last executing test programs: 3.236055662s ago: executing program 4 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048844}, 0x8000002) 3.124337897s ago: executing program 2 (id=809): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0x2, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x7, 0xf}, {}, {0xa, 0xffe0}}, [@TCA_CHAIN={0x43, 0xb, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @random="5597dc6a8564"}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r11, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b0014000000"], 0x38}, 0x0) recvmsg(r11, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x160) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x46900204}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_SDP={0x24, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x8, 0x1, 'nfc\x00'}]}]}]}, 0x40}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 2.978946035s ago: executing program 4 (id=811): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async, rerun: 64) mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async, rerun: 64) connect$llc(r3, 0x0, 0x0) (rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x20004000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000095000000000000005bdc1dd90b9fb8166711be28384edbcfd93baf739f1a1a6a17184c90f5aa"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003f00)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fddbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="400099eba72ed90600000089"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x84040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x400}, {{&(0x7f0000001340)=@l2tp={0x2, 0x0, @multicast2}, 0x80, 0x0}, 0x7}, {{&(0x7f0000002540)=@isdn, 0x80, 0x0, 0x0, &(0x7f00000029c0)=""/22, 0x16}, 0x3}, {{&(0x7f0000002a00)=@can, 0x80, 0x0}, 0x100}], 0x4, 0x40010000, &(0x7f0000002b40)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) close(r1) (async, rerun: 64) r7 = accept4(r0, 0x0, 0x0, 0x800) (rerun: 64) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x0) 2.84372494s ago: executing program 0 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x890, 0x2, [@TCA_MATCHALL_ACT={0x88c, 0x2, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x886}, @TCA_POLICE_RESULT={0x8, 0x5, 0x187}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 2) 2.817203566s ago: executing program 4 (id=814): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x24}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000009667185e08000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000040093000800350000000000080035"], 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) (fail_nth: 8) 2.599920747s ago: executing program 2 (id=816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x15c, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x130, 0x3, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0xd4, 0x6, 0x1, 0x0, "f68a01c43af923cf46527e96152ea1a03761f77536c3986918b6e2836c0e91fd68c96f4bcd656d7c66d2e76970acfe8c2cd3020c4c7e75d0e10f5cbc9fe052fa55b9f8f9ab486c781e93608c2fc6dadae3aef836b28f99d418e38f75e76257fc2f3805c8b3235417ae4c860cee01ea9ee8d80030098988dbf10d45dbea1452b3e05bcfb281c9948e3d992ece9dd67e60fd8dfcc18fa690ab3a9c402e6c925b2268dc53d6cab181ce926380ebc9f7a83fc61edfad957d662f862821b7666718d1a1ca63e6c57df7d0ab655ae72b82d5d3"}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.075994832s ago: executing program 2 (id=817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x6, 0x6f, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x54}}, 0x4040010) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0xff, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r5, 0xd}, &(0x7f0000000140)=0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800009a1d1e3c003a97074e8cac4e26a307ed954925c261a631ecf989b2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fffffffffffffffffeffffff00"/28], 0x1b) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x0, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.886069796s ago: executing program 2 (id=819): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003800)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x20, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xbe}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xfff1}}, @TCA_ROUTE4_ACT={0x4}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xf8, 0x9, 0x19, @local, @empty, 0x7840, 0x7800, 0x3, 0x3}}) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@deltclass={0x58, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xffe0, 0xe}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1c, 0x5d}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xe1, 0x6a}}, @TCA_RATE={0x6, 0x5, {0xff, 0x6}}, @TCA_RATE={0x6, 0x5, {0xe8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x8010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000440)={@loopback, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x5, 0x6, {{0x13, 0x4, 0x3, 0x0, 0x4c, 0x65, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@cipso={0x86, 0x38, 0x0, [{0x0, 0x9, "19f870fb4edab9"}, {0x2, 0x6, "7df18b32"}, {0x2, 0xf, "4e91d39d8a90b9694760f33262"}, {0x3, 0x10, "480cce44b1252f331f9c68e57855"}, {0x7, 0x2}, {0x6, 0x2}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) r18 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r18, 0x8983, &(0x7f00000010c0)={0x2, 'geneve1\x00', {0x4c8a}}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="000126bd7000fbdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="800002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES16=r9, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000c00000008000100", @ANYRES32=r8, @ANYBLOB="a801028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400db4d000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=r14, @ANYRES64=r13, @ANYRES32=r15, @ANYBLOB="0800000000000000240001006e6f7409bab137450f6125735f696e74657276616c000000000000000000000d3fd36380e2a1b2000800040001000000b4f6b446b9b21ff9b6d44c0001002407a5f177e8495e925e48cb8cf1c1421a0001006c625f74685f6d6574686f640000000000000000000000000000080000000000000003000500000300000000000000685f746f5f706f72745f6d6191ba6b761a2ceab112f5af8e97696e67000000003c00010024000100757365725f6c696e6b7570", @ANYRES32=r16, @ANYRESHEX=r4, @ANYRES32=r17, @ANYBLOB], 0x398}, 0x1, 0x0, 0x0, 0xc810}, 0x800) unshare(0x400) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.88335654s ago: executing program 0 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048844}, 0x8000002) 1.74346796s ago: executing program 0 (id=824): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x6}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x32) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10001, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040013"], 0x24}}, 0x0) ppoll(&(0x7f0000000100)=[{r7, 0x3412}, {r6, 0xd002}], 0x34, 0x0, 0x0, 0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.289179844s ago: executing program 2 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000006, 0x42073, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x4) r3 = accept4(r1, &(0x7f0000000280)=@nl, &(0x7f0000000200)=0x80, 0xa5df2de2f9b0757f) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc000) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="6020000089df1a9aafd110009d336be72f86bae1", @ANYRES64, @ANYRES8=r4, @ANYRESHEX=0x0, @ANYBLOB="d9fe045770fdd9b80d5fcbcbb589079b6c5037e9dc5820905fe8c526e5b25279036f45f9fa50250814aa856e80d165574ced546f250f322d4bb0b652c713703c7fa42ee01412ff30c5047c0e23b0a2739b8714247ea644d66b98b80e455a3c3116e194a68e204250a0abddc3fe5e2e318b2803314fda6c4f398c419ed73c166b6dff944e0bb8b6ef569e158c9e9a30337376d9628450779fd14f502dcebab9cdbe3b3ae3ee43c983a49e2a80f7bc75532a11158817"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req={0xfffffff7, 0x7, 0x3, 0x80}, 0x10) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.217242158s ago: executing program 1 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x15c, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x130, 0x3, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0xd4, 0x6, 0x1, 0x0, "f68a01c43af923cf46527e96152ea1a03761f77536c3986918b6e2836c0e91fd68c96f4bcd656d7c66d2e76970acfe8c2cd3020c4c7e75d0e10f5cbc9fe052fa55b9f8f9ab486c781e93608c2fc6dadae3aef836b28f99d418e38f75e76257fc2f3805c8b3235417ae4c860cee01ea9ee8d80030098988dbf10d45dbea1452b3e05bcfb281c9948e3d992ece9dd67e60fd8dfcc18fa690ab3a9c402e6c925b2268dc53d6cab181ce926380ebc9f7a83fc61edfad957d662f862821b7666718d1a1ca63e6c57df7d0ab655ae72b82d5d3"}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.20938279s ago: executing program 3 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r2 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000400)=0x7b, 0x4) (async, rerun: 32) ppoll(&(0x7f0000000440)=[{r2, 0x2500}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200), 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x6}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x16}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x20040054) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f00000f0000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000005001700000000c70000000000000000ff0100000005bef4cd0000000000000102000000000000007dc08c8a0dbd58c11b4eb7313db27e26afdc5a27131a9a8897b4485758fdfc7cbe5dec000f35e717c5775a9de956298ea378951d82c5c98db7c774c0a91055c9e87fa32ee4ddda46eca5"], 0x78}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="012aafcfcb00fedbdf2502000000060028000300000008000300", @ANYRES32=r8], 0x24}}, 0x20008840) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r11, @ANYBLOB="10080400220002001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB="08000800a9"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400200010000100000000b40d0011"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) (async) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) (async, rerun: 32) sendmsg$NFT_BATCH(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 1.208634116s ago: executing program 4 (id=830): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000002000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000080000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800b0001007470726f787900001c0002800800024000000011080003400000001108000140000000020900010073797a30"], 0x100}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x4b, 0x1d, 0x87, {0x6, @usr_ip4_spec={@broadcast, @empty, 0x800, 0x1, 0x1, 0x7}, {0x0, @multicast, 0x57f4, 0x4, [0x2, 0x9ad2]}, @tcp_ip6_spec={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x4e23, 0x6a}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x2, 0x9, [0x10001, 0x1000000]}, 0x7, 0x3}}}) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x10) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000080)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0x1000}], 0x1, &(0x7f0000000140)=[{0x18, 0x10c, 0x428, 'K'}], 0x18}, 0x24000080) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x80000013}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) socket$netlink(0x10, 0x3, 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000002000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000080000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800b0001007470726f787900001c0002800800024000000011080003400000001108000140000000020900010073797a30"], 0x100}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x4b, 0x1d, 0x87, {0x6, @usr_ip4_spec={@broadcast, @empty, 0x800, 0x1, 0x1, 0x7}, {0x0, @multicast, 0x57f4, 0x4, [0x2, 0x9ad2]}, @tcp_ip6_spec={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x4e23, 0x6a}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x2, 0x9, [0x10001, 0x1000000]}, 0x7, 0x3}}}) (async) epoll_create1(0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x10) (async) socket$kcm(0x29, 0x0, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000080)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="b771cfc1b184b44297322d4eafd0eb1f874c940e237f8f6d1d823f31fafc597baa8dafa76bc9597bb3a97022caa2b171c895fc5a7fc648123a9d8eefc44c7fb22c021c816177284bbc0645bcb94d6ad0fecc237ce2ef13c8cd0a67f8420e8b05f7a334024433cbfabed8ae985a9c418efd01a59e43ef58caf4f1ff00745005492a271bbc861dc6335d868d377159fdd41d4ebee2e3da3740687cfb7a871a6a7b853ca138d80a7e1220ed29aa8c81260cad74044826b99b7ab509cb0d9f43d7fab73013d2dfc01057eae26493544b8c0e220c6db19b4de5a172d2f0be5610bc1eb41dcfaa8999d3d2ec5df4e2188781b638288379fc3bce82384c2cdbd6be0b51de41a70890269e36dc5625a6f699acd125a1ab09a76d02d181955265366cc294438582c1c964edaa3388c5a8e91f04d26b9fcc5aa58edcbb6bb688b6950fcab01f6b52cc4233c0775129f97461ee784e8fe7356f389a0b9131f9bddacd0f57040bc2347bd4b2ab9b9ff5703e9af07a59c979c4309f5b478a374393a75e900ae1ad45ff84e1cbec33866284068af80908cd35df574be3df3f8e45c894664fc4d4bd74ae11449a674aca3077c0042363970af86f958036dd976b67ad9e5f91e4e65be9dfeb468c640ddd581e7909536c2cc9848f45d7983a21278e06eef16aadfdc86c3d5795aff9fd949d8f36a9ee93ed4319c26d09837950dd09719e87f4b7e50e5103e38ab43bf67dc397ee1021242ffcedad1bb2ac690744927759cb26c1fb1c712253dc332b6c42eb56e6dfe25aac27bf33207ba3a06fe42971f20b97c5fd682e0bdf24fe1c418bbbd7127e90fb80e72eff994ed465bf2eb79d6024ad452fc05fa9e6f4eddda3c35e476cabb82edf509fd058fa6420c81edf266a3af36c24e6782130faf8d6fa33a7655d4a0f01d277a9a07f4b2ade27d1155248520aab360ae9b740ce732f9b46d30181e1d020c3a1e0f09001576334543129b9cf8f285b3b3efab3c84b319c6f1aff083aa020e1e7018722db9f5658fedd5893c90f9d9753e44015639dcb97a8b5c67748ee3ecb4c874f2032cdef62798f1816511369182ae5519b7887969a3e06b3fe20ad006559139a2a9d252ef0ff49d13631e71cdc600fbf8cdbc20354eaa926cca45834e4078922bda0c1d49e3e33a9acf79b010ecaf769bcb94f758cccd90b89798c4dfd25eba7071af381558db797add089e1d9c18f368fc0ed0a4216535e94fad17f6ad06b685054f6bf5e3816c47ed96e4c7164d2619abce80f5451e387108a3ec6d7c4b3d2c7bed7b442b0bc5efb6c15c0203eca76e3b30ba12f50cb89b436ca593b1e3f59efdbda05609403aece9039d42b85d55bc543acf3022ac470c3aa49e9f2d4006f9a0f0fd668df02c15d984582cd27e78569eec7d3ddbb83e3e38cd3176acc323c8bf842dd59dc70492cc60dc3fb3ffa9893ba9a18b992f0501c39b5ab7410997ad1d2561f0202eca5128f05935c4e38ffe0b602330c491ec3da8a9e14e560ef55962415e42be2f09817365255fd5144e1b86c9abe683ccd69539b8a8945278d64733f339f52953e77937e31725c4f29cf31bc55e9ff1924a5a7cff5b9ddc76fabe93b29f44fd58dac29bbbccc9bdbf3be45838063014a8ffda361331a743198f2dc3d5d58f47dc3d593a74f3b2e06cf93f7c6db183ffd87cfdc8b6795a84f3d63c4b719cbd0e6ee2bae627cf9199ac7264ddcb97dc9bfdc6f5987bf1924cb562e5629647511e1512faab7166ed06bf6306992e5090a1045600c6d9917fa76c866d094cceea4f20ecb35ed3709225383730aff27de232ddef22bfde7d164db308a99eb1dcf6cebbcaa1fac6210e6b20b4c431d03f28f1c01f4e0b2afe77b5dd65bda800d5a32e9a2b28de9273568caa104b934f0ac8ce0a967e006741ea184a16513855bfc38f854e4bb6704a2b32b7928ddfad5cede59493d98407f96cb6fe9536d57ea46e949ea5bd78febd119ed86fc86ab3f7ddef8fb595182efa0d325feb05f06581ea134f43cf53f6341e56b9a54ac2bb3ea25cd894d4f20f54d611aaed7adea4730a5f69435a0656d41573885cd24b1c25ce1244483267fe1e7ca8403187b449b17b5df835b49c7d3317ef72cf0eb3f39b8c6f56861bae97dee32843ebeef414727bac76e40cd212eba56c4ecab1adc36fc3f6f7cc2020046732761ad734fe405887326dbad8365d112573a37f5ce46df20f9315b7f54699654e5e722a55c52f36bd292dd5f8c25357c0e62e3404aa253ea16b5cd853e600191029b062dfdfc114a89fc2ad62eeec9705e9b1d3520ad9d158f2848711e701278b34ca64bfa331ad8d0caff5bcc9ed4dbe5036ec9096f8af78f070cc5e675a3d13108431c219c906b60ce911390a4d7edf21706b71dfac5c15a6f9e47d77fc8a86972d00d94e0cb058063451ccb8192519d8aeae09303d3464aca9c3c05951e4a08c7e36e084ea511316ed16e3ee24b7dc3bd43489cfba79d6244dd27bd7ce2486216ea092e49982d3689cbfb090a25abf502173584ca59862542964acc35b7d6099328b16333a706e32e9b2b247ffa600def88fb500861ce484f963534427ef6ddad698e1f32bbf1014a6106366ad866c0db178b38425cfe7c17f2eacd263d2ff3d6c9b4d51791f7dd24800273766923e5860e112d25da347767ef55d316bf2e4c8e26b6203e7c0a004bd2681e8080f92bbe99e968fe26a9f4d2bee00e7c854f38bc5f494916cabce031ba99af0daa0b9bd30dfc5112481c4b0a36721905c27971937d1a3c79f7fdb9af5359aedc227bd4e29bad086aafaa5fc9a1dd5d4a175dc086dd57377e4abc90342673cbf06738388ec3691a48cb840a2cc822f02e831fa3c16ea24ff41a49d25680d26620bec8b4fd6a9735e133bdfabfd61b1bff5886c6a3dac520ccfbff7dba7837af39770e0f8f604c63258f882a28b2c1ab0566c4e41007033fec2017aeccabdffc0873fced0a9e54ce58ea82e66aac1cf0b4590bebfe9906cc7f6a17c5ea58c00bfce093f3e082e3900b13d16759e68203bae9908592f95ef632ae4d5b521472baa42816688384f4fd005e763c5ccb27d1b4d565e04d63f53c5c6af83bd2314a0643f994b21bfda9ec9d01e171adb7f8f9b09fada6a2000af8625cd21975e06560e37521158ec89ec8da8e8625022071cac155d5c87a2e96e122427f745f256d7b3125fc612f50e7c7c176dac49cf90ce96ec299407babe506abb32c539c3f59c7c81b7536a9798c9d14b675b8709d57522ec9283b840bff7701e7b3213fdba29cae50f511b0836ec9f41345c919f67dcdce8480d5f2fe699a0937c0f7fb97f0a4f68329822759a3ffe789825b8cf3685cdf50d612d713cc9d6685200cb266b627155f4e0d02331ed126058f595c3424f5c2d3ea271c92e5163811f7ff02850a01fd1af77f0d8e4a675701f69df18748b4399a06c4d111a427b8f160c09e620292aa1b9541f8d99b37995ae6102ebcff714373ec6a7bd0d2c07d95df05f1b02b6e63d38533b5b32e2fd397d33908cbb37b1f11c1b03c45e9dc45e58fd2f86b3ef24aba80946164969407cb3651323f33ea01815eb9c0799afe927d560c7f35a919937a5e6c4d77fcf74fc8ff36890e595e8a428d09b4c4b505941170240bca4c3474aa9d0bd632136926ab477cc21d39ecb40b107cef08bbed13b1a379f08cc26e3406bc0e995c19b2668d42edc01e881e281526ebf1caa89819305cd9dc5e59881ba704d37d6f49add02380e0e3cd82b57f9c26f1e8c854eacc258249d293e45e6cd1e2798769f50ba6c03c20b1c4301068c2ff078711cd36876fb0c348d18450283588106226dffc123ad7cb6cbb52b6ebb50694dbfea61aa1b01fd068efc7fb51d767cded5f60ddd44efc38ec74b3e658f458182d13a960de21f2264e7b8658a4367945343043e93bbb22eb9e203cf3c8b09bcef757a0f3feff0708837d4677e395347ab66a65370073ef04c4772f59b94121006d586f5f5321e17517ef6e3cd4ab571cd1528c90941b3772457d940d894a7217396c1336aca61fa6a130996b12b16c40ccd6cf7c63ed763f73fc753030ce4737ba7e62c46593e0de2c19e5503a9e4cd0647d67bc4f8ee9cd7734b0885143e289de7de74a948445bfbc856a300575aed675569148fe11ef9b404f61b3e2eca6d477f103fe4366b838b7a2692794924427612b10b5c00acb3cb6b12d63a1fe4860242ec3468232478a3223e2681639c308c8f9d0cc20310a7c058de48ace3bfe835fd27599efcc4effbef776b1014f7466a6777a0162d4bee4ae962fbff3aafa4b57d857fbda9c7bc04ea0b2e70e5ef193a7938f394ee40f36c482ee8aead000b04a882ae2ccdf78e1b5efe6922d3e74d6b49b8843f7275aea40cb6b8e4d965b9362bb2fd17624ed2fde8470dfc80aded47cd0011a02e2f752e6d51a9aec716a2db967d562fabaf9f5751d1609ab8e3a94aeb775b18c64c96aec85777092c7a701941a83fbcdbfb3f597c3682533ee4eb9bbf2e60ef5db0008ddf5721e3b16f19ddf3043a4f9a18bdf2802bd96b99efb403190a36a8c855478563fc1913dba7d35f109c42ae61ce3a79a1039480ba6d2c6cf6ddc946a02132a58b4d861053c2bacd01ce49cf2a27bdc10e9ec515bb0b486ec55de1b592cec00c4ee08df730157fb7774ae0270129707b532e758f57bbb5d7137d56936b267e87ca1569d9c14f2cc924eae30ea6eb578258c7e4061519eed0fab66ff31c918655569d63f878556a2ea5dfc6664e94da866c6230fc4c6db90c4a5a46b8d98108b501a77388f63d8d62c1cc3001a0aeb7bcf2c4dfe3021eb20971f9ed5d5e9bebd6da476cf4bcc8fa7ed1e17c9d26ed9e15a5bc24b1beae3795421ab18170432f8722cd1f16fa5068826ce2992b41482a238766084d0a857be74afada7926fe1ffdc9e33ee6401d6b6bf945509fd6c6481913c90fb308a8ae2b359c513b8cfe95adc4b988a8bee2fb143b6b77118afc2cfafc3e5ddd7b313a1026164e2aee13ebb2c719cce3e02852c78f05321821264a3a22d159c71b728b82788296e0c3c4e4eb8e29689573ddce08c347d589c7d3d990b5e096dd7601cbac5621ace61f4eaba060a164c7b60d5fdc0844456cb7fc8d65ccc1ad88efbebfc1a655f5e3a22cefb3f968617babf1133691ca07f0709595e2c0202859680f68069bb5612e42a40affdbeb637ce30d136a9c2016bb54eca74ad5337a30ec0a3434375610ef02d591aacc5e90fe1777d453483f3213c0434107ce20b99fc4e7a825827e92b75ac66687853114df53ad510254911a7618c64561cf2a8df7d9f95846e3545e16ec7d7510708ac23c2d88b1ffd365593d26cc4811e4570cb79daa8eaa32ac4ad4d19b79fc521e221f4c850f2d246065e833ac167bee907566d3942b7bd1c5be0a7d78abbe363bf5257eeed1ac2ebb20f8bf0e3e95ef22ba22f2904ab4e69c9e75ab0a7954ee4c00fa9030cedd7a9ff0d71ddd1faa3f25b71fd30e7c1539ea09e82b87f8cc464ab8ed9e6f76370c867cf71d22a832e26ee7b93761d826a3e86d7326ff1d500839f9e9a884c89ce18eb40809aa2663c7bfe18896c1de0e10fc23235cdb320dd8492bf2965628ea13fdbc5f83ed6bfe1d0d5aed5bd0742ead9ef80b94d90842bf41b9afdd424a69f1c27033560273694c551416ee15a6d30c41fe6901f4ad2fb93c2f3ac0c4783a385fe185048a831acc954c80da552df40a84e6c98046436aeef36e0718062ceb9cdbd78c1cfbbf01625a6b2c94b87c5", 0x1000}], 0x1, &(0x7f0000000140)=[{0x18, 0x10c, 0x428, 'K'}], 0x18}, 0x24000080) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x80000013}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) (async) 1.019708159s ago: executing program 1 (id=831): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 870.313003ms ago: executing program 3 (id=832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x890, 0x2, [@TCA_MATCHALL_ACT={0x88c, 0x2, [@m_police={0x888, 0x1, 0x0, 0x0, {{0xb}, {0x85c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x886}, @TCA_POLICE_RESULT={0x8, 0x5, 0x187}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 3) 869.022353ms ago: executing program 4 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 789.652702ms ago: executing program 1 (id=834): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048844}, 0x8000002) 685.079981ms ago: executing program 4 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x510d9d61e1fc4fec) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x17, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) unshare(0x68000a80) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x400}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfff}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x14, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xa}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @flow_dissector=0x11, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x3, 0xc, 0xfffffff8, 0xffffff23}, 0x10, r6, r7, 0x4, &(0x7f0000000680)=[r8], &(0x7f00000006c0)=[{0x3, 0x3, 0xf, 0x6}, {0x1, 0x5, 0xb, 0x2}, {0x4, 0x1, 0x10, 0x6}, {0x2, 0x1, 0xf, 0x6}], 0x10, 0x8}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r10, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 635.93263ms ago: executing program 1 (id=836): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000000000000700"], 0x18}}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x2, 0x46000) 635.434073ms ago: executing program 3 (id=837): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) (async) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000140001800600ac60611000000300ac1414aa0000"], 0x28}}, 0x10) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000088a5001000020000000c00018005000200010000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x2000000000000038, &(0x7f0000000340)=ANY=[@ANYBLOB="18380000040000000000000000000000850000005d0000009752fcffffffffff1800000088000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1}, 0x94) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) openat$cgroup_ro(r9, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000458b2b6413cc518c8aa0aff7b48ff27c4e3c86e00349f1630b98f39d2fe036edf03aca34229ac2c988a9ef2648c63244d715035bbbeb15fd869e41", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) 616.922824ms ago: executing program 0 (id=838): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1000401, 0x0, 0x0, 0x0, 0x2fff28fa}], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x2a, &(0x7f0000000540)=""/42, 0x41100, 0x42, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x10, 0x7fffffff, 0xd}, 0x10, 0x16ae9, 0xffffffffffffffff, 0x6, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x4, 0x2, 0xe, 0xb}, {0x2, 0x1, 0x3, 0xc}, {0x4, 0x2, 0x5, 0xb}, {0x5, 0x4, 0xf, 0x1}, {0x3, 0x5, 0x5, 0xb}, {0x3, 0x5, 0xf, 0x6}], 0x10, 0x200}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06fe0ccf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e01010000000001fddbdf250700ade7", @ANYRES32=0x0, @ANYBLOB="000002000600050000000000"], 0x24}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@initdev, @multicast1, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=@getqdisc={0x30, 0x26, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0x8, 0xfff3}, {0x1, 0x9}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x80) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000002100000000080000009534ae7c046492cf64fc000000009eb7c572b1542456fbdf99fb67a8499d668ada54a93e51576b679cfe4845f8e23da0394e1daa9827422a0f80e734bc5cd56c0393a219f3", @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x14) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x60) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x6}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x891e, &(0x7f0000000900)={'bridge0\x00', @multicast}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) 535.721738ms ago: executing program 2 (id=839): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x24}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newtaction={0x19c, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x188, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0xfffffffffffffffc}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x158, 0xd, 0x0, 0x0, {{0xa}, {0xa8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xc}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD]}]}]}, {0x85, 0x6, "ffa449d9761ef16726776dec6241caa3f22d0d9342f80236f936bd3ef1e79546997569dfbd790cbe522afd4bdf460831192b2853ef4df2135f9b6b5af1ffb28ee7336385111fbf0e1c765859b2bdf9e1537a4456fc0734a7191bc790125b398f04f1fbe7d3747c05cd4ff46816004908d8a0a74e1faf0b4b6d152f699610ce759a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000009667185e08000300", @ANYRES32=r6, @ANYBLOB="0a0034000202020202020000040093000800350000000000080035"], 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) 451.855669ms ago: executing program 0 (id=840): unshare(0x24020000) unshare(0x24020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x4c, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, &(0x7f0000000140)) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d", 0x55}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f", 0x17}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0fdd4b", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000180)="8260509475d3d4975fe5428c66215a8cca09c91db985855f31559781c83d98899fd0ffdb3cc4c62b939a27d26bd7186764d27e0c05fd7dd18811012bc83761064d5defa9f2861c22f7e0ad3a5079114365f34eed48e570dec36d55", 0x5b}, {&(0x7f00000002c0)="bfe9ef3580d65330f92f4fe077b0f37fb819d043478b48d11b823dd4c7e753cf650b2f76c62a55292c7f3de8e68f969444083faeaf1631098ee591eb185c39eee48ea7a201254a332006464cb491185f50dc2f89ad4b2d898759c88cef852f8fd7b7e4693a2bf435827b9aa3c0824ca3457cf2cedd3f1c8df2b911f11317c4ab466f256cd0214713bd218c29dd8a434e69ce1e09e19cae9b35", 0x99}, {0x0}, {&(0x7f0000000240)="7bd630d697a7", 0x6}, {&(0x7f0000000bc0)="0b9b784c4e9bdbe420575352c58da8a0ea1fa8e5f8d644b90f8a11778c7f8bc7119c050bfaa85cd7dfbd403448ae936d7d54fe0410145d4bccf849ec8a12db86e0555cd83857ca9a1e70bc45c5f7816a4a92ae197152dc28998628aa9711a73167894547a84afac1a206c60aacc06aec6e12a1cc5524d709167ea2ec68c1824b84931627a51cda2dffe108ec2f973dc96ea84ed6de13fae66762963fd9614af0b65537bc88e0f144d1d032dbcc98b07f23afbeff03000000000000bc1754d9d3e6542c", 0xc3}], 0x5, &(0x7f0000000700)}}], 0x3, 0xc0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000540)={0x7f, 0x9, 0x5, 0x7f, 0x1, 0xfb, 0xff, 0x6, 0x3, 0x5, 0x4, 0x5, 0x0, 0x10}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 449.387033ms ago: executing program 1 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmmsg(r0, &(0x7f00000098c0)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/148, 0x94}, {&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/64, 0x40}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000600)=""/128, 0x80}, {&(0x7f0000000680)=""/232, 0xe8}], 0x9, &(0x7f0000000840)=""/255, 0xff}, 0x9}, {{&(0x7f0000000940)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/79, 0x4f}, {&(0x7f0000002b40)=""/254, 0xfe}, {&(0x7f0000000a40)=""/189, 0xbd}, {&(0x7f0000002c40)=""/191, 0xbf}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x6, &(0x7f0000003d80)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004d80)=@nfc_llcp, 0x80, &(0x7f0000005280)=[{&(0x7f0000004e00)=""/100, 0x64}, {&(0x7f0000004e80)=""/155, 0x9b}, {&(0x7f0000004f40)=""/244, 0xf4}, {&(0x7f0000005040)=""/167, 0xa7}, {&(0x7f0000005100)=""/74, 0x4a}, {&(0x7f0000005180)=""/194, 0xc2}, {&(0x7f0000000380)=""/14, 0xe}], 0x7, &(0x7f0000005300)=""/4096, 0x1000}, 0xffff}, {{&(0x7f0000006300)=@nl=@proc, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006380)=""/195, 0xc3}, {&(0x7f0000006480)=""/162, 0xa2}, {&(0x7f0000006540)=""/75, 0x4b}], 0x3, &(0x7f0000006600)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000007600)=@l2tp6, 0x80, &(0x7f0000008680)=[{&(0x7f0000007680)=""/4096, 0x1000}], 0x1, &(0x7f00000086c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000096c0)=@ax25={{0x3, @null}, [@null, @remote, @null, @null, @default, @netrom, @rose, @rose]}, 0x80, &(0x7f0000009780)=[{&(0x7f0000009740)=""/58, 0x3a}], 0x1, &(0x7f00000097c0)=""/214, 0xd6}, 0x1ff}], 0x6, 0x10000, &(0x7f0000009a40)) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000009bc0), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000009c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x30, '\x00', r1, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000009d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000009cc0), &(0x7f0000009d00)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000009d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000009e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000009e00), &(0x7f0000009e40)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000009f40)={0xd, 0x8, &(0x7f0000009a80)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}], &(0x7f0000009ac0)='syzkaller\x00', 0x6, 0xbe, &(0x7f0000009b00)=""/190, 0x1e00, 0x4, '\x00', r1, @sock_ops=0x3, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000009c00)={0x4, 0xc, 0x15, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000009ec0)=[r3, r4, r5, r6, 0x1], &(0x7f0000009f00)=[{0x0, 0x2, 0x2, 0xf}, {0x0, 0x5, 0xa, 0x5}], 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000001108116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 282.582655ms ago: executing program 1 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="611089000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000440)={0x7, {{0x2, 0x4e22, @remote}}, 0x1, 0x2, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e21, @rand_addr=0x64010102}}]}, 0x190) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) unshare(0x28000600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x51f8, 0x7, 0xb69, 0xc1, 0x1, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x9, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0xfffffffe, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x3, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x6, 0x8, 0xdc1, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r7 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x4, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) bind$ax25(r8, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r8, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x7, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18}}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14, 0x10, 0x30}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) 281.494885ms ago: executing program 0 (id=843): r0 = socket(0x10, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x5a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000000500000000060015000100000028001680240001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000070a05000000000000000000010000050900010073796a30e930fad3f5dd9f85fc544c7f5d8bfaf7354912503ce64e52306f8172a5b70e94d59a1d0f3e603c7fc0e0511005fb016783ff6b87a16848fc75f913cfea7f74ba9feed4c9494a639f69233f31afe6c715733503bb9a6650f230a3d9dbc81b2b532a48e00bf9f318f1db41698cb5330ba1de676fb430e3d64175bccfd7d1dc7529826d4a26f54c712d684dc2e2be9f7ff4b69b5ad539599e7dcff2ba643cb7c4aef3bbf54970192bbdcad8b2a18b70e3f4fe7aaa56158175f2ef1197c82a4827623881ed71fb032b22b482d701c9f4f510f0ea53d10dec7fa793"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) connect$netrom(r3, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, 0x48) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x1) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0) 275.444441ms ago: executing program 3 (id=844): socket$kcm(0x21, 0x2, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@local, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 139.063873ms ago: executing program 3 (id=845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 3 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048844}, 0x8000002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 90.409624][ T5850] cgroup: Unknown subsys name 'net' [ 90.546729][ T5850] cgroup: Unknown subsys name 'cpuset' [ 90.556505][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.408198][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.309007][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.313695][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.317740][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.324974][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.333821][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.338443][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.353974][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.355090][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.362390][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.371654][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.405806][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.414223][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.422491][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.430559][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.438950][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.446851][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.454733][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.454873][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.464131][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.469710][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.485839][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.493523][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.500962][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.509234][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.517416][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.213249][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 97.244643][ T983] cfg80211: failed to load regulatory.db [ 97.300641][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 97.314994][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 97.425267][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 97.625598][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 97.643604][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.650881][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.659107][ T5861] bridge_slave_0: entered allmulticast mode [ 97.667817][ T5861] bridge_slave_0: entered promiscuous mode [ 97.677132][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.684459][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.691682][ T5861] bridge_slave_1: entered allmulticast mode [ 97.699347][ T5861] bridge_slave_1: entered promiscuous mode [ 97.830809][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.838511][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.846337][ T5864] bridge_slave_0: entered allmulticast mode [ 97.853899][ T5864] bridge_slave_0: entered promiscuous mode [ 97.886304][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.894234][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.901520][ T5871] bridge_slave_0: entered allmulticast mode [ 97.909064][ T5871] bridge_slave_0: entered promiscuous mode [ 97.922447][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.929907][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.937514][ T5864] bridge_slave_1: entered allmulticast mode [ 97.945034][ T5864] bridge_slave_1: entered promiscuous mode [ 97.955669][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.965727][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.973181][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.980377][ T5862] bridge_slave_0: entered allmulticast mode [ 97.988301][ T5862] bridge_slave_0: entered promiscuous mode [ 97.996752][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.004072][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.011507][ T5871] bridge_slave_1: entered allmulticast mode [ 98.019223][ T5871] bridge_slave_1: entered promiscuous mode [ 98.058794][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.068508][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.076266][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.083561][ T5862] bridge_slave_1: entered allmulticast mode [ 98.090929][ T5862] bridge_slave_1: entered promiscuous mode [ 98.177124][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.202058][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.215786][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.240792][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.253523][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.262846][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.270002][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.277815][ T5865] bridge_slave_0: entered allmulticast mode [ 98.285450][ T5865] bridge_slave_0: entered promiscuous mode [ 98.308419][ T5861] team0: Port device team_slave_0 added [ 98.317200][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.352824][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.360215][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.368739][ T5865] bridge_slave_1: entered allmulticast mode [ 98.376391][ T5865] bridge_slave_1: entered promiscuous mode [ 98.398752][ T5861] team0: Port device team_slave_1 added [ 98.433839][ T5184] Bluetooth: hci0: command tx timeout [ 98.433845][ T5870] Bluetooth: hci1: command tx timeout [ 98.450446][ T5864] team0: Port device team_slave_0 added [ 98.470513][ T5862] team0: Port device team_slave_0 added [ 98.479552][ T5871] team0: Port device team_slave_0 added [ 98.500695][ T5864] team0: Port device team_slave_1 added [ 98.524028][ T5862] team0: Port device team_slave_1 added [ 98.531547][ T5871] team0: Port device team_slave_1 added [ 98.541745][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.563958][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.571057][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.598074][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.609319][ T5184] Bluetooth: hci4: command tx timeout [ 98.609366][ T5869] Bluetooth: hci2: command tx timeout [ 98.615469][ T5870] Bluetooth: hci3: command tx timeout [ 98.652875][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.674636][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.681808][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.711622][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.762534][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.769637][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.795756][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.816739][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.824269][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.850736][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.863822][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.871352][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.899081][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.923881][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.930902][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.957200][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.969833][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.977128][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.003305][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.015825][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.023166][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.049714][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.062992][ T5865] team0: Port device team_slave_0 added [ 99.091493][ T5865] team0: Port device team_slave_1 added [ 99.130596][ T5861] hsr_slave_0: entered promiscuous mode [ 99.137377][ T5861] hsr_slave_1: entered promiscuous mode [ 99.194627][ T5864] hsr_slave_0: entered promiscuous mode [ 99.201410][ T5864] hsr_slave_1: entered promiscuous mode [ 99.208183][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 99.214363][ T5864] Cannot create hsr debugfs directory [ 99.299758][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.307029][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.334141][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.377729][ T5871] hsr_slave_0: entered promiscuous mode [ 99.384655][ T5871] hsr_slave_1: entered promiscuous mode [ 99.391239][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 99.397522][ T5871] Cannot create hsr debugfs directory [ 99.411830][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.419189][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.446172][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.462746][ T5862] hsr_slave_0: entered promiscuous mode [ 99.469270][ T5862] hsr_slave_1: entered promiscuous mode [ 99.476231][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 99.482108][ T5862] Cannot create hsr debugfs directory [ 99.719591][ T5865] hsr_slave_0: entered promiscuous mode [ 99.726717][ T5865] hsr_slave_1: entered promiscuous mode [ 99.733602][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 99.739406][ T5865] Cannot create hsr debugfs directory [ 100.095295][ T5861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.122088][ T5861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.150249][ T5861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.173928][ T5861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.222246][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.233697][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.257561][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.269415][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.344666][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.360157][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.373576][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.386031][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.489565][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.512044][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.520004][ T5870] Bluetooth: hci0: command tx timeout [ 100.520015][ T5869] Bluetooth: hci1: command tx timeout [ 100.553984][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.569919][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.668290][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.673011][ T5870] Bluetooth: hci3: command tx timeout [ 100.676663][ T5869] Bluetooth: hci4: command tx timeout [ 100.681042][ T5184] Bluetooth: hci2: command tx timeout [ 100.711325][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.735768][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.747050][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.827953][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.851838][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.874698][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.898827][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.932360][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.948620][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.970546][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.978038][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.988516][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.995698][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.005870][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.013205][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.022382][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.029704][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.045516][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.052789][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.076347][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.083594][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.150288][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.214192][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.247971][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.255539][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.280276][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.292564][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.355500][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.363048][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.425864][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.588127][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.618171][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.625497][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.678555][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.685793][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.898077][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.958997][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.990764][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.190988][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.201317][ T5871] veth0_vlan: entered promiscuous mode [ 102.235414][ T5864] veth0_vlan: entered promiscuous mode [ 102.249102][ T5871] veth1_vlan: entered promiscuous mode [ 102.272024][ T5864] veth1_vlan: entered promiscuous mode [ 102.406864][ T5862] veth0_vlan: entered promiscuous mode [ 102.421409][ T5871] veth0_macvtap: entered promiscuous mode [ 102.460692][ T5862] veth1_vlan: entered promiscuous mode [ 102.480176][ T5864] veth0_macvtap: entered promiscuous mode [ 102.490696][ T5871] veth1_macvtap: entered promiscuous mode [ 102.510446][ T5864] veth1_macvtap: entered promiscuous mode [ 102.561800][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.589341][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.596820][ T5184] Bluetooth: hci0: command tx timeout [ 102.603206][ T5184] Bluetooth: hci1: command tx timeout [ 102.614073][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.629143][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.644635][ T5862] veth0_macvtap: entered promiscuous mode [ 102.664770][ T1164] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.690530][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.706123][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.715099][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.736985][ T5862] veth1_macvtap: entered promiscuous mode [ 102.747871][ T5861] veth0_vlan: entered promiscuous mode [ 102.753872][ T5184] Bluetooth: hci2: command tx timeout [ 102.759367][ T5870] Bluetooth: hci3: command tx timeout [ 102.759380][ T5869] Bluetooth: hci4: command tx timeout [ 102.774698][ T1164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.783973][ T1164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.818144][ T1164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.827162][ T1164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.840578][ T5861] veth1_vlan: entered promiscuous mode [ 102.851997][ T1164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.874411][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.906650][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.928944][ T5865] veth0_vlan: entered promiscuous mode [ 102.965495][ T3505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.978070][ T3505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.015614][ T3505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.025564][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.068502][ T5865] veth1_vlan: entered promiscuous mode [ 103.123852][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.132040][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.145714][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.156017][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.169273][ T5861] veth0_macvtap: entered promiscuous mode [ 103.198944][ T5861] veth1_macvtap: entered promiscuous mode [ 103.211959][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.225730][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.247056][ T5865] veth0_macvtap: entered promiscuous mode [ 103.273344][ T5865] veth1_macvtap: entered promiscuous mode [ 103.297194][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.317810][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.326704][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.340699][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.351487][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.375489][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.406163][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.435624][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.465694][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.475411][ T3505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.485690][ T3505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.496460][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.509419][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.520131][ T3505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.530594][ T3505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.576542][ T3505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.620059][ T3505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.652953][ T3505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.661755][ T3505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.913850][ T5982] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.963281][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.984152][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.046116][ T5982] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.166127][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.202677][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.225072][ T5982] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.396177][ T5982] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.517749][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.553522][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.576697][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.619453][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.673999][ T5184] Bluetooth: hci0: command tx timeout [ 104.679490][ T5870] Bluetooth: hci1: command tx timeout [ 104.836725][ T5870] Bluetooth: hci4: command tx timeout [ 104.842195][ T5870] Bluetooth: hci3: command tx timeout [ 104.853139][ T5184] Bluetooth: hci2: command tx timeout [ 104.902664][ T5987] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 104.933245][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.941740][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.955844][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 104.987497][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.994893][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.003584][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.011413][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.029393][ T5987] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 105.057023][ T10] IPVS: starting estimator thread 0... [ 105.077820][ T5992] gretap0: entered promiscuous mode [ 105.156291][ T5998] IPVS: using max 27 ests per chain, 64800 per kthread [ 105.223922][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.231428][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.539115][ T5987] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 105.558962][ T5987] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 105.578519][ T6005] Zero length message leads to an empty skb [ 105.580510][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.608915][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.765408][ T5997] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.775290][ T5993] bridge_slave_1: left allmulticast mode [ 105.784417][ T5993] bridge_slave_1: left promiscuous mode [ 105.790467][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.805822][ T5993] bridge_slave_0: left allmulticast mode [ 105.811848][ T5993] bridge_slave_0: left promiscuous mode [ 105.820236][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.840047][ T5993] bond0: (slave bridge0): Releasing backup interface [ 105.891934][ T6008] netlink: 'syz.4.8': attribute type 12 has an invalid length. [ 105.915822][ T1164] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.932449][ T1164] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.957542][ T1164] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.982882][ T1164] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.086552][ T6013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.290350][ T6013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.078096][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.617037][ T6013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.678705][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.730713][ T6013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.825924][ T6034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.833425][ T6034] IPv6: NLM_F_CREATE should be set when creating new route [ 107.840784][ T6034] IPv6: NLM_F_CREATE should be set when creating new route [ 107.844379][ T6036] netlink: 'syz.2.14': attribute type 9 has an invalid length. [ 107.848154][ T6034] IPv6: NLM_F_CREATE should be set when creating new route [ 107.869385][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.903138][ T6036] netlink: 'syz.2.14': attribute type 7 has an invalid length. [ 107.911791][ T6036] netlink: 'syz.2.14': attribute type 8 has an invalid length. [ 107.930072][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 107.965341][ T3505] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.034241][ T3505] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.086271][ T154] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.201859][ T3505] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.215482][ T6046] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 108.239707][ T154] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.255887][ T6034] geneve2: entered promiscuous mode [ 108.328258][ T6044] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 108.345542][ T6049] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 108.395258][ T154] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.494466][ T6046] gretap1: entered promiscuous mode [ 108.554135][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 108.579255][ T6054] netlink: 165 bytes leftover after parsing attributes in process `syz.0.19'. [ 108.611984][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 108.640284][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 108.653270][ T6054] bridge_slave_1: left allmulticast mode [ 108.658969][ T6054] bridge_slave_1: left promiscuous mode [ 108.666489][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.681688][ T6054] bridge_slave_0: left allmulticast mode [ 108.689490][ T6054] bridge_slave_0: left promiscuous mode [ 108.698923][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.716667][ T6048] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 109.021988][ T6055] syzkaller0: entered promiscuous mode [ 109.053133][ T6055] syzkaller0: entered allmulticast mode [ 109.070852][ T6071] netlink: 'syz.0.22': attribute type 13 has an invalid length. [ 109.090964][ T6066] netlink: 'syz.3.23': attribute type 8 has an invalid length. [ 109.114063][ T6071] netlink: 'syz.0.22': attribute type 17 has an invalid length. [ 109.272435][ T6071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.298391][ T6082] netlink: 788 bytes leftover after parsing attributes in process `syz.1.25'. [ 109.455720][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.467811][ T6081] tun0: tun_chr_ioctl cmd 2148045848 [ 109.482410][ T6081] tun0: tun_chr_ioctl cmd 21731 [ 109.623537][ T6091] netlink: 256 bytes leftover after parsing attributes in process `syz.4.27'. [ 109.929361][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.937337][ T6097] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.181016][ T6102] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.205965][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.220166][ T6097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.463599][ T6100] veth0: entered promiscuous mode [ 110.500859][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.615136][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.817747][ T6120] netlink: 165 bytes leftover after parsing attributes in process `syz.4.33'. [ 110.851879][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 110.912994][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.922099][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.954168][ T6100] veth0: left promiscuous mode [ 110.959982][ T6120] bridge_slave_1: left allmulticast mode [ 110.966471][ T6120] bridge_slave_1: left promiscuous mode [ 110.972917][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.002181][ T6120] bridge_slave_0: left allmulticast mode [ 111.008113][ T6120] bridge_slave_0: left promiscuous mode [ 111.014438][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.416701][ T6132] !: renamed from dummy0 (while UP) [ 111.477859][ T6138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.680298][ T6145] tipc: Started in network mode [ 111.687004][ T6145] tipc: Node identity ac14140f, cluster identity 4711 [ 111.696345][ T6145] tipc: New replicast peer: 255.255.255.255 [ 111.724273][ T6145] tipc: Enabled bearer , priority 10 [ 111.752165][ T6143] netlink: 256 bytes leftover after parsing attributes in process `syz.0.39'. [ 112.138066][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.146716][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.448840][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.489127][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.853425][ T10] tipc: Node number set to 2886997007 [ 112.861042][ T6158] ipvlan2: entered promiscuous mode [ 113.015151][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.052815][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.077086][ T1164] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.116431][ T6178] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.234945][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.51'. [ 113.428112][ T6191] validate_nla: 2 callbacks suppressed [ 113.428132][ T6191] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 113.484250][ T6191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.492551][ T6194] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 113.693041][ T6205] netlink: 'syz.4.56': attribute type 4 has an invalid length. [ 113.697535][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.57'. [ 113.735208][ T6206] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 113.753622][ T6206] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 113.761986][ T6206] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 113.838413][ T6212] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.961107][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 113.976117][ T6222] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.072559][ T6252] tipc: Started in network mode [ 115.078299][ T6252] tipc: Node identity 86e1062ffb2c, cluster identity 4711 [ 115.094099][ T6252] tipc: Enabled bearer , priority 0 [ 115.120335][ T6252] sch_tbf: burst 10 is lower than device syzkaller0 mtu (1514) ! [ 115.191474][ T6263] tipc: Resetting bearer [ 115.275671][ T6272] netlink: 'syz.2.72': attribute type 3 has an invalid length. [ 115.305261][ T6272] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 115.317581][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 115.328483][ T6272] netlink: 212 bytes leftover after parsing attributes in process `syz.2.72'. [ 115.442838][ T6246] tipc: Disabling bearer [ 115.850542][ T6323] tipc: Started in network mode [ 115.858616][ T6323] tipc: Node identity ac14142f, cluster identity 4711 [ 115.875230][ T6323] tipc: New replicast peer: 0.0.0.0 [ 115.881941][ T6323] tipc: Enabled bearer , priority 10 [ 115.899729][ T6326] netlink: 128 bytes leftover after parsing attributes in process `syz.3.78'. [ 115.932439][ T6323] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 116.595961][ T6340] warning: `syz.0.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.649685][ T6335] macsec1: entered promiscuous mode [ 116.655457][ T6335] macvlan0: entered promiscuous mode [ 116.689467][ T6335] macvlan0: left promiscuous mode [ 116.884336][ T980] tipc: Node number set to 2886997039 [ 117.064061][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 118.179350][ T6402] sctp: [Deprecated]: syz.1.95 (pid 6402) Use of int in maxseg socket option. [ 118.179350][ T6402] Use struct sctp_assoc_value instead [ 118.526845][ T6417] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 118.929206][ T6439] syzkaller1: entered promiscuous mode [ 118.937077][ T6439] syzkaller1: entered allmulticast mode [ 118.964962][ T6441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 118.994205][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 119.012912][ T6441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 119.053076][ T6441] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 119.074026][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 119.460350][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 119.504872][ T6451] tipc: Started in network mode [ 119.509805][ T6451] tipc: Node identity be9711184a44, cluster identity 4711 [ 119.548680][ T6451] tipc: Enabled bearer , priority 0 [ 119.638025][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 119.674114][ T6452] syzkaller0: entered promiscuous mode [ 119.681595][ T6452] syzkaller0: entered allmulticast mode [ 119.800900][ T6451] tipc: Resetting bearer [ 119.810111][ T6450] tipc: Resetting bearer [ 119.822242][ T6460] trusted_key: syz.0.108 sent an empty control message without MSG_MORE. [ 119.836766][ T6450] tipc: Disabling bearer [ 120.009097][ T6460] veth1_to_bond: entered allmulticast mode [ 120.020666][ T6459] veth1_to_bond: left allmulticast mode [ 120.160408][ T6464] tipc: Failed to remove unknown binding: 66,1,1/0:204445971/204445973 [ 120.205919][ T6464] tipc: Failed to remove unknown binding: 66,1,1/0:204445971/204445973 [ 120.248457][ T6464] tipc: Failed to remove unknown binding: 66,1,1/0:204445971/204445973 [ 120.591041][ T6481] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 120.781400][ T6486] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 120.831977][ T6481] tc_dump_action: action bad kind [ 120.881038][ T6485] netlink: 48 bytes leftover after parsing attributes in process `syz.1.114'. [ 120.983289][ T6485] geneve2: entered promiscuous mode [ 121.757087][ T6518] tipc: Enabled bearer , priority 0 [ 121.787003][ T6509] syzkaller0: entered promiscuous mode [ 121.802703][ T6509] syzkaller0: entered allmulticast mode [ 121.914754][ T6509] tipc: Resetting bearer [ 121.929839][ T6508] tipc: Resetting bearer [ 121.960972][ T6508] tipc: Disabling bearer [ 122.100728][ T6544] netlink: 'syz.0.129': attribute type 3 has an invalid length. [ 122.123857][ T6544] netlink: 'syz.0.129': attribute type 3 has an invalid length. [ 122.509237][ T6561] netlink: 76 bytes leftover after parsing attributes in process `syz.2.133'. [ 122.908640][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 122.950541][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 123.014218][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 123.044549][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 123.131274][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.160063][ T6580] bond1: entered promiscuous mode [ 123.165255][ T6580] bond1: entered allmulticast mode [ 123.195600][ T6581] macsec2: entered promiscuous mode [ 123.200880][ T6581] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 123.223750][ T6581] macsec2: entered allmulticast mode [ 123.229134][ T6581] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 123.357458][ T6585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.364776][ T6585] IPv6: NLM_F_CREATE should be set when creating new route [ 123.400404][ T6586] tipc: Enabling of bearer rejected, already enabled [ 123.618311][ T6592] netlink: 224 bytes leftover after parsing attributes in process `syz.2.147'. [ 123.628215][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 123.767800][ T6607] tipc: Started in network mode [ 123.773555][ T6607] tipc: Node identity ac14140f, cluster identity 4711 [ 123.780875][ T6607] tipc: New replicast peer: 255.255.255.255 [ 123.789110][ T6607] tipc: Enabled bearer , priority 10 [ 123.795961][ T6610] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 123.815567][ T6612] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 123.836413][ T6612] netlink: 'syz.0.154': attribute type 4 has an invalid length. [ 124.055171][ T6623] netlink: 'syz.2.155': attribute type 3 has an invalid length. [ 124.077197][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 124.088901][ T6625] tipc: New replicast peer: 255.255.255.255 [ 124.093319][ T6621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.155'. [ 124.099857][ T6625] tipc: Enabled bearer , priority 10 [ 124.438297][ T6653] netlink: 'syz.4.165': attribute type 4 has an invalid length. [ 124.466934][ T6654] netlink: 'syz.4.165': attribute type 4 has an invalid length. [ 124.731365][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 124.903190][ T983] tipc: Node number set to 2886997007 [ 125.016819][ T6680] netlink: 'syz.4.174': attribute type 28 has an invalid length. [ 125.052467][ T6675] gretap2: entered promiscuous mode [ 125.174818][ T6688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.200211][ T6687] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 125.224075][ T980] tipc: Node number set to 4107473176 [ 125.317162][ T6693] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 125.829376][ T6715] nbd: couldn't find a device at index 0 [ 126.198887][ T6732] tun0: tun_chr_ioctl cmd 1074025675 [ 126.213691][ T6732] tun0: persist enabled [ 126.224870][ T6732] tun0: tun_chr_ioctl cmd 1074025675 [ 126.243057][ T6732] tun0: persist enabled [ 126.482158][ T6748] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 126.889619][ T6774] netlink: 'syz.4.200': attribute type 13 has an invalid length. [ 126.900090][ T6774] netlink: 'syz.4.200': attribute type 17 has an invalid length. [ 127.028861][ T6774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.046819][ T6774] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.068544][ T6774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.261934][ T6778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.420635][ T983] IPVS: starting estimator thread 0... [ 127.513337][ T6802] IPVS: using max 38 ests per chain, 91200 per kthread [ 127.904371][ T6816] netlink: 'syz.0.211': attribute type 25 has an invalid length. [ 128.224697][ T6828] __nla_validate_parse: 17 callbacks suppressed [ 128.224718][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 128.251511][ T6824] macvtap1: entered allmulticast mode [ 128.271847][ T6831] Bluetooth: MGMT ver 1.23 [ 128.282807][ T6824] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 128.333668][ T6824] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 128.400330][ T6821] macvtap1: entered allmulticast mode [ 128.462820][ T6821] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 128.723177][ T6821] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 129.072138][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.3.216'. [ 129.145267][ T6843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.216'. [ 129.240746][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 129.301540][ T6852] netlink: 'syz.1.221': attribute type 3 has an invalid length. [ 129.365493][ T6851] tap0: tun_chr_ioctl cmd 1074025678 [ 129.371114][ T6851] tap0: group set to 0 [ 129.415501][ T6843] netlink: 'syz.3.216': attribute type 10 has an invalid length. [ 129.472162][ T6843] team0: Device ipvlan1 failed to register rx_handler [ 129.640082][ T6886] netlink: 'syz.0.226': attribute type 7 has an invalid length. [ 129.880917][ T6907] Illegal XDP return value 67 on prog (id 133) dev N/A, expect packet loss! [ 130.383865][ T6929] netlink: 248 bytes leftover after parsing attributes in process `syz.1.236'. [ 130.536003][ T6934] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 130.621779][ T6934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.868599][ T6953] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 130.923086][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.243'. [ 130.958109][ T6953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.030075][ T6955] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.047813][ T6955] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.080456][ T6955] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 131.122927][ T6980] netlink: 188 bytes leftover after parsing attributes in process `syz.1.248'. [ 131.133865][ T6972] tipc: New replicast peer: 255.255.255.255 [ 131.140742][ T6972] tipc: Enabled bearer , priority 10 [ 131.173375][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.247'. [ 131.204233][ T6980] vlan3: entered promiscuous mode [ 131.221752][ T6980] vlan3: entered allmulticast mode [ 131.242150][ T6980] hsr_slave_1: entered allmulticast mode [ 131.443324][ T7002] netlink: 548 bytes leftover after parsing attributes in process `syz.2.253'. [ 131.758398][ T7012] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 132.038676][ T7020] tipc: Enabling of bearer rejected, already enabled [ 132.159155][ T7022] syzkaller0: entered promiscuous mode [ 132.174397][ T7022] syzkaller0: entered allmulticast mode [ 132.189384][ T7027] bridge0: entered allmulticast mode [ 132.252480][ T7031] pim6reg: entered allmulticast mode [ 132.252791][ T983] tipc: Node number set to 2110588463 [ 132.729006][ T7057] batadv_slave_1: entered promiscuous mode [ 132.987226][ T7057] batadv_slave_1: left promiscuous mode [ 133.175431][ T7081] Bluetooth: MGMT ver 1.23 [ 133.373304][ T7088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.389939][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 133.427477][ T7090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.276'. [ 133.740175][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'. [ 133.768382][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 133.920469][ T7112] tipc: Enabled bearer , priority 0 [ 133.941945][ T7112] syzkaller0: entered promiscuous mode [ 133.960608][ T7112] syzkaller0: entered allmulticast mode [ 133.971127][ T7116] netlink: 788 bytes leftover after parsing attributes in process `syz.2.285'. [ 134.130134][ T7125] tipc: Resetting bearer [ 134.149315][ T7125] tipc: Disabling bearer [ 134.291957][ T7138] tipc: New replicast peer: 255.255.255.255 [ 134.300288][ T7138] tipc: Enabled bearer , priority 10 [ 134.490593][ T7148] netlink: 'syz.2.292': attribute type 3 has an invalid length. [ 134.557830][ T30] audit: type=1800 audit(1758837974.951:2): pid=7143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.289" name="memory.events" dev="tmpfs" ino=303 res=0 errno=0 [ 135.057494][ T7176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.298'. [ 135.260993][ T7193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.303'. [ 135.318418][ T7193] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 135.529300][ T7201] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 135.537298][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 135.611667][ T7201] bond0: (slave bond_slave_0): Releasing backup interface [ 135.641425][ T7201] bond0: (slave bond_slave_1): Releasing backup interface [ 135.688471][ T7203] netlink: 'syz.4.306': attribute type 10 has an invalid length. [ 135.734437][ T7201] team0: Port device team_slave_0 removed [ 135.788077][ T7201] team0: Port device team_slave_1 removed [ 135.813917][ T7201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.832224][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'. [ 135.845304][ T7201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.853280][ T7206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.308'. [ 135.864158][ T7201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.889433][ T7203] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 135.924609][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.938474][ T7203] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.114684][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 137.385559][ T7266] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 137.440734][ T7269] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 137.540394][ T7270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.211968][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.218664][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.289218][ T7316] sctp: [Deprecated]: syz.3.339 (pid 7316) Use of int in maxseg socket option. [ 138.289218][ T7316] Use struct sctp_assoc_value instead [ 138.493422][ T7324] batadv_slave_1: entered promiscuous mode [ 138.536293][ T7323] batadv_slave_1: left promiscuous mode [ 138.587525][ T7328] netlink: 'syz.1.343': attribute type 39 has an invalid length. [ 138.670447][ T7331] __nla_validate_parse: 2 callbacks suppressed [ 138.670466][ T7331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 138.691920][ T7331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 138.974924][ T7347] netlink: 100 bytes leftover after parsing attributes in process `syz.3.346'. [ 139.014058][ T7347] veth3: entered promiscuous mode [ 139.027290][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 139.038176][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 139.388820][ T7354] netlink: 'syz.2.349': attribute type 3 has an invalid length. [ 139.407733][ T7353] tipc: Bearer : already 2 bearers with priority 10 [ 139.474594][ T7353] tipc: Bearer : trying with adjusted priority [ 139.534950][ T7353] tipc: Enabling of bearer rejected, failed to enable media [ 140.665222][ T7371] bridge0: port 1(erspan0) entered blocking state [ 140.759309][ T7371] bridge0: port 1(erspan0) entered disabled state [ 140.859736][ T7371] erspan0: entered allmulticast mode [ 140.968398][ T7371] erspan0: left allmulticast mode [ 143.083748][ T7432] netlink: 648 bytes leftover after parsing attributes in process `syz.0.370'. [ 143.249325][ T7443] netlink: 88 bytes leftover after parsing attributes in process `syz.0.373'. [ 143.525579][ T7456] netlink: 3 bytes leftover after parsing attributes in process `syz.0.375'. [ 143.682355][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.375'. [ 143.710098][ T7456] batadv1: entered promiscuous mode [ 143.719246][ T7456] batadv1: entered allmulticast mode [ 144.027622][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.382'. [ 144.150506][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 144.190566][ T7484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.383'. [ 144.284212][ T7486] netlink: 'syz.0.383': attribute type 5 has an invalid length. [ 145.048508][ T7503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.056868][ T7502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.210360][ T7522] netlink: 72 bytes leftover after parsing attributes in process `syz.3.393'. [ 145.686078][ T7537] syzkaller1: entered promiscuous mode [ 145.692141][ T7537] syzkaller1: entered allmulticast mode [ 146.349598][ T7556] netlink: 'syz.4.400': attribute type 1 has an invalid length. [ 146.808717][ T7568] netlink: 'syz.3.403': attribute type 1 has an invalid length. [ 146.917661][ T7577] netlink: 'syz.4.404': attribute type 3 has an invalid length. [ 146.955006][ T7577] netlink: 'syz.4.404': attribute type 3 has an invalid length. [ 146.987083][ T7577] netlink: 'syz.4.404': attribute type 3 has an invalid length. [ 147.019813][ T7577] netlink: 'syz.4.404': attribute type 3 has an invalid length. [ 147.065062][ T7581] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 147.090751][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.107374][ T7581] netlink: 208 bytes leftover after parsing attributes in process `syz.0.407'. [ 147.121552][ T7585] netlink: 'syz.1.409': attribute type 21 has an invalid length. [ 147.130189][ T7581] netlink: 'syz.0.407': attribute type 1 has an invalid length. [ 147.156870][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.407'. [ 147.210754][ T7568] vlan2: entered allmulticast mode [ 147.219709][ T7568] bridge0: entered allmulticast mode [ 147.227773][ T7568] bridge0: port 3(vlan2) entered blocking state [ 147.259150][ T7568] bridge0: port 3(vlan2) entered disabled state [ 147.315808][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.441475][ T10] IPVS: starting estimator thread 0... [ 147.534891][ T7596] IPVS: using max 28 ests per chain, 67200 per kthread [ 147.657006][ T7599] syz.0.412 (7599) used greatest stack depth: 17464 bytes left [ 147.831658][ T7615] bond1: (slave gretap2): making interface the new active one [ 147.865906][ T7615] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 147.925029][ T7619] bond1: (slave gretap3): Enslaving as an active interface with an up link [ 148.132855][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.420'. [ 148.157124][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 148.857955][ T7672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.431'. [ 148.913961][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 148.991720][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 149.101331][ T10] IPVS: starting estimator thread 0... [ 149.107800][ T7665] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 149.117269][ T7665] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 149.155283][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.222773][ T7680] IPVS: using max 27 ests per chain, 64800 per kthread [ 149.228110][ T7686] netlink: 44 bytes leftover after parsing attributes in process `syz.3.434'. [ 149.239835][ T7686] netlink: 43 bytes leftover after parsing attributes in process `syz.3.434'. [ 149.249838][ T7686] netlink: 43 bytes leftover after parsing attributes in process `syz.3.434'. [ 149.272663][ T7686] pim6reg1: entered promiscuous mode [ 149.278145][ T7686] pim6reg1: entered allmulticast mode [ 149.494510][ T7704] validate_nla: 3 callbacks suppressed [ 149.494533][ T7704] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 149.580051][ T7704] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.857209][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.445'. [ 149.976444][ T7728] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 150.023224][ T7736] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 150.446071][ T7769] netlink: 'syz.1.455': attribute type 4 has an invalid length. [ 150.770027][ T7784] syzkaller0: entered promiscuous mode [ 150.776442][ T7784] syzkaller0: entered allmulticast mode [ 150.790397][ T7785] tipc: Enabled bearer , priority 0 [ 150.840671][ T7787] bridge2: entered allmulticast mode [ 150.852164][ T7777] tipc: Resetting bearer [ 151.097801][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 151.248184][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.464'. [ 152.266859][ T7777] tipc: Disabling bearer [ 152.602871][ T7820] netlink: 'syz.1.471': attribute type 15 has an invalid length. [ 152.610820][ T7820] netlink: 2 bytes leftover after parsing attributes in process `syz.1.471'. [ 152.733266][ T7828] tipc: Enabling of bearer rejected, already enabled [ 153.552311][ T6874] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.577229][ T6874] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.634572][ T6874] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.662837][ T6874] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.373498][ T7885] __nla_validate_parse: 4 callbacks suppressed [ 154.373518][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.491'. [ 154.400728][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 154.941357][ T7911] veth5: entered promiscuous mode [ 155.064983][ T7931] tipc: Enabling of bearer rejected, already enabled [ 155.152095][ T7936] netlink: 34 bytes leftover after parsing attributes in process `syz.1.502'. [ 155.255685][ T7944] netlink: 3 bytes leftover after parsing attributes in process `syz.2.506'. [ 155.286139][ T7944] batadv1: entered promiscuous mode [ 155.291513][ T7944] batadv1: entered allmulticast mode [ 155.722785][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 155.793069][ T7968] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 155.830581][ T7972] macsec1: entered promiscuous mode [ 155.850411][ T7972] macsec0: entered promiscuous mode [ 155.874781][ T7972] macsec1: entered allmulticast mode [ 155.892461][ T7972] macsec0: entered allmulticast mode [ 155.972936][ T7974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.513'. [ 156.109957][ T7962] netlink: 1 bytes leftover after parsing attributes in process `syz.0.508'. [ 156.167363][ T7988] tipc: Enabling of bearer rejected, already enabled [ 156.906652][ T8006] netlink: 'syz.1.520': attribute type 10 has an invalid length. [ 156.965233][ T8006] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 157.007996][ T8006] team0: Failed to send options change via netlink (err -105) [ 157.053213][ T8006] team0: Port device dummy0 added [ 158.005976][ T8034] netlink: 'syz.0.527': attribute type 72 has an invalid length. [ 158.151414][ T8037] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 158.433639][ T8041] batadv_slave_1: entered promiscuous mode [ 158.446432][ T8041] batman_adv: batadv0: Adding interface: macsec1 [ 158.459869][ T8041] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.509569][ T8041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.541736][ T8041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.574214][ T8041] batman_adv: batadv0: Interface activated: macsec1 [ 158.885761][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.532'. [ 159.391377][ T8068] netlink: 44 bytes leftover after parsing attributes in process `syz.4.537'. [ 159.446220][ T8068] netlink: 43 bytes leftover after parsing attributes in process `syz.4.537'. [ 159.455259][ T8068] netlink: 'syz.4.537': attribute type 5 has an invalid length. [ 159.464349][ T8068] netlink: 43 bytes leftover after parsing attributes in process `syz.4.537'. [ 159.474775][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 159.484066][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 159.503031][ T8070] netlink: 'syz.4.537': attribute type 14 has an invalid length. [ 159.521204][ T8070] netlink: 'syz.4.537': attribute type 13 has an invalid length. [ 159.906128][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 160.493628][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 160.502734][ T8081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 160.615401][ T8083] tipc: Enabled bearer , priority 0 [ 160.634058][ T8078] syzkaller0: entered promiscuous mode [ 160.643695][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 160.654273][ T8078] syzkaller0: entered allmulticast mode [ 160.669160][ T8084] IPVS: Error joining to the multicast group [ 160.691314][ T8078] tipc: Resetting bearer [ 160.704094][ T8076] tipc: Resetting bearer [ 160.733420][ T8076] tipc: Disabling bearer [ 161.408269][ T8095] bond0: (slave bond_slave_0): Releasing backup interface [ 161.440934][ T8096] netlink: 'syz.0.545': attribute type 1 has an invalid length. [ 161.441137][ T8095] bond0: (slave bond_slave_1): Releasing backup interface [ 161.496659][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 161.590379][ T8095] team0: Port device team_slave_0 removed [ 161.641109][ T8095] team0: Port device team_slave_1 removed [ 161.696976][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.705304][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.715538][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.732752][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.756121][ T8095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.278199][ T8143] netlink: 'syz.4.560': attribute type 72 has an invalid length. [ 164.125301][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.133766][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.145965][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.163472][ T8182] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.183310][ T8182] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 164.230489][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.242015][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.251420][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.263433][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.273753][ T8182] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.390208][ T6878] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.398756][ T6878] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.410737][ T6878] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.436637][ T6878] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.571573][ T8193] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 164.585984][ T8193] __nla_validate_parse: 5 callbacks suppressed [ 164.586002][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'. [ 164.611278][ T8193] batman_adv: batadv0: Adding interface: virt_wifi0 [ 164.618245][ T8193] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.646833][ T8193] batman_adv: batadv0: Interface activated: virt_wifi0 [ 164.670953][ T5949] virt_wifi0 speed is unknown, defaulting to 1000 [ 164.770792][ T8203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.580'. [ 164.775184][ T8205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.581'. [ 164.822726][ T8191] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 164.830897][ T8191] nbd: error processing sock list [ 164.851861][ T8191] block nbd2: shutting down sockets [ 164.953996][ T8213] tipc: Enabling of bearer rejected, already enabled [ 165.167322][ T8225] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 165.186055][ T8226] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 165.299054][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.591'. [ 165.315352][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.591'. [ 165.324666][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.591'. [ 165.338753][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.591'. [ 165.350005][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.591'. [ 165.390726][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.591'. [ 165.420907][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.0.591'. [ 165.539481][ T8235] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 165.609165][ T8229] virt_wifi0 speed is unknown, defaulting to 1000 [ 165.655325][ T8233] virt_wifi0 speed is unknown, defaulting to 1000 [ 165.957580][ T8259] virt_wifi0 speed is unknown, defaulting to 1000 [ 166.102351][ T8275] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.151034][ T8277] netlink: 'syz.1.605': attribute type 10 has an invalid length. [ 166.258953][ T8277] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.270588][ T8283] netlink: zone id is out of range [ 166.282098][ T8276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.292725][ T8283] netlink: get zone limit has 8 unknown bytes [ 166.434635][ T8289] netlink: 'syz.0.608': attribute type 1 has an invalid length. [ 166.553329][ T8290] virt_wifi0 speed is unknown, defaulting to 1000 [ 166.802449][ T8286] tipc: Enabled bearer , priority 0 [ 167.048759][ T8285] tipc: Disabling bearer [ 167.150444][ T8317] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 168.371962][ T8365] virt_wifi0 speed is unknown, defaulting to 1000 [ 199.636770][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 222.199674][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 222.200206][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 222.211967][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 241.917034][ T8415] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 241.932727][ T8415] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 241.964883][ T8419] netlink: 'syz.3.634': attribute type 13 has an invalid length. [ 241.969322][ T8412] __nla_validate_parse: 29 callbacks suppressed [ 241.969345][ T8412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'. [ 242.004539][ T8419] netlink: 'syz.3.634': attribute type 17 has an invalid length. [ 242.013277][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.632'. [ 242.022290][ T8412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'. [ 242.063073][ T8412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'. [ 242.126299][ T8428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.165235][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 242.174560][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 242.188465][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 242.234265][ T8419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.346786][ T8421] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.448855][ T8429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.566167][ T8443] geneve3: entered promiscuous mode [ 242.639666][ T8429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.757461][ T8451] netlink: 88 bytes leftover after parsing attributes in process `syz.1.643'. [ 242.892127][ T8429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.941323][ T8455] syz_tun: entered allmulticast mode [ 242.987145][ T8454] syz_tun: left allmulticast mode [ 243.114842][ T8429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.312197][ T6315] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.362950][ T8464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.646'. [ 243.379014][ T8464] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 243.420858][ T6870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.435044][ T6870] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.514286][ T6872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.525983][ T8468] netlink: 'syz.4.648': attribute type 10 has an invalid length. [ 243.535342][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 243.659444][ T8476] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.696506][ T8475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 243.938771][ T8487] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.484045][ T8503] tipc: Enabling of bearer rejected, already enabled [ 244.644015][ T8508] nbd: socks must be embedded in a SOCK_ITEM attr [ 244.653916][ T8508] block nbd3: shutting down sockets [ 244.684874][ T8505] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 244.953453][ T8522] geneve2: entered promiscuous mode [ 244.972743][ T6870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.992288][ T6870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.039329][ T6870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.072715][ T6870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.090967][ T8521] virt_wifi0 speed is unknown, defaulting to 1000 [ 245.195558][ T8529] syzkaller0: entered promiscuous mode [ 245.201102][ T8529] syzkaller0: entered allmulticast mode [ 246.746948][ T8554] netlink: 'syz.2.675': attribute type 12 has an invalid length. [ 246.849957][ T8561] pim6reg: entered allmulticast mode [ 246.958877][ T8560] netlink: 'syz.2.675': attribute type 10 has an invalid length. [ 246.986490][ T8568] __nla_validate_parse: 9 callbacks suppressed [ 246.986509][ T8568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'. [ 247.012989][ T8560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.040959][ T8560] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 247.057390][ T8568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.678'. [ 247.118964][ T8577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.191022][ T8580] tipc: Enabling of bearer rejected, already enabled [ 247.361618][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.684'. [ 247.395320][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 247.413616][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.684'. [ 247.423940][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.684'. [ 247.452232][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 247.461810][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 247.480792][ T8598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.493308][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 247.493784][ T8598] bond0: (slave bond1): Enslaving as an active interface with an up link [ 247.609412][ T8590] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.670867][ T8604] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.685594][ T8590] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.728259][ T8617] FAULT_INJECTION: forcing a failure. [ 247.728259][ T8617] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 247.741976][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.1.690 Not tainted syzkaller #0 PREEMPT(full) [ 247.742005][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.742022][ T8617] Call Trace: [ 247.742035][ T8617] [ 247.742045][ T8617] dump_stack_lvl+0x189/0x250 [ 247.742074][ T8617] ? __pfx____ratelimit+0x10/0x10 [ 247.742105][ T8617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.742128][ T8617] ? __pfx__printk+0x10/0x10 [ 247.742154][ T8617] ? __might_fault+0xb0/0x130 [ 247.742193][ T8617] should_fail_ex+0x414/0x560 [ 247.742226][ T8617] _copy_from_user+0x2d/0xb0 [ 247.742251][ T8617] ___sys_sendmsg+0x158/0x2a0 [ 247.742280][ T8617] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.742363][ T8617] ? __fget_files+0x2a/0x420 [ 247.742387][ T8617] ? __fget_files+0x3a0/0x420 [ 247.742420][ T8617] __x64_sys_sendmsg+0x19b/0x260 [ 247.742443][ T8617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.742473][ T8617] ? __pfx_ksys_write+0x10/0x10 [ 247.742492][ T8617] ? rcu_is_watching+0x15/0xb0 [ 247.742516][ T8617] ? do_syscall_64+0xbe/0x3b0 [ 247.742539][ T8617] do_syscall_64+0xfa/0x3b0 [ 247.742556][ T8617] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.742586][ T8617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.742604][ T8617] ? clear_bhb_loop+0x60/0xb0 [ 247.742628][ T8617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.742645][ T8617] RIP: 0033:0x7f31e1f8eec9 [ 247.742662][ T8617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.742675][ T8617] RSP: 002b:00007f31e2e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.742699][ T8617] RAX: ffffffffffffffda RBX: 00007f31e21e6090 RCX: 00007f31e1f8eec9 [ 247.742711][ T8617] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 247.742721][ T8617] RBP: 00007f31e2e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 247.742731][ T8617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.742740][ T8617] R13: 00007f31e21e6128 R14: 00007f31e21e6090 R15: 00007ffc7ce97fe8 [ 247.742766][ T8617] [ 247.830231][ T8616] virt_wifi0 speed is unknown, defaulting to 1000 [ 248.073124][ T8590] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.220410][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'. [ 248.234167][ T8590] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.269433][ T8627] tipc: Enabling of bearer rejected, already enabled [ 248.397235][ T6872] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.444990][ T6872] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.445269][ T8630] sctp: [Deprecated]: syz.1.696 (pid 8630) Use of int in max_burst socket option deprecated. [ 248.445269][ T8630] Use struct sctp_assoc_value instead [ 248.477489][ T8630] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:1025 [ 248.479780][ T6872] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.530923][ T6870] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.677599][ T8638] batadv_slave_1: entered promiscuous mode [ 248.785373][ T8638] batadv_slave_1: left promiscuous mode [ 248.871080][ T8648] virt_wifi0 speed is unknown, defaulting to 1000 [ 248.968838][ T8657] FAULT_INJECTION: forcing a failure. [ 248.968838][ T8657] name failslab, interval 1, probability 0, space 0, times 1 [ 249.065693][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.0.703 Not tainted syzkaller #0 PREEMPT(full) [ 249.065724][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.065736][ T8657] Call Trace: [ 249.065744][ T8657] [ 249.065753][ T8657] dump_stack_lvl+0x189/0x250 [ 249.065781][ T8657] ? __pfx____ratelimit+0x10/0x10 [ 249.065813][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.065835][ T8657] ? __pfx__printk+0x10/0x10 [ 249.065866][ T8657] ? __pfx___might_resched+0x10/0x10 [ 249.065901][ T8657] should_fail_ex+0x414/0x560 [ 249.065935][ T8657] should_failslab+0xa8/0x100 [ 249.065965][ T8657] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 249.065993][ T8657] ? __alloc_skb+0x112/0x2d0 [ 249.066026][ T8657] __alloc_skb+0x112/0x2d0 [ 249.066053][ T8657] netlink_sendmsg+0x5c6/0xb30 [ 249.066087][ T8657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.066114][ T8657] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.066148][ T8657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.066168][ T8657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.066192][ T8657] __sock_sendmsg+0x219/0x270 [ 249.066234][ T8657] ____sys_sendmsg+0x505/0x830 [ 249.066265][ T8657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.066301][ T8657] ? import_iovec+0x74/0xa0 [ 249.066330][ T8657] ___sys_sendmsg+0x21f/0x2a0 [ 249.066375][ T8657] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.066441][ T8657] ? __fget_files+0x2a/0x420 [ 249.066469][ T8657] ? __fget_files+0x3a0/0x420 [ 249.066509][ T8657] __x64_sys_sendmsg+0x19b/0x260 [ 249.066536][ T8657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.066573][ T8657] ? __pfx_ksys_write+0x10/0x10 [ 249.066596][ T8657] ? rcu_is_watching+0x15/0xb0 [ 249.066621][ T8657] ? do_syscall_64+0xbe/0x3b0 [ 249.066645][ T8657] do_syscall_64+0xfa/0x3b0 [ 249.066664][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.066694][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.066713][ T8657] ? clear_bhb_loop+0x60/0xb0 [ 249.066738][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.066758][ T8657] RIP: 0033:0x7fdfe338eec9 [ 249.066776][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.066792][ T8657] RSP: 002b:00007fdfe41b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.066813][ T8657] RAX: ffffffffffffffda RBX: 00007fdfe35e6090 RCX: 00007fdfe338eec9 [ 249.066828][ T8657] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 249.066840][ T8657] RBP: 00007fdfe41b2090 R08: 0000000000000000 R09: 0000000000000000 [ 249.066853][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.066864][ T8657] R13: 00007fdfe35e6128 R14: 00007fdfe35e6090 R15: 00007fff2a2a2698 [ 249.066897][ T8657] [ 249.444498][ T8670] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.510622][ T8666] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.543071][ T8667] tipc: Enabling of bearer rejected, already enabled [ 249.697407][ T8661] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.258872][ T8689] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.875399][ T8713] nbd3: detected capacity change from 0 to 127 [ 250.884500][ T5184] block nbd3: Receive control failed (result -32) [ 251.057510][ T8724] tipc: Enabling of bearer rejected, already enabled [ 251.273671][ T8730] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.332940][ T8725] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.557415][ T8735] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.690210][ T8749] syzkaller1: entered promiscuous mode [ 251.702715][ T8749] syzkaller1: entered allmulticast mode [ 251.716057][ T8750] ipvlan1: entered promiscuous mode [ 252.011532][ T8750] ipvlan1 (unregistering): left promiscuous mode [ 252.867750][ T8766] tipc: Enabling of bearer rejected, already enabled [ 253.003188][ T8770] __nla_validate_parse: 1 callbacks suppressed [ 253.003207][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.736'. [ 253.078687][ T8776] virt_wifi0 speed is unknown, defaulting to 1000 [ 253.100220][ T8780] FAULT_INJECTION: forcing a failure. [ 253.100220][ T8780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.154869][ T8780] CPU: 0 UID: 0 PID: 8780 Comm: syz.0.737 Not tainted syzkaller #0 PREEMPT(full) [ 253.154897][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.154909][ T8780] Call Trace: [ 253.154917][ T8780] [ 253.154925][ T8780] dump_stack_lvl+0x189/0x250 [ 253.154952][ T8780] ? __pfx____ratelimit+0x10/0x10 [ 253.154984][ T8780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.155006][ T8780] ? __pfx__printk+0x10/0x10 [ 253.155041][ T8780] ? __might_fault+0xb0/0x130 [ 253.155078][ T8780] should_fail_ex+0x414/0x560 [ 253.155112][ T8780] _copy_from_iter+0x1de/0x1790 [ 253.155141][ T8780] ? rcu_is_watching+0x15/0xb0 [ 253.155161][ T8780] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 253.155189][ T8780] ? __pfx__copy_from_iter+0x10/0x10 [ 253.155212][ T8780] ? __build_skb_around+0x257/0x3e0 [ 253.155237][ T8780] ? netlink_sendmsg+0x642/0xb30 [ 253.155257][ T8780] ? skb_put+0x11b/0x210 [ 253.155282][ T8780] netlink_sendmsg+0x6b2/0xb30 [ 253.155315][ T8780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.155342][ T8780] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.155376][ T8780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.155396][ T8780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.155419][ T8780] __sock_sendmsg+0x219/0x270 [ 253.155453][ T8780] ____sys_sendmsg+0x505/0x830 [ 253.155486][ T8780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.155521][ T8780] ? import_iovec+0x74/0xa0 [ 253.155549][ T8780] ___sys_sendmsg+0x21f/0x2a0 [ 253.155578][ T8780] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.155644][ T8780] ? __fget_files+0x2a/0x420 [ 253.155672][ T8780] ? __fget_files+0x3a0/0x420 [ 253.155713][ T8780] __x64_sys_sendmsg+0x19b/0x260 [ 253.155742][ T8780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.155779][ T8780] ? __pfx_ksys_write+0x10/0x10 [ 253.155802][ T8780] ? rcu_is_watching+0x15/0xb0 [ 253.155825][ T8780] ? do_syscall_64+0xbe/0x3b0 [ 253.155850][ T8780] do_syscall_64+0xfa/0x3b0 [ 253.155868][ T8780] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.155902][ T8780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.155923][ T8780] ? clear_bhb_loop+0x60/0xb0 [ 253.155948][ T8780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.155967][ T8780] RIP: 0033:0x7fdfe338eec9 [ 253.155986][ T8780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.156002][ T8780] RSP: 002b:00007fdfe41b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.156031][ T8780] RAX: ffffffffffffffda RBX: 00007fdfe35e6090 RCX: 00007fdfe338eec9 [ 253.156046][ T8780] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 253.156058][ T8780] RBP: 00007fdfe41b2090 R08: 0000000000000000 R09: 0000000000000000 [ 253.156070][ T8780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.156081][ T8780] R13: 00007fdfe35e6128 R14: 00007fdfe35e6090 R15: 00007fff2a2a2698 [ 253.156115][ T8780] [ 253.597522][ T8785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.741'. [ 253.664360][ T8785] virt_wifi0 speed is unknown, defaulting to 1000 [ 253.709058][ T8796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 253.716450][ T8796] IPv6: NLM_F_CREATE should be set when creating new route [ 253.723784][ T8796] IPv6: NLM_F_CREATE should be set when creating new route [ 253.844084][ T8795] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.031209][ T8816] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 254.041454][ T8816] netlink: 240 bytes leftover after parsing attributes in process `syz.3.747'. [ 254.367470][ T8826] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.539010][ T8839] FAULT_INJECTION: forcing a failure. [ 254.539010][ T8839] name failslab, interval 1, probability 0, space 0, times 0 [ 254.564462][ T8836] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.571105][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.4.754 Not tainted syzkaller #0 PREEMPT(full) [ 254.571131][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.571142][ T8839] Call Trace: [ 254.571150][ T8839] [ 254.571158][ T8839] dump_stack_lvl+0x189/0x250 [ 254.571186][ T8839] ? __pfx____ratelimit+0x10/0x10 [ 254.571218][ T8839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.571240][ T8839] ? __pfx__printk+0x10/0x10 [ 254.571269][ T8839] ? __pfx___might_resched+0x10/0x10 [ 254.571299][ T8839] ? fs_reclaim_acquire+0x7d/0x100 [ 254.571334][ T8839] should_fail_ex+0x414/0x560 [ 254.571368][ T8839] should_failslab+0xa8/0x100 [ 254.571398][ T8839] __kmalloc_noprof+0xcb/0x4f0 [ 254.571422][ T8839] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 254.571456][ T8839] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 254.571491][ T8839] genl_family_rcv_msg_doit+0xb8/0x300 [ 254.571526][ T8839] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.571572][ T8839] ? apparmor_capable+0x137/0x1b0 [ 254.571598][ T8839] ? bpf_lsm_capable+0x9/0x20 [ 254.571623][ T8839] ? security_capable+0x7e/0x2e0 [ 254.571660][ T8839] genl_rcv_msg+0x60e/0x790 [ 254.571696][ T8839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.571721][ T8839] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 254.571750][ T8839] ? __pfx_nl80211_add_link_station+0x10/0x10 [ 254.571779][ T8839] ? __pfx_nl80211_post_doit+0x10/0x10 [ 254.571824][ T8839] netlink_rcv_skb+0x208/0x470 [ 254.571843][ T8839] ? __lock_acquire+0xab9/0xd20 [ 254.571871][ T8839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.571901][ T8839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.571944][ T8839] ? down_read+0x1ad/0x2e0 [ 254.571968][ T8839] genl_rcv+0x28/0x40 [ 254.571994][ T8839] netlink_unicast+0x82f/0x9e0 [ 254.572023][ T8839] ? __pfx_netlink_unicast+0x10/0x10 [ 254.572045][ T8839] ? netlink_sendmsg+0x642/0xb30 [ 254.572064][ T8839] ? skb_put+0x11b/0x210 [ 254.572091][ T8839] netlink_sendmsg+0x805/0xb30 [ 254.572125][ T8839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.572151][ T8839] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.572184][ T8839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.572204][ T8839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.572226][ T8839] __sock_sendmsg+0x219/0x270 [ 254.572256][ T8839] ____sys_sendmsg+0x505/0x830 [ 254.572283][ T8839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.572319][ T8839] ? import_iovec+0x74/0xa0 [ 254.572348][ T8839] ___sys_sendmsg+0x21f/0x2a0 [ 254.572376][ T8839] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.572441][ T8839] ? __fget_files+0x2a/0x420 [ 254.572468][ T8839] ? __fget_files+0x3a0/0x420 [ 254.572513][ T8839] __x64_sys_sendmsg+0x19b/0x260 [ 254.572547][ T8839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.572583][ T8839] ? __pfx_ksys_write+0x10/0x10 [ 254.572604][ T8839] ? rcu_is_watching+0x15/0xb0 [ 254.572628][ T8839] ? do_syscall_64+0xbe/0x3b0 [ 254.572652][ T8839] do_syscall_64+0xfa/0x3b0 [ 254.572670][ T8839] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.572700][ T8839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.572721][ T8839] ? clear_bhb_loop+0x60/0xb0 [ 254.572745][ T8839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.572765][ T8839] RIP: 0033:0x7fc515d8eec9 [ 254.572783][ T8839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.572799][ T8839] RSP: 002b:00007fc516bbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.572820][ T8839] RAX: ffffffffffffffda RBX: 00007fc515fe6090 RCX: 00007fc515d8eec9 [ 254.572834][ T8839] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 254.572846][ T8839] RBP: 00007fc516bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 254.572858][ T8839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.572869][ T8839] R13: 00007fc515fe6128 R14: 00007fc515fe6090 R15: 00007ffedc041bb8 [ 254.572901][ T8839] [ 255.032420][ T8848] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.427738][ T8872] virt_wifi0 speed is unknown, defaulting to 1000 [ 255.812190][ T8892] FAULT_INJECTION: forcing a failure. [ 255.812190][ T8892] name failslab, interval 1, probability 0, space 0, times 0 [ 255.849937][ T8892] CPU: 1 UID: 0 PID: 8892 Comm: syz.4.770 Not tainted syzkaller #0 PREEMPT(full) [ 255.849967][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.849980][ T8892] Call Trace: [ 255.849988][ T8892] [ 255.849997][ T8892] dump_stack_lvl+0x189/0x250 [ 255.850026][ T8892] ? __pfx____ratelimit+0x10/0x10 [ 255.850057][ T8892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.850080][ T8892] ? __pfx__printk+0x10/0x10 [ 255.850114][ T8892] ? __pfx___might_resched+0x10/0x10 [ 255.850144][ T8892] ? fs_reclaim_acquire+0x7d/0x100 [ 255.850180][ T8892] should_fail_ex+0x414/0x560 [ 255.850214][ T8892] should_failslab+0xa8/0x100 [ 255.850244][ T8892] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 255.850271][ T8892] ? __alloc_skb+0x112/0x2d0 [ 255.850299][ T8892] __alloc_skb+0x112/0x2d0 [ 255.850326][ T8892] netlink_ack+0x146/0xa50 [ 255.850345][ T8892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.850371][ T8892] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 255.850403][ T8892] ? __pfx_nl80211_post_doit+0x10/0x10 [ 255.850458][ T8892] netlink_rcv_skb+0x28c/0x470 [ 255.850478][ T8892] ? __lock_acquire+0xab9/0xd20 [ 255.850506][ T8892] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.850536][ T8892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.850579][ T8892] ? down_read+0x1ad/0x2e0 [ 255.850603][ T8892] genl_rcv+0x28/0x40 [ 255.850629][ T8892] netlink_unicast+0x82f/0x9e0 [ 255.850659][ T8892] ? __pfx_netlink_unicast+0x10/0x10 [ 255.850681][ T8892] ? netlink_sendmsg+0x642/0xb30 [ 255.850702][ T8892] ? skb_put+0x11b/0x210 [ 255.850729][ T8892] netlink_sendmsg+0x805/0xb30 [ 255.850763][ T8892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.850790][ T8892] ? aa_sock_msg_perm+0xf1/0x1d0 [ 255.850824][ T8892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.850845][ T8892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.850869][ T8892] __sock_sendmsg+0x219/0x270 [ 255.850904][ T8892] ____sys_sendmsg+0x505/0x830 [ 255.850942][ T8892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.850979][ T8892] ? import_iovec+0x74/0xa0 [ 255.851009][ T8892] ___sys_sendmsg+0x21f/0x2a0 [ 255.851037][ T8892] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.851106][ T8892] ? __fget_files+0x2a/0x420 [ 255.851133][ T8892] ? __fget_files+0x3a0/0x420 [ 255.851175][ T8892] __x64_sys_sendmsg+0x19b/0x260 [ 255.851204][ T8892] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.851245][ T8892] ? rcu_is_watching+0x15/0xb0 [ 255.851265][ T8892] ? trace_sys_enter+0x25/0x100 [ 255.851300][ T8892] do_syscall_64+0xfa/0x3b0 [ 255.851319][ T8892] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.851349][ T8892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.851369][ T8892] ? clear_bhb_loop+0x60/0xb0 [ 255.851394][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.851414][ T8892] RIP: 0033:0x7fc515d8eec9 [ 255.851437][ T8892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.851453][ T8892] RSP: 002b:00007fc516bbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.851475][ T8892] RAX: ffffffffffffffda RBX: 00007fc515fe6090 RCX: 00007fc515d8eec9 [ 255.851490][ T8892] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 255.851502][ T8892] RBP: 00007fc516bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 255.851514][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.851526][ T8892] R13: 00007fc515fe6128 R14: 00007fc515fe6090 R15: 00007ffedc041bb8 [ 255.851560][ T8892] [ 256.214519][ T8898] netlink: 'syz.2.772': attribute type 13 has an invalid length. [ 256.223303][ T8898] netlink: 'syz.2.772': attribute type 17 has an invalid length. [ 256.315279][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.324969][ T8898] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.344606][ T8898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.363274][ T8888] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.455324][ T8894] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.487033][ T8896] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.971313][ T8910] virt_wifi0 speed is unknown, defaulting to 1000 [ 257.448164][ T8941] tipc: Enabled bearer , priority 0 [ 257.574077][ T8949] syzkaller0: entered promiscuous mode [ 257.579615][ T8949] syzkaller0: entered allmulticast mode [ 257.617013][ T8957] tipc: Resetting bearer [ 257.660479][ T8931] tipc: Resetting bearer [ 257.774163][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'. [ 257.783784][ T8931] tipc: Disabling bearer [ 258.068770][ T8978] syzkaller1: entered allmulticast mode [ 258.104443][ T8978] netlink: 32 bytes leftover after parsing attributes in process `syz.2.795'. [ 258.164812][ T8982] FAULT_INJECTION: forcing a failure. [ 258.164812][ T8982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.195171][ T8982] CPU: 1 UID: 0 PID: 8982 Comm: syz.3.798 Not tainted syzkaller #0 PREEMPT(full) [ 258.195201][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.195213][ T8982] Call Trace: [ 258.195222][ T8982] [ 258.195231][ T8982] dump_stack_lvl+0x189/0x250 [ 258.195259][ T8982] ? __pfx____ratelimit+0x10/0x10 [ 258.195291][ T8982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.195314][ T8982] ? __pfx__printk+0x10/0x10 [ 258.195341][ T8982] ? __might_fault+0xb0/0x130 [ 258.195379][ T8982] should_fail_ex+0x414/0x560 [ 258.195415][ T8982] _copy_from_user+0x2d/0xb0 [ 258.195440][ T8982] ___sys_sendmsg+0x158/0x2a0 [ 258.195470][ T8982] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.195543][ T8982] ? __fget_files+0x2a/0x420 [ 258.195571][ T8982] ? __fget_files+0x3a0/0x420 [ 258.195611][ T8982] __x64_sys_sendmsg+0x19b/0x260 [ 258.195639][ T8982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 258.195674][ T8982] ? __pfx_ksys_write+0x10/0x10 [ 258.195697][ T8982] ? rcu_is_watching+0x15/0xb0 [ 258.195722][ T8982] ? do_syscall_64+0xbe/0x3b0 [ 258.195746][ T8982] do_syscall_64+0xfa/0x3b0 [ 258.195764][ T8982] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.195795][ T8982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.195815][ T8982] ? clear_bhb_loop+0x60/0xb0 [ 258.195840][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.195859][ T8982] RIP: 0033:0x7f619478eec9 [ 258.195877][ T8982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.195893][ T8982] RSP: 002b:00007f619565d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.195914][ T8982] RAX: ffffffffffffffda RBX: 00007f61949e5fa0 RCX: 00007f619478eec9 [ 258.195928][ T8982] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 258.195939][ T8982] RBP: 00007f619565d090 R08: 0000000000000000 R09: 0000000000000000 [ 258.195950][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.195962][ T8982] R13: 00007f61949e6038 R14: 00007f61949e5fa0 R15: 00007fffbf030f98 [ 258.195994][ T8982] [ 258.557475][ T8988] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.809292][ T8999] tipc: Enabled bearer , priority 0 [ 258.879269][ T8997] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.897629][ T8999] tipc: Disabling bearer [ 258.939070][ T9012] IPv6: sit1: Disabled Multicast RS [ 258.952316][ T9012] Bluetooth: MGMT ver 1.23 [ 259.210636][ T9022] bridge0: entered promiscuous mode [ 259.430244][ T9020] bridge0: left promiscuous mode [ 259.487553][ T9042] FAULT_INJECTION: forcing a failure. [ 259.487553][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 259.507630][ T9053] FAULT_INJECTION: forcing a failure. [ 259.507630][ T9053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.537195][ T9042] CPU: 1 UID: 0 PID: 9042 Comm: syz.0.813 Not tainted syzkaller #0 PREEMPT(full) [ 259.537229][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.537241][ T9042] Call Trace: [ 259.537250][ T9042] [ 259.537259][ T9042] dump_stack_lvl+0x189/0x250 [ 259.537288][ T9042] ? __pfx____ratelimit+0x10/0x10 [ 259.537319][ T9042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.537341][ T9042] ? __pfx__printk+0x10/0x10 [ 259.537374][ T9042] ? __pfx___might_resched+0x10/0x10 [ 259.537409][ T9042] should_fail_ex+0x414/0x560 [ 259.537444][ T9042] should_failslab+0xa8/0x100 [ 259.537475][ T9042] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 259.537502][ T9042] ? __alloc_skb+0x112/0x2d0 [ 259.537529][ T9042] __alloc_skb+0x112/0x2d0 [ 259.537555][ T9042] netlink_sendmsg+0x5c6/0xb30 [ 259.537590][ T9042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.537616][ T9042] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.537650][ T9042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.537670][ T9042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.537694][ T9042] __sock_sendmsg+0x219/0x270 [ 259.537728][ T9042] ____sys_sendmsg+0x505/0x830 [ 259.537760][ T9042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.537796][ T9042] ? import_iovec+0x74/0xa0 [ 259.537825][ T9042] ___sys_sendmsg+0x21f/0x2a0 [ 259.537853][ T9042] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.537918][ T9042] ? __fget_files+0x2a/0x420 [ 259.537945][ T9042] ? __fget_files+0x3a0/0x420 [ 259.537986][ T9042] __x64_sys_sendmsg+0x19b/0x260 [ 259.538015][ T9042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.538051][ T9042] ? __pfx_ksys_write+0x10/0x10 [ 259.538074][ T9042] ? rcu_is_watching+0x15/0xb0 [ 259.538098][ T9042] ? do_syscall_64+0xbe/0x3b0 [ 259.538122][ T9042] do_syscall_64+0xfa/0x3b0 [ 259.538140][ T9042] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.538171][ T9042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.538197][ T9042] ? clear_bhb_loop+0x60/0xb0 [ 259.538221][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.538241][ T9042] RIP: 0033:0x7fdfe338eec9 [ 259.538258][ T9042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.538275][ T9042] RSP: 002b:00007fdfe41d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.538296][ T9042] RAX: ffffffffffffffda RBX: 00007fdfe35e5fa0 RCX: 00007fdfe338eec9 [ 259.538311][ T9042] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 259.538323][ T9042] RBP: 00007fdfe41d3090 R08: 0000000000000000 R09: 0000000000000000 [ 259.538335][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.538347][ T9042] R13: 00007fdfe35e6038 R14: 00007fdfe35e5fa0 R15: 00007fff2a2a2698 [ 259.538379][ T9042] [ 259.544832][ T9051] !: renamed from dummy0 (while UP) [ 259.606342][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz.4.814 Not tainted syzkaller #0 PREEMPT(full) [ 259.606389][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.606404][ T9053] Call Trace: [ 259.606424][ T9053] [ 259.606435][ T9053] dump_stack_lvl+0x189/0x250 [ 259.606468][ T9053] ? __pfx____ratelimit+0x10/0x10 [ 259.606505][ T9053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.606531][ T9053] ? __pfx__printk+0x10/0x10 [ 259.606576][ T9053] should_fail_ex+0x414/0x560 [ 259.606615][ T9053] _copy_to_user+0x31/0xb0 [ 259.606645][ T9053] simple_read_from_buffer+0xe1/0x170 [ 259.606682][ T9053] proc_fail_nth_read+0x1b3/0x220 [ 259.606713][ T9053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.606743][ T9053] ? rw_verify_area+0x2a6/0x4d0 [ 259.606769][ T9053] ? __lock_acquire+0xab9/0xd20 [ 259.606799][ T9053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.606825][ T9053] vfs_read+0x200/0xa30 [ 259.606852][ T9053] ? fdget_pos+0x247/0x320 [ 259.606889][ T9053] ? __pfx___mutex_lock+0x10/0x10 [ 259.606913][ T9053] ? __pfx_vfs_read+0x10/0x10 [ 259.606942][ T9053] ? __fget_files+0x2a/0x420 [ 259.606979][ T9053] ? __fget_files+0x3a0/0x420 [ 259.607011][ T9053] ? __fget_files+0x2a/0x420 [ 259.607054][ T9053] ksys_read+0x145/0x250 [ 259.607085][ T9053] ? __pfx_ksys_read+0x10/0x10 [ 259.607110][ T9053] ? rcu_is_watching+0x15/0xb0 [ 259.607138][ T9053] ? do_syscall_64+0xbe/0x3b0 [ 259.607166][ T9053] do_syscall_64+0xfa/0x3b0 [ 259.607187][ T9053] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.607225][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.607248][ T9053] ? clear_bhb_loop+0x60/0xb0 [ 259.607276][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.607297][ T9053] RIP: 0033:0x7fc515d8d8dc [ 259.607319][ T9053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.607337][ T9053] RSP: 002b:00007fc516bbc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.607360][ T9053] RAX: ffffffffffffffda RBX: 00007fc515fe6090 RCX: 00007fc515d8d8dc [ 259.607377][ T9053] RDX: 000000000000000f RSI: 00007fc516bbc0a0 RDI: 0000000000000007 [ 259.607391][ T9053] RBP: 00007fc516bbc090 R08: 0000000000000000 R09: 0000000000000000 [ 259.607404][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.607448][ T9053] R13: 00007fc515fe6128 R14: 00007fc515fe6090 R15: 00007ffedc041bb8 [ 259.607485][ T9053] [ 260.068558][ T9046] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.519928][ T9085] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.654031][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 261.079996][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.103815][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'. [ 261.114962][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 261.800765][ T9158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.839'. [ 261.814686][ T9158] tc_dump_action: action bad kind [ 261.824892][ T9150] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.834961][ T9159] xt_l2tp: invalid flags combination: 8 [ 262.192857][ C0] ================================================================== [ 262.201026][ C0] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 262.208965][ C0] Read of size 1 at addr ffff88805a1c0330 by task syz-executor/9176 [ 262.217062][ C0] [ 262.219426][ C0] CPU: 0 UID: 0 PID: 9176 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 262.219453][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.219466][ C0] Call Trace: [ 262.219475][ C0] [ 262.219483][ C0] dump_stack_lvl+0x189/0x250 [ 262.219511][ C0] ? __kasan_check_byte+0x12/0x40 [ 262.219540][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.219562][ C0] ? lock_release+0x4b/0x3e0 [ 262.219592][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 262.219619][ C0] print_report+0xca/0x240 [ 262.219650][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 262.219676][ C0] kasan_report+0x118/0x150 [ 262.219703][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 262.219729][ C0] xfrm_state_find+0x2cf2/0x5400 [ 262.219750][ C0] ? __lock_acquire+0xab9/0xd20 [ 262.219779][ C0] ? unwind_next_frame+0xa5/0x2390 [ 262.219797][ C0] ? xfrm_state_find+0x1da/0x5400 [ 262.219820][ C0] ? __pfx_xfrm_state_find+0x10/0x10 [ 262.219849][ C0] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 262.219886][ C0] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 262.219904][ C0] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 262.219931][ C0] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 262.219950][ C0] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 262.219981][ C0] ? xfrm_expand_policies+0x41f/0x6a0 [ 262.220008][ C0] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 262.220044][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 262.220072][ C0] ? dst_cache_get+0x10e/0x5b0 [ 262.220098][ C0] xfrm_lookup_route+0x3c/0x1c0 [ 262.220124][ C0] tipc_udp_xmit+0x1c3/0xb60 [ 262.220147][ C0] ? tipc_udp_xmit+0xa4/0xb60 [ 262.220167][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 262.220189][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 262.220220][ C0] ? __asan_memcpy+0x40/0x70 [ 262.220236][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 262.220263][ C0] tipc_udp_send_msg+0x27f/0x3f0 [ 262.220287][ C0] tipc_bearer_xmit_skb+0x2b0/0x400 [ 262.220306][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 262.220324][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 262.220346][ C0] tipc_disc_timeout+0x580/0x6d0 [ 262.220366][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.220389][ C0] call_timer_fn+0x17b/0x5f0 [ 262.220411][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.220427][ C0] ? call_timer_fn+0xbe/0x5f0 [ 262.220447][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 262.220473][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.220496][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.220520][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 262.220537][ C0] __run_timer_base+0x61a/0x860 [ 262.220556][ C0] ? ktime_get+0x3e/0x1f0 [ 262.220577][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 262.220595][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 262.220620][ C0] run_timer_softirq+0xb7/0x180 [ 262.220641][ C0] handle_softirqs+0x283/0x870 [ 262.220667][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 262.220683][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 262.220710][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 262.220730][ C0] __irq_exit_rcu+0xca/0x1f0 [ 262.220744][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 262.220762][ C0] irq_exit_rcu+0x9/0x30 [ 262.220774][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 262.220799][ C0] [ 262.220804][ C0] [ 262.220810][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 262.220829][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x60/0x120 [ 262.220849][ C0] Code: 09 89 c3 83 f8 08 0f 83 c7 00 00 00 49 be 00 00 00 00 00 fc ff df 48 8d 1c dd 10 6d bd 8d 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 46 86 7c 00 48 8b 03 48 8d 98 80 df 9f 92 48 8d [ 262.220863][ C0] RSP: 0000:ffffc9001ad0f8f0 EFLAGS: 00000246 [ 262.220879][ C0] RAX: 1ffffffff1b7ada2 RBX: ffffffff8dbd6d10 RCX: df51bcff0386f600 [ 262.220892][ C0] RDX: 0000000000000000 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 262.220903][ C0] RBP: 000000000007f2e3 R08: 0000000000000000 R09: ffffffff822e690d [ 262.220913][ C0] R10: dffffc0000000000 R11: fffff940003f9719 R12: 000000000007f2e3 [ 262.220925][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000001000 [ 262.220939][ C0] ? page_table_check_set+0x18d/0x730 [ 262.220968][ C0] rcu_read_lock_held+0x1e/0x50 [ 262.220983][ C0] page_ext_lookup+0xe7/0x180 [ 262.221002][ C0] ? page_table_check_set+0x18d/0x730 [ 262.221023][ C0] page_table_check_set+0x27e/0x730 [ 262.221047][ C0] set_pte_range+0x6a5/0x700 [ 262.221065][ C0] ? next_uptodate_folio+0x543/0x5d0 [ 262.221085][ C0] filemap_map_pages+0xf32/0x1740 [ 262.221108][ C0] ? filemap_map_pages+0x150/0x1740 [ 262.221126][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 262.221146][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 262.221165][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 262.221185][ C0] __handle_mm_fault+0x34a9/0x5440 [ 262.221209][ C0] ? __lock_acquire+0xab9/0xd20 [ 262.221237][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 262.221263][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 262.221285][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 262.221309][ C0] handle_mm_fault+0x40a/0x8e0 [ 262.221333][ C0] do_user_addr_fault+0xa81/0x1390 [ 262.221360][ C0] ? rcu_is_watching+0x15/0xb0 [ 262.221374][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 262.221398][ C0] exc_page_fault+0x76/0xf0 [ 262.221423][ C0] asm_exc_page_fault+0x26/0x30 [ 262.221437][ C0] RIP: 0033:0x7f619473a397 [ 262.221451][ C0] Code: 24 64 00 00 00 00 45 31 ff 83 e8 20 c7 44 24 20 00 00 00 00 45 31 f6 45 31 db 48 98 c7 44 24 10 00 00 00 00 41 ba ff ff ff ff <0f> b6 04 01 48 8d 0d 7e dd 26 00 c7 44 24 60 00 00 00 00 c7 44 24 [ 262.221465][ C0] RSP: 002b:00007fffbf030b60 EFLAGS: 00010246 [ 262.221478][ C0] RAX: 000000000000004c RBX: 00007fffbf0310c0 RCX: 00007f619483a8c0 [ 262.221488][ C0] RDX: 0000000000000000 RSI: 00007f619481371a RDI: 00007fffbf0313b0 [ 262.221499][ C0] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000000 [ 262.221508][ C0] R10: 00000000ffffffff R11: 0000000000000000 R12: 000000000000006c [ 262.221518][ C0] R13: 00007fffbf031240 R14: 0000000000000000 R15: 0000000000000000 [ 262.221535][ C0] [ 262.221541][ C0] [ 262.812510][ C0] Allocated by task 6158: [ 262.817032][ C0] kasan_save_track+0x3e/0x80 [ 262.821738][ C0] __kasan_slab_alloc+0x6c/0x80 [ 262.826603][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 262.832337][ C0] xfrm_state_alloc+0x24/0x2f0 [ 262.837218][ C0] __find_acq_core+0x8a7/0x1c00 [ 262.842169][ C0] xfrm_find_acq+0x78/0xa0 [ 262.846598][ C0] xfrm_alloc_userspi+0x6b3/0xc90 [ 262.851666][ C0] xfrm_user_rcv_msg+0x7a3/0xab0 [ 262.856637][ C0] netlink_rcv_skb+0x208/0x470 [ 262.861407][ C0] xfrm_netlink_rcv+0x79/0x90 [ 262.866101][ C0] netlink_unicast+0x82f/0x9e0 [ 262.870882][ C0] netlink_sendmsg+0x805/0xb30 [ 262.875653][ C0] __sock_sendmsg+0x219/0x270 [ 262.880345][ C0] ____sys_sendmsg+0x505/0x830 [ 262.885239][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 262.889942][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 262.894940][ C0] do_syscall_64+0xfa/0x3b0 [ 262.899475][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.905376][ C0] [ 262.907703][ C0] Freed by task 983: [ 262.911675][ C0] kasan_save_track+0x3e/0x80 [ 262.916446][ C0] kasan_save_free_info+0x46/0x50 [ 262.921505][ C0] __kasan_slab_free+0x5b/0x80 [ 262.926282][ C0] kmem_cache_free+0x18f/0x400 [ 262.931055][ C0] xfrm_state_gc_task+0x52d/0x6b0 [ 262.936081][ C0] process_scheduled_works+0xae1/0x17b0 [ 262.941723][ C0] worker_thread+0x8a0/0xda0 [ 262.946320][ C0] kthread+0x70e/0x8a0 [ 262.950397][ C0] ret_from_fork+0x439/0x7d0 [ 262.955165][ C0] ret_from_fork_asm+0x1a/0x30 [ 262.959945][ C0] [ 262.962275][ C0] The buggy address belongs to the object at ffff88805a1c0000 [ 262.962275][ C0] which belongs to the cache xfrm_state of size 928 [ 262.976240][ C0] The buggy address is located 816 bytes inside of [ 262.976240][ C0] freed 928-byte region [ffff88805a1c0000, ffff88805a1c03a0) [ 262.990124][ C0] [ 262.992541][ C0] The buggy address belongs to the physical page: [ 262.998974][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a1c0000 pfn:0x5a1c0 [ 263.009128][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 263.017626][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 263.025186][ C0] page_type: f5(slab) [ 263.029177][ C0] raw: 00fff00000000040 ffff88801a5a2640 dead000000000122 0000000000000000 [ 263.037858][ C0] raw: ffff88805a1c0000 00000000800f000b 00000000f5000000 0000000000000000 [ 263.046447][ C0] head: 00fff00000000040 ffff88801a5a2640 dead000000000122 0000000000000000 [ 263.055155][ C0] head: ffff88805a1c0000 00000000800f000b 00000000f5000000 0000000000000000 [ 263.063843][ C0] head: 00fff00000000002 ffffea0001687001 00000000ffffffff 00000000ffffffff [ 263.072616][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 263.081374][ C0] page dumped because: kasan: bad access detected [ 263.087805][ C0] page_owner tracks the page as allocated [ 263.093520][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6158, tgid 6157 (syz.3.45), ts 112183813298, free_ts 111994360952 [ 263.112712][ C0] post_alloc_hook+0x240/0x2a0 [ 263.117492][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 263.123048][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 263.128883][ C0] alloc_pages_mpol+0x232/0x4a0 [ 263.133744][ C0] allocate_slab+0x8a/0x370 [ 263.138245][ C0] ___slab_alloc+0xbeb/0x1420 [ 263.142927][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 263.148396][ C0] xfrm_state_alloc+0x24/0x2f0 [ 263.153179][ C0] __find_acq_core+0x8a7/0x1c00 [ 263.158045][ C0] xfrm_find_acq+0x78/0xa0 [ 263.162648][ C0] xfrm_alloc_userspi+0x6b3/0xc90 [ 263.167685][ C0] xfrm_user_rcv_msg+0x7a3/0xab0 [ 263.172632][ C0] netlink_rcv_skb+0x208/0x470 [ 263.177486][ C0] xfrm_netlink_rcv+0x79/0x90 [ 263.182272][ C0] netlink_unicast+0x82f/0x9e0 [ 263.187143][ C0] netlink_sendmsg+0x805/0xb30 [ 263.191940][ C0] page last free pid 5877 tgid 5877 stack trace: [ 263.198437][ C0] __free_frozen_pages+0xbc4/0xd30 [ 263.203665][ C0] __put_partials+0x156/0x1a0 [ 263.208351][ C0] put_cpu_partial+0x17c/0x250 [ 263.213288][ C0] __slab_free+0x2d5/0x3c0 [ 263.217724][ C0] qlist_free_all+0x97/0x140 [ 263.222489][ C0] kasan_quarantine_reduce+0x148/0x160 [ 263.228041][ C0] __kasan_slab_alloc+0x22/0x80 [ 263.232896][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 263.238363][ C0] getname_flags+0xb8/0x540 [ 263.242878][ C0] do_readlinkat+0xbc/0x500 [ 263.247403][ C0] __x64_sys_readlink+0x7f/0x90 [ 263.252253][ C0] do_syscall_64+0xfa/0x3b0 [ 263.256951][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.262871][ C0] [ 263.265198][ C0] Memory state around the buggy address: [ 263.270847][ C0] ffff88805a1c0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.278930][ C0] ffff88805a1c0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.286995][ C0] >ffff88805a1c0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 263.295055][ C0] ^ [ 263.300682][ C0] ffff88805a1c0380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 263.308746][ C0] ffff88805a1c0400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 263.316810][ C0] ================================================================== [ 263.325127][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 263.332370][ C0] CPU: 0 UID: 0 PID: 9176 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 263.341900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.352090][ C0] Call Trace: [ 263.355497][ C0] [ 263.358370][ C0] dump_stack_lvl+0x99/0x250 [ 263.362998][ C0] ? __asan_memcpy+0x40/0x70 [ 263.367625][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.372949][ C0] ? __pfx__printk+0x10/0x10 [ 263.377687][ C0] vpanic+0x281/0x750 [ 263.381714][ C0] ? __pfx_vpanic+0x10/0x10 [ 263.386260][ C0] ? irqentry_exit+0x74/0x90 [ 263.390926][ C0] panic+0xb9/0xc0 [ 263.394791][ C0] ? __pfx_panic+0x10/0x10 [ 263.399247][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 263.405264][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 263.411185][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 263.416317][ C0] check_panic_on_warn+0x89/0xb0 [ 263.421272][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 263.426392][ C0] end_report+0x78/0x160 [ 263.430643][ C0] kasan_report+0x129/0x150 [ 263.435159][ C0] ? xfrm_state_find+0x2cf2/0x5400 [ 263.440284][ C0] xfrm_state_find+0x2cf2/0x5400 [ 263.445235][ C0] ? __lock_acquire+0xab9/0xd20 [ 263.450110][ C0] ? unwind_next_frame+0xa5/0x2390 [ 263.455229][ C0] ? xfrm_state_find+0x1da/0x5400 [ 263.460288][ C0] ? __pfx_xfrm_state_find+0x10/0x10 [ 263.465593][ C0] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 263.471775][ C0] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 263.477678][ C0] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 263.484282][ C0] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 263.490267][ C0] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 263.496261][ C0] ? xfrm_expand_policies+0x41f/0x6a0 [ 263.501645][ C0] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 263.507176][ C0] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 263.512997][ C0] ? dst_cache_get+0x10e/0x5b0 [ 263.517779][ C0] xfrm_lookup_route+0x3c/0x1c0 [ 263.522644][ C0] tipc_udp_xmit+0x1c3/0xb60 [ 263.527243][ C0] ? tipc_udp_xmit+0xa4/0xb60 [ 263.532012][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 263.537134][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 263.542342][ C0] ? __asan_memcpy+0x40/0x70 [ 263.546947][ C0] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 263.552161][ C0] tipc_udp_send_msg+0x27f/0x3f0 [ 263.557287][ C0] tipc_bearer_xmit_skb+0x2b0/0x400 [ 263.562496][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 263.567802][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 263.573533][ C0] tipc_disc_timeout+0x580/0x6d0 [ 263.578484][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 263.583971][ C0] call_timer_fn+0x17b/0x5f0 [ 263.588571][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 263.594044][ C0] ? call_timer_fn+0xbe/0x5f0 [ 263.598742][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 263.603911][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.609119][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.614332][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 263.619796][ C0] __run_timer_base+0x61a/0x860 [ 263.624828][ C0] ? ktime_get+0x3e/0x1f0 [ 263.629177][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 263.634561][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 263.640816][ C0] run_timer_softirq+0xb7/0x180 [ 263.645687][ C0] handle_softirqs+0x283/0x870 [ 263.650467][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 263.655255][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 263.660556][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 263.665795][ C0] __irq_exit_rcu+0xca/0x1f0 [ 263.670639][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 263.675872][ C0] irq_exit_rcu+0x9/0x30 [ 263.680126][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 263.685792][ C0] [ 263.688734][ C0] [ 263.691682][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 263.697671][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x60/0x120 [ 263.704448][ C0] Code: 09 89 c3 83 f8 08 0f 83 c7 00 00 00 49 be 00 00 00 00 00 fc ff df 48 8d 1c dd 10 6d bd 8d 48 89 d8 48 c1 e8 03 42 80 3c 30 00 <74> 08 48 89 df e8 46 86 7c 00 48 8b 03 48 8d 98 80 df 9f 92 48 8d [ 263.724394][ C0] RSP: 0000:ffffc9001ad0f8f0 EFLAGS: 00000246 [ 263.730493][ C0] RAX: 1ffffffff1b7ada2 RBX: ffffffff8dbd6d10 RCX: df51bcff0386f600 [ 263.738488][ C0] RDX: 0000000000000000 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 263.746476][ C0] RBP: 000000000007f2e3 R08: 0000000000000000 R09: ffffffff822e690d [ 263.754547][ C0] R10: dffffc0000000000 R11: fffff940003f9719 R12: 000000000007f2e3 [ 263.762529][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000001000 [ 263.770519][ C0] ? page_table_check_set+0x18d/0x730 [ 263.775922][ C0] rcu_read_lock_held+0x1e/0x50 [ 263.781071][ C0] page_ext_lookup+0xe7/0x180 [ 263.785775][ C0] ? page_table_check_set+0x18d/0x730 [ 263.791180][ C0] page_table_check_set+0x27e/0x730 [ 263.796414][ C0] set_pte_range+0x6a5/0x700 [ 263.801030][ C0] ? next_uptodate_folio+0x543/0x5d0 [ 263.806335][ C0] filemap_map_pages+0xf32/0x1740 [ 263.811463][ C0] ? filemap_map_pages+0x150/0x1740 [ 263.816698][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 263.822188][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 263.827508][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 263.832815][ C0] __handle_mm_fault+0x34a9/0x5440 [ 263.837941][ C0] ? __lock_acquire+0xab9/0xd20 [ 263.842967][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 263.848446][ C0] ? lock_vma_under_rcu+0xdf/0x3d0 [ 263.853571][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 263.859131][ C0] handle_mm_fault+0x40a/0x8e0 [ 263.863914][ C0] do_user_addr_fault+0xa81/0x1390 [ 263.869054][ C0] ? rcu_is_watching+0x15/0xb0 [ 263.873825][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 263.879220][ C0] exc_page_fault+0x76/0xf0 [ 263.883748][ C0] asm_exc_page_fault+0x26/0x30 [ 263.888603][ C0] RIP: 0033:0x7f619473a397 [ 263.893027][ C0] Code: 24 64 00 00 00 00 45 31 ff 83 e8 20 c7 44 24 20 00 00 00 00 45 31 f6 45 31 db 48 98 c7 44 24 10 00 00 00 00 41 ba ff ff ff ff <0f> b6 04 01 48 8d 0d 7e dd 26 00 c7 44 24 60 00 00 00 00 c7 44 24 [ 263.912747][ C0] RSP: 002b:00007fffbf030b60 EFLAGS: 00010246 [ 263.918879][ C0] RAX: 000000000000004c RBX: 00007fffbf0310c0 RCX: 00007f619483a8c0 [ 263.926874][ C0] RDX: 0000000000000000 RSI: 00007f619481371a RDI: 00007fffbf0313b0 [ 263.934873][ C0] RBP: 0000000000000016 R08: 0000000000000000 R09: 0000000000000000 [ 263.942862][ C0] R10: 00000000ffffffff R11: 0000000000000000 R12: 000000000000006c [ 263.950850][ C0] R13: 00007fffbf031240 R14: 0000000000000000 R15: 0000000000000000 [ 263.958871][ C0] [ 263.962227][ C0] Kernel Offset: disabled [ 263.966552][ C0] Rebooting in 86400 seconds..