.155953][T15891] should_failslab+0xa8/0x100 [ 404.155973][T15891] kmem_cache_alloc_node_noprof+0x77/0x710 [ 404.155997][T15891] ? __alloc_skb+0x255/0x430 [ 404.156013][T15891] ? napi_skb_cache_get+0x4a5/0x790 [ 404.156029][T15891] ? napi_skb_cache_get+0x151/0x790 [ 404.156051][T15891] __alloc_skb+0x255/0x430 [ 404.156071][T15891] ? __pfx___alloc_skb+0x10/0x10 [ 404.156091][T15891] ? netlink_autobind+0xdb/0x300 [ 404.156109][T15891] ? netlink_autobind+0x2c2/0x300 [ 404.156133][T15891] netlink_sendmsg+0x5c6/0xb30 [ 404.156162][T15891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.156185][T15891] ? aa_sock_msg_perm+0xf1/0x1d0 [ 404.156212][T15891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.156229][T15891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.156249][T15891] __sock_sendmsg+0x21c/0x270 [ 404.156276][T15891] ____sys_sendmsg+0x52d/0x830 [ 404.156302][T15891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.156331][T15891] ? import_iovec+0x74/0xa0 [ 404.156356][T15891] ___sys_sendmsg+0x21f/0x2a0 [ 404.156379][T15891] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.156436][T15891] ? __fget_files+0x2a/0x420 [ 404.156453][T15891] ? __fget_files+0x3a0/0x420 [ 404.156481][T15891] __sys_sendmmsg+0x227/0x430 [ 404.156507][T15891] ? __pfx___sys_sendmmsg+0x10/0x10 [ 404.156537][T15891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.156586][T15891] ? ksys_write+0x22a/0x250 [ 404.156620][T15891] ? __pfx_ksys_write+0x10/0x10 [ 404.156647][T15891] __x64_sys_sendmmsg+0xa0/0xc0 [ 404.156669][T15891] do_syscall_64+0xfa/0xfa0 [ 404.156686][T15891] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.156702][T15891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.156724][T15891] ? clear_bhb_loop+0x60/0xb0 [ 404.156744][T15891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.156761][T15891] RIP: 0033:0x7f9a45b8f749 [ 404.156778][T15891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.156792][T15891] RSP: 002b:00007f9a46a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 404.156809][T15891] RAX: ffffffffffffffda RBX: 00007f9a45de5fa0 RCX: 00007f9a45b8f749 [ 404.156821][T15891] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 404.156832][T15891] RBP: 00007f9a46a85090 R08: 0000000000000000 R09: 0000000000000000 [ 404.156843][T15891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.156853][T15891] R13: 00007f9a45de6038 R14: 00007f9a45de5fa0 R15: 00007ffc555a3a38 [ 404.156885][T15891] [ 405.010544][T15792] hsr_slave_0: entered promiscuous mode [ 405.024551][T15792] hsr_slave_1: entered promiscuous mode [ 405.031538][T15792] debugfs: 'hsr0' already exists in 'hsr' [ 405.038389][T15792] Cannot create hsr debugfs directory [ 405.149993][T15898] tipc: Enabling of bearer rejected, already enabled [ 405.158144][ T5148] Bluetooth: hci6: command tx timeout [ 405.340673][T15906] tipc: Enabling of bearer rejected, failed to enable media [ 405.390924][T15792] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 405.476977][T15792] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 405.582233][T15792] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 405.659006][T15792] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 405.792493][T15926] FAULT_INJECTION: forcing a failure. [ 405.792493][T15926] name failslab, interval 1, probability 0, space 0, times 0 [ 405.808517][T15926] CPU: 1 UID: 0 PID: 15926 Comm: syz.5.3010 Not tainted syzkaller #0 PREEMPT(full) [ 405.808543][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.808553][T15926] Call Trace: [ 405.808561][T15926] [ 405.808570][T15926] dump_stack_lvl+0x189/0x250 [ 405.808598][T15926] ? __pfx____ratelimit+0x10/0x10 [ 405.808624][T15926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.808647][T15926] ? __pfx__printk+0x10/0x10 [ 405.808672][T15926] ? __pfx___might_resched+0x10/0x10 [ 405.808690][T15926] ? fs_reclaim_acquire+0x7d/0x100 [ 405.808712][T15926] should_fail_ex+0x414/0x560 [ 405.808743][T15926] should_failslab+0xa8/0x100 [ 405.808763][T15926] __kmalloc_cache_noprof+0x6f/0x6f0 [ 405.808788][T15926] ? call_usermodehelper_setup+0x8e/0x270 [ 405.808805][T15926] ? trace_kmalloc+0x1f/0xd0 [ 405.808826][T15926] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 405.808855][T15926] call_usermodehelper_setup+0x8e/0x270 [ 405.808872][T15926] ? __pfx_free_modprobe_argv+0x10/0x10 [ 405.808896][T15926] __request_module+0x39f/0x5e0 [ 405.808921][T15926] ? __pfx___request_module+0x10/0x10 [ 405.808951][T15926] ? bpf_lsm_capable+0x9/0x20 [ 405.808972][T15926] ? security_capable+0x7e/0x2e0 [ 405.808998][T15926] ? dev_load+0x21/0x1f0 [ 405.809015][T15926] dev_load+0x190/0x1f0 [ 405.809034][T15926] devinet_ioctl+0x130/0x1b50 [ 405.809070][T15926] ? __pfx_devinet_ioctl+0x10/0x10 [ 405.809098][T15926] ? get_user_ifreq+0x12c/0x180 [ 405.809122][T15926] inet_ioctl+0x33b/0x4c0 [ 405.809144][T15926] ? __pfx_inet_ioctl+0x10/0x10 [ 405.809160][T15926] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.809200][T15926] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 405.809224][T15926] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 405.809248][T15926] ? packet_ioctl+0x10d/0x350 [ 405.809269][T15926] sock_do_ioctl+0xdc/0x300 [ 405.809295][T15926] ? __pfx_sock_do_ioctl+0x10/0x10 [ 405.809334][T15926] sock_ioctl+0x576/0x790 [ 405.809359][T15926] ? __pfx_sock_ioctl+0x10/0x10 [ 405.809385][T15926] ? __fget_files+0x3a0/0x420 [ 405.809401][T15926] ? __fget_files+0x2a/0x420 [ 405.809421][T15926] ? bpf_lsm_file_ioctl+0x9/0x20 [ 405.809440][T15926] ? __pfx_sock_ioctl+0x10/0x10 [ 405.809462][T15926] __se_sys_ioctl+0xfc/0x170 [ 405.809487][T15926] do_syscall_64+0xfa/0xfa0 [ 405.809503][T15926] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.809520][T15926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.809538][T15926] ? clear_bhb_loop+0x60/0xb0 [ 405.809560][T15926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.809578][T15926] RIP: 0033:0x7fe2aeb8f749 [ 405.809594][T15926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.809609][T15926] RSP: 002b:00007fe2afa88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.809629][T15926] RAX: ffffffffffffffda RBX: 00007fe2aede5fa0 RCX: 00007fe2aeb8f749 [ 405.809643][T15926] RDX: 0000200000000500 RSI: 0000000000008919 RDI: 0000000000000003 [ 405.809655][T15926] RBP: 00007fe2afa88090 R08: 0000000000000000 R09: 0000000000000000 [ 405.809666][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.809678][T15926] R13: 00007fe2aede6038 R14: 00007fe2aede5fa0 R15: 00007ffd51dddc58 [ 405.809710][T15926] [ 405.925552][T15792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.171784][T15792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 406.197314][T15792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 406.219348][T15792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 406.408239][T15792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.473123][T15792] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.488330][T15940] tipc: Enabling of bearer rejected, already enabled [ 406.503807][ T8650] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.511020][ T8650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.557082][ T8650] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.564324][ T8650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.057185][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3011'. [ 407.177126][T15792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.248497][ T5148] Bluetooth: hci6: command tx timeout [ 407.325373][T15792] veth0_vlan: entered promiscuous mode [ 407.368461][T15792] veth1_vlan: entered promiscuous mode [ 407.454420][T15792] veth0_macvtap: entered promiscuous mode [ 407.493548][T15792] veth1_macvtap: entered promiscuous mode [ 407.542377][T15792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.624944][T15792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.670466][ T8650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.685990][ T8650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.700762][T15958] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.710419][ T8650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.731180][ T8650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.914887][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.925859][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.995466][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.004282][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.089041][T15968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3018'. [ 408.410299][T15982] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 408.440209][T15982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3023'. [ 408.454172][T15982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.461509][T15982] IPv6: NLM_F_CREATE should be set when creating new route [ 408.468791][T15982] IPv6: NLM_F_CREATE should be set when creating new route [ 408.484969][T15982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.492740][T15982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3023'. [ 408.660409][T15989] tipc: Started in network mode [ 408.665391][T15989] tipc: Node identity fa47fe662433, cluster identity 4711 [ 408.674206][T15989] tipc: Enabled bearer , priority 0 [ 408.690751][T15989] syzkaller0: entered promiscuous mode [ 408.696576][T15989] syzkaller0: entered allmulticast mode [ 408.816760][T15995] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3027'. [ 408.852143][T15995] vlan2: entered allmulticast mode [ 408.920828][T15995] erspan0: entered allmulticast mode [ 409.040533][T15997] tipc: New replicast peer: 255.255.255.255 [ 409.047333][T15997] tipc: Enabled bearer , priority 10 [ 409.281413][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 409.318553][ T5148] Bluetooth: hci6: command tx timeout [ 409.756901][T15999] team0 (unregistering): Port device team_slave_0 removed [ 409.780979][T15999] team0 (unregistering): Port device team_slave_1 removed [ 409.789114][T16007] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3032'. [ 409.801947][T16006] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3032'. [ 409.924760][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3032'. [ 410.059365][ T983] hid-generic 0005:0002:5508.0012: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 410.070542][ T5833] tipc: Node number set to 3732209254 [ 410.251486][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3036'. [ 410.260919][T16023] bridge_slave_1: left allmulticast mode [ 410.266581][T16023] bridge_slave_1: left promiscuous mode [ 410.275577][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.348788][T16023] bridge_slave_0: left allmulticast mode [ 410.374473][T16023] bridge_slave_0: left promiscuous mode [ 410.429601][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.024669][T16046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.032031][T16046] IPv6: NLM_F_CREATE should be set when creating new route [ 411.039320][T16046] IPv6: NLM_F_CREATE should be set when creating new route [ 411.049569][T16044] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 411.059315][T16044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.090698][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3038'. [ 412.108690][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'. [ 412.262027][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3045'. [ 412.317581][T16084] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 412.464318][T16096] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3049'. [ 412.877640][T16102] IPVS: sh: FWM 3 0x00000003 - no destination available [ 412.884988][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 413.336133][T16112] tipc: Enabling of bearer rejected, already enabled [ 413.429975][T16115] netlink: 'syz.5.3053': attribute type 1 has an invalid length. [ 413.542022][T16123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.577572][ T9] IPVS: starting estimator thread 0... [ 413.678182][T16130] IPVS: using max 30 ests per chain, 72000 per kthread [ 413.694952][T16115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.712292][T16115] bond3: (slave geneve2): making interface the new active one [ 413.726091][T16115] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 413.743611][ T3023] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 413.753021][ T3023] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 413.816475][ T3023] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 413.857477][ T3023] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 414.581546][T16144] IPVS: sh: FWM 3 0x00000003 - no destination available [ 414.618383][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 414.769549][T16161] __nla_validate_parse: 3 callbacks suppressed [ 414.769567][T16161] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3067'. [ 414.920980][T16165] netlink: 'syz.2.3069': attribute type 29 has an invalid length. [ 415.140010][T16180] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3073'. [ 415.249515][T16184] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 415.372260][T16188] FAULT_INJECTION: forcing a failure. [ 415.372260][T16188] name failslab, interval 1, probability 0, space 0, times 0 [ 415.385137][T16188] CPU: 1 UID: 0 PID: 16188 Comm: syz.4.3076 Not tainted syzkaller #0 PREEMPT(full) [ 415.385162][T16188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.385173][T16188] Call Trace: [ 415.385180][T16188] [ 415.385188][T16188] dump_stack_lvl+0x189/0x250 [ 415.385217][T16188] ? __pfx____ratelimit+0x10/0x10 [ 415.385244][T16188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.385266][T16188] ? __pfx__printk+0x10/0x10 [ 415.385287][T16188] ? __pfx_fib6_nh_init+0x10/0x10 [ 415.385309][T16188] ? kasan_save_track+0x4f/0x80 [ 415.385332][T16188] ? __kasan_kmalloc+0x93/0xb0 [ 415.385346][T16188] ? __kmalloc_noprof+0x411/0x7f0 [ 415.385367][T16188] ? fib6_info_alloc+0x30/0xf0 [ 415.385392][T16188] should_fail_ex+0x414/0x560 [ 415.385423][T16188] should_failslab+0xa8/0x100 [ 415.385439][T16188] kmem_cache_alloc_noprof+0x74/0x6e0 [ 415.385459][T16188] ? fib6_add_1+0x714/0x1460 [ 415.385481][T16188] fib6_add_1+0x714/0x1460 [ 415.385517][T16188] fib6_add+0x33f/0x18a0 [ 415.385556][T16188] ? __pfx_fib6_add+0x10/0x10 [ 415.385588][T16188] ? ip6_route_add+0xc9/0x1b0 [ 415.385614][T16188] ip6_route_add+0xde/0x1b0 [ 415.385641][T16188] ipv6_route_ioctl+0x35c/0x480 [ 415.385665][T16188] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 415.385725][T16188] inet6_ioctl+0x219/0x280 [ 415.385746][T16188] ? __pfx_inet6_ioctl+0x10/0x10 [ 415.385777][T16188] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 415.385806][T16188] sock_do_ioctl+0xdc/0x300 [ 415.385834][T16188] ? __pfx_sock_do_ioctl+0x10/0x10 [ 415.385873][T16188] sock_ioctl+0x576/0x790 [ 415.385897][T16188] ? __pfx_sock_ioctl+0x10/0x10 [ 415.385923][T16188] ? __fget_files+0x3a0/0x420 [ 415.385939][T16188] ? __fget_files+0x2a/0x420 [ 415.385960][T16188] ? bpf_lsm_file_ioctl+0x9/0x20 [ 415.385981][T16188] ? __pfx_sock_ioctl+0x10/0x10 [ 415.386002][T16188] __se_sys_ioctl+0xfc/0x170 [ 415.386026][T16188] do_syscall_64+0xfa/0xfa0 [ 415.386042][T16188] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.386060][T16188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.386078][T16188] ? clear_bhb_loop+0x60/0xb0 [ 415.386100][T16188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.386116][T16188] RIP: 0033:0x7f9a45b8f749 [ 415.386134][T16188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.386150][T16188] RSP: 002b:00007f9a46a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.386170][T16188] RAX: ffffffffffffffda RBX: 00007f9a45de5fa0 RCX: 00007f9a45b8f749 [ 415.386183][T16188] RDX: 0000200000000580 RSI: 000000000000890b RDI: 0000000000000003 [ 415.386196][T16188] RBP: 00007f9a46a85090 R08: 0000000000000000 R09: 0000000000000000 [ 415.386207][T16188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.386217][T16188] R13: 00007f9a45de6038 R14: 00007f9a45de5fa0 R15: 00007ffc555a3a38 [ 415.386249][T16188] [ 415.831419][T16194] vlan1: entered promiscuous mode [ 415.837038][T16194] vlan1: entered allmulticast mode [ 415.846320][T16194] veth0_vlan: entered allmulticast mode [ 416.021971][T16195] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3077'. [ 416.119284][T16198] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3080'. [ 416.551502][T16221] bond0: option arp_all_targets: invalid value (2047) [ 416.750430][T16229] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 416.794019][T16234] tipc: Enabling of bearer rejected, already enabled [ 417.680265][T16273] Cannot find add_set index 0 as target [ 417.713726][T16273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3105'. [ 417.760479][T16279] FAULT_INJECTION: forcing a failure. [ 417.760479][T16279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.773883][T16279] CPU: 1 UID: 0 PID: 16279 Comm: syz.2.3108 Not tainted syzkaller #0 PREEMPT(full) [ 417.773907][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.773918][T16279] Call Trace: [ 417.773926][T16279] [ 417.773934][T16279] dump_stack_lvl+0x189/0x250 [ 417.773960][T16279] ? __pfx____ratelimit+0x10/0x10 [ 417.773985][T16279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.774006][T16279] ? __pfx__printk+0x10/0x10 [ 417.774024][T16279] ? __might_fault+0xb0/0x130 [ 417.774059][T16279] should_fail_ex+0x414/0x560 [ 417.774090][T16279] _copy_from_iter+0x1de/0x1790 [ 417.774109][T16279] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 417.774149][T16279] ? __pfx__copy_from_iter+0x10/0x10 [ 417.774168][T16279] ? alloc_pages_noprof+0xbe/0x190 [ 417.774188][T16279] ? skb_page_frag_refill+0x199/0x320 [ 417.774219][T16279] kcm_sendmsg+0xf00/0x2ad0 [ 417.774286][T16279] ? __pfx_kcm_sendmsg+0x10/0x10 [ 417.774309][T16279] ? aa_sock_msg_perm+0xf1/0x1d0 [ 417.774336][T16279] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.774362][T16279] ? __pfx_kcm_sendmsg+0x10/0x10 [ 417.774383][T16279] __sock_sendmsg+0x21c/0x270 [ 417.774411][T16279] ____sys_sendmsg+0x505/0x830 [ 417.774437][T16279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.774467][T16279] ? import_iovec+0x74/0xa0 [ 417.774493][T16279] ___sys_sendmsg+0x21f/0x2a0 [ 417.774516][T16279] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.774576][T16279] ? __fget_files+0x2a/0x420 [ 417.774592][T16279] ? __fget_files+0x3a0/0x420 [ 417.774619][T16279] __x64_sys_sendmsg+0x19b/0x260 [ 417.774643][T16279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.774672][T16279] ? __pfx_ksys_write+0x10/0x10 [ 417.774698][T16279] ? do_syscall_64+0xbe/0xfa0 [ 417.774719][T16279] do_syscall_64+0xfa/0xfa0 [ 417.774735][T16279] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.774750][T16279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.774767][T16279] ? clear_bhb_loop+0x60/0xb0 [ 417.774788][T16279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.774805][T16279] RIP: 0033:0x7fcfcf38f749 [ 417.774822][T16279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.774837][T16279] RSP: 002b:00007fcfd0237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.774856][T16279] RAX: ffffffffffffffda RBX: 00007fcfcf5e5fa0 RCX: 00007fcfcf38f749 [ 417.774869][T16279] RDX: 0000000000000000 RSI: 0000200000002080 RDI: 0000000000000003 [ 417.774881][T16279] RBP: 00007fcfd0237090 R08: 0000000000000000 R09: 0000000000000000 [ 417.774892][T16279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.774903][T16279] R13: 00007fcfcf5e6038 R14: 00007fcfcf5e5fa0 R15: 00007ffdc6907b98 [ 417.774935][T16279] [ 418.144025][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.156979][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.176624][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.231949][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.241207][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.422676][ T7674] hid-generic 0005:0002:5508.0013: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 418.729262][T16281] chnl_net:caif_netlink_parms(): no params data found [ 418.971615][T16281] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.980376][T16281] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.988095][T16326] netlink: 'syz.4.3122': attribute type 1 has an invalid length. [ 418.988678][T16281] bridge_slave_0: entered allmulticast mode [ 418.996362][T16326] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3122'. [ 419.018527][T16281] bridge_slave_0: entered promiscuous mode [ 419.089495][T16281] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.097725][T16281] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.105019][T16281] bridge_slave_1: entered allmulticast mode [ 419.112999][T16281] bridge_slave_1: entered promiscuous mode [ 419.142922][T16326] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 419.188345][T16281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.223501][T16281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.345760][T16340] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3125'. [ 419.414622][ T983] hid-generic 0005:0002:5508.0014: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 419.460517][T16281] team0: Port device team_slave_0 added [ 419.486175][T16281] team0: Port device team_slave_1 added [ 419.555127][T16281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.568146][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.594850][T16281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.629095][T16350] tipc: Started in network mode [ 419.634027][T16350] tipc: Node identity aa7eb0fc4635, cluster identity 4711 [ 419.653999][T16350] tipc: Enabled bearer , priority 0 [ 419.664577][T16350] syzkaller0: entered promiscuous mode [ 419.670466][T16350] syzkaller0: entered allmulticast mode [ 419.694099][T16281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.702413][T16281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.762411][T16281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.817080][T16361] syzkaller0: mtu less than device minimum [ 419.878955][T16349] tipc: Resetting bearer [ 419.906314][T16349] tipc: Disabling bearer [ 420.043712][T16281] hsr_slave_0: entered promiscuous mode [ 420.069397][T16281] hsr_slave_1: entered promiscuous mode [ 420.101724][T16281] debugfs: 'hsr0' already exists in 'hsr' [ 420.108022][T16281] Cannot create hsr debugfs directory [ 420.134093][T16371] ipt_REJECT: ECHOREPLY no longer supported. [ 420.159575][T16376] netlink: 'syz.5.3136': attribute type 39 has an invalid length. [ 420.210798][T16373] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3136'. [ 420.229862][T16373] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3136'. [ 420.247017][T16373] netlink: 'syz.5.3136': attribute type 5 has an invalid length. [ 420.260713][T16373] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3136'. [ 420.359911][ T5842] Bluetooth: hci2: command tx timeout [ 420.436848][ T7677] hid-generic 0005:0002:5508.0015: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 420.476652][T16389] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 420.491518][T16389] bond1 (unregistering): Released all slaves [ 420.842700][T16281] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 420.953006][T16281] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 420.973596][T16281] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 421.007273][T16281] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 421.168695][T16281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.197033][T16281] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.226036][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.233318][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.275262][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.282543][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.741471][T16451] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3153'. [ 421.789875][T16451] syzkaller1: entered promiscuous mode [ 421.825579][T16451] syzkaller1: entered allmulticast mode [ 421.874215][T16281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.942430][T16458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3153'. [ 422.437793][ T5842] Bluetooth: hci2: command tx timeout [ 422.517266][T16479] netem: incorrect ge model size [ 422.552375][T16479] netem: change failed [ 422.750959][T16281] veth0_vlan: entered promiscuous mode [ 422.770265][T16281] veth1_vlan: entered promiscuous mode [ 422.783087][T16493] netlink: 'syz.5.3161': attribute type 29 has an invalid length. [ 422.826679][T16491] netlink: 'syz.5.3161': attribute type 29 has an invalid length. [ 422.864965][T16281] veth0_macvtap: entered promiscuous mode [ 422.878149][T16281] veth1_macvtap: entered promiscuous mode [ 422.906744][T16281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.984975][T16281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.013644][T16500] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 423.032105][ T1160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.042534][ T1160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.055283][ T1160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.085038][ T1160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.194708][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.213535][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.271557][T16512] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3166'. [ 423.290490][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.306562][T16512] syzkaller1: entered promiscuous mode [ 423.307120][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.312992][T16512] syzkaller1: entered allmulticast mode [ 423.326655][T16514] FAULT_INJECTION: forcing a failure. [ 423.326655][T16514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.345850][T16514] CPU: 0 UID: 0 PID: 16514 Comm: syz.3.3167 Not tainted syzkaller #0 PREEMPT(full) [ 423.345876][T16514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 423.345887][T16514] Call Trace: [ 423.345895][T16514] [ 423.345903][T16514] dump_stack_lvl+0x189/0x250 [ 423.345931][T16514] ? __pfx____ratelimit+0x10/0x10 [ 423.345955][T16514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.345977][T16514] ? __pfx__printk+0x10/0x10 [ 423.346006][T16514] should_fail_ex+0x414/0x560 [ 423.346036][T16514] _copy_to_user+0x31/0xb0 [ 423.346061][T16514] simple_read_from_buffer+0xe1/0x170 [ 423.346091][T16514] proc_fail_nth_read+0x1b3/0x220 [ 423.346117][T16514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.346141][T16514] ? rw_verify_area+0x2a6/0x4d0 [ 423.346164][T16514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 423.346187][T16514] vfs_read+0x200/0xa30 [ 423.346218][T16514] ? __pfx_vfs_read+0x10/0x10 [ 423.346238][T16514] ? __sys_bpf+0x690/0x860 [ 423.346258][T16514] ? __pfx___sys_bpf+0x10/0x10 [ 423.346292][T16514] ksys_read+0x145/0x250 [ 423.346317][T16514] ? __pfx_ksys_read+0x10/0x10 [ 423.346344][T16514] ? do_syscall_64+0xbe/0xfa0 [ 423.346365][T16514] do_syscall_64+0xfa/0xfa0 [ 423.346381][T16514] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.346399][T16514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.346417][T16514] ? clear_bhb_loop+0x60/0xb0 [ 423.346438][T16514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.346455][T16514] RIP: 0033:0x7f77d598e15c [ 423.346471][T16514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 423.346487][T16514] RSP: 002b:00007f77d6810030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.346506][T16514] RAX: ffffffffffffffda RBX: 00007f77d5be5fa0 RCX: 00007f77d598e15c [ 423.346519][T16514] RDX: 000000000000000f RSI: 00007f77d68100a0 RDI: 0000000000000006 [ 423.346530][T16514] RBP: 00007f77d6810090 R08: 0000000000000000 R09: 0000000000000000 [ 423.346541][T16514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.346552][T16514] R13: 00007f77d5be6038 R14: 00007f77d5be5fa0 R15: 00007fff932c9508 [ 423.346583][T16514] [ 423.612992][T16517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3166'. [ 423.818189][T16527] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3168'. [ 424.262211][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3172'. [ 424.330234][T16534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 424.384314][T16548] FAULT_INJECTION: forcing a failure. [ 424.384314][T16548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.398086][T16548] CPU: 0 UID: 0 PID: 16548 Comm: syz.6.3175 Not tainted syzkaller #0 PREEMPT(full) [ 424.398110][T16548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.398122][T16548] Call Trace: [ 424.398129][T16548] [ 424.398137][T16548] dump_stack_lvl+0x189/0x250 [ 424.398165][T16548] ? __pfx____ratelimit+0x10/0x10 [ 424.398190][T16548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.398213][T16548] ? __pfx__printk+0x10/0x10 [ 424.398232][T16548] ? __might_fault+0xb0/0x130 [ 424.398267][T16548] should_fail_ex+0x414/0x560 [ 424.398298][T16548] _copy_from_iter+0x1de/0x1790 [ 424.398314][T16548] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 424.398338][T16548] ? kmalloc_reserve+0xbd/0x290 [ 424.398366][T16548] ? __pfx__copy_from_iter+0x10/0x10 [ 424.398383][T16548] ? __alloc_skb+0x2f1/0x430 [ 424.398403][T16548] ? __pfx___alloc_skb+0x10/0x10 [ 424.398423][T16548] ? netlink_sendmsg+0x642/0xb30 [ 424.398441][T16548] ? skb_put+0x11b/0x210 [ 424.398464][T16548] netlink_sendmsg+0x6b2/0xb30 [ 424.398493][T16548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.398515][T16548] ? aa_sock_msg_perm+0xf1/0x1d0 [ 424.398541][T16548] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.398559][T16548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.398577][T16548] __sock_sendmsg+0x21c/0x270 [ 424.398604][T16548] ____sys_sendmsg+0x505/0x830 [ 424.398630][T16548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.398659][T16548] ? import_iovec+0x74/0xa0 [ 424.398684][T16548] ___sys_sendmsg+0x21f/0x2a0 [ 424.398706][T16548] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.398794][T16548] ? __fget_files+0x2a/0x420 [ 424.398811][T16548] ? __fget_files+0x3a0/0x420 [ 424.398836][T16548] __x64_sys_sendmsg+0x19b/0x260 [ 424.398859][T16548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.398890][T16548] ? __pfx_ksys_write+0x10/0x10 [ 424.398917][T16548] ? do_syscall_64+0xbe/0xfa0 [ 424.398938][T16548] do_syscall_64+0xfa/0xfa0 [ 424.398957][T16548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.398973][T16548] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.398990][T16548] ? clear_bhb_loop+0x60/0xb0 [ 424.399011][T16548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.399029][T16548] RIP: 0033:0x7fab6638f749 [ 424.399045][T16548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.399060][T16548] RSP: 002b:00007fab672f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.399079][T16548] RAX: ffffffffffffffda RBX: 00007fab665e5fa0 RCX: 00007fab6638f749 [ 424.399092][T16548] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000005 [ 424.399104][T16548] RBP: 00007fab672f3090 R08: 0000000000000000 R09: 0000000000000000 [ 424.399115][T16548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.399126][T16548] R13: 00007fab665e6038 R14: 00007fab665e5fa0 R15: 00007ffe071af468 [ 424.399156][T16548] [ 424.728670][ T5842] Bluetooth: hci2: command tx timeout [ 424.905416][T16558] FAULT_INJECTION: forcing a failure. [ 424.905416][T16558] name failslab, interval 1, probability 0, space 0, times 0 [ 424.945243][T16558] CPU: 1 UID: 0 PID: 16558 Comm: syz.6.3177 Not tainted syzkaller #0 PREEMPT(full) [ 424.945270][T16558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.945281][T16558] Call Trace: [ 424.945289][T16558] [ 424.945298][T16558] dump_stack_lvl+0x189/0x250 [ 424.945325][T16558] ? __pfx____ratelimit+0x10/0x10 [ 424.945350][T16558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.945372][T16558] ? __pfx__printk+0x10/0x10 [ 424.945396][T16558] ? __pfx___might_resched+0x10/0x10 [ 424.945412][T16558] ? fs_reclaim_acquire+0x7d/0x100 [ 424.945432][T16558] should_fail_ex+0x414/0x560 [ 424.945461][T16558] should_failslab+0xa8/0x100 [ 424.945480][T16558] __kmalloc_noprof+0xcb/0x7f0 [ 424.945501][T16558] ? sock_kmalloc+0xd6/0x160 [ 424.945527][T16558] sock_kmalloc+0xd6/0x160 [ 424.945551][T16558] ____sys_sendmsg+0x1b5/0x830 [ 424.945573][T16558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.945601][T16558] ? import_iovec+0x74/0xa0 [ 424.945627][T16558] ___sys_sendmsg+0x21f/0x2a0 [ 424.945650][T16558] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.945702][T16558] ? __fget_files+0x2a/0x420 [ 424.945719][T16558] ? __fget_files+0x3a0/0x420 [ 424.945747][T16558] __x64_sys_sendmsg+0x19b/0x260 [ 424.945767][T16558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.945797][T16558] ? __pfx_ksys_write+0x10/0x10 [ 424.945824][T16558] ? do_syscall_64+0xbe/0xfa0 [ 424.945843][T16558] do_syscall_64+0xfa/0xfa0 [ 424.945858][T16558] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.945874][T16558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.945890][T16558] ? clear_bhb_loop+0x60/0xb0 [ 424.945913][T16558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.945929][T16558] RIP: 0033:0x7fab6638f749 [ 424.945944][T16558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.945964][T16558] RSP: 002b:00007fab672f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.945982][T16558] RAX: ffffffffffffffda RBX: 00007fab665e5fa0 RCX: 00007fab6638f749 [ 424.945995][T16558] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 424.946006][T16558] RBP: 00007fab672f3090 R08: 0000000000000000 R09: 0000000000000000 [ 424.946014][T16558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.946024][T16558] R13: 00007fab665e6038 R14: 00007fab665e5fa0 R15: 00007ffe071af468 [ 424.946051][T16558] [ 425.228459][T16560] __nla_validate_parse: 2 callbacks suppressed [ 425.228478][T16560] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3179'. [ 425.323841][T16565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 425.472021][T16567] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3181'. [ 425.621792][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3182'. [ 425.697231][T16578] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3183'. [ 425.723444][T16578] syzkaller1: entered promiscuous mode [ 425.729643][T16578] syzkaller1: entered allmulticast mode [ 425.794285][ T983] hid-generic 0005:0002:5508.0016: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 425.898547][T16585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3183'. [ 426.089206][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.101952][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.113443][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.123266][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.324826][T16604] FAULT_INJECTION: forcing a failure. [ 426.324826][T16604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.338639][T16604] CPU: 0 UID: 0 PID: 16604 Comm: syz.3.3192 Not tainted syzkaller #0 PREEMPT(full) [ 426.338663][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.338674][T16604] Call Trace: [ 426.338683][T16604] [ 426.338691][T16604] dump_stack_lvl+0x189/0x250 [ 426.338720][T16604] ? __pfx____ratelimit+0x10/0x10 [ 426.338746][T16604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.338769][T16604] ? __pfx__printk+0x10/0x10 [ 426.338789][T16604] ? __might_fault+0xb0/0x130 [ 426.338824][T16604] should_fail_ex+0x414/0x560 [ 426.338854][T16604] _copy_from_iter+0x1de/0x1790 [ 426.338872][T16604] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 426.338904][T16604] ? kmalloc_reserve+0xbd/0x290 [ 426.338936][T16604] ? __pfx__copy_from_iter+0x10/0x10 [ 426.338953][T16604] ? __alloc_skb+0x2f1/0x430 [ 426.338973][T16604] ? __pfx___alloc_skb+0x10/0x10 [ 426.338994][T16604] ? netlink_sendmsg+0x642/0xb30 [ 426.339011][T16604] ? skb_put+0x11b/0x210 [ 426.339033][T16604] netlink_sendmsg+0x6b2/0xb30 [ 426.339061][T16604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.339084][T16604] ? aa_sock_msg_perm+0xf1/0x1d0 [ 426.339110][T16604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.339127][T16604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.339147][T16604] __sock_sendmsg+0x21c/0x270 [ 426.339174][T16604] ____sys_sendmsg+0x505/0x830 [ 426.339200][T16604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.339230][T16604] ? import_iovec+0x74/0xa0 [ 426.339255][T16604] ___sys_sendmsg+0x21f/0x2a0 [ 426.339277][T16604] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.339334][T16604] ? __fget_files+0x2a/0x420 [ 426.339350][T16604] ? __fget_files+0x3a0/0x420 [ 426.339378][T16604] __x64_sys_sendmsg+0x19b/0x260 [ 426.339401][T16604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.339454][T16604] ? __pfx_ksys_write+0x10/0x10 [ 426.339482][T16604] ? do_syscall_64+0xbe/0xfa0 [ 426.339504][T16604] do_syscall_64+0xfa/0xfa0 [ 426.339523][T16604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.339539][T16604] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 426.339557][T16604] ? clear_bhb_loop+0x60/0xb0 [ 426.339582][T16604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.339599][T16604] RIP: 0033:0x7f77d598f749 [ 426.339616][T16604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.339631][T16604] RSP: 002b:00007f77d6810038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.339649][T16604] RAX: ffffffffffffffda RBX: 00007f77d5be5fa0 RCX: 00007f77d598f749 [ 426.339662][T16604] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 426.339673][T16604] RBP: 00007f77d6810090 R08: 0000000000000000 R09: 0000000000000000 [ 426.339684][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.339694][T16604] R13: 00007f77d5be6038 R14: 00007f77d5be5fa0 R15: 00007fff932c9508 [ 426.339724][T16604] [ 426.639600][T16610] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3193'. [ 426.762957][ T5842] Bluetooth: hci2: command tx timeout [ 426.793065][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3197'. [ 427.145562][T16637] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 427.642007][T16647] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3204'. [ 427.739282][T16650] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3206'. [ 427.752784][T16651] syz_tun: entered allmulticast mode [ 428.084818][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3210'. [ 428.155496][T16663] bridge_slave_1: left allmulticast mode [ 428.170962][T16663] bridge_slave_1: left promiscuous mode [ 428.191247][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.320283][T16663] bridge_slave_0: left allmulticast mode [ 428.334999][T16663] bridge_slave_0: left promiscuous mode [ 428.365269][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.067987][T16704] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 429.834459][T16726] tipc: Enabling of bearer rejected, failed to enable media [ 430.109506][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.118034][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.373195][T16754] __nla_validate_parse: 2 callbacks suppressed [ 430.373214][T16754] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3235'. [ 430.686141][T16766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3239'. [ 430.982318][T16788] tipc: Enabling of bearer rejected, already enabled [ 431.048190][T16792] tipc: New replicast peer: 255.255.255.255 [ 431.076560][T16792] tipc: Enabled bearer , priority 10 [ 431.612197][T16824] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3258'. [ 431.621877][T16824] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 432.085255][ T7677] tipc: Node number set to 3964383484 [ 432.297171][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3266'. [ 432.495289][T16853] dummy0: entered promiscuous mode [ 432.516593][T16853] macsec1: entered promiscuous mode [ 432.549098][T16853] dummy0: left promiscuous mode [ 433.018927][T16888] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.055190][T16890] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3281'. [ 433.101143][T16890] syzkaller1: entered promiscuous mode [ 433.133459][T16890] syzkaller1: entered allmulticast mode [ 433.215232][T16896] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3282'. [ 433.226454][T16896] netlink: 'syz.3.3282': attribute type 33 has an invalid length. [ 433.239600][T16896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3282'. [ 433.250404][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'. [ 433.252746][T16898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3281'. [ 433.604873][T16910] netlink: 'syz.6.3284': attribute type 1 has an invalid length. [ 433.632269][T16910] netlink: 'syz.6.3284': attribute type 1 has an invalid length. [ 433.689247][T16910] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3284'. [ 434.375008][T16945] FAULT_INJECTION: forcing a failure. [ 434.375008][T16945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.402540][T16945] CPU: 0 UID: 0 PID: 16945 Comm: syz.4.3294 Not tainted syzkaller #0 PREEMPT(full) [ 434.402567][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.402579][T16945] Call Trace: [ 434.402586][T16945] [ 434.402594][T16945] dump_stack_lvl+0x189/0x250 [ 434.402622][T16945] ? __pfx____ratelimit+0x10/0x10 [ 434.402647][T16945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.402670][T16945] ? __pfx__printk+0x10/0x10 [ 434.402700][T16945] should_fail_ex+0x414/0x560 [ 434.402729][T16945] _copy_from_user+0x2d/0xb0 [ 434.402752][T16945] __copy_msghdr+0x3c5/0x5b0 [ 434.402776][T16945] ___sys_sendmsg+0x1a5/0x2a0 [ 434.402817][T16945] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.402877][T16945] ? __fget_files+0x2a/0x420 [ 434.402894][T16945] ? __fget_files+0x3a0/0x420 [ 434.402936][T16945] __sys_sendmmsg+0x227/0x430 [ 434.402962][T16945] ? __pfx___sys_sendmmsg+0x10/0x10 [ 434.402996][T16945] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 434.403039][T16945] ? ksys_write+0x22a/0x250 [ 434.403064][T16945] ? __pfx_ksys_write+0x10/0x10 [ 434.403093][T16945] __x64_sys_sendmmsg+0xa0/0xc0 [ 434.403114][T16945] do_syscall_64+0xfa/0xfa0 [ 434.403131][T16945] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.403152][T16945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.403167][T16945] ? clear_bhb_loop+0x60/0xb0 [ 434.403187][T16945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.403204][T16945] RIP: 0033:0x7f9a45b8f749 [ 434.403220][T16945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.403235][T16945] RSP: 002b:00007f9a46a85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 434.403258][T16945] RAX: ffffffffffffffda RBX: 00007f9a45de5fa0 RCX: 00007f9a45b8f749 [ 434.403271][T16945] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000003 [ 434.403283][T16945] RBP: 00007f9a46a85090 R08: 0000000000000000 R09: 0000000000000000 [ 434.403294][T16945] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 434.403309][T16945] R13: 00007f9a45de6038 R14: 00007f9a45de5fa0 R15: 00007ffc555a3a38 [ 434.403339][T16945] [ 434.406309][T16946] netlink: 'syz.3.3292': attribute type 4 has an invalid length. [ 434.457712][T16949] netlink: 'syz.3.3292': attribute type 4 has an invalid length. [ 434.969753][T16972] dvmrp12: entered allmulticast mode [ 435.015432][T16979] xt_hashlimit: size too large, truncated to 1048576 [ 435.086151][T16972] dvmrp12: left allmulticast mode [ 435.228824][T16978] syz.3.3306: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 435.301293][T16978] CPU: 0 UID: 0 PID: 16978 Comm: syz.3.3306 Not tainted syzkaller #0 PREEMPT(full) [ 435.301319][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.301331][T16978] Call Trace: [ 435.301338][T16978] [ 435.301347][T16978] dump_stack_lvl+0x189/0x250 [ 435.301379][T16978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.301402][T16978] ? __pfx__printk+0x10/0x10 [ 435.301428][T16978] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 435.301451][T16978] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 435.301477][T16978] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 435.301503][T16978] warn_alloc+0x214/0x310 [ 435.301534][T16978] ? __pfx_warn_alloc+0x10/0x10 [ 435.301568][T16978] ? __get_vm_area_node+0x28f/0x300 [ 435.301592][T16978] ? htable_create+0x101/0x7a0 [ 435.301620][T16978] __vmalloc_node_range_noprof+0x690/0x12d0 [ 435.301676][T16978] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 435.301704][T16978] ? rcu_is_watching+0x15/0xb0 [ 435.301725][T16978] ? htable_create+0x101/0x7a0 [ 435.301748][T16978] __kvmalloc_node_noprof+0x674/0x910 [ 435.301774][T16978] ? htable_create+0x101/0x7a0 [ 435.301794][T16978] ? hashlimit_pernet+0x23/0x240 [ 435.301817][T16978] ? hashlimit_pernet+0x23/0x240 [ 435.301838][T16978] ? hashlimit_pernet+0x23/0x240 [ 435.301868][T16978] htable_create+0x101/0x7a0 [ 435.301905][T16978] hashlimit_mt_check_common+0x719/0xa10 [ 435.301939][T16978] hashlimit_mt_check_v1+0x221/0x360 [ 435.301966][T16978] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 435.301996][T16978] ? xt_find_match+0x1f7/0x250 [ 435.302026][T16978] xt_check_match+0x3d1/0xab0 [ 435.302054][T16978] ? __pfx_xt_check_match+0x10/0x10 [ 435.302080][T16978] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 435.302115][T16978] ? xt_find_match+0x1f7/0x250 [ 435.302144][T16978] translate_table+0x150b/0x2000 [ 435.302190][T16978] ? __pfx_translate_table+0x10/0x10 [ 435.302214][T16978] ? __might_fault+0xb0/0x130 [ 435.302264][T16978] ? _copy_from_user+0x94/0xb0 [ 435.302291][T16978] do_ipt_set_ctl+0x967/0xcd0 [ 435.302316][T16978] ? rcu_is_watching+0x15/0xb0 [ 435.302336][T16978] ? trace_contention_end+0x39/0x120 [ 435.302358][T16978] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 435.302404][T16978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.302435][T16978] ? __pfx_aa_sk_perm+0x10/0x10 [ 435.302463][T16978] nf_setsockopt+0x26f/0x290 [ 435.302487][T16978] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 435.302514][T16978] do_sock_setsockopt+0x17c/0x1b0 [ 435.302539][T16978] __x64_sys_setsockopt+0x13f/0x1b0 [ 435.302564][T16978] do_syscall_64+0xfa/0xfa0 [ 435.302581][T16978] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.302598][T16978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.302615][T16978] ? clear_bhb_loop+0x60/0xb0 [ 435.302638][T16978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.302655][T16978] RIP: 0033:0x7f77d598f749 [ 435.302672][T16978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.302687][T16978] RSP: 002b:00007f77d6810038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 435.302707][T16978] RAX: ffffffffffffffda RBX: 00007f77d5be5fa0 RCX: 00007f77d598f749 [ 435.302720][T16978] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000009 [ 435.302732][T16978] RBP: 00007f77d5a13f91 R08: 0000000000000448 R09: 0000000000000000 [ 435.302743][T16978] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 435.302755][T16978] R13: 00007f77d5be6038 R14: 00007f77d5be5fa0 R15: 00007fff932c9508 [ 435.302787][T16978] [ 435.302807][T16978] Mem-Info: [ 435.415977][T16986] __nla_validate_parse: 4 callbacks suppressed [ 435.416006][T16986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'. [ 435.461303][T16978] active_anon:9021 inactive_anon:0 isolated_anon:0 [ 435.461303][T16978] active_file:3783 inactive_file:40041 isolated_file:0 [ 435.461303][T16978] unevictable:768 dirty:257 writeback:11 [ 435.461303][T16978] slab_reclaimable:13310 slab_unreclaimable:199537 [ 435.461303][T16978] mapped:43670 shmem:4227 pagetables:1100 [ 435.461303][T16978] sec_pagetables:0 bounce:0 [ 435.461303][T16978] kernel_misc_reclaimable:0 [ 435.461303][T16978] free:1190097 free_pcp:16880 free_cma:0 [ 435.737499][T16978] Node 0 active_anon:42184kB inactive_anon:0kB active_file:15132kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180480kB dirty:1024kB writeback:44kB shmem:21172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15680kB pagetables:4368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.824659][T16978] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.927455][T16978] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.975216][T16978] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 435.995254][T16978] Node 0 DMA32 free:842896kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45340kB inactive_anon:0kB active_file:15132kB inactive_file:159964kB unevictable:1536kB writepending:1100kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:49912kB local_pcp:27888kB free_cma:0kB [ 436.128597][T16978] lowmem_reserve[]: 0 0 0 0 0 [ 436.143513][T16978] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.317321][T16978] lowmem_reserve[]: 0 0 0 0 0 [ 436.322165][T16978] Node 1 Normal free:3893008kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16848kB local_pcp:7040kB free_cma:0kB [ 436.426779][T16978] lowmem_reserve[]: 0 0 0 0 0 [ 436.443807][T16978] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 436.494567][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 436.503675][T16978] Node 0 DMA32: 104*4kB (UME) 253*8kB (UM) 221*16kB (UME) 143*32kB (UME) 80*64kB (UME) 32*128kB (UM) 25*256kB (UME) 13*512kB (UM) 14*1024kB (UME) 3*2048kB (UM) 191*4096kB (UM) = 835640kB [ 436.547626][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 436.559322][T16978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 436.580995][T16978] Node 1 Normal: 2*4kB (ME) 43*8kB (UME) 41*16kB (UME) 169*32kB (UME) 52*64kB (UME) 12*128kB (UME) 5*256kB (UM) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3893008kB [ 436.636745][T16978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.657163][T16978] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.682693][T16978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.692955][T16978] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 436.727585][T16978] 48059 total pagecache pages [ 436.737717][T16978] 0 pages in swap cache [ 436.741921][T16978] Free swap = 124996kB [ 436.778519][T16978] Total swap = 124996kB [ 436.782724][T16978] 2097051 pages RAM [ 436.786535][T16978] 0 pages HighMem/MovableOnly [ 436.794397][T16978] 424134 pages reserved [ 436.806122][T16978] 0 pages cma reserved [ 436.911465][T17005] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3312'. [ 437.138562][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3318'. [ 437.329874][T17027] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3317'. [ 437.637294][T17035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.703745][T17043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3324'. [ 437.731865][T17043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3324'. [ 437.836417][T17043] batadv0: entered promiscuous mode [ 437.855306][T17043] macvtap1: entered promiscuous mode [ 437.864153][T17043] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 437.902695][T17043] batadv0: left promiscuous mode [ 438.077714][ T5833] IPVS: starting estimator thread 0... [ 438.112070][T17061] x_tables: duplicate underflow at hook 3 [ 438.157969][T17058] tipc: Enabling of bearer rejected, already enabled [ 438.172876][T17064] tipc: Resetting bearer [ 438.187949][T17067] IPVS: using max 35 ests per chain, 84000 per kthread [ 438.252923][ T9] hid-generic 0005:0002:5508.0017: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 438.464209][T17081] IPv6: Can't replace route, no match found [ 438.749017][T17097] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3340'. [ 438.776407][T17097] syzkaller1: entered promiscuous mode [ 438.784340][T17074] IPVS: sh: FWM 3 0x00000003 - no destination available [ 438.791956][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 438.803733][T17097] syzkaller1: entered allmulticast mode [ 438.882315][T17099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3340'. [ 439.513601][ T5937] hid-generic 0005:0002:5508.0018: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 439.622641][T17125] veth0_to_bridge: entered promiscuous mode [ 439.693560][T17124] veth0_to_bridge: left promiscuous mode [ 440.123799][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.130712][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.176949][T17147] netlink: 'syz.3.3355': attribute type 4 has an invalid length. [ 440.482024][T17130] IPVS: sh: FWM 3 0x00000003 - no destination available [ 440.497762][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 440.682009][ T5842] Bluetooth: hci2: command tx timeout [ 440.746843][T17165] __nla_validate_parse: 2 callbacks suppressed [ 440.746861][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3361'. [ 440.795605][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3361'. [ 441.191792][T17179] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3366'. [ 441.285352][T17186] netlink: 'syz.6.3367': attribute type 3 has an invalid length. [ 441.318529][T17186] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3367'. [ 442.010120][T17225] FAULT_INJECTION: forcing a failure. [ 442.010120][T17225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.038470][T17225] CPU: 0 UID: 0 PID: 17225 Comm: syz.6.3378 Not tainted syzkaller #0 PREEMPT(full) [ 442.038496][T17225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.038507][T17225] Call Trace: [ 442.038516][T17225] [ 442.038524][T17225] dump_stack_lvl+0x189/0x250 [ 442.038552][T17225] ? __pfx____ratelimit+0x10/0x10 [ 442.038583][T17225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.038608][T17225] ? __pfx__printk+0x10/0x10 [ 442.038639][T17225] should_fail_ex+0x414/0x560 [ 442.038669][T17225] _copy_to_user+0x31/0xb0 [ 442.038693][T17225] bpf_test_finish+0x24e/0x700 [ 442.038729][T17225] ? __pfx_bpf_test_finish+0x10/0x10 [ 442.038755][T17225] ? bpf_test_init+0x113/0x150 [ 442.038776][T17225] bpf_prog_test_run_xdp+0x88c/0x10e0 [ 442.038813][T17225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 442.038837][T17225] ? __fget_files+0x2a/0x420 [ 442.038860][T17225] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 442.038880][T17225] bpf_prog_test_run+0x2c7/0x340 [ 442.038904][T17225] __sys_bpf+0x562/0x860 [ 442.038924][T17225] ? __pfx___sys_bpf+0x10/0x10 [ 442.038958][T17225] ? ksys_write+0x22a/0x250 [ 442.038984][T17225] ? __pfx_ksys_write+0x10/0x10 [ 442.039014][T17225] __x64_sys_bpf+0x7c/0x90 [ 442.039038][T17225] do_syscall_64+0xfa/0xfa0 [ 442.039055][T17225] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.039073][T17225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.039090][T17225] ? clear_bhb_loop+0x60/0xb0 [ 442.039110][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.039126][T17225] RIP: 0033:0x7fab6638f749 [ 442.039143][T17225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.039157][T17225] RSP: 002b:00007fab672f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.039176][T17225] RAX: ffffffffffffffda RBX: 00007fab665e5fa0 RCX: 00007fab6638f749 [ 442.039190][T17225] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 442.039202][T17225] RBP: 00007fab672f3090 R08: 0000000000000000 R09: 0000000000000000 [ 442.039213][T17225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.039224][T17225] R13: 00007fab665e6038 R14: 00007fab665e5fa0 R15: 00007ffe071af468 [ 442.039255][T17225] [ 442.524406][T17242] netlink: 'syz.6.3382': attribute type 1 has an invalid length. [ 442.616288][T17246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3383'. [ 442.695134][T17242] netlink: 'syz.6.3382': attribute type 4 has an invalid length. [ 442.704934][T17242] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3382'. [ 442.772239][T17254] netlink: 'syz.3.3387': attribute type 4 has an invalid length. [ 442.809262][T17246] netlink: 'syz.2.3383': attribute type 1 has an invalid length. [ 442.817311][T17246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3383'. [ 443.031668][T17260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3389'. [ 443.041405][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 443.087922][T17264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'. [ 443.106973][T17260] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.114268][T17260] bridge0: port 2(bridge_slave_1) entered listening state [ 443.121735][T17260] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.129016][T17260] bridge0: port 1(bridge_slave_0) entered listening state [ 443.231219][T17264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.245781][T17267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.259749][T17267] bond1: (slave bond0): Enslaving as an active interface with an up link [ 443.537057][T17272] bond1 (unregistering): (slave bond0): Releasing backup interface [ 443.548270][T17272] bond1 (unregistering): Released all slaves [ 443.571906][T17274] pim6reg: entered allmulticast mode [ 443.807631][T17260] pim6reg: left allmulticast mode [ 443.938611][T17296] netlink: 'syz.2.3400': attribute type 4 has an invalid length. [ 443.958178][T17296] netlink: 'syz.2.3400': attribute type 4 has an invalid length. [ 444.248156][T17313] FAULT_INJECTION: forcing a failure. [ 444.248156][T17313] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.299780][T17313] CPU: 1 UID: 0 PID: 17313 Comm: syz.3.3406 Not tainted syzkaller #0 PREEMPT(full) [ 444.299807][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.299819][T17313] Call Trace: [ 444.299826][T17313] [ 444.299834][T17313] dump_stack_lvl+0x189/0x250 [ 444.299863][T17313] ? __pfx____ratelimit+0x10/0x10 [ 444.299888][T17313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.299911][T17313] ? __pfx__printk+0x10/0x10 [ 444.299931][T17313] ? fs_reclaim_acquire+0x7d/0x100 [ 444.299958][T17313] should_fail_ex+0x414/0x560 [ 444.299989][T17313] prepare_alloc_pages+0x213/0x610 [ 444.300012][T17313] __alloc_frozen_pages_noprof+0x123/0x370 [ 444.300035][T17313] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.300052][T17313] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.300072][T17313] ? exc_page_fault+0xab/0x100 [ 444.300092][T17313] ? policy_nodemask+0x27c/0x720 [ 444.300115][T17313] alloc_pages_mpol+0x232/0x4a0 [ 444.300139][T17313] alloc_pages_noprof+0xa9/0x190 [ 444.300159][T17313] bpf_prog_test_run_xdp+0xbf7/0x10e0 [ 444.300195][T17313] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 444.300219][T17313] ? __fget_files+0x2a/0x420 [ 444.300241][T17313] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 444.300261][T17313] bpf_prog_test_run+0x2c7/0x340 [ 444.300283][T17313] __sys_bpf+0x562/0x860 [ 444.300302][T17313] ? __pfx___sys_bpf+0x10/0x10 [ 444.300330][T17313] ? ksys_write+0x22a/0x250 [ 444.300351][T17313] ? __pfx_ksys_write+0x10/0x10 [ 444.300377][T17313] __x64_sys_bpf+0x7c/0x90 [ 444.300400][T17313] do_syscall_64+0xfa/0xfa0 [ 444.300416][T17313] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.300432][T17313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.300450][T17313] ? clear_bhb_loop+0x60/0xb0 [ 444.300470][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.300486][T17313] RIP: 0033:0x7f77d598f749 [ 444.300502][T17313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.300517][T17313] RSP: 002b:00007f77d6810038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.300542][T17313] RAX: ffffffffffffffda RBX: 00007f77d5be5fa0 RCX: 00007f77d598f749 [ 444.300555][T17313] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 444.300566][T17313] RBP: 00007f77d6810090 R08: 0000000000000000 R09: 0000000000000000 [ 444.300577][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.300587][T17313] R13: 00007f77d5be6038 R14: 00007f77d5be5fa0 R15: 00007fff932c9508 [ 444.300618][T17313] [ 445.073897][T17345] x_tables: duplicate entry at hook 2 [ 445.113233][T17347] batadv0: entered promiscuous mode [ 445.121222][T17347] macvtap1: entered promiscuous mode [ 445.128659][T17347] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 445.139513][T17347] batadv0: left promiscuous mode [ 445.175712][T17350] FAULT_INJECTION: forcing a failure. [ 445.175712][T17350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.190345][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.6.3418 Not tainted syzkaller #0 PREEMPT(full) [ 445.190372][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.190382][T17350] Call Trace: [ 445.190390][T17350] [ 445.190397][T17350] dump_stack_lvl+0x189/0x250 [ 445.190424][T17350] ? __pfx____ratelimit+0x10/0x10 [ 445.190456][T17350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.190478][T17350] ? __pfx__printk+0x10/0x10 [ 445.190507][T17350] ? __might_fault+0xb0/0x130 [ 445.190543][T17350] should_fail_ex+0x414/0x560 [ 445.190574][T17350] _copy_from_user+0x2d/0xb0 [ 445.190598][T17350] ____sys_sendmsg+0x2fe/0x830 [ 445.190627][T17350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.190657][T17350] ? import_iovec+0x74/0xa0 [ 445.190682][T17350] ___sys_sendmsg+0x21f/0x2a0 [ 445.190706][T17350] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.190764][T17350] ? __fget_files+0x2a/0x420 [ 445.190789][T17350] ? __fget_files+0x3a0/0x420 [ 445.190818][T17350] __x64_sys_sendmsg+0x19b/0x260 [ 445.190843][T17350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.190873][T17350] ? __pfx_ksys_write+0x10/0x10 [ 445.190901][T17350] ? do_syscall_64+0xbe/0xfa0 [ 445.190923][T17350] do_syscall_64+0xfa/0xfa0 [ 445.190940][T17350] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.190959][T17350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.190976][T17350] ? clear_bhb_loop+0x60/0xb0 [ 445.190998][T17350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.191016][T17350] RIP: 0033:0x7fab6638f749 [ 445.191034][T17350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.191050][T17350] RSP: 002b:00007fab672f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.191069][T17350] RAX: ffffffffffffffda RBX: 00007fab665e5fa0 RCX: 00007fab6638f749 [ 445.191083][T17350] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 445.191095][T17350] RBP: 00007fab672f3090 R08: 0000000000000000 R09: 0000000000000000 [ 445.191112][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.191124][T17350] R13: 00007fab665e6038 R14: 00007fab665e5fa0 R15: 00007ffe071af468 [ 445.191158][T17350] [ 445.653438][T17356] syzkaller1: entered promiscuous mode [ 445.663193][T17356] syzkaller1: entered allmulticast mode [ 445.791550][T17360] __nla_validate_parse: 4 callbacks suppressed [ 445.791569][T17360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3421'. [ 445.822764][T17360] syzkaller1: entered promiscuous mode [ 445.828738][T17360] syzkaller1: entered allmulticast mode [ 445.879996][ T31] INFO: task kworker/u8:10:8643 blocked for more than 143 seconds. [ 445.898799][ T31] Not tainted syzkaller #0 [ 445.914160][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 445.933761][ T31] task:kworker/u8:10 state:D stack:22280 pid:8643 tgid:8643 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 445.961734][ T31] Workqueue: netns cleanup_net [ 445.966554][ T31] Call Trace: [ 445.984836][ T31] [ 445.991332][ T31] __schedule+0x1798/0x4cc0 [ 445.991972][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3421'. [ 446.001987][ T31] ? __lock_acquire+0xab9/0xd20 [ 446.019085][ T31] ? __lock_acquire+0xab9/0xd20 [ 446.030066][ T31] ? __pfx___schedule+0x10/0x10 [ 446.041587][ T31] ? schedule+0x91/0x360 [ 446.050801][ T31] schedule+0x165/0x360 [ 446.056983][ T31] schedule_preempt_disabled+0x13/0x30 [ 446.063894][ T31] __mutex_lock+0x7e6/0x1350 [ 446.070324][ T31] ? __mutex_lock+0x5bb/0x1350 [ 446.075337][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 446.083347][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 446.089450][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 446.095363][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.102815][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 446.109091][ T31] ? _raw_spin_unlock+0x28/0x50 [ 446.114122][ T31] rdma_dev_change_netns+0x39/0x300 [ 446.120685][ T31] rdma_dev_exit_net+0x203/0x340 [ 446.125821][ T31] ? __pfx___might_resched+0x10/0x10 [ 446.132335][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 446.138943][ T31] ? net_generic+0x1e/0x240 [ 446.143891][ T31] ? mutex_is_locked+0x17/0x50 [ 446.150124][ T31] ? rtnl_is_locked+0x15/0x20 [ 446.155240][ T31] ops_undo_list+0x49a/0x990 [ 446.160524][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 446.165870][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 446.171793][ T31] cleanup_net+0x4d8/0x820 [ 446.176475][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 446.183872][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.190101][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 446.195997][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 446.204457][ T31] process_scheduled_works+0xae1/0x17b0 [ 446.210778][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 446.217174][ T31] worker_thread+0x8a0/0xda0 [ 446.223507][ T31] kthread+0x711/0x8a0 [ 446.228832][ T31] ? __pfx_worker_thread+0x10/0x10 [ 446.234090][ T31] ? __pfx_kthread+0x10/0x10 [ 446.239655][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.245009][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.251128][ T31] ? __pfx_kthread+0x10/0x10 [ 446.255876][ T31] ret_from_fork+0x4bc/0x870 [ 446.261762][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 446.267064][ T31] ? __switch_to_asm+0x39/0x70 [ 446.273178][ T31] ? __switch_to_asm+0x33/0x70 [ 446.278864][ T31] ? __pfx_kthread+0x10/0x10 [ 446.285150][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.291939][ T31] [ 446.295605][ T31] INFO: task syz.0.1669:11551 blocked for more than 143 seconds. [ 446.305535][ T31] Not tainted syzkaller #0 [ 446.318070][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.327001][ T31] task:syz.0.1669 state:D stack:23192 pid:11551 tgid:11550 ppid:5829 task_flags:0x400140 flags:0x00080003 [ 446.340449][ T31] Call Trace: [ 446.343916][ T31] [ 446.347026][ T31] __schedule+0x1798/0x4cc0 [ 446.353277][ T31] ? validate_chain+0x897/0x2140 [ 446.359673][ T31] ? __lock_acquire+0xab9/0xd20 [ 446.364962][ T31] ? __pfx___schedule+0x10/0x10 [ 446.370683][ T31] ? schedule+0x91/0x360 [ 446.375152][ T31] schedule+0x165/0x360 [ 446.380149][ T31] schedule_timeout+0x9a/0x270 [ 446.386449][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 446.392230][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 446.398194][ T31] ? wait_for_completion+0x267/0x5d0 [ 446.403534][ T31] wait_for_completion+0x2bf/0x5d0 [ 446.408746][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 446.414430][ T31] ? up_write+0x1c4/0x420 [ 446.419201][ T31] ? remove_client_context+0xc0/0x1e0 [ 446.424650][ T31] disable_device+0x1c6/0x320 [ 446.429704][ T31] ? __pfx_disable_device+0x10/0x10 [ 446.434945][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 446.440952][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 446.446882][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 446.452883][ T31] nldev_dellink+0x2d1/0x320 [ 446.458258][ T31] ? __lock_acquire+0xab9/0xd20 [ 446.463143][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 446.468648][ T31] ? apparmor_capable+0x137/0x1b0 [ 446.473713][ T31] ? bpf_lsm_capable+0x9/0x20 [ 446.478793][ T31] ? security_capable+0x7e/0x2e0 [ 446.483749][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 446.490128][ T31] rdma_nl_rcv+0x6ae/0x980 [ 446.494695][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 446.500685][ T31] ? __lock_acquire+0xab9/0xd20 [ 446.505554][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.512064][ T31] netlink_unicast+0x82f/0x9e0 [ 446.516873][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 446.522634][ T31] ? rcu_read_lock_sched_held+0x89/0x100 [ 446.529675][ T31] ? netlink_sendmsg+0x642/0xb30 [ 446.534866][ T31] ? skb_put+0x11b/0x210 [ 446.539498][ T31] netlink_sendmsg+0x805/0xb30 [ 446.544338][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.550147][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 446.555118][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.560780][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.566091][ T31] __sock_sendmsg+0x21c/0x270 [ 446.571088][ T31] ____sys_sendmsg+0x505/0x830 [ 446.575879][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.581734][ T31] ? import_iovec+0x74/0xa0 [ 446.586268][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 446.592777][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.598410][ T31] ? __fget_files+0x2a/0x420 [ 446.603214][ T31] ? __fget_files+0x3a0/0x420 [ 446.609517][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 446.614604][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.620486][ T31] ? do_syscall_64+0xbe/0xfa0 [ 446.625341][ T31] do_syscall_64+0xfa/0xfa0 [ 446.630450][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.636709][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 446.642931][ T31] ? clear_bhb_loop+0x60/0xb0 [ 446.647885][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.653790][ T31] RIP: 0033:0x7f63e3b8f749 [ 446.658763][ T31] RSP: 002b:00007f63e4ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.667196][ T31] RAX: ffffffffffffffda RBX: 00007f63e3de5fa0 RCX: 00007f63e3b8f749 [ 446.675938][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 446.686379][ T31] RBP: 00007f63e3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 446.696281][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.704537][ T31] R13: 00007f63e3de6038 R14: 00007f63e3de5fa0 R15: 00007ffcb0810cf8 [ 446.712595][ T31] [ 446.715718][ T31] [ 446.715718][ T31] Showing all locks held in the system: [ 446.723800][ T31] 5 locks held by kworker/u8:1/13: [ 446.730228][ T31] 1 lock held by ksoftirqd/0/15: [ 446.735190][ T31] 1 lock held by khungtaskd/31: [ 446.740269][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 446.751429][ T31] 2 locks held by getty/5590: [ 446.756131][ T31] #0: ffff88814d1160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 446.766794][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 446.777170][ T31] 4 locks held by kworker/u8:10/8643: [ 446.782774][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 446.795109][ T31] #1: ffffc9000cca7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 446.805871][ T31] #2: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 446.815281][ T31] #3: ffff888029854700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 446.826703][ T31] 2 locks held by syz.0.1669/11551: [ 446.832011][ T31] #0: ffffffff99b68938 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 446.842856][ T31] #1: ffff888029854700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 446.854527][ T31] 2 locks held by syz.1.2984/15832: [ 446.861328][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 446.871442][ T31] #1: ffff888029854700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 446.883046][ T31] 2 locks held by syz.5.3386/17248: [ 446.888495][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 446.899459][ T31] #1: ffff888029854700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 446.911203][ T31] 2 locks held by syz.3.3412/17330: [ 446.916401][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 446.926984][ T31] #1: ffff888029854700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 446.938674][ T31] 2 locks held by syz.4.3420/17358: [ 446.943963][ T31] #0: ffffffff8f2cc1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 446.953587][ T31] #1: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 446.964865][ T31] 1 lock held by syz.2.3421/17359: [ 446.970188][ T31] #0: ffff888051ae0d88 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 446.981004][ T31] [ 446.983432][ T31] ============================================= [ 446.983432][ T31] [ 446.992873][ T31] NMI backtrace for cpu 1 [ 446.992891][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.992912][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.992923][ T31] Call Trace: [ 446.992931][ T31] [ 446.992939][ T31] dump_stack_lvl+0x189/0x250 [ 446.992969][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.992992][ T31] ? __pfx__printk+0x10/0x10 [ 446.993021][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 446.993047][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 446.993070][ T31] ? __pfx__printk+0x10/0x10 [ 446.993092][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.993113][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 446.993145][ T31] watchdog+0xf60/0xfa0 [ 446.993168][ T31] ? watchdog+0x1e2/0xfa0 [ 446.993191][ T31] kthread+0x711/0x8a0 [ 446.993218][ T31] ? __pfx_watchdog+0x10/0x10 [ 446.993235][ T31] ? __pfx_kthread+0x10/0x10 [ 446.993260][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.993285][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.993301][ T31] ? __pfx_kthread+0x10/0x10 [ 446.993325][ T31] ret_from_fork+0x4bc/0x870 [ 446.993347][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 446.993373][ T31] ? __switch_to_asm+0x39/0x70 [ 446.993387][ T31] ? __switch_to_asm+0x33/0x70 [ 446.993402][ T31] ? __pfx_kthread+0x10/0x10 [ 446.993426][ T31] ret_from_fork_asm+0x1a/0x30 [ 446.993460][ T31] [ 446.993467][ T31] Sending NMI from CPU 1 to CPUs 0: [ 447.142747][ C0] NMI backtrace for cpu 0 [ 447.142779][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 447.142797][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.142807][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 447.142828][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 10 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 447.142841][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 447.142855][ C0] RAX: 6106c5f7a6510400 RBX: ffffffff81967b47 RCX: 6106c5f7a6510400 [ 447.142866][ C0] RDX: 0000000000000001 RSI: ffffffff8d7103fc RDI: ffffffff8bbf0760 [ 447.142877][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 447.142888][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cfe70 [ 447.142900][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 447.142910][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 447.142922][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.142933][ C0] CR2: 00007fcec5fede9c CR3: 0000000076354000 CR4: 00000000003526f0 [ 447.142947][ C0] Call Trace: [ 447.142956][ C0] [ 447.142962][ C0] default_idle+0x13/0x20 [ 447.142979][ C0] default_idle_call+0x73/0xb0 [ 447.143002][ C0] do_idle+0x1e7/0x510 [ 447.143020][ C0] ? __pfx_do_idle+0x10/0x10 [ 447.143040][ C0] cpu_startup_entry+0x44/0x60 [ 447.143055][ C0] rest_init+0x2de/0x300 [ 447.143074][ C0] start_kernel+0x3ae/0x410 [ 447.143099][ C0] x86_64_start_reservations+0x24/0x30 [ 447.143116][ C0] x86_64_start_kernel+0x143/0x1c0 [ 447.143132][ C0] common_startup_64+0x13e/0x147 [ 447.143159][ C0]