last executing test programs: 3.9663353s ago: executing program 1 (id=2154): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000200)) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000dc0)="d0b4163e96457321d877d01ac22c", 0xe, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r3, 0x1, 0x70, 0x6, @broadcast}, 0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 3.864182909s ago: executing program 1 (id=2157): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110110000000000950000000000f400"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @local}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000079514d82a243b8a5f4d755e1928fde9cbd0f79d693307a7c9cf3a6cc8c3721456bfaa758828588bb1473618316f85aa479d0e185a68ae2560b4b69cbd6492badca6eb05620d497b9e71c3e0248256c36643271f5abfe3ba5cc97efde5d42de097486a6d07176fc5bb8c3c7db37bc93e48df00c5720524787286a38b6d03125b0e8d57778faad66b37b2091d2ad93904ee8485fd829b502e69ddf807476b998"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r4}, 0x38) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x48c, 0x65, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd, 0x8}, {0xe, 0x9}, {0xe, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}, @filter_kind_options=@f_basic={{0xa}, {0x444, 0x2, [@TCA_BASIC_POLICE={0x438, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x5, 0x8001, 0xffff23da, 0xb, 0x8, 0x1, 0x9, 0x7f, 0x1ff, 0x5ff, 0x2, 0x5d4b, 0x9, 0x8001, 0x4, 0x3, 0x8d, 0xe0, 0x7ff, 0x1, 0x9, 0x5, 0x1, 0x5, 0x8, 0x6, 0xc3de, 0x5, 0x6, 0x4, 0xffffffff, 0x3, 0x8, 0x0, 0x5, 0x5, 0x6, 0x2, 0x800, 0x8, 0x0, 0x9, 0x7f, 0x5, 0x2, 0x6, 0x1, 0x10000, 0x1, 0x4, 0x2c7c, 0x80000000, 0x9, 0xfffff35e, 0x20000, 0x3, 0x285, 0x8, 0x40, 0x8, 0x7f, 0x9, 0x1, 0x61a, 0x6, 0xddff, 0x7ad4, 0x8, 0x0, 0x80000001, 0x401, 0x7, 0x3, 0x7f, 0x4, 0xffffff44, 0x9, 0x0, 0x200, 0x4, 0xc00000, 0x8, 0x4, 0xfe000000, 0x9, 0x7140, 0x80000000, 0xfff, 0x0, 0xe019, 0x1, 0x0, 0x3, 0x80000000, 0xffff, 0x40, 0x4, 0xc0, 0x2, 0x9, 0xfffff45e, 0x9, 0x3, 0x97, 0x3, 0x6, 0x4, 0x6, 0xaf, 0x2, 0xffffffd5, 0x7fffffff, 0x7ff, 0x4, 0x1, 0x2, 0x1, 0x0, 0xd, 0x8, 0x7, 0x40, 0x3, 0x7, 0x6, 0x7ebf, 0x80000001, 0x8, 0x9, 0x3, 0x81, 0xc, 0x3a6a9a13, 0x8, 0xffffff12, 0x8, 0xb4c, 0xc, 0x2, 0x9, 0x3, 0x7, 0x6, 0xffff7fff, 0x200, 0x8572, 0x20b1, 0xc2c00000, 0x101, 0x6, 0xffffffff, 0x401, 0x9, 0x9, 0x7, 0x80, 0x3, 0x1, 0x9, 0x6, 0xaa9, 0x28bb, 0x1a5, 0x400, 0x64, 0x68, 0x9, 0x3, 0xe0, 0x7, 0x8953, 0x57a, 0x63bb6d1, 0x7fffffff, 0x2, 0x2, 0xfffffffe, 0x80000000, 0xffffffff, 0x5, 0x8, 0xffffffff, 0xb, 0x5, 0x80000001, 0x6, 0x7, 0xc9b5, 0xfff, 0x7, 0x9, 0x101, 0xc8e, 0x6, 0x1780, 0xffffffff, 0x1, 0x1b, 0x4, 0x7ff, 0x80000000, 0x8, 0x0, 0x1, 0x1, 0x1000, 0x2, 0x7, 0x1, 0x200, 0x2, 0x6, 0x7, 0x9, 0x81, 0xfffffff9, 0x1, 0x7, 0x1, 0x6, 0x3, 0xc4, 0x10001, 0x0, 0xffffffff, 0x5, 0x80, 0x6, 0xc, 0x5, 0x3, 0x1, 0x5, 0x306, 0x5, 0xffffffff, 0xb, 0x5, 0x401, 0x3, 0x7, 0x0, 0x10000, 0x6, 0x0, 0x4, 0x2, 0x1, 0x6, 0x5, 0x5483e6e9, 0x8001, 0x2, 0x8, 0x5]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r4}, 0x38) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="2f0000000800000004", @ANYRES32, @ANYBLOB="691c76"], 0x20) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) 3.693917973s ago: executing program 1 (id=2159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8f}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xce, &(0x7f0000000540)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) sendmmsg$sock(r2, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) (async) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3.553076752s ago: executing program 1 (id=2160): r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x804) listen(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(r0, 0x0, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000480), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54018, 0xc100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000000003"], 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) 3.043918284s ago: executing program 4 (id=2165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008100165b1a9776b6152aa2", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}, 0x1c}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x20000133, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='signal_deliver\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000001940)={0x374, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xac13}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x78}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc6c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "512adb9e160bf6a5a1c2a982ec3acf29cbff69c4621f98ab4c47d5d9c1"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10008}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2aa9e35f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fa1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x233}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x140, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5050}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfa, @private2, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @local, 0xa58}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x374}}, 0x24008000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb8", 0x0, 0x0, 0x8000}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000014001a80100004800c000980"], 0x34}}, 0x0) 1.633794329s ago: executing program 1 (id=2169): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xc6, &(0x7f0000000680)='cgroup\x007\x89J\xdf\x1c@\xa79NU\xc2\xae@5U\xda\xd1\xb4\x03\xed\\\x9a\x88\a@\xacv\x88$\xe4s\x05\xb8\xdf\"1\x99[\xaf\x89\xd4\xa8\xf0\x90\xaa\xd2n\xff(\x15\xd2\"\x99mJD\x93\xfeX3\xb9\x82s\xe3\xed\xf26\xf6\xe3D\xb9z\x9e>\xc7\x99\xd7\x1c\xa7\x1f\xf4\xa9\n\xecNL*>\xb5\x9e\xf0{\'\xe92\xe6Q\xcf\x8b\x01\rt\x8e_\xf5\x8e\xf1I\xdfNT\xebi\xab\xd0\xad\x9d\x17\xe2q^\xe4\xfda\x12\x99p\xc5\x1f\xe7\xca27\xea\xdb.\xf4\x17\x8a\xd5\x99(\'\xec\x04\xbfQ\x0e7\x88\xc9ADx.,\xebqmq\xb5\x18\x81\x9ewd\xce\xef\xe4\xc2<\xf0t@\xae\x96\xd2\x0eMm\xd1F\xd6\x16\xfd\xe1\xd9\v\x1f\xbb\x05'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000031c00003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x55, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4000) socketpair(0x27, 0x5, 0x2, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x0, 0x1}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r7}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x1631ac74, 0x6, 0x10a0b, 0x1, 0x0, '\x00', 0x0, r6, 0x2, 0x3, 0x0, 0xc, @void, @value, @value=r6}, 0x50) ioctl$TUNSETOFFLOAD(r5, 0x5421, 0x110e22fff7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) getsockname$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c00)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x10, 0x8, 0x1, 0x6, 0x51000, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x0, @void, @value, @value=r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x4}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r10, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) 1.621627767s ago: executing program 3 (id=2170): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x0, r3}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xffff, 0x19, &(0x7f0000000040)=""/25, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readv(r6, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000140)=""/255, 0xff}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/158, 0x9e}], 0x7) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) unshare(0x20800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r7, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000003a00)={0xa, 0x0, 0xc0eb, @private0, 0x3, 0x4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r7, &(0x7f0000000700)="c92176becf0f311515f0bc5f0c97226a6720971bda038eaa6055699995c1a0c44b01bd825380d79e978f27b4c5aca6"}, 0x20) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x44) 1.544073881s ago: executing program 4 (id=2172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c010000160001000000000000000000ac141400000000000000000000000000fe800000000000000000000000000000000000dfffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000a0b100000000000000000000000032000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000b1a0000008001600000000002c0028"], 0x12c}}, 0x0) 1.543447667s ago: executing program 2 (id=2173): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000001bc0)={&(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001b40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400100000008000240000000000900010073797a30"], 0xd4}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000500), &(0x7f00000005c0)=0x30) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000010000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r7}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x6) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r11 = socket(0x1, 0x803, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f00000004c0)=0x4, 0x4) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newneigh={0x48, 0x1c, 0x400, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x0, r10, 0x40, 0x4, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_VNI={0x8, 0x7, 0x40}, @NDA_VLAN={0x6}, @NDA_DST_IPV4={0x8, 0x1, @multicast2}, @NDA_VNI={0x8, 0x7, 0xc000000}]}, 0x48}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400ff00"/20, @ANYRES32=0x0, @ANYBLOB="00090000000000001c00128009000100766c616e000000000c00028006000100fe0f000008000500", @ANYRES32=r4, @ANYBLOB="080000681b4f1b2ddb6bd3b235c7b71f510a80952a2dc24a0fabe512", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x0) 1.472413394s ago: executing program 3 (id=2174): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0200"/12, @ANYRES32, @ANYBLOB="80cb5157a158cee56fdaa7fa8056b147df4e75572f796598cc303b6cd0af8da371370ca72f4da901026131f5cfc3296e8f2c80e55c83dfa8ebf5129e18ab0b8a9544e16aab0fecde4db274aa8032aaef380f9033662d59efeaf021cab84765570b9967a7e5a83d4027e4328c2228a50df47c339aaddecbfeb26ecb14921d2e535d2589b5c9d4759e", @ANYRES64=0x0], 0x10) socket(0x2, 0x801, 0x100) 1.428813863s ago: executing program 4 (id=2175): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa0, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:dhcpd_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002440), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x38, r3, 0x1, 0x870bd2d, 0x25dfdbbb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x4024800}, 0x4000800) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x4, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000340)={0x0, 0x5, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @random="91d03336b3e3", @empty, @local, @multicast]}) socket$isdn(0x22, 0x3, 0x25) 1.4078966s ago: executing program 3 (id=2176): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000043e8000000000a0070"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000040000000fe880b0000000000000000000000000100000000000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x700, 0x71, 0x11, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit={0x95, 0x0, 0x4c}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/157, 0x9d}], 0x1}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000380)={0x3}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_IPV4_SRC={0x8}]}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="0218000015000000000000000000000003000500000000a00002000000e0000001000000000000000008001200000000000000000000000000170000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000030006000000000002000002ffffffff0000000000000000050019000000000002000000ffffffff000000000000000002000000e00000020000000000000000"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_gettime(0xffffffc6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000000080800a000100aaaaaaaaabc1040008000400f20f00b414"], 0x48}}, 0x0) 1.29643651s ago: executing program 2 (id=2177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000400000500ffff0300000008"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) setsockopt$sock_int(r1, 0x1, 0x23, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x38, 0x3a, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x1200}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xffffff58, 0x0, 0x0, 0x0, @str='),\x00'}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}]}, 0x38}}, 0x0) 1.274610857s ago: executing program 3 (id=2179): syz_emit_ethernet(0x7c, &(0x7f0000000840)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x46, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xffff]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x5c8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x570, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x458, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x7, 0x88a, 0x0, {0x60, 0x2, 0x200, 0x0, 0x2, 0x200}, {0x9, 0x2, 0x1, 0x70ed, 0x1ff, 0x6}, 0x4, 0xffffff80, 0xae}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xed}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x4, 0x401, 0x9, 0x80, 0x8, 0x9, 0x1db3669e, 0x9, 0x9, 0x400, 0x1, 0x8, 0x5, 0x118c, 0x2, 0x8, 0x5, 0x88, 0x4e5c290f, 0x81, 0x6, 0x1c000, 0xfffffffc, 0x5, 0x200, 0x0, 0x2, 0x4, 0x2000000, 0xb, 0xd, 0xb0000, 0x8, 0x904, 0x3, 0x200, 0x4, 0xff, 0x7, 0x2, 0x84d3, 0x7, 0x3, 0xf6, 0x1, 0x8, 0x1, 0x3, 0x3766, 0xffff57ba, 0x8, 0x7, 0x5c680, 0x1, 0x3, 0x800, 0x4, 0x9, 0x2982, 0xf9a, 0x200, 0x8, 0x10, 0x2, 0x5, 0x5, 0x4, 0x2, 0x10, 0x200, 0x3, 0x0, 0x0, 0x6, 0x8000, 0xe2, 0x0, 0x9, 0x3, 0xfffffff9, 0x4488, 0x28, 0x1, 0x8d12, 0x3, 0x8, 0xf7, 0x76e, 0x7, 0x5, 0x55fa, 0x7, 0xe, 0x1f8, 0xfffffffb, 0x800, 0x0, 0x35c6, 0x5, 0x5, 0x37f3, 0x2, 0x5, 0xf, 0xffff, 0x4, 0x50, 0x2, 0x7ce, 0x0, 0x0, 0xbc9, 0xf35b, 0xdfd6, 0x47, 0x3, 0x2e1, 0x2, 0x10, 0x7, 0x14, 0x8, 0x7, 0x7f, 0x2, 0x4, 0x8, 0xe7, 0xfe000000, 0x7fff, 0xc, 0xba4, 0x7, 0x8, 0x7, 0x4255, 0x9ee8, 0x6, 0x100, 0x6, 0xa7, 0xfff, 0xb79, 0xfff, 0x3ff, 0x5, 0x3, 0x3, 0x5, 0x4c, 0x36, 0x80000000, 0xee, 0x8b, 0x5, 0x5, 0x3, 0x0, 0x383, 0x6, 0x8, 0x6, 0xffffffff, 0x17, 0xe3, 0x3, 0x8e, 0x7, 0x1, 0x4, 0x5, 0x3, 0xffffff7c, 0x6, 0xfffffff0, 0x40, 0x339, 0x9, 0x8, 0x2, 0x6, 0x5, 0x1, 0x1, 0x645f, 0x200, 0x800, 0x2, 0x6641, 0x8000, 0xfffffffb, 0x9, 0x3, 0x9, 0x74b4, 0x1ff, 0x8, 0x4, 0x0, 0x100, 0x3, 0x0, 0x2, 0x4, 0x2, 0x2, 0xe, 0x4, 0xfffffffe, 0x8, 0x4, 0x1, 0x7, 0x7, 0x4, 0x8000, 0xf263, 0xd3e2, 0x2, 0x1000, 0x9, 0x7, 0x62, 0x8, 0x5, 0x0, 0xc00, 0x2, 0x7, 0x1, 0xffff0001, 0x0, 0x4, 0x5, 0x7, 0x6, 0x8, 0x1, 0x0, 0xc, 0xfffffffe, 0x1, 0x3, 0x5, 0x4, 0x6, 0x7fffffff, 0x8, 0x5, 0x5, 0xffffffff, 0x5, 0xfffffffb, 0x7f, 0x7]}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x104, 0x6, [@m_ife={0x100, 0xb, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x2}, 0x1}}]}, {0x62, 0x6, "3892c4d2eb75728faed731b8708e6a332c67f787554cd94e623e16d97c61b46e68bb870c2d118091088f054adac17d7c528bd9fdc78737e563da64ae9f9ae4b20319575d2587f7b4156dafbfd08c6028c8754d8f885472bca677cf005e36"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x5c8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000020605000000000000000000ac0e000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3200000000180007800c0001800800014000000000080006400000000004ffef00020000000500010006000000"], 0x64}}, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x2, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.197522555s ago: executing program 2 (id=2180): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) unshare(0x24020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) pipe(&(0x7f0000000480)) 1.180434548s ago: executing program 3 (id=2182): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) socket$caif_seqpacket(0x25, 0x5, 0x5) socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x5}, {0xfff1, 0x7}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x53, 0x0, 0xd4e, 0x4, 0x0, 0x3000, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x9, 0x4, 0xfffffff8, 0x2, 0x4, 0x4697}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x8, &(0x7f0000000080), 0x1}, 0x604) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.107011272s ago: executing program 2 (id=2183): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6db}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001240)={0x728, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x4}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x8, 0x9, 0x10001}, {0x401, 0x7, 0x4}, {0x2000, 0xcf, 0x4, 0x9}]}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff6, 0xd, 0x80, 0x9}, {0x52b, 0x5, 0x27, 0x1ffe000}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}, {{0x8}, {0x18c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x13}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x728}, 0x1, 0x0, 0x0, 0x400d0}, 0x20008801) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24048000}, 0x4020) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r6, @ANYRESOCT=0x0], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0x18, 0x0, 0x4f, 0x3, 0x2, 0x1000, 0xff}}, @TCA_U32_LINK={0x8, 0x3, 0x80000020}]}}]}, 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 772.06196ms ago: executing program 0 (id=2187): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000200), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000040)=0x2, &(0x7f0000000180)=r1, 0x2}, 0x20) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x28c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x25c, 0x2, [@TCA_FLOW_EMATCHES={0x258, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x1, 0x0, 0x5}, "ed75e2fae0"}}]}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0x80000001, 0x8b3, 0xb, 0x6, 0x4, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x400}, {0xcd6, 0x2, 0x3, 0x4, 0x0, 0x2}}}, @TCF_EM_META={0xa0, 0x2, 0x0, 0x0, {{0x7ff, 0x4, 0xfffa}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x3, 0x1}, {0x1, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="65052412405911baec72"]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5}, {0xf6, 0x9e, 0x1}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ba3420ca3074da62", @TCF_META_TYPE_VAR="a04e4195", @TCF_META_TYPE_VAR="21895a91", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1c"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a254c51d8981fa3a41", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c70c58d9459dafcbdc54", @TCF_META_TYPE_VAR="f0aa"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8, 0x1}, {0xe8d}}}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0xe, 0x2, 0x2, 0x2, 0x7, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc8c1, 0x8, 0x3}, {0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x800, 0x4, 0x958b}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xc, 0xc8, 0x2}, {0xfffe, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="8c8cc90eddb6598da1", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="10859d798f", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="f0c13f", @TCF_META_TYPE_VAR="8d"]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x3, 0x7fffffff, 0x1, 0x0, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xff78, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x4}, "0e887e3174c9ba846637edad004e88480ceb3ba83fe627ddec02d71469f46a71ed307ff97180b6cf452a2064eddf1f2c7503ff934449de192a8f10073e146122632b22676eef1f7b072dd70f5a19031ca016ff08f7f2513e0dc244f23de34c2d81781763637c08ae5356421782c3b49f35cbb8bc24aa1ccdd49950d898eece937fa2d8f1f12396735c82642886e28b7fae042f827fb1a2babfeed2af70911e0ca1650f5f01b58148781aaae9634b8a68f15194c8f9"}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x100}, {0xfb8, 0x6, 0x0, "8ff0ad1d2390"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}]}]}}]}, 0x28c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}}, 0x0) 752.870608ms ago: executing program 0 (id=2188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000880), &(0x7f00000008c0)=0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x355}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x100000000}, {0x5, 0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x4, 0x623e, 0x1a, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x7800, 0x140, 0x800}}) r4 = getuid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000006b110800000000008510000002000000850000000000000095000000000000009500a50500000000389230606378b65aa92ac1ac2a77cdc867e41e3acbda96d4b848d263de77bf1e6d8b17e03ac18017c094eb881e6721800447c053bce13d776a9f2f8bc80fc77125ca0e9d3cc9f63517c6c5a71e2004ceccae75dcc22e558eb718c6b53aa64c55779d8beb5a24d7fcc71ab745ecd2704999caf4de238ef8197223d0deee84b86b71056305a69d8293bd79f8427f51a3359c02d0620a7416679104e9bec7106950d972d0deb2868c36a9f58cfa3f349b00be63e5ca022ca9aae618af"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twr'], 0xa) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=@newpolicy={0x524, 0x13, 0x4, 0x70bd28, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0x4e24, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0xa0, 0xc, r2, 0xee01}, {0x5, 0x2, 0x5, 0x200, 0x9, 0x38, 0x470585d1, 0xe0}, {0x3, 0x5, 0x4, 0x8}, 0x1, 0x6e6bbd, 0x2, 0x0, 0x0, 0x2}, [@migrate={0x1cc, 0x11, [{@in=@rand_addr=0x64010101, @in=@empty, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@private=0xa010102, @in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@broadcast, 0x2b, 0x1, 0x0, 0x3502, 0x2, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, @in6=@mcast1, @in=@private=0xa010102, 0x6c, 0x2, 0x0, 0x3500, 0x0, 0x2}, {@in=@empty, @in6=@remote, @in=@remote, @in6=@remote, 0x3c, 0x1, 0x0, 0x3503, 0xa, 0x2}, {@in6=@loopback, @in6=@loopback, @in6=@mcast1, @in=@rand_addr=0x64010102, 0x3c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in=@broadcast, @in6=@local, 0x64, 0x4, 0x0, 0x3502, 0x2, 0x2}]}, @policy={0xac, 0x7, {{@in=@loopback, @in=@loopback, 0x4e23, 0xff, 0x4e22, 0x4, 0x2, 0x100, 0x20, 0x0, r3, r4}, {0xffffffffffffff80, 0x6, 0x7fffffffffffffff, 0x8000000000000001, 0x6, 0xd, 0x4b23, 0x8}, {0x2, 0x67c, 0x2, 0x7}, 0x1, 0x6e6bbd, 0x1, 0x0, 0x2, 0x2}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x2d}, @in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x3c, 0x4, 0x0, 0x34ff, 0x2, 0x2}]}, @algo_crypt={0x128, 0x2, {{'ctr(twofish)\x00'}, 0x700, "6d7596deb81bb8b8ca4aab19f59c9f55fb180f208fd1106aa522ad080fd9cbfaec77840b0b6e5c43a4f0ba268ab28b60f98d20f37e734f335488bc5b50e889be4ca0f5b0e15dacc1d3ac46936007e9c619a154213f1da7af7cec5a2b5047e681bfd0ebc9d452edd6a85e2f67dd9505157fc8e08cdb925d8e6339cc537369a46e4cff19001cb30f3edf2bf834e4f02cdfdb9dcd376181eb8a2636cad555e9e6ea8ceddb0a66ee8f852f90c77af71f870e08013bb5d69756450943fb3e52408220da6fb9c858e120912d9dd4c4597c6184665417bd1e42eab396cdb88afabc57ec"}}, @sec_ctx={0x3d, 0x8, {0x39, 0x8, 0x1, 0x8, 0x31, "9edccb60b9d0abd2ee9cbc478cabb0e9108732be4736d60dd778fae02b4cdd54e94f011ecfd546ed441e673f6a08f07219"}}, @address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x40, 0x5}}]}, 0x524}}, 0x40c0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000440)={'nat\x00', 0x50, "fc5129aec11d811777f5131a5eecc440864fa0abc1d9707c65b07d121b6824a19c1ba2016872f91d615bb77d672b353778121e425b1f52b25f986fa215a1e3c1e433a16fb12a7cf9023845b850b3a1d9"}, &(0x7f00000004c0)=0x74) 685.060857ms ago: executing program 0 (id=2189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000004008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000001180)={0xa, 0x4e21, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x33}, 0xb}, 0x1c) listen(r1, 0x80) (async) r2 = socket$inet(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async, rerun: 32) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) (async, rerun: 32) listen(r2, 0x2003a5) (async) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r3, 0x80) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) accept4(r4, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_emit_ethernet(0x1e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaf44780c2000000580c0400008000000000421d6423970e8cc6"], 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000007000000000000000687ca895be0d14b000000000000000000009972bcdfc0410e32c8e6b536f8029523532290b3acfeda83507534abbb0b3c21c185aca3baa3ddfd588e29c5a714498e315ce9e86441853d1e7d3c867218ca80a0e88e008f67109d8dff46", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x200000000000018c, &(0x7f00000001c0)=ANY=[@ANYBLOB="45111d933e1546bd425183b24238f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f00000011c0)=""/4103, &(0x7f0000001080)=0x1007) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000008000000010000008000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 657.835103ms ago: executing program 1 (id=2190): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) (async, rerun: 64) mmap(&(0x7f00009f1000/0x2000)=nil, 0x2000, 0x1000004, 0xc3872, r1, 0x3000000) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 572.125995ms ago: executing program 0 (id=2191): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b\x00'], 0x38}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3}, {0x4, 0x0, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x28) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}}}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000015000100000000000000000005"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="346f89d4bbeab9000000e90f666585ec55ed4afb23717b3e65ac8cd34f73534dfc3b90236cc750bc941c4bd22c7c657120c50cb91e6c25014e64edad61f7f861240ea386f9e9e8fec01b9317e46537a22d681b5de0b02118c9b4c2a932febcae92193ad2b9bce131e0e91062510ea867c6fe7ee5c43dc4fbba9b010ecd6fee5aa3e2200151a830c5a547775014ba", @ANYRES16=r6, @ANYBLOB="0100fffffffffcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c0081000500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x40840) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000000000009e111e7f00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) r10 = socket(0x8000000010, 0x2, 0x0) write(r10, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r12}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r10, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="04002fbd700003000000770000000500ee00900001000800ef000c0000000500ee0010000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) pwritev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="7b8f57395d128aed8e7cc648da609731a728151df1cdc86d2183b9a40226e42a44a57032fbe1872b2d9ffd100de8e3ef0fb7c2cb240807cca8d6e9beeb0999df9b66", 0x42}], 0x1, 0x81, 0x5) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1000006, 0x11, r8, 0x8e2b000) 407.135018ms ago: executing program 4 (id=2192): r0 = socket(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6227fbe9}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}]}}]}, 0x48}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) (async) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000000)="b89888414f7b4cc9fac9464185b8ec4e", 0x5000) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161000a000000040000800400", @ANYRES32=r10], 0x1c}}, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 340.716593ms ago: executing program 0 (id=2193): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d69740000002400028008000440000000010c0002401e000000000000000c0001"], 0xf8}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x48, &(0x7f0000000040)={0x5c, 0x20000105, '\x00', [@ra, @calipso={0x7, 0x0, {0x0, 0x0, 0x9, 0xc1, [0x8, 0x3, 0x1000]}}]}, 0x20) mmap(&(0x7f00002d4000/0x3000)=nil, 0x3000, 0x1000007, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f00002d4000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0xe03ce000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r4, 0x0, 0x2c, &(0x7f0000000100)=""/138, &(0x7f0000000000)=0x8a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001280)='cdg\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000c829f168b70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 176.14777ms ago: executing program 3 (id=2194): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES8=r0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000001c0)={'vlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f80000108001a"], 0x5c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1300000010000000020000000000000000000000137d38fb6c7206bb0bd0c2dcc33147b89bd70b73de11bc78", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r4}, &(0x7f0000001e40), &(0x7f0000001e80)}, 0x20) socket$netlink(0x10, 0x3, 0xe) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000780)="ff", 0x1}], 0x1, 0x0, 0x0, 0x48000}}], 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000900)) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x8, 0x5, 0x4e0, 0x0, 0x0, 0xffffffff, 0x320, 0x320, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@empty, @gre_key}}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @gre_key, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x200000006c832, 0xffffffffffffffff, 0x0) 175.755789ms ago: executing program 4 (id=2195): r0 = socket$netlink(0x10, 0x3, 0x15) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='P', 0x917e9ae70be35810}], 0x1, 0x0, 0x2a}}], 0x1, 0x0) (async) shutdown(r3, 0x1) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e120000080005000000000062ca22f81e120800"], 0x44}}, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) close(r1) getpid() (async) sendmsg$netlink(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000100)={0xe0, 0x12, 0x1, 0x0, 0x0, "", [@generic="9d0cd3b5f5add2aa38596cffbd48d911a7aaa7548547b7e5c34271560210fc74f6ada5fd7ea9c6c4e15df81314335129909c690b0e2a28e5547182ed315e6446a975d8178ffb797152b69b6bc8a1bc16ee3f0d2ac571334d956d0f871ab23e859bb5272c336e7b0d53ec55da0847554003a44e97cfa395c891dc3a3be0747facafd86251fb6f345e4455cc2de67b2eb7038c4a6b878f106aa7d2518e9d02699844aca850d2f39de5a7160bc6f326f39860cb3a0d46ee85f12db962c1107367f27097c26c0ea891d958d9c9771b"]}, 0xe0}], 0x1}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000380), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) (async) socket(0x28, 0x5, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async, rerun: 64) shutdown(r7, 0x1) (rerun: 64) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote}}}}, &(0x7f00000001c0)=0xb0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newspdinfo={0x1c, 0x24, 0x4, 0x70bd2c, 0x25dfdbfc, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) 174.803543ms ago: executing program 2 (id=2196): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c010000160001000000000000000000ac141400000000000000000000000000fe800000000000000000000000000000000000dfffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000080000000000000000000032000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000b1a0000008001600000000002c0028"], 0x12c}}, 0x0) 107.588754ms ago: executing program 4 (id=2197): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x1, 0x4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x7, 0x1, 0x1, 0x9, 0x100}, @map_val={0x18, 0xa81a8e26c8230002, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xf, 0x7, 0x70dc}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x3, 0x3, 0xf, 0x8}, {0x1, 0x3, 0xd}, {0x1, 0x2, 0x3, 0xc}], 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x52, 0x19, &(0x7f00000002c0)="5e69b48e03986de20c0227eea67397e6679de2b2bb342096edab39ea83e33ebffa5483be53797bb21fdd35e7c4fd3afc4a4066425c675e4b0e458bbddf9c04c0c583761e479d76e44607ab209c14ed3e268a", &(0x7f0000000340)=""/25, 0x1000, 0x0, 0xf0, 0x27, &(0x7f0000000380)="0e8a9f58aa573381865cdbc044a7f6a61519f7ea5f30fccba132b5392e007791802584808e808d906132d8c7b30f91b5055a30eee521b7f671354f48a8639e92a717e2476e3bb99fe1fe157e782e7e9aed7b2bc1b4ed0b424b9a7005fe306bc0a96cec9977f1032f54366be550ab4421430c68ee4aa4079bda59acb28ed4112febb22aa3c3ae7bbe8c16ccf619048f6128fd29b1039dcf0e0154d0bcd7f3fec491081eb227a3fba6f7367543428ef44600991bff7ce44c0b286084f803ec262583262f3ee19e83733da8e1ac964d517ed32477332b99c2e6d3319bf72695e835fb04e9ee2cb5d297319127c5c6a69340", &(0x7f0000000480)="e41c995b5b7dba12cd8ac7dd96efaafb6adf2ccdf6579f1e32479297108013ca38dcc00029a67d", 0x0, 0x0, 0xfffffff8}, 0x50) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000540)={r1, 0x1, 0x6}, 0x10) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000580)={@dev, @dev, @private}, &(0x7f00000005c0)=0xc) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000600)={0x3, 0xa, 0x6687, 0xfff}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xe) r6 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000680)={'team_slave_0\x00', 0x4}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x10, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4f7}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0x2b}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x800}, @jmp={0x5, 0x0, 0x4, 0x4, 0x3, 0x50, 0x4}, @ldst={0x1, 0x3, 0x4, 0x9, 0x3, 0xffffffffffffffff, 0xfffffffffffffff0}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x33, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x3, 0xc, 0x293, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000c40)=[{0x4, 0x2, 0x5, 0x1}, {0x1, 0x1, 0xf, 0x8}], 0x10, 0x10001, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000d40)={r5}) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001000)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000001100)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) sendmmsg$unix(r9, &(0x7f0000001200)=[{{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000e00)="f0e52c6fa7d2dd7eb98e23b2c0cd50ac3443b7c2b29095e2cf0fe81fb0662dc444bdf87a6338ebead3958d5370b7e818e81da4d123bc3c81c27ea62228ca8d1cd53fc5a155778993c5db4795383fda09d9326f8281f863a60a332684002862d412f62a22ce41ebfd7d06cd84d7fe47d99abd99ecd7fc58bb557e056318c34ab4762db64cfaf016e2d3d8af231a1b88b83cef92d9404ee0e8dbb82aa7df409d7a744d0feb21cdd4884b52c4f0d75531a2fb59aa", 0xb3}, {&(0x7f0000000ec0)="0471de0d3658118dbccd878e422e054e3ef9ebe4202e51b32c28752aff99fd10beb598a2dfc0496caf8cf2e71f7c966f095e2902c49c257849517abca27601892a347c693db0a0137e0ef8caf661a32ce2dd0dfc30ab3b97ddea900e818d5d351728d6d65a9a889048b8fa2a73f13f8d56f0b493021296e9383cf537f1401d3ae16fa22ad53ecf662ba1ae68af7e37e52eb02aac033d1ae051931b76f140e0b5ffd124e08b94d21b3b40ff9bbb5a9ac8eb4462eea705e4f9bc48ee48cdc9d08d7c21775942d637ce841a407c0429bc5bf4efdf6c2c71742fa2f21f51ba998c2a4e2bcd3ab992efd88b65be2d88731c", 0xef}], 0x2, &(0x7f00000011c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10, r12}}}], 0x20}}], 0x1, 0x4004004) (async) r13 = openat$cgroup_int(r9, &(0x7f0000001240)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000001280)=0x6, 0x12) (async) setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f00000012c0)=0x6, 0x4) (async) recvmsg$qrtr(r9, &(0x7f00000018c0)={&(0x7f0000001300), 0xc, &(0x7f0000001640)=[{&(0x7f0000001340)=""/147, 0x93}, {&(0x7f0000001400)=""/71, 0x47}, {&(0x7f0000001480)=""/18, 0x12}, {&(0x7f00000014c0)=""/185, 0xb9}, {&(0x7f0000001580)=""/147, 0x93}], 0x5, &(0x7f00000016c0)=[{0x80, 0x0, 0x0, ""/111}, {0xc8, 0x0, 0x0, ""/183}, {0x80, 0x0, 0x0, ""/109}], 0x1c8}, 0x38, 0x40010000) (async, rerun: 64) r14 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) r15 = accept4$unix(r9, &(0x7f0000001900), &(0x7f0000001980)=0x6e, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000003200)={&(0x7f00000019c0)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003140)=[{&(0x7f0000001a00)={0x20c, 0x19, 0x300, 0x70bd28, 0x25dfdbfd, "", [@generic="f2ae080c71cbaa2a772e0cc77ce32359ba8c186ec3809f9c2d1432261087e750e515aabe1d219348e378f9a6bda002e39c2cade16a05c0bc49a24ce78e70fbc4da48be61313a96feb99d13a6aca0e8a83babe93c8e11930fcadd6c5e7af9094b2d1636b965a4816486b61a52ff45e385b6b8f8b0b468a56f7c4d6d40e7c9b936c76bdf47aeb5a1a6", @generic="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", @generic="35d68efcb2b81dd4fb4b66b184f914ba31ff8bff367232f086d45ec69eb3a028a37f80a78afe55927c8e8196b74d9ec69037b2e031a432e61b8ee06add9d3d377419853addc8845aa3d58f8765c8cf10afd3bc3792f8c9482b87dd0bc6d57d8d985ec0727a7d1217c423c96f90919dbea36aaec83b63da9d"]}, 0x20c}, {&(0x7f0000001c40)={0x318, 0x13, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0xfd, 0x0, 0x0, @pid=r11}, @nested={0xc6, 0x58, 0x0, 0x1, [@generic="0f0476236f4e6c6a1807fea011169f9eb987ecbd827f26d011392dcded03836e558c0d753a49af7052a9df4cf76f642cdeae599278e0dcba7925af546f18ada2276c52559f2faa1f7a757360745cc41c65fff7779365935c7ca14882b2b1ced7ab2ce8deaddddac2636f5aad7e7e9402f97ab0d62c6bc935f325171bd355e0e336f8c3b65beadecb4249104c198aa4b4004ef3138ff039ea8445280ced200b84168a61790259020da4b8b5a298188441fcbbb49bdd606d22c80c13df45d6b4cb4b19"]}, @nested={0x236, 0x27, 0x0, 0x1, [@generic="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", @typed={0x8, 0x11f, 0x0, 0x0, @pid=r11}, @generic="e937546ecad12580f33021673ef95ea619bb111b11", @generic="60bea27ca1e764ec3f36f7234f704b4d218e717a821c926e75d43c0113a9eb87fbc71a87c8e07dad2b1f7d71de64657fad432f92874ae5cde87befb745b34bd576", @generic="9aa3422519146ff37a8b739ea3ec702c14b135318f80327a5db90967dadeaae9c5d65e546046be67571148bb2818390eed03217ec8e002cf3de5ef2520beaee15f312444b02a6acecf865ce4e340f2015321d07b72e61886fd9af55db976c3f347e8278a6bc632a92a9b777be7b741e48bf0ee95f6cac36c2baa71454b91d12ef0ead45f3e917f995de674f890e214cf9b2d0786b944606e3319c92d6425530d9be39214a3a1396869866f5b85eab7e9a852f2c29900c2b5e7cd2a278e97e9d70ad612e3e71677c5b6eeb7ac6429cab65be6be19b78a4fa38bcd"]}]}, 0x318}, {&(0x7f0000001f80)={0x1010, 0x27, 0x8, 0x70bd2b, 0x25dfdbfb, "", [@generic="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"]}, 0x1010}, {&(0x7f0000002fc0)={0x168, 0x3a, 0x200, 0x70bd2a, 0x6, "", [@generic="e8ac6a6478238766ce969d46645c770a39a8a27b104fd7ca0bf5dcc3735fbcdc", @typed={0x4, 0xac}, @nested={0xf4, 0x140, 0x0, 0x1, [@generic="cfe0f738153387f19a05df625b865b5aa0c138924947e981172162d5c7c0405982b1c7c88f2851a4f93880160d1bd65c77a54d87e815861dc14bdfe060469e3b1c44a39c8da0c11135fcb3e3dcdd4579641a04239913e2ea3feaa3d839cb782983c50239f466a46071ff18e924b1669310cf59ddde791b5634bc8f52c622edb5fe4a210fa5f3e86013543f2d03ca4af4e1606ef183fb44dc0402fe0fae837da16028288de7e2ec1d0910b96ab9a928f60c0299464b241ce1cc8be4e7ee11acc95ec6fbe995097466b081b02356f617cf9975bb71b8b36f17ba9ab0108a9208c617efbfdcce98b816038e5da9c3672a1c"]}, @generic="aab583feb28b13e8988e71d4a55c3547bcd1112796c83effce12e4d02400c6cdd3b0e95a467407436618e7572622436d3bf8276daff28bdfc931260f6aa50a"]}, 0x168}], 0x4, &(0x7f0000003180)=[@cred={{0x1c, 0x1, 0x2, {r11, r10, r12}}}, @rights={{0x2c, 0x1, 0x1, [r0, r15, 0xffffffffffffffff, r4, r6, r8, r14]}}], 0x50, 0x1}, 0x8e0) r16 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_DEL(r16, 0x2, r6) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000003240)={'wg2\x00'}) (rerun: 32) 87.092775ms ago: executing program 0 (id=2198): socket$inet(0x2b, 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x6) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 0s ago: executing program 2 (id=2199): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4f8, 0x368, 0x368, 0xd0, 0x1c0, 0xd0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6_vti0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x0, 0x4, 0x3, 0x1, 0x6], 0x1, 0x6}, {0xffffffffffffffff, [0xe, 0x0, 0x3, 0x0, 0x4, 0x4], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="f3", 0x1}], 0x1}, 0x2004c000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4f8, 0x368, 0x368, 0xd0, 0x1c0, 0xd0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6_vti0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x0, 0x4, 0x3, 0x1, 0x6], 0x1, 0x6}, {0xffffffffffffffff, [0xe, 0x0, 0x3, 0x0, 0x4, 0x4], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) accept4(r4, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="f3", 0x1}], 0x1}, 0x2004c000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.2.319'. [ 89.003202][ T7145] xt_l2tp: v2 sid > 0xffff: 262144 [ 89.076330][ T7149] xt_l2tp: v2 sid > 0xffff: 262144 [ 89.425337][ T7184] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 89.555271][ T7191] bridge2: entered promiscuous mode [ 89.583040][ T7191] bridge2: entered allmulticast mode [ 89.606725][ T7191] team0: Port device bridge2 added [ 89.622893][ T7191] netlink: 'syz.4.336': attribute type 10 has an invalid length. [ 89.641362][ T7191] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 89.661644][ T7191] bridge0: port 3(ip6gretap0) entered blocking state [ 89.669221][ T7191] bridge0: port 3(ip6gretap0) entered disabled state [ 89.697473][ T7191] ip6gretap0: entered allmulticast mode [ 89.714299][ T7191] ip6gretap0: entered promiscuous mode [ 89.728438][ T7191] bridge0: port 3(ip6gretap0) entered blocking state [ 89.735691][ T7191] bridge0: port 3(ip6gretap0) entered forwarding state [ 89.762661][ T7202] dvmrp5: entered allmulticast mode [ 89.774374][ T7200] dvmrp5: left allmulticast mode [ 89.915912][ T7211] __nla_validate_parse: 5 callbacks suppressed [ 89.915931][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 90.015570][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.342'. [ 90.057242][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 90.066272][ T7222] FAULT_INJECTION: forcing a failure. [ 90.066272][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 90.066356][ T7222] CPU: 1 UID: 0 PID: 7222 Comm: syz.0.345 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 90.066378][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.066391][ T7222] Call Trace: [ 90.066398][ T7222] [ 90.066407][ T7222] dump_stack_lvl+0x241/0x360 [ 90.066435][ T7222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.066455][ T7222] ? __pfx__printk+0x10/0x10 [ 90.066484][ T7222] ? __kmalloc_node_noprof+0xb7/0x440 [ 90.066509][ T7222] ? __pfx___might_resched+0x10/0x10 [ 90.066537][ T7222] should_fail_ex+0x3b0/0x4e0 [ 90.066562][ T7222] should_failslab+0xac/0x100 [ 90.066587][ T7222] __kmalloc_node_noprof+0xdf/0x440 [ 90.066609][ T7222] ? __kvmalloc_node_noprof+0x72/0x190 [ 90.066627][ T7222] ? __nf_register_net_hook+0x1ef/0x8d0 [ 90.066652][ T7222] __kvmalloc_node_noprof+0x72/0x190 [ 90.162304][ T7222] nf_hook_entries_grow+0x288/0x720 [ 90.167553][ T7222] __nf_register_net_hook+0x278/0x8d0 [ 90.172974][ T7222] nf_register_net_hook+0xb0/0x190 [ 90.178115][ T7222] nf_register_net_hooks+0x41/0x1a0 [ 90.183359][ T7222] nf_ct_netns_do_get+0x355/0x630 [ 90.188422][ T7222] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 90.194023][ T7222] ? __raw_spin_lock_init+0x45/0x100 [ 90.199354][ T7222] nf_ct_netns_get+0x45/0xb0 [ 90.203979][ T7222] nft_connlimit_do_init+0x1ca/0x2c0 [ 90.209299][ T7222] nft_set_elem_expr_alloc+0x1f5/0x560 [ 90.214799][ T7222] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 90.220832][ T7222] ? nft_rhash_init+0x2ea/0x430 [ 90.225723][ T7222] ? __pfx_nft_rhash_init+0x10/0x10 [ 90.230954][ T7222] ? lockdep_hardirqs_on+0x99/0x150 [ 90.236190][ T7222] ? __pfx_nft_rhash_key+0x10/0x10 [ 90.241330][ T7222] ? __pfx_nft_rhash_obj+0x10/0x10 [ 90.246471][ T7222] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 90.251615][ T7222] nft_set_expr_alloc+0x67/0x770 [ 90.256588][ T7222] ? nf_tables_newset+0x17de/0x2ee0 [ 90.261827][ T7222] nf_tables_newset+0x225d/0x2ee0 [ 90.266901][ T7222] ? __pfx_nf_tables_newset+0x10/0x10 [ 90.272316][ T7222] ? __pfx_lock_release+0x10/0x10 [ 90.277394][ T7222] ? __nla_parse+0x40/0x60 [ 90.281847][ T7222] nfnetlink_rcv+0x14dc/0x2ab0 [ 90.286683][ T7222] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 90.291878][ T7222] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.297121][ T7222] ? skb_clone+0x240/0x390 [ 90.301574][ T7222] ? __pfx_lock_release+0x10/0x10 [ 90.306653][ T7222] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.311900][ T7222] netlink_unicast+0x7f6/0x990 [ 90.316711][ T7222] ? __pfx_netlink_unicast+0x10/0x10 [ 90.322034][ T7222] ? __virt_addr_valid+0x183/0x530 [ 90.327185][ T7222] ? __check_object_size+0x48e/0x900 [ 90.332515][ T7222] netlink_sendmsg+0x8e4/0xcb0 [ 90.337336][ T7222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.342681][ T7222] ? aa_sock_msg_perm+0x91/0x160 [ 90.347673][ T7222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.352991][ T7222] __sock_sendmsg+0x221/0x270 [ 90.357702][ T7222] ____sys_sendmsg+0x52a/0x7e0 [ 90.362510][ T7222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.367848][ T7222] __sys_sendmsg+0x292/0x380 [ 90.372481][ T7222] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.377641][ T7222] ? __pfx_vfs_write+0x10/0x10 [ 90.382467][ T7222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.388832][ T7222] ? do_syscall_64+0x100/0x230 [ 90.393625][ T7222] ? do_syscall_64+0xb6/0x230 [ 90.398334][ T7222] do_syscall_64+0xf3/0x230 [ 90.402869][ T7222] ? clear_bhb_loop+0x35/0x90 [ 90.407582][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.413597][ T7222] RIP: 0033:0x7f9e8c37e719 [ 90.418033][ T7222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.437667][ T7222] RSP: 002b:00007f9e8d149038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.446124][ T7222] RAX: ffffffffffffffda RBX: 00007f9e8c535f80 RCX: 00007f9e8c37e719 [ 90.454134][ T7222] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 90.462138][ T7222] RBP: 00007f9e8d149090 R08: 0000000000000000 R09: 0000000000000000 [ 90.470141][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.478144][ T7222] R13: 0000000000000000 R14: 00007f9e8c535f80 R15: 00007ffd8218fbc8 [ 90.486167][ T7222] [ 90.563583][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 90.572412][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.347'. [ 90.988744][ T7267] dvmrp5: entered allmulticast mode [ 91.025941][ T7267] dvmrp5: left allmulticast mode [ 91.240722][ T7281] netlink: 'syz.1.356': attribute type 7 has an invalid length. [ 91.277016][ T7287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 91.563336][ T7285] lo speed is unknown, defaulting to 1000 [ 91.880945][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 91.994732][ T7321] dvmrp5: entered allmulticast mode [ 92.034222][ T7321] dvmrp5: left allmulticast mode [ 92.588699][ T7360] netlink: 234 bytes leftover after parsing attributes in process `syz.1.376'. [ 92.652261][ T7364] xt_cgroup: path and classid specified [ 92.700457][ T7364] batadv_slave_0: entered allmulticast mode [ 92.729981][ T7372] Cannot find set identified by id 0 to match [ 92.740537][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 92.790060][ T7372] pim6reg: entered allmulticast mode [ 93.024708][ T7382] netlink: 44 bytes leftover after parsing attributes in process `syz.0.383'. [ 93.269345][ T7398] Bluetooth: MGMT ver 1.23 [ 93.509322][ T7411] xt_bpf: check failed: parse error [ 93.515747][ T7410] xt_bpf: check failed: parse error [ 93.522281][ T7411] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 93.564803][ T7414] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.578394][ T7410] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 93.586352][ T7414] x_tables: ip_tables: osf match: only valid for protocol 6 [ 93.603206][ T7411] netlink: 'syz.4.393': attribute type 2 has an invalid length. [ 93.618518][ T7411] netlink: 'syz.4.393': attribute type 2 has an invalid length. [ 93.807475][ T7425] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 93.820813][ T7425] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 93.832322][ T7425] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 93.858052][ T7425] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 93.924362][ T7425] xt_l2tp: v2 sid > 0xffff: 262144 [ 93.990624][ T7439] ieee802154 phy1 wpan1: encryption failed: -22 [ 94.277498][ T7457] netlink: 'syz.1.408': attribute type 29 has an invalid length. [ 94.324027][ T7456] netlink: 'syz.4.407': attribute type 10 has an invalid length. [ 94.335083][ T7456] bridge0: port 4(syz_tun) entered blocking state [ 94.344021][ T7456] bridge0: port 4(syz_tun) entered disabled state [ 94.364078][ T7456] syz_tun: entered allmulticast mode [ 94.375479][ T7456] syz_tun: entered promiscuous mode [ 94.381913][ T7456] bridge0: port 4(syz_tun) entered blocking state [ 94.389497][ T7456] bridge0: port 4(syz_tun) entered forwarding state [ 94.399701][ T7460] netlink: 'syz.1.408': attribute type 29 has an invalid length. [ 94.517805][ T7469] syz.4.410[7469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.517907][ T7469] syz.4.410[7469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.551241][ T7469] syz.4.410[7469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.162268][ T7513] lo speed is unknown, defaulting to 1000 [ 95.257929][ T7520] openvswitch: netlink: Tunnel attr 80 out of range max 16 [ 95.447640][ T7533] __nla_validate_parse: 14 callbacks suppressed [ 95.447662][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 95.577298][ T7535] netlink: 'syz.0.428': attribute type 3 has an invalid length. [ 95.596086][ T7535] netlink: 666 bytes leftover after parsing attributes in process `syz.0.428'. [ 95.762559][ T7543] bond2 (unregistering): Released all slaves [ 95.996850][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 96.021962][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 96.083889][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 96.216554][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 96.508624][ T7580] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 96.542726][ T7585] netlink: 'syz.3.439': attribute type 32 has an invalid length. [ 96.552187][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 96.574182][ T7585] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 96.657561][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.442'. [ 96.972232][ T7622] dvmrp5: entered allmulticast mode [ 97.037574][ T7622] dvmrp5: left allmulticast mode [ 97.401600][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 97.495274][ T7650] hsr0: entered promiscuous mode [ 97.867832][ T7684] x_tables: duplicate underflow at hook 2 [ 98.012890][ T7695] x_tables: duplicate underflow at hook 1 [ 98.117393][ T7704] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 98.170387][ T7704] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.186390][ T7703] syzkaller1: entered allmulticast mode [ 98.356832][ T7709] lo speed is unknown, defaulting to 1000 [ 98.356847][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 98.575122][ T7726] nbd: illegal input index 16744192 [ 98.854506][ T7733] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 99.327673][ T7753] validate_nla: 1 callbacks suppressed [ 99.327692][ T7753] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 99.487234][ T7753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.544985][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.567243][ T7746] bond2: (slave batadv1): making interface the new active one [ 99.585262][ T7746] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 99.629955][ T7770] dvmrp5: entered allmulticast mode [ 99.664333][ T7769] dvmrp5: left allmulticast mode [ 100.454047][ T7803] xt_CT: No such helper "netbios-ns" [ 100.497192][ T7813] x_tables: duplicate underflow at hook 1 [ 100.551419][ T7808] tipc: Started in network mode [ 100.573354][ T7808] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 100.635262][ T7808] tipc: Enabled bearer , priority 10 [ 100.737862][ T7820] dvmrp5: entered allmulticast mode [ 100.767738][ T7820] dvmrp5: left allmulticast mode [ 100.809504][ T7822] __nla_validate_parse: 8 callbacks suppressed [ 100.809525][ T7822] netlink: 68 bytes leftover after parsing attributes in process `syz.0.498'. [ 100.946189][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 101.002839][ T7788] netlink: 76 bytes leftover after parsing attributes in process `syz.3.488'. [ 101.280991][ T7836] netlink: 60 bytes leftover after parsing attributes in process `syz.4.504'. [ 101.292487][ T7840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.505'. [ 101.512185][ T7849] dvmrp8: entered allmulticast mode [ 101.549945][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 101.592346][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 101.662588][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 101.763944][ T6277] tipc: Node number set to 10136234 [ 101.807028][ T7871] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 101.859430][ T7871] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 101.891068][ T7870] lo speed is unknown, defaulting to 1000 [ 102.808662][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 102.858802][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 102.899490][ T7922] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 103.039360][ T7921] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 103.551528][ T7944] dvmrp5: entered allmulticast mode [ 103.561402][ T7942] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 103.594645][ T7942] bond0: (slave netdevsim0): Releasing backup interface [ 103.610309][ T7942] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 103.642943][ T7942] team0: Failed to send options change via netlink (err -105) [ 103.659377][ T7942] team0: Port device netdevsim0 added [ 103.671405][ T7944] dvmrp5: left allmulticast mode [ 103.755123][ T7942] bridge0: port 4(syz_tun) entered disabled state [ 103.761746][ T7942] bridge0: port 3(ip6gretap0) entered disabled state [ 103.768634][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.776699][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.833042][ T7950] netlink: 'syz.3.548': attribute type 2 has an invalid length. [ 104.174945][ T7970] sctp: [Deprecated]: syz.3.552 (pid 7970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.174945][ T7970] Use struct sctp_sack_info instead [ 104.562906][ T7995] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 104.630852][ T7997] dvmrp5: entered allmulticast mode [ 104.650693][ T7997] dvmrp5: left allmulticast mode [ 104.719910][ T8000] netlink: 'syz.4.559': attribute type 4 has an invalid length. [ 104.940791][ T8011] netlink: 'syz.1.563': attribute type 39 has an invalid length. [ 104.954848][ T8009] syzkaller1: entered promiscuous mode [ 104.960360][ T8009] syzkaller1: entered allmulticast mode [ 105.140995][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.148498][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.854157][ T8045] __nla_validate_parse: 12 callbacks suppressed [ 105.854175][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.573'. [ 105.916059][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.572'. [ 105.996085][ T8047] bond0: (slave syz_tun): Releasing backup interface [ 106.054768][ T8047] bridge_slave_0: left allmulticast mode [ 106.080862][ T8047] bridge_slave_0: left promiscuous mode [ 106.106765][ T8047] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.123249][ T8047] bridge_slave_1: left allmulticast mode [ 106.146739][ T8047] bridge_slave_1: left promiscuous mode [ 106.179712][ T8047] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.204329][ T8047] bond0: (slave bond_slave_0): Releasing backup interface [ 106.222413][ T8047] bond0: (slave bond_slave_1): Releasing backup interface [ 106.279804][ T8047] team0: Port device team_slave_0 removed [ 106.305749][ T8047] team0: Port device team_slave_1 removed [ 106.312241][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.353635][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.375969][ T8047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.383413][ T8047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.433891][ T8047] bond2: (slave batadv1): Releasing active interface [ 106.470481][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 106.544167][ T8043] wg2: entered promiscuous mode [ 106.588564][ T8043] team0: Port device wg2 added [ 106.630189][ T8055] dvmrp5: entered allmulticast mode [ 106.652722][ T8057] dvmrp5: left allmulticast mode [ 106.668766][ T8057] dvmrp8: left allmulticast mode [ 107.154424][ T8082] pim6reg1: entered promiscuous mode [ 107.193569][ T8082] pim6reg1: entered allmulticast mode [ 107.534504][ T8096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.589'. [ 108.107903][ T8117] netlink: 52 bytes leftover after parsing attributes in process `syz.4.595'. [ 108.393149][ T8127] lo speed is unknown, defaulting to 1000 [ 108.802471][ T8144] netlink: 'syz.2.602': attribute type 11 has an invalid length. [ 108.831673][ T8144] netlink: 140 bytes leftover after parsing attributes in process `syz.2.602'. [ 109.257911][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 109.276933][ T8155] netlink: 68 bytes leftover after parsing attributes in process `syz.0.606'. [ 109.296854][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.606'. [ 109.596481][ T8169] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 109.609993][ T8169] tipc: Enabled bearer , priority 10 [ 109.690711][ T8166] lo speed is unknown, defaulting to 1000 [ 109.891723][ T8184] tipc: Started in network mode [ 109.900799][ T8184] tipc: Node identity ee1cdfccea47, cluster identity 4711 [ 109.917538][ T8184] tipc: Enabled bearer , priority 0 [ 110.012168][ T8184] tipc: Resetting bearer [ 110.121142][ T8200] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 110.227569][ T8200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.345145][ T8215] x_tables: ip_tables: socket match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT [ 110.408210][ T8212] tipc: Started in network mode [ 110.417712][ T8212] tipc: Node identity ffffffff, cluster identity 4711 [ 110.430841][ T8212] tipc: Node number set to 4294967295 [ 110.472881][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 110.482101][ T8218] tc_dump_action: action bad kind [ 110.886357][ T8248] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 111.003715][ T5890] tipc: Node number set to 73129932 [ 111.013181][ T8251] x_tables: duplicate underflow at hook 2 [ 111.301292][ T8279] netlink: 'syz.2.645': attribute type 75 has an invalid length. [ 111.309308][ T8280] netlink: 'syz.2.645': attribute type 75 has an invalid length. [ 111.364134][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 111.411136][ T8281] netlink: 'syz.3.646': attribute type 2 has an invalid length. [ 111.728812][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 111.741413][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 111.758465][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.652'. [ 112.161808][ T8317] xfrm1: entered allmulticast mode [ 112.363120][ T8324] netlink: 'syz.1.664': attribute type 10 has an invalid length. [ 112.394295][ T8324] team0: Device netdevsim0 is of different type [ 112.403061][ T8322] netlink: 'syz.4.663': attribute type 6 has an invalid length. [ 112.413556][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.663'. [ 112.516171][ T8331] FAULT_INJECTION: forcing a failure. [ 112.516171][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 112.529194][ T8331] CPU: 0 UID: 0 PID: 8331 Comm: syz.3.667 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 112.534069][ T8329] netlink: 'syz.4.666': attribute type 15 has an invalid length. [ 112.539796][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.539815][ T8331] Call Trace: [ 112.539824][ T8331] [ 112.539833][ T8331] dump_stack_lvl+0x241/0x360 [ 112.568506][ T8331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.573733][ T8331] ? __pfx__printk+0x10/0x10 [ 112.576388][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 112.578343][ T8331] ? ref_tracker_alloc+0x332/0x490 [ 112.592229][ T8331] should_fail_ex+0x3b0/0x4e0 [ 112.596978][ T8331] ? skb_clone+0x20c/0x390 [ 112.601421][ T8331] should_failslab+0xac/0x100 [ 112.606132][ T8331] ? skb_clone+0x20c/0x390 [ 112.610589][ T8331] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 112.616011][ T8331] skb_clone+0x20c/0x390 [ 112.620288][ T8331] __netlink_deliver_tap+0x3cc/0x7f0 [ 112.625617][ T8331] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.630838][ T8331] netlink_deliver_tap+0x19d/0x1b0 [ 112.635983][ T8331] netlink_unicast+0x7c4/0x990 [ 112.640791][ T8331] ? __pfx_netlink_unicast+0x10/0x10 [ 112.646102][ T8331] ? __virt_addr_valid+0x183/0x530 [ 112.651236][ T8331] ? __check_object_size+0x48e/0x900 [ 112.656529][ T8331] netlink_sendmsg+0x8e4/0xcb0 [ 112.661305][ T8331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.666614][ T8331] ? aa_sock_msg_perm+0x91/0x160 [ 112.671546][ T8331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.676848][ T8331] __sock_sendmsg+0x221/0x270 [ 112.681515][ T8331] ____sys_sendmsg+0x52a/0x7e0 [ 112.686298][ T8331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.691621][ T8331] __sys_sendmmsg+0x3ab/0x730 [ 112.696320][ T8331] ? __pfx___sys_sendmmsg+0x10/0x10 [ 112.701543][ T8331] ? __pfx_lock_release+0x10/0x10 [ 112.704201][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 112.706578][ T8331] ? kstrtouint_from_user+0x128/0x190 [ 112.720754][ T8331] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 112.726678][ T8331] ? ksys_write+0x229/0x2b0 [ 112.731197][ T8331] ? __pfx_lock_release+0x10/0x10 [ 112.736243][ T8331] ? vfs_write+0x730/0xd30 [ 112.740693][ T8331] ? __mutex_unlock_slowpath+0x21d/0x750 [ 112.746357][ T8331] ? __fget_files+0x3f3/0x470 [ 112.751064][ T8331] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.757049][ T8331] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.763374][ T8331] ? do_syscall_64+0x100/0x230 [ 112.768132][ T8331] __x64_sys_sendmmsg+0xa0/0xb0 [ 112.772980][ T8331] do_syscall_64+0xf3/0x230 [ 112.777473][ T8331] ? clear_bhb_loop+0x35/0x90 [ 112.782148][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.788054][ T8331] RIP: 0033:0x7fb2dbd7e719 [ 112.792489][ T8331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.812115][ T8331] RSP: 002b:00007fb2dcaa2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 112.820565][ T8331] RAX: ffffffffffffffda RBX: 00007fb2dbf35f80 RCX: 00007fb2dbd7e719 [ 112.828561][ T8331] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 112.836558][ T8331] RBP: 00007fb2dcaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 112.844547][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.852542][ T8331] R13: 0000000000000000 R14: 00007fb2dbf35f80 R15: 00007ffc66e64388 [ 112.858682][ T8339] lo speed is unknown, defaulting to 1000 [ 112.860531][ T8331] [ 112.910445][ T8183] tipc: Resetting bearer [ 113.718345][ T8338] delete_channel: no stack [ 114.553250][ T8183] tipc: Disabling bearer [ 114.571968][ T8352] netlink: 'syz.2.673': attribute type 12 has an invalid length. [ 114.875785][ T8358] veth0_vlan: left promiscuous mode [ 114.974031][ T8378] netlink: 188 bytes leftover after parsing attributes in process `syz.3.676'. [ 115.569474][ T8410] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 115.699706][ T8416] dvmrp5: entered allmulticast mode [ 115.721898][ T8416] dvmrp5: left allmulticast mode [ 116.061359][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 116.089205][ T5890] IPVS: starting estimator thread 0... [ 116.147587][ T6282] IPVS: starting estimator thread 0... [ 116.166458][ T8447] pim6reg: entered allmulticast mode [ 116.184579][ T8447] pim6reg: left allmulticast mode [ 116.193864][ T8443] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.243825][ T8449] IPVS: using max 20 ests per chain, 48000 per kthread [ 116.324807][ T8460] syzkaller0: entered promiscuous mode [ 116.335375][ T8460] syzkaller0: entered allmulticast mode [ 116.420284][ T8463] Cannot find set identified by id 0 to match [ 116.499409][ T8469] dvmrp5: entered allmulticast mode [ 116.541473][ T8469] dvmrp5: left allmulticast mode [ 116.590455][ T8467] netlink: 'syz.4.703': attribute type 10 has an invalid length. [ 116.599636][ T8467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.703'. [ 116.610804][ T8467] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 116.646397][ T8473] netlink: 40 bytes leftover after parsing attributes in process `syz.0.705'. [ 116.770531][ T8478] lo speed is unknown, defaulting to 1000 [ 116.831539][ T8487] IPVS: lblc: SCTP 172.20.20.170:0 - no destination available [ 117.309014][ T8505] netlink: 'syz.1.711': attribute type 29 has an invalid length. [ 117.711807][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 117.886840][ T8529] dvmrp5: entered allmulticast mode [ 117.905448][ T8529] dvmrp5: left allmulticast mode [ 118.188081][ T8553] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 118.252773][ T8553] netlink: 224 bytes leftover after parsing attributes in process `syz.3.723'. [ 118.404098][ T8561] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 118.423495][ T8561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.725'. [ 118.757729][ T8584] dvmrp5: entered allmulticast mode [ 118.765340][ T8584] dvmrp5: left allmulticast mode [ 118.899248][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.733'. [ 119.234399][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.737'. [ 119.320387][ T8612] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 119.372318][ T8612] team0: Device veth0_macvtap failed to register rx_handler [ 119.513777][ T8621] dvmrp5: entered allmulticast mode [ 119.530358][ T8621] dvmrp5: left allmulticast mode [ 119.657847][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 119.821128][ T8639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.746'. [ 119.836460][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.3.746'. [ 119.932859][ T8646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.940506][ T8646] IPv6: NLM_F_CREATE should be set when creating new route [ 120.399404][ T8670] dvmrp5: entered allmulticast mode [ 120.448040][ T8670] dvmrp5: left allmulticast mode [ 120.507014][ T8672] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 120.522256][ T8672] bond3: (slave vti0): Error -95 calling set_mac_address [ 120.559117][ T8681] veth1_to_bridge: entered promiscuous mode [ 120.567460][ T8681] veth1_to_bridge: left promiscuous mode [ 120.694315][ T8690] tipc: Enabled bearer , priority 10 [ 120.842617][ T12] tipc: Resetting bearer [ 120.858675][ T8702] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 120.879920][ T8690] netlink: 'syz.2.761': attribute type 16 has an invalid length. [ 120.918764][ T8690] netlink: 'syz.2.761': attribute type 17 has an invalid length. [ 121.020085][ T8690] tipc: Resetting bearer [ 121.161763][ T8716] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 121.207112][ T8716] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.227019][ T8716] bond0: (slave team0): Enslaving as an active interface with an up link [ 121.237862][ T8719] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 121.257001][ T8726] dvmrp5: entered allmulticast mode [ 121.282560][ T8723] dvmrp5: left allmulticast mode [ 121.388836][ T8728] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 121.439565][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.491489][ T8735] bond1: (slave batadv0): making interface the new active one [ 121.512847][ T8735] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 121.705723][ T8743] can: request_module (can-proto-0) failed. [ 121.774922][ T8750] netlink: 'syz.4.779': attribute type 11 has an invalid length. [ 121.930884][ T8760] wg2: entered promiscuous mode [ 121.956926][ T8761] __nla_validate_parse: 5 callbacks suppressed [ 121.956939][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 121.972281][ T8760] tun0: tun_chr_ioctl cmd 1074025675 [ 121.982278][ T8760] tun0: persist enabled [ 122.010914][ T8760] tun0: tun_chr_ioctl cmd 1074025675 [ 122.025335][ T8760] tun0: persist enabled [ 122.314224][ T8775] dvmrp5: entered allmulticast mode [ 122.331440][ T8775] dvmrp5: left allmulticast mode [ 122.593154][ T8789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.790'. [ 122.633950][ T8789] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 122.685272][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.790'. [ 122.695161][ T8788] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 122.714890][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'. [ 123.003859][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 123.180434][ T8820] dvmrp5: entered allmulticast mode [ 123.201149][ T8820] dvmrp5: left allmulticast mode [ 123.255539][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 123.280883][ T8822] b: renamed from lo (while UP) [ 123.315872][ T8822] b: entered allmulticast mode [ 123.997341][ T8855] dvmrp5: entered allmulticast mode [ 124.006956][ T8855] dvmrp5: left allmulticast mode [ 124.095356][ T8861] netlink: 104 bytes leftover after parsing attributes in process `syz.2.813'. [ 124.586208][ T5843] Bluetooth: hci4: link tx timeout [ 124.591572][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.716297][ T8893] lo speed is unknown, defaulting to 1000 [ 125.169780][ T8915] dvmrp5: entered allmulticast mode [ 125.179741][ T8916] netlink: 'syz.3.825': attribute type 1 has an invalid length. [ 125.205007][ T8912] IPVS: length: 60 != 8 [ 125.212943][ T8914] dvmrp5: left allmulticast mode [ 125.572263][ T8942] gtp0: entered promiscuous mode [ 125.584351][ T8938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.834'. [ 125.590702][ T8942] gtp0: entered allmulticast mode [ 125.612844][ T8942] vlan3: entered promiscuous mode [ 125.832104][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 125.859173][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.837'. [ 125.872759][ T8953] batadv_slave_1: entered promiscuous mode [ 125.888548][ T8952] batadv_slave_1: left promiscuous mode [ 126.191077][ T8967] lo speed is unknown, defaulting to 1000 [ 126.216193][ T8970] dvmrp5: entered allmulticast mode [ 126.360432][ T8970] dvmrp5: left allmulticast mode [ 126.646695][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 127.221026][ T9026] netlink: 'syz.1.858': attribute type 2 has an invalid length. [ 127.229186][ T9026] __nla_validate_parse: 2 callbacks suppressed [ 127.229200][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 127.335261][ T9019] veth0_vlan: left promiscuous mode [ 127.467249][ T9012] delete_channel: no stack [ 127.547953][ T9037] dvmrp5: entered allmulticast mode [ 127.578795][ T9037] dvmrp5: left allmulticast mode [ 127.915063][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 128.159410][ T9064] netlink: 'syz.1.869': attribute type 5 has an invalid length. [ 128.433931][ T9076] tap0: tun_chr_ioctl cmd 1074025677 [ 128.452413][ T9076] tap0: linktype set to 780 [ 128.533762][ T9085] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 128.541137][ T9087] dvmrp5: entered allmulticast mode [ 128.562313][ T9080] netlink: 56 bytes leftover after parsing attributes in process `syz.0.876'. [ 128.604122][ T9087] dvmrp5: left allmulticast mode [ 129.040794][ T9111] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 129.229492][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 129.245660][ T9120] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 129.281557][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 129.324445][ T9118] lo speed is unknown, defaulting to 1000 [ 129.476210][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.889'. [ 130.644142][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.651062][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.678112][ T9155] batadv0: entered promiscuous mode [ 130.694400][ T9155] batadv0: left promiscuous mode [ 131.457917][ T9195] netlink: 208 bytes leftover after parsing attributes in process `syz.0.917'. [ 131.461483][ T9194] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 131.515461][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 131.581185][ T9204] netlink: 'syz.2.924': attribute type 39 has an invalid length. [ 131.590205][ T9205] netlink: 288 bytes leftover after parsing attributes in process `syz.0.923'. [ 131.749454][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 131.998551][ T9221] bond0: option ad_select: unable to set because the bond device is up [ 132.323297][ T9243] __nla_validate_parse: 1 callbacks suppressed [ 132.323317][ T9243] netlink: 72 bytes leftover after parsing attributes in process `syz.0.941'. [ 132.593712][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 132.641943][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 132.690164][ T9259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.948'. [ 133.035136][ T9277] netlink: 92 bytes leftover after parsing attributes in process `syz.4.957'. [ 133.348860][ T9296] netlink: 'syz.0.965': attribute type 29 has an invalid length. [ 133.361435][ T9301] sctp: [Deprecated]: syz.4.966 (pid 9301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.361435][ T9301] Use struct sctp_sack_info instead [ 133.375251][ T9302] netlink: 'syz.0.965': attribute type 29 has an invalid length. [ 133.424268][ T9296] netlink: 'syz.0.965': attribute type 29 has an invalid length. [ 133.495628][ T9306] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 133.534050][ T9306] bond1: entered promiscuous mode [ 133.539477][ T9306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.861771][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 133.954577][ T9337] netlink: 'syz.4.979': attribute type 2 has an invalid length. [ 134.004180][ T9340] IPVS: ovf: SCTP 172.20.20.170:0 - no destination available [ 134.040955][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 134.070173][ T9343] IPv6: sit1: Disabled Multicast RS [ 134.366468][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 134.509195][ T9367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.990'. [ 134.572219][ T9370] syz_tun: entered promiscuous mode [ 134.604387][ T9370] batadv_slave_0: entered promiscuous mode [ 134.634182][ T9370] syz_tun: left promiscuous mode [ 134.695691][ T9370] batadv_slave_0: left promiscuous mode [ 134.811896][ T9379] dvmrp5: entered allmulticast mode [ 134.840763][ T9379] dvmrp5: left allmulticast mode [ 135.071765][ T9390] netlink: 'syz.2.997': attribute type 16 has an invalid length. [ 135.082745][ T9390] tipc: Enabled bearer , priority 10 [ 135.129056][ T9391] bridge0: port 5(vlan2) entered blocking state [ 135.157716][ T9391] bridge0: port 5(vlan2) entered disabled state [ 135.181946][ T9391] vlan2: entered allmulticast mode [ 135.202795][ T9391] vlan2: left allmulticast mode [ 135.245750][ T9395] sit0: entered promiscuous mode [ 135.259098][ T9395] netlink: 'syz.2.1000': attribute type 1 has an invalid length. [ 135.288909][ T9395] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1000'. [ 135.737151][ T9418] veth0_vlan: left promiscuous mode [ 135.806249][ T9426] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 135.881935][ T9429] dvmrp5: entered allmulticast mode [ 135.899385][ T9429] dvmrp5: left allmulticast mode [ 135.921437][ T9408] delete_channel: no stack [ 136.468076][ T9449] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 136.546586][ T9449] lo speed is unknown, defaulting to 1000 [ 136.626765][ T9458] validate_nla: 1 callbacks suppressed [ 136.626784][ T9458] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 136.676884][ T9458] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 136.760132][ T9469] ip6t_srh: unknown srh match flags 5294 [ 137.134740][ T9481] dvmrp5: entered allmulticast mode [ 137.157900][ T9481] dvmrp5: left allmulticast mode [ 137.319399][ T9492] netlink: 'syz.4.1026': attribute type 10 has an invalid length. [ 137.426986][ T9492] team0: Port device dummy0 added [ 137.571984][ T9497] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 137.575665][ T9483] lo speed is unknown, defaulting to 1000 [ 137.610978][ T9497] __nla_validate_parse: 12 callbacks suppressed [ 137.610996][ T9497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1027'. [ 138.068856][ T9519] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 138.439663][ T9541] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 138.461686][ T9541] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1043'. [ 138.664059][ T9554] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1046'. [ 138.713570][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 138.847794][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1048'. [ 138.874733][ T9558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 139.157463][ T6282] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.324295][ T6277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.451646][ T9576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1054'. [ 139.487687][ T9578] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 139.503672][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.562511][ T9578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.593865][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.602226][ T9581] ip6erspan1: entered promiscuous mode [ 139.608189][ T9577] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 139.709436][ T9576] bond1: (slave bridge3): making interface the new active one [ 139.764543][ T9576] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 139.807758][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'. [ 139.834017][ T6280] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.900971][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.993767][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.084379][ T6280] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.238169][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 140.267759][ T9606] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1060'. [ 140.773875][ T9636] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 141.054690][ T9649] sctp: [Deprecated]: syz.3.1069 (pid 9649) Use of int in maxseg socket option. [ 141.054690][ T9649] Use struct sctp_assoc_value instead [ 141.123842][ T6277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.487251][ T9664] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.485930][ T9720] tipc: Bearer : already 2 bearers with priority 10 [ 142.501620][ T9720] tipc: Bearer : trying with adjusted priority [ 142.509172][ T9720] tipc: Enabling of bearer rejected, failed to enable media [ 143.187647][ T9755] lo speed is unknown, defaulting to 1000 [ 143.220471][ T9757] netlink: 'syz.1.1102': attribute type 10 has an invalid length. [ 143.240530][ T9757] team0: Device netdevsim0 is of different type [ 143.440669][ T9763] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 143.449032][ T9763] __nla_validate_parse: 10 callbacks suppressed [ 143.449048][ T9763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1103'. [ 143.920525][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 143.976105][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 144.378685][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'. [ 144.389495][ T9799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1115'. [ 144.418100][ T9799] vlan2: entered allmulticast mode [ 144.971528][ T9824] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1121'. [ 145.524281][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 145.671799][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 145.688165][ T9865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1134'. [ 145.698340][ T9865] batadv_slave_1: entered promiscuous mode [ 145.737100][ T9862] syzkaller0: entered promiscuous mode [ 145.742761][ T9862] syzkaller0: entered allmulticast mode [ 145.781308][ T9865] batadv_slave_1 (unregistering): left promiscuous mode [ 147.933007][ T9897] netlink: 'syz.0.1142': attribute type 4 has an invalid length. [ 148.120348][ T9923] netlink: 'syz.0.1150': attribute type 10 has an invalid length. [ 148.161916][ T9925] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 148.180108][ T9925] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1151'. [ 148.194009][ T9931] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 148.216193][ T9930] IPVS: lblc: SCTP 172.20.20.170:0 - no destination available [ 148.733258][ T9951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.087510][ T9990] __nla_validate_parse: 1 callbacks suppressed [ 149.087530][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 149.122421][ T9990] syz_tun: entered promiscuous mode [ 149.134496][ T9989] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.143798][ T9989] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.152820][ T9989] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.161663][ T9989] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.174187][ T9989] vxlan0: entered promiscuous mode [ 149.179488][ T9989] vxlan0: entered allmulticast mode [ 149.191100][ T9989] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.200275][ T9989] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.209237][ T9989] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.218257][ T9989] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.244904][ T9971] gretap0: entered promiscuous mode [ 149.250731][ T9971] vlan2: entered promiscuous mode [ 149.260504][ T9971] gretap0: left promiscuous mode [ 149.281590][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1169'. [ 149.354490][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.368362][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.470554][T10004] netlink: 'syz.4.1174': attribute type 8 has an invalid length. [ 149.509037][T10004] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 149.568454][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 149.778320][T10022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1181'. [ 149.944873][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1187'. [ 149.994278][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1187'. [ 150.034342][T10040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1187'. [ 150.457872][T10076] xt_ecn: cannot match TCP bits for non-tcp packets [ 150.479283][T10074] pimreg3: entered allmulticast mode [ 150.598114][T10085] tipc: Enabling of bearer rejected, already enabled [ 150.641480][T10085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 151.011258][T10106] syzkaller0: entered promiscuous mode [ 151.046852][T10106] syzkaller0: entered allmulticast mode [ 153.317365][T10157] x_tables: duplicate underflow at hook 1 [ 153.320994][T10159] netlink: 'syz.4.1224': attribute type 1 has an invalid length. [ 153.336823][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1222'. [ 153.339591][T10159] netlink: 'syz.4.1224': attribute type 2 has an invalid length. [ 153.372070][T10159] netlink: 'syz.4.1224': attribute type 2 has an invalid length. [ 153.381288][T10159] netlink: 'syz.4.1224': attribute type 2 has an invalid length. [ 153.424012][T10159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 153.435637][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 153.789811][T10186] xt_ipcomp: unknown flags 12 [ 153.835150][T10198] rdma_rxe: rxe_newlink: failed to add lo [ 154.104666][T10216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.255672][T10226] team0: Port device gtp1 added [ 154.327948][T10227] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 154.504839][T10246] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.522910][T10244] IPv6: NLM_F_REPLACE set, but no existing node found! [ 154.725980][T10259] netlink: 'syz.2.1255': attribute type 27 has an invalid length. [ 154.754264][T10259] C: renamed from team_slave_0 (while UP) [ 154.891717][T10269] __nla_validate_parse: 2 callbacks suppressed [ 154.891736][T10269] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1259'. [ 155.055086][T10276] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 155.281884][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'. [ 155.452098][T10308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.476632][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.676630][T10324] openvswitch: netlink: Missing key (keys=40, expected=80) [ 155.746122][T10327] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1274'. [ 155.770583][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 155.969192][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 156.098001][T10350] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 156.327128][T10373] bridge0: entered allmulticast mode [ 157.200626][T10425] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 157.254494][T10425] batman_adv: batadv0: Adding interface: ip6gretap1 [ 157.267701][T10425] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.302380][T10425] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 157.330703][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 157.382698][T10430] batman_adv: batadv0: Removing interface: ip6gretap1 [ 157.458163][T10430] bond1: (slave batadv0): Releasing active interface [ 157.558697][T10440] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 157.573357][T10440] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 157.695086][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1315'. [ 157.725009][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 158.726997][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1342'. [ 158.749432][T10528] b: left allmulticast mode [ 158.827200][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1342'. [ 158.845436][T10534] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 158.856357][T10534] veth0_vlan: entered allmulticast mode [ 158.862633][T10534] bridge0: port 3(veth0_vlan) entered blocking state [ 158.870174][T10534] bridge0: port 3(veth0_vlan) entered disabled state [ 158.880078][T10534] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 158.993236][T10546] bond2: entered promiscuous mode [ 158.998612][T10546] bond2: entered allmulticast mode [ 159.004378][T10546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.028863][T10551] unsupported nla_type 40 [ 159.252474][T10546] bond2 (unregistering): Released all slaves [ 159.476614][T10586] netlink: 'syz.2.1356': attribute type 16 has an invalid length. [ 159.512742][T10586] netlink: 'syz.2.1356': attribute type 3 has an invalid length. [ 159.650265][T10603] netlink: 'syz.1.1363': attribute type 9 has an invalid length. [ 160.057525][T10629] bond0: entered promiscuous mode [ 160.062919][T10629] bond_slave_0: entered promiscuous mode [ 160.069217][T10629] bond_slave_1: entered promiscuous mode [ 160.075351][T10629] team0: entered promiscuous mode [ 160.080478][T10629] team_slave_0: entered promiscuous mode [ 160.087143][T10629] team_slave_1: entered promiscuous mode [ 160.116444][T10630] lo speed is unknown, defaulting to 1000 [ 160.192038][T10637] netlink: 'syz.1.1373': attribute type 4 has an invalid length. [ 160.227124][T10639] lo: entered promiscuous mode [ 160.305497][T10637] __nla_validate_parse: 4 callbacks suppressed [ 160.305514][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'. [ 160.321779][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'. [ 160.331588][T10637] netlink: 'syz.1.1373': attribute type 6 has an invalid length. [ 160.339673][T10638] lo: left promiscuous mode [ 160.620850][T10655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.661158][T10630] lo speed is unknown, defaulting to 1000 [ 160.667802][T10660] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 160.689363][T10662] nbd: must specify at least one socket [ 160.692285][T10660] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 160.814215][T10672] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1385'. [ 160.867000][T10675] dvmrp5: entered allmulticast mode [ 160.885431][T10675] dvmrp5: left allmulticast mode [ 161.149716][T10690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 161.164183][T10692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.181200][T10692] Cannot find set identified by id 632 to match [ 161.193341][T10690] sctp: [Deprecated]: syz.3.1392 (pid 10690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.193341][T10690] Use struct sctp_sack_info instead [ 161.221907][T10692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1391'. [ 161.233894][T10690] sctp: [Deprecated]: syz.3.1392 (pid 10690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.233894][T10690] Use struct sctp_sack_info instead [ 161.337527][T10696] bridge5: entered promiscuous mode [ 161.343164][T10696] bridge5: entered allmulticast mode [ 161.349004][T10695] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 161.368632][T10696] team0: Port device bridge5 added [ 161.414468][T10696] netlink: 'syz.0.1393': attribute type 10 has an invalid length. [ 161.450674][T10696] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 161.682918][T10713] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 161.738852][T10715] dvmrp5: entered allmulticast mode [ 161.749292][T10715] dvmrp5: left allmulticast mode [ 161.812294][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 161.825137][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 162.124133][T10744] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1408'. [ 162.228740][T10738] vlan4: entered promiscuous mode [ 162.242577][T10738] veth0: entered promiscuous mode [ 162.430831][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 162.462445][T10765] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 162.489638][T10765] bond0: (slave netdevsim0): Releasing backup interface [ 162.515906][T10765] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 162.526961][T10765] team0: Failed to send options change via netlink (err -105) [ 162.536013][T10765] team0: Port device netdevsim0 added [ 162.546242][T10773] tipc: Started in network mode [ 162.557873][T10773] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 162.586352][T10773] tipc: Enabling of bearer rejected, failed to enable media [ 162.609298][T10778] dvmrp5: entered allmulticast mode [ 162.618634][T10770] dvmrp5: left allmulticast mode [ 162.992301][T10803] lo speed is unknown, defaulting to 1000 [ 163.198922][T10822] dvmrp5: entered allmulticast mode [ 163.213875][T10822] dvmrp5: left allmulticast mode [ 163.341783][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 163.767154][T10859] tls_set_device_offload: netdev not found [ 163.846354][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.890708][T10870] dvmrp5: entered allmulticast mode [ 163.900458][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.907635][ T6611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.919540][T10870] dvmrp5: left allmulticast mode [ 164.543027][T10893] lo speed is unknown, defaulting to 1000 [ 164.543102][T10908] netlink: 'syz.3.1458': attribute type 1 has an invalid length. [ 164.987115][T10941] tipc: Started in network mode [ 164.992030][T10941] tipc: Node identity 800000, cluster identity 6 [ 165.022944][T10941] tipc: Node number set to 8388608 [ 165.200661][T10954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.240979][T10962] xt_NFQUEUE: number of total queues is 0 [ 166.978956][T10954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.997092][T10966] __nla_validate_parse: 3 callbacks suppressed [ 166.997112][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1473'. [ 167.165615][T10987] xt_bpf: check failed: parse error [ 167.185600][T10954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.212127][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1476'. [ 167.281549][T10992] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 167.436299][T10954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.712425][T10954] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.738603][T10954] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.773170][T11030] team0: Device wg2 is of different type [ 167.815034][T10954] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.838372][T11026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1488'. [ 167.863108][T10954] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.911638][T11026] lo speed is unknown, defaulting to 1000 [ 167.945462][T11044] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 168.427395][T11067] netlink: 'syz.0.1499': attribute type 12 has an invalid length. [ 168.752863][T11091] syz.0.1507[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.752951][T11091] syz.0.1507[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.787463][T11091] syz.0.1507[11091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.787669][T11092] syz.0.1507[11092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.888731][T11092] syz.0.1507[11092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.900892][T11092] syz.0.1507[11092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.931156][T11103] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 168.954126][T11103] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1512'. [ 169.162246][T11125] x_tables: duplicate underflow at hook 1 [ 169.174829][T11126] x_tables: duplicate underflow at hook 1 [ 169.180840][T11126] x_tables: duplicate underflow at hook 1 [ 169.444613][T11144] netlink: 'syz.4.1526': attribute type 39 has an invalid length. [ 169.771520][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 169.802277][T11169] pim6reg: entered allmulticast mode [ 169.953726][T11181] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 170.055933][T11188] netlink: 'syz.0.1540': attribute type 6 has an invalid length. [ 170.120627][T11194] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1542'. [ 170.483151][T11216] sctp: [Deprecated]: syz.2.1548 (pid 11216) Use of int in maxseg socket option. [ 170.483151][T11216] Use struct sctp_assoc_value instead [ 170.618417][T11223] lo speed is unknown, defaulting to 1000 [ 170.805116][T11233] batman_adv: batadv0: Adding interface: gretap2 [ 170.811649][T11233] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.853765][T11233] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 171.042666][T11249] team0: entered promiscuous mode [ 171.063118][T11249] C: entered promiscuous mode [ 171.071855][T11249] team_slave_1: entered promiscuous mode [ 171.245483][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 171.324905][T11273] netlink: 'syz.3.1564': attribute type 2 has an invalid length. [ 171.333018][T11273] netlink: 'syz.3.1564': attribute type 8 has an invalid length. [ 171.343219][T11274] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (65537) [ 171.363006][T11274] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 171.403808][T11247] team0: left promiscuous mode [ 171.408806][T11247] C: left promiscuous mode [ 171.419190][T11247] team_slave_1: left promiscuous mode [ 171.577030][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1566'. [ 171.723046][T11292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1571'. [ 171.896519][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 172.046589][T11316] xt_connbytes: Forcing CT accounting to be enabled [ 172.059294][T11316] xt_bpf: check failed: parse error [ 172.131253][T11325] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.1579'. [ 172.703316][T11365] netlink: 'syz.0.1594': attribute type 9 has an invalid length. [ 172.722060][T11365] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1594'. [ 173.323326][T11387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1600'. [ 173.351995][T11387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1600'. [ 173.398812][T11387] netlink: 'syz.0.1600': attribute type 10 has an invalid length. [ 173.634532][T11401] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 173.773049][T11410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 173.803411][T11410] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.816027][T11410] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.857419][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1610'. [ 173.866811][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'. [ 174.073961][T11424] netlink: 'syz.0.1616': attribute type 49 has an invalid length. [ 174.193071][T11434] dvmrp5: entered allmulticast mode [ 174.201002][T11434] dvmrp5: left allmulticast mode [ 174.319103][T11438] Cannot find set identified by id 632 to match [ 174.394830][ T6282] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 174.404807][ T6282] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 174.738766][T11463] dvmrp5: entered allmulticast mode [ 174.762513][T11463] dvmrp5: left allmulticast mode [ 174.929091][T11475] bridge3: entered promiscuous mode [ 174.959660][T11475] bridge3: entered allmulticast mode [ 175.217991][T11495] FAULT_INJECTION: forcing a failure. [ 175.217991][T11495] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 175.243705][T11495] CPU: 1 UID: 0 PID: 11495 Comm: syz.4.1642 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 175.254518][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.264606][T11495] Call Trace: [ 175.267908][T11495] [ 175.270854][T11495] dump_stack_lvl+0x241/0x360 [ 175.275554][T11495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.280775][T11495] ? __pfx__printk+0x10/0x10 [ 175.285396][T11495] ? __pfx_lock_release+0x10/0x10 [ 175.290466][T11495] should_fail_ex+0x3b0/0x4e0 [ 175.295174][T11495] _copy_from_user+0x2f/0xc0 [ 175.299795][T11495] copy_msghdr_from_user+0xae/0x680 [ 175.305024][T11495] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 175.310844][T11495] __sys_sendmsg+0x22d/0x380 [ 175.315441][T11495] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.320562][T11495] ? __pfx_vfs_write+0x10/0x10 [ 175.325345][T11495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.331677][T11495] ? do_syscall_64+0x100/0x230 [ 175.336441][T11495] ? do_syscall_64+0xb6/0x230 [ 175.341114][T11495] do_syscall_64+0xf3/0x230 [ 175.345616][T11495] ? clear_bhb_loop+0x35/0x90 [ 175.350292][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.356186][T11495] RIP: 0033:0x7f48bf97e719 [ 175.360596][T11495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.380215][T11495] RSP: 002b:00007f48c07de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.388642][T11495] RAX: ffffffffffffffda RBX: 00007f48bfb35f80 RCX: 00007f48bf97e719 [ 175.396610][T11495] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 175.404580][T11495] RBP: 00007f48c07de090 R08: 0000000000000000 R09: 0000000000000000 [ 175.412547][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.420511][T11495] R13: 0000000000000000 R14: 00007f48bfb35f80 R15: 00007ffd4353f238 [ 175.428491][T11495] [ 175.462277][T11503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'. [ 175.520141][T11500] GUP no longer grows the stack in syz.1.1641 (11500): 20006000-2000a000 (20005000) [ 175.530862][T11500] CPU: 0 UID: 0 PID: 11500 Comm: syz.1.1641 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 175.541672][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.551743][T11500] Call Trace: [ 175.555017][T11500] [ 175.557954][T11500] dump_stack_lvl+0x241/0x360 [ 175.562641][T11500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.567836][T11500] ? __pfx__printk+0x10/0x10 [ 175.572426][T11500] ? find_vma+0xf9/0x170 [ 175.576692][T11500] ? vma_is_secretmem+0xd/0x50 [ 175.581466][T11500] ? check_vma_flags+0x52b/0x5a0 [ 175.586422][T11500] __get_user_pages+0x4385/0x49e0 [ 175.591459][T11500] ? __kernel_text_address+0xd/0x40 [ 175.596671][T11500] ? mark_lock+0x9a/0x360 [ 175.601017][T11500] ? __pfx___get_user_pages+0x10/0x10 [ 175.606405][T11500] ? __pfx_lock_acquire+0x10/0x10 [ 175.611449][T11500] __gup_longterm_locked+0x3ba/0x17d0 [ 175.616837][T11500] pin_user_pages+0x137/0x1f0 [ 175.621515][T11500] ? __pfx_pin_user_pages+0x10/0x10 [ 175.626715][T11500] ? __kmalloc_node_noprof+0x247/0x440 [ 175.632185][T11500] xdp_umem_create+0x978/0xf30 [ 175.636961][T11500] xsk_setsockopt+0x732/0x950 [ 175.641640][T11500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.647281][T11500] ? __pfx_lock_acquire+0x10/0x10 [ 175.652307][T11500] ? __fget_files+0x29/0x470 [ 175.656892][T11500] ? aa_sock_opt_perm+0x79/0x120 [ 175.661839][T11500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 175.667037][T11500] do_sock_setsockopt+0x3af/0x720 [ 175.672075][T11500] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 175.677631][T11500] ? __fget_files+0x29/0x470 [ 175.682222][T11500] ? __fget_files+0x3f3/0x470 [ 175.686900][T11500] ? __fget_files+0x29/0x470 [ 175.691499][T11500] __sys_setsockopt+0x1a2/0x250 [ 175.696354][T11500] __x64_sys_setsockopt+0xb5/0xd0 [ 175.701378][T11500] do_syscall_64+0xf3/0x230 [ 175.705881][T11500] ? clear_bhb_loop+0x35/0x90 [ 175.710560][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.716454][T11500] RIP: 0033:0x7f463597e719 [ 175.720867][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.740472][T11500] RSP: 002b:00007f4636766038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.748896][T11500] RAX: ffffffffffffffda RBX: 00007f4635b35f80 RCX: 00007f463597e719 [ 175.756864][T11500] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000009 [ 175.764833][T11500] RBP: 00007f46359f139e R08: 0000000000000020 R09: 0000000000000000 [ 175.772798][T11500] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 175.780766][T11500] R13: 0000000000000000 R14: 00007f4635b35f80 R15: 00007fff8b953e58 [ 175.788748][T11500] [ 175.844877][T11507] dvmrp5: entered allmulticast mode [ 175.875237][T11507] dvmrp5: left allmulticast mode [ 175.958719][T11500] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1641'. [ 176.131687][T11525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 176.191236][T11527] bridge_slave_1: left allmulticast mode [ 176.202871][T11527] bridge_slave_1: left promiscuous mode [ 176.213755][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.241983][T11527] bridge_slave_0: left allmulticast mode [ 176.285470][T11527] bridge_slave_0: left promiscuous mode [ 176.291239][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.331980][T11536] FAULT_INJECTION: forcing a failure. [ 176.331980][T11536] name failslab, interval 1, probability 0, space 0, times 0 [ 176.384239][T11536] CPU: 0 UID: 0 PID: 11536 Comm: syz.2.1654 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 176.395062][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.405166][T11536] Call Trace: [ 176.408477][T11536] [ 176.411446][T11536] dump_stack_lvl+0x241/0x360 [ 176.416157][T11536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.421382][T11536] ? __pfx__printk+0x10/0x10 [ 176.426005][T11536] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 176.432026][T11536] ? __pfx___might_resched+0x10/0x10 [ 176.437350][T11536] should_fail_ex+0x3b0/0x4e0 [ 176.442062][T11536] should_failslab+0xac/0x100 [ 176.446771][T11536] ? __alloc_skb+0x1c3/0x440 [ 176.451400][T11536] kmem_cache_alloc_node_noprof+0x71/0x320 [ 176.457289][T11536] __alloc_skb+0x1c3/0x440 [ 176.461725][T11536] ? __pfx___alloc_skb+0x10/0x10 [ 176.466664][T11536] ? netlink_autobind+0xd6/0x2f0 [ 176.471610][T11536] ? netlink_autobind+0x2b0/0x2f0 [ 176.476636][T11536] netlink_sendmsg+0x638/0xcb0 [ 176.481399][T11536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.486700][T11536] ? aa_sock_msg_perm+0x91/0x160 [ 176.491658][T11536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.496946][T11536] __sock_sendmsg+0x221/0x270 [ 176.501633][T11536] ____sys_sendmsg+0x52a/0x7e0 [ 176.506436][T11536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.511757][T11536] __sys_sendmsg+0x292/0x380 [ 176.516349][T11536] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.521460][T11536] ? __pfx_vfs_write+0x10/0x10 [ 176.526241][T11536] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.532596][T11536] ? do_syscall_64+0x100/0x230 [ 176.537382][T11536] ? do_syscall_64+0xb6/0x230 [ 176.542091][T11536] do_syscall_64+0xf3/0x230 [ 176.546617][T11536] ? clear_bhb_loop+0x35/0x90 [ 176.551319][T11536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.557248][T11536] RIP: 0033:0x7fbf2c57e719 [ 176.561686][T11536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.581324][T11536] RSP: 002b:00007fbf2d354038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.589745][T11536] RAX: ffffffffffffffda RBX: 00007fbf2c735f80 RCX: 00007fbf2c57e719 [ 176.597726][T11536] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 176.605699][T11536] RBP: 00007fbf2d354090 R08: 0000000000000000 R09: 0000000000000000 [ 176.613669][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.621820][T11536] R13: 0000000000000000 R14: 00007fbf2c735f80 R15: 00007ffd223e5848 [ 176.629810][T11536] [ 176.688907][T11531] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 176.862933][T11561] tipc: Enabled bearer , priority 10 [ 177.080073][T11578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.305742][T11601] IPv6: sit1: Disabled Multicast RS [ 177.311986][T11601] sit1: entered allmulticast mode [ 177.344625][T11605] __nla_validate_parse: 4 callbacks suppressed [ 177.344647][T11605] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1677'. [ 177.387800][T11607] batadv_slave_0: entered promiscuous mode [ 177.413049][T11607] batadv_slave_0: left promiscuous mode [ 177.439355][T11610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1679'. [ 177.504624][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1679'. [ 177.591978][T11610] team0 (unregistering): Port device team_slave_0 removed [ 177.606374][T11610] team0 (unregistering): Port device team_slave_1 removed [ 177.622048][T11610] team0 (unregistering): Port device bridge2 removed [ 177.633183][T11610] team0 (unregistering): Port device netdevsim0 removed [ 177.637077][T11623] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1683'. [ 177.657186][T11610] team0 (unregistering): Port device dummy0 removed [ 177.717780][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.739400][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.750121][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.762137][T11625] FAULT_INJECTION: forcing a failure. [ 177.762137][T11625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.775390][T11625] CPU: 0 UID: 0 PID: 11625 Comm: syz.3.1684 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 177.786162][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.793524][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.796224][T11625] Call Trace: [ 177.796240][T11625] [ 177.796250][T11625] dump_stack_lvl+0x241/0x360 [ 177.796279][T11625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.806395][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.809330][T11625] ? __pfx__printk+0x10/0x10 [ 177.809365][T11625] ? __pfx_lock_release+0x10/0x10 [ 177.812412][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.816958][T11625] should_fail_ex+0x3b0/0x4e0 [ 177.816986][T11625] _copy_from_iter+0x21f/0x1e70 [ 177.817021][T11625] ? __virt_addr_valid+0x183/0x530 [ 177.817041][T11625] ? __pfx_lock_release+0x10/0x10 [ 177.817071][T11625] ? __alloc_skb+0x28f/0x440 [ 177.876391][T11625] ? __pfx__copy_from_iter+0x10/0x10 [ 177.881684][T11625] ? __virt_addr_valid+0x183/0x530 [ 177.886803][T11625] ? __virt_addr_valid+0x183/0x530 [ 177.891911][T11625] ? __virt_addr_valid+0x45f/0x530 [ 177.897023][T11625] ? __check_object_size+0x48e/0x900 [ 177.902311][T11625] netlink_sendmsg+0x73d/0xcb0 [ 177.907083][T11625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.912372][T11625] ? aa_sock_msg_perm+0x91/0x160 [ 177.917312][T11625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.922591][T11625] __sock_sendmsg+0x221/0x270 [ 177.927268][T11625] ____sys_sendmsg+0x52a/0x7e0 [ 177.932034][T11625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.937348][T11625] __sys_sendmsg+0x292/0x380 [ 177.941962][T11625] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.947104][T11625] ? __pfx_vfs_write+0x10/0x10 [ 177.951913][T11625] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.958264][T11625] ? do_syscall_64+0x100/0x230 [ 177.963032][T11625] ? do_syscall_64+0xb6/0x230 [ 177.967710][T11625] do_syscall_64+0xf3/0x230 [ 177.972214][T11625] ? clear_bhb_loop+0x35/0x90 [ 177.976891][T11625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.982788][T11625] RIP: 0033:0x7fb2dbd7e719 [ 177.987198][T11625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.006799][T11625] RSP: 002b:00007fb2dcaa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.015210][T11625] RAX: ffffffffffffffda RBX: 00007fb2dbf35f80 RCX: 00007fb2dbd7e719 [ 178.023175][T11625] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 178.031156][T11625] RBP: 00007fb2dcaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 178.039135][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.047113][T11625] R13: 0000000000000000 R14: 00007fb2dbf35f80 R15: 00007ffc66e64388 [ 178.055097][T11625] [ 178.059857][ T5855] tipc: Node number set to 1 [ 178.251595][T11635] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1688'. [ 178.433146][T11648] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1690'. [ 178.525526][T11653] dvmrp5: entered allmulticast mode [ 178.550241][T11655] dvmrp5: left allmulticast mode [ 178.773382][T11668] IPv6: sit1: Disabled Multicast RS [ 178.784129][T11668] sit1: entered allmulticast mode [ 178.796542][T11672] FAULT_INJECTION: forcing a failure. [ 178.796542][T11672] name failslab, interval 1, probability 0, space 0, times 0 [ 178.843568][T11672] CPU: 0 UID: 0 PID: 11672 Comm: syz.2.1697 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 178.854378][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.864433][T11672] Call Trace: [ 178.867708][T11672] [ 178.870635][T11672] dump_stack_lvl+0x241/0x360 [ 178.875310][T11672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.880501][T11672] ? __pfx__printk+0x10/0x10 [ 178.885093][T11672] ? ref_tracker_alloc+0x332/0x490 [ 178.890203][T11672] should_fail_ex+0x3b0/0x4e0 [ 178.894879][T11672] ? skb_clone+0x20c/0x390 [ 178.899292][T11672] should_failslab+0xac/0x100 [ 178.903968][T11672] ? skb_clone+0x20c/0x390 [ 178.908380][T11672] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 178.913754][T11672] skb_clone+0x20c/0x390 [ 178.917998][T11672] __netlink_deliver_tap+0x3cc/0x7f0 [ 178.923283][T11672] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.928479][T11672] netlink_deliver_tap+0x19d/0x1b0 [ 178.933600][T11672] netlink_unicast+0x7c4/0x990 [ 178.938367][T11672] ? __pfx_netlink_unicast+0x10/0x10 [ 178.943643][T11672] ? __virt_addr_valid+0x183/0x530 [ 178.948754][T11672] ? __check_object_size+0x48e/0x900 [ 178.954048][T11672] netlink_sendmsg+0x8e4/0xcb0 [ 178.958820][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.964196][T11672] ? aa_sock_msg_perm+0x91/0x160 [ 178.969135][T11672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.974418][T11672] __sock_sendmsg+0x221/0x270 [ 178.979089][T11672] ____sys_sendmsg+0x52a/0x7e0 [ 178.983861][T11672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.989153][T11672] __sys_sendmsg+0x292/0x380 [ 178.993743][T11672] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.998863][T11672] ? __pfx_vfs_write+0x10/0x10 [ 179.003650][T11672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 179.009978][T11672] ? do_syscall_64+0x100/0x230 [ 179.014739][T11672] ? do_syscall_64+0xb6/0x230 [ 179.019411][T11672] do_syscall_64+0xf3/0x230 [ 179.023908][T11672] ? clear_bhb_loop+0x35/0x90 [ 179.028584][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.034477][T11672] RIP: 0033:0x7fbf2c57e719 [ 179.038888][T11672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.058490][T11672] RSP: 002b:00007fbf2d354038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.066905][T11672] RAX: ffffffffffffffda RBX: 00007fbf2c735f80 RCX: 00007fbf2c57e719 [ 179.074872][T11672] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 179.082834][T11672] RBP: 00007fbf2d354090 R08: 0000000000000000 R09: 0000000000000000 [ 179.090811][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.098791][T11672] R13: 0000000000000000 R14: 00007fbf2c735f80 R15: 00007ffd223e5848 [ 179.106784][T11672] [ 181.208251][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 181.209236][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 181.214776][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.220494][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 191.761449][T11708] dvmrp5: entered allmulticast mode [ 191.790607][T11708] dvmrp5: left allmulticast mode [ 191.884972][T11714] netdevsim netdevsim0: Direct firmware load for . [ 191.884972][T11714] failed with error -2 [ 191.896011][T11716] FAULT_INJECTION: forcing a failure. [ 191.896011][T11716] name failslab, interval 1, probability 0, space 0, times 0 [ 191.896051][T11716] CPU: 0 UID: 0 PID: 11716 Comm: syz.1.1710 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 191.896073][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.896094][T11716] Call Trace: [ 191.896102][T11716] [ 191.896110][T11716] dump_stack_lvl+0x241/0x360 [ 191.940839][T11716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.946053][T11716] ? __pfx__printk+0x10/0x10 [ 191.950672][T11716] should_fail_ex+0x3b0/0x4e0 [ 191.955360][T11716] ? skb_clone+0x20c/0x390 [ 191.959783][T11716] should_failslab+0xac/0x100 [ 191.964462][T11716] ? skb_clone+0x20c/0x390 [ 191.968882][T11716] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 191.974263][T11716] skb_clone+0x20c/0x390 [ 191.978507][T11716] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 191.983707][T11716] dev_queue_xmit_nit+0x249/0xca0 [ 191.988733][T11716] ? dev_queue_xmit_nit+0x2b/0xca0 [ 191.993847][T11716] ? validate_xmit_skb+0x9b8/0xff0 [ 191.998963][T11716] dev_hard_start_xmit+0x15f/0x7e0 [ 192.004080][T11716] ? __pfx_validate_xmit_skb+0x10/0x10 [ 192.009574][T11716] __dev_queue_xmit+0x1b73/0x3f50 [ 192.014607][T11716] ? kasan_save_track+0x51/0x80 [ 192.019466][T11716] ? ____sys_sendmsg+0x52a/0x7e0 [ 192.024410][T11716] ? __dev_queue_xmit+0x2f4/0x3f50 [ 192.029528][T11716] ? __pfx___dev_queue_xmit+0x10/0x10 [ 192.034914][T11716] ? __copy_skb_header+0x437/0x5b0 [ 192.040033][T11716] ? __asan_memcpy+0x40/0x70 [ 192.044650][T11716] ? skb_clone+0x240/0x390 [ 192.049070][T11716] __netlink_deliver_tap+0x56b/0x7f0 [ 192.054368][T11716] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.059572][T11716] netlink_deliver_tap+0x19d/0x1b0 [ 192.064700][T11716] netlink_unicast+0x7c4/0x990 [ 192.069474][T11716] ? __pfx_netlink_unicast+0x10/0x10 [ 192.074759][T11716] ? __virt_addr_valid+0x183/0x530 [ 192.079899][T11716] ? __check_object_size+0x48e/0x900 [ 192.085208][T11716] netlink_sendmsg+0x8e4/0xcb0 [ 192.089995][T11716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.095290][T11716] ? aa_sock_msg_perm+0x91/0x160 [ 192.100239][T11716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.105543][T11716] __sock_sendmsg+0x221/0x270 [ 192.110220][T11716] ____sys_sendmsg+0x52a/0x7e0 [ 192.114991][T11716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.120291][T11716] __sys_sendmsg+0x292/0x380 [ 192.124883][T11716] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.130009][T11716] ? __pfx_vfs_write+0x10/0x10 [ 192.134798][T11716] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.141129][T11716] ? do_syscall_64+0x100/0x230 [ 192.145900][T11716] ? do_syscall_64+0xb6/0x230 [ 192.150580][T11716] do_syscall_64+0xf3/0x230 [ 192.155083][T11716] ? clear_bhb_loop+0x35/0x90 [ 192.159768][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.165670][T11716] RIP: 0033:0x7f463597e719 [ 192.170088][T11716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.189689][T11716] RSP: 002b:00007f4636766038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.198112][T11716] RAX: ffffffffffffffda RBX: 00007f4635b35f80 RCX: 00007f463597e719 [ 192.206088][T11716] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 192.214057][T11716] RBP: 00007f4636766090 R08: 0000000000000000 R09: 0000000000000000 [ 192.222022][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.229989][T11716] R13: 0000000000000000 R14: 00007f4635b35f80 R15: 00007fff8b953e58 [ 192.237973][T11716] [ 192.246478][T11714] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 192.246478][T11714] [ 192.271643][T11718] lo speed is unknown, defaulting to 1000 [ 192.365108][T11726] lo speed is unknown, defaulting to 1000 [ 192.370946][T11726] lo speed is unknown, defaulting to 1000 [ 192.377304][T11726] lo speed is unknown, defaulting to 1000 [ 192.390042][T11726] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.415181][T11726] lo speed is unknown, defaulting to 1000 [ 192.423149][T11726] lo speed is unknown, defaulting to 1000 [ 192.438354][T11726] lo speed is unknown, defaulting to 1000 [ 192.445195][T11726] lo speed is unknown, defaulting to 1000 [ 192.451984][T11726] lo speed is unknown, defaulting to 1000 [ 192.458884][T11726] lo speed is unknown, defaulting to 1000 [ 193.062447][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 193.272405][T11777] Bluetooth: MGMT ver 1.23 [ 193.310535][T11782] xt_l2tp: v2 doesn't support IP mode [ 193.408851][T11790] xt_limit: Overflow, try lower: 65536/2147483648 [ 193.500556][T11795] FAULT_INJECTION: forcing a failure. [ 193.500556][T11795] name failslab, interval 1, probability 0, space 0, times 0 [ 193.533803][T11795] CPU: 1 UID: 0 PID: 11795 Comm: syz.4.1734 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 193.544628][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.554715][T11795] Call Trace: [ 193.558024][T11795] [ 193.560986][T11795] dump_stack_lvl+0x241/0x360 [ 193.565713][T11795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.570946][T11795] ? __pfx__printk+0x10/0x10 [ 193.575586][T11795] ? ref_tracker_alloc+0x332/0x490 [ 193.580732][T11795] should_fail_ex+0x3b0/0x4e0 [ 193.585441][T11795] ? skb_clone+0x20c/0x390 [ 193.589892][T11795] should_failslab+0xac/0x100 [ 193.594604][T11795] ? skb_clone+0x20c/0x390 [ 193.599057][T11795] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 193.604467][T11795] skb_clone+0x20c/0x390 [ 193.608749][T11795] __netlink_deliver_tap+0x3cc/0x7f0 [ 193.614075][T11795] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.619302][T11795] netlink_deliver_tap+0x19d/0x1b0 [ 193.622210][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 193.624424][T11795] netlink_sendskb+0x68/0x140 [ 193.624453][T11795] netlink_unicast+0x39d/0x990 [ 193.624471][T11795] ? __asan_memcpy+0x40/0x70 [ 193.624503][T11795] ? __pfx_netlink_unicast+0x10/0x10 [ 193.624531][T11795] netlink_rcv_skb+0x262/0x430 [ 193.624553][T11795] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 193.624574][T11795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.634968][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 193.638083][T11795] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.682227][T11795] netlink_unicast+0x7f6/0x990 [ 193.687015][T11795] ? __pfx_netlink_unicast+0x10/0x10 [ 193.692304][T11795] ? __virt_addr_valid+0x183/0x530 [ 193.697420][T11795] ? __check_object_size+0x48e/0x900 [ 193.702714][T11795] netlink_sendmsg+0x8e4/0xcb0 [ 193.707492][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.712786][T11795] ? aa_sock_msg_perm+0x91/0x160 [ 193.717741][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.723027][T11795] __sock_sendmsg+0x221/0x270 [ 193.727712][T11795] ____sys_sendmsg+0x52a/0x7e0 [ 193.732489][T11795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.737789][T11795] __sys_sendmsg+0x292/0x380 [ 193.742381][T11795] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.747712][T11795] ? __pfx_vfs_write+0x10/0x10 [ 193.752497][T11795] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.758864][T11795] ? do_syscall_64+0x100/0x230 [ 193.763642][T11795] ? do_syscall_64+0xb6/0x230 [ 193.768333][T11795] do_syscall_64+0xf3/0x230 [ 193.772833][T11795] ? clear_bhb_loop+0x35/0x90 [ 193.777508][T11795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.783406][T11795] RIP: 0033:0x7f48bf97e719 [ 193.787825][T11795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.807445][T11795] RSP: 002b:00007f48c07de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.815868][T11795] RAX: ffffffffffffffda RBX: 00007f48bfb35f80 RCX: 00007f48bf97e719 [ 193.823836][T11795] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 193.831807][T11795] RBP: 00007f48c07de090 R08: 0000000000000000 R09: 0000000000000000 [ 193.839802][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.847772][T11795] R13: 0000000000000000 R14: 00007f48bfb35f80 R15: 00007ffd4353f238 [ 193.855759][T11795] [ 193.870006][T11803] vlan2: entered promiscuous mode [ 193.875500][T11803] dummy0: entered promiscuous mode [ 193.980185][T11803] dummy0: left promiscuous mode [ 194.026481][T11816] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 194.035254][T11816] team0: Device ipvlan1 is of different type [ 194.190666][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1739'. [ 194.200181][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1739'. [ 194.215455][T11814] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1739'. [ 194.385020][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 194.398649][T11848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.401424][T11843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1744'. [ 194.547023][T11851] FAULT_INJECTION: forcing a failure. [ 194.547023][T11851] name failslab, interval 1, probability 0, space 0, times 0 [ 194.574528][T11851] CPU: 1 UID: 0 PID: 11851 Comm: syz.3.1750 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 194.585347][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.595432][T11851] Call Trace: [ 194.598731][T11851] [ 194.601678][T11851] dump_stack_lvl+0x241/0x360 [ 194.606396][T11851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.611628][T11851] ? __pfx__printk+0x10/0x10 [ 194.616262][T11851] ? ref_tracker_alloc+0x332/0x490 [ 194.621408][T11851] should_fail_ex+0x3b0/0x4e0 [ 194.626116][T11851] ? skb_clone+0x20c/0x390 [ 194.630560][T11851] should_failslab+0xac/0x100 [ 194.635251][T11851] ? skb_clone+0x20c/0x390 [ 194.639686][T11851] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 194.645084][T11851] skb_clone+0x20c/0x390 [ 194.649348][T11851] __netlink_deliver_tap+0x3cc/0x7f0 [ 194.654656][T11851] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.660170][T11851] netlink_deliver_tap+0x19d/0x1b0 [ 194.665325][T11851] netlink_sendskb+0x68/0x140 [ 194.670033][T11851] netlink_unicast+0x39d/0x990 [ 194.674824][T11851] ? __asan_memcpy+0x40/0x70 [ 194.679455][T11851] ? __pfx_netlink_unicast+0x10/0x10 [ 194.684867][T11851] netlink_rcv_skb+0x262/0x430 [ 194.689663][T11851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.695163][T11851] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.700488][T11851] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.705704][T11851] netlink_unicast+0x7f6/0x990 [ 194.710492][T11851] ? __pfx_netlink_unicast+0x10/0x10 [ 194.715782][T11851] ? __virt_addr_valid+0x183/0x530 [ 194.720913][T11851] ? __check_object_size+0x48e/0x900 [ 194.726216][T11851] netlink_sendmsg+0x8e4/0xcb0 [ 194.730998][T11851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.736294][T11851] ? aa_sock_msg_perm+0x91/0x160 [ 194.741267][T11851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.746566][T11851] __sock_sendmsg+0x221/0x270 [ 194.751248][T11851] ____sys_sendmsg+0x52a/0x7e0 [ 194.756035][T11851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.761349][T11851] __sys_sendmsg+0x292/0x380 [ 194.765955][T11851] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.771087][T11851] ? __pfx_vfs_write+0x10/0x10 [ 194.775894][T11851] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.782239][T11851] ? do_syscall_64+0x100/0x230 [ 194.787016][T11851] ? do_syscall_64+0xb6/0x230 [ 194.791713][T11851] do_syscall_64+0xf3/0x230 [ 194.796229][T11851] ? clear_bhb_loop+0x35/0x90 [ 194.800924][T11851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.806830][T11851] RIP: 0033:0x7fb2dbd7e719 [ 194.811260][T11851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.830866][T11851] RSP: 002b:00007fb2dcaa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.839284][T11851] RAX: ffffffffffffffda RBX: 00007fb2dbf35f80 RCX: 00007fb2dbd7e719 [ 194.847259][T11851] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 194.855251][T11851] RBP: 00007fb2dcaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 194.863242][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.871218][T11851] R13: 0000000000000000 R14: 00007fb2dbf35f80 R15: 00007ffc66e64388 [ 194.879225][T11851] [ 195.156239][T11883] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1757'. [ 195.318661][T11897] lo speed is unknown, defaulting to 1000 [ 195.326475][T11897] lo speed is unknown, defaulting to 1000 [ 195.515063][T11910] FAULT_INJECTION: forcing a failure. [ 195.515063][T11910] name failslab, interval 1, probability 0, space 0, times 0 [ 195.527822][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz.0.1765 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 195.538617][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.548714][T11910] Call Trace: [ 195.552014][T11910] [ 195.554966][T11910] dump_stack_lvl+0x241/0x360 [ 195.559670][T11910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.564902][T11910] ? __pfx__printk+0x10/0x10 [ 195.569539][T11910] should_fail_ex+0x3b0/0x4e0 [ 195.574245][T11910] ? skb_clone+0x20c/0x390 [ 195.578690][T11910] should_failslab+0xac/0x100 [ 195.583392][T11910] ? skb_clone+0x20c/0x390 [ 195.587837][T11910] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 195.593328][T11910] skb_clone+0x20c/0x390 [ 195.597594][T11910] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 195.602824][T11910] dev_queue_xmit_nit+0x249/0xca0 [ 195.607876][T11910] ? dev_queue_xmit_nit+0x2b/0xca0 [ 195.613017][T11910] ? validate_xmit_skb+0x9b8/0xff0 [ 195.618168][T11910] dev_hard_start_xmit+0x15f/0x7e0 [ 195.623311][T11910] ? __pfx_validate_xmit_skb+0x10/0x10 [ 195.628816][T11910] __dev_queue_xmit+0x1b73/0x3f50 [ 195.633884][T11910] ? netlink_unicast+0x39d/0x990 [ 195.638853][T11910] ? __sys_sendmsg+0x292/0x380 [ 195.643648][T11910] ? __dev_queue_xmit+0x2f4/0x3f50 [ 195.648799][T11910] ? __pfx___dev_queue_xmit+0x10/0x10 [ 195.654230][T11910] ? __copy_skb_header+0x437/0x5b0 [ 195.659383][T11910] ? __skb_clone+0x454/0x6c0 [ 195.664029][T11910] ? skb_clone+0x240/0x390 [ 195.668489][T11910] __netlink_deliver_tap+0x56b/0x7f0 [ 195.673870][T11910] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.679105][T11910] netlink_deliver_tap+0x19d/0x1b0 [ 195.684251][T11910] netlink_sendskb+0x68/0x140 [ 195.688959][T11910] netlink_unicast+0x39d/0x990 [ 195.693750][T11910] ? __asan_memcpy+0x40/0x70 [ 195.698383][T11910] ? __pfx_netlink_unicast+0x10/0x10 [ 195.703700][T11910] netlink_rcv_skb+0x262/0x430 [ 195.708493][T11910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.713989][T11910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.719330][T11910] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.724568][T11910] netlink_unicast+0x7f6/0x990 [ 195.729383][T11910] ? __pfx_netlink_unicast+0x10/0x10 [ 195.734703][T11910] ? __virt_addr_valid+0x183/0x530 [ 195.739850][T11910] ? __check_object_size+0x48e/0x900 [ 195.745173][T11910] netlink_sendmsg+0x8e4/0xcb0 [ 195.749952][T11910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.755261][T11910] ? aa_sock_msg_perm+0x91/0x160 [ 195.760237][T11910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.765523][T11910] __sock_sendmsg+0x221/0x270 [ 195.770214][T11910] ____sys_sendmsg+0x52a/0x7e0 [ 195.774992][T11910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.780287][T11910] __sys_sendmsg+0x292/0x380 [ 195.784897][T11910] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.790061][T11910] ? __pfx_vfs_write+0x10/0x10 [ 195.794891][T11910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.801257][T11910] ? do_syscall_64+0x100/0x230 [ 195.806064][T11910] ? do_syscall_64+0xb6/0x230 [ 195.810770][T11910] do_syscall_64+0xf3/0x230 [ 195.815300][T11910] ? clear_bhb_loop+0x35/0x90 [ 195.820012][T11910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.825951][T11910] RIP: 0033:0x7f9e8c37e719 [ 195.830406][T11910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.850031][T11910] RSP: 002b:00007f9e8d149038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.858479][T11910] RAX: ffffffffffffffda RBX: 00007f9e8c535f80 RCX: 00007f9e8c37e719 [ 195.866464][T11910] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 195.874438][T11910] RBP: 00007f9e8d149090 R08: 0000000000000000 R09: 0000000000000000 [ 195.882421][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.890394][T11910] R13: 0000000000000000 R14: 00007f9e8c535f80 R15: 00007ffd8218fbc8 [ 195.898382][T11910] [ 195.914368][T11897] tipc: Started in network mode [ 195.919307][T11897] tipc: Node identity ac1414aa, cluster identity 4711 [ 195.943211][T11897] tipc: Enabling of bearer rejected, failed to enable media [ 196.001387][T11922] netlink: 2227 bytes leftover after parsing attributes in process `syz.4.1768'. [ 196.309410][T11934] netlink: 'syz.0.1774': attribute type 3 has an invalid length. [ 196.404270][ T6618] tipc: Left network mode [ 196.925689][T11986] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 196.940606][T11986] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 197.672840][T12034] wg1: entered allmulticast mode [ 197.691911][T12034] wg1: left allmulticast mode [ 197.697297][T12033] xt_CT: No such helper "snmp" [ 197.848203][T12049] x_tables: duplicate underflow at hook 3 [ 197.975390][T12053] netlink: 'syz.1.1809': attribute type 4 has an invalid length. [ 198.038417][ T5855] lo speed is unknown, defaulting to 1000 [ 198.118719][T12058] netlink: 'syz.1.1809': attribute type 6 has an invalid length. [ 198.127845][T12059] __nla_validate_parse: 6 callbacks suppressed [ 198.127864][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1811'. [ 198.388204][T12072] sctp: [Deprecated]: syz.2.1806 (pid 12072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.388204][T12072] Use struct sctp_sack_info instead [ 198.429375][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1806'. [ 199.164199][T12097] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1821'. [ 199.271911][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1825'. [ 199.755030][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1834'. [ 200.037243][T12169] netlink: 'syz.0.1838': attribute type 11 has an invalid length. [ 200.126052][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 200.152188][T12172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1839'. [ 200.185527][T12172] gtp2: entered promiscuous mode [ 200.197712][T12172] gtp2: entered allmulticast mode [ 200.348933][T12182] lo speed is unknown, defaulting to 1000 [ 200.383190][T12182] lo speed is unknown, defaulting to 1000 [ 200.452624][T12186] bridge0: port 3(vlan2) entered blocking state [ 200.508070][T12186] bridge0: port 3(vlan2) entered disabled state [ 200.528626][T12186] vlan2: entered allmulticast mode [ 200.542821][T12186] veth0: entered allmulticast mode [ 200.551298][T12186] vlan2: entered promiscuous mode [ 200.562461][T12186] veth0: entered promiscuous mode [ 200.570365][T12186] bridge0: port 3(vlan2) entered blocking state [ 200.576891][T12186] bridge0: port 3(vlan2) entered forwarding state [ 200.595660][T12190] tipc: Bearer : already 2 bearers with priority 10 [ 200.603260][T12190] tipc: Bearer : trying with adjusted priority [ 200.615232][T12190] tipc: Enabling of bearer rejected, failed to enable media [ 200.665984][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 200.676197][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1848'. [ 200.689566][T12193] netlink: 'syz.4.1848': attribute type 25 has an invalid length. [ 201.019340][T12214] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1850'. [ 201.141527][T12221] netlink: 'syz.3.1852': attribute type 322 has an invalid length. [ 201.187451][T12223] dvmrp5: entered allmulticast mode [ 201.263294][T12216] dvmrp5: left allmulticast mode [ 201.575431][T12238] dvmrp5: entered allmulticast mode [ 201.586690][T12238] dvmrp5: left allmulticast mode [ 201.746229][T12245] netlink: 'syz.1.1859': attribute type 10 has an invalid length. [ 201.765080][T12245] bridge0: port 1(macvlan1) entered blocking state [ 201.781073][T12245] bridge0: port 1(macvlan1) entered disabled state [ 201.816321][T12245] macvlan1: entered allmulticast mode [ 201.836125][T12245] veth1_vlan: entered allmulticast mode [ 201.848683][T12245] macvlan1: entered promiscuous mode [ 201.852499][T12251] netlink: 'syz.2.1862': attribute type 3 has an invalid length. [ 202.122307][T12263] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 202.338408][T12282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 202.348309][T12285] dvmrp5: entered allmulticast mode [ 202.389043][T12285] dvmrp5: left allmulticast mode [ 202.594520][T12305] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 202.757938][T12317] macsec0: entered promiscuous mode [ 202.786663][T12317] veth1_macvtap: left promiscuous mode [ 202.830974][T12317] macsec0 (unregistering): left promiscuous mode [ 203.141295][T12337] dvmrp5: entered allmulticast mode [ 203.156824][T12337] dvmrp5: left allmulticast mode [ 203.194455][T12342] lo speed is unknown, defaulting to 1000 [ 203.206593][T12342] lo speed is unknown, defaulting to 1000 [ 203.411472][T12358] netlink: 'syz.0.1896': attribute type 16 has an invalid length. [ 203.419728][T12358] netlink: 'syz.0.1896': attribute type 17 has an invalid length. [ 203.590476][T12364] __nla_validate_parse: 14 callbacks suppressed [ 203.590496][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1898'. [ 203.704154][T12373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1901'. [ 203.752246][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1900'. [ 203.914078][T12382] dvmrp5: entered allmulticast mode [ 203.939966][T12382] dvmrp5: left allmulticast mode [ 204.395842][T12384] lo speed is unknown, defaulting to 1000 [ 204.402624][T12384] lo speed is unknown, defaulting to 1000 [ 204.545190][T12404] Cannot find del_set index 2 as target [ 204.638792][T12419] x_tables: duplicate underflow at hook 1 [ 204.964919][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 204.988222][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1918'. [ 205.063119][T12440] lo: entered allmulticast mode [ 205.098818][T12440] tunl0: entered allmulticast mode [ 205.128737][T12440] gre0: entered allmulticast mode [ 205.161746][T12440] gretap0: entered allmulticast mode [ 205.190168][T12440] erspan0: entered allmulticast mode [ 205.218532][T12440] ip_vti0: entered allmulticast mode [ 205.255325][T12440] ip6_vti0: entered allmulticast mode [ 205.273065][T12440] sit0: entered allmulticast mode [ 205.304309][T12440] ip6tnl0: entered allmulticast mode [ 205.322642][T12454] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20002 [ 205.341931][T12440] ip6gre0: entered allmulticast mode [ 205.385164][T12440] syz_tun: entered allmulticast mode [ 205.460526][T12440] ip6gretap0: entered allmulticast mode [ 205.500277][T12440] bridge0: port 3(vlan2) entered disabled state [ 205.506825][T12440] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.514344][T12440] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.533386][T12440] bridge0: entered allmulticast mode [ 205.557386][T12440] vcan0: entered allmulticast mode [ 205.572481][T12440] bond0: left promiscuous mode [ 205.581279][T12440] bond_slave_0: left promiscuous mode [ 205.588993][T12440] bond_slave_1: left promiscuous mode [ 205.595400][T12440] team0: left promiscuous mode [ 205.600456][T12440] team_slave_0: left promiscuous mode [ 205.606586][T12440] team_slave_1: left promiscuous mode [ 205.612457][T12440] bond0: entered allmulticast mode [ 205.617918][T12440] bond_slave_0: entered allmulticast mode [ 205.624009][T12440] bond_slave_1: entered allmulticast mode [ 205.629839][T12440] team0: entered allmulticast mode [ 205.635362][T12440] team_slave_0: entered allmulticast mode [ 205.641539][T12440] team_slave_1: entered allmulticast mode [ 205.660020][T12440] dummy0: entered allmulticast mode [ 205.673364][T12440] nlmon0: entered allmulticast mode [ 205.690423][T12440] caif0: entered allmulticast mode [ 205.696997][T12440] batadv0: entered allmulticast mode [ 205.723256][T12440] veth0: left promiscuous mode [ 205.745464][T12440] veth1: entered allmulticast mode [ 205.758025][T12440] wg0: entered allmulticast mode [ 205.778535][T12440] wg1: entered allmulticast mode [ 205.793130][T12440] wg2: entered allmulticast mode [ 205.809967][T12440] veth0_to_bridge: entered allmulticast mode [ 205.850060][T12440] veth1_to_bridge: entered allmulticast mode [ 205.874911][T12440] veth0_to_bond: entered allmulticast mode [ 205.909295][T12440] veth1_to_bond: entered allmulticast mode [ 205.934856][T12440] veth0_to_team: entered allmulticast mode [ 205.961521][T12440] veth1_to_team: entered allmulticast mode [ 205.986645][T12440] veth0_to_batadv: entered allmulticast mode [ 206.004092][T12440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.026091][T12440] veth1_to_batadv: entered allmulticast mode [ 206.050290][T12440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.058824][T12440] batadv_slave_1: entered allmulticast mode [ 206.076219][T12440] xfrm0: entered allmulticast mode [ 206.099249][T12440] veth0_to_hsr: entered allmulticast mode [ 206.110074][T12440] hsr_slave_0: entered allmulticast mode [ 206.129221][T12440] veth1_to_hsr: entered allmulticast mode [ 206.147838][T12440] hsr_slave_1: entered allmulticast mode [ 206.161960][T12440] hsr0: entered allmulticast mode [ 206.174178][T12440] veth1_virt_wifi: entered allmulticast mode [ 206.192031][T12440] veth0_virt_wifi: entered allmulticast mode [ 206.205846][T12440] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 206.214889][T12440] veth1_vlan: entered allmulticast mode [ 206.235435][T12440] veth0_vlan: entered allmulticast mode [ 206.251602][T12440] macvlan0: entered allmulticast mode [ 206.274104][T12440] macvlan1: entered allmulticast mode [ 206.285398][T12440] ipvlan0: entered allmulticast mode [ 206.292183][T12440] ipvlan1: entered allmulticast mode [ 206.298953][T12440] veth1_macvtap: entered allmulticast mode [ 206.312750][T12440] veth0_macvtap: entered allmulticast mode [ 206.322537][T12440] macvtap0: entered allmulticast mode [ 206.339900][T12440] macsec0: entered allmulticast mode [ 206.360649][T12440] geneve0: entered allmulticast mode [ 206.369904][T12440] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.380869][T12440] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.396598][T12440] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.406882][T12440] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.420110][T12440] geneve1: entered allmulticast mode [ 206.434560][T12440] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 206.454503][T12440] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 206.471545][T12440] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 206.495285][T12440] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 206.521273][T12440] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 206.530030][T12440] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 206.541559][T12440] syztnl0: entered allmulticast mode [ 206.547243][T12440] bond1: entered allmulticast mode [ 206.552428][T12440] erspan1: entered allmulticast mode [ 206.559693][T12440] bond2: entered allmulticast mode [ 206.571833][T12440] bridge1: entered allmulticast mode [ 206.581957][T12440] ªªªªª»†Ý`: entered allmulticast mode [ 206.589552][T12440] ip6gre1: entered allmulticast mode [ 206.617098][T12440] ÿÿÿÿ: entered allmulticast mode [ 206.622306][T12440] xfrm1: entered allmulticast mode [ 206.632637][T12440] vcan1: entered allmulticast mode [ 206.638576][T12440] ip6erspan0: entered allmulticast mode [ 206.651834][T12440] erspan2: entered allmulticast mode [ 206.658037][T12440] vlan0: entered allmulticast mode [ 206.663948][T12440] vlan1: entered allmulticast mode [ 206.669354][T12440] veth2: entered allmulticast mode [ 206.679775][T12440] veth3: entered allmulticast mode [ 206.694427][ T6282] lo speed is unknown, defaulting to 1000 [ 206.701912][T12446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.711734][T12446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.718100][T12450] dvmrp5: entered allmulticast mode [ 206.731605][T12447] macvtap1: entered promiscuous mode [ 206.737275][T12447] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 206.744900][T12447] macvtap1: entered allmulticast mode [ 206.752733][T12447] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 206.781946][T12452] dvmrp5: entered allmulticast mode [ 206.787947][T12453] dvmrp5: left allmulticast mode [ 206.815517][T12457] dvmrp5: left allmulticast mode [ 207.002622][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1926'. [ 207.172052][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1931'. [ 207.188917][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1930'. [ 207.211306][T12483] netlink: 'syz.3.1930': attribute type 7 has an invalid length. [ 207.220560][T12483] netlink: 'syz.3.1930': attribute type 8 has an invalid length. [ 207.243963][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 207.303181][T12483] erspan0: entered promiscuous mode [ 207.337499][T12490] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1935'. [ 207.350693][T12483] batadv_slave_1: entered promiscuous mode [ 207.364381][T12483] erspan0: left promiscuous mode [ 207.370625][T12483] batadv_slave_1: left promiscuous mode [ 207.545807][T12501] dvmrp5: entered allmulticast mode [ 207.558510][T12501] dvmrp5: left allmulticast mode [ 208.442434][T12557] dvmrp5: entered allmulticast mode [ 208.475565][T12557] dvmrp5: left allmulticast mode [ 208.697008][T12572] batadv_slave_1: entered promiscuous mode [ 208.719380][T12572] __nla_validate_parse: 1 callbacks suppressed [ 208.719401][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 209.033007][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 209.141225][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1962'. [ 209.358163][T12615] dvmrp5: entered allmulticast mode [ 209.374326][T12615] dvmrp5: left allmulticast mode [ 209.470113][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 209.491857][T12620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1965'. [ 209.507282][T12620] vlan5: entered allmulticast mode [ 209.512512][T12620] bridge_slave_0: entered allmulticast mode [ 209.665538][T12624] netlink: 'syz.1.1966': attribute type 3 has an invalid length. [ 209.928324][T12636] netlink: 'syz.3.1971': attribute type 11 has an invalid length. [ 209.952729][T12652] x_tables: duplicate underflow at hook 1 [ 209.959803][T12652] netlink: 'syz.2.1974': attribute type 11 has an invalid length. [ 210.087051][T12660] dvmrp5: entered allmulticast mode [ 210.100482][T12665] gretap0: entered promiscuous mode [ 210.126228][T12660] dvmrp5: left allmulticast mode [ 210.532839][T12688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.540244][T12688] IPv6: NLM_F_CREATE should be set when creating new route [ 210.547595][T12688] IPv6: NLM_F_CREATE should be set when creating new route [ 210.950927][T12720] pimreg: entered allmulticast mode [ 211.058337][T12728] netlink: 'syz.3.2000': attribute type 4 has an invalid length. [ 211.130551][T12733] netlink: 'syz.0.2001': attribute type 29 has an invalid length. [ 211.169773][T12733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'. [ 211.189910][T12735] FAULT_INJECTION: forcing a failure. [ 211.189910][T12735] name failslab, interval 1, probability 0, space 0, times 0 [ 211.204901][T12735] CPU: 1 UID: 0 PID: 12735 Comm: syz.1.2002 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 211.215714][T12735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.219390][T12737] netlink: 'syz.3.2003': attribute type 3 has an invalid length. [ 211.225773][T12735] Call Trace: [ 211.225847][T12735] [ 211.225858][T12735] dump_stack_lvl+0x241/0x360 [ 211.225884][T12735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.225904][T12735] ? __pfx__printk+0x10/0x10 [ 211.225933][T12735] ? __lock_acquire+0x1384/0x2050 [ 211.225964][T12735] should_fail_ex+0x3b0/0x4e0 [ 211.264052][T12735] should_failslab+0xac/0x100 [ 211.268753][T12735] ? __alloc_skb+0x1c3/0x440 [ 211.273376][T12735] kmem_cache_alloc_node_noprof+0x71/0x320 [ 211.279219][T12735] __alloc_skb+0x1c3/0x440 [ 211.283661][T12735] ? __pfx_lock_acquire+0x10/0x10 [ 211.288727][T12735] ? __pfx___alloc_skb+0x10/0x10 [ 211.293696][T12735] tipc_msg_create+0x47/0x540 [ 211.298400][T12735] tipc_group_proto_xmit+0xdf/0x8c0 [ 211.303632][T12735] tipc_group_cong+0x4a3/0x5c0 [ 211.308425][T12735] ? __pfx_tipc_group_cong+0x10/0x10 [ 211.313744][T12735] ? tipc_dest_pop+0x1b3/0x250 [ 211.318536][T12735] ? tipc_dest_pop+0x1b3/0x250 [ 211.323328][T12735] __tipc_sendmsg+0x12e6/0x35f0 [ 211.328228][T12735] ? __pfx___tipc_sendmsg+0x10/0x10 [ 211.333453][T12735] ? validate_chain+0x11e/0x5920 [ 211.338412][T12735] ? validate_chain+0x11e/0x5920 [ 211.343376][T12735] ? __pfx_lock_acquire+0x10/0x10 [ 211.348436][T12735] ? __pfx_validate_chain+0x10/0x10 [ 211.353662][T12735] ? mark_lock+0x9a/0x360 [ 211.358019][T12735] ? __lock_acquire+0x1384/0x2050 [ 211.363093][T12735] ? mark_lock+0x9a/0x360 [ 211.367450][T12735] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.373458][T12735] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.379831][T12735] ? __local_bh_enable_ip+0x168/0x200 [ 211.385230][T12735] ? tipc_sendmsg+0x47/0x70 [ 211.389750][T12735] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 211.395494][T12735] ? do_raw_spin_unlock+0x13c/0x8b0 [ 211.400730][T12735] ? __pfx_tipc_sendmsg+0x10/0x10 [ 211.405775][T12735] tipc_sendmsg+0x55/0x70 [ 211.410139][T12735] __sock_sendmsg+0x221/0x270 [ 211.414844][T12735] ____sys_sendmsg+0x52a/0x7e0 [ 211.419641][T12735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.424971][T12735] __sys_sendmsg+0x292/0x380 [ 211.429604][T12735] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.434758][T12735] ? __pfx_vfs_write+0x10/0x10 [ 211.439584][T12735] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.445941][T12735] ? do_syscall_64+0x100/0x230 [ 211.450728][T12735] ? do_syscall_64+0xb6/0x230 [ 211.455427][T12735] do_syscall_64+0xf3/0x230 [ 211.459952][T12735] ? clear_bhb_loop+0x35/0x90 [ 211.464653][T12735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.470573][T12735] RIP: 0033:0x7f463597e719 [ 211.475013][T12735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.494654][T12735] RSP: 002b:00007f4636766038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.501488][T12743] veth1_to_bridge: left allmulticast mode [ 211.503078][T12735] RAX: ffffffffffffffda RBX: 00007f4635b35f80 RCX: 00007f463597e719 [ 211.516796][T12735] RDX: 0000000000044840 RSI: 0000000020000380 RDI: 0000000000000005 [ 211.524794][T12735] RBP: 00007f4636766090 R08: 0000000000000000 R09: 0000000000000000 [ 211.532781][T12735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.540762][T12735] R13: 0000000000000000 R14: 00007f4635b35f80 R15: 00007fff8b953e58 [ 211.549101][T12735] [ 211.871984][T12763] IPVS: set_ctl: invalid protocol: 137 172.30.0.3:20000 [ 211.891747][T12766] x_tables: ip6_tables: HL.0 target: invalid size 8 (kernel) != (user) 0 [ 211.980603][T12756] lo speed is unknown, defaulting to 1000 [ 212.001997][T12756] lo speed is unknown, defaulting to 1000 [ 212.003007][T12759] lo speed is unknown, defaulting to 1000 [ 212.034567][T12759] lo speed is unknown, defaulting to 1000 [ 212.257627][T12780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2017'. [ 212.368270][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2016'. [ 212.422370][T12791] netlink: 'syz.3.2018': attribute type 8 has an invalid length. [ 212.572796][T12798] netlink: 'syz.4.2021': attribute type 1 has an invalid length. [ 212.598164][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2021'. [ 212.614162][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2021'. [ 212.804173][T12806] sctp: [Deprecated]: syz.0.2023 (pid 12806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.804173][T12806] Use struct sctp_sack_info instead [ 212.845900][T12806] sctp: [Deprecated]: syz.0.2023 (pid 12806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.845900][T12806] Use struct sctp_sack_info instead [ 213.410398][T12842] xt_bpf: check failed: parse error [ 213.765639][T12862] __nla_validate_parse: 3 callbacks suppressed [ 213.765658][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2041'. [ 213.833272][T12862] tipc: Invalid UDP bearer configuration [ 213.838915][T12862] tipc: Enabling of bearer rejected, failed to enable media [ 213.879331][T12866] lo speed is unknown, defaulting to 1000 [ 213.889093][T12865] netlink: 'syz.2.2040': attribute type 11 has an invalid length. [ 213.915182][T12866] lo speed is unknown, defaulting to 1000 [ 213.916505][T12865] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2040'. [ 214.249783][T12888] netlink: 'syz.0.2048': attribute type 39 has an invalid length. [ 214.391628][T12892] netlink: 'syz.3.2050': attribute type 3 has an invalid length. [ 214.404362][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 214.665141][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2055'. [ 214.951836][T12905] macvlan3: entered allmulticast mode [ 214.958659][T12905] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 214.966854][T12905] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 214.980753][T12905] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 215.148441][T12935] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2061'. [ 215.488741][T12963] ip6gretap0: entered promiscuous mode [ 215.505850][T12963] batadv_slave_0: entered promiscuous mode [ 215.609329][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 215.641975][T12968] xt_CT: No such helper "snmp" [ 215.697175][T12977] netlink: 'syz.2.2072': attribute type 39 has an invalid length. [ 215.707014][T12977] veth1_vlan: left promiscuous mode [ 215.800813][T12980] bond0: (slave team0): Releasing backup interface [ 215.852938][T12980] bridge_slave_0: left promiscuous mode [ 215.873941][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.898465][T12980] bridge_slave_1: left promiscuous mode [ 215.914902][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.938735][T12980] bond0: (slave bond_slave_0): Releasing backup interface [ 215.951954][T12980] bond0: (slave bond_slave_1): Releasing backup interface [ 215.976798][T12980] team0: Port device team_slave_0 removed [ 216.000229][T12980] team0: Port device team_slave_1 removed [ 216.017466][T12980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.030907][T12998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2078'. [ 216.049920][T12980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.064922][T12980] vlan2: left promiscuous mode [ 216.071369][T12980] bridge0: port 3(vlan2) entered disabled state [ 216.098675][T12986] wg2: entered promiscuous mode [ 216.117113][T12986] wg2: left allmulticast mode [ 216.163064][T12986] wg2: entered allmulticast mode [ 216.182420][T12986] team0: Port device wg2 added [ 216.189552][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 216.205446][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2074'. [ 216.220943][T13004] pim6reg: entered allmulticast mode [ 216.238895][T13006] tc_dump_action: action bad kind [ 216.259486][T12987] pim6reg: left allmulticast mode [ 216.344888][T12996] lo speed is unknown, defaulting to 1000 [ 216.362892][T13016] dvmrp5: entered allmulticast mode [ 216.389624][T12996] lo speed is unknown, defaulting to 1000 [ 216.405596][T13016] dvmrp5: left allmulticast mode [ 216.941560][T13046] lo speed is unknown, defaulting to 1000 [ 216.963020][T13046] lo speed is unknown, defaulting to 1000 [ 216.974259][ T5153] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.181460][T13060] dvmrp5: entered allmulticast mode [ 217.201018][T13060] pimreg: left allmulticast mode [ 217.214633][T13060] dvmrp5: left allmulticast mode [ 217.391233][T13069] ip6gre1: entered allmulticast mode [ 217.450565][T13073] lo speed is unknown, defaulting to 1000 [ 217.525845][T13073] lo speed is unknown, defaulting to 1000 [ 217.618518][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 218.042261][T13105] veth1_macvtap: left promiscuous mode [ 218.054352][T13105] macsec0: entered allmulticast mode [ 218.071027][T13105] veth1_macvtap: entered promiscuous mode [ 218.090442][T13105] veth1_macvtap: entered allmulticast mode [ 218.102599][T13105] macsec0: left allmulticast mode [ 218.120394][T13105] veth1_macvtap: left allmulticast mode [ 218.285476][T13118] dvmrp5: entered allmulticast mode [ 218.298660][T13120] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 218.299135][T13121] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 218.311777][T13118] dvmrp5: left allmulticast mode [ 218.370179][T13120] netlink: 'syz.0.2116': attribute type 2 has an invalid length. [ 220.805719][T13207] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 220.825370][T13207] macvlan2: entered allmulticast mode [ 220.845150][T13207] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 220.903361][T13213] ipvlan0: entered promiscuous mode [ 220.915236][T13216] dvmrp5: entered allmulticast mode [ 220.927305][T13210] dvmrp5: left allmulticast mode [ 221.006311][T13205] ipvlan0: left promiscuous mode [ 221.023032][T13219] lo speed is unknown, defaulting to 1000 [ 221.035594][T13219] lo speed is unknown, defaulting to 1000 [ 221.066869][T13221] __nla_validate_parse: 4 callbacks suppressed [ 221.066888][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 221.162091][T13222] tipc: Enabled bearer , priority 10 [ 221.252423][T13230] netlink: 'syz.3.2150': attribute type 1 has an invalid length. [ 221.273030][T13232] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2150'. [ 221.326329][T13232] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2150'. [ 221.353635][T13232] netlink: 65 bytes leftover after parsing attributes in process `syz.3.2150'. [ 221.740634][T13258] syzkaller0: entered promiscuous mode [ 221.747539][T13258] syzkaller0: entered allmulticast mode [ 221.767241][T13264] dvmrp5: entered allmulticast mode [ 221.778938][T13264] dvmrp5: left allmulticast mode [ 221.873001][T13273] netlink: 'syz.2.2156': attribute type 11 has an invalid length. [ 222.611866][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2165'. [ 223.930225][T13300] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 223.952959][T13301] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 223.966489][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 224.134850][T13325] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 224.208003][T13320] xt_CT: No such helper "snmp" [ 224.222238][T13325] vlan4: entered promiscuous mode [ 224.231981][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2176'. [ 224.282673][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2176'. [ 224.331414][T13338] netlink: 'syz.2.2177': attribute type 2 has an invalid length. [ 224.342835][T13341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2178'. [ 224.362902][T13338] Xÿ: entered promiscuous mode [ 224.562856][T13356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2183'. [ 225.080298][T13382] netlink: 'syz.0.2191': attribute type 12 has an invalid length. [ 225.580459][T13413] xt_l2tp: missing protocol rule (udp|l2tpip) [ 225.612066][T13416] [ 225.614422][T13416] ============================================ [ 225.620547][T13416] WARNING: possible recursive locking detected [ 225.626682][T13416] 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 Not tainted [ 225.633761][T13416] -------------------------------------------- [ 225.639884][T13416] syz.2.2199/13416 is trying to acquire lock: [ 225.645940][T13416] ffff888079acfa00 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 225.654797][T13416] [ 225.654797][T13416] but task is already holding lock: [ 225.662142][T13416] ffff888079acfa00 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 225.670992][T13416] [ 225.670992][T13416] other info that might help us debug this: [ 225.679037][T13416] Possible unsafe locking scenario: [ 225.679037][T13416] [ 225.686468][T13416] CPU0 [ 225.689723][T13416] ---- [ 225.692979][T13416] lock(&trie->lock); [ 225.697202][T13416] lock(&trie->lock); [ 225.701256][T13416] [ 225.701256][T13416] *** DEADLOCK *** [ 225.701256][T13416] [ 225.709407][T13416] May be due to missing lock nesting notation [ 225.709407][T13416] [ 225.717702][T13416] 3 locks held by syz.2.2199/13416: [ 225.722874][T13416] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 225.732773][T13416] #1: ffff888079acfa00 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 225.742060][T13416] #2: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 225.751437][T13416] [ 225.751437][T13416] stack backtrace: [ 225.757311][T13416] CPU: 0 UID: 0 PID: 13416 Comm: syz.2.2199 Not tainted 6.12.0-rc5-syzkaller-01229-g2a6f99ee1a80 #0 [ 225.768058][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.778090][T13416] Call Trace: [ 225.781348][T13416] [ 225.784262][T13416] dump_stack_lvl+0x241/0x360 [ 225.788923][T13416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.794101][T13416] ? __pfx__printk+0x10/0x10 [ 225.798676][T13416] ? lockdep_unlock+0x16a/0x300 [ 225.803515][T13416] print_deadlock_bug+0x483/0x620 [ 225.808522][T13416] validate_chain+0x15e2/0x5920 [ 225.813350][T13416] ? __pfx_validate_chain+0x10/0x10 [ 225.818529][T13416] ? __pfx_validate_chain+0x10/0x10 [ 225.823707][T13416] ? __pfx_validate_chain+0x10/0x10 [ 225.828884][T13416] ? 0xffffffffa00007d4 [ 225.833016][T13416] ? is_bpf_text_address+0x285/0x2a0 [ 225.838282][T13416] ? is_bpf_text_address+0x26/0x2a0 [ 225.843469][T13416] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 225.849604][T13416] ? kernel_text_address+0xa7/0xe0 [ 225.854695][T13416] ? __pfx_validate_chain+0x10/0x10 [ 225.859869][T13416] ? __pfx_validate_chain+0x10/0x10 [ 225.865046][T13416] ? mark_lock+0x9a/0x360 [ 225.869356][T13416] __lock_acquire+0x1384/0x2050 [ 225.874204][T13416] lock_acquire+0x1ed/0x550 [ 225.878688][T13416] ? trie_delete_elem+0x96/0x6a0 [ 225.883609][T13416] ? __pfx_lock_acquire+0x10/0x10 [ 225.888612][T13416] ? __lock_acquire+0x1384/0x2050 [ 225.893622][T13416] _raw_spin_lock_irqsave+0xd5/0x120 [ 225.898892][T13416] ? trie_delete_elem+0x96/0x6a0 [ 225.903808][T13416] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 225.909687][T13416] ? __pfx_lock_acquire+0x10/0x10 [ 225.914701][T13416] trie_delete_elem+0x96/0x6a0 [ 225.919445][T13416] ? __pfx___cant_migrate+0x10/0x10 [ 225.924625][T13416] ? bpf_trace_run4+0x244/0x590 [ 225.929454][T13416] bpf_prog_8c8ab8634bca3061+0x43/0x4d [ 225.934888][T13416] bpf_trace_run4+0x334/0x590 [ 225.939543][T13416] ? __pfx_bpf_trace_run4+0x10/0x10 [ 225.944723][T13416] ? percpu_ref_get_many+0x19/0x140 [ 225.949900][T13416] ? __memcg_kmem_charge_page+0xdb/0x1d0 [ 225.955515][T13416] __alloc_pages_noprof+0x6dc/0x710 [ 225.960692][T13416] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 225.966404][T13416] ? bpf_map_get_memcg+0x4e/0x5c0 [ 225.971412][T13416] ? do_raw_spin_lock+0x14f/0x370 [ 225.976417][T13416] ? __pfx_lock_release+0x10/0x10 [ 225.981425][T13416] ___kmalloc_large_node+0x8b/0x1d0 [ 225.986602][T13416] __kmalloc_large_node_noprof+0x1a/0x80 [ 225.992216][T13416] __kmalloc_node_noprof+0x2d2/0x440 [ 225.997480][T13416] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 226.002746][T13416] bpf_map_kmalloc_node+0xd3/0x1c0 [ 226.008099][T13416] trie_update_elem+0x1cd/0xc00 [ 226.012932][T13416] ? __pfx___might_resched+0x10/0x10 [ 226.018207][T13416] bpf_map_update_value+0x4d3/0x540 [ 226.023385][T13416] map_update_elem+0x51a/0x6f0 [ 226.028129][T13416] __sys_bpf+0x76f/0x810 [ 226.032353][T13416] ? __pfx___sys_bpf+0x10/0x10 [ 226.037095][T13416] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 226.043057][T13416] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.049365][T13416] ? exc_page_fault+0x590/0x8c0 [ 226.054197][T13416] __x64_sys_bpf+0x7c/0x90 [ 226.058590][T13416] do_syscall_64+0xf3/0x230 [ 226.063086][T13416] ? clear_bhb_loop+0x35/0x90 [ 226.067768][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.073688][T13416] RIP: 0033:0x7fbf2c57e719 [ 226.078092][T13416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.097698][T13416] RSP: 002b:00007fbf2d312038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.106097][T13416] RAX: ffffffffffffffda RBX: 00007fbf2c736130 RCX: 00007fbf2c57e719 [ 226.114048][T13416] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000002 [ 226.122003][T13416] RBP: 00007fbf2c5f139e R08: 0000000000000000 R09: 0000000000000000 [ 226.129969][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.137927][T13416] R13: 0000000000000001 R14: 00007fbf2c736130 R15: 00007ffd223e5848 [ 226.145902][T13416]